Aware of Any conflict with these policies and Web Sign In?

[mike240se]

I am having an odd issue I suspect may be caused by a setting in OpenIntuneBaselines but I am not 100% sure. WIth the baselines applied, the default destructive pin reset from the lock screen does not work, it just says "please wait" for 1 second and goes back to the lock screen sleep screen with just the time. The same thing happens trying to use the windows web-sign in provider for entra joined machines.

I read that blocking notifications can disable pin reset but can't find why web sign in doesn't work. I tried re-enabling lock screen notifications but it didnt fix either problem. Perhaps I missed notifications disabled in a 2nd location?

I am wondering if anyone else using these baselines either has the same problem or if they can succesfully use web sign in and the default destructive pin reset (it should work without any config, unlike the non destructive pin reset). If anyone running the baselines I would appreciate it! Thanks

[PZan]

A little late to the party, but I'm also experiencing strange behavior with Web Sign-in, running Windows 11 23H2 (22631.4317).

After having pressed Sign-in the screen goes black for 1-2 seconds and eventually the facial recognition credential provider takes over. Have you made any progress since first creating this issue?

[mike240se]

A little late to the party, but I'm also experiencing strange behavior with Web Sign-in, running Windows 11 23H2 (22631.4317).

After having pressed Sign-in the screen goes black for 1-2 seconds and eventually the facial recognition credential provider takes over. Have you made any progress since first creating this issue?

Does your pin reset functionality work?

Negative, I have not found the solution to this. I am not even sure its caused by openintunebaselines. I went through the list of requirements for pin reset and changed a couple settings (I think one was regarding notifications on the lock screen) and still have the issue with both web sign in and pin reset. Basically anything that requires a web flow for login. Samee problem as you, it just goes back to the original login screen after a couple seconds (clearly its trying to load something and it fails or is blocked)

[ak47uk]

I am not sure if this has any relation, but on Win 11 24H2 web sign-in is not working for me with OIB (although I think it may be unrelated to OIB).

Users can sign in with their pin no problem, web sign-in hangs when the sign-in button is pressed then goes back to the sign-in button. There is no window for the sign in. If the user skips pin setup on their first run, when they reboot they cannot sign in unless they select Other User, sign-in options, switch to Password and enter their username and password.

[mike240se]

I am not sure if this has any relation, but on Win 11 24H2 web sign-in is not working for me with OIB (although I think it may be unrelated to OIB).

Users can sign in with their pin no problem, web sign-in hangs when the sign-in button is pressed then goes back to the sign-in button. There is no window for the sign in. If the user skips pin setup on their first run, when they reboot they cannot sign in unless they select Other User, sign-in options, switch to Password and enter their username and password.

can you confirm if pin reset from the login screen works for you? (destructive or non-destructive, neither work for me)

[PZan]

A little late to the party, but I'm also experiencing strange behavior with Web Sign-in, running Windows 11 23H2 (22631.4317).

After having pressed Sign-in the screen goes black for 1-2 seconds and eventually the facial recognition credential provider takes over. Have you made any progress since first creating this issue?

Does your pin reset functionality work?

Negative, I have not found the solution to this. I am not even sure its caused by openintunebaselines. I went through the list of requirements for pin reset and changed a couple settings (I think one was regarding notifications on the lock screen) and still have the issue with both web sign in and pin reset. Basically anything that requires a web flow for login. Samee problem as you, it just goes back to the original login screen after a couple seconds (clearly its trying to load something and it fails or is blocked)

My first suspect was our central firewall, as during my first attempts with web sign-in actually did work as expected. But at later attempts the described behavior started. At this stage the always-on VPN client had installed. But after having had the VPN disabled on a test and still experiencing the issue, I'm not sure anymore. So I will have to do some more trial and error to draw some actual conclusions.

Haven't tried pin reset yet, but will have a try tomorrow. Expecting same behavior as yours.

[mike240se]

A little late to the party, but I'm also experiencing strange behavior with Web Sign-in, running Windows 11 23H2 (22631.4317).

After having pressed Sign-in the screen goes black for 1-2 seconds and eventually the facial recognition credential provider takes over. Have you made any progress since first creating this issue?

Does your pin reset functionality work?
Negative, I have not found the solution to this. I am not even sure its caused by openintunebaselines. I went through the list of requirements for pin reset and changed a couple settings (I think one was regarding notifications on the lock screen) and still have the issue with both web sign in and pin reset. Basically anything that requires a web flow for login. Samee problem as you, it just goes back to the original login screen after a couple seconds (clearly its trying to load something and it fails or is blocked)

My first suspect was our central firewall, as during my first attempts with web sign-in actually did work as expected. But at later attempts the described behavior started. At this stage the always-on VPN client had installed. But after having had the VPN disabled on a test and still experiencing the issue, I'm not sure anymore. So I will have to do some more trial and error to draw some actual conclusions.

Haven't tried pin reset yet, but will have a try tomorrow. Expecting same behavior as yours.

I can confirm firewall is NOT the cause, i have tried it on machines with no firewall.

Since it was crickets when i asked about this issue on reddit, i think its highly likely to be related to a setting in the baselines.

[PZan]

There's a lot of various issues in the comments section in this blog. This one in particular is very similar to the issue described here, but it appears to be related to an update released after your post was created, so maybe not related and also the conversation stalled prematurely.

Either way, I have some scenarios that I'm want to try out, but unfortunately it seems I won't have time until next week. Can you confirm if you're testing with a standard user (non-admin), and what your UAC policy looks like?

[incedIT]

Potentially being fixed in November Cumulative update.

[mike240se]

Potentially being fixed in November Cumulative update.

oh that would be great, I wonder if it will fix the same issue with the pin reset. However, has anyone tried web signin WITHOUT running the baselines?

[incedIT]

Potentially being fixed in November Cumulative update.

oh that would be great, I wonder if it will fix the same issue with the pin reset. However, has anyone tried web signin WITHOUT running the baselines?

I haven't but the web sign in issue is widely reported on 24H2, so I don't think it is related to the OIB at all.

[mike240se]

Potentially being fixed in November Cumulative update.

oh that would be great, I wonder if it will fix the same issue with the pin reset. However, has anyone tried web signin WITHOUT running the baselines?

I haven't but the web sign in issue is widely reported on 24H2, so I don't think it is related to the OIB at all.

Curious if you have tried pin reset? It seems like whatever web sign in does (loads a cloud app) is the same way pin reset works and its also broke.

[incedIT]

Potentially being fixed in November Cumulative update.

oh that would be great, I wonder if it will fix the same issue with the pin reset. However, has anyone tried web signin WITHOUT running the baselines?

I haven't but the web sign in issue is widely reported on 24H2, so I don't think it is related to the OIB at all.

Curious if you have tried pin reset? It seems like whatever web sign in does (loads a cloud app) is the same way pin reset works and its also broke.

I haven't tried, but if it opens the same window then I would expect it to fail just like web sign-in. Some info here about the process that crashes.