Security Technical Implementation Guides (STIGs)

Vulnerability ID	Severity	Description
V-254287	Medium	Windows Server 2022 must have the period of time before the bad logon counter is reset configured...
V-253299	Medium	The period of time before the bad logon counter is reset must be configured to 15 minutes
V-254286	Medium	Windows Server 2022 must have the number of allowed bad logon attempts configured to three or less
V-205629	Medium	Windows Server 2019 must have the number of allowed bad logon attempts configured to three or less
V-253298	Medium	The number of allowed bad logon attempts must be configured to three or less
V-220740	Medium	The number of allowed bad logon attempts must be configured to 3 or less
V-224867	Medium	Windows Server 2016 must have the number of allowed bad logon attempts configured to three or less
V-278034	Medium	Windows Server 2025 must have the number of allowed bad logon attempts configured to three or less
V-278035	Medium	Windows Server 2025 must have the period of time before the bad logon counter is reset configured...
V-277036	Medium	The macOS system must limit consecutive failed login attempts to three
V-277048	Medium	The macOS system must set account lockout time to 15 minutes