InTune Windows Hello 2FA prompt and not working

[robjduk]

Morning all,

I have a problem with InTune if anyone can help?

 

Users are getting the annoying 2FA prompt on every login and my question is, can you enable Hello but not have it ask for a phone number (or any recovery?).

 

I have no problem with anyone using Hello (pin, face or fingerprint) so I really just want it to work without the constant messages.

 

Do I just have to disable it completely and not use Hello?

 

Thank you

[DrCheese]

We've got it disabled in general (So it doesn't ask users to do it when they first logon - although can't remember where I do this off the top of my head!) but then have a configuration profile set for users that do want it on - As most of our intune devices don't have biometrics in any way it's only a few that have it.

[robjduk]

Thank you for the info. I reset my laptop after going through my GPO with a fine toothcomb and it seems to be working without the prompt. Good to know you can set it as disabled globally but set a profile down the line.