Back

Configure the "Interactive logon: Machine account lockout threshold" to organizational standards.


CONTROL ID
08419
CONTROL TYPE
Configuration
CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS




This Control directly supports the implied Control(s):
  • Configure Key, Certificate, Password, Authentication and Identity Management settings in accordance with organizational standards., CC ID: 07621

There are no implementation support Controls.


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH




  • Configure the "Interactive logon: Machine account lockout threshold" setting to "10". (A9535104-8AF9-40ED-BE07-144114EAD67E, Win8 Computer Security Compliance, 1.0)
  • Configure the "Interactive logon: Machine account lockout threshold" setting to "10". (D643FEB4-9D94-481D-AE0D-BB81B4190B5B, Win8 Computer Security Compliance, 1.0)
  • Configure the "Interactive logon: Machine account lockout threshold" setting to "10". (F535C820-B679-4773-B641-3235F20C62EF, WS2012 Member Server Security Compliance, 1.0)
  • Title: Set 'Interactive logon: Machine account lockout threshold' to 10 or fewer invalid logon attempts Description: The machine lockout policy is enforced only on those machines that have Bitlocker enabled for protecting OS volumes. Please ensure that appropriate recovery password backup pol… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.3.6.1_Set_Interactive_logon_Machine_account_lockout_threshold_to_10_or_fewer_invalid_logon_attempts Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.3.6.1.1_, The Center for Internet Security Microsoft Windows 8 Level 1 + BitLocker Benchmark, 1.0.0)
  • Title: Set 'Interactive logon: Machine account lockout threshold' to 10 or fewer invalid logon attempts Description: The machine lockout policy is enforced only on those machines that have Bitlocker enabled for protecting OS volumes. Please ensure that appropriate recovery password backup pol… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.3.6.1_Set_Interactive_logon_Machine_account_lockout_threshold_to_10_or_fewer_invalid_logon_attempts Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.3.6.1.2_, The Center for Internet Security Microsoft Windows 8 Level 1 + BitLocker Benchmark, 1.0.0)
  • Title: Set 'Interactive logon: Machine account lockout threshold' to 10 or fewer invalid logon attempts Description: The machine lockout policy is enforced only on those machines that have Bitlocker enabled for protecting OS volumes. Please ensure that appropriate recovery password backup pol… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.3.6.1_Set_Interactive_logon_Machine_account_lockout_threshold_to_10_or_fewer_invalid_logon_attempts Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.3.6.1.1_, The Center for Internet Security Microsoft Windows 8 Level 1 Benchmark, 1.0.0)
  • Title: Set 'Interactive logon: Machine account lockout threshold' to 10 or fewer invalid logon attempts Description: The machine lockout policy is enforced only on those machines that have Bitlocker enabled for protecting OS volumes. Please ensure that appropriate recovery password backup pol… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.3.6.1_Set_Interactive_logon_Machine_account_lockout_threshold_to_10_or_fewer_invalid_logon_attempts Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.3.6.1.2_, The Center for Internet Security Microsoft Windows 8 Level 1 Benchmark, 1.0.0)
  • Title: Set 'Interactive logon: Machine account lockout threshold' to 10 or fewer invalid logon attempts Description: The machine lockout policy is enforced only on those machines that have Bitlocker enabled for protecting OS volumes. Please ensure that appropriate recovery password backup pol… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.3.7.12_Set_Interactive_logon_Machine_account_lockout_threshold_to_10_or_fewer_invalid_logon_attempts Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.3.7.12.1_, The Center for Internet Security Microsoft Windows Server 2012 Level 1 Member Server Benchmark, 1.0.0)
  • Title: Set 'Interactive logon: Machine account lockout threshold' to 10 or fewer invalid logon attempts Description: The machine lockout policy is enforced only on those machines that have Bitlocker enabled for protecting OS volumes. Please ensure that appropriate recovery password backup pol… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.3.7.12_Set_Interactive_logon_Machine_account_lockout_threshold_to_10_or_fewer_invalid_logon_attempts Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.3.7.12.2_, The Center for Internet Security Microsoft Windows Server 2012 Level 1 Member Server Benchmark, 1.0.0)