Windows Hello using Intune

[petben]

Hello, I am trying to enable the option for users to setup Windows Hello for some devices using Intune.

 

Enrolment Profile (which would affect everyone) – Windows Hello - Disabled.

(This should not force Hello but still leave it as configurable if the user want to)

 

An Intune policy for the devices - Windows Hello - Enabled

 

A REG key as well (just in case) to enable Hello but don’t start at login (in case the user doesn’t want to use it)

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\PassportForWork]

"Enabled"=dword:00000001

"DisablePostLogonProvisioning"=dword:00000001

 

 

On a device which we know is Hello capable the message:

 

“This option is currently unavailable”

“Something went wrong”

 

Has anyone got any advice to get Hello working?

 

Thanks

[snagrat]

I have it working.

 

I’m sure that if you disable it anywhere then that will disable it full stop.

 

In the tenant settings I have it not configured and then I use policies to either enable or disable for the different user groups