Deny Windows user logon with password, only allow Yubikey?

[kk77542 (kriimsilmm)]

I’ve searched thorugh the internet but couldn’t find anything helpful, so maybe some brighter minds can shed a light to this issue.

Is it possible to deny Windows 11 user logon with password and only allow logon via Yubikey?

I know it can be done with smartcards but there’s very limited information regardign other hardware authentication devices.

[naveenkatikam]

Please go through below linkReddit patch_tuesday_megathread

[bishop200]

You need to check the option with Windows Hello for Business. As far as I know you can’t do it, but you could reset to a very long and random password the account after having setup the Ubikey.

[Jay-Updegrove]

I don’t know that you CAN remove the password completely? Isn’t the Yubikey authentication just a really long, complex password stored on a USB device? Not sure why you’d want to remove the option anyway, in the event the user loses/breaks their key?

[jagowu]

I recall this being a check box in the users A.D. account.