Case Project 10-1: Password Security

Inadequate password security is one of the areas that the auditors believe needs improve-ment. A former server administrator acquiesced to bank employees complaints about fre-quent password changes and set very lax account policies for passwords. The audits raised the following concerns

: Some bank employees have used the same user account password for several years

. Many of the existing passwords are only four or five characters in length.

Several bank employees regularly change their passwords but rotate between the same three or four passwords with each change.

An employee who has forgotten a password can keep trying different combinations for as long as they like, until they hit upon the password or give up trying.

What capabilities in Windows Server 2016 enable the bank to address the auditors concerns? Create a detailed report of your recommendations for the banks Audit Response Committee. Also, for the IT manager who is a committee member, note what tool can be used to implement your recommendations