windows10CompliancePolicy resource type

Namespace: microsoft.graph

Important: Microsoft Graph APIs under the /beta version are subject to change; production use is not supported.

Note: The Microsoft Graph API for Intune requires an active Intune license for the tenant.

This class contains compliance settings for Windows 10.

Inherits from deviceCompliancePolicy

Methods

Method	Return Type	Description
List windows10CompliancePolicies	windows10CompliancePolicy collection	List properties and relationships of the windows10CompliancePolicy objects.
Get windows10CompliancePolicy	windows10CompliancePolicy	Read properties and relationships of the windows10CompliancePolicy object.
Create windows10CompliancePolicy	windows10CompliancePolicy	Create a new windows10CompliancePolicy object.
Delete windows10CompliancePolicy	None	Deletes a windows10CompliancePolicy.
Update windows10CompliancePolicy	windows10CompliancePolicy	Update the properties of a windows10CompliancePolicy object.

Properties

Property	Type	Description
roleScopeTagIds	String collection	List of Scope Tags for this Entity instance. Inherited from deviceCompliancePolicy
id	String	Key of the entity. Inherited from deviceCompliancePolicy
createdDateTime	DateTimeOffset	DateTime the object was created. Inherited from deviceCompliancePolicy
description	String	Admin provided description of the Device Configuration. Inherited from deviceCompliancePolicy
lastModifiedDateTime	DateTimeOffset	DateTime the object was last modified. Inherited from deviceCompliancePolicy
displayName	String	Admin provided name of the device configuration. Inherited from deviceCompliancePolicy
version	Int32	Version of the device configuration. Inherited from deviceCompliancePolicy
passwordRequired	Boolean	Require a password to unlock Windows device.
passwordBlockSimple	Boolean	Indicates whether or not to block simple password.
passwordRequiredToUnlockFromIdle	Boolean	Require a password to unlock an idle device.
passwordMinutesOfInactivityBeforeLock	Int32	Minutes of inactivity before a password is required.
passwordExpirationDays	Int32	The password expiration in days.
passwordMinimumLength	Int32	The minimum password length.
passwordMinimumCharacterSetCount	Int32	The number of character sets required in the password.
passwordRequiredType	requiredPasswordType	The required password type. Possible values are: deviceDefault, alphanumeric, numeric.
passwordPreviousPasswordBlockCount	Int32	The number of previous passwords to prevent re-use of.
requireHealthyDeviceReport	Boolean	Require devices to be reported as healthy by Windows Device Health Attestation.
osMinimumVersion	String	Minimum Windows 10 version.
osMaximumVersion	String	Maximum Windows 10 version.
mobileOsMinimumVersion	String	Minimum Windows Phone version.
mobileOsMaximumVersion	String	Maximum Windows Phone version.
earlyLaunchAntiMalwareDriverEnabled	Boolean	Require devices to be reported as healthy by Windows Device Health Attestation - early launch antimalware driver is enabled.
bitLockerEnabled	Boolean	Require devices to be reported healthy by Windows Device Health Attestation - bit locker is enabled
secureBootEnabled	Boolean	Require devices to be reported as healthy by Windows Device Health Attestation - secure boot is enabled.
codeIntegrityEnabled	Boolean	Require devices to be reported as healthy by Windows Device Health Attestation.
memoryIntegrityEnabled	Boolean	When TRUE, indicates that Memory Integrity as known as Hypervisor-protected Code Integrity (HVCI) or Hypervisor Enforced Code Integrity protection is required to be reported as healthy by Microsoft Azure Attestion. When FALSE, indicates that Memory Integrity Protection is not required to be reported as healthy. Default value is FALSE.
kernelDmaProtectionEnabled	Boolean	When TRUE, indicates that Kernel Direct Memory Access (DMA) protection is required to be reported as healthy by Microsoft Azure Attestion. When FALSE, indicates that Kernel DMA Protection is not required to be reported as healthy. Default value is FALSE.
virtualizationBasedSecurityEnabled	Boolean	When TRUE, indicates that Virtualization-based Security is required to be reported as healthy by Microsoft Azure Attestion. When FALSE, indicates that Virtualization-based Security is not required to be reported as healthy. Default value is FALSE.
firmwareProtectionEnabled	Boolean	When TRUE, indicates that Firmware protection is required to be reported as healthy by Microsoft Azure Attestion. When FALSE, indicates that Firmware protection is not required to be reported as healthy. Devices that support either Dynamic Root of Trust for Measurement (DRTM) or Firmware Attack Surface Reduction (FASR) will report compliant for this setting. Default value is FALSE.
storageRequireEncryption	Boolean	Require encryption on windows devices.
activeFirewallRequired	Boolean	Require active firewall on Windows devices.
defenderEnabled	Boolean	Require Windows Defender Antimalware on Windows devices.
defenderVersion	String	Require Windows Defender Antimalware minimum version on Windows devices.
signatureOutOfDate	Boolean	Require Windows Defender Antimalware Signature to be up to date on Windows devices.
rtpEnabled	Boolean	Require Windows Defender Antimalware Real-Time Protection on Windows devices.
antivirusRequired	Boolean	Require any Antivirus solution registered with Windows Decurity Center to be on and monitoring (e.g. Symantec, Windows Defender).
antiSpywareRequired	Boolean	Require any AntiSpyware solution registered with Windows Decurity Center to be on and monitoring (e.g. Symantec, Windows Defender).
validOperatingSystemBuildRanges	operatingSystemVersionRange collection	The valid operating system build ranges on Windows devices. This collection can contain a maximum of 10000 elements.
deviceThreatProtectionEnabled	Boolean	Require that devices have enabled device threat protection.
deviceThreatProtectionRequiredSecurityLevel	deviceThreatProtectionLevel	Require Device Threat Protection minimum risk level to report noncompliance. Possible values are: unavailable, secured, low, medium, high, notSet.
configurationManagerComplianceRequired	Boolean	Require to consider SCCM Compliance state into consideration for Intune Compliance State.
tpmRequired	Boolean	Require Trusted Platform Module(TPM) to be present.
deviceCompliancePolicyScript	deviceCompliancePolicyScript

