diff --git a/it-and-security/lib/configuration-profiles/passcode-settings-ddm.json b/it-and-security/lib/configuration-profiles/passcode-settings-ddm.json
new file mode 100644
index 0000000000..dabb02d1a6
--- /dev/null
+++ b/it-and-security/lib/configuration-profiles/passcode-settings-ddm.json
@@ -0,0 +1,10 @@
+{
+    "Type": "com.apple.configuration.passcode.settings",
+    "Identifier": "956e0d14-6019-479b-a6f9-a69ef77668c5",
+    "Payload": {
+        "MaximumFailedAttempts": "five",
+        "MaximumInactivityInMinutes ": 5,
+        "MinimumLength ": 12,
+        "MinimumComplexCharacters": 3
+    }
+}
diff --git a/it-and-security/teams/workstations-canary.yml b/it-and-security/teams/workstations-canary.yml
index 1f9b694a6b..be433068b6 100644
--- a/it-and-security/teams/workstations-canary.yml
+++ b/it-and-security/teams/workstations-canary.yml
@@ -86,6 +86,7 @@ controls:
       - path: ../lib/configuration-profiles/macos-password.mobileconfig
       - path: ../lib/configuration-profiles/macos-prevent-autologon.mobileconfig
       - path: ../lib/configuration-profiles/macos-secure-terminal-keyboard.mobileconfig
+      - path: ../lib/configuration-profiles/passcode-settings-ddm.json
   macos_setup:
     bootstrap_package: ""
     enable_end_user_authentication: true