Enforce a Passcode profile to protect end user devices with passcodes each time they return from an idle state. A passcode ensures that all sensitive corporate information on managed devices remains protected.

To enforce a Passcode profile:

  1. Navigate to Devices > Profiles > List View > Add and select Add Profile.

  2. Select Windows and then select Windows Phone.
  3. Configure the profile's General settings.

    These settings determine how the profile deploys and who receives it. For more information on General settings, see Add General Profile Settings.

  4. Select the Passcode profile.
  5. Configure the Passcode settings, including:
    Settings Descriptions
    Password Complexity

    Set whether required passcode is  Simple or Complex.

    Alphanumeric Password Set whether the passcode must be alphanumeric or let the end user decide.
    Require Idle State PIN or Password Set whether the passcode or PIN must be entered when resuming the device from an idle state.
    Minimum number of complex characters Enter the minimum number of complex characters (lowercase, uppercase, symbols, numbers, etc.) required for a passcode.
    Minimum Password Length Enter the minimum number of characters a passcode must have.
    Maximum Passcode Age (days) Enforce users to renew passcodes at selected intervals.
    Passcode History

    Enter the number of passwords remembered.

    The end user cannot reuse a previous password.

    For example, if you entered 12 in this field, an end user cannot re-use the past twelve passwords.

    Maximum Number of Failed Attempts Reset the device to factory defaults if too many unsuccessful attempts have been made.
    Max Inactivity Time Device Lock

    Secure idle devices with short lock times.

    The time set here is the maximum amount of a time before the device requires a passcode to be entered.

    The end users may shorten that time in the device settings but cannot lengthen the time past the amount entered in this payload.

  6. Select Save & Publish when you are finished to push the profile to devices.