Detections
Analytics

4.10.26.5 Ensure 'Turn off app notifications on the lock screen' is set to 'Enabled'

Information

This policy setting allows you to prevent app notifications from appearing on the lock screen.

The recommended state for this setting is: Enabled.

Warning: If the Self Service Password Reset (SSPR) https://learn.microsoft.com/en-us/entra/identity/authentication/howto-sspr-windows#general-limitations feature is used in Microsoft Entra ID, an exception to this recommendation is needed as it's known to interfere with SSPR.

App notifications might display sensitive business or personal data.

Solution

To establish the recommended configuration via configuration profiles, set the following Settings Catalog path to Enabled.

Administrative Templates\System\Logon\Turn off app notifications on the lock screen

Impact:

No app notifications are displayed on the lock screen.

See Also

https://workbench.cisecurity.org/benchmarks/27282

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, 800-53|CM-7, CSCv7|16.11

Plugin: Windows

Control ID: 4f0de959de933702daedf415a58ea1ba55b3d033477e454cb7a0aac12ac98a4d