C.1“口令長度最小值為8位字符長度”核心配置基線xml示例

C.1“口令長度最小值為8位字符長度”核心配置基線xml示例

<?xml version="1.0" encoding="UTF-8"?>

[<**CGDCC-Package** xmlns:admx="http://schemas.microsoft.com/GroupPolicy/2008/03/PolicyDefinitions" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:cgdcc-core="http://schemas.sic.com/CGDCC/SecurityCompliance/core" xmlns="http://schemas.sic.com/CGDCC/SecurityCompliance"](%3cCGDCCPackage%20xmlns:admx=%22http:/schemas.microsoft.com/GroupPolicy/2008/03/PolicyDefinitions%22%20xmlns:xsi=%22http:/www.w3.org/2001/XMLSchema-instance%22%20xmlns:cgdcc-core=%22http:/schemas.sic.com/CGDCC/SecurityCompliance/core%22%20xmlns=%22http:/schemas.sic.com/CGDCC/SecurityCompliance%22%20)

**[<CGDCC-FormatInfo>](file:///E:/work/CGDCC/CGDCC工具/CGDCC檢測工具/CGDCCScanner/Packages/CGDCC-Win7-sp1/Package.xml)**

<**Version Minor**="0" **Major**="1"/>

<**Description**>此基線格式為1.0版本</**Description**>

</**CGDCC-FormatInfo**>

[<**CGDCC-Baseline** **Name**="CGDCC-Win7-sp1" **ID**="{b5d9580f-7753-4dfb-9e53-634057e2a512}">](file:///E:/work/CGDCC/CGDCC工具/CGDCC檢測工具/CGDCCScanner/Packages/CGDCC-Win7-sp1/Package.xml)

<**Version Minor**="0" **Major**="1"/>

<**Mode**="Published"/>

**[<VersionControl>](file:///E:/work/CGDCC/CGDCC工具/CGDCC檢測工具/CGDCCScanner/Packages/CGDCC-Win7-sp1/Package.xml)**

**[<Publisher Name= SIC >](file:///E:/work/CGDCC/CGDCC工具/CGDCC檢測工具/CGDCCScanner/Packages/CGDCC-Win7-sp1/Package.xml)**

</**Publisher**>

<**OriginalBaselineID**>{71a71226-6325-41be-99dc-6af28cb617da}</**OriginalBaselineID**>

<**RevisionNumber**>0</**RevisionNumber**>

</**VersionControl**>

[**<SettingGroup Name=**"帳戶策略\口令管理" **ID=**"{d5a1fca2-3933-4dd0-9b88-1995ceb14611}" **OriginalSettingGroupID**="{923ae966-e0c3-486c-b883-806cc9a188e2}">](file:///E:/work/CGDCC/CGDCC工具/CGDCC檢測工具/CGDCCScanner/Packages/CGDCC-Win7-sp1/Package.xml)

<**Description**>口令策略組包含的策略可控制這些口令管理策略：強口令、口令歷史維護，以便阻止重復使用口令，并阻止重復使用可還原加密。

</**Description**>

<**Version Minor**="0" **Major**="1"/>

[<**Setting Name**="口令長度最小值" **ID**="{4b78f63c-fdae-42e8-b9f1-a161163a9c7f}">](file:///E:/work/CGDCC/CGDCC工具/CGDCC檢測工具/CGDCCScanner/Packages/CGDCC-Win7-sp1/Package.xml)

<**Version Minor**="0" Major="1"/>

[<**Content**>](file:///E:/work/CGDCC/CGDCC工具/CGDCC檢測工具/CGDCCScanner/Packages/CGDCC-Win7-sp1/Package.xml)

<**Description**>此策略設置確定用戶帳戶密碼包含的最少字符數。</**Description**>

[<**Setting****ProductInfo**>](file:///E:/work/CGDCC/CGDCC工具/CGDCC檢測工具/CGDCCScanner/Packages/CGDCC-Win7-sp1/Package.xml)

<**UIPath**>計算機配置\Windows設置\安全設置\帳戶策略\密碼策略</**UIPath**>

<**DefaultValue**>0 characters</**DefaultValue**>

<**Vulnerability**>密碼攻擊的類型包括字典式攻擊（試圖使用普通的詞和詞組）和蠻力攻擊（嘗試每一個可能的字符組合）。同樣攻擊者有時會試圖獲取帳戶數據庫，這樣他們就可以使用工具來發現帳戶和密碼。</**Vulnerability**>

<**Countermeasure**>配置“口令長度最小值”策略值為8或者更大。如果設置字符的數量為0，將不會需要口令。 在大多數環境中，我們推薦8字符口令因為它足夠長，可以提供足夠的安全保障，同時讓用戶記住也不是太難。規定了口令的最小長度，就增加了非法用戶破譯口令的難度，防止其冒用登錄。如果本地計算機口令長度最小值太小，攻擊者可以輕松破譯用戶口令。</**Countermeasure**>

<**PotentialImpact**>但口令長度最小值又不宜設置的太大，否則使用者須記憶很長的口令，容易忘記口令。</**PotentialImpact**>

[<**ValueRange** High="14" Low="0">](file:///E:/work/CGDCC/CGDCC工具/CGDCC檢測工具/CGDCCScanner/Packages/CGDCC-Win7-sp1/Package.xml)

