Accounts must be configured to require password expiration.

From Windows 10 Security Technical Implementation Guide

Associated with: CCI-000199

SV-77861r1_rule Accounts must be configured to require password expiration.

Vulnerability discussion

Passwords that do not expire increase exposure with a greater probability of being discovered or cracked.

Check content

Run "Computer Management". Navigate to System Tools >> Local Users and Groups >> Users. Double click each active account. If "Password never expires" is selected for any account, this is a finding.

Fix text

Configure all passwords to expire. Run "Computer Management". Navigate to System Tools >> Local Users and Groups >> Users. Double click each active account. Ensure "Password never expires" is not checked on all active accounts.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.