Detections
Analytics

1.1 (L1) Ensure 'Allow Cortana Above Lock' is set to 'Block'

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

This policy setting determines whether or not the user can interact with Cortana using speech while the system is locked.

The recommended state for this setting is: Block

Access to any computer resource should not be allowed when the device is locked.

Solution

To establish the recommended configuration via configuration profiles, set the following Settings Catalog path to Block

Above Lock\Allow Cortana Above Lock

Impact:

The system will need to be unlocked for the user to interact with Cortana using speech.

See Also

https://workbench.cisecurity.org/benchmarks/21719

Item Details

References: CSCv7|16.11

Plugin: Windows

Control ID: 21aa3f26cbd5ac3a115a2784dd24b03935d646974b92b92bf2c6e3802d586668