How to set 'Account lockout duration' with an intune device policy

Michèle Merlo 0 Reputation points
2024-06-05T08:26:40.42+00:00

Good morning

For the Security Recommendation "Set 'Account lockout duration' to 15 minutes or more" I want to deploy this setting with the value "15" as a device configuration policy. I know I can set the LockoutPolicy with a OMA-URI "./Device/Vendor/MSFT/Policy/Config/DeviceLock/AccountLockoutPolicy" but how can I set the specific account lockout duration setting?

Thanks in advance and have a good day!

Microsoft Intune Configuration
Microsoft Intune Configuration
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Configuration: The process of arranging or setting up computer systems, hardware, or software.
1,781 questions
Microsoft Intune
Microsoft Intune
A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.
4,645 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. ZhoumingDuan-MSFT 10,420 Reputation points Microsoft Vendor
    2024-06-06T01:41:40.5766667+00:00

    @Michèle Merlo, Thanks for posting in Q&A.

    From your description, I know you want to set specific account lockout duration setting.

    Based on the official document, the AccountLockoutPolicy setting is only available for Device, therefore, when you create a custom policy, and configure all settings, you should assign the policy to device group, then the device will apply the policy and also every user login on to this device will also be affected by this policy. Therefore, currently, there is no such way to set the specific account lockout duration setting. And it is suggested that you create the policy and assign it to device group and make it to apply all users.

    https://video2.skills-academy.com/en-us/windows/client-management/mdm/policy-csp-devicelock#accountlockoutpolicy

    Thanks for your kind understanding.

    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.