Detections
Analytics

3.047 - The Smart Card removal option is set to take no action.

Information

Determines what should happen when the smart