20.1 Ensure 'Accounts require passwords'

Information

This policy setting ensures that all accounts are password protected.

The lack of password protection enables anyone to gain access to the system, which opens a backdoor opportunity for intruders to compromise the system as well as other resources.

Solution

Configure all enabled accounts to require passwords.

Note: The password required flag can be set by entering the following on a command line:

Net user [username] /passwordreq:yes

Substitute [username] with the name of the user account.

Impact:

All accounts will be required to have a password for protection.

See Also

https://workbench.cisecurity.org/benchmarks/18857

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-5(1), CSCv7|4.4

Plugin: Windows

Control ID: f25851ecca72b212053201751188afcdcbdfb008001d8312a7f831aaec5335bc