Overview
"Windows Hello for Business is an authentication technology that allows users to sign in to their Windows devices using biometric data, or a PIN, instead of a traditional password" (Microsoft website). The use of this technology significantly increases security by replacing passwords with an authentication method that is resistant to breaches, thefts, and phishing. Windows Hello for Business combines an enrolled computer with a PIN or biometric user input. Users can sign in to their devices using their PIN, compatible web camera, or a fingerprint reader.
What to Expect
After logging in to your computer, you will be prompted to set up Windows Hello for Business. To use facial recognition, you must have a camera with integrated special infrared (IR) sensors. If you use a laptop with a fingerprint reader, you can choose that option instead. You will also be prompted to set up a PIN as a backup method. If your computer does not have a compatible camera or fingerprint reader, you will be prompted to set up a PIN only.
- Sign in to your computer as usual.
- When prompted, choose a sign-in method. Windows Hello for Business will determine what sign-in methods will work with your computer and prompt you to use one of them (face, fingerprint, PIN).
- Follow the steps as Windows Hello for Business walks you through setting up the chosen sign-in method.
- Face - Look directly at the camera while setup is in progress.
- Fingerprint - Many of the newer Lenovo laptops have a fingerprint reader built in to the power button. Carefully follow the onscreen instructions.
- PIN - You will be prompted to use multi-factor authentication to create your PIN. Enter your PIN (at least six characters). You can select to include letters and symbols in addition to numbers. Avoid using your BJU password as your PIN. NOTE: If you have already opted to use facial or fingerprint recognition. Your PIN will serve as an additional sign-in option.
Once your PIN is set, you are all done. The next time you sign in to your computer, your chosen sign-in method will be used. NOTE: Windows remembers the last sign-in method you used to access the computer. Click "Sign-in options" if you wish to use a different method.
Frequently Asked Questions
Why won't my camera work with Windows Hello for Business?
Windows Hello for Business requires a camera with integrated special infrared (IR) sensors to do face recognition. Cameras without this technology are not compatible. Windows Hello for Business should automatically detect whether or not your web cam is compatible.
How can I get a camera or fingerprint reader that works with Windows Hello for Business?
If your department would like to purchase web cams that are compatible with Windows Hello for business and have been tested by IT, submit a service request ticket at itsupport.bju.edu. USB fingerprint readers can also be purchased by your department through IT.
Will I still need to change my password every 90 days?
Yes, for now, passwords will still need to be changed at 90-day intervals.
What happens if I change my password?
Changing your password should have no effect on your use of Windows Hello for Business.
What happens if I don't have a network connection?
After setup, Windows Hello for Business should work fine on your computer even if you do not have an internet connection.
Can I setup more than one biometric option?
Yes. For example, if you set up facial recognition, you can also set up fingerprint recognition as a backup sign-in method.
- In the Search box in your Windows taskbar, type "Sign-in options" and choose that selection when it appears as a match.
- In the "Accounts > Sign-in options" window, select the biometric method you wish to add and then choose to set up that method.
- You will be prompted to enter your PIN and will then be walked through the setup process.
NOTE: You can return to "Sign-in options" to improve camera recognition, to add other fingers to fingerprint recognition, or to change your PIN. You can also remove a sign-in method that you have set up.
What happens when I sign in to another BJU computer?
Since Windows Hello for Business is device specific, you will need to set it up on each device you log in to. If Windows Hello for Business has not been deployed to the device, you will sign in with your user name and password.
What about computers shared by multiple users?
Each user will need to set up a PIN for a shared computer. While biometric data (face or fingerprint) can also be used, it is limited to ten users per device.
Who receives my biometric data (face and fingerprint)?
This data is encrypted and stored locally on the computer and does not leave the device. No user or any other process other than Windows Hello for Business has access to it.
How does Windows Hello for Business work when using Remote Desktop?
When connecting to a computer using Remote Desktop, biometrics (face or fingerprints) or a PIN will be required to connect to the remote computer. Once connected to the remote computer, you will need to sign in to the remote computer using your BJU password'