Relationships

Relationship	Type	Description
scheduledActionsForRule	deviceComplianceScheduledActionForRule collection	The list of scheduled action per rule for this compliance policy. This is a required property when creating any individual per-platform compliance policies. Inherited from deviceCompliancePolicy
deviceStatuses	deviceComplianceDeviceStatus collection	List of DeviceComplianceDeviceStatus. Inherited from deviceCompliancePolicy
userStatuses	deviceComplianceUserStatus collection	List of DeviceComplianceUserStatus. Inherited from deviceCompliancePolicy
deviceStatusOverview	deviceComplianceDeviceOverview	Device compliance devices status overview Inherited from deviceCompliancePolicy
userStatusOverview	deviceComplianceUserOverview	Device compliance users status overview Inherited from deviceCompliancePolicy
deviceSettingStateSummaries	settingStateDeviceSummary collection	Compliance Setting State Device Summary Inherited from deviceCompliancePolicy
assignments	deviceCompliancePolicyAssignment collection	The collection of assignments for this compliance policy. Inherited from deviceCompliancePolicy

JSON Representation

Here is a JSON representation of the resource.

{
  "@odata.type": "#microsoft.graph.windows10CompliancePolicy",
  "roleScopeTagIds": [
    "String"
  ],
  "id": "String (identifier)",
  "createdDateTime": "String (timestamp)",
  "description": "String",
  "lastModifiedDateTime": "String (timestamp)",
  "displayName": "String",
  "version": 1024,
  "passwordRequired": true,
  "passwordBlockSimple": true,
  "passwordRequiredToUnlockFromIdle": true,
  "passwordMinutesOfInactivityBeforeLock": 1024,
  "passwordExpirationDays": 1024,
  "passwordMinimumLength": 1024,
  "passwordMinimumCharacterSetCount": 1024,
  "passwordRequiredType": "String",
  "passwordPreviousPasswordBlockCount": 1024,
  "requireHealthyDeviceReport": true,
  "osMinimumVersion": "String",
  "osMaximumVersion": "String",
  "mobileOsMinimumVersion": "String",
  "mobileOsMaximumVersion": "String",
  "earlyLaunchAntiMalwareDriverEnabled": true,
  "bitLockerEnabled": true,
  "secureBootEnabled": true,
  "codeIntegrityEnabled": true,
  "memoryIntegrityEnabled": true,
  "kernelDmaProtectionEnabled": true,
  "virtualizationBasedSecurityEnabled": true,
  "firmwareProtectionEnabled": true,
  "storageRequireEncryption": true,
  "activeFirewallRequired": true,
  "defenderEnabled": true,
  "defenderVersion": "String",
  "signatureOutOfDate": true,
  "rtpEnabled": true,
  "antivirusRequired": true,
  "antiSpywareRequired": true,
  "validOperatingSystemBuildRanges": [
    {
      "@odata.type": "microsoft.graph.operatingSystemVersionRange",
      "description": "String",
      "lowestVersion": "String",
      "highestVersion": "String"
    }
  ],
  "deviceThreatProtectionEnabled": true,
  "deviceThreatProtectionRequiredSecurityLevel": "String",
  "configurationManagerComplianceRequired": true,
  "tpmRequired": true,
  "deviceCompliancePolicyScript": {
    "@odata.type": "microsoft.graph.deviceCompliancePolicyScript",
    "deviceComplianceScriptId": "String",
    "rulesContent": "binary"
  }
}