Which method is more secure?

For my office, I have all employees using a randomly generated password that has 32 characters. My employees don't know the password as it is saved on a yubikey to get into windows. It's not using the rolling passwords that yubikey can do because I don't have access to our head office Azure server, so I can only secure the local machine with a static password.

One employee has purchased a new laptop and wants to use her fingerprint scanner. …

access azure characters cybersecurity don employees generated head office password passwords server windows yubikey