passwordMinimumLength

[divality]

Hi,

Can I please ask the following, about the Win - OIB - Compliance - U - Password - v3.1.
Why is there chosen for a passwordMinimumLength of 8?

ISO27001 recommends a minimum of 12 characters.

We would like to use the OpenIntuneBaseline as much as possible.

Source: https://copla.com/blog/compliance-regulations/iso-27001-password-policy-guide-requirements-templates-and-best-practices/

Thank you.

[Michael-eit]

I havent looked recently but fairly sure that is for non MFA accounts. But second I think the reason is because Microsoft only expects 8 and bar some on prem auth shinanigains with AD/eID that is what it is and you cannot change it. It's also not a ISO27001 baseline, customise to your hearts content.

[divality]

OK, thank you.