Detections
Analytics

1.55 WN16-AC-000080

Information

Windows Server 2016 must have the built-in Windows password complexity policy enabled.

GROUP ID:V-224873
RULE ID:SV-224873r982195

The use of complex passwords increases their strength against attack. The built-in Windows password complexity policy requires passwords to contain at least three of the four types of characters (numbers, upper- and lower-case letters, and special characters) and prevents the inclusion of user names or parts of user names.

Satisfies: SRG-OS-000069-GPOS-00037, SRG-OS-000070-GPOS-00038, SRG-OS-000071-GPOS-00039, SRG-OS-000266-GPOS-00101

Solution

Configure the policy value for

Computer Configuration >> Windows Settings >> Security Settings >> Account Policies >> Password Policy >> 'Password must meet complexity requirements' to 'Enabled'

See Also

https://workbench.cisecurity.org/benchmarks/23093

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-5(1), CAT|II, CCI|CCI-000192, CCI|CCI-000193, CCI|CCI-000194, CCI|CCI-001619, Rule-ID|SV-224873r982195_rule, STIG-ID|WN16-AC-000080

Plugin: Windows

Control ID: 7ab37aa74983a5a0f3a5264d2fe9a20205ea1e5bff0aa5d703a149929c55c776