Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Question
Saturday, February 23, 2019 2:47 AM | 1 vote
Hi,
We use AzureAD, computers added under AAD domain user signs in with Windows Hello Pin, Face, or Fingerprint it constantly gets notification warning in the corner with following message: "Windows needs your credentials - Please lock this computer, then unlock it using your most recent password or smart card".
If user signs in using normal AD password instead of "Windows Hello" all is good, no issues.
Any suggestions?
Eimis
All replies (8)
Saturday, February 23, 2019 8:35 AM
Does this happen to all users?
Saturday, February 23, 2019 7:38 PM
Yes.
No issues with windows hello when PCs are joined to WindowsAD, seems to happen only to AAD joined computers.
For now we asking users to login using passwords instead of "Windows Hello".
Eimis
Tuesday, February 26, 2019 4:47 AM
Hi,
Please try the following steps:
1] Go to Run and type “gpedit.msc” and click OK to open the Local Group Policy Editor.
2] A snap-in window appears where you will need to follow the path:
Computer Configuration > Administrative Templates > System > Logon.
3] Check the right panel of the Logon and find the “Always wait for the network at computer startup and logon” option.
4] If this option is ‘Enabled’ double-click to ‘Disable’ it. You can also set it to ‘Not Configured’.
5] Hit ‘Apply’ and then click ‘OK’.
6] Exit the Group Policy Editor and restart the device.
Best Regards，
Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].
Thursday, February 28, 2019 7:22 PM
Hi,
Was your issue solved?
If yes, would you like to share your solution in order that other community members could find the helpful reply quickly.
If no, please reply and tell us the current situation in order to provide further help.
Best Regards，
Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].
Saturday, March 9, 2019 12:46 AM | 1 vote
Hi,
No solution, for now just disabled Windows Hello on intunes and disabled it locally on few computers that we have under AAD.
My “Always wait for the network at computer startup and logon” option is disabled.
Would love to find solution, as "Windows Hello" is pretty awesome in general.
Thanks,
Eimis
Monday, July 15, 2019 2:25 PM | 1 vote
I am having the same issue. If anyone has a potential fix I would love to try it.
Thursday, October 10, 2019 4:19 PM
I am having the same issue. If anyone has a potential fix I would love to try it.
Same, I am testing this out for my organization and the facial rec feature for Windows Hello is great, but if it's going to spam with notifications I'm out.
Thursday, October 10, 2019 4:48 PM
So you're logging into an Azure AD Joined computer (not hybrid, so no local domain trust) and you're logging into AzureAD with the user account UPN of the AzureAD account, right?
Is the identity Synched with Local Active Directory? If so, make sure the local account has a UPN listed that matches the AzureAD account (so, if contoso.local, then add a UPN for contoso.onmicrosoft.com (or your registered Azure Domain).
nick