4.012 - Minimum password age does not meet minimum requirements.

Information

Permitting passwords to be changed in immediate succession within the same day, allows users to cycle passwords through their history database. This enables users to effectively negate the purpose of mandating periodic password changes.

Solution

Configure the Minimum Password Age so that it is a minimum of '1'.

See Also

http://iasecontent.disa.mil/stigs/zip/Oct2016/U_Windows_Vista_V6R41_STIG.zip

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-5(1)(d), CAT|II, CCI|CCI-000198, Rule-ID|SV-28994r1_rule, STIG-ID|4.012, Vuln-ID|V-1105

Plugin: Windows

Control ID: fa3a782c77220fe93349d4901bd78ffb2b9f904c45cea2c16e1431cbe74b73de