Detections
Analytics

1.56 WN16-AC-000090

Information

Windows Server 2016 reversible password encryption must be disabled.

GROUP ID:V-224874
RULE ID:SV-224874r982199

Storing passwords using reversible encryption is essentially the same as storing clear-text versions of the passwords, which are easily compromised. For this reason, this policy must never be enabled.

Solution

Configure the policy value for

Computer Configuration >> Windows Settings >> Security Settings >> Account Policies >> Password Policy >> 'Store passwords using reversible encryption' to 'Disabled'

See Also

https://workbench.cisecurity.org/benchmarks/23093

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-5(1), CAT|I, CCI|CCI-000196, Rule-ID|SV-224874r982199_rule, STIG-ID|WN16-AC-000090

Plugin: Windows

Control ID: 232f88493897faf872728e0a1d9c25c0698a077ed69ef815d84ad12b5b848ef5