Detections
Analytics

WN11-CC-000370 - The convenience PIN for Windows 11 must be disabled.

Information

This policy controls whether a domain user can sign in using a convenience PIN to prevent enabling (Password Stuffer).

Solution

Disable the convenience PIN sign-in.

To correct this, configure the policy value for Computer Configuration >> Administrative Templates >> System >> Logon >> Set 'Turn on convenience PIN sign-in' to 'Disabled'.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_11_V2R9_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7a., CAT|II, CCI|CCI-000381, Rule-ID|SV-253423r958478_rule, STIG-ID|WN11-CC-000370, Vuln-ID|V-253423

Plugin: Windows

Control ID: 374c3fdbfa0fd1aa34deed01959581c14a300c7c7296d501d7291cd306e420f1