Windows Hello Audit

Purpose

The purpose of this solution is to audit Windows Hello on Windows devices. It determines whether Windows Hello is enabled and identifies the authentication method currently in use.

Associated Content

Content	Type	Function
Windows Hello Status	Custom Field	Displays whether Windows Hello is enabled on the device and specifies which Windows Hello method is being used.
Enable Windows Hello Audit	Custom Field	Custom Field to enable the solution.
Exclude Windows Hello Audit	Custom Field	Custom Fields to exclude Site/Endpoint from the solution.
Machines Opted For Windows Hello Audit	Group	Contains machines where the Windows Hello audit is enabled.
Get Windows Hello Status	Script	Audits Windows Hello on windows machines.

Implementation

• Create the following custom fields:
  • Windows Hello Status
  • Enable Windows Hello Audit
  • Exclude Windows Hello Audit
• Create Group - Machines Opted For Windows Hello Audit as per instructions in the document.
• Create Script - Get Windows Hello Status as per instructions in the document.

Changelog

2026-03-12

• Initial version of the document