Detections
Analytics

1.52 WN11-AC-000040

Information

The built-in Microsoft password complexity filter must be enabled.

GROUP ID: V-253304
RULE ID: SV-253304r1051045

The use of complex passwords increases their strength against guessing and brute-force attacks. This setting configures the system to verify that newly created passwords conform to the Windows password complexity policy.

Solution

Configure the policy value for

Computer Configuration >> Windows Settings >> Security Settings >> Account Policies >> Password Policy >> 'Password must meet complexity requirements'

to 'Enabled'.

See Also

https://workbench.cisecurity.org/benchmarks/27756

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-5(1), CCI|CCI-000192, CCI|CCI-004066, Rule-ID|SV-253304r1051045_rule, STIG-ID|WN11-AC-000040, Vuln-ID|V-253304

Plugin: Windows

Control ID: 2745345b677a16fa737abcf4fdbf3d78d174cca7afd1b3a17d92855ee11f1d60