How can we improve Azure Active Directory?

Allow disabling Windows Hello without InTune subscription

If you've got an Office 365 subscription, you get AzureAD for free. You can domain-join machines to your AzureAD, and your users get the magic of Single Sign-On.

However, the default configuration is to force them to setup a PIN in "Windows Hello for Business". You can't disable this setting without an Intune or AzureAD Premium subscription.

10 votes
Sign in
(thinking…)
Sign in with: Microsoft
Signed in as (Sign out)

We’ll send you updates on this idea

Peter shared this idea  ·   ·  Flag idea as inappropriate…  ·  Admin →

3 comments

Sign in
(thinking…)
Sign in with: Microsoft
Signed in as (Sign out)
Submitting...
An error occurred while saving the comment
  • Anonymous commented  ·   ·  Flag as inappropriate

    Please allow us to remove Windows Hello without Intune. The customer wants to use their password, not their PIN.

  • Scott Thomson commented  ·   ·  Flag as inappropriate

    Really needs some attention; its obvious the different mentalities between the O365 and Azure teams.

    O365 (Business Premium) Team: We are going to continue adding awesome new features and continually improve our offering, all for the same price you are already paying!

    Azure Team: Oh, you want basic usable 'Cloud' AD functionality? Bend over, spread 'em - oh, you want lube? That'll be $7 per squirt!

Feedback and Knowledge Base