Description:

Verifies that custom banned password list is enforced.

Why:

Custom banned password lists improves security of your customer environments against cyber-criminals strategies.

Configured: Custom banned password list is enforced.

Not Configured: Custom banned password list is not enforced.

Scoring: Contributes up to 1 point to the Posture Recommendations score.

Category: Identity

Microsoft Licensing: Requires Premium (P1) licensing

Secure Score Impact: YES — Microsoft Secure Score control aad_custom_banned_passwords.

Remediation in Augmentt: Configure directly in Augmentt (Configure tab); Guided remediation steps (Instructions tab)

Compliance Frameworks:

  • CIS Microsoft 365 Benchmark v6 (Level 1) — 5.2.3.2

  • CIS Microsoft 365 Benchmark v7 (Level 1) — 5.2.3.2

  • CMMC Level 2 — IA.L2-3.5.7

Microsoft documentation: