Policies/

Ensure 'Minimum password length' is set to '14 or more characters'

Marcos Oviedo

This policy setting determines the least number of characters that make up a password for a user account.

Control

Create or edit a configuration profile with the following information:

Create or edit the following script and configure it to run when the check fails:

Check

Use the policy below to verify:

Query PowerShellNEW BashNEW

SELECT 1 FROM security_profile_info WHERE minimum_password_length >= 14;

$netAccountsOutput = net accounts

$minPwdLine = $netAccountsOutput | Where-Object {$_ -match "Minimum password length"}

if ($minPwdLine -match "Minimum password length:\s*(\d+)") {
    $minPasswordLength = [int]$matches[1]
    if ($minPasswordLength -ge 14) {
        Write-Output "1"
    }
}