Query: Ensure that account 'Lockout duration in seconds' is greater than or equal to '60'

Description

The account lockout duration value determines how long an account retains the status of lockout, and therefore how long before a user can continue to attempt to login after passing the lockout threshold.

Query

Tables used in this query:

• azure_tenant
• azuread_directory_setting

Controls using this query:

• 5.7 Ensure that account 'Lockout duration in seconds' is greater than or equal to '60'
• Ensure that account 'Lockout duration in seconds' is greater than or equal to '60'

SQL