To configure the settings shown in the table, you need to use the Administrative Templates device configuration profile type template. This template allows you to configure hundreds of settings that are also available in Group Policy. You can use this template to configure settings such as password policies, account lockout policies, and audit policies.References:https://docs.microsoft.com/en-us/mem/intune/configuration/administrative-templates-window

https://learn.microsoft.com/en-us/windows/deployment/windows-subscription-activation#licenses

User sign-in frequency
Sign-in frequency defines the time period before a user is asked to sign in again when attempting to access a resource.
The Azure Active Directory (Azure AD) default configuration for user sign-in frequency is a rolling window of 90 days.
Sign-in frequency control
* Sign in to the Azure portal as a global administrator, security administrator, or Conditional Access administrator.
* Browse to Azure Active Directory > Security > Conditional Access.
* Select New policy.
* Give your policy a name. We recommend that organizations create a meaningful standard for the names of their policies.
* Choose all required conditions for customer's environment, including the target cloud apps.
* Under Access controls > Session.
Select Sign-in frequency.
Choose Periodic reauthentication and enter a value of hours or days or select Every time.
* Save your policy.
Reference:https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/howto-conditional-access-s