can't apply password complexity to W11 Home device through Intune

Admin Alain Diaz Quesada 26

Hi There

Recently we wanted to apply some basic BYOD policy for Owned devices in Intune
and whie testing on a device with W11 Home edition, the device enrolled well but can't apply the password complexity policy because the option to change password is not available in those versions it seems Home edition doesn't have local accounts and it only takes your micorosoft one but this account has already the right complexity. How can i go around this.

Lu Dai-MSFT 28,366 Reputation points

2022-12-14T02:39:41.567+00:00

@Admin Alain Diaz Quesada Thanks for posting in our Q&A.

Please understand what intune can do is based on what windows CSPs provided. Based on my research, this CSP "DeviceLock/MinDevicePasswordComplexCharacters" only supports value 1 and 2 to Microsoft Accounts.
https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-devicelock#devicelock-mindevicepasswordcomplexcharacters
Please check if the setting you configured is more than it supports.

If possible, please check if this password policy works on any other devices with Microsoft account, such as windows 11 enterprise devices or windows 10 enterprise devices.

If there is anything update, feel free to let us know.
Admin Alain Diaz Quesada 26 Reputation points

2022-12-15T08:37:54.513+00:00

Thanks for the feedback but then does this mean that i will have to do this through configuration profiles instead of compliance policies in Intune?
Lu Dai-MSFT 28,366 Reputation points

2022-12-16T02:27:36.15+00:00

@Admin Alain Diaz Quesada Thanks for your update.

It is still compliance policy. This CSP's related setting is "Password complexity" in a compliance policy.
https://learn.microsoft.com/en-us/mem/intune/protect/compliance-policy-create-windows#system-security

Share via

can't apply password complexity to W11 Home device through Intune