Detections
Analytics
WN22-SO-000090 - Windows Server 2022 computer account password must not be prevented from being reset.
Information
Computer account passwords are changed automatically on a regular basis. Disabling automatic password changes can make the system more vulnerable to malicious access. Frequent password changes can be a significant safeguard for the system. A new password for the computer account will be generated every 30 days.Solution
Configure the policy value for Computer Configuration >> Windows Settings >> Security Settings >> Local Policies >> Security Options >> Domain member: Disable machine account password changes to 'Disabled'.See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_Server_2022_V2R8_STIG.zip
Item Details
Audit Name: DISA Microsoft Windows Server 2022 STIG v2r8
Category: IDENTIFICATION AND AUTHENTICATION
References: 800-53|IA-3(1), CAT|II, CCI|CCI-001967, Rule-ID|SV-254453r971545_rule, STIG-ID|WN22-SO-000090, Vuln-ID|V-254453
Plugin: Windows
Control ID: 85c9f54729888fa094cad395172f1a55b4ec77b87c130c9ce8a370f8e0752f30