{
    "@odata.type": "#microsoft.graph.windows10CompliancePolicy",
    "displayName": "Win - Compliance - U - Device Security",
    "description": null,
    "passwordRequired": false,
    "passwordBlockSimple": false,
    "passwordRequiredToUnlockFromIdle": false,
    "passwordRequiredType": "deviceDefault",
    "requireHealthyDeviceReport": false,
    "earlyLaunchAntiMalwareDriverEnabled": false,
    "bitLockerEnabled": false,
    "secureBootEnabled": false,
    "codeIntegrityEnabled": false,
    "memoryIntegrityEnabled": false,
    "kernelDmaProtectionEnabled": false,
    "virtualizationBasedSecurityEnabled": false,
    "firmwareProtectionEnabled": false,
    "storageRequireEncryption": false,
    "activeFirewallRequired": true,
    "defenderEnabled": false,
    "signatureOutOfDate": false,
    "rtpEnabled": false,
    "antivirusRequired": true,
    "antiSpywareRequired": true,
    "deviceThreatProtectionEnabled": false,
    "deviceThreatProtectionRequiredSecurityLevel": "unavailable",
    "configurationManagerComplianceRequired": false,
    "tpmRequired": true,
    "validOperatingSystemBuildRanges": [],
    
    // Scheduled Actions (MUST be included in the initial policy creation)
    "scheduledActionsForRule": [
        {
            "ruleName": null,
            "scheduledActionConfigurations": [
                {
                    "actionType": "block",
                    "gracePeriodHours": 6
                }
            ]
        }
    ]
}