{"id":680,"date":"2023-07-17T15:57:49","date_gmt":"2023-07-17T07:57:49","guid":{"rendered":"https:\/\/www.ruianding.com\/blog\/?p=680"},"modified":"2023-08-31T01:49:54","modified_gmt":"2023-08-30T17:49:54","slug":"failure-to-trigger-whfb-provisioning-on-aad-joined-computers-ngc-check-says-will-provision","status":"publish","type":"post","link":"https:\/\/www.ruianding.com\/blog\/failure-to-trigger-whfb-provisioning-on-aad-joined-computers-ngc-check-says-will-provision\/","title":{"rendered":"Failure to Trigger WHFB Provisioning on AAD Joined Computers (NGC Check says Will Provision)"},"content":{"rendered":"\n

The customer requested to use Windows Hello for Business (WHFB) on their AAD-joined machines. By default, WHFB provisioning should initiate automatically since AAD join is designed to enforce the use of this feature. However, one user failed to trigger the WHFB provisioning page during sign-in. After investigating the issue and examining the output of the dsregcmd \/status<\/code> command, everything appeared to be functioning correctly, and WHFB was expected to provision.<\/p>\n\n\n\n

+———————————————————————-+
| Ngc Prerequisite Check |
+———————————————————————-+
IsDeviceJoined : YES
IsUserAzureAD : YES
PolicyEnabled : YES
PostLogonEnabled : YES
DeviceEligible : YES
SessionIsNotRemote : YES
CertEnrollment : none
CloudTGT : YES
PreReqResult : WillProvision<\/p>\n\n\n\n

Furthermore, the logs from the user’s device registration indicated that WHFB provisioning would take place. Here are the relevant log details:<\/p>\n\n\n\n

Windows Hello for Business provisioning will be launched.<\/strong>
Device is AAD joined (AADJ or DJ++): Yes
User has logged on with AAD credentials: Yes
Windows Hello for Business policy is enabled: Yes
Windows Hello for Business post-logon provisioning is enabled: Yes
Local computer meets Windows Hello for Business hardware requirements: Yes
User is not connected to the machine via Remote Desktop: Yes
User certificate for on-premise authentication policy is enabled: No
Machine is governed by none policy.
Cloud trust for on-premise authentication policy is enabled: No
User account has Cloud TGT: Not Tested<\/p>\n\n\n\n


In an attempt to trigger the provisioning for testing purposes, we used the command ms-cxh:\/\/nth\/aad<\/code>. The user was expected to see the following window pop up:<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

However, this attempt failed with the following error message: “You’ll need a new app to open this ms-cxh link.”<\/strong><\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Based on this error, it seems that the operating system may be corrupted. To resolve the issue, you can try using the following PowerShell command to reinstall the CXH (Cloud Experience Host) app:<\/p>\n\n\n\n

