question

WoodfinKurt-8615 avatar image
1 Vote"
WoodfinKurt-8615 asked Crystal-MSFT commented

Intune forcing a complex device password on enrollment

I am new to Intune, and we are setting up profiles for Bring Your Own Devices. We have a compliance policy for iOS devices. The policy requires a 4 digit numeric passcode. When an iOS device enrolls in Intune, it forces a password change for the device that is complex. I am confident that I have not configured another password policy somewhere else. We are not experiencing this problem with Android devices. Does anyone have insight on what might be causing this problem?

Kurt

mem-intune-generalmem-intune-device-configurationsmem-intune-enrollmentmem-intune-admin-center
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

PaD-7009 avatar image
1 Vote"
PaD-7009 answered

Check if Configuration profile > Device restriction > Password policy to these devices

5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

WoodfinKurt-8615 avatar image
1 Vote"
WoodfinKurt-8615 answered WoodfinKurt-8615 edited

There is no Configuration Profile setup in Intune. I even tried configuring one with the same password policies as the compliance policy and that did not work either. When I enroll the iPad, it is prompting me for a 6 digit numeric code. I thought alpha letters were required, but they are not. After enrolling it, I went back to Face ID & Passcode to try and change it back to a 4 digit code. I can click Passcode Options on the iPad, but I can only select "Custom Alphanumeric Code". I included screenshots. The first is the compliance policy and the second shows there is no configuration policy.

67489-screenshot.jpg


67506-screenshot2.jpg



screenshot.jpg (92.1 KiB)
screenshot2.jpg (44.8 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Crystal-MSFT avatar image
1 Vote"
Crystal-MSFT answered

@WoodfinKurt-8615, Based on my research, it seems the prompt from Apple telling you to enter 6 or more characters is only an Apple system recommendation. If our organization only requires a passcode that's 4 characters, we don't have to enter a 6-digit passcode. We can just enter 4 characters.
67923-image.png
https://docs.microsoft.com/en-us/mem/intune/user-help/password-does-not-meet-it-administrator-requirements#ios-passcode-requirements

Hope it can help.


If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.



image.png (42.1 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

WoodfinKurt-8615 avatar image
1 Vote"
WoodfinKurt-8615 answered Crystal-MSFT commented

It will not allow only 4 numbers, it requires 6. After enrolling it, it will not let you change it to anything less than six either. The iPad state that it is too easy to guess, and it will not let you change the passcode options. I am not using an easy passcode. I tried it with four numbers and none of them were consecutive.

Kurt

· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@WoodfinKurt-8615, From your description, I know the 6 PIN is enforced. After doing more research, I find on User Enrollment devices, if we configure any password setting, then the Simple passwords settings is automatically set to Block, and a 6 digit PIN is enforced.
68470-image.png
https://docs.microsoft.com/en-us/mem/intune/enrollment/ios-user-enrollment-supported-actions

Please check if the device is user enrollment device.


1 Vote 1 ·
image.png (37.3 KiB)

@WoodfinKurt-8615, How are things going? Could you confirm if our enrollment is user enrollment? If there's anything else we can help, feel free to let us know.

0 Votes 0 ·