Relution Signet Customer Hub

Passcode

The Passcode policy configuration defines the requirements a device password has to meet on managed Windows devices, and how the device behaves on inactivity or failed sign-in attempts.

As soon as the configuration is assigned, Relution enables the password-based device lock on the device. This setting is always active and cannot be switched off in the configuration.

Configuration options

  • Allow simple passwords — Specifies whether PINs or passwords such as “1111” or “1234” are allowed. Enabled by default.
  • Minimum passcode length — Minimum number of characters of the password (4–16). Default value is 4.
  • Passcode Quality — Specifies whether a passcode should be numeric (e.g. “1042”), alphanumeric (e.g. “A42B”) or free to choose. Default value is Alphanumeric.
  • Minimum passcode age (in days) — Period of time (in days) that a password must be used before the user can change it (0–41). Default value is 0 – changes are allowed immediately. If a maximum age is set, the value must be smaller than the maximum age.
  • Maximum passcode age (in days) — Number of days until the password expires (0–730). Default value is 0 – passwords do not expire.
  • Passcode history — Number of most recent passwords that cannot be reused (0–24). Default value is 0 – the current password can be changed to any password, even the same one. With a setting of 1 the user cannot reuse the current password; a setting of 5 means that neither the current password nor any of the previous four passwords can be reused.
  • Idle time before display is locked — Time in minutes (0–999) that the device can remain idle before it is locked and the PIN or password has to be entered. Default value is 0 – the device does not lock.
  • Number of failed passcode attempts before all data is erased — Number of failed sign-in attempts after which the device is put into BitLocker recovery mode (0–16). The data is then inaccessible but recoverable; the device is not reset to factory settings. BitLocker has to be enabled. Default value is 0 – disabled.

The minimum passcode age is transferred from Windows 10 version 1709, the maximum passcode age and the passcode history from version 1511. On older versions these values are not set.

Passcode Quality

Three values are available for Passcode Quality:

  • Numeric
  • Alphanumeric (default)
  • User choice