Minimum password length

Information

Minimum password length

This security setting determines the least number of characters that a password for a user account may contain. You can set a value of between 1 and 14 characters, or you can establish that no password is required by setting the number of characters to 0.

Default:

7 on domain controllers.
0 on stand-alone servers.

Note: By default, member computers follow the configuration of their domain controllers.

Solution

Policy Path: Account Policies\Password Policy
Policy Name: Minimum password length

See Also

https://www.microsoft.com/en-us/download/details.aspx?id=55319

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-5(1)(a), CSCv6|5.7, CSCv6|16.2, CSCv6|16.5

Plugin: Windows

Control ID: 6b3f2316ed8e07bfea556db1bd9ada7b5f0d8ec094a38210a4bdafe66fcfb13a