[Forgot Password]
Login  Register Subscribe

24003

 
 

131486

 
 

106342

 
 

909

 
 

84584

 
 

134

Paid content will be excluded from the download.


Download | Alert*
OVAL

Domain member: Disable machine account password changes

ID: oval:org.secpod.oval:def:40236Date: (C)2017-04-25   (M)2018-04-10
Class: COMPLIANCEFamily: windows




This policy setting determines whether a domain member can periodically change its computer account password. If you enable this policy setting, the domain member will be prevented from changing its computer account password. If you disable this policy setting, the domain member can change its computer account password as specified by the Domain Member: Maximum machine account password age setting, which by default is every 30 days. Computers that cannot automatically change their account passwords are potentially vulnerable, because an attacker might be able to determine the password for the system's domain account. Vulnerability: The default configuration for Windows Server 2003 -based computers that belong to a domain is that they are automatically required to change the passwords for their accounts every 30 days. If you disable this policy setting, computers that run Windows Server 2003 will retain the same passwords as their computer accounts. Computers that are no longer able to automatically change their account password are at risk from an attacker who could determine the password for the computer's domain account. Counter Measure: Verify that the Domain member: Disable machine account password changes setting is configured to Disabled. Potential Impact: None. This is the default configuration. Fix: (1) GPO: Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options\Domain member: Disable machine account password changes (2) REG: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters!disablepasswordchange

Platform:
Microsoft Windows Server 2016
Reference:
CCE-46018-8
CPE    1
cpe:/o:microsoft:windows_server_2016:::x64
CCE    1
CCE-46018-8
XCCDF    5
xccdf_org.secpod_benchmark_general_Windows_Server_2016
xccdf_org.secpod_benchmark_NIST_800_53_r4_Windows_Server_2016
xccdf_org.secpod_benchmark_HIPAA_45CFR_164_Windows_Server_2016
xccdf_org.secpod_benchmark_NIST_800_171_R1_Windows_Server_2016
...

© 2013 SecPod Technologies