OIT does not support Hello for Business at this time, if enabled it may not function as expected. Hello for Business requires specific infrastructure and AD options to be in place in order to work properly. Hello and Hello for Business are different implementations of biometric authentication. This is not currently enabled for U of I. When a device is successfully unlocked through biometrics, a certificate is sent to backend servers to authenticate the user. Windows Hello for Business is a Microsoft solution for password-less authentication across an organization. Windows Hello in a domain environment is sometimes referred to as Hello in convenience mode. When the computer is unlocked with biometrics, the AD credentials are automatically used to access domain resources like the S and U drives. Local or AD users can always choose to sign in to a device with a username and password in place of biometrics, if desired.įor AD users, AD credentials are cached encrypted on the system.

Windows Hello configurations are local to a specific device and do not affect the user experience on other devices.

Hello enables users to sign in to a device via fingerprint, facial recognition, iris scan, or PIN number. Windows Hello is a biometric authentication solution available in recent Windows 10 and 11 versions.

Is Hello or Hello for Business allowed?.

This article applies to the following operating system(s):

Windows hello biometric