[sean0407]

Summary

Power and Device Lock profile
├── require a password when waking on battery or AC
└── disable user control over the Connected Standby password delay

Addresses #251 by adding AllowDomainDelayLock = Disabled to the current v4.0 profile.

Evidence

• Before: The profile omitted AllowDomainDelayLock. Issue [Bug] - Modern Standby Bypasses Device Lock #251 reports Windows 11 Entra-joined devices resuming without authentication. Microsoft documents that when this policy is not configured on Entra-joined devices, users can change the delay before a password is required.
• After: The profile sets device_vendor_msft_policy_config_admx_credentialproviders_allowdomaindelaylock to its Disabled value (_0).
• Checks: Python JSON parsing and structural assertions passed; git diff --check passed; patch_policy.py accepted the one-file, non-binary patch.

Merge Danger

Door: Two-way

Blast Radius: Authentication

Devices assigned this profile can no longer change the delay before a password is required after Connected Standby.