{"id":4778,"date":"2023-05-25T08:30:14","date_gmt":"2023-05-25T15:30:14","guid":{"rendered":"https:\/\/SUMMALAI.COM\/?p=4778"},"modified":"2023-05-25T08:30:16","modified_gmt":"2023-05-25T15:30:16","slug":"how-to-deploy-password-policies-using-intune-configuration-profiles-device-restriction","status":"publish","type":"post","link":"https:\/\/SUMMALAI.COM\/?p=4778","title":{"rendered":"How to Deploy Password Policies Using Intune Configuration Profiles | Device Restriction"},"content":{"rendered":"\n<p>By\u00a0<a href=\"https:\/\/howtomanagedevices.com\/author\/anoopcnair\/\">Anoop C Nair<\/a><\/p>\n\n\n\n<p>Let\u2019s learn how to deploy password policies using Intune on Windows 10 devices. We use Intune device restriction profile to deploy password policies for Intune managed Windows 10 devices.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Steps to Configure Device Restrictions Password Policies<\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li>Login to&nbsp;<strong>EndPoint.Microsoft.com<\/strong><\/li><li>Navigate to Devices \u2013 Configuration Profiles \u2013&nbsp;<strong>+ Create Profile<\/strong><\/li><li>Select Platform as&nbsp;<strong>Windows 10 and Later<\/strong><\/li><li>Select Profile as&nbsp;<strong>Device Restrictions<\/strong><\/li><li>Click on&nbsp;<strong>Create<\/strong>&nbsp;button<\/li><\/ul>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/howtomanagedevices.com\/wp-content\/uploads\/2020\/05\/image-72-1024x365.png\" alt=\"Deploy Password Policies using Intune Configuration Profiles\" class=\"wp-image-2417\" title=\"Deploy Password Policies using Intune Configuration Profiles | Device Restriction 1\"\/><figcaption>Deploy Password Policies using Intune Configuration Profiles<\/figcaption><\/figure>\n\n\n\n<ul class=\"wp-block-list\"><li>Enter the&nbsp;<strong>Name<\/strong>&nbsp;of the Intune Configuration Profile \u2013 HTMD Password Policy<\/li><li>Enter the&nbsp;<strong>Description&nbsp;<\/strong>HTMD Password policy using Intune out of box configuration profiles<\/li><li>Click on&nbsp;<strong>Next<\/strong>&nbsp;button<\/li><li>Click on&nbsp;<strong>Password&nbsp;<\/strong>Section from Configuration Settings<\/li><\/ul>\n\n\n\n<p><strong>NOTE!&nbsp;<\/strong>\u2013 Make sure none of the other settings are configured if you want to deploy only password policy.<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/howtomanagedevices.com\/wp-content\/uploads\/2020\/05\/image-73-1024x465.png\" alt=\"Deploy Password Policies using Intune Configuration Profiles\" class=\"wp-image-2419\" title=\"Deploy Password Policies using Intune Configuration Profiles | Device Restriction 2\"\/><figcaption>Deploy Password Policies using Intune Configuration Profiles<\/figcaption><\/figure>\n\n\n\n<ul class=\"wp-block-list\"><li>Let\u2019s&nbsp;<strong>configure password policies&nbsp;<\/strong>as per your security team requirements<\/li><li>The following are the configurations which I selected for HTMD Password Policy<\/li><\/ul>\n\n\n\n<pre class=\"wp-block-preformatted\"><strong>Password - Require<\/strong>\n<strong>Required Password Type - Alphanumeric\nPassword Complexicity - Numbers and Lowercase Letters Required\nMinimum password length - 6\nNumber of sign-in failures before wiping device - 11\nPassword expiration (days) - 41<\/strong><\/pre>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/howtomanagedevices.com\/wp-content\/uploads\/2020\/05\/image-74-1024x526.png\" alt=\"Deploy Password Policies using Intune Configuration Profiles | Device Restriction 1\" class=\"wp-image-2420\" title=\"Deploy Password Policies using Intune Configuration Profiles | Device Restriction 3\"\/><figcaption>Deploy Password Policies using Intune Configuration Profiles<\/figcaption><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">Event Logs<\/h2>\n\n\n\n<p>The following information might help you to troubleshoot Intune password policies deployment.<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Microsoft-Windows-<strong>DeviceManagement-Enterprise-Diagnostics-Provider\/Admin<\/strong><\/li><\/ul>\n\n\n\n<p>MDM PolicyManager: Set policy int, Policy: (MinDevicePasswordLength), Area: (DeviceLock), EnrollmentID requesting merge: (9A96DE87-65BD-437E-B915-14B601DAE840), Current User: (Device), Int: (0x6), Enrollment Type: (0x0), Scope: (0x0).