WindowsPasswordSettingsAINE.json

{
  "properties": {
    "displayName": "Audit machines with insecure password security settings",
    "policyType": "BuiltIn",
    "description": "This initiative deploys the policy requirements and audits machines with insecure password security settings. For more information on Guest Configuration policies, please visit https://aka.ms/gcpol",
    "metadata": {
      "version": "1.1.0",
      "category": "Guest Configuration"
    },
    "version": "1.1.0",
    "parameters": {
      "IncludeArcMachines": {
        "type": "string",
        "metadata": {
          "displayName": "Include Arc connected servers",
          "description": "By selecting this option, you agree to be charged monthly per Arc connected machine."
        },
        "allowedValues": [
          "true",
          "false"
        ],
        "defaultValue": "false"
      },
      "MaximumPasswordAge": {
        "type": "string",
        "metadata": {
          "displayName": "Maximum password age",
          "description": "The Maximum password age setting determines the period of time (in days) that a password can be used before the system requires the user to change it."
        },
        "defaultValue": "70"
      },
      "MinimumPasswordAge": {
        "type": "string",
        "metadata": {
          "displayName": "Minimum password age",
          "description": "The Minimum password age setting determines the period of time (in days) that a password must be used before the user can change it."
        },
        "defaultValue": "1"
      },
      "EnforcePasswordHistory": {
        "type": "string",
        "metadata": {
          "displayName": "Enforce password history",
          "description": "The Enforce password history setting determines the number of unique new passwords that must be associated with a user account before an old password can be reused."
        },
        "defaultValue": "24"
      },
      "MinimumPasswordLength": {
        "type": "string",
        "metadata": {
          "displayName": "Minimum password length",
          "description": "The Minimum password length setting determines the least number of characters that can make up a password for a user account."
        },
        "defaultValue": "14"
      }
    },
    "policyDefinitions": [
      {
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/4ceb8dc2-559c-478b-a15b-733fbf1e3738",
        "definitionVersion": "2.*.*",
        "policyDefinitionReferenceId": "AINE_MaximumPasswordAge",
        "parameters": {
          "IncludeArcMachines": {
            "value": "[parameters('IncludeArcMachines')]"
          },
          "MaximumPasswordAge": {
            "value": "[parameters('MaximumPasswordAge')]"
          }
        }
      },
      {
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/237b38db-ca4d-4259-9e47-7882441ca2c0",
        "definitionVersion": "2.*.*",
        "policyDefinitionReferenceId": "AINE_MinimumPasswordAge",
        "parameters": {
          "IncludeArcMachines": {
            "value": "[parameters('IncludeArcMachines')]"
          },
          "MinimumPasswordAge": {
            "value": "[parameters('MinimumPasswordAge')]"
          }
        }
      },
      {
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/bf16e0bb-31e1-4646-8202-60a235cc7e74",
        "definitionVersion": "2.*.*",
        "policyDefinitionReferenceId": "AINE_PasswordMustMeetComplexityRequirements",
        "parameters": {
          "IncludeArcMachines": {
            "value": "[parameters('IncludeArcMachines')]"
          }
        }
      },
      {
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/da0f98fe-a24b-4ad5-af69-bd0400233661",
        "definitionVersion": "2.*.*",
        "policyDefinitionReferenceId": "AINE_StorePasswordsUsingReversibleEncryption",
        "parameters": {
          "IncludeArcMachines": {
            "value": "[parameters('IncludeArcMachines')]"
          }
        }
      },
      {
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/5b054a0d-39e2-4d53-bea3-9734cad2c69b",
        "definitionVersion": "2.*.*",
        "policyDefinitionReferenceId": "AINE_EnforcePasswordHistory",
        "parameters": {
          "IncludeArcMachines": {
            "value": "[parameters('IncludeArcMachines')]"
          },
          "EnforcePasswordHistory": {
            "value": "[parameters('EnforcePasswordHistory')]"
          }
        }
      },
      {
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/a2d0e922-65d0-40c4-8f87-ea6da2d307a2",
        "definitionVersion": "2.*.*",
        "policyDefinitionReferenceId": "AINE_MinimumPasswordLength",
        "parameters": {
          "IncludeArcMachines": {
            "value": "[parameters('IncludeArcMachines')]"
          },
          "MinimumPasswordLength": {
            "value": "[parameters('MinimumPasswordLength')]"
          }
        }
      },
      {
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/ea53dbee-c6c9-4f0e-9f9e-de0039b78023",
        "definitionVersion": "3.*.*",
        "policyDefinitionReferenceId": "AINE_PasswordPolicy_msid110",
        "parameters": {
          "IncludeArcMachines": {
            "value": "[parameters('IncludeArcMachines')]"
          }
        }
      },
      {
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/e6955644-301c-44b5-a4c4-528577de6861",
        "definitionVersion": "3.*.*",
        "policyDefinitionReferenceId": "AINE_PasswordPolicy_msid121",
        "parameters": {
          "IncludeArcMachines": {
            "value": "[parameters('IncludeArcMachines')]"
          }
        }
      },
      {
        "policyDefinitionId": "/providers/Microsoft.Authorization/policyDefinitions/f6ec09a3-78bf-4f8f-99dc-6c77182d0f99",
        "definitionVersion": "3.*.*",
        "policyDefinitionReferenceId": "AINE_PasswordPolicy_msid232",
        "parameters": {
          "IncludeArcMachines": {
            "value": "[parameters('IncludeArcMachines')]"
          }
        }
      }
    ],
    "versions": [
      "1.1.0"
    ]
  },
  "id": "/providers/Microsoft.Authorization/policySetDefinitions/095e4ed9-c835-4ab6-9439-b5644362a06c",
  "name": "095e4ed9-c835-4ab6-9439-b5644362a06c"
}