Windows 10 22H2 · 1.0

[removed: This policy setting lets you decide whether employees see an additional page in Microsoft Edge, stating that][added: You can configure Microsoft Edge to open a site automatically in Internet Explorer 11 and choose to display] a [added: notification before the ]site [removed: has been opened using][added: opens. If you want to display a notification, you must enable Configure the Enterprise Mode Site List or Send all intranets sites to] Internet Explorer [removed: 11.][added: 11 or both.] If [removed: you enable this setting, employees see an additional page][added: enabled, the notification appears on a new page. If you want users to continue] in Microsoft Edge, [removed: stating that a site has been opened using Internet Explorer 11.][added: select the Show Keep going in Microsoft Edge option from the drop-down list under Options.] If [removed: you disable ][added: disabled ]or [removed: don't configure this setting, ][added: not configured, ]the default app behavior occurs and no additional page [removed: appears.][added: displays. Default setting: Disabled or not configured Related policies: -Configure the Enterprise Mode Site List -Send all intranet sites to Internet Explorer 11]

Use this policy setting to configure the use of digits in the PIN. If you enable [removed: or do not configure ]this policy setting, Windows [removed: Hello for Business requires users ][added: requires the user ]to include at least one digit in their PIN. If you disable this policy setting, Windows [removed: Hello for Business ]does not allow [removed: users][added: the user] to [removed: use][added: include] digits in their[added: PINs. If you do not configure this policy setting, Windows allows, but does not require, digits in the] PIN.

Use this policy setting to configure the use of lowercase letters in the PIN. If you enable this policy setting, Windows [removed: Hello for Business requires users ][added: requires the user ]to include at least one lowercase letter in their PIN. If you disable [removed: or][added: this policy setting, Windows does not allow the user to include lowercase letters in their PIN. If you] do not configure this policy setting, Windows [removed: Hello for Business ][added: allows, but ]does not [removed: allow users to use ][added: require, ]lowercase letters in the[removed: ir] PIN.

A Trusted Platform Module (TPM) provides additional security benefits over software because data [removed: stored within][added: protected by] it cannot be used on other devices. If you enable this policy setting, [added: Windows Hello for Business provisioning ]only [added: occurs on ]devices with [removed: a usable TPM may provision][added: usable 1.2 or 2.0 TPMs. You can optionally exclude security devices, which prevents] Windows Hello for [removed: Business.][added: Business provisioning from using those devices.] If you disable or do not configure this policy setting, the TPM is still preferred, but all devices may provision Windows Hello for Business using software if the TPM is non-functional or unavailable.

Use this policy setting to configure the use of special characters in the PIN. Allowable special characters are: ! " # $ % & ' ( ) * + , - . / : ; < = > ? @ [ \ ] ^ _ ` { | } ~ . If you enable this policy setting, Windows [removed: Hello for Business requires users ][added: requires the user ]to include at least one special character in their PIN. If you disable [removed: or][added: this policy setting, Windows does not allow the user to include special characters in their PIN. If you] do not configure this policy setting, Windows [removed: Hello for Business ][added: allows, but ]does not [removed: allow users to use ][added: require, ]special characters in the[removed: ir] PIN.

Use this policy setting to configure the use of uppercase letters in the PIN. If you enable this policy setting, Windows [removed: Hello for Business requires users ][added: requires the user ]to include at least one uppercase letter in their PIN. If you disable [removed: or][added: this policy setting, Windows does not allow the user to include uppercase letters in their PIN. If you] do not configure this policy setting, Windows [removed: Hello for Business ][added: allows, but ]does not [removed: allow users to use ][added: require, ]uppercase letters in the[removed: ir] PIN.

Windows Hello for Business is an alternative method for signing into Windows using your Active Directory or Azure Active Directory account that can replace passwords, Smart Cards, and Virtual Smart Cards. If you enable this policy, the device provisions Windows Hello for Business using keys or certificates for all users. If you disable this policy setting, the device does not provision Windows Hello for Business for any user. If you do not configure this policy setting, users can provision Windows Hello for Business as a convenience credential that encrypts their domain password.[removed: ][added: Select "Do not start Windows Hello provisioning after sign-in" when you use a third-party solution to provision Windows Hello for Business. If you select "Do not start Windows Hello provisioning after sign-in", Windows Hello for Business does not automatically start provisioning after the user has signed in. If you do not select "Do not start Windows Hello provisioning after sign-in", Windows Hello for Business automatically starts provisioning after the user has signed in. ]