BenchMark Quizzes by MDFT Pro

Which device configuration policy type template should you use?

MDFT Pro has an on-premises Active Directory domain and an Azure AD tenant. The Default Domain Policy Group Policy Object (GPO) contains the following settings:

Name	GPO value
LockoutBadCount	0
MaximumPasswordAge	42
MinimumPasswordAge	1
MinimumPasswordLen	7
PasswordComplexity	True
PasswordHistorySize	24

You need to migrate the existing Default Domain Policy GPO settings to a device configuration policy. Which device configuration policy type template should you use?

Choose the correct answer from the options below.

Explanations for each answer:

Administrative Templates is incorrect. Administrative Templates (ADMX) in Intune do not support all password policy settings like 'MaximumPasswordAge' that are available in Group Policy.
Endpoint protection is incorrect. Endpoint protection policies are used for security settings like Windows Defender, not for password and account lockout policies.
Device restrictions is incorrect. Device restrictions policies in Intune do not include account lockout settings like 'LockoutBadCount' that are available in Group Policy.
Settings Catalog is correct.

Learn more about configuring password settings using the Settings Catalog in Intune.:

Using The Settings Catalog in Microsoft Intune

Exam Preparation Quiz

Which device configuration policy type template should you use?