News

Microsoft acknowledged that policy of password aging is ineffective

Microsoft decided to step away from policy of password aging that forced users to change saved passwords from time to time.

Technical giant presented new project plan of basic configuration settings for Windows 10 v1903 (19H10) and Windows Server v1903, that would eliminate the need to change password every weeks or months in accounts that are under group policy.

Innovation will be implemented in Windows 10 Update that would be released in May 2019.

As Microsoft explains in its blog, existing policy “ancient and outdated, with little value” and company does not “consider it reasonable”. Algorithm of passwords aging that demands periodic password changes is not a reliable method of account protection, especially remembering that if password was stolen it is necessary take measures immediately instead of waiting until it expires, note in a company.

After cancellation of password aging policy Microsoft recommends organizations to replace preset password expiration settings with newer and modern safety practices, for instance, with multifactorial authentication, methods of brutforce-attacks detection or with realization of prohibited passwords list.

However, company does not change recommendations on minimal length and complicity of a password.

“To try to avoid inevitable misunderstandings, we are talking here only about removing password-expiration policies – we are not proposing changing requirements for minimum password length, history, or complexity.”, — emphasizes Microsoft experts.

Document also contains recommended policies concerning groups of users in corporate network, including rules that limit work of certain functions for abuse prevention, and blocking of certain functions that malware can exploit in attacks on system or network.

Source: https://blogs.technet.microsoft.com

Polina Lisovskaya

I works as a marketing manager for years now and loves searching for interesting topics for you

Recent Posts

Remove Pbmsoultions.com Pop-up Ads

About Pbmsoultions.com Pbmsoultions.com pop-ups can not launch out of the blue. If you have actually…

1 day ago

Remove Prizestash.com Pop-up Ads

About Prizestash.com Prizestash.com pop-ups can not expose out of the blue. If you have actually…

1 day ago

Remove Verifiedbreaking.com Pop-up Ads

About Verifiedbreaking.com Verifiedbreaking.com pop-ups can not launch out of nowhere. If you have actually clicked…

1 day ago

Remove Themoneyminutes.com Pop-up Ads

About Themoneyminutes.com Themoneyminutes.com pop-ups can not launch out of the blue. If you have actually…

1 day ago

Remove News-xcidizi.com Pop-up Ads

About News-xcidizi.com News-xcidizi.com pop-ups can not introduce out of nowhere. If you have clicked some…

1 day ago

Remove Everytraffic-flow.com Pop-up Ads

About Everytraffic-flow.com Everytraffic-flow.com pop-ups can not launch out of nowhere. If you have actually clicked…

1 day ago