Linux machines should require passwords for all accounts
Requires that prerequisites are deployed to the policy assignment scope. Machines are non-compliant if Linux machines that have accounts without passwords. The check is named "Audit Linux machines that have accounts without passwords".
What this control checks
Linux machines with accounts without passwords are non-compliant.
Common pitfalls
Prerequisites must be deployed to the scope
Requires that prerequisites are deployed to the policy assignment scope.
Arc connected servers are excluded by default
IncludeArcMachines has the default value false. By selecting this option, you agree to be charged monthly per Arc connected machine.
Effect can be Disabled
The effect parameter allows AuditIfNotExists or Disabled. Its default value is AuditIfNotExists.
Audit evidence
Evidence that deployed resources meet this control: Azure Policy compliance results for the built-in policy definition "Audit Linux machines that have accounts without passwords" (f6ec09a3-78bf-4f8f-99dc-6c77182d0f99); PowerPipe control azure_compliance.control.compute_vm_account_with_password_linux.
Framework-specific interpretation
NIST SP 800-53 Rev 5: Mapped to AC-3 (Access Enforcement).
FedRAMP Moderate Baseline Rev 4: Mapped to AC-3 (Access Enforcement).
Framework mappings
The clauses this control is mapped to in each framework.
- Access Enforcement (AC-3)
FedRAMP Moderate Baseline Rev 4
- AC-3 Access Enforcement
- 3.1.1 Limit system access to authorized users, processes acting on behalf of authorized users, and devices (including other systems)
- AC.L1-3.1.1 Limit system access to authorized users, processes acting on behalf of authorized users, and devices (including other systems)
- AC-3 Access Enforcement
Related controls
Tool mappings
Use these identifiers to cross-reference this control across tools, reports, and evidence.
- Compliance.tf Control:
compute_vm_account_with_password_linux - Powerpipe Control:
azure_compliance.control.compute_vm_account_with_password_linux - Azure Policy Definition:
f6ec09a3-78bf-4f8f-99dc-6c77182d0f99
Last reviewed: 2026-10-11