From a8177276758c91c8f16d88992ac3f3720f53fc4f Mon Sep 17 00:00:00 2001 From: mapalko Date: Wed, 15 Apr 2020 11:47:57 -0700 Subject: [PATCH] Added note about MDMWinsOverGP --- .../hello-for-business/hello-manage-in-organization.md | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/windows/security/identity-protection/hello-for-business/hello-manage-in-organization.md b/windows/security/identity-protection/hello-for-business/hello-manage-in-organization.md index 8767eadd0d..b957c2cc87 100644 --- a/windows/security/identity-protection/hello-for-business/hello-manage-in-organization.md +++ b/windows/security/identity-protection/hello-for-business/hello-manage-in-organization.md @@ -351,8 +351,8 @@ The following table lists the MDM policy settings that you can configure for Win >[!NOTE] -> InWindows 10, version 1709 and later, if policy is not configured to explicitly require letters or special characters, users can optionally set an alphanumeric PIN. Prior to version 1709 the user is required to set a numeric PIN. - +> In Windows 10, version 1709 and later, if policy is not configured to explicitly require letters or special characters, users can optionally set an alphanumeric PIN. Prior to version 1709 the user is required to set a numeric PIN. + ## Policy conflicts from multiple policy sources Windows Hello for Business is designed to be managed by Group Policy or MDM but not a combination of both. If policies are set from both sources it can result in a mixed result of what is actually enforced for a user or device. @@ -361,6 +361,9 @@ Policies for Windows Hello for Business are enforced using the following hierarc Use a hardware security device and RequireSecurityDevice enforcement are also grouped together with PIN complexity policy. Conflict resolution for other Windows Hello for Business policies is enforced on a per policy basis. +>[!Note] +> Windows Hello for Business policy conflict resolution logic does not respect the ControlPolicyConflict/MDMWinsOverGP policy in the Policy CSP. + >Examples > >The following are configured using computer Group Policy: