Library Pack Header

'''Problem'''\n\nTraditional passwords are vulnerable to security breaches, including phishing attacks and credential theft, posing significant risks to IT departments and businesses. These risks can lead to unauthorized access to sensitive information, financial losses, and damage to an organization's reputation. Additionally, managing and maintaining password security can be resource-intensive, requiring constant updates and monitoring to prevent breaches.\n\n'''Solution'''\n\nComprehensive dashboard to monitor and manage the deployment of Windows Hello for Business (WHfB) across your organization. This dashboard offers a clear overview of devices where WHfB is activated and details the authentication methods in use. It shows the distribution of authentication methods across devices and provides insights into the usage of passwords, PINs, and biometric methods, helping to identify trends and areas for improvement. To promote the adoption of more secure authentication methods, the library pack features a user campaign that informs users about the benefits of using alternative sign-in methods and directs users to documentation on how to enable and use these methods.\n\n'''Expected value'''\n\n* Enhance security by reducing the risk of phishing attacks and credential theft.\n* Simplify user authentication with faster and more convenient login methods.\n* Reduce IT workload by minimizing the need for password resets and management.\n* Increase productivity by streamlining the login process for users.

Windows Hello for Business

This Remote Action assesses a device's readiness and adoption of Windows Hello by performing a series of hardware and usage checks. It verifies:\n\n1) Hardware readiness for Facial Recognition and Fingerprint Sensor (Ready / Not Ready)\n\n2) User enrollment status in Windows Hello (Enrolled / Not Enrolled)\n\n3) Last sign-in method used (Facial Recognition / Fingerprint / PIN / Password)\n\n4) Timestamp of the last sign-in\n\nSome environments may have different custom GUIDs for detecting password-based sign-ins. To handle this variation and ensure accurate results, the Remote Action allows these GUIDs to be provided as a configurable input parameter, helping password sign-ins be correctly detected and reported.\n\nThese insights help IT administrators evaluate Windows Hello deployment, monitor usage trends across the organization, and identify gaps to improve adoption.\n\nSupported Platforms: Windows 10, Windows 11

Facial Recognition Identifiers to be provided. Multiple keywords can be added separated with comma

Facial Recognition Identifiers

Fingerprint Recognition Identifiers to be provided. Multiple keywords can be added separated with comma

Fingerprint Recognition Identifiers

Custom GUIDs to identify password-based sign-in to be provided, if applicable. Multiple GUIDs can be added, separated with comma. If there are none, enter empty quotes ('') to skip this check

Custom Password Logon GUIDs

Get Windows Hello readiness and usage

The hardware readiness for Facial Recognition. The value can be either 'Ready' or 'Not Ready'. If the value is set to 'Ready', it means that the hardware is ready for Windows Hello Facial Recognition. If the value is set to 'Not Ready', it means that the hardware is not ready for Windows Hello Facial Recognition

Facial Recognition Hardware Status

The hardware readiness for Fingerprint. The value can be either 'Ready' or 'Not Ready'. If the value is set to 'Ready', it means that the hardware is ready for Windows Hello Fingerprint. If the value is set to 'Not Ready', it means that the hardware is not ready for Windows Hello Fingerprint

Fingerprint Hardware Status

The Windows Hello Enablement Status. The value can be either 'Enrolled' or 'Not Enrolled'. If the value is set to 'Enrolled', it means that the user has enrolled in Windows Hello. If the value is set to 'Not Enrolled', it means that the user has not enrolled in Windows Hello

Windows Hello User Enrollment Status

The last used sign-in method. The value can be either 'PIN', 'Password', 'Fingerprint', 'Facial Recognition'. If the value is set to 'PIN', it means that the user has used a PIN to sign in. If the value is set to 'Password', it means that the user has used a Password to sign in. If the value is set to 'Fingerprint', it means that the user has used a Fingerprint to sign in. If the value is set to 'Facial Recognition', it means that the user has used Facial Recognition to sign in

Last Used Sign-in Method

WMI biometric message retrieved in the biometric class

WMI biometric message

The Date and Time of the last used sign-in method. The value is in the format of 'yyyy-MM-ddTHH:mm:ss'

Windows Hello for Business

Description

Screenshots

Versions

Content

Required Products

Platforms

Compatibility