PIN Complexity: ExpirationID: oval:org.secpod.oval:def:36456 | Date: (C)2016-08-05 (M)2022-12-02 |
Class: COMPLIANCE | Family: windows |
This setting specifies the period of time (in days) that a PIN can be used before the system requires the user to change it. The PIN can be set to expire after any number of days between 1 and 730, or PINs can be set to never expire if the policy is set to 0.
Default: 0.
Counter Measure:
Configure this setting depending on your organization's requirements.
Potential Impact:
PINs will need to be changed within the specified frequency.
Fix:
(1) GPO: User Configuration\Administrative Templates\Windows Components\Microsoft Passport for Work\PIN Complexity\Expiration
(2) REG: HKEY_CURRENT_USER\Software\Policies\Microsoft\PassportForWork\PINComplexity!Expiration
(3) WMI: ###
Platform: |
Microsoft Windows 10 |