Windows Hello

So, um, most of us sign in as an administrator.

What this does is, uh, basically run everything that you do as a standard user, and then if it needs to escalate, you do a Windows Hello, uh, authentication, which is the annoying part because it takes a long time, and, uh, and then you give it your permission, and you can do that task, um, with administrator privileges.

So most people will try it, uh, if they want to have better security, and will hate it, and they'll turn it off, but, um, you know, we'll see how that goes.

So Microsoft removed a bunch of the, um, kind of, uh, Copi- I'm gonna call them Copilot entry points.

[laughs] I don't know.

Uh, Windows Hello enhanced sign-in security supports external fingerprint readers.

You might have heard of this one.

Uh, we were talking about that over the summer.

backlit

keyboard, optional Windows Hello, you know, stuff like that.

But I'm just saying, like, it's funny how, you know, I talked to their designer and he was really like, you know, yeah, colors.

And I'm like, yeah, guys, like, why didn't you do that first? Like Apple actually technically did it first with the iPod Nanos, right?

So if you watch my video, folks, they never told me anything about a 15-inch version.

There's so many things when I record my videos they didn't tell me about.

They didn't tell me about some versions have Windows Hello, some versions have touchscreen, some versions have a backlit keyboard.

So let's start with the base price.

Or otherwise, you can use your phones with the authenticator app through a managed device interaction.

Or they could use Windows Hello.

We had about 100,000 employees that primarily through Windows Hello enablement.

where we just made that a mandatory configuration on their device where they had to at least set up a PIN and have that registered as a passkey.

And from there, it was, that's why, you know, conditional access is such a key technology that we're able to then start to guide our CA policies to have a mandate for requiring only the strong auth methods and start to disable using the weaker methods.

So that's a good one to know.

Yeah.

I think if you modernize with AVD, et cetera, you can use the Windows Hello passkey and routing and stuff.

There's none of that stuff popping up asking me anything.

I even went through on my startup screen and turned off any ads or extra information or anything that... you know, is, you know, Windows Hello or any of that kind of stuff, you know, that stuff's just all turned off.

You can see this stuff is all turned off at absolute minimum setup.

I did go through on my startup apps and make sure there was nothing running there.