deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-17 07:47:22 +00:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

Adding information metioned on issue #5352

Browse Source
This commit is contained in:
Jose Ortega 2019-11-08 02:15:34 -06:00
parent c163c7c624
commit 669ea42b64
1 changed files with 4 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
windows/security/identity-protection/hello-for-business/hello-hybrid-cert-whfb-settings-adfs.md
View File

@ -51,13 +51,16 @@ Sign-in the AD FS server with *Domain Admin* equivalent credentials.
The Windows Hello for Business group provides the AD FS service with the permissions needed to enroll a Windows Hello for Business authentication certificate on behalf of the provisioning user. The Windows Hello for Business group provides the AD FS service with the permissions needed to enroll a Windows Hello for Business authentication certificate on behalf of the provisioning user.
> [!TIP]
> The account adfssvc is the ADFS Service account.
Sign-in a domain controller or management workstation with _Domain Admin_ equivalent credentials. Sign-in a domain controller or management workstation with _Domain Admin_ equivalent credentials.
1. Open **Active Directory Users and Computers**. 1. Open **Active Directory Users and Computers**.
2. Click the **Users** container in the navigation pane. 2. Click the **Users** container in the navigation pane.
3. Right-click **Windows Hello for Business Users** group 3. Right-click **Windows Hello for Business Users** group
4. Click the **Members** tab and click **Add** 4. Click the **Members** tab and click **Add**
5. In the **Enter the object names to select** text box, type **adfssvc**. Click **OK**. 5. In the **Enter the object names to select** text box, type **adfssvc** or substitute the name of the ADFS Service account in your ADFS deployment. Click **OK**.
6. Click **OK** to return to **Active Directory Users and Computers**. 6. Click **OK** to return to **Active Directory Users and Computers**.
7. Restart the AD FS server. 7. Restart the AD FS server.