This is an informational document provided by IT Team. Its purpose is to provide basic information to staff concerning Windows Hello for Business (abbreviated to Windows Hello) and how to get started with it.

Introduction

Windows Hello is an advanced authentication feature introduced by Microsoft which secures the device using convenient authentication methods compared to traditional password-based sign-ins. This includes biometrics in the form of facial or fingerprint recognition, or a PIN code.

With Windows Hello, you will no longer need to input a complex or long password to unlock your device, speeding up accessing your device and removing the frustration that comes from when the operating system locks the screen.

Certain devices may not be compatible with Windows Hello, where they are missing fingerprint readers or webcams with IR sensors; the PIN feature is however universally available to all devices. 

Setting Up Windows Hello

To get started and setup with Windows Hello, open the Start Menu and search for ‘Windows Hello’, then select the first option, ‘Sign-in options’:

You will be presented with the following options. Some options may not be available depending on your device:

There are a few points to consider when selecting your new sign-in method:

·         Most external USB webcams do not have the necessary IR sensors required to enable facial recognition.

o   Most built-in laptop/Surface webcams do however support Windows Hello: You would inherently be reliant upon your built-in webcam, which requires your screen/lid to be up/open.

·         In a similar vein, you would need your laptop screen/lid to be up/open to utilise the fingerprint scanner.

o   You could initially sign in with Windows Hello then close your screen/lid.

·         You will always have a PIN as a backup means of authentication should either facial or fingerprint recognition not work for any reason.

o   You will still be able to sign in with your domain credentials should you forget your PIN.

·         You can setup all these sign-in methods providing your device is compatible.

o   You can change your default sign-in method or revert to using a traditional password at any point.

With these points in mind please refer to the following instructions for setting up each option.

These are denoted in the table of contents at the start of this document.

Facial Recognition

You may wish to remove any headphones you have on to aid the setup of facial recognition. If you would typically wear glasses whilst operating your device, you should keep them on for the duration of the setup. You can run additional facial scans without them to improve the recognition should you encounter issues. Select ‘Facial Recognition’ followed by ‘Get started’ to proceed with the setup of Windows Hello once you’re ready and follow the instructions on-screen. Once the scan has completed, you can optionally run another scan to improve the recognition or setup a PIN to finish off the setup.

Select ‘Set up PIN’ once you’re ready. You’ll be required to input your domain password. Input this and select ‘OK’.

You’ll then be able to define the 6-digit PIN which can be used for signing into your device in place of facial recognition. Should you forget this PIN, you can still sign in with your domain credentials as you would usually and reset it within Windows. Please contact IT if you require assistance.

PIN Authentication

To setup a PIN, you’ll be required to input your domain password, input it then select ‘OK’: You’ll then be prompted to set a PIN of at least 6 characters long. Select ‘OK’ to confirm it:

If you ever forget your PIN, you can still sign into your device with your domain credentials and then reset it.

Please contact IT if you require assistance.