Detections
Analytics

800-53|IA-5g.

Title

AUTHENTICATOR MANAGEMENT

Description

Changing/refreshing authenticators [Assignment: organization-defined time period by authenticator type];

Reference Item Details

Category: IDENTIFICATION AND AUTHENTICATION

Family: IDENTIFICATION AND AUTHENTICATION

Baseline Impact: LOW,MODERATE,HIGH

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.1.3.5.6 Set 'Domain member: Disable machine account password changes' to 'Disabled'WindowsCIS Windows 8 L1 v1.0.0
2.3.6.4 (L1) Ensure 'Domain member: Disable machine account password changes' is set to 'Disabled'WindowsCIS Microsoft Windows Server 2008 Member Server Level 1 v3.3.1
2.3.6.4 (L1) Ensure 'Domain member: Disable machine account password changes' is set to 'Disabled'WindowsCIS Microsoft Windows Server 2019 STIG v2.0.0 STIG DC
2.3.6.4 (L1) Ensure 'Domain member: Disable machine account password changes' is set to 'Disabled'WindowsCIS Microsoft Windows Server 2019 STIG v2.0.0 L1 MS
2.3.6.4 (L1) Ensure 'Domain member: Disable machine account password changes' is set to 'Disabled'WindowsCIS Windows Server 2012 MS L1 v3.0.0
2.3.6.4 (L1) Ensure 'Domain member: Disable machine account password changes' is set to 'Disabled'WindowsCIS Windows Server 2012 DC L1 v3.0.0
2.3.6.4 (L1) Ensure 'Domain member: Disable machine account password changes' is set to 'Disabled'WindowsCIS Windows Server 2012 R2 DC L1 v3.0.0
2.3.6.4 (L1) Ensure 'Domain member: Disable machine account password changes' is set to 'Disabled'WindowsCIS Microsoft Windows Server 2008 R2 Domain Controller Level 1 v3.3.1
2.3.6.4 (L1) Ensure 'Domain member: Disable machine account password changes' is set to 'Disabled'WindowsCIS Microsoft Windows Server 2008 Domain Controller Level 1 v3.3.1
2.3.6.4 (L1) Ensure 'Domain member: Disable machine account password changes' is set to 'Disabled'WindowsCIS Microsoft Windows Server 2019 STIG v2.0.0 STIG MS
2.3.6.4 (L1) Ensure 'Domain member: Disable machine account password changes' is set to 'Disabled'WindowsCIS Azure Compute Microsoft Windows Server 2019 v1.0.0 L1 DC
2.3.6.4 (L1) Ensure 'Domain member: Disable machine account password changes' is set to 'Disabled'WindowsCIS Windows Server 2012 R2 MS L1 v3.0.0
2.3.6.4 (L1) Ensure 'Domain member: Disable machine account password changes' is set to 'Disabled'WindowsCIS Azure Compute Microsoft Windows Server 2019 v1.0.0 L1 MS
2.3.6.4 (L1) Ensure 'Domain member: Disable machine account password changes' is set to 'Disabled'WindowsCIS Microsoft Windows Server 2008 R2 Member Server Level 1 v3.3.1
2.3.6.4 (L1) Ensure 'Domain member: Disable machine account password changes' is set to 'Disabled'WindowsCIS Microsoft Windows Server 2019 STIG v2.0.0 L1 DC
2.3.6.4 Ensure 'Domain member: Disable machine account password changes' is set to 'Disabled'WindowsCIS Microsoft Windows Server 2022 STIG v1.0.0 L1 MS
2.3.6.4 Ensure 'Domain member: Disable machine account password changes' is set to 'Disabled'WindowsCIS Microsoft Windows Server 2022 STIG v1.0.0 STIG DC
2.3.6.4 Ensure 'Domain member: Disable machine account password changes' is set to 'Disabled'WindowsCIS Azure Compute Microsoft Windows Server 2022 v1.0.0 L1 DC
2.3.6.4 Ensure 'Domain member: Disable machine account password changes' is set to 'Disabled'WindowsCIS Microsoft Windows Server 2022 STIG v1.0.0 L1 DC
2.3.6.4 Ensure 'Domain member: Disable machine account password changes' is set to 'Disabled'WindowsCIS Microsoft Windows Server 2022 STIG v1.0.0 STIG MS
2.3.6.4 Ensure 'Domain member: Disable machine account password changes' is set to 'Disabled'WindowsCIS Azure Compute Microsoft Windows Server 2022 v1.0.0 L1 MS
2.3.6.4 Ensure 'Domain member: Disable machine account password changes' is set to 'Disabled'WindowsCIS Windows 7 Workstation Level 1 v3.2.0
2.3.6.4 Ensure 'Domain member: Disable machine account password changes' is set to 'Disabled'WindowsCIS Windows 7 Workstation Level 1 + Bitlocker v3.2.0
Domain controller: Refuse machine account password changesWindowsMSCT Windows Server 2012 R2 DC v1.0.0
Domain controller: Refuse machine account password changesWindowsMSCT Windows Server 1903 DC v1.19.9
Domain controller: Refuse machine account password changesWindowsMSCT Windows Server 2016 DC v1.0.0
Domain controller: Refuse machine account password changesWindowsMSCT Windows Server 2019 DC v1.0.0
Domain member: Disable machine account password changesWindowsMSCT Windows Server 2016 MS v1.0.0
Domain member: Disable machine account password changesWindowsMSCT Windows Server 2019 DC v1.0.0
Domain member: Disable machine account password changesWindowsMSCT Windows Server 1903 DC v1.19.9
Domain member: Disable machine account password changesWindowsMSCT Windows Server 2016 DC v1.0.0
Domain member: Disable machine account password changesWindowsMSCT Windows Server 2019 MS v1.0.0
Domain member: Disable machine account password changesWindowsMSCT Windows Server 2012 R2 DC v1.0.0
Domain member: Disable machine account password changesWindowsMSCT Windows 10 1803 v1.0.0
Domain member: Disable machine account password changesWindowsMSCT Windows Server 1903 MS v1.19.9
Domain member: Disable machine account password changesWindowsMSCT Windows Server 2012 R2 MS v1.0.0
Domain member: Disable machine account password changesWindowsMSCT Windows 10 1903 v1.19.9
Domain member: Disable machine account password changesWindowsMSCT Windows 10 v1507 v1.0.0
Domain member: Disable machine account password changesWindowsMSCT Windows 10 1809 v1.0.0