Detections
Analytics

3.054 - Users are not warned in advance that their passwords will expire.

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

This setting configures the system to display a warning to users telling them how many days are left before their password expires. By giving the user advanced warning, the user has time to construct a sufficiently strong password.

Solution

Configure the policy value for Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options -> 'Interactive Logon: Prompt user to change password before expiration' to '14' days or more.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_7_V1R32_STIG.zip

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-5(1), CAT|III, CCI|CCI-000366, CSCv6|16, Rule-ID|SV-25048r1_rule, STIG-ID|3.054, Vuln-ID|V-1172

Plugin: Windows

Control ID: 243f570d97ac97f9705999de169672c0cc32b89a8cb775c1d864d17ae9e6a735