Public/TenantConfiguration/Baseline/SecurityBaselines/JyskIT-Baseline-SEC-SecurityBaseline.json

{
    "displayName": "JyskIT-Baseline-SEC-SecurityBaseline",
    "description": "This configures many security settings for Windows 10+ devices, to the Jysk IT security baseline. Can contain breaking changes, and should be tested before deployment. Also used to specify minimum password/PIN requirements.",
    "settingsDelta": [
        {
            "id": "ed70ea1b-7f30-4a78-995e-8b4282d5d11b",
            "definitionId": "deviceConfiguration--windows10EndpointProtectionConfiguration_bitLockerRemovableDrivePolicy",
            "@odata.type": "#microsoft.graph.deviceManagementComplexSettingInstance",
            "valueJson": "{\"requireEncryptionForWriteAccess\":false}"
        },
        {
            "id": "07913c8f-8709-4fbc-b2d3-d0b742bee4ce",
            "definitionId": "deviceConfiguration--windows10GeneralConfiguration_edgePreventCertificateErrorOverride",
            "@odata.type": "#microsoft.graph.deviceManagementBooleanSettingInstance",
            "value": false
        },
        {
            "id": "ae87d41e-0052-4583-9a7e-58dd884feda3",
            "definitionId": "deviceConfiguration--windows10GeneralConfiguration_passwordRequiredType",
            "@odata.type": "#microsoft.graph.deviceManagementStringSettingInstance",
            "value": "deviceDefault"
        },
        {
            "id": "ad6c51b8-9df0-40e5-b03f-28558c6e833f",
            "definitionId": "deviceConfiguration--windows10GeneralConfiguration_passwordExpirationDays",
            "@odata.type": "#microsoft.graph.deviceManagementIntegerSettingInstance",
            "value": 0
        },
        {
            "id": "4213deab-7538-42d0-9c20-01a40a2a61d4",
            "definitionId": "deviceConfiguration--windows10GeneralConfiguration_passwordMinimumCharacterSetCount",
            "@odata.type": "#microsoft.graph.deviceManagementIntegerSettingInstance",
            "value": 1
        },
        {
            "id": "c2cfcd8e-fbf1-42ca-b9ed-7eea3a3d56e6",
            "definitionId": "deviceConfiguration--windows10GeneralConfiguration_passwordMinimumLength",
            "@odata.type": "#microsoft.graph.deviceManagementIntegerSettingInstance",
            "value": 4
        },
        {
            "id": "f2f8b6f7-6f4e-4d00-9f46-09275e61d53e",
            "definitionId": "deviceConfiguration--windows10GeneralConfiguration_passwordSignInFailureCountBeforeFactoryReset",
            "@odata.type": "#microsoft.graph.deviceManagementIntegerSettingInstance",
            "value": 0
        },
        {
            "id": "8e1666c4-a001-4028-b518-bd6c5ce244bd",
            "definitionId": "deviceConfiguration--windows10GeneralConfiguration_passwordMinimumAgeInDays",
            "@odata.type": "#microsoft.graph.deviceManagementIntegerSettingInstance",
            "value": 0
        },
        {
            "id": "3d749e23-211e-4cf6-aedb-1b34585bf8f0",
            "definitionId": "deviceConfiguration--windows10EndpointProtectionConfiguration_localSecurityOptionsMachineInactivityLimit",
            "@odata.type": "#microsoft.graph.deviceManagementIntegerSettingInstance",
            "value": null
        }
    ],
    "roleScopeTagIds": [
        "0"
    ]
}