Information
This policy setting specifies whether Windows apps can be activated by voice (apps and Cortana) while the system is locked.
The recommended state for this setting is: Disabled.
Rationale:
Access to any computer resource should not be allowed when the device is locked.
Impact:
Users will not be able to activate apps while the computer is locked.
Solution
To establish the recommended configuration, set the following Device Configuration Policy to Disabled:
To access the Device Configuration Policy from the Intune Home page:
Click Devices
Click Configuration profiles
Click Create profile
Select the platform (Windows 10 and later)
Select the profile (Device restrictions)
Click Create
Enter a Name
Click Next
Configure the following Setting
Path: Device Restrictions/Locked Screen Experience
Setting Name: Voice activate apps from locked screen
Configuration: Disabled
Select OK
Continue through the Wizard to complete the creation of the profile (profile assignments, applicability etc.)
Note: More than one configuration setting from each of the Configuration profiles (ex: Administrative Templates, Custom etc.) can be added to each Device Configuration Policy.
Default Value:
Not configured (The user can decide whether Windows apps can interact with applications using speech while the system is locked by using Settings > Privacy on the device.)