The PasswordNotRequired attribute indicates that an account can exist without a password, a serious security vulnerability, especially on Domain Controllers (DCs). If domain controllers appear in your scans with this attribute set to $true , immedia…