Detections
Analytics

4.9.1.1 (L1) Ensure 'Turn off toast notifications on the lock screen (User)' is set to 'Enabled'

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

This policy setting turns off toast notifications on the lock screen.

The recommended state for this setting is Enabled

While this feature can be handy for users, applications that provide toast notifications might display sensitive personal or business data while the device is left unattended.

Solution

To establish the recommended configuration via configuration profiles, set the following Settings Catalog path to Enabled

Administrative Templates\Start Menu and Taskbar\Notifications\Turn off toast notifications on the lock screen (User)

Impact:

Applications will not be able to raise toast notifications on the lock screen.

See Also

https://workbench.cisecurity.org/benchmarks/21767

Item Details

References: CSCv7|16.11

Plugin: Windows

Control ID: a9797af4fa41cab15ba0687994fedce4b8f4d7100843cb95c346f759be408d86