Advanced Authentication enhances security on the domain-joined Windows workstations by providing an additional request for the Windows Hello authentication with PIN. It is required to have the Windows Hello for Business configured in the domain to allow users to authenticate with Windows Hello PIN. The Windows Hello PIN is asked separately as one more factor after the regular authentication.
NOTE:Windows Hello does not require configuration and cannot be disabled.