Microsoft Windows 11

Accounts must be configured to require password expiration

STIG ID: WN11-00-000090 | SRG: SRG-OS-000076-GPOS-00044 | Severity: Medium | CCI: CCI-004066,CCI-000199 | Vulnerability ID: V-253273

Description

Passwords that do not expire increase exposure with a greater probability of being discovered or cracked.

Check

C-56726r828901_chk

Run "Computer Management".Navigate to System Tools >> Local Users and Groups >> Users.Double-click each active account.If "Password never expires" is selected for any account, this is a finding.

Fix

F-56676r828902_fix

Configure all passwords to expire.Run "Computer Management".Navigate to System Tools >> Local Users and Groups >> Users.Double-click each active account.Ensure "Password never expires" is not checked on all active accounts.