3.8 Ensure 'Require alphanumeric password' is set to 'True'

Information

This policy setting ensures passwords meet the basic requirements for strong passwords.

Rationale:

Passwords that contain only alpha characters are extremely easy to discover with several publicly available tools.

Impact:

Users will be forced to use alphanumeric passwords.

Note: This is a mobile device management setting. Use caution when applying these settings as they could have adverse effects depending on the environment, and internal policies around bring your own device (BYOD). These policies could affect a user's BYOD.

Solution

To implement the recommended state, execute the following PowerShell cmdlet:

Set-MobileDeviceMailboxPolicy 'Profile' -AlphanumericPasswordRequired $true

OR

Perform the following actions:

Launch the EAC (Exchange Administrative Center).

Go to 'Mobile' on the left and click on the 'Mobile device mailbox policies' tab.

Double-click the policy you wish to modify and go to the 'Security' settings.

Ensure the Require an alphanumeric password box is checked and click Save.

Default Value:

False

See Also

https://workbench.cisecurity.org/benchmarks/12442

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-5(1), CSCv7|4.4

Plugin: Windows

Control ID: ea6731147397352b07d1f9274f1db78084f8e56e39a6c04749a7d83e5bc14cb8