Interactive logon: Prompt user to change password before expirationID: oval:org.secpod.oval:def:8820 | Date: (C)2013-01-21 (M)2023-07-14 |
Class: COMPLIANCE | Family: windows |
The Interactive logon: Prompt user to change password before expiration setting should be configured correctly.
This policy setting determines how far in advance users are warned that their password will expire. Microsoft recommends that you configure this policy setting to 14 days to sufficiently warn users when their passwords will expire.
Fix:
(1) GPO: Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options\Interactive logon: Prompt user to change password before expiration
(2) KEY: HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\PasswordExpiryWarning
Platform: |
Microsoft Windows Server 2008 R2 |