Home

Minimum password length " -2016281112 (Remediation failed)"

%3CLINGO-SUB%20id%3D%22lingo-sub-557348%22%20slang%3D%22en-US%22%3EMinimum%20password%20length%20%22%20-2016281112%20(Remediation%20failed)%22%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-557348%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20all%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI'm%20trying%20to%20set%20minimum%20password%20length%20with%20Intune.%3C%2FP%3E%3CP%3EBefore%2C%20this%20didn't%20work%20at%20all%2C%20because%2C%20quoting%20from%20Microsoft%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CPRE%3E%3CSPAN%20class%3D%22typ%22%3EIf%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22typ%22%3EDevicePasswordEnabled%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22kwd%22%3Eis%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22kwd%22%3Eset%3C%2FSPAN%3E%3CSPAN%20class%3D%22pln%22%3E%20to%20%3C%2FSPAN%3E%3CSPAN%20class%3D%22lit%22%3E0%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22pun%22%3E(%3C%2FSPAN%3E%3CSPAN%20class%3D%22pln%22%3Edevice%20password%20%3C%2FSPAN%3E%3CSPAN%20class%3D%22kwd%22%3Eis%3C%2FSPAN%3E%3CSPAN%20class%3D%22pln%22%3E%20enabled%3C%2FSPAN%3E%3CSPAN%20class%3D%22pun%22%3E)%2C%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22kwd%22%3Ethen%3C%2FSPAN%3E%3CSPAN%20class%3D%22pln%22%3E%20the%20following%20policies%20are%20%3C%2FSPAN%3E%3CSPAN%20class%3D%22kwd%22%3Eset%3C%2FSPAN%3E%3CSPAN%20class%3D%22pun%22%3E%3A%3C%2FSPAN%3E%0A%0A%20%20%20%20%3CSPAN%20class%3D%22typ%22%3EMinDevicePasswordLength%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22kwd%22%3Eis%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22kwd%22%3Eset%3C%2FSPAN%3E%3CSPAN%20class%3D%22pln%22%3E%20to%20%3C%2FSPAN%3E%3CSPAN%20class%3D%22lit%22%3E4%3C%2FSPAN%3E%0A%20%20%20%20%3CSPAN%20class%3D%22typ%22%3EMinDevicePasswordComplexCharacters%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22kwd%22%3Eis%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22kwd%22%3Eset%3C%2FSPAN%3E%3CSPAN%20class%3D%22pln%22%3E%20to%20%3C%2FSPAN%3E%3CSPAN%20class%3D%22lit%22%3E1%3C%2FSPAN%3E%3C%2FPRE%3E%3CP%3EBasically%20if%20I%20used%20any%20Intune%20password%20policy%2C%20it%20would%20be%20set%20to%204.%3C%2FP%3E%3CP%3EHowever%20now%2C%20suddenly%20i%20see%20this%20working.%3C%2FP%3E%3CP%3EIn%20MDM%20diagnostics%2C%20I%20have%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CTABLE%3E%3CTBODY%3E%3CTR%3E%3CTD%3EDeviceLock%3C%2FTD%3E%3CTD%3EDevicePasswordEnabled%3C%2FTD%3E%3CTD%3E%26nbsp%3B%3C%2FTD%3E%3CTD%3E0%3C%2FTD%3E%3C%2FTR%3E%3C%2FTBODY%3E%3C%2FTABLE%3E%3CTABLE%3E%3CTBODY%3E%3CTR%3E%3CTD%3EDeviceLock%3C%2FTD%3E%3CTD%3EMinDevicePasswordLength%3C%2FTD%3E%3CTD%3E%26nbsp%3B%3C%2FTD%3E%3CTD%3E14%3C%2FTD%3E%3C%2FTR%3E%3C%2FTBODY%3E%3C%2FTABLE%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHowever%2C%20some%20devices%20get%20%22%20-2016281112%20(Remediation%20failed)%22%20ERROR%20CODE%200x87d1fde8.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20two%20Azure%20AD%20joined%20Intune%20devices.%3C%2FP%3E%3CP%3EOne%20succeeds%20and%20the%20other%20fails.%20Both%201809%20.437%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E1)%20One%20succeeds%20and%20gets%20MinDevicePasswordLength%3D14%20while%20DevicePassWordEnabled%20%3D0%20(enabled)%2C%20which%20shouldn't%20be%20possible%20according%20to%20the%20docs%2C%20but%20it%20is%20what%20I%20want.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E2)%20The%20other%20gets%20error%20and%20sets%20MinDevicePasswordLength%3D4%20while%20DevicePasswordEnabled%20%3D0%20(enabled)%2C%20as%20expected%20by%20the%20docs.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhat's%20going%20on%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-557348%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMobile%20Device%20Management%20(MDM)%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Epassword%20policy%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-622226%22%20slang%3D%22en-US%22%3ERe%3A%20Minimum%20password%20length%20%22%20-2016281112%20(Remediation%20failed)%22%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-622226%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F288779%22%20target%3D%22_blank%22%3E%40WalterPrem%3C%2FA%3E%26nbsp%3BI%20also%20confirm%20problem%20on%201903%20for%20some%20windows%2010%20devices...%2C%20fresh%20installed%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-622228%22%20slang%3D%22en-US%22%3ERe%3A%20Minimum%20password%20length%20%22%20-2016281112%20(Remediation%20failed)%22%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-622228%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F330%22%20target%3D%22_blank%22%3E%40Hrvoje%20Kusulja%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20just%20applied%20this%20policy%20to%2054%20computers%20and%20it%20fails%20on%206.%20There's%20no%20real%20pattern.%3CBR%20%2F%3EFor%20some%20reason%2C%20one%20of%20the%20PCs%20that%20failed%20multiple%20times%20before%2C%20now%20works.%20However%20we%20did%20change%20the%20local%20group%20policy%20minimum%20password%20manually%2C%20but%20that%20shouldn't%20really%20affect%20anything.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-643919%22%20slang%3D%22en-US%22%3ERe%3A%20Minimum%20password%20length%20%22%20-2016281112%20(Remediation%20failed)%22%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-643919%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F288779%22%20target%3D%22_blank%22%3E%40WalterPrem%3C%2FA%3E%26nbsp%3Bdid%20you%20contact%20microsoft%20support%20%2C%20if%20so%2C%20what%20did%20they%20say%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E
WalterPrem
Contributor

