Title

The built-in Microsoft password filter is not enabled. (Cat III impact)

Discussion

The use of complex passwords increases their strength against guessing. This policy setting configures the system to verify that newly-created passwords conform to the Windows password complexity policy.

Check Content

Fix Text

Configure the policy value for Computer Configuration -> Windows Settings -> Security Settings -> Account Policies -> Password Policy -> “Password must meet complexity requirements” to "Enabled".

Additional Identifiers

Rule ID: SV-29683r1_rule

Vulnerability ID: V-1150

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.