Public/TenantConfiguration/Baseline/ConfigurationPolicies/JyskIT-Baseline-SEC-EnablePINReset.json

{
    "name": "JyskIT-Baseline-SEC-EnablePINReset",
    "description": "Allows users to reset their Windows Hello for Business PINs (non-destructively).",
    "platforms": "windows10",
    "technologies": "mdm",
    "roleScopeTagIds": [
      "0"
    ],
    "settings": [
      {
        "@odata.type": "#microsoft.graph.deviceManagementConfigurationSetting",
        "settingInstance": {
          "@odata.type": "#microsoft.graph.deviceManagementConfigurationGroupSettingCollectionInstance",
          "settingDefinitionId": "device_vendor_msft_passportforwork_{tenantid}",
          "groupSettingCollectionValue": [
            {
              "children": [
                {
                  "@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingInstance",
                  "settingDefinitionId": "device_vendor_msft_passportforwork_{tenantid}_policies_enablepinrecovery",
                  "choiceSettingValue": {
                    "@odata.type": "#microsoft.graph.deviceManagementConfigurationChoiceSettingValue",
                    "value": "device_vendor_msft_passportforwork_{tenantid}_policies_enablepinrecovery_true",
                    "children": []
                  }
                }
              ]
            }
          ]
        }
      }
    ]
  }