- 咨询服务
Windows Hello Jumpstart
Windows Hello for Business is an authentication technology that allows users to sign into Windows devices, applications, and services using facial recognition, fingerprint identification, or a high
Windows Hello for Business includes enterprise-grade security and management capabilities, including device attestation, certificate-based authentication, and conditional access policies. Policy settings can be deployed to devices to ensure they're secure and compliant with organizational requirements.
Scope of Work Details
Discover and Design:
• Review current infrastructure and verify prerequisites
• Review existing Entra ID and on-premises Active Directory
configuration
• Evaluate the current Intune management solution configuration
• Analyze network topology and connectivity between on-premises
and cloud
• Identify target user groups and devices for deployment
• Identify up to ten (10) users to be part of Pilot Group
Deploy / Implement:
• Ensure that Entra ID Connect is synchronizing to five customer-chosen user
accounts and device identities between on-premises Active Directory and Entra
ID.
• Register Windows devices with Entra ID so that those five customers chosen
users can sign in to them using their Entra ID credentials.
• Configure Windows Hello for Business and configure the settings for Intune. This
includes settings to configure biometric authentication.
• Issue certificates for Windows Hello for Business (if necessary) with the existing
configured Cloud Kerberos Trust.
• Configure one authentication method that will be allowed for Windows Hello for
Business. The customer’s team will be responsible for providing the method (i.e.
biometrics).
• Ensure multi-factor authentication is configured for Windows Hello for Business
to increase the security of the authentication process.
• Troubleshooting issues that may arise during this deployment.
• Provide documentation for the knowledge transfer.