PIN Complexity: PIN ExpirationID: oval:org.secpod.oval:def:35322 | Date: (C)2016-06-10 (M)2023-12-13 |
Class: COMPLIANCE | Family: windows |
This setting specifies the period of time (in days) that a PIN can be used before the system requires the user to change it. The PIN can be set to expire after any number of days between 1 and 730, or PINs can be set to never expire if the policy is set to 0.
Default: 0.
Counter Measure:
Configure this setting depending on your organization's requirements.
Potential Impact:
PINs will need to be changed within the specified frequency.
Fix:
(1) GPO: Computer Configuration\Administrative Templates\Windows Components\Microsoft Passport for Work\PIN Complexity\Expiration
(2) REG: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\PassportForWork\PINComplexity!Expiration
Platform: |
Microsoft Windows 10 |