CCE-42555-3| Platform: win10 | Date: (C)2016-09-23 (M)2022-10-10 |
Expiration
This setting specifies the period of time (in days) that a PIN can be used before the system requires the user to change it. The PIN can be set to expire after any number of days between 1 and 730, or PINs can be set to never expire if the policy is set to 0.
Default: 0.
Counter Measure:
Configure this setting depending on your organization's requirements.
Potential Impact:
PINs will need to be changed within the specified frequency.
Parameter:
Technical Mechanism:
(1) GPO: User Configuration\Administrative Templates\Windows Components\Microsoft Passport for Work\PIN Complexity\Expiration
(2) REG: HKEY_USERS\Software\Policies\Microsoft\PassportForWork\PINComplexity\Expiration
(3) WMI: ###
| CCSS Severity: | CCSS Metrics: |
| CCSS Score : | Attack Vector: |
| Exploit Score: | Attack Complexity: |
| Impact Score: | Privileges Required: |
| Severity: | User Interaction: |
| Vector: | Scope: |
| | Confidentiality: |
| | Integrity: |
| | Availability: |
| | |
References: | Resource Id | Reference |
|---|
| SCAP Repo OVAL Definition | oval:org.secpod.oval:def:36456 |
| SCAP Repo OVAL Definition | oval:org.secpod.oval:def:36456 |
| SCAP Repo OVAL Definition | oval:org.secpod.oval:def:36456 |