Hi all,

 

I'm trying to set minimum password length with Intune.

Before, this didn't work at all, because, quoting from Microsoft:

 

If DevicePasswordEnabled is set to 0 (device password is enabled), then the following policies are set:

    MinDevicePasswordLength is set to 4
    MinDevicePasswordComplexCharacters is set to 1

Basically if I used any Intune password policy, it would be set to 4.

However now, suddenly i see this working.

In MDM diagnostics, I have;

 

DeviceLockDevicePasswordEnabled 0
DeviceLockMinDevicePasswordLength 14

 

However, some devices get " -2016281112 (Remediation failed)" ERROR CODE 0x87d1fde8.

 

I have two Azure AD joined Intune devices.

One succeeds and the other fails. Both 1809 .437:

 

1) One succeeds and gets MinDevicePasswordLength=14 while DevicePassWordEnabled =0 (enabled), which shouldn't be possible according to the docs, but it is what I want.

 

2) The other gets error and sets MinDevicePasswordLength=4 while DevicePasswordEnabled =0 (enabled), as expected by the docs.

 

What's going on?

 

Thanks

3 Replies

@WalterPrem I also confirm problem on 1903 for some windows 10 devices..., fresh installed

@Hrvoje Kusulja 

 

I just applied this policy to 54 computers and it fails on 6. There's no real pattern.
For some reason, one of the PCs that failed multiple times before, now works. However we did change the local group policy minimum password manually, but that shouldn't really affect anything.

@WalterPrem did you contact microsoft support , if so, what did they say?

Related Conversations
Tabs and Dark Mode
cjc2112 in Discussions on
38 Replies
Extentions Synchronization
Deleted in Discussions on
3 Replies
flashing a white screen while open new tab
Deleted in Discussions on
14 Replies
Stable version of Edge insider browser
HotCakeX in Discussions on
35 Replies
Security Community Webinars
Valon_Kolica in Security, Privacy & Compliance on
13 Replies