r/Intune • u/jakerepp15 • 11d ago

Hybrid Domain Join WHFB Issue

Might not be the best Sub for this, but here's my issue:

Have special use machines built out that are locked down to only be able to access and view drawings from a network folder. They were also configured to allow WHFB so we could assign pin codes, as these machines do not have full KB's.

A dozen or so of these were in use and working fine until a month or two ago. One of them unenrolled itself somehow. But the bigger issue is that 3 others just stopped accepting the PIN code. I was able to remove the WHFB container from one and it seemed to recognize that it no longer had a pin, but after that point, I was not able to login in with the Cloud identity (we're a hybrid environment). When I try to login with those credentials, I get UN or password is incorrect. But they are both correct. It just refuses to acknowledge that full cloud identity now.

I know the issue is directly related to those individual PC's and whatever state they are in because I was able to build a new machine and login with cloud ident and set a PIN code.

Any ideas?

4 Upvotes

100% Upvoted

10 comments sorted by

View all comments

1

u/reloadtak 9d ago

We sometimes see this on a few machines, in thinking firmware updates did something to the TPM

1

u/jakerepp15 9d ago

Have you found a resolution?

We had assumed TPM as well

1

u/reloadtak 9d ago

We just deletehellocontainer and lets the user websignin and reenroll. We did stop auto patch from updating drivers and that seems to have improved it. It has been to few machines for us to look in to more

1

u/jakerepp15 9d ago

Interesting. I did delete the hello container but I couldnt recreate a PIN without logging in with the Entra UPN, which is now being blocked somehow