Home

Minimum password length " -2016281112 (Remediation failed)"

%3CLINGO-SUB%20id%3D%22lingo-sub-557348%22%20slang%3D%22en-US%22%3EMinimum%20password%20length%20%22%20-2016281112%20(Remediation%20failed)%22%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-557348%22%20slang%3D%22en-US%22%3E%3CP%3EHi%20all%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI'm%20trying%20to%20set%20minimum%20password%20length%20with%20Intune.%3C%2FP%3E%3CP%3EBefore%2C%20this%20didn't%20work%20at%20all%2C%20because%2C%20quoting%20from%20Microsoft%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CPRE%3E%3CSPAN%20class%3D%22typ%22%3EIf%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22typ%22%3EDevicePasswordEnabled%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22kwd%22%3Eis%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22kwd%22%3Eset%3C%2FSPAN%3E%3CSPAN%20class%3D%22pln%22%3E%20to%20%3C%2FSPAN%3E%3CSPAN%20class%3D%22lit%22%3E0%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22pun%22%3E(%3C%2FSPAN%3E%3CSPAN%20class%3D%22pln%22%3Edevice%20password%20%3C%2FSPAN%3E%3CSPAN%20class%3D%22kwd%22%3Eis%3C%2FSPAN%3E%3CSPAN%20class%3D%22pln%22%3E%20enabled%3C%2FSPAN%3E%3CSPAN%20class%3D%22pun%22%3E)%2C%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22kwd%22%3Ethen%3C%2FSPAN%3E%3CSPAN%20class%3D%22pln%22%3E%20the%20following%20policies%20are%20%3C%2FSPAN%3E%3CSPAN%20class%3D%22kwd%22%3Eset%3C%2FSPAN%3E%3CSPAN%20class%3D%22pun%22%3E%3A%3C%2FSPAN%3E%0A%0A%20%20%20%20%3CSPAN%20class%3D%22typ%22%3EMinDevicePasswordLength%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22kwd%22%3Eis%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22kwd%22%3Eset%3C%2FSPAN%3E%3CSPAN%20class%3D%22pln%22%3E%20to%20%3C%2FSPAN%3E%3CSPAN%20class%3D%22lit%22%3E4%3C%2FSPAN%3E%0A%20%20%20%20%3CSPAN%20class%3D%22typ%22%3EMinDevicePasswordComplexCharacters%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22kwd%22%3Eis%3C%2FSPAN%3E%20%3CSPAN%20class%3D%22kwd%22%3Eset%3C%2FSPAN%3E%3CSPAN%20class%3D%22pln%22%3E%20to%20%3C%2FSPAN%3E%3CSPAN%20class%3D%22lit%22%3E1%3C%2FSPAN%3E%3C%2FPRE%3E%3CP%3EBasically%20if%20I%20used%20any%20Intune%20password%20policy%2C%20it%20would%20be%20set%20to%204.%3C%2FP%3E%3CP%3EHowever%20now%2C%20suddenly%20i%20see%20this%20working.%3C%2FP%3E%3CP%3EIn%20MDM%20diagnostics%2C%20I%20have%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CTABLE%3E%3CTBODY%3E%3CTR%3E%3CTD%3EDeviceLock%3C%2FTD%3E%3CTD%3EDevicePasswordEnabled%3C%2FTD%3E%3CTD%3E%26nbsp%3B%3C%2FTD%3E%3CTD%3E0%3C%2FTD%3E%3C%2FTR%3E%3C%2FTBODY%3E%3C%2FTABLE%3E%3CTABLE%3E%3CTBODY%3E%3CTR%3E%3CTD%3EDeviceLock%3C%2FTD%3E%3CTD%3EMinDevicePasswordLength%3C%2FTD%3E%3CTD%3E%26nbsp%3B%3C%2FTD%3E%3CTD%3E14%3C%2FTD%3E%3C%2FTR%3E%3C%2FTBODY%3E%3C%2FTABLE%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHowever%2C%20some%20devices%20get%20%22%20-2016281112%20(Remediation%20failed)%22%20ERROR%20CODE%200x87d1fde8.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20two%20Azure%20AD%20joined%20Intune%20devices.%3C%2FP%3E%3CP%3EOne%20succeeds%20and%20the%20other%20fails.%20Both%201809%20.437%3A%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E1)%20One%20succeeds%20and%20gets%20MinDevicePasswordLength%3D14%20while%20DevicePassWordEnabled%20%3D0%20(enabled)%2C%20which%20shouldn't%20be%20possible%20according%20to%20the%20docs%2C%20but%20it%20is%20what%20I%20want.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E2)%20The%20other%20gets%20error%20and%20sets%20MinDevicePasswordLength%3D4%20while%20DevicePasswordEnabled%20%3D0%20(enabled)%2C%20as%20expected%20by%20the%20docs.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EWhat's%20going%20on%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-557348%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EIntune%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EMobile%20Device%20Management%20(MDM)%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3Epassword%20policy%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-622226%22%20slang%3D%22en-US%22%3ERe%3A%20Minimum%20password%20length%20%22%20-2016281112%20(Remediation%20failed)%22%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-622226%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F288779%22%20target%3D%22_blank%22%3E%40WalterPrem%3C%2FA%3E%26nbsp%3BI%20also%20confirm%20problem%20on%201903%20for%20some%20windows%2010%20devices...%2C%20fresh%20installed%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-622228%22%20slang%3D%22en-US%22%3ERe%3A%20Minimum%20password%20length%20%22%20-2016281112%20(Remediation%20failed)%22%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-622228%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F330%22%20target%3D%22_blank%22%3E%40Hrvoje%20Kusulja%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20just%20applied%20this%20policy%20to%2054%20computers%20and%20it%20fails%20on%206.%20There's%20no%20real%20pattern.%3CBR%20%2F%3EFor%20some%20reason%2C%20one%20of%20the%20PCs%20that%20failed%20multiple%20times%20before%2C%20now%20works.%20However%20we%20did%20change%20the%20local%20group%20policy%20minimum%20password%20manually%2C%20but%20that%20shouldn't%20really%20affect%20anything.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-643919%22%20slang%3D%22en-US%22%3ERe%3A%20Minimum%20password%20length%20%22%20-2016281112%20(Remediation%20failed)%22%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-643919%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F288779%22%20target%3D%22_blank%22%3E%40WalterPrem%3C%2FA%3E%26nbsp%3Bdid%20you%20contact%20microsoft%20support%20%2C%20if%20so%2C%20what%20did%20they%20say%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E
Highlighted
WalterPrem
Contributor

