Latest / The Windows Podcast with Fexingo: Microsoft, PC, and Enterprise Windows Conversations
Windows 11 Quietly Mandates Enterprise FIDO2 Passkey Enforcement
Microsoft has quietly updated Windows 11 Enterprise to require FIDO2 passkey enforcement for all Azure AD-joined devices, effective with the 2025 H2 feature update. In this episode, Lucas and Luna unpack what the mandate actually changes: from phishing-resistant authentication to the deprecation of password-based Azure AD join for new devices. They walk through the three-tier enforcement model (audit, require, block) and explain why this matters for IT admins managing hybrid environments. The conversation touches on deployment gotchas, the state of third-party FIDO2 security key…
The skinny
The skinny isn't ready yet — notes appear once the transcript is processed.