1.1 (L1) Ensure 'Allow Cortana Above Lock' is set to 'Block'

Information

This policy setting determines whether or not the user can interact with Cortana using speech while the system is locked.

The recommended state for this setting is: Block

Access to any computer resource should not be allowed when the device is locked.

Solution

To establish the recommended configuration via configuration profiles, set the following Settings Catalog path to Block

Above Lock\Allow Cortana Above Lock

Impact:

The system will need to be unlocked for the user to interact with Cortana using speech.

See Also

https://workbench.cisecurity.org/benchmarks/16853

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, 800-53|CM-7, CSCv7|16.11

Plugin: Windows

Control ID: b9c1b2621050d4a5fc25bb262c50ce5d0063c86a670d3eaaaa3dfe98cb229fe7