Hi all,

 

I'm trying to set minimum password length with Intune.

Before, this didn't work at all, because, quoting from Microsoft:

 

If DevicePasswordEnabled is set to 0 (device password is enabled), then the following policies are set:

    MinDevicePasswordLength is set to 4
    MinDevicePasswordComplexCharacters is set to 1

Basically if I used any Intune password policy, it would be set to 4.

However now, suddenly i see this working.

In MDM diagnostics, I have;

 

DeviceLockDevicePasswordEnabled 0
DeviceLockMinDevicePasswordLength 14

 

However, some devices get " -2016281112 (Remediation failed)" ERROR CODE 0x87d1fde8.

 

I have two Azure AD joined Intune devices.

One succeeds and the other fails. Both 1809 .437:

 

1) One succeeds and gets MinDevicePasswordLength=14 while DevicePassWordEnabled =0 (enabled), which shouldn't be possible according to the docs, but it is what I want.

 

2) The other gets error and sets MinDevicePasswordLength=4 while DevicePasswordEnabled =0 (enabled), as expected by the docs.

 

What's going on?

 

Thanks

3 Replies
Highlighted

@WalterPrem I also confirm problem on 1903 for some windows 10 devices..., fresh installed

Highlighted

@Hrvoje Kusulja 

 

I just applied this policy to 54 computers and it fails on 6. There's no real pattern.
For some reason, one of the PCs that failed multiple times before, now works. However we did change the local group policy minimum password manually, but that shouldn't really affect anything.

Highlighted

@WalterPrem did you contact microsoft support , if so, what did they say?

Related Conversations
Password-protecting folder in Teams
DrewB37 in Microsoft Teams on
7 Replies
Bug in Edge insider password manager
HotCakeX in Discussions on
15 Replies
Password Generation and Password Reveal are Not working
HotCakeX in Discussions on
5 Replies
SharePoint won't work with Excel encryption
Brian LeFlem in Excel on
0 Replies