Local accounts must require passwords.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-7002 | WN08-GE-000018 | SV-48163r1_rule | High |
| Description |
|---|
| The lack of password protection enables anyone to gain access to the information system, which opens a backdoor opportunity for intruders to compromise the system as well as other resources. Local accounts on a system must require passwords. |
| STIG | Date |
|---|---|
| Windows 8/8.1 Security Technical Implementation Guide | 2017-04-28 |
Details
| Check Text ( None ) |
|---|
| None |
| Fix Text (F-41301r1_fix) |
|---|
| Ensure all local accounts are configured to require passwords to gain access. The password required flag can be set by entering the following on a command line: "Net user |