{
    "@odata.type": "#microsoft.graph.windows10CompliancePolicy",
    "displayName": "Win - Compliance - U - Device Health",
    "description": "Windows 10 compliance policy for device health.",
    "passwordRequired": false,
    "passwordBlockSimple": false,
    "passwordRequiredToUnlockFromIdle": false,
    "passwordRequiredType": "deviceDefault",
    "requireHealthyDeviceReport": false,
    "earlyLaunchAntiMalwareDriverEnabled": false,
    "bitLockerEnabled": true,
    "secureBootEnabled": true,
    "codeIntegrityEnabled": true,
    "memoryIntegrityEnabled": false,
    "kernelDmaProtectionEnabled": false,
    "virtualizationBasedSecurityEnabled": false,
    "firmwareProtectionEnabled": false,
    "storageRequireEncryption": false,
    "activeFirewallRequired": false,
    "defenderEnabled": false,
    "signatureOutOfDate": false,
    "rtpEnabled": false,
    "antivirusRequired": false,
    "antiSpywareRequired": false,
    "deviceThreatProtectionEnabled": false,
    "deviceThreatProtectionRequiredSecurityLevel": "unavailable",
    "configurationManagerComplianceRequired": false,
    "tpmRequired": false,
    "validOperatingSystemBuildRanges": [],
    
    // Scheduled Actions (MUST be included in the initial policy creation)
    "scheduledActionsForRule": [
        {
            "ruleName": "Default",
            "scheduledActionConfigurations": [
                {
                    "actionType": "block",
                    "gracePeriodHours": 12
                }
            ]
        }
    ]
}