The computer account password must not be prevented from being reset.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-1165	WN08-SO-000015	SV-48057r1_rule	IAIA-1 IAIA-2	Low

Description
Computer account passwords are changed automatically on a regular basis. Disabling automatic password changes can make the system more vulnerable to malicious access. Frequent password changes can be a significant safeguard for your system. A new password for the computer account will be generated every 30 days.

STIG	Date
Windows 8 / 8.1 Security Technical Implementation Guide	2015-03-09

Details

Check Text ( None )
None

Fix Text (F-41195r1_fix)
Configure the policy value for Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options -> "Domain Member: Disable Machine Account Password Changes" to "Disabled".