Question
Your network contains an on-premises Active Directory domain and an Azure AD tenant.
The Default Domain Policy Group Policy Object (GPO) contains the settings shown in the following table.
| Name | GPO value |
|---|---|
| LockoutBadCount | 0 |
| MaximumPasswordAge | 42 |
| MinimumPasswordAge | 1 |
| MinimumPasswordLength | 7 |
| PasswordComplexity | True |
| PasswordHistorySize | 24 |
You need to migrate the existing Default Domain Policy GPO settings to a device configuration profile.
Which device configuration profile type template should you use?
- A. Administrative Templates
- B. Endpoint protection
- C. Device restrictions Correct
- D. Custom
Explanation
All the settings are account password and lockout policies, and the Windows Device restrictions template has a Password section with password expiration, minimum length, complexity, password history and the number of sign-in failures before wipe. Administrative Templates contain ADMX-backed settings and do not include account password policy. A Custom OMA-URI profile could also work but is not the least-effort template, and Endpoint protection has no password policy settings.
