Detections
Analytics

1.49 WN11-AC-000025

Information

The maximum password age must be configured to 60 days or less.

GROUP ID: V-253301
RULE ID: SV-253301r1051042

The longer a password is in use, the greater the opportunity for someone to gain unauthorized knowledge of the passwords. Scheduled changing of passwords hinders the ability of unauthorized system users to crack passwords and gain access to a system.

Solution

Configure the policy value for

Computer Configuration >> Windows Settings >> Security Settings >> Account Policies >> Password Policy >> 'Maximum Password Age'

to '60' days or less (excluding '0' which is unacceptable).

See Also

https://workbench.cisecurity.org/benchmarks/27756

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-5(1), CCI|CCI-000199, CCI|CCI-004066, Rule-ID|SV-253301r1051042_rule, STIG-ID|WN11-AC-000025, Vuln-ID|V-253301

Plugin: Windows

Control ID: 5c57dea84d3a1ca14db5723c454cda783232b6dd83d322e8da99803f242be4fc