Detections
Analytics

WN08-00-000010-02 - Application account passwords must be changed at least annually or when a system administrator with knowledge of the password leaves the organization.

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

Setting application accounts to expire may cause applications to stop functioning. The site will have a policy that application account passwords are changed at least annually or when a system administrator with knowledge of the password leaves the organization.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

Establish a site policy that defines the requirements for application/service account password changes.

Change application/service account passwords that are manually managed and entered by a system administrator at least annually or whenever an administrator with knowledge of the password leaves the organization.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_8_and_8-1_V1R23_STIG.zip

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-5(1), CAT|II, CCI|CCI-000366, Rule-ID|SV-48279r2_rule, STIG-ID|WN08-00-000010-02, Vuln-ID|V-36662

Plugin: Windows

Control ID: 8b7ce754936420252e1e33dbbaa05927444e71816ebf2cb286b0568d89f1f543