Detections
Analytics

1.53 WN11-AC-000045

Information

Reversible password encryption must be disabled.

GROUP ID: V-253305
RULE ID: SV-253305r1051046

Storing passwords using reversible encryption is essentially the same as storing clear-text versions of the passwords. For this reason, this policy must never be enabled.

Solution

Configure the policy value for

Computer Configuration >> Windows Settings >> Security Settings >> Account Policies >> Password Policy >> 'Store passwords using reversible encryption'

to 'Disabled'.

See Also

https://workbench.cisecurity.org/benchmarks/27756

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-5(1), CCI|CCI-000196, CCI|CCI-004062, Rule-ID|SV-253305r1051046_rule, STIG-ID|WN11-AC-000045, Vuln-ID|V-253305

Plugin: Windows

Control ID: 76c7ae04b892166bf581965986ed25293f18ccf4553e8913341181f1abcb7e66