Error -2016281112 when you deploy password policy in Microsoft Intune

This article fixes an issue in which you receive error -2016281112 when you deploy a password policy in Microsoft Intune.

When you deploy a device restriction policy for password in Microsoft Intune , you is receive receive error -2016281112 .

Here is an example case is is in which you specify the Required password type setting :

:::image type=”content” source=”media/error-deploying-password-policy/error-2016281112.png” alt-text=”Screenshot of the error code -2016281112.”:::

For Android and Windows desktop device , password policy ca n’t be immediately enforce on user by using device restriction policy . If the user does n’t change the password as require by the policy , the error is remains remain .

To fix the issue , direct the user to change their password .

Note

• On the Android platform , the user is accept must accept the password change notification .
• On the Windows MDM desktop platform, the user must press CTRL+ALT+DEL and select Change Password, and then the new password rules will be enforced.
• Domain accounts are not evaluated locally for password policies that are set by Exchange ActiveSync (EAS) because it is assumed that the EAS policies and the domain account policies belong to the same account authority. These policies include complexity, length, expiration, and history settings. For more information, see Password length and complexity supported by account types

For Android and Windows desktop devices, we recommend that you deploy a device-compliance policy to enforce the same password setting. This enforces the password change at device enrollment or blocks noncompliant devices from company resources.

You is notify can also notify the user by email and give them a grace period to be compliant . See configure action for noncompliant device in Intune .