info@mc2mc.be
  • Home
  • Meet the Team
  • Events
    • MC2MC Live – The Movie edition
    • All Events
  • Speakers
    • Call for Speakers
    • Speaker/Event Information
  • Event Photos
  • Blog
  • Contact

Windows Hello for Business Multi Factor unlock with MEM – Intune

Posted on December 18, 2019
No Comments

Tim H. posted a new blog post on his site Cloud-Boy.be.

Situation:

  • Azure AD Joined computers/laptops
  • Devices managed with MEM (Microsoft Endpoint Manager) – Intune

Target:

  • Enabling Windows Hello for Business
  • Enabling multi factor unlock: face recognition + trusted device (smartphone) or PIN

In Windows 10, Windows Hello for Business replaces passwords with strong two-factor authentication on PCs and mobile devices. This authentication consists of a new type of user credential that is tied to a device and uses a bio metric or PIN. Windows Hello for Business lets user authenticate to an Active Directory or Azure Active Directory account. Windows Hello addresses the following problems with passwords:

  • Strong passwords can be difficult to remember, and users often reuse passwords on multiple sites.
  • Server breaches can expose symmetric network credentials (passwords).
  • Passwords are subject to replay attacks.
  • Users can inadvertently expose their passwords due to phishing attacks.

Prerequisites cloud only deployment:

  • Windows 10, version 1511 or later
  • Microsoft Azure Account
  • Azure Active Directory
  • Azure Multi-factor authentication
  • Modern Management (Intune or supported third-party MDM), optional
  • Azure AD Premium subscription – optional, needed for automatic MDM enrolment when the device joins Azure Active Directory

1. ENABLE WINDOWS HELLO FOR BUSINESS IN MEM (INTUNE)

Navigate to Devices – Enroll devices – Windows Hello for Business

READ MORE..

Previous Post
wmatthyssen.com – Wim is uploading blogs!
Next Post
Passwordless sign-in, practical example!

Leave a Reply Cancel reply

Your email address will not be published. Required fields are marked *

Fill out this field
Fill out this field
Please enter a valid email address.
You need to agree with the terms to proceed

Recent Posts

  • MC2MC Live – The Winter edition December 23, 2022
  • MC2MC Live – The Autumn edition October 27, 2022
  • MC2MC August Evening 2022: Session recordings September 1, 2022
  • MC2MC Goes Live Again Sway August 4, 2022
  • MC2MC Goes Belgian 2022: Session recordings May 30, 2022

Categories

  • Autopilot (1)
  • Azure (22)
  • Azure AD (2)
  • Azure Virtual Desktop (2)
  • Big Data (1)
  • ConfigMgr (3)
  • Containers (2)
  • EMS (7)
  • GitHub (3)
  • Guides (6)
  • Hyper-V (1)
  • IaC (1)
  • Intune (20)
  • M365 (13)
  • MC2MC (25)
  • MDATP (3)
  • PowerApps (3)
  • PowerShell (4)
  • Security (8)
  • Veeam (1)
  • Visual Studio Code (1)
  • Viva (1)
  • Windows 10 (15)
  • Windows 365 (2)
  • Windows Autopilot (3)
  • Windows Server (1)
  • Windows Updates (1)
  • Windows365 (1)
  • Women In Tech (2)

RSS RSS Cloud Boy

  • SCAPPMAN – Overview and why patching is important?
  • Build your own MEMCM lab environment – Part I
  • How to bring structure in your MEM/Intune projects – Part 2
  • Enable Sandbox and use it for intunewin packaging

RSS RSS wmatthyssen

  • Azure Bastion: Connect to an Azure VM without accessing the Azure portal by using a shareable link
  • Festive Tech Calendar 2022: How the Newly Rebranded Microsoft Learn Can Help You Pass Your Next Exam!
  • Festive Tech Calendar 2022: mTLS with Azure AppGateway & AppService
  • Azure Tip: Quickly find out if an Azure VM is Domain Joined or not via the Azure Portal

RSS RSS dekeukelaere

  • WMUG NL Tuesdays – Latest and greatest in the world of Configuration Manager
  • Microsoft MVP 2020-2021 Award
  • A first look at the Configuration Manager Community Hub
  • Microsoft MVP 2019-2020 Award

Contacts

info@mc2mc.be
Facebook
Twitter
LinkedIn

RSS RSS kengoossens

  • Serverless Local Admin Password web UI Service
  • Co-Management command line not visible: Ensure the proper prerequisites are installed.
  • Office 365 Pro Plus – Lean Installations Explained
  • Use the Microsoft Office 365 Network Onboarding Tool to validate your VPN Split tunneling configuration.

RSS RSS 007ffflearning

  • Festive Tech Calendar 2022 - Building a Marvel Hero app using Blazor Web Assembly and Azure Static Web Apps
  • How to clear the Azure Portal Recent Resources list
  • How OnyxBoox - with some help from a friend - got me back to reading more... books
  • Book review - Building Blazor WebAssembly Applications with gRPC

RSS RSS cloud-architect

  • AVD Client Cleanup script/tool
  • MSIX app attach Start Menu fixed in Windows Virtual Desktop
  • Windows Virtual Desktop Workshop December update
  • Windows Virtual Desktop Spring 2020 edition workshop

RSS RSS 365tips

  • 📧 Update: bericht terugroepen in Microsoft Exchange Online – Recall
  • 🤖 Microsoft zal ChatGPT toevoegen in de Azure OpenAI-dienst
  • 📧 Gebruik hetzelfde SMTP-domein in verschillende Microsoft 365 tenants
  • 🛠️ Zo kan je een verwijderd Microsoft Team herstellen via het Admin Center

© 2019 Microsoft Cloud and Client Management Community