Detections
Analytics
WN11-SO-000055 - The maximum age for machine account passwords must be configured to 30 days or less.
Information
Computer account passwords are changed automatically on a regular basis. This setting controls the maximum password age that a machine account may have. This setting must be set to no more than 30 days, ensuring the machine changes its password monthly.Solution
This is the default configuration for this setting (30 days).Configure the policy value for Computer Configuration >> Windows Settings >> Security Settings >> Local Policies >> Security Options >> 'Domain member: Maximum machine account password age' to '30' or less (excluding 0 which is unacceptable).
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_11_V2R11_STIG.zip
Item Details
Audit Name: DISA Microsoft Windows 11 STIG v2r11
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|III, CCI|CCI-000366, Rule-ID|SV-253442r1268251_rule, STIG-ID|WN11-SO-000055, Vuln-ID|V-253442
Plugin: Windows
Control ID: 415dd339a0808014b87ef7c22f67d7814798d368e55be0161e36db5a6a1a2779