Reversible Passwords in GPO

While creating local accounts on machines via GPOs using the Group Policy Preferences (GPP) feature, some administrators may unknowingly store passwords in a format that is accessible to attackers. Additionally, configuring computers to bypass password requirements during startup can also result in such security issues.

GPOs that store reversible passwords are typically legacy settings or autologon features that you should eliminate. These settings expose valid credentials and pose a security risk.

Name: Reversible Passwords in GPO

Codename: C-REVER-PWD-GPO

Severity: Medium