Public/TenantConfiguration/Baseline/ConfigurationPolicies/JyskIT-Baseline-SEC-EnableWHFB.json

{
    "displayName": "JyskIT-Baseline-SEC-EnableWHFB",
    "description": "Enables Windows Hello for Business for all users (Excluding Shared Users)",
    "templateId": "0f2b5d70-d4e9-4156-8c16-1397eb6c54a5",
    "settingsDelta": [
        {
            "id": "9895258a-20f9-4cbd-9abc-abaf28da35e0",
            "definitionId": "deviceConfiguration--windowsIdentityProtectionConfiguration_windowsHelloForBusinessBlocked",
            "@odata.type": "#microsoft.graph.deviceManagementBooleanSettingInstance",
            "value": false
        },
        {
            "id": "aea2d36c-0699-43c8-a755-f742e4362370",
            "definitionId": "deviceConfiguration--windowsIdentityProtectionConfiguration_pinMinimumLength",
            "@odata.type": "#microsoft.graph.deviceManagementIntegerSettingInstance",
            "value": 4
        },
        {
            "id": "3605bae8-87e5-4982-ae35-9edad590abf4",
            "definitionId": "deviceConfiguration--windowsIdentityProtectionConfiguration_pinMaximumLength",
            "@odata.type": "#microsoft.graph.deviceManagementIntegerSettingInstance",
            "value": 127
        },
        {
            "id": "7e5ab56b-8c04-45dc-9029-eb0dddac91c7",
            "definitionId": "deviceConfiguration--windowsIdentityProtectionConfiguration_pinLowercaseCharactersUsage",
            "@odata.type": "#microsoft.graph.deviceManagementStringSettingInstance",
            "value": "allowed"
        },
        {
            "id": "00b1b4da-534d-4631-b969-fafbf7b0e1a7",
            "definitionId": "deviceConfiguration--windowsIdentityProtectionConfiguration_pinUppercaseCharactersUsage",
            "@odata.type": "#microsoft.graph.deviceManagementStringSettingInstance",
            "value": "allowed"
        },
        {
            "id": "04f7688a-5330-426b-897d-ebb82a766987",
            "definitionId": "deviceConfiguration--windowsIdentityProtectionConfiguration_pinSpecialCharactersUsage",
            "@odata.type": "#microsoft.graph.deviceManagementStringSettingInstance",
            "value": "allowed"
        },
        {
            "id": "b4f37d21-f3f1-4e46-9948-27d2a0aaaa2d",
            "definitionId": "deviceConfiguration--windowsIdentityProtectionConfiguration_pinExpirationInDays",
            "@odata.type": "#microsoft.graph.deviceManagementIntegerSettingInstance",
            "value": 0
        },
        {
            "id": "13517f10-27b2-4460-82b9-ae859f142104",
            "definitionId": "deviceConfiguration--windowsIdentityProtectionConfiguration_pinPreviousBlockCount",
            "@odata.type": "#microsoft.graph.deviceManagementIntegerSettingInstance",
            "value": 0
        },
        {
            "id": "4b9d216a-f086-46c9-b792-de91c5eac781",
            "definitionId": "deviceConfiguration--windowsIdentityProtectionConfiguration_pinRecoveryEnabled",
            "@odata.type": "#microsoft.graph.deviceManagementBooleanSettingInstance",
            "value": true
        },
        {
            "id": "d249e6de-5cda-4b67-90f8-997ec5beba9d",
            "definitionId": "deviceConfiguration--windowsIdentityProtectionConfiguration_securityDeviceRequired",
            "@odata.type": "#microsoft.graph.deviceManagementBooleanSettingInstance",
            "value": true
        },
        {
            "id": "9c545d44-c10a-4df1-865a-614c7102e08b",
            "definitionId": "deviceConfiguration--windowsIdentityProtectionConfiguration_unlockWithBiometricsEnabled",
            "@odata.type": "#microsoft.graph.deviceManagementBooleanSettingInstance",
            "value": true
        },
        {
            "id": "e88c0a01-7971-4746-9548-73a215dcba26",
            "definitionId": "deviceConfiguration--windowsIdentityProtectionConfiguration_enhancedAntiSpoofingForFacialFeaturesEnabled",
            "@odata.type": "#microsoft.graph.deviceManagementBooleanSettingInstance",
            "value": true
        },
        {
            "id": "6c75cc2e-fc74-4c95-88bf-8623b76a0049",
            "definitionId": "deviceConfiguration--windowsIdentityProtectionConfiguration_useCertificatesForOnPremisesAuthEnabled",
            "@odata.type": "#microsoft.graph.deviceManagementBooleanSettingInstance",
            "value": true
        },
        {
            "id": "516bbd8e-dc08-4870-85d5-03d0cd7266ae",
            "definitionId": "deviceConfiguration--windowsIdentityProtectionConfiguration_useSecurityKeyForSignin",
            "@odata.type": "#microsoft.graph.deviceManagementBooleanSettingInstance",
            "value": true
        }
    ],
    "roleScopeTagIds": [
        "0"
    ],
    "assignments": [
        {
            "target": {
                "@odata.type": "#microsoft.graph.allLicensedUsersAssignmentTarget"
            }
        },
        {
            "target": {
                "@odata.type": "#microsoft.graph.exclusionGroupAssignmentTarget",
                "groupId": "#ReplaceGroup#_JyskIT-Baseline-SEC-SharedUsers"
            }
        }
    ]
}