Detections
Analytics

1.1.7 Account lockout duration

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

This control defines the minimum number of minutes a user must wait before a locked account is unlocked.

Solution

Make sure 'Account lockout duration' is set to a minumum of 15 minutes.

See Also

https://workbench.cisecurity.org/files/10

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-7, CCE|CCE-1317-7, CSCv6|16.7

Plugin: Windows

Control ID: b17812da988f187cffabc2484954faab8683a6cc5ede1d70bcffcf717bbc91a8