In order to make sure the users have Windows Hello configured, here is a step-by-step guide that will take you through the process of creating creating a Powershell script which will detect Windows Hello status and Prompt the user if not configured

Follow the steps bellow to implement a script to run on startup:

Execute Powershell script during Login using GPO

Launch the Group Policy Management Console by running GPMC.msc with administrator privileges. You can also launch the GPMC from the Tools menu of Server Manager.
Right-click on the domain name and select the option “Create a GPO in this domain, and Link it here”.
You will then see a window asking for a name for the new GPO.
In the Group Policy Manager window, browse for the GPO that you just created, right-click on it and click on Edit.
This will open the Group Policy Management Editor, which will show a neutral folder location.
Go to “User Settings > Policies > Windows Settings > Scripts (Logon/Logoff)”.
Then, right-click on “Logon” and select “Properties”. Then, click on the “PowerShell scripts” tab.
Click on the Add and search for script click on it.

Your GPO and script should now be configured. To check this, go to the Group Policy Manager, search for your GPO. Then, check its status and see if it is linked to the script.

Powershell Detection script:

WH Using GPO

Windows Hello👋