Microsoft drops password expiration policies from Windows 10 1903 security baseline

In new draft security baseline documentation, Microsoft has scrapped the policy that requires users to change their passwords on a regular basis. The new security settings apply to Windows 10 version 1903 and Windows Server version 1903, and the change sees Microsoft conceding that its policy of forcing periodic password changes is "an ancient and obsolete mitigation of very low value". The company has a series of suggestions for how to better improve password security. See also: Microsoft will block the Windows 10 May 2019 Update if you have a USB drive or SD card connected Microsoft decides to keep… [Continue Reading]