Detections
Analytics

1.181 WN11-CC-000385

Information

Windows Ink Workspace must be configured to disallow access above the lock.

GROUP ID: V-253424
RULE ID: SV-253424r958404

This action secures Windows Ink, which contains applications and features oriented toward pen computing.

Solution

Disable the convenience PIN sign-in.

To correct this, configure the policy value for

Computer Configuration >> Administrative Templates >> Windows Components >> Windows Ink Workspace >> Set 'Allow Windows Ink Workspace'

to 'Enabled and set Options 'On, but disallow access above lock'.

See Also

https://workbench.cisecurity.org/benchmarks/27756

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-11(1), CCI|CCI-000060, Rule-ID|SV-253424r958404_rule, STIG-ID|WN11-CC-000385, Vuln-ID|V-253424

Plugin: Windows

Control ID: efcdef6feee1627bbc25074f7a82860a12b6f467679d860ddb634ba55504b125