Windows Server 2022 manually managed application account passwords must be changed at least annually or when a system administrator with knowledge of the password leaves the organization.
An XCCDF Rule
Description
Setting application account passwords to expire may cause applications to stop functioning. However, not changing them on a regular basis exposes them to attack. If managed service accounts are used, this alleviates the need to manually change application account passwords.
- ID
- SV-254243r991589_rule
- Version
- WN22-00-000060
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Change passwords for manually managed application/service accounts at least annually or when an administrator with knowledge of the password leaves the organization.
It is recommended that system-managed service accounts be used whenever possible.