That’s not really a security rule, but it should be

Which of these would be a best practice for workstation security?

A) Assign rights and permissions based on groups

B) Use a minimum password length of 6 characters

C) Administrator rights are only assigned to IT staff and users with specific application requirements

D) Passwords can contain only alphanumeric characters

E) All accounts on the workstation should be enabled

F) Always bring cookies on Friday