Azure Compliance ControlsAzure Virtual Machines
Linux machines should require passwords for all accounts
Requires that prerequisites are deployed to the policy assignment scope. Machines are non-compliant if Linux machines that have accounts without passwords. The check is named "Audit Linux machines that have accounts without passwords".
What this control checks
Linux machines with accounts without passwords are non-compliant.
Framework mappings
The clauses this control is mapped to in each framework.
- Access Enforcement (AC-3)
FedRAMP Moderate Baseline Rev 4
- AC-3 Access Enforcement
- 3.1.1 Limit system access to authorized users, processes acting on behalf of authorized users, and devices (including other systems)
- AC.L1-3.1.1 Limit system access to authorized users, processes acting on behalf of authorized users, and devices (including other systems)
- AC-3 Access Enforcement
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
compute_vm_account_with_password_linux - Powerpipe Control:
azure_compliance.control.compute_vm_account_with_password_linux - Azure Policy Definition:
f6ec09a3-78bf-4f8f-99dc-6c77182d0f99
Last reviewed: 2026-10-11