MDM_Policy_Config01_DeviceLock02 class

[Some information relates to pre-released product which may be substantially modified before it's commercially released. Microsoft makes no warranties, express or implied, with respect to the information provided here.]

The MDM_Policy_Config01_DeviceLock02 class represents the device lock policies available.

The following syntax is simplified from MOF code and includes all inherited properties.

Syntax

[InPartition("local-system"), dynamic, provider("DMWmiBridgeProv")]
class MDM_Policy_Config01_DeviceLock02
{
  string InstanceID;
  string ParentID;
  sint32 AllowScreenTimeoutWhileLockedUserConfig;
  sint32 AllowSimpleDevicePassword;
  sint32 AlphanumericDevicePasswordRequired;
  sint32 DevicePasswordEnabled;
  sint32 DevicePasswordExpiration;
  sint32 DevicePasswordHistory;
  string EnforceLockScreenAndLogonImage;
  string EnforceLockScreenProvider;
  sint32 MinimumPasswordAge;
  sint32 MaxDevicePasswordFailedAttempts;
  sint32 MaxInactivityTimeDeviceLock;
  sint32 MinDevicePasswordComplexCharacters;
  sint32 MinDevicePasswordLength;
  sint32 ScreenTimeoutWhileLocked;
  string PreventLockScreenSlideShow;
};

Members

The MDM_Policy_Config01_DeviceLock02 class has these types of members:

Properties

The MDM_Policy_Config01_DeviceLock02 class has these properties.

AllowScreenTimeoutWhileLockedUserConfig

Data type: sint32

Access type: Read/write

AllowSimpleDevicePassword

Data type: sint32

Access type: Read/write

AlphanumericDevicePasswordRequired

Data type: sint32

Access type: Read/write

DevicePasswordEnabled

Data type: sint32

Access type: Read/write

DevicePasswordEnabled should not be set to Enabled (0) when WMI is used to set the EAS DeviceLock policies given that it is Enabled by default in Policy CSP for back compat with Windows 8.x. If DevicePasswordEnabled is set to Enabled(0) then Policy CSP will return an error stating that DevicePasswordEnabled already exists. Windows 8.x did not support DevicePassword policy. When disabling DevicePasswordEnabled (1) then this should be the only policy set from the DeviceLock group of policies below. The policies are listed below: > - DevicePasswordEnabled is the parent policy of the following:

  • DevicePasswordEnabled is the parent policy of the following:
    • AllowSimpleDevicePassword
    • MinDevicePasswordLength
    • AlphanumericDevicePasswordRequired is the parent policy of:
      • MinDevicePasswordComplexCharacters
    • MaxDevicePasswordFailedAttempts
    • MaxInactivityTimeDeviceLock

DevicePasswordExpiration

Data type: sint32

Access type: Read/write

DevicePasswordHistory

Data type: sint32

Access type: Read/write

EnforceLockScreenAndLogonImage

Data type: string

Access type: Read/write

EnforceLockScreenProvider

Data type: string

Access type: Read/write

InstanceID

Data type: string

Access type: Read-only

Qualifiers: key

Identifies the name of the parent node. For this class, the string is "DeviceLock".

MaxDevicePasswordFailedAttempts

Data type: sint32

Access type: Read/write

MaxInactivityTimeDeviceLock

Data type: sint32

Access type: Read/write

MinDevicePasswordComplexCharacters

Data type: sint32

Access type: Read/write

MinDevicePasswordLength

Data type: sint32

Access type: Read/write

MinimumPasswordAge

Data type: sint32

Access type: Read/write

ParentID

Data type: string

Access type: Read-only

Qualifiers: key

Describes the full path to the parent node. For this class, the string is "./Vendor/MSFT/Policy/Config"

PreventLockScreenSlideShow

Data type: string

Access type: Read/write

ScreenTimeoutWhileLocked

Data type: sint32

Access type: Read/write

Requirements

Requirement Value
Minimum supported client
Windows 10 [desktop apps only]
Minimum supported server
None supported
Namespace
Root\CIMv2\MDM\DMMap
MOF
DMWmiBridgeProv.mof
DLL
DMWmiBridgeProv.dll

See also

Using PowerShell scripting with the WMI Bridge Provider