Security database in BigFix Compliance

Hi all.
I’d like to know if anyone knows where BigFix looks on the computer for the values it returns from the following queries about “Security database”:

q: minimum password length of security database
A: 8
T: 0.359 ms
I: singular integer

q: maximum password age of security database
A: 45 days
T: 0.358 ms
I: singular time interval

q: minimum password age of security database
A: 1 day
T: 0.398 ms
I: singular time interval

q: force logoff interval of security database
E: Singular expression refers to nonexistent object.

q: password history length of security database
A: 10
T: 0.500 ms
I: singular integer

q: account lockout duration of security database
E: Singular expression refers to nonexistent object.

q: account lockout observation window of security database
A: 1 day
T: 0.424 ms
I: singular time interval

q: account lockout threshold of security database
A: 5
T: 8.691 ms
I: singular integer

I didn’t find any of this looking in the registry keys.
Thanks you in advance.

I believe we are using Windows API calls…to verify the results, you could look at using ‘secpol.msc’, or Local Group Policy, or the ‘net accounts’ command I believe.

1 Like