Detections
Analytics

1.20 WN16-00-000220

Information

Windows Server 2016 accounts must require passwords.

GROUP ID:V-224838
RULE ID:SV-224838r958482

The lack of password protection enables anyone to gain access to the information system, which opens a backdoor opportunity for intruders to compromise the system as well as other resources. Accounts on a system must require passwords.

Solution

Configure all enabled user accounts to require passwords.

The password required flag can be set by entering the following on a command line: 'Net user [username] /passwordreq:yes', substituting [username] with the name of the user account.

See Also

https://workbench.cisecurity.org/benchmarks/23093

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-2, CAT|II, CCI|CCI-000764, Rule-ID|SV-224838r958482_rule, STIG-ID|WN16-00-000220

Plugin: Windows

Control ID: 06d4c9d5b6e9fd4c551395e54e42cdbd3736f2de605d047884ef910a9a49a0a7