This commit is contained in:
Paolo Matarazzo 2024-10-04 17:02:22 -04:00
parent abd587b728
commit bec384723b
5 changed files with 17 additions and 0 deletions

View File

@ -81,6 +81,16 @@ Organizations with hybrid scenarios can eliminate the need for on-premises domai
- [Windows Hello for Business overview][LINK-2] - [Windows Hello for Business overview][LINK-2]
### PIN reset
The Microsoft PIN Reset Service allows users to reset their forgotten Windows Hello PINs without requiring re-enrollment. After registering the service in the Microsoft Entra ID tenant, the capability must be enabled on the Windwos devices using group policy or a device management solution like Microsoft Intune.
Users can initiate a PIN reset from the Windows lock screen or from the sign-in options in Settings. The process involves authenticating and completing multifactor authentication to reset the PIN.
:::image type="icon" source="images/learn-more.svg" border="false"::: **Learn more:**
- [PIN reset][LINK-15]
### Windows Hello for Business multi-factor unlock ### Windows Hello for Business multi-factor unlock
For organizations that need an extra layer of sign-in security, multi-factor unlock enables IT admins to configure Windows by requiring a combination of two unique trusted signals to sign in. Trusted signal examples include a PIN or biometric data (face or fingerprint) combined with either a PIN, Bluetooth, IP configuration, or Wi-Fi. For organizations that need an extra layer of sign-in security, multi-factor unlock enables IT admins to configure Windows by requiring a combination of two unique trusted signals to sign in. Trusted signal examples include a PIN or biometric data (face or fingerprint) combined with either a PIN, Bluetooth, IP configuration, or Wi-Fi.
@ -200,3 +210,4 @@ When a password is used to sign in to a domain account, Windows uses the Kerbero
[LINK-12]: /windows/security/identity-protection/smart-cards/smart-card-windows-smart-card-technical-reference [LINK-12]: /windows/security/identity-protection/smart-cards/smart-card-windows-smart-card-technical-reference
[LINK-13]: /windows/security/identity-protection/web-sign-in [LINK-13]: /windows/security/identity-protection/web-sign-in
[LINK-14]: /education/windows/federated-sign-in [LINK-14]: /education/windows/federated-sign-in
[LINK-15]: /windows/security/identity-protection/hello-for-business/pin-reset

Binary file not shown.

Before

Width:  |  Height:  |  Size: 1.4 MiB

After

Width:  |  Height:  |  Size: 1.4 MiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 378 KiB

After

Width:  |  Height:  |  Size: 383 KiB

Binary file not shown.

Before

Width:  |  Height:  |  Size: 403 KiB

After

Width:  |  Height:  |  Size: 401 KiB

View File

@ -101,6 +101,12 @@
"security-foundations/certification/**/*.md": "mike-grimm", "security-foundations/certification/**/*.md": "mike-grimm",
"security-foundations/certification/**/*.yml": "mike-grimm" "security-foundations/certification/**/*.yml": "mike-grimm"
}, },
"feedback_system": {
"book/*.md": "none"
},
"hideEdit": {
"book/*.md": "true"
},
"ms.author": { "ms.author": {
"application-security//**/*.md": "vinpa", "application-security//**/*.md": "vinpa",
"application-security//**/*.yml": "vinpa", "application-security//**/*.yml": "vinpa",