Description:
Verifies that banned passwords are enforced.
Why:
Microsoft Entra Password Protection detects and blocks known weak passwords and their variants, and can also block additional weak terms that are specific to your organization.
Configured: Banned passwords are enforced.
Not Configured: Banned passwords are not enforced.
Scoring: Contributes up to 1 point to the Posture Recommendations score.
Category: Identity
Microsoft Licensing: Requires Premium (P1) licensing
Remediation in Augmentt: No in-product remediation — remediate in the Microsoft admin portals.
Compliance Frameworks:
CIS Microsoft 365 Benchmark v6 (Level 1) — 5.2.3.3
CIS Microsoft 365 Benchmark v7 (Level 1) — 5.2.3.3
CMMC Level 2 — IA.L2-3.5.7
Microsoft documentation: