Update windows/security/identity-protection/hello-for-business/hello-hybrid-aadj-sso-base.md

Co-authored-by: JohanFreelancer9 <48568725+JohanFreelancer9@users.noreply.github.com>
This commit is contained in:
MaratMussabekov 2020-08-30 16:41:51 +05:00 committed by GitHub
parent 25a16d7b5b
commit f2b37bb929
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -305,7 +305,7 @@ Sign-in a workstation with access equivalent to a _domain user_.
2. Select **Devices**. 2. Select **Devices**.
3. Choose **Enroll devices**. 3. Choose **Enroll devices**.
4. Select **Windows enrollment**. 4. Select **Windows enrollment**.
5. Under **Windows enrollment**, click **Windows Hello for Business**. 5. Under **Windows enrollment**, select **Windows Hello for Business**.
![Create Windows Hello for Business Policy](images/aadj/MEM.png) ![Create Windows Hello for Business Policy](images/aadj/MEM.png)
6. Select **Enabled** from the **Configure Windows Hello for Business** list. 6. Select **Enabled** from the **Configure Windows Hello for Business** list.
7. Select **Required** next to **Use a Trusted Platform Module (TPM)**. By default, Windows Hello for Business prefers TPM 2.0 or falls backs to software. Choosing **Required** forces Windows Hello for Business to only use TPM 2.0 or TPM 1.2 and does not allow fall back to software-based keys. 7. Select **Required** next to **Use a Trusted Platform Module (TPM)**. By default, Windows Hello for Business prefers TPM 2.0 or falls backs to software. Choosing **Required** forces Windows Hello for Business to only use TPM 2.0 or TPM 1.2 and does not allow fall back to software-based keys.