1.177 WN10-CC-000370

Information

The convenience PIN for Windows 10 must be disabled.

GROUP ID: V-220870RULE ID: SV-220870r958478

This policy controls whether a domain user can sign in using a convenience PIN to prevent enabling (Password Stuffer).

Solution

Disable the convenience PIN sign-in.

If this needs to be corrected configure the policy value for

Computer Configuration >> Administrative Templates >> System >> Logon >> Set 'Turn on convenience PIN sign-in'

to 'Disabled'.

See Also

https://workbench.cisecurity.org/benchmarks/23869