Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

IntuneAccountProtectionLocalAdministratorPasswordSolutionPolicy: Cannot compile if PasswordComplexity is set to 5 #4963

Closed
ricmestre opened this issue Aug 15, 2024 · 0 comments · Fixed by #4964 or #4998

Comments

@ricmestre
Copy link
Contributor

Description of the issue

A new value (5) was added in the backend as an option to property PasswordComplexity which corresponds to "Large letters + small letters + numbers + special characters (improved readability)" but M365DSC only supports values up to 4, if I try to compile a blueprint with that value set to 5 it fails with the below.

I'll send a PR with the fix for this.

Microsoft365DSC\IntuneAccountProtectionLocalAdministratorPasswordSolutionPolicy : At least one of the values '5' is not supported or valid for property 'PasswordComplexity' on class 'IntuneAccountProtectionLocalAdministratorPasswordSolutionPolicy'. Please specify only supported values: 1, 2, 3, 4.

Microsoft 365 DSC Version

1.24.731.1

Which workloads are affected

Intune

The DSC configuration

IntuneAccountProtectionLocalAdministratorPasswordSolutionPolicy "IntuneAccountProtectionLocalAdministratorPasswordSolutionPolicy-IntuneAccountProtectionLocalAdministratorPasswordSolutionPolicy_1"
        {
            Assignments                  = @(
                MSFT_IntuneAccountProtectionLocalAdministratorPasswordSolutionPolicyAssignments{
                    deviceAndAppManagementAssignmentFilterType = 'none'
                    groupDisplayName = 'Include'
                    dataType = '#microsoft.graph.groupAssignmentTarget'
                    groupId = '1b1d25b8-24b3-4cf7-897e-83d49191efb0'
                }
                MSFT_IntuneAccountProtectionLocalAdministratorPasswordSolutionPolicyAssignments{
                    deviceAndAppManagementAssignmentFilterType = 'none'
                    groupDisplayName = 'Exclude'
                    dataType = '#microsoft.graph.exclusionGroupAssignmentTarget'
                    groupId = 'f32b2df2-92a5-41d0-b86f-337b5f6fa447'
                }
            );
            BackupDirectory              = "1";
            Credential                   = $Credscredential;
            Description                  = "";
            DisplayName                  = "IntuneAccountProtectionLocalAdministratorPasswordSolutionPolicy_1";
            Ensure                       = "Present";
            Identity                     = "f3ca7ce5-32d1-4a58-bdde-cafe609eee78";
            passwordagedays_aad          = 7;
            PasswordComplexity           = "5";
            PasswordLength               = 15;
            PostAuthenticationActions    = "3";
            PostAuthenticationResetDelay = 8;
        }

Verbose logs showing the problem

Microsoft365DSC\IntuneAccountProtectionLocalAdministratorPasswordSolutionPolicy : At least one of the values '5' is not supported or valid for property 'PasswordComplexity' on class 'IntuneAccountProtectionLocalAdministratorPasswordSolutionPolicy'. Please specify only supported values: 1, 2, 3, 4.

Environment Information + PowerShell Version

Win11 / PS5.1
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
1 participant