System Hardening ISM-1838 Current The UserPassword attribute for user accounts is not used. Topic Microsoft Active Directory Domain Services account hardening Applicable to all History Mar 2023 The UserPassword attribute for user accounts is not used. Thirteen new controls were added covering Microsoft AD DS account hardening.