Issue 98289: Password policy changes automatically after update to Windows 10 Mobile RS1


After an update to Windows 10 Mobile RS1, Enterprise users must manually replace their phone password with a new, more complex password. This behavior occurs regardless of how System Center Configuration Manager (SCCM) Windows Intune, or non-Microsoft mobile device management (MDM) policy is configured.

More Information

This behavior is by design. Windows 10 RS1 introduces increased password complexity. This change takes place regardless of how System Center Configuration Manager or Microsoft Intune policy is configured.

The following settings are configured in SCCM 1511 (hybrid Intune):
  • Digit only
  • Min. password length: 4
  • Password expiration in days: 90
  • Number of passwords remembered: 8
  • No simple password
The following password complexity is applied automatically when a device is updated to RS1, even if nothing was modified on the Intune policy side:
  • Min. password length: 6
  • Max. password length: 127
  • At least one uppercase character
  • At least one lowercase character
  • Can include a digit
  • At least one special character
  • Cannot be 123456 or 111111