Defaultuser100000 causing Intune Device Compliance errors

Nathan M 1 Reputation point
2020-08-24T23:10:57.923+00:00

I’ve been looking at this issue and wondering if anyone else has seen it. A lot of Win10 machines I have enrolled in Intune are triggering an error on the System Security -> Password expiration (days) in the Windows 10 Compliance Policy. I see this in the Windows Event Log:

MDM PolicyManager: Set policy precheck precheck call. Policy: (DeviceLock), Area: (DevicePasswordExpiration), int value: (0x3C) Result:(0x80550009) There are other standard users present who are not allowed to change their password..

It’s trigger from the Defaultuser100000 which is set up by Self Service Password Reset (SSPR) and maybe the Windows 10 Upgrade. If I delete that account, the error resolves and the device tests as compliant.

I could write a script and deploy it with Intune to delete that account but I’d rather not, I’m concerned it could have unintended side effects on the machine, especially with SSPR.

Anyone else seen this before and have any ideas on how to approach fixing it?

Microsoft Intune Configuration
Microsoft Intune Configuration
Microsoft Intune: A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.Configuration: The process of arranging or setting up computer systems, hardware, or software.
1,783 questions
Microsoft Intune
Microsoft Intune
A Microsoft cloud-based management solution that offers mobile device management, mobile application management, and PC management capabilities.
4,656 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. CiciWu-MSFT 1,206 Reputation points
    2020-08-25T03:15:42.707+00:00

    We have met the similar issue that is because on the client devices, there are local user accounts, which have a value set for "User cannot change password" or "Password never expires".
    20062-082502.png

    And the solution is on the client devices, open the Computer Management snap-in, and navigate to Local Users and Groups – Users. Please choose and double click the local user accounts and uncheck the User cannot change password and Password never expires options.
    20039-082503.png

    References
    • Windows 10 Compliance Policy settings

    If the response is helpful, please click "Accept Answer" and upvote it.

    0 comments