Check: 4.014
Win2k8 R2 Audit:
4.014
(in version v1 r8)
Title
The password uniqueness will meet minimum requirements. (Cat II impact)
Discussion
A system is more vulnerable to unauthorized access when system users recycle the same password several times without being required to change a password to a unique password on a regularly scheduled basis. This enables users to effectively negate the purpose of mandating periodic password changes.
Check Content
Fix Text
Configure the system to remember a minimum of "24" used passwords.
Additional Identifiers
Rule ID: SV-32290r1_rule
Vulnerability ID: V-1107
Group Title: Password Uniqueness
Expert Comments
Expert comments are only available to logged-in users.
CCIs
CCIs tied to check.
| Number | Definition |
|---|---|
| No CCIs are assigned to this check |
Controls
Controls tied to check. These are derived from the CCIs shown above.
| Number | Title |
|---|---|
| No controls are assigned to this check |