Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-36698 | WN12-CC-000075 | SV-51739r1_rule | IAIA-1 | Medium |
Description |
---|
Allowing biometrics may bypass required authentication methods. Biometrics may only be used as an additional authentication factor where an enhanced strength of identity credential is necessary or desirable. Additional factors must be met per DoD policy. |
STIG | Date |
---|---|
Windows Server 2012 / 2012 R2 Domain Controller Security Technical Implementation Guide | 2015-01-06 |
Check Text ( None ) |
---|
None |
Fix Text (F-44814r1_fix) |
---|
Configure the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Biometrics -> "Allow the use of biometrics" to "Disabled". |