Skip to content

Latest commit

 

History

History
115 lines (80 loc) · 4.98 KB

compliance-policy-create-windows-8-1.md

File metadata and controls

115 lines (80 loc) · 4.98 KB
Raw
title description keywords author ms.author manager ms.date ms.topic ms.service ms.subservice ms.localizationpriority ms.suite search.appverid ms.custom ms.collection
Windows 8.1 compliance settings in Microsoft Intune
View the device compliance settings for Windows 8.1 that you can manage with Microsoft Intune compliance policies.
lenewsad
lanewsad
dougeby
05/15/2024
reference
microsoft-intune
protect
medium
ems
MET150
intune-azure
tier3
M365-identity-device-management
compliance

Device Compliance settings for Windows 8.1 in Intune

[!INCLUDE windows-phone-81-windows-10-mobile-support]

This article lists and describes the different compliance settings you can configure on Windows 8.1 devices in Intune. As part of your mobile device management (MDM) solution, use these settings to block simple passwords, set a minimum and maximum OS version, and more.

This feature applies to:

  • Windows 8.1 and later

As an Intune administrator, use these compliance settings to help protect your organizational resources. To learn more about compliance policies, and what they do, see get started with device compliance.

Before you begin

Create a compliance policy. For Platform, select Windows 8.1 and later.

Device Properties

Operating System Version

  • Minimum OS version:
    Enter the minimum allowed version. When a device doesn't meet the minimum OS version requirement, it's reported as noncompliant. A link with information on how to upgrade is shown. The device user can choose to upgrade their device, and then get access to company resources.

  • Maximum OS version:
    Enter the maximum allowed version. When a device is using an OS version later than the version entered in the rule, access to organization resources is blocked. The device user is asked to contact their IT administrator. The device can't access organizational resources until a rule changes to allow the OS version.

Windows 8.1 PCs return a version of 3. If the OS version rule is set to Windows 8.1 for Windows, then the device is reported as noncompliant even if the device has Windows 8.1.

System Security

Password

  • Require a password to unlock mobile devices:

    • Not configured (default) - This setting isn't evaluated for compliance or noncompliance.
    • Require - Users must enter a password before they can access their device.

  • Simple passwords:

    • Not configured (default) - Users can create simple passwords like 1234 or 1111.
    • Block - Users can't create simple passwords, such as 1234 or 1111.

  • Minimum password length:
    Enter the minimum number of digits or characters that the password must have.

    For devices that run Windows and are accessed with a Microsoft account, the compliance policy fails to evaluate correctly if either of the following conditions is true:

    • Minimum password length is greater than eight characters
    • Minimum number of character sets is more than two

  • Password type:
    Choose if a password should have only Numeric characters, or if there should be a mix of numbers and other characters (Alphanumeric).

    When set to Alphanumeric, the following setting is available.

    • Number of non-alphanumeric characters in password:
      When the password type is set to Alphanumeric, specify the minimum number of character sets that the password must contain. Options include 0 to 4 sets, with a default of 1.

      The four character sets are:

      • Lowercase letters
      • Uppercase letters
      • Symbols
      • Numbers

      Setting a higher number requires the user to create a password that is more complex. For devices that are accessed with a Microsoft account, the compliance policy fails to evaluate correctly if either of the following conditions is met:

      • Minimum password length is greater than eight characters
      • Minimum number of character sets is more than two

  • Maximum minutes of inactivity before password is required:
    Enter the idle time before the user must reenter their password.

  • Password expiration (days):
    Select the number of days before the password expires, and users must create a new one.

  • Number of previous passwords to prevent reuse:
    Enter the number of previously used passwords that can't be used.

Encryption

  • Encryption of data storage on device:
    • Not configured (default)
    • Require - Use Require to encrypt data storage on your devices.

Next steps