Your network contains an on-premises Active Directory domain and an Azure AD tenant.
The Default Domain Policy Group Policy Object (GPO) contains the settings shown in the following table.
You need to migrate the existing Default Domain Policy GPO settings to a device configuration profile.
Which device configuration profile type template should you use?
The 'Administrative Templates' profile type template should be used to migrate the Default Domain Policy GPO settings to a device configuration profile. Administrative Templates in Microsoft Intune allow administrators to set the same policies that can be configured using Group Policy on-premises. This includes detailed password policies such as those shown in the GPO table, which are typically managed through Administrative Templates in Group Policy on-premises.
Answer C is correct https://learn.microsoft.com/en-us/mem/intune/configuration/device-restrictions-windows-10#password
You are correct! so many wrong answers again! inside device restrictions, You have password settings. your link shows everything regarding password
Password setting usually reflect on accounts know?
In this question you are MIGRATING the EXISTING GPO settings from AD to Intune, not creating new one. Steps are: Import and analyze your on-premises GPOs using Group Policy analytics in Microsoft Intune https://learn.microsoft.com/en-us/mem/intune/configuration/group-policy-analytics Create a Settings Catalog policy using your imported GPOs in Microsoft Intune (public preview) https://learn.microsoft.com/en-us/mem/intune/configuration/group-policy-analytics-migrate Use Windows 10/11 templates to configure group policy settings in Microsoft Intune https://learn.microsoft.com/en-us/mem/intune/configuration/administrative-templates-windows
A is correct because this question is asking "migrate" GPO not creating a new policy
"Device restrictions" cannot configure MinimumPasswordAge. So,Strict answer is D.Custom. But,I thnk Device restrictions is not so bad answer.
The on-premises Active Directory domain GPO has hierarchy over Azure AD tenant thus will not change only with Custom configuration beside the question say “template “, I will go with D: Custom
You migrate your AD GPO's to administraive templates using the ADMX file
C is correct. I have done this multiple times.
actually device lock can be configured as security baseline and minimum password age can be applied to configuration profiles. So admin templates I think
Device Restrictions has a Password section but it does not contain a setting for lock (has one for wipe instead) and for minimum password age. Custom would be able to set all the required.
https://learn.microsoft.com/en-us/mem/intune/configuration/device-restrictions-configure
C The "Device restrictions" device configuration profile type template is used to configure settings related to device security, including password policies, BitLocker settings, and other device-level restrictions. Since the settings in the Default Domain Policy GPO include password-related configurations, using the "Device restrictions" profile type template would be appropriate for migrating these settings to a device configuration profile.
"Device Restrictions" is a Policy Type and Policy Types are available under "Templates". You can figure out the answer now.
According to ChatGPT answer is A
C. Device Restrictions Ref: https://howtomanagedevices.com/intune/2409/password-policies-using-intune/ I was really tempted into selecting Administrative Templates and I still do believe they have a place however because the specific settings mentioned in the question, it leads me to feel fairly confident that Device Restrictions is the correct answer.
For password age then it has to be a custom configuration profile, that's not included in the intune GUI under Password
Administrative Template- Option: A
tried this, not possible. Certain settings from the password policy aren't compatible.
can you please explain how C is the correct answer