Integrating Windows Hello with Cloud Kerberos for Password less Authentication

Question

Hi All,

Windows Hello with Cloud Kerberos.
I’m planning to integrate it into our organization.
The best practice is passwordless and has no expiration anymore.
But what happens in Kerberos? The user domain has a 90-day expiration, which means that after 90 days, Kerberos will not work until I reset the user domain password.
If I set the pincode expiration for 90 days, will it reset the counter of the domain user, too?
Or any other idea?

Posted by  Chen Arman in HTMD FB Group

kerbrose - HTMD Forum - Welcome to the world of Device Management! This is community build by Device Management Admins for Device Management Admins❤️ Ask your questions!! We are here to help you! - Integrating Windows Hello with Cloud Kerberos for Password less Authentication

 

Answer ( 1 )

  1. Sunitha P.S
    0
    2024-05-30T21:35:09+05:30

    For More Details Potential Impact on SCCM with Kerberos Protocol changes | November Patches KB5019980 KB5019959
    https://www.anoopcnair.com/sccm-with-kerberos-protocol-kb5021131-kb5020805/

    Replied by Ingo Flink

    Establish a cloud Kerberos trust. Do you mean Windows Hello for Business or just Windows Hello?

    Replied by Chen Arman

    Ingo Flink for business

Leave an answer

Sorry, you do not have permission to answer to this question .