<\/p>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/howtomanagedevices.com\/wp-content\/uploads\/2020\/05\/image-66-1024x334.png\" alt=\"Deploy Password Policies using Intune Configuration Profiles\" class=\"wp-image-2410\" title=\"Deploy Password Policies using Intune Configuration Profiles | Device Restriction 4\"\/><figcaption>Deploy Password Policies using Intune Configuration Profiles<\/figcaption><\/figure>\n\n\n\n<pre class=\"wp-block-preformatted\">MDM PolicyManager: Set policy int, Policy: (AlphanumericDevicePasswordRequired), Area: (DeviceLock), EnrollmentID requesting merge: (9A96DE87-65BD-437E-B915-14B601DAE840), Current User: (Device), Int: (0x0), Enrollment Type: (0x0), Scope: (0x0).<\/pre>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/howtomanagedevices.com\/wp-content\/uploads\/2020\/05\/image-67-1024x363.png\" alt=\"Deploy Password Policies using Intune Configuration Profiles | Device Restriction 2\" class=\"wp-image-2411\" title=\"Deploy Password Policies using Intune Configuration Profiles | Device Restriction 5\"\/><figcaption>Deploy Password Policies using Intune Configuration Profiles | Device Restriction 11<\/figcaption><\/figure>\n\n\n\n<pre class=\"wp-block-preformatted\">MDM PolicyManager: Set policy int, Policy: (MinDevicePasswordComplexCharacters), Area: (DeviceLock), EnrollmentID requesting merge: (9A96DE87-65BD-437E-B915-14B601DAE840), Current User: (Device), Int: (0x2), Enrollment Type: (0x0), Scope: (0x0).<\/pre>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/howtomanagedevices.com\/wp-content\/uploads\/2020\/05\/image-68-1024x294.png\" alt=\"Deploy Password Policies using Intune Configuration Profiles | Device Restriction 3\" class=\"wp-image-2412\" title=\"Deploy Password Policies using Intune Configuration Profiles | Device Restriction 6\"\/><figcaption>Deploy Password Policies using Intune Configuration Profiles | Device Restriction 12<\/figcaption><\/figure>\n\n\n\n<pre class=\"wp-block-preformatted\">MDM PolicyManager: Set policy int, Policy: (DevicePasswordEnabled), Area: (DeviceLock), EnrollmentID requesting merge: (9A96DE87-65BD-437E-B915-14B601DAE840), Current User: (Device), Int: (0x0), Enrollment Type: (0x0), Scope: (0x0).<\/pre>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/howtomanagedevices.com\/wp-content\/uploads\/2020\/05\/image-69-1024x343.png\" alt=\"Deploy Password Policies using Intune Configuration Profiles | Device Restriction 4\" class=\"wp-image-2413\" title=\"Deploy Password Policies using Intune Configuration Profiles | Device Restriction 7\"\/><figcaption>Deploy Password Policies using Intune Configuration Profiles | Device Restriction 13<\/figcaption><\/figure>\n\n\n\n<pre class=\"wp-block-preformatted\">MDM PolicyManager: Set policy int, Policy: (MaxDevicePasswordFailedAttempts), Area: (DeviceLock), EnrollmentID requesting merge: (9A96DE87-65BD-437E-B915-14B601DAE840), Current User: (Device), Int: (0xB), Enrollment Type: (0x0), Scope: (0x0).<\/pre>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/howtomanagedevices.com\/wp-content\/uploads\/2020\/05\/image-70-1024x343.png\" alt=\"Deploy Password Policies using Intune Configuration Profiles | Device Restriction 5\" class=\"wp-image-2414\" title=\"Deploy Password Policies using Intune Configuration Profiles | Device Restriction 8\"\/><figcaption>Deploy Password Policies using Intune Configuration Profiles<\/figcaption><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">Registry Entries<\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li>Computer\\HKEY_LOCAL_MACHINE\\SOFTWARE\\<strong>Microsoft\\PolicyManager\\Providers<\/strong>\\9A96DE87-65BD-437E-B915-14B601DAE840\\<strong>default\\Device\\DeviceLock<\/strong><ul><li>AlphanumericDevicePasswordRequired = 0<\/li><li>DevicePasswordEnabled = 0<\/li><li>MaxDevicePasswordFailedAttempts = 11<\/li><li>MinDevicePasswordComplexCharacters = 2<\/li><li>MinDevicePasswordLength = 6<\/li><\/ul><\/li><\/ul>\n\n\n\n<figure class=\"wp-block-image\"><img