Detections
Analytics

1.20 WN22-00-000200

Information

Windows Server 2022 accounts must require passwords.

GROUP ID: V-254257
RULE ID: SV-254257r958482

The lack of password protection enables anyone to gain access to the information system, which opens a backdoor opportunity for intruders to compromise the system as well as other resources. Accounts on a system must require passwords.

Solution

Configure all enabled accounts to require passwords.

The password required flag can be set by entering the following on a command line:

'Net user [username] /passwordreq:yes', substituting [username]

with the name of the user account.

See Also

https://workbench.cisecurity.org/benchmarks/22357

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-2, CAT|II, CCI|CCI-000764, Rule-ID|SV-254257r958482_rule, STIG-ID|WN22-00-000200, Vuln-ID|V-254257

Plugin: Windows

Control ID: a2acf9f2d983caf93a0f33954e7b609f460109f36eec00dada06ad6bfe5ee586