Add-Appxpackage -RegisterByFamilyName -MainPackage (($(Get-AppXPackage -user (whoami) <em>CloudExperience<\/em>).PackageFamilyName))<\/pre>\n","protected":false},"excerpt":{"rendered":"
The customer requested to use Windows Hello for Business (WHFB) on their AAD-joined machines. By default, WHFB provisioning should initiate automatically since AAD join is designed to enforce the use of this feature. However, one user failed to trigger the WHFB provisioning page during sign-in. After investigating the issue and examining the output of the […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_themeisle_gutenberg_block_has_review":false,"footnotes":""},"categories":[43],"tags":[20,21],"class_list":["post-680","post","type-post","status-publish","format-standard","hentry","category-whfb","tag-ngc","tag-whfb"],"yoast_head":"\nFailure to Trigger WHFB Provisioning on AAD Joined Computers (NGC Check says Will Provision) - \u6781\u7b80IT\uff5cSimpleIT<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.ruianding.com\/blog\/failure-to-trigger-whfb-provisioning-on-aad-joined-computers-ngc-check-says-will-provision\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Failure to Trigger WHFB Provisioning on AAD Joined Computers (NGC Check says Will Provision) - \u6781\u7b80IT\uff5cSimpleIT\" \/>\n<meta property=\"og:description\" content=\"The customer requested to use Windows Hello for Business (WHFB) on their AAD-joined machines. By default, WHFB provisioning should initiate automatically since AAD join is designed to enforce the use of this feature. However, one user failed to trigger the WHFB provisioning page during sign-in. After investigating the issue and examining the output of the […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.ruianding.com\/blog\/failure-to-trigger-whfb-provisioning-on-aad-joined-computers-ngc-check-says-will-provision\/\" \/>\n<meta property=\"og:site_name\" content=\"\u6781\u7b80IT\uff5cSimpleIT\" \/>\n<meta property=\"article:published_time\" content=\"2023-07-17T07:57:49+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2023-08-30T17:49:54+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/07\/image-72.png\" \/>\n<meta name=\"author\" content=\"Ruian Ding\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ruian Ding\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.ruianding.com\/blog\/failure-to-trigger-whfb-provisioning-on-aad-joined-computers-ngc-check-says-will-provision\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.ruianding.com\/blog\/failure-to-trigger-whfb-provisioning-on-aad-joined-computers-ngc-check-says-will-provision\/\"},\"author\":{\"name\":\"Ruian Ding\",\"@id\":\"https:\/\/www.ruianding.com\/blog\/#\/schema\/person\/440d88575b7dc819a4cefc8c4199db3b\"},\"headline\":\"Failure to Trigger WHFB Provisioning on AAD Joined Computers (NGC Check says Will Provision)\",\"datePublished\":\"2023-07-17T07:57:49+00:00\",\"dateModified\":\"2023-08-30T17:49:54+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.ruianding.com\/blog\/failure-to-trigger-whfb-provisioning-on-aad-joined-computers-ngc-check-says-will-provision\/\"},\"wordCount\":282,\"publisher\":{\"@id\":\"https:\/\/www.ruianding.com\/blog\/#\/schema\/person\/440d88575b7dc819a4cefc8c4199db3b\"},\"image\":{\"@id\":\"https:\/\/www.ruianding.com\/blog\/failure-to-trigger-whfb-provisioning-on-aad-joined-computers-ngc-check-says-will-provision\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/07\/image-72.png\",\"keywords\":[\"NGC\",\"WHFB\"],\"articleSection\":[\"WHFB\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.ruianding.com\/blog\/failure-to-trigger-whfb-provisioning-on-aad-joined-computers-ngc-check-says-will-provision\/\",\"url\":\"https:\/\/www.ruianding.com\/blog\/failure-to-trigger-whfb-provisioning-on-aad-joined-computers-ngc-check-says-will-provision\/\",\"name\":\"Failure to Trigger WHFB Provisioning on AAD Joined Computers (NGC Check says Will Provision) - \u6781\u7b80IT\uff5cSimpleIT\",\"isPartOf\":{\"@id\":\"https:\/\/www.ruianding.com\/blog\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.ruianding.com\/blog\/failure-to-trigger-whfb-provisioning-on-aad-joined-computers-ngc-check-says-will-provision\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.ruianding.com\/blog\/failure-to-trigger-whfb-provisioning-on-aad-joined-computers-ngc-check-says-will-provision\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/07\/image-72.png\",\"datePublished\":\"2023-07-17T07:57:49+00:00\",\"dateModified\":\"2023-08-30T17:49:54+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/www.ruianding.com\/blog\/failure-to-trigger-whfb-provisioning-on-aad-joined-computers-ngc-check-says-will-provision\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.ruianding.com\/blog\/failure-to-trigger-whfb-provisioning-on-aad-joined-computers-ngc-check-says-will-provision\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.ruianding.com\/blog\/failure-to-trigger-whfb-provisioning-on-aad-joined-computers-ngc-check-says-will-provision\/#primaryimage\",\"url\":\"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/07\/image-72.png\",\"contentUrl\":\"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/07\/image-72.png\",\"width\":1023,\"height\":746},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.ruianding.com\/blog\/failure-to-trigger-whfb-provisioning-on-aad-joined-computers-ngc-check-says-will-provision\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.ruianding.