Enable/Disable Windows Hello

Enable or Disable Windows Hello on Windows Endpoints

Enable/Disable Windows Hello

Enable or Disable Windows Hello. Windows Hello is enabled by default on Azure AD Joined endpoints. This adds Facial Recognition or PIN login. Ive found that users using the PIN usually forget their passwords and cause a number of password reset tickets. This component allows you to turn if off forcing the user to use their password to log into their computer.

Technical Info

This component enables or disables Windows Hello by editing the registry. The setting can be found at:

HKLM:\Software\Microsoft\PolicyManager\default\Settings\AllowSignInOptions 0=Disabled 1=Enabled

Required Variables or UDFs

Level	Name	Value	Notes
Component	windowshelloaction	Disabled	Select which setting to push to the endpoint

Security Checks

If this component downloads any external files other then grabbing the script from our repository, they will be listed here so you can do your own due diligence if needed.

Filename	URL	Path	Notes
			No files are downloaded from the internet

Changelog

5/31/2023 – Initial Release