Category: At least Windows 10 Server or Windows 10
Use lowercase letters
Use this policy setting to configure the use of lowercase letters in the Microsoft Passport for work PIN.If you configure this policy setting to “Allow” Microsoft Passport for Work allows users to use lowercase letters in their work PIN.If you configure this policy setting to “Disallow” Microsoft Passport for Work prevents users from using lowercase letters in their work PIN.If you configure this policy setting to “Required” Microsoft Passport for Work requires users to include at least one lowercase letter in their work PIN.If you disable or do not configure this policy setting Microsoft Passport for Work allows users to use lowercase letters in their work PIN.
Use special characters
Use this policy setting to configure the use of special characters in the Microsoft Passport for work PIN gesture. Valid special characters for Microsoft Passport for work PIN gestures include: ! ” # $ % & ‘ ( ) * + – . / : ; < = > ? @ [ -> ]
Use special characters
Use this policy setting to configure the use of special characters in the Microsoft Passport for work PIN gesture. Valid special characters for Microsoft Passport for work PIN gestures include: ! ” # $ % & ‘ ( ) * + – . / : ; < = > ? @ [ -> ]
Use digits
Use this policy setting to configure the use of digits in the Microsoft Passport for work PIN.If you configure this policy setting to “Allow” Microsoft Passport for Work allows users to use digits in their work PIN.If you configure this policy setting to “Disallow” Microsoft Passport for Work prevents users from using digits in their work PIN.If you configure this policy setting to “Required” Microsoft Passport for Work requires users to include at least one digit in their work PIN.If you disable or do not configure this policy setting Microsoft Passport for Work allows users to use digits in their work PIN.
Use Microsoft Passport for Work
Microsoft Passport for Work is an alternative method for signing into Windows using your Active Directory or Azure Active Directory account that can replace passwords Smart Cards and Virtual Smart Cards.If you enable or do not configure this policy setting the device provisions Microsoft Passport for Work for all users.If you disable this policy setting the device does not provision Microsoft Passport for Work for any user.
Use a hardware security device
A Trusted Platform Module (TPM) provides additional security benefits over software because data stored within it cannot be used on other devices.If you enable this policy setting only devices with a usable TPM provision Microsoft Passport for Work.If you disable this policy setting all devices provision Microsoft Passport for Work using software even if there is a usable TPM.If you do not configure this policy setting all devices provision Microsoft Passport for Work using software if the TPM is non-functional or unavailable.