From 9658240e0174eb060d219b9029d478895faa2087 Mon Sep 17 00:00:00 2001 From: Mike Stephens Date: Thu, 28 Sep 2017 11:29:39 -0700 Subject: [PATCH 1/7] Added videos to FAQ section --- .../hello-identity-verification.md | 18 ++++++++++++++++++ 1 file changed, 18 insertions(+) diff --git a/windows/access-protection/hello-for-business/hello-identity-verification.md b/windows/access-protection/hello-for-business/hello-identity-verification.md index a866155093..27c613c2ea 100644 --- a/windows/access-protection/hello-for-business/hello-identity-verification.md +++ b/windows/access-protection/hello-for-business/hello-identity-verification.md @@ -71,6 +71,24 @@ The table shows the minimum requirements for each deployment. ## Frequently Asked Questions +### What is the user experience for Windows Hello for Business? +The user experience for Windows Hello for Business occurs after user sign once you deploy Windows Hello for Business policy settings to your environment. + +Windows Hello for Business Enrollment including Biometrics +> [!Video https://youtu.be/FJqHPTZTpNM] + +Windows Hello for Business Enrollment PIN only +> [!Video https://youtu.be/etXJsZb8Fso] + +### What happens when my user forgets their PIN? + +If the user can sign-in with a password, they can reset their PIN by clicking the "I forgot my PIN" link in settings. Beginning with the Fall Creators Update, users can reset their PIN above the lock screen by clicking the "I forgot my PIN" link on the PIN credential provider. + +Windows Hello PIN Reset above Lock (Fall Creators Update) +> [!Video https://youtu.be/KcVTq8lTlkI] + +For on-premises deployments, devices must be well connected to their on-premises network (domain controllers and/or certificate authority) to reset their PINs. Hybrid customers can onboard their Azure tenant to use the Windows Hello for Business PIN reset service to reset their PINs without access to their corporate network. + ### Do I need Windows Server 2016 domain controllers? There are many deployment options from which to choose. Some of those options require an adequate number of Windows Server 2016 domain controllers in the site where you have deployed Windows Hello for Business. There are other deployment options that use existing Windows Server 2008 R2 or later domain controllers. Choose the deployment option that best suits your environment From a7acb3bcc58221df6268ab56a25926d08493c85c Mon Sep 17 00:00:00 2001 From: Mike Stephens Date: Thu, 28 Sep 2017 14:19:22 -0700 Subject: [PATCH 2/7] Attempt to fix URL --- .../hello-for-business/hello-identity-verification.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/access-protection/hello-for-business/hello-identity-verification.md b/windows/access-protection/hello-for-business/hello-identity-verification.md index 27c613c2ea..d1acb86c68 100644 --- a/windows/access-protection/hello-for-business/hello-identity-verification.md +++ b/windows/access-protection/hello-for-business/hello-identity-verification.md @@ -75,17 +75,17 @@ The table shows the minimum requirements for each deployment. The user experience for Windows Hello for Business occurs after user sign once you deploy Windows Hello for Business policy settings to your environment. Windows Hello for Business Enrollment including Biometrics -> [!Video https://youtu.be/FJqHPTZTpNM] +> [!VIDEO https://www.youtube.com/watch?v=FJqHPTZTpNM&feature=youtu.be] Windows Hello for Business Enrollment PIN only -> [!Video https://youtu.be/etXJsZb8Fso] +> [!VIDEO https://youtu.be/etXJsZb8Fso] ### What happens when my user forgets their PIN? If the user can sign-in with a password, they can reset their PIN by clicking the "I forgot my PIN" link in settings. Beginning with the Fall Creators Update, users can reset their PIN above the lock screen by clicking the "I forgot my PIN" link on the PIN credential provider. Windows Hello PIN Reset above Lock (Fall Creators Update) -> [!Video https://youtu.be/KcVTq8lTlkI] +> [!VIDEO