[Forgot Password]
Login  Register Subscribe

24128

 
 

131573

 
 

110507

 
 

909

 
 

86504

 
 

136

Paid content will be excluded from the download.


Download | Alert*
CCE
view XML

CCE-42856-5

Platform: win10Date: (C)2016-09-23   (M)2018-07-10



Disable: 'Domain member: Disable machine account password changes' for disablepasswordchange This policy setting determines whether a domain member can periodically change its computer account password. If you enable this policy setting, the domain member will be prevented from changing its computer account password. If you disable this policy setting, the domain member can change its computer account password as specified by the Domain Member: Maximum machine account password age setting, which by default is every 30 days. Computers that cannot automatically change their account passwords are potentially vulnerable, because an attacker might be able to determine the password for the system's domain account. Counter Measure: Verify that the Domain member: Disable machine account password changes setting is configured to Disabled. Potential Impact: None. This is the default configuration.


Parameter:


Technical Mechanism: (1) GPO: Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options\Domain member: Disable machine account password changes (2) REG: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\disablepasswordchange

References:

Resource IdReference
SCAP Repo OVAL Definitionoval:org.secpod.oval:def:35195


OVAL    1
oval:org.secpod.oval:def:35195
XCCDF    5
xccdf_org.secpod_benchmark_general_Windows_10
xccdf_org.secpod_benchmark_HIPAA_45CFR_164_Windows_10
xccdf_org.secpod_benchmark_NIST_800_171_R1_Windows_10
xccdf_org.secpod_benchmark_NIST_800_53_r4_Windows_10
...

© SecPod Technologies