Windows Hello Jumpstart

Windows Hello for Business includes enterprise-grade security and management capabilities, including device attestation, certificate-based authentication, and conditional access policies. Policy settings can be deployed to devices to ensure they're secure and compliant with organizational requirements. Scope of Work Details Discover and Design:
• Review current infrastructure and verify prerequisites • Review existing Entra ID and on-premises Active Directory configuration • Evaluate the current Intune management solution configuration • Analyze network topology and connectivity between on-premises and cloud • Identify target user groups and devices for deployment • Identify up to ten (10) users to be part of Pilot Group Deploy / Implement: • Ensure that Entra ID Connect is synchronizing to five customer-chosen user accounts and device identities between on-premises Active Directory and Entra ID. • Register Windows devices with Entra ID so that those five customers chosen users can sign in to them using their Entra ID credentials. • Configure Windows Hello for Business and configure the settings for Intune. This includes settings to configure biometric authentication. • Issue certificates for Windows Hello for Business (if necessary) with the existing configured Cloud Kerberos Trust. • Configure one authentication method that will be allowed for Windows Hello for Business. The customer’s team will be responsible for providing the method (i.e. biometrics). • Ensure multi-factor authentication is configured for Windows Hello for Business to increase the security of the authentication process. • Troubleshooting issues that may arise during this deployment. • Provide documentation for the knowledge transfer.