https://youtu.be/KcVTq8lTlkI] For on-premises deployments, devices must be well connected to their on-premises network (domain controllers and/or certificate authority) to reset their PINs. Hybrid customers can onboard their Azure tenant to use the Windows Hello for Business PIN reset service to reset their PINs without access to their corporate network. From ee97558ae303df587f21748e888847dd31d27e1c Mon Sep 17 00:00:00 2001 From: Mike Stephens Date: Thu, 28 Sep 2017 14:46:38 -0700 Subject: [PATCH 3/7] another attempt to fix video links --- .../hello-for-business/hello-identity-verification.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/windows/access-protection/hello-for-business/hello-identity-verification.md b/windows/access-protection/hello-for-business/hello-identity-verification.md index d1acb86c68..ddccce6045 100644 --- a/windows/access-protection/hello-for-business/hello-identity-verification.md +++ b/windows/access-protection/hello-for-business/hello-identity-verification.md @@ -75,17 +75,17 @@ The table shows the minimum requirements for each deployment. The user experience for Windows Hello for Business occurs after user sign once you deploy Windows Hello for Business policy settings to your environment. Windows Hello for Business Enrollment including Biometrics -> [!VIDEO https://www.youtube.com/watch?v=FJqHPTZTpNM&feature=youtu.be] +> [!VIDEO https://www.youtube.com/embed/FJqHPTZTpNM] Windows Hello for Business Enrollment PIN only -> [!VIDEO https://youtu.be/etXJsZb8Fso] +> [!VIDEO https://www.youtube.com/embed/etXJsZb8Fso] ### What happens when my user forgets their PIN? If the user can sign-in with a password, they can reset their PIN by clicking the "I forgot my PIN" link in settings. Beginning with the Fall Creators Update, users can reset their PIN above the lock screen by clicking the "I forgot my PIN" link on the PIN credential provider. Windows Hello PIN Reset above Lock (Fall Creators Update) -> [!VIDEO https://youtu.be/KcVTq8lTlkI] +> [!VIDEO https://www.youtube.com/embed/KcVTq8lTlkI] For on-premises deployments, devices must be well connected to their on-premises network (domain controllers and/or certificate authority) to reset their PINs. Hybrid customers can onboard their Azure tenant to use the Windows Hello for Business PIN reset service to reset their PINs without access to their corporate network. From 2d26921712b5bf3a476ea83434ffbfb7ef3d234d Mon Sep 17 00:00:00 2001 From: Mike Stephens Date: Thu, 28 Sep 2017 15:21:44 -0700 Subject: [PATCH 4/7] final updates for adding videos --- .../hello-for-business/hello-identity-verification.md | 3 --- 1 file changed, 3 deletions(-) diff --git a/windows/access-protection/hello-for-business/hello-identity-verification.md b/windows/access-protection/hello-for-business/hello-identity-verification.md index ddccce6045..7cb9166f03 100644 --- a/windows/access-protection/hello-for-business/hello-identity-verification.md +++ b/windows/access-protection/hello-for-business/hello-identity-verification.md @@ -74,17 +74,14 @@ The table shows the minimum requirements for each deployment. ### What is the user experience for Windows Hello for Business? The user experience for Windows Hello for Business occurs after user sign once you deploy Windows Hello for Business policy settings to your environment. -Windows Hello for Business Enrollment including Biometrics > [!VIDEO https://www.youtube.com/embed/FJqHPTZTpNM] -Windows Hello for Business Enrollment PIN only > [!VIDEO https://www.youtube.com/embed/etXJsZb8Fso] ### What happens when my user forgets their PIN? If the user can sign-in with a password, they can reset their PIN by clicking the "I forgot my PIN" link in settings. Beginning with the Fall Creators Update, users can reset their PIN above the lock screen by clicking the "I forgot my PIN" link on the PIN credential provider. -Windows Hello PIN Reset above Lock (Fall Creators Update) > [!VIDEO