System Hardening ISM-1840 Current User account passwords do not use reversible encryption. Topic Microsoft Active Directory Domain Services account hardening Applicable to all History Mar 2023 User account passwords do not use reversible encryption. Thirteen new controls were added covering Microsoft AD DS account hardening.