Detections
Analytics

1.20 WN19-00-000200

Information

Windows Server 2019 accounts must require passwords.

GROUP ID:V-205700
RULE ID:SV-205700r958482

The lack of password protection enables anyone to gain access to the information system, which opens a backdoor opportunity for intruders to compromise the system as well as other resources. Accounts on a system must require passwords.

Solution

Configure all enabled accounts to require passwords.

The password required flag can be set by entering the following on a command line:

'Net user [username] /passwordreq:yes'

Substituting [username] with the name of the user account.

See Also

https://workbench.cisecurity.org/benchmarks/22176

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-2, CAT|II, CCI|CCI-000764, Rule-ID|SV-205700r958482_rule, STIG-ID|WN19-00-000200

Plugin: Windows

Control ID: f9bf6056a60dc9a11ed7f9e086f45865eeec41c23b12807d60a60dd66013c2d5