This policy setting determines whether or not the user can interact with Cortana using speech while the system is locked. The recommended state for this setting is: Blocked. Rationale: Access to any computer resource should not be allowed when the device is locked. Impact: The system will need to be unlocked for the user to interact with Cortana using speech.
Solution
To establish the recommended configuration, set the following Device Configuration Policy to Blocked: To access the Device Configuration Policy from the Intune Home page: Click Devices Click Configuration profiles Click Create profile Select the platform (Windows 10 and later) Select the profile (Device restrictions) Click Create Enter a Name Click Next Configure the following Setting Path: Device Restrictions/Locked Screen Expierence Setting Name: Cortana on locked screen (Desktop only) Configuration: Block Select OK Continue through the Wizard to complete the creation of the profile (profile assignments, applicability etc.) Note: More than one configuration setting from each of the Configuration profiles (ex: Administrative Templates, Custom etc.) can be added to each Device Configuration Policy. Default Value: Enabled. (The user can interact with Cortana using speech while the system is locked.)