Detections
Analytics

1.111 WN16-CC-000220

Information

Users must be prompted to authenticate when the system wakes from sleep (plugged in).

GROUP ID:V-224930
RULE ID:SV-224930r991589

A system that does not require authentication when resuming from sleep may provide access to unauthorized users. Authentication must always be required when accessing a system. This setting ensures users are prompted for a password when the system wakes from sleep (plugged in).

Solution

Configure the policy value for

Computer Configuration >> Administrative Templates >> System >> Power Management >> Sleep Settings >> 'Require a password when a computer wakes (plugged in)'

to 'Enabled'.

See Also

https://workbench.cisecurity.org/benchmarks/23093

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-224930r991589_rule, STIG-ID|WN16-CC-000220

Plugin: Windows

Control ID: 2ba760bfa6582aad75f35aa70a4ad161e8a0f5b3095d5414dd3eaa5de0c1d013