I'm tasked with implementing an updated password policy for our company's logins on Windows devices, including laptops and our identity provider (IdP). Setting this up on Mac systems with Jamf is straightforward, but I'm struggling with Windows because these machines rely on the user's Microsoft account password. In the Microsoft Admin interface, I can only configure password age which isn't enough.
To clarify my confusion: I understand that group policy objects (GPOs) can be applied to computers, but how do they interact with the Microsoft password? Specifically, if a GPO enforces a password policy, does it compel users to change their Microsoft account password as a result?
4 Answers
Instead of using old password policies, consider reevaluating your access controls. You might want to opt for longer passwords and simplify the complexity requirements according to the latest NIST recommendations. It could make enforcing policy more straightforward!
If you're using Entra ID, you can set the password policy in Intune, assuming you have the right licenses. This would apply to users enrolled in Intune, ensuring their Microsoft account passwords follow your company policy.
You mentioned using a Microsoft account, but in a business setting, computers usually run on Active Directory or more recently, Entra ID accounts. This could be where the confusion lies. Microsoft accounts are generally for personal use instead of managed company devices.
You really need to have the right infrastructure for this to work smoothly. You have options like Intune or Group Policy for on-premises domains. Don’t try to build a solution from scratch; these tools are designed to handle these scenarios for you without reinventing the wheel.
Related Questions
Can't Load PhpMyadmin On After Server Update
Redirect www to non-www in Apache Conf
How To Check If Your SSL Cert Is SHA 1
Windows TrackPad Gestures