Windows Hello for Business and Kerberos Trust

[Microsoft Windows]

We're having an issue with setting up WHfB in our hybrid environment. DC is server 2016 and devices are Entra Hybrid Joined, although I've tested with an Entra joined only laptop and it's the same. The Kerberos Trust Server has been successfully set up on the DC (the only one in the estate). The relevant WHfB settings have been applied to a test user group. The user can successfully set up WHfB on their device and cached tickets can be seen when running klist. The cached tickets are removed when the user locks the device or signs out, as expected, however they are never generated again after

Continue reading...