Test‐NetworkSecurityNoLMHash

Test-NetworkSecurityNoLMHash

SYNOPSIS

2.3.11.5 (L1) Ensure 'Network security: Do not store LAN Manager hash value on next password change' is set to 'Enabled'

DESCRIPTION

This policy setting determines whether the LAN Manager (LM) hash value for the new password is stored when the password is changed. The LM hash is relatively weak and prone to attack compared to the cryptographically stronger Microsoft Windows NT hash. Since LM hashes are stored on the local computer in the security database, passwords can then be easily compromised if the database is attacked.

EXAMPLE

EXAMPLE 1

Test-NetworkSecurityNoLMHash

Number    Name                                                                                                Source                    Pass    
--------- ------------------                                                                                  ------                    ----    
2.3.11.5  (L1) Ensure 'Network security: Do not store LAN Manager hash value on next password change' is s... Group Policy Settings     True