Detections
Analytics
WN25-AC-000080 - Windows Server 2025 must have the built-in Windows password complexity policy enabled.
Information
The use of complex passwords increases their strength against attack. The built-in Windows password complexity policy requires passwords to contain at least three of the four types of characters (numbers, uppercase and lowercase letters, and special characters) and prevents the inclusion of user names or parts of user names.Satisfies: SRG-OS-000069-GPOS-00037, SRG-OS-000070-GPOS-00038, SRG-OS-000071-GPOS-00039, SRG-OS-000266-GPOS-00101
Solution
Configure the policy value for Computer Configuration >> Windows Settings >> Security Settings >> Account Policies >> Password Policy. Set the value for 'Password must meet complexity requirements' to 'Enabled'.See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_Server_2025_V1R1_STIG.zip
Item Details
Audit Name: DISA Microsoft Windows Server 2025 STIG v1r1
Category: IDENTIFICATION AND AUTHENTICATION
References: 800-53|IA-5(1)(a), CAT|II, CCI|CCI-004066, Rule-ID|SV-278039r1180823_rule, STIG-ID|WN25-AC-000080, Vuln-ID|V-278039
Plugin: Windows
Control ID: f35e8d4349de107541e475cea60586c8dfb1af4a18ac6b8d5b21c3c378abcf6f