6.4 KiB
title, description, ms.author, ms.localizationpriority, ms.topic, ms.prod, ms.technology, author, ms.date, ms.reviewer, manager
| title | description | ms.author | ms.localizationpriority | ms.topic | ms.prod | ms.technology | author | ms.date | ms.reviewer | manager |
|---|---|---|---|---|---|---|---|---|---|---|
| Policy CSP - ADMX_AdmPwd | Policy CSP - ADMX_AdmPwd | dansimp | medium | article | w10 | windows | manikadhiman | 11/09/2020 | dansimp |
Policy CSP - ADMX_AdmPwd
Tip
This is an ADMX-backed policy and requires a special SyncML format to enable or disable. For details, see Understanding ADMX-backed policies.
You must specify the data type in the SyncML as <Format>chr</Format>. For an example SyncML, refer to Enabling a policy.
The payload of the SyncML must be XML-encoded; for this XML encoding, there are a variety of online encoders that you can use. To avoid encoding the payload, you can use CDATA if your MDM supports it. For more information, see CDATA Sections.
ADMX_AdmPwd policies
- ADMX_AdmPwd/POL_AdmPwd_DontAllowPwdExpirationBehindPolicy
- ADMX_AdmPwd/POL_AdmPwd_Enabled
- ADMX_AdmPwd/POL_AdmPwd_AdminName
- ADMX_AdmPwd/POL_AdmPwd
ADMX_AdmPwd/POL_AdmPwd_DontAllowPwdExpirationBehindPolicy
| Edition | Windows 10 | Windows 11 |
|---|---|---|
| Home | No | No |
| Pro | Yes | Yes |
| Enterprise | Yes | Yes |
| Education | Yes | Yes |
[!div class = "checklist"]
- Device
When you enable this setting, planned password expiration longer than password age dictated by "Password Settings" policy is NOT allowed. When such expiration is detected, password is changed immediately and password expiration is set according to policy.
When you disable or not configure this setting, password expiration time may be longer than required by "Password Settings" policy.
ADMX Info:
- GP Friendly name: Do not allow password expiration time longer than required by policy
- GP name: POL_AdmPwd_DontAllowPwdExpirationBehindPolicy
- GP path: Windows Components\AdmPwd
- GP ADMX file name: AdmPwd.admx
ADMX_AdmPwd/POL_AdmPwd_Enabled
| Edition | Windows 10 | Windows 11 |
|---|---|---|
| Home | No | No |
| Pro | Yes | Yes |
| Enterprise | Yes | Yes |
| Education | Yes | Yes |
[!div class = "checklist"]
- Device
This policy enables the management of password for local administrator account
If you enable this setting, local administrator password is managed.
If you disable or not configure this setting, local administrator password is NOT managed.
ADMX Info:
- GP Friendly name: Enable local admin password management
- GP name: POL_AdmPwd_Enabled
- GP path: Windows Components\AdmPwd
- GP ADMX file name: AdmPwd.admx
ADMX_AdmPwd/POL_AdmPwd_AdminName
| Edition | Windows 10 | Windows 11 |
|---|---|---|
| Home | No | No |
| Pro | Yes | Yes |
| Enterprise | Yes | Yes |
| Education | Yes | Yes |
[!div class = "checklist"]
- Device
When you enable this setting, planned password expiration longer than password age dictated by "Password Settings" policy is NOT allowed. When such expiration is detected, password is changed immediately and password expiration is set according to policy.
When you disable or not configure this setting, password expiration time may be longer than required by "Password Settings" policy.
ADMX Info:
- GP Friendly name: Name of administrator account to manage
- GP name: POL_AdmPwd_AdminName
- GP path: Windows Components\AdmPwd
- GP ADMX file name: AdmPwd.admx
| Edition | Windows 10 | Windows 11 |
|---|---|---|
| Home | No | No |
| Pro | Yes | Yes |
| Enterprise | Yes | Yes |
| Education | Yes | Yes |
[!div class = "checklist"]
- Device
This policy setting enables management of password for local administrator account
If you enable this setting, local administrator password is managed
If you disable or not configure this setting, local administrator password is NOT managed.
ADMX Info:
- GP Friendly name: Password Settings
- GP name: POL_AdmPwd
- GP path: Windows Components\AdmPwd
- GP ADMX file name: AdmPwd.admx