From 681af954b9224731feb9f8240f3a67af4395b385 Mon Sep 17 00:00:00 2001 From: Michael Mardahl Date: Wed, 16 Feb 2022 11:51:52 +0100 Subject: [PATCH 1/4] Update hello-faq.yml Added missing information about what happens when PIN policy is changed and that Intune can also be used besides just Configuration manager. #ATCP --- .../identity-protection/hello-for-business/hello-faq.yml | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/windows/security/identity-protection/hello-for-business/hello-faq.yml b/windows/security/identity-protection/hello-for-business/hello-faq.yml index 66e88ee1a6..c7a144f461 100644 --- a/windows/security/identity-protection/hello-for-business/hello-faq.yml +++ b/windows/security/identity-protection/hello-for-business/hello-faq.yml @@ -45,6 +45,10 @@ sections: - question: Can I deploy Windows Hello for Business by using Microsoft Endpoint Configuration Manager? answer: | Windows Hello for Business deployments using Configuration Manager should follow the hybrid deployment model that uses Active Directory Federation Services. Starting in Configuration Manager version 1910, certificate-based authentication with Windows Hello for Business settings isn't supported. Key-based authentication is still valid with Configuration Manager. For more information, see [Windows Hello for Business settings in Configuration Manager](/configmgr/protect/deploy-use/windows-hello-for-business-settings). + + - question: Can I deploy Windows Hello for Business by using Microsoft Endpoint Manager Intune? + answer: | + Windows Hello for Business deployments using Intune allows for a great deal of flexibility in deployment. For more information, see [Integrate Windows Hello for Business with Microsoft Intune](/mem/intune/protect/windows-hello). - question: How many users can enroll for Windows Hello for Business on a single Windows 10 computer? answer: | @@ -101,6 +105,11 @@ sections: [Windows Hello for Business forgotten PIN user experience](hello-videos.md#windows-hello-for-business-forgotten-pin-user-experience) For on-premises deployments, devices must be well-connected to their on-premises network (domain controllers and/or certificate authority) to reset their PINs. Hybrid customers can on-board their Azure tenant to use the Windows Hello for Business PIN reset service to reset their PINs without access to their corporate network. + + - question: What happens when a PIN policy is changed? + answer: | + Once a new policy is applied to the users device, the user will be asked to change their PIN once they have typed in the current PIN. + If more than one policy is applied, the most restrictive setting will win. - question: What URLs do I need to allow for a hybrid deployment? answer: | From 5e26ffe91c26a59bce5720f3e23f98da1ecde7c0 Mon Sep 17 00:00:00 2001 From: Michael Mardahl Date: Thu, 17 Feb 2022 06:40:35 +0100 Subject: [PATCH 2/4] Update windows/security/identity-protection/hello-for-business/hello-faq.yml Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../identity-protection/hello-for-business/hello-faq.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-faq.yml b/windows/security/identity-protection/hello-for-business/hello-faq.yml index c7a144f461..e565082227 100644 --- a/windows/security/identity-protection/hello-for-business/hello-faq.yml +++ b/windows/security/identity-protection/hello-for-business/hello-faq.yml @@ -48,7 +48,7 @@ sections: - question: Can I deploy Windows Hello for Business by using Microsoft Endpoint Manager Intune? answer: | - Windows Hello for Business deployments using Intune allows for a great deal of flexibility in deployment. For more information, see [Integrate Windows Hello for Business with Microsoft Intune](/mem/intune/protect/windows-hello). + Windows Hello for Business deployments using Intune allow for a great deal of flexibility in deployment. For more information, see [Integrate Windows Hello for Business with Microsoft Intune](/mem/intune/protect/windows-hello). - question: How many users can enroll for Windows Hello for Business on a single Windows 10 computer? answer: | From bd9e9a4cad015ea225172a292880fed54fbf498a Mon Sep 17 00:00:00 2001 From: Michael Mardahl Date: Thu, 17 Feb 2022 06:40:51 +0100 Subject: [PATCH 3/4] Update windows/security/identity-protection/hello-for-business/hello-faq.yml Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../identity-protection/hello-for-business/hello-faq.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-faq.yml b/windows/security/identity-protection/hello-for-business/hello-faq.yml index e565082227..3b2ff6cf66 100644 --- a/windows/security/identity-protection/hello-for-business/hello-faq.yml +++ b/windows/security/identity-protection/hello-for-business/hello-faq.yml @@ -108,7 +108,7 @@ sections: - question: What happens when a PIN policy is changed? answer: | - Once a new policy is applied to the users device, the user will be asked to change their PIN once they have typed in the current PIN. + Once a new policy is applied to the user's device, the user will be asked to change their PIN once they have typed in the current PIN. If more than one policy is applied, the most restrictive setting will win. - question: What URLs do I need to allow for a hybrid deployment? From 0b6731eb371f99e99a390ad368d0873baa0ee9de Mon Sep 17 00:00:00 2001 From: Michael Mardahl Date: Thu, 17 Feb 2022 06:41:03 +0100 Subject: [PATCH 4/4] Update windows/security/identity-protection/hello-for-business/hello-faq.yml Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com> --- .../identity-protection/hello-for-business/hello-faq.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-faq.yml b/windows/security/identity-protection/hello-for-business/hello-faq.yml index 3b2ff6cf66..f5dd866ec2 100644 --- a/windows/security/identity-protection/hello-for-business/hello-faq.yml +++ b/windows/security/identity-protection/hello-for-business/hello-faq.yml @@ -109,7 +109,7 @@ sections: - question: What happens when a PIN policy is changed? answer: | Once a new policy is applied to the user's device, the user will be asked to change their PIN once they have typed in the current PIN. - If more than one policy is applied, the most restrictive setting will win. + If more than one policy is applied, the most restrictive setting will apply. - question: What URLs do I need to allow for a hybrid deployment? answer: |