Detections
Analytics

1.2 Ensure 'Allow Toasts' is set to 'Block'

Information

This policy setting turns off toast notifications on the lock screen.

The recommended state for this setting is Block.

While this feature can be handy for users, applications that provide toast notifications might display sensitive personal or business data while the device is left unattended.

Solution

To establish the recommended configuration via configuration profiles, set the following Settings Catalog path to Block.

Above Lock\Allow Toast

Impact:

Applications will not be able to raise toast notifications on the lock screen.

See Also

https://workbench.cisecurity.org/benchmarks/27291

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, 800-53|CM-7, CSCv7|16.11

Plugin: Windows

Control ID: 7d2c4efb2b4bc36de9498969c8a440b3308cd87548a514240f5f9243e701f928