Detections
Analytics
DTOO420 - The ability to store user passwords in Skype must be disabled.
Information
Allows Microsoft Lync to store user passwords. If you enable this policy setting, Microsoft Lync can store a password on request from the user. If you disable this policy setting, Microsoft Lync cannot store a password. If you do not configure this policy setting and the user logs on to a domain, Microsoft Lync does not store the password. If you do not configure this policy setting and the user does not log on to a domain (for example, if the user logs on to a workgroup), Microsoft Lync can store the password. Note: You can configure this policy setting under both Computer Configuration and User Configuration, but the policy setting under Computer Configuration takes precedence.Solution
Set the policy value for Computer Configuration -> Administrative Templates -> Skype for Business 2016 -> Microsoft Lync Feature Policies 'Allow storage of user passwords' to 'Disabled'.See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Skype_for_Business_2016_V2R1_STIG.zip
Item Details
Audit Name: DISA STIG Microsoft Skype for Business 2016 v2r1
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-238105r961863_rule, STIG-ID|DTOO420, STIG-Legacy|SV-85525, STIG-Legacy|V-70901, Vuln-ID|V-238105
Plugin: Windows
Control ID: 2f78054168866f0693956717b499a73e843abb5bcaa96aa49ffc65d3a016e554