<**Unit**>字符</**Unit**>

[<**ValueMappingTable**>](file:///E:/work/CGDCC/CGDCC工具/CGDCC檢測工具/CGDCCScanner/Packages/CGDCC-Win7-sp1/Package.xml)

[<Mapping FriendlyName="Not Defined">](file:///E:/work/CGDCC/CGDCC工具/CGDCC檢測工具/CGDCCScanner/Packages/CGDCC-Win7-sp1/Package.xml)

<BehaviorDescription/>

<DCMValue ValueA="Not Defined"/>

<GPOValue ValueA="not defined"/>

</Mapping>

[<Mapping FriendlyName="Not Configured">](file:///E:/work/CGDCC/CGDCC工具/CGDCC檢測工具/CGDCCScanner/Packages/CGDCC-Win7-sp1/Package.xml)

<BehaviorDescription/>

<DCMValue ValueA="Not Configured"/>

<GPOValue ValueA="not configured"/>

</Mapping>

[<Mapping FriendlyName="Not Applicable">](file:///E:/work/CGDCC/CGDCC工具/CGDCC檢測工具/CGDCCScanner/Packages/CGDCC-Win7-sp1/Package.xml)

<BehaviorDescription/>

<DCMValue ValueA="Not Applicable"/>

<GPOValue ValueA="not applicable"/>

</Mapping>

[<Mapping FriendlyName="Not Recommended">](file:///E:/work/CGDCC/CGDCC工具/CGDCC檢測工具/CGDCCScanner/Packages/CGDCC-Win7-sp1/Package.xml)

<BehaviorDescription/>

<DCMValue ValueA="Not Recommended"/>

<GPOValue ValueA="not recommended"/>

</Mapping>

[<Mapping FriendlyName="Recommended">](file:///E:/work/CGDCC/CGDCC工具/CGDCC檢測工具/CGDCCScanner/Packages/CGDCC-Win7-sp1/Package.xml)

<BehaviorDescription/>

<DCMValue ValueA="Recommended"/>

<GPOValue ValueA="recommended"/>

</Mapping>

</**ValueMappingTable**>

</**Content**>

[<**SettingDiscoveryInfo Scope**="Machine" **DiscoveryType**="WMI">](file:///E:/work/CGDCC/CGDCC工具/CGDCC檢測工具/CGDCCScanner/Packages/CGDCC-Win7-sp1/Package.xml)

[<**WMIDiscoveryInfo**>](file:///E:/work/CGDCC/CGDCC工具/CGDCC檢測工具/CGDCCScanner/Packages/CGDCC-Win7-sp1/Package.xml)

<cgdcc-core:Namespace>root\rsop\computer</cgdcc-core:Namespace>

<cgdcc-core:Class>RSOP_SecuritySettingNumeric</cgdcc-core:Class>

<cgdcc-core:Property>Setting</cgdcc-core:Property>

<cgdcc-core:Where>KeyName = 'MinimumPasswordLength' And precedence=1</cgdcc-core:Where>

</**WMIDiscoveryInfo**>

</SettingDiscoveryInfo>

<**DataType**>Int64</**DataType**>

[<**ExportInfo** GPOGenerateFormat="INF">](file:///E:/work/CGDCC/CGDCC工具/CGDCC檢測工具/CGDCCScanner/Packages/CGDCC-Win7-sp1/Package.xml)

<**Inf** Name="MinimumPasswordLength" SectionName="System Access" DataType="REG_DWO-RD"/>

</**ExportInfo**>

</**Setting**>

[<**Check**>](file:///E:/work/CGDCC/CGDCC工具/CGDCC檢測工具/CGDCCScanner/Packages/CGDCC-Win7-sp1/Package.xml)

<SettingRef setting_ref="{4b78f63c-fdae-42e8-b9f1-a161163a9c7f}"/>

[<ExistentialRule Name="Minimum password length" ValueA="0" Operator="GreaterThan" Severity="Informational">](file:///E:/work/CGDCC/CGDCC工具/CGDCC檢測工具/CGDCCScanner/Packages/CGDCC-Win7-sp1/Package.xml)

</ExistentialRule>

[<ValidationRules>](file:///E:/work/CGDCC/CGDCC工具/CGDCC檢測工具/CGDCCScanner/Packages/CGDCC-Win7-sp1/Package.xml)[<SettingRule Name="Minimum password length" Operator="GreaterEquals" Severity="Informational">](file:///E:/work/CGDCC/CGDCC工具/CGDCC檢測工具/CGDCCScanner/Packages/CGDCC-Win7-sp1/Package.xml)

<Value ValueA="8"/>

</SettingRule>

</ValidationRules>

</**Check**>

</**CGDCC-Baseline**>

[<**Product ID**="{1739795a-9a4f-4032-b8db-8834dba5a0eb}" **DisplayName**="Windows 7">](file:///E:/work/CGDCC/CGDCC工具/CGDCC檢測工具/CGDCCScanner/Packages/CGDCC-Win7-sp1/Package.xml)

**<OperatingSystemInfo BuildVersion**="7601" **MinorVersion**="1" **MajorVersion**="6"/>

**</CGDCC-Package>**