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Failure to Trigger WHFB Provisioning on AAD Joined Computers (NGC Check says Will Provision)\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.ruianding.com\/blog\/#website\",\"url\":\"https:\/\/www.ruianding.com\/blog\/\",\"name\":\"Ruian's Tech Troubleshooting Toolbox\",\"description\":\"Debug the World.\",\"publisher\":{\"@id\":\"https:\/\/www.ruianding.com\/blog\/#\/schema\/person\/440d88575b7dc819a4cefc8c4199db3b\"},\"alternateName\":\"\u4e01\u777f\u5b89\u7684\u6280\u672f\u5206\u4eab\u535a\u5ba2\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.ruianding.com\/blog\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/www.ruianding.com\/blog\/#\/schema\/person\/440d88575b7dc819a4cefc8c4199db3b\",\"name\":\"Ruian Ding\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.ruianding.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/05\/logo.png\",\"contentUrl\":\"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/05\/logo.png\",\"width\":284,\"height\":284,\"caption\":\"Ruian Ding\"},\"logo\":{\"@id\":\"https:\/\/www.ruianding.com\/blog\/#\/schema\/person\/image\/\"},\"description\":\"I am currently a Support Specialist at NIO, focusing on cloud-related issues for NIO Power. Previously, at Microsoft Entra ID, I specialized in identity and access management (IAM), including device registration, Windows Hello for Business (WHfB), multi-factor authentication (MFA), and single sign-on (SSO). In addition to my core expertise, I have a strong foundation in Active Directory, Servers, Cloud Computing, Network Administration, and Front-end Web Development. This diverse technical skill set enables me to effectively handle a wide range of challenges in a fast-paced IT environment.\",\"sameAs\":[\"https:\/\/www.ruianding.com\"],\"url\":\"https:\/\/www.ruianding.com\/blog\/author\/ruiand\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Failure to Trigger WHFB Provisioning on AAD Joined Computers (NGC Check says Will Provision) - \u6781\u7b80IT\uff5cSimpleIT","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.ruianding.com\/blog\/failure-to-trigger-whfb-provisioning-on-aad-joined-computers-ngc-check-says-will-provision\/","og_locale":"en_US","og_type":"article","og_title":"Failure to Trigger WHFB Provisioning on AAD Joined Computers (NGC Check says Will Provision) - \u6781\u7b80IT\uff5cSimpleIT","og_description":"The customer requested to use Windows Hello for Business (WHFB) on their AAD-joined machines. By default, WHFB provisioning should initiate automatically since AAD join is designed to enforce the use of this feature. However, one user failed to trigger the WHFB provisioning page during sign-in. After investigating the issue and examining the output of the […]","og_url":"https:\/\/www.ruianding.com\/blog\/failure-to-trigger-whfb-provisioning-on-aad-joined-computers-ngc-check-says-will-provision\/","og_site_name":"\u6781\u7b80IT\uff5cSimpleIT","article_published_time":"2023-07-17T07:57:49+00:00","article_modified_time":"2023-08-30T17:49:54+00:00","og_image":[{"url":"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/07\/image-72.png","type":"","width":"","height":""}],"author":"Ruian Ding","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Ruian Ding","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.ruianding.com\/blog\/failure-to-trigger-whfb-provisioning-on-aad-joined-computers-ngc-check-says-will-provision\/#article","isPartOf":{"@id":"https:\/\/www.ruianding.com\/blog\/failure-to-trigger-whfb-provisioning-on-aad-joined-computers-ngc-check-says-will-provision\/"},"author":{"name":"Ruian Ding","@id":"https:\/\/www.ruianding.com\/blog\/#\/schema\/person\/440d88575b7dc819a4cefc8c4199db3b"},"headline":"Failure to Trigger WHFB Provisioning on AAD Joined Computers (NGC Check says Will Provision)","datePublished":"2023-07-17T07:57:49+00:00","dateModified":"2023-08-30T17:49:54+00:00","mainEntityOfPage":{"@id":"https:\/\/www.ruianding.com\/blog\/failure-to-trigger-whfb-provisioning-on-aad-joined-computers-ngc-check-says-will-provision\/"},"wordCount":282,"publisher":{"@id":"https:\/\/www.ruianding.com\/blog\/#\/schema\/person\/440d88575b7dc819a4cefc8c4199db3b"},"image":{"@id":"https:\/\/www.ruianding.com\/blog\/failure-to-trigger-whfb-provisioning-on-aad-joined-computers-ngc-check-says-will-provision\/#primaryimage"},"thumbnailUrl":"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/07\/image-72.png","keywords":["NGC","WHFB"],"articleSection":["WHFB"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.ruianding.com\/blog\/failure-to-trigger-whfb-provisioning-on-aad-joined-computers-ngc-check-says-will-provision\/","url":"https:\/\/www.ruianding.com\/blog\/failure-to-trigger-whfb-provisioning-on-aad-joined-computers-ngc-check-says-will-provision\/","name":"Failure