Forum Discussion
InTune password policy for personal disabling pattern and swipe options
Hi luvsql, Also make sure that you check the Password settings below Work profile settings:
These settings apply at the device level (the personal profile).
Remove every value or set is as you require. Then check Required password type. The default is At least numeric. Change this to what you want.
When you configure a work profile, new settings for your work profile become available and you can configure these settings by going to (on Android)
- Settings
- Search for Work Profile
- Click on Work Profile settings
One of the important settings is called Use one Lock. When a personally-owned profile is enabled, "One Lock" is configured by default to combine device and work profile passcodes. This makes it more easy for users because now they can use the device passcode and don't need to enter a new pin when switching to work profile.
If you want to know more about this, then check out my blog. I think it will help you: https://allthingscloud.blog/android-enterprise-personally-owned-devices-with-a-work-profile-and-device-pin/
Also did a video around the end-user experience on personal Android devices with work profiles. You can find the video in my blog or jump https://youtu.be/Z1x8Nyg2s_w.
Moe_Kinani hope you don't mind me jumping in 😉
- If we can't change the One Lock setting to be disabled, then any setting we set for the work profile overrides the settings for the personal side. I've tried multiple types (Device Default which I've read is being deprecated, at least numeric then just to required) but any setting still has the swipe and pattern disabled on the personal side.
Is the only way to have a personal side untouched and a work profile configured by having the user manually disabling the One Lock option?Have you tried Low Security Biometric from Compliance Policy not Restrictions Config Policy?
- What would that do to users that have devices that don't use biometrics and only a PIN? Since this is a Personally Owned Device, Intune should not be changing or disabling ANY personal settings at all.
- Great points. Thanks Oktay!
