Windows 2008 Domain Controller Security Technical Implementation Guide

The Windows 2008 Domain Controller Security Technical Implementation Guide (V6 R47) has 245 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

245STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V6 · R47

CurrentPublished Wed Jun 17 2020

Minimum password age does not meet minimum requirements.

Windows 2008 Domain Controller Security Technical Implementation Guide

Assessment Title

Rule Text

Minimum password age does not meet minimum requirements.

Description

Discussion Text

Permitting passwords to be changed in immediate succession within the same day, allows users to cycle passwords through their history database. This enables users to effectively negate the purpose of mandating periodic password changes.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-1105

Rule

SV-28995r1_rule

Severity

medium

Rule Version

4.012

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Analyze the system using the Security Configuration and Analysis snap-in.
Expand the Security Configuration and Analysis tree view.
Navigate to Account Policies -> Password Policy.

If the value for the "Minimum password age" is less than one day, then this is a finding.

Implementation Procedure

Fix Text

Configure the Minimum Password Age so that it is a minimum of "1".

STIG check 19 of 245 in the Windows 2008 Domain Controller STIG checklist

← Previous · V-1104Maximum password age does not meet minimum requirements.Next · V-1107 →The password history must be configured to 24 passwords remembered.