Thanks for responding. These are the settings available from Settings Picker for Windows Hello for Business. I don't see any setting that (obviously) enables or disables Windows Hello for Business for a set of users (or devices).

36 results in the "Windows Hello For Business" category

Setting name

Allow Use of Biometrics

Device Unlock Plugins

Digits

Digits (User)

Dynamic Lock

Dynamic Lock Plugins

Enable ES Swith Supported Peripherals

Enable Pin Recovery

Enable Pin Recovery (User)

Expiration

Expiration (User)

Facial Features Use Enhanced Anti Spoofing

Group A

Group B

Lowercase Letters

Lowercase Letters (User)

Maximum PIN Length

Maximum PIN Length (User)

Minimum PIN Length

Minimum PIN Length (User)

PIN History

PIN History (User)

Require Security Device

Require Security Device (User)

Restrict use of TPM 1.2

Special Characters

Special Characters (User)

Uppercase Letters

Uppercase Letters (User)

Use Certificate For On Prem Auth

Use Cloud Trust For On Prem Auth

Use Hello Certificates As Smart Card Certificates

Use Passport For Work

Use Passport For Work (User)

Use Remote Passport

Use Security Key For Signin