📍 Step 1: Access Intune Admin Center

1. Sign in to Microsoft Intune Admin Center.

2. Navigate:
   Devices → Configuration → Create

⚙️ Step 2: Create a New Profile

1. Platform: Select Windows 10 and later.

2. Profile Type: Choose Templates → Settings catalog.

3. Click Create.

   📝 Step 3: Configure Basics

4. Name: E.g., "WHfB - Corporate Devices" (Use clear naming!).

5. Description: Optional but recommended (e.g., "Enables biometric/PIN auth for assigned groups").

6. Click Next.

🔐 Step 4: Enable WHfB Settings

Under Configuration Settings:

1. Configure Windows Hello for Business: Enable

2. Use security keys for sign-in: Enable (if using FIDO2 keys).

3. Click Next.

👥 Step 5: Assign Groups

1. Assign to: Select user/device groups (e.g., "All Corporate Laptops").

2. Click Next.

✅ Step 7: Review & Deploy

1. Verify all settings.

2. Click Create to deploy.