This policy allows you to configure the following two settings:
Section 11.1.1, Enabling Sharing of Authenticators for the Helpdesk Administrators
Section 11.1.2, Disabling Re-Enrollment of the Authenticators