Applying Passcode Requirements Company Wide

[falbrecht]

Hi

We have an issue where our passcode configuration profile got un applied to all the computers in our environments. We have 100+ devices, a mixture of M1 and Intel devices, that are largely on Big Sur 11.6 with File Vault enabled.

My fear is that if I apply the passcode configuration profile to all the computers in the company people might get locked out or experience other access issues. Would there be any issues if I applied the passcode policy company wide? Just want to avoid any issues. The policy is as follows:

Require Passcode

Enforce setting passcode on the computer.

Yes

Alphanumeric Value

Passcode must contain at least one letter and one number.

Enforced

Minimum Passcode Length

Smallest number of passcode characters allowed

8

Minimum Number of Complex Characters

Smallest number of non-alphanumeric characters allowed

1

Passcode History

Number of unique passcodes before reuse (1-50)

5

Maximum Auto-Lock

Number of minutes before the computer automatically locks

15 Minutes

Maximum Grace Period for Computer Lock

Period of inactivity before the passcode is required to unlock the computer

Lock Immediately

Maximum Number of Failed Attempts

Number of passcode entry attempts allowed before the computer is locked

10

[Hasibravo]

Hi Falbrecht, 

I am just giving you an example of passcode settings we applied on our site and its working perfect. 

you can deploy the configuration profile on few devices if all good then deploy to rest of the devices. 

Require PasscodeEnforce setting passcode on the computer.

Yes

Complex PasscodePasscode cannot contain repeating, ascending, and descending character sequences.

Enforced

Alphanumeric ValuePasscode must contain at least one letter and one number.

Enforced

Minimum Passcode LengthSmallest number of passcode characters allowed

8

Minimum Number of Complex CharactersSmallest number of non-alphanumeric characters allowed

1

Maximum Passcode AgeNumber of days until the passcode must be changed (1-730)

365

Passcode HistoryNumber of unique passcodes before reuse (1-50)

5

Maximum Auto-LockNumber of minutes before the computer automatically locks

10 Minutes

Maximum Grace Period for Computer LockPeriod of inactivity before the passcode is required to unlock the computer

Lock Immediately