Hello,
Thank you for posting in Microsoft Q&A.
Based on the description, I understand your question is related to admx file which contains Computer Configuration\Administrative Templates\Windows Components\Windows Hello for Business\Use cloud Kerberos trust for on-premises authentication.
This policy setting is only available as a computer configuration. You may need to update your Group Policy definitions to be able to configure the cloud Kerberos trust policy. The ADMX and ADML files for Windows Hello for Business settings are in the Passport.admx and Passport.adml files. You can copy these files from a Windows client that supports cloud Kerberos trust to their respective language folder on your Group Policy management server.
Here is a reference link for the detailed instructions:
The ADMX file for Windows Hello for Business settings, including the "Use cloud Kerberos trust for on-premises authentication" policy, is located in the Passport.admx and Passport.adml files. You can configure this policy setting in the computer or user node of a GPO, here is the reference link:
Have a nice day.
Best Regards,
Molly
============================================
If the Answer is helpful, please click "Accept Answer" and upvote it