Category: At least Windows 10 Server or Windows 10

This policy setting lets you configure the entire recovery message or replace the existing URL that are displayed on the pre-boot key recovery screen when the OS drive is locked.If you select the “Use default recovery message and URL” option the default BitLocker recovery message and URL will be displayed in the pre-boot key recovery screen. If you have previously configured a custom recovery message or URL and want to revert to the default message you must keep the policy enabled and select the “Use default recovery message and URL” option.If you select the “Use custom recovery message” option the message you type in the “Custom recovery message option” text box will be displayed in the pre-boot key recovery screen. If a recovery URL is available include it in the message.If you select the “Use custom recovery URL” option the URL you type in the “Custom recovery URL option” text box will replace the default URL in the default recovery message which will be displayed in the pre-boot key recovery screen.Note: Not all characters and languages are supported in pre-boot. It is strongly recommended that you test that the characters you use for the custom message or URL appear correctly on the pre-boot recovery screen.

Microsoft Passport for Work enables users to use biometric gestures such as face and fingerprints as an alternative to the PIN gesture. However users must still configure a work PIN to use in case of failures.If you enable this policy setting Microsoft Passport for Work allows the use biometric gestures on.If you disable this policy setting Microsoft Passport for Work prevents the use of biometric gestures.If you do not configure this policy setting Microsoft Passport for Work allows the use of biometric gestures.NOTE: Disabling this policy prevents the user of biometric gestures on the device for all account types.

Minimum PIN length configures the minimum number of characters required for the work PIN. The lowest number you can configure for this policy setting is 4. The largest number you can configure must be less than the number configured in the Maximum PIN length policy setting or the number 127 whichever is the lowest.If you configure this policy setting the work PIN length must be greater than or equal to this number.If you disable or do not configure this policy setting the work PIN length must be greater than or equal to 4.NOTE: If the above specified conditions for the minimum PIN length are not met default values will be used for both the maximum and minimum PIN lengths.

Maximum PIN length configures the maximum number of characters allowed for the work PIN. The largest number you can configure for this policy setting is 127. The lowest number you can configure must be larger than the number configured in the Minimum PIN length policy setting or the number 4 whichever is greater.If you configure this policy setting the work PIN length must be less than or equal to this number.If you disable or do not configure this policy setting the work PIN length must be less than or equal to 127.NOTE: If the above specified conditions for the maximum PIN length are not met default values will be used for both the maximum and minimum PIN lengths.

Use this policy setting to configure the use of uppercase letters in the Microsoft Passport for work PIN.If you configure this policy setting to “Allow” Microsoft Passport for Work allows users to use uppercase letters in their work PIN.If you configure this policy setting to “Disallow” Microsoft Passport for Work prevents users from using uppercase letters in their work PIN.If you configure this policy setting to “Required” Microsoft Passport for Work requires users to include at least one uppercase letter in their work PIN.If you disable or do configure this policy setting Microsoft Passport for Work allows users to use uppercase letters in their work PIN.

Use this policy setting to configure the use of lowercase letters in the Microsoft Passport for work PIN.If you configure this policy setting to “Allow” Microsoft Passport for Work allows users to use lowercase letters in their work PIN.If you configure this policy setting to “Disallow” Microsoft Passport for Work prevents users from using lowercase letters in their work PIN.If you configure this policy setting to “Required” Microsoft Passport for Work requires users to include at least one lowercase letter in their work PIN.If you disable or do not configure this policy setting Microsoft Passport for Work allows users to use lowercase letters in their work PIN.