decoding=\"async\" src=\"https:\/\/howtomanagedevices.com\/wp-content\/uploads\/2020\/05\/image-71-1024x237.png\" alt=\"Deploy Password Policies using Intune Configuration Profiles | Device Restriction 6\" class=\"wp-image-2415\" title=\"Deploy Password Policies using Intune Configuration Profiles | Device Restriction 9\"\/><figcaption>Deploy Password Policies using Intune Configuration Profiles | Device Restriction 14<\/figcaption><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">Video Deploy Password Policies using Intune<\/h2>\n\n\n\n<p><a href=\"https:\/\/youtu.be\/ZDYHEsMUtac\" target=\"_blank\" rel=\"noreferrer noopener\">Watch this video on YouTube<\/a>. Deploy Password Policies using Intune<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Resources<\/h2>\n\n\n\n<ul class=\"wp-block-list\"><li>\u2714\u00a0<a href=\"https:\/\/docs.microsoft.com\/en-us\/mem\/intune\/configuration\/device-restrictions-configure\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/docs.microsoft.com\/en-us\/mem\/intune\/configuration\/device-restrictions-configure<\/a><\/li><li>\u2714\u00a0<a href=\"https:\/\/docs.microsoft.com\/en-us\/mem\/intune\/configuration\/device-restrictions-windows-10\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/docs.microsoft.com\/en-us\/mem\/intune\/configuration\/device-restrictions-windows-10<\/a><\/li><li>\u2714<a href=\"https:\/\/docs.microsoft.com\/en-us\/windows\/client-management\/mdm\/policy-csp-devicelock\" target=\"_blank\" rel=\"noreferrer noopener\">https:\/\/docs.microsoft.com\/en-us\/windows\/client-management\/mdm\/policy-csp-devicelock<\/a><\/li><li><a href=\"https:\/\/howtomanagedevices.com\/intune\/1671\/intune-administrative-template\/\" target=\"_blank\" rel=\"noreferrer noopener\">Create Deploy Group Policy Using Intune Administrative Template<\/a><\/li><\/ul>\n\n\n\n<p>Ref: https:\/\/howtomanagedevices.com\/intune\/2409\/password-policies-using-intune\/<\/p>\n","protected":false},"excerpt":{"rendered":"<p>By\u00a0Anoop C Nair Let\u2019s learn how to deploy password policies using Intune on Windows 10 devices. We use Intune device restriction profile to deploy password policies for Intune managed Windows 10 devices. Steps to Configure Device Restrictions Password Policies Login to&nbsp;EndPoint.Microsoft.com Navigate to Devices \u2013 Configuration Profiles \u2013&nbsp;+ Create Profile Select Platform as&nbsp;Windows 10 and <a class=\"read-more\" href=\"https:\/\/SUMMALAI.COM\/?p=4778\">Read More<\/a><\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_bbp_topic_count":0,"_bbp_reply_count":0,"_bbp_total_topic_count":0,"_bbp_total_reply_count":0,"_bbp_voice_count":0,"_bbp_anonymous_reply_count":0,"_bbp_topic_count_hidden":0,"_bbp_reply_count_hidden":0,"_bbp_forum_subforum_count":0,"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[1185,1249,10],"tags":[1612,1611],"class_list":["post-4778","post","type-post","status-publish","format-standard","hentry","category-autopilot-intune","category-azure-microsoft","category-microsoft","tag-deploy-password-policies-device-restriction","tag-deploy-password-policies-intune"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/SUMMALAI.COM\/index.php?rest_route=\/wp\/v2\/posts\/4778","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/SUMMALAI.COM\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/SUMMALAI.COM\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/SUMMALAI.COM\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/SUMMALAI.COM\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=4778"}],"version-history":[{"count":1,"href":"https:\/\/SUMMALAI.COM\/index.php?rest_route=\/wp\/v2\/posts\/4778\/revisions"}],"predecessor-version":[{"id":4779,"href":"https:\/\/SUMMALAI.COM\/index.php?rest_route=\/wp\/v2\/posts\/4778\/revisions\/4779"}],"wp:attachment":[{"href":"https:\/\/SUMMALAI.COM\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=4778"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/SUMMALAI.COM\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=4778"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/SUMMALAI.COM\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=4778"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}