Detections
Analytics

1.180 WN11-CC-000370

Information

The convenience PIN for Windows 11 must be disabled.

GROUP ID: V-253423
RULE ID: SV-253423r958478

This policy controls whether a domain user can sign in using a convenience PIN to prevent enabling (Password Stuffer).

Solution

Disable the convenience PIN sign-in.

To correct this, configure the policy value for

Computer Configuration >> Administrative Templates >> System >> Logon >> Set 'Turn on convenience PIN sign-in'

to 'Disabled'.

See Also

https://workbench.cisecurity.org/benchmarks/27756

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7, 800-53|CM-7a., CCI|CCI-000381, Rule-ID|SV-253423r958478_rule, STIG-ID|WN11-CC-000370, Vuln-ID|V-253423

Plugin: Windows

Control ID: 787961f6c193c5a7a9e133f4b84cb540f3e0e99fc0146fbe49e4adc96bb3f520