[Forgot Password]
Login  Register Subscribe

23631

 
 

126951

 
 

99602

 
 

909

 
 

80198

 
 

109

Paid content will be excluded from the download.


Download | Alert*
OVAL

Minimum Password Length

ID: oval:org.secpod.oval:def:23035Date: (C)2015-01-07   (M)2017-10-31
Class: COMPLIANCEFamily: windows




This policy setting determines the least number of characters that make up a password for a user account. There are many different theories about how to determine the best password length for an organization, but perhaps pass phrase is a better term than password. In Microsoft Windows 2000 or later, pass phrases can be quite long and can include spaces. Therefore, a phrase such as I want to drink a $5 milkshake is a valid pass phrase; it is a considerably stronger password than an 8 or 10 character string of random numbers and letters, and yet is easier to remember. Users must be educated about the proper selection and maintenance of passwords, especially with regard to password length. In enterprise environments, the ideal value for the Minimum password length setting is 14 characters, however you should adjust this value to meet your organization's business requirements. This policy setting determines the least number of characters that make up a password for a user account. Fix: (1) GPO: Computer Configuration\Windows Settings\Security Settings\Account Policies\Password Policy!Minimum Password Length (2) WMI: root\rsop\computer#RSOP_SecuritySettingNumeric#Setting#KeyName = 'MinimumPasswordLength' And precedence=1

Platform:
Microsoft Windows Server 2012 R2
Reference:
CCE-36534-6
CPE    1
cpe:/o:microsoft:windows_server_2012::r2:x64
CCE    1
CCE-36534-6
XCCDF    3
xccdf_org.secpod_benchmark_NIST_800_171_R1_Windows_Server_2012_R2
xccdf_org.secpod_benchmark_general_Windows_2012_R2
xccdf_org.secpod_benchmark_PCI_3_2_Windows_Server_2012_R2

© 2013 SecPod Technologies