to Trigger WHFB Provisioning on AAD Joined Computers (NGC Check says Will Provision) - \u6781\u7b80IT\uff5cSimpleIT","isPartOf":{"@id":"https:\/\/www.ruianding.com\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.ruianding.com\/blog\/failure-to-trigger-whfb-provisioning-on-aad-joined-computers-ngc-check-says-will-provision\/#primaryimage"},"image":{"@id":"https:\/\/www.ruianding.com\/blog\/failure-to-trigger-whfb-provisioning-on-aad-joined-computers-ngc-check-says-will-provision\/#primaryimage"},"thumbnailUrl":"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/07\/image-72.png","datePublished":"2023-07-17T07:57:49+00:00","dateModified":"2023-08-30T17:49:54+00:00","breadcrumb":{"@id":"https:\/\/www.ruianding.com\/blog\/failure-to-trigger-whfb-provisioning-on-aad-joined-computers-ngc-check-says-will-provision\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.ruianding.com\/blog\/failure-to-trigger-whfb-provisioning-on-aad-joined-computers-ngc-check-says-will-provision\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.ruianding.com\/blog\/failure-to-trigger-whfb-provisioning-on-aad-joined-computers-ngc-check-says-will-provision\/#primaryimage","url":"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/07\/image-72.png","contentUrl":"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/07\/image-72.png","width":1023,"height":746},{"@type":"BreadcrumbList","@id":"https:\/\/www.ruianding.com\/blog\/failure-to-trigger-whfb-provisioning-on-aad-joined-computers-ngc-check-says-will-provision\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.ruianding.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Failure to Trigger WHFB Provisioning on AAD Joined Computers (NGC Check says Will Provision)"}]},{"@type":"WebSite","@id":"https:\/\/www.ruianding.com\/blog\/#website","url":"https:\/\/www.ruianding.com\/blog\/","name":"Ruian's Tech Troubleshooting Toolbox","description":"Debug the World.","publisher":{"@id":"https:\/\/www.ruianding.com\/blog\/#\/schema\/person\/440d88575b7dc819a4cefc8c4199db3b"},"alternateName":"\u4e01\u777f\u5b89\u7684\u6280\u672f\u5206\u4eab\u535a\u5ba2","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.ruianding.com\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":["Person","Organization"],"@id":"https:\/\/www.ruianding.com\/blog\/#\/schema\/person\/440d88575b7dc819a4cefc8c4199db3b","name":"Ruian Ding","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.ruianding.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/05\/logo.png","contentUrl":"https:\/\/www.ruianding.com\/blog\/wp-content\/uploads\/2023\/05\/logo.png","width":284,"height":284,"caption":"Ruian Ding"},"logo":{"@id":"https:\/\/www.ruianding.com\/blog\/#\/schema\/person\/image\/"},"description":"I am currently a Support Specialist at NIO, focusing on cloud-related issues for NIO Power. Previously, at Microsoft Entra ID, I specialized in identity and access management (IAM), including device registration, Windows Hello for Business (WHfB), multi-factor authentication (MFA), and single sign-on (SSO). In addition to my core expertise, I have a strong foundation in Active Directory, Servers, Cloud Computing, Network Administration, and Front-end Web Development. This diverse technical skill set enables me to effectively handle a wide range of challenges in a fast-paced IT environment.","sameAs":["https:\/\/www.ruianding.com"],"url":"https:\/\/www.ruianding.com\/blog\/author\/ruiand\/"}]}},"_links":{"self":[{"href":"https:\/\/www.ruianding.com\/blog\/wp-json\/wp\/v2\/posts\/680","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.ruianding.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.ruianding.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.ruianding.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.ruianding.com\/blog\/wp-json\/wp\/v2\/comments?post=680"}],"version-history":[{"count":7,"href":"https:\/\/www.ruianding.com\/blog\/wp-json\/wp\/v2\/posts\/680\/revisions"}],"predecessor-version":[{"id":692,"href":"https:\/\/www.ruianding.com\/blog\/wp-json\/wp\/v2\/posts\/680\/revisions\/692"}],"wp:attachment":[{"href":"https:\/\/www.ruianding.com\/blog\/wp-json\/wp\/v2\/media?parent=680"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.ruianding.com\/blog\/wp-json\/wp\/v2\/categories?post=680"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.ruianding.com\/blog\/wp-json\/wp\/v2\/tags?post=680"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}