Feb 15, 2022 Policies for Windows Hello for Business are enforced using the following hierarchy User Group Policy > Computer Group Policy > User MDM > Device MDM > Device Lock policy. If that box is grayed out, there is a larger issue at play you (or someone else) has set this feature to 0 Security, using the Registry or some other back-channel method.