| Vulnerability ID | Severity | Description |
|---|---|---|
| V-224820 | Medium | Passwords for the built-in Administrator account must be changed at least every 60 days |
| V-224839 | Medium | Passwords must be configured to expire |
| V-224870 | Medium | Windows Server 2016 maximum password age must be configured to 60 days or less |