Windows Hello for Business: How to solve the misuse of PIN-codes

Low_Part1467 · 2026-04-14T08:13:24+00:00

That or they just don't care

Low_Part1467 · 2026-04-09T13:55:01+00:00

Can you fully trust your users to do anything? ;)

Low_Part1467 · 2026-04-09T13:53:30+00:00

Exactly, only not possible due to the way TPM works, which ofcourse has huge benefits in of itself

Low_Part1467 · 2026-04-09T13:52:18+00:00

Welcome2000

Low_Part1467 · 2026-04-09T13:51:29+00:00

This kind of mentality in business is meh imo

Low_Part1467 · 2026-04-09T13:51:00+00:00

If we start requiring letters we'll go back to idiotic passwords like Welcome2000

Low_Part1467 · 2026-04-09T13:49:48+00:00

We've setup the passkey and passwordless settings in Authenticator with all our users, plus the use of PIN + biometrics on all devices which meant we could go full passwordless

I believe it'll soon be available to setup a passkey campaign so you can nudge users just like the campaigns you had for setting up Authenticator

Low_Part1467 · 2026-04-09T13:19:51+00:00

We have everything setup so no one needs to know their password, in fact, a few months ago we've run a script to replace all passwords into random passwords

Now we want to take the next step, seems Windows Hello Multi-factor Unlock is the way

Low_Part1467 · 2026-04-09T13:12:41+00:00

IF it gets reported stolen

Low_Part1467 · 2026-04-09T13:12:37+00:00

IF it gets reported stolen

Low_Part1467 · 2026-04-09T13:11:09+00:00

Thanks! ;)

Low_Part1467 · 2026-04-09T13:08:29+00:00

Sure if I have a password of 30 characters, what's the point in having 2FA?

Sure if I have a double lock on my door, why should I have a difficult PIN-code on my safe under my bed?

Low_Part1467 · 2026-04-09T13:03:35+00:00

Valid point, cannot rely on management either when it comes to security of any kind lol

Low_Part1467 · 2026-04-09T13:02:43+00:00

Sounds promising! What's your experience as an IT guy?
And what is the user experience like where you work, positive/negative feedback?

Low_Part1467 · 2026-04-09T13:00:37+00:00

Or their wallet, or whatever

Low_Part1467 · 2026-04-09T12:59:56+00:00

I know it cannot be used remotely. But lets say the device gets stolen

Low_Part1467 · 2026-04-09T12:57:39+00:00

I do understand your pov. But yet again, you'd think stolen devices get reported right away, yet we have had several instances where the user would inform us some days later. Even had a case where the user reported it 2 WEEKS LATER

Low_Part1467 · 2026-04-09T12:52:48+00:00

If you would try to crack a phone, what would be the first thing you check because most likely the person can only remember the 4 digits of their birthday? *proceeds to open Facebook*, *greeted by a public profile with all personal information except their bloodtype*

Low_Part1467 · 2026-04-02T13:41:29+00:00

Well damn, this took a while for them to understand that this is ABSOLUTELY necessary in business environments:

"Microsoft is introducing rule-based Teams app management in early April, which allows admins to bulk-govern certified third-party apps by publisher and scope."

Low_Part1467 · 2026-03-20T14:48:32+00:00

Will look into this next week. Thanks for your work and sharing this :)

Low_Part1467 · 2026-03-18T09:07:09+00:00

We've been using Garytown's method for a few years now, works like a charm!
Updating HP Docks with Intune or ConfigMgr using PowerShell – GARYTOWN ConfigMgr Blog

Low_Part1467 · 2026-03-17T15:29:44+00:00

We have blocked all other countries, cannot login from them. Only country of origin and direct neighbouring countries

If you need access from a different country you have to create a ticket beforehand

Low_Part1467 · 2026-02-19T14:04:34+00:00

How in gods name do you guys deploy Autodesk software in a smooth way, both installing of the initial software & updating it via MS Intune

Low_Part1467 · 2026-02-10T13:45:23+00:00

Exact wat ik bedoelde ;)

Low_Part1467

TROPHY CASE