fleet/it-and-security/lib/windows/configuration-profiles/password.xml

<Add>
  <!-- Enable device passwords -->
  <CmdID>1</CmdID>
  <Item>
    <Target>
      <LocURI>./Device/Vendor/MSFT/Policy/Config/DeviceLock/DevicePasswordEnabled</LocURI>
    </Target>
    <Meta>
      <Format
        xmlns="syncml:metinf">int
      </Format>
    </Meta>
    <Data>0</Data>
  </Item>
</Add>
<Replace>
  <!-- Enforce minimum password length (10 characters) -->
  <CmdID>2</CmdID>
  <Item>
    <Target>
      <LocURI>./Device/Vendor/MSFT/Policy/Config/DeviceLock/MinDevicePasswordLength</LocURI>
    </Target>
    <Meta>
      <Format
        xmlns="syncml:metinf">int
      </Format>
    </Meta>
    <Data>10</Data>
  </Item>
</Replace>
<Replace>
  <!-- Enforce minimum complex characters (1 character) -->
  <CmdID>3</CmdID>
  <Item>
    <Target>
      <LocURI>./Device/Vendor/MSFT/Policy/Config/DeviceLock/MinDevicePasswordComplexCharacters</LocURI>
    </Target>
    <Meta>
      <Format
        xmlns="syncml:metinf">int
      </Format>
    </Meta>
    <Data>1</Data>
  </Item>
</Replace>