https://www.youtube.com/embed/KcVTq8lTlkI] For on-premises deployments, devices must be well connected to their on-premises network (domain controllers and/or certificate authority) to reset their PINs. Hybrid customers can onboard their Azure tenant to use the Windows Hello for Business PIN reset service to reset their PINs without access to their corporate network. From 01368763d59bba34d359c9eb144a4241898fd2a5 Mon Sep 17 00:00:00 2001 From: Mike Stephens Date: Thu, 28 Sep 2017 15:48:34 -0700 Subject: [PATCH 5/7] adding a line of white space between the enrollment videos --- .../hello-for-business/hello-identity-verification.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/access-protection/hello-for-business/hello-identity-verification.md b/windows/access-protection/hello-for-business/hello-identity-verification.md index 7cb9166f03..4889e47cab 100644 --- a/windows/access-protection/hello-for-business/hello-identity-verification.md +++ b/windows/access-protection/hello-for-business/hello-identity-verification.md @@ -75,7 +75,7 @@ The table shows the minimum requirements for each deployment. The user experience for Windows Hello for Business occurs after user sign once you deploy Windows Hello for Business policy settings to your environment. > [!VIDEO https://www.youtube.com/embed/FJqHPTZTpNM] - +
> [!VIDEO https://www.youtube.com/embed/etXJsZb8Fso] ### What happens when my user forgets their PIN? From dfb9bd25ef14019d3da4719af9ff9364df5af481 Mon Sep 17 00:00:00 2001 From: Mike Stephens Date: Thu, 28 Sep 2017 17:45:19 -0700 Subject: [PATCH 6/7] fix style problem between videos --- .../hello-for-business/hello-identity-verification.md | 4 +++- 1 file changed, 3 insertions(+), 1 deletion(-) diff --git a/windows/access-protection/hello-for-business/hello-identity-verification.md b/windows/access-protection/hello-for-business/hello-identity-verification.md index 4889e47cab..1ca171237b 100644 --- a/windows/access-protection/hello-for-business/hello-identity-verification.md +++ b/windows/access-protection/hello-for-business/hello-identity-verification.md @@ -75,7 +75,9 @@ The table shows the minimum requirements for each deployment. The user experience for Windows Hello for Business occurs after user sign once you deploy Windows Hello for Business policy settings to your environment. > [!VIDEO https://www.youtube.com/embed/FJqHPTZTpNM] -
+ +
+ > [!VIDEO https://www.youtube.com/embed/etXJsZb8Fso] ### What happens when my user forgets their PIN? From 6c5625a168ad910bbe1089468b429a2ce90390b1 Mon Sep 17 00:00:00 2001 From: Mike Stephens Date: Mon, 2 Oct 2017 06:06:08 -0700 Subject: [PATCH 7/7] Fix reported spelling errors --- .../hello-hybrid-cert-whfb-settings-dir-sync.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/windows/access-protection/hello-for-business/hello-hybrid-cert-whfb-settings-dir-sync.md b/windows/access-protection/hello-for-business/hello-hybrid-cert-whfb-settings-dir-sync.md index 51d3af12b8..084999e656 100644 --- a/windows/access-protection/hello-for-business/hello-hybrid-cert-whfb-settings-dir-sync.md +++ b/windows/access-protection/hello-for-business/hello-hybrid-cert-whfb-settings-dir-sync.md @@ -25,7 +25,7 @@ ms.date: 09/08/2017 >[!IMPORTANT] >This guide only applies to Hybrid deployments for Windows 10, version 1703 or higher. -In hybrid deployments, users register the public portion of their Windows Hello for Business crednetial with Azure. Azure AD Connect syncrhonizes the Windows Hello for Business public key to Active Directory. +In hybrid deployments, users register the public portion of their Windows Hello for Business credential with Azure. Azure AD Connect synchronizes the Windows Hello for Business public key to Active Directory. The key-trust model needs Windows Server 2016 domain controllers, which configures the key registration permissions automatically; however, the certificate-trust model does not and requires you to add the permissions manually.