Query: Ensure that account 'Lockout threshold' is less than or equal to '10'

Description

The account lockout threshold determines how many failed login attempts are permitted prior to placing the account in a locked-out state and initiating a variable lockout duration.

Query

Tables used in this query:

• azure_tenant
• azuread_directory_setting

Controls using this query:

• 5.6 Ensure that account 'Lockout threshold' is less than or equal to '10'
• Ensure that account 'Lockout threshold' is less than or equal to '10'

SQL