Microsoft Windows 10

Accounts must be configured to require password expiration

STIG ID: WN10-00-000090 | SRG: SRG-OS-000076-GPOS-00044 | Severity: Medium | CCI: CCI-004066,CCI-000199 | Vulnerability ID: V-220716

Description

Passwords that do not expire increase exposure with a greater probability of being discovered or cracked.

Check

C-22431r997899_chk

Run "Computer Management".Navigate to System Tools >> Local Users and Groups >> Users.Double-click each active account.If "Password never expires" is selected for any account, this is a finding.

Fix

F-22420r997900_fix

Configure all passwords to expire.Run "Computer Management".Navigate to System Tools >> Local Users and Groups >> Users.Double-click each active account.Ensure "Password never expires" is not checked on all active accounts.