SRG-OS-000076-GPOS-00044 Controls

STIG IDVersionTitleProduct
RHEL-08-020200V1R6RHEL 8 user account passwords must have a 60-day maximum password lifetime restriction.
RHEL-08-020210V1R6RHEL 8 user account passwords must be configured so that existing passwords are restricted to a 60-day maximum lifetime.
SLES-15-020220V1R4The SUSE operating system must be configured to create or update passwords with a maximum lifetime of 60 days.
SLES-15-020230V1R4The SUSE operating system must employ user passwords with a maximum lifetime of 60 days.
WN19-00-000020V3R1Windows Server 2019 passwords for the built-in Administrator account must be changed at least every 60 days.
WN19-00-000210V3R1Windows Server 2019 passwords must be configured to expire.
WN19-AC-000050V3R1Windows Server 2019 maximum password age must be configured to 60 days or less.
UBTU-18-010107V2R12The Ubuntu operating system must enforce a 60-day maximum password lifetime restriction. Passwords for new users must have a 60-day maximum password lifetime restriction.
UBTU-20-010008V1R6The Ubuntu operating system must enforce a 60-day maximum password lifetime restriction. Passwords for new users must have a 60-day maximum password lifetime restriction.
APPL-14-003008V1R1The macOS system must restrict maximum password lifetime to 60 days.
APPL-13-003008V1R5The macOS system must enforce a 60-day maximum password lifetime restriction.
OL07-00-010250V3R1The Oracle Linux operating system must be configured so that passwords for new users are restricted to a 60-day maximum lifetime.
OL07-00-010260V3R1The Oracle Linux operating system must be configured so that existing passwords are restricted to a 60-day maximum lifetime.
RHEL-07-010250V3R6The Red Hat Enterprise Linux operating system must be configured so that passwords for new users are restricted to a 60-day maximum lifetime.
RHEL-07-010260V3R6The Red Hat Enterprise Linux operating system must be configured so that existing passwords are restricted to a 60-day maximum lifetime.
SLES-12-010280V3R1The SUSE operating system must be configured to create or update passwords with a maximum lifetime of 60 days.
SLES-12-010290V3R1The SUSE operating system must employ user passwords with a maximum lifetime of 60 days.
APPL-15-003008V1R1The macOS system must restrict maximum password lifetime to 60 days.
ALMA-09-037970V1R1Passwords for existing users must have a 60-day maximum password lifetime restriction in /etc/shadow.
ALMA-09-038080V1R1Passwords for new users or password changes must have a 60-day maximum password lifetime restriction in /etc/login.defs.
OL08-00-020200V1R6OL 8 user account passwords must have a 60-day maximum password lifetime restriction.
OL08-00-020210V1R6OL 8 user account passwords must be configured so that existing passwords are restricted to a 60-day maximum lifetime.
OL09-00-001095V1R1OL 9 user account passwords for new users or password changes must have a 60-day maximum password lifetime restriction in /etc/login.defs.
OL09-00-001100V1R1OL 9 user account passwords must have a 60-day maximum password lifetime restriction.
UBTU-24-400310V1R1Ubuntu 24.04 LTS must enforce a 60-day maximum password lifetime restriction. Passwords for new users must have a 60-day maximum password lifetime restriction.
UBTU-22-411030V1R1Ubuntu 22.04 LTS must enforce a 60-day maximum password lifetime restriction. Passwords for new users must have a 60-day maximum password lifetime restriction.
WN11-00-000090V1R6Accounts must be configured to require password expiration.
WN11-AC-000025V1R6The maximum password age must be configured to 60 days or less.
WN11-SO-000280V1R6Passwords for enabled local Administrator accounts must be changed at least every 60 days.
RHEL-09-411010V2R5RHEL 9 user account passwords for new users or password changes must have a 60-day maximum password lifetime restriction in /etc/login.defs.
RHEL-09-411015V2R5RHEL 9 user account passwords must have a 60-day maximum password lifetime restriction.
WN10-00-000090V3R1Accounts must be configured to require password expiration.
WN10-AC-000025V3R1The maximum password age must be configured to 60 days or less.
WN10-SO-000280V3R1Passwords for enabled local Administrator accounts must be changed at least every 60 days.
WN16-00-000030V2R9Passwords for the built-in Administrator account must be changed at least every 60 days.
WN16-00-000230V2R9Passwords must be configured to expire.
WN16-AC-000050V2R9Windows Server 2016 maximum password age must be configured to 60 days or less.
WN22-00-000020V2R5Windows Server 2022 passwords for the built-in Administrator account must be changed at least every 60 days.
WN22-00-000210V2R5Windows Server 2022 passwords must be configured to expire.
WN22-AC-000050V2R5Windows Server 2022 maximum password age must be configured to 60 days or less.
This website is not created by, run, approved, or endorsed by the U.S. Department of Defense. Use at your own risk. This website is created by open-source software.