From 4dee80e6434f6c12b6d5fd0480daa9fc397d72d2 Mon Sep 17 00:00:00 2001
From: "JerryAbo [MSFT]" <94194023+jerryabo@users.noreply.github.com>
Date: Mon, 9 May 2022 16:24:12 -0500
Subject: [PATCH] Update policy-csp-devicelock.md

Added important note to detail expected behavior more clearly on password policy change enforcement behavior. For additional context, refer to incident 302235684 and/or contact jerryabo.
---
 windows/client-management/mdm/policy-csp-devicelock.md | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/windows/client-management/mdm/policy-csp-devicelock.md b/windows/client-management/mdm/policy-csp-devicelock.md
index 750efe50ed..5dc9d73e81 100644
--- a/windows/client-management/mdm/policy-csp-devicelock.md
+++ b/windows/client-management/mdm/policy-csp-devicelock.md
@@ -72,6 +72,9 @@ manager: dansimp
 
 <hr/>
 
+> [!Important]
+> The DeviceLock CSP utilizes the [Exchange ActiveSync Policy Engine](/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/dn282287(v=ws.11)). When password length and complexity rules are applied, all the local user and administrator accounts are marked to change their password at the next sign in to ensure complexity requirements are met. For additional information, see [Password length and complexity supported by account types](/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/dn282287(v=ws.11)#password-length-and-complexity-supported-by-account-types)).
+
 <!--Policy-->
 <a href="" id="devicelock-allowidlereturnwithoutpassword"></a>**DeviceLock/AllowIdleReturnWithoutPassword**