DoD information system access does not require the use of a password.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-7002 | 4.017 | SV-25210r1_rule | High |
| Description |
|---|
| The lack of password protection enables anyone to gain access to the information system, which opens a backdoor opportunity for intruders to compromise the system as well as other resources within the same administrative domain. |
| STIG | Date |
|---|---|
| Windows 7 Security Technical Implementation Guide | 2016-07-22 |
Details
| Check Text ( None ) |
|---|
| None |
| Fix Text (F-6581r1_fix) |
|---|
| Configure all DoD information systems to require passwords to gain access. The password required flag can be set by entering the following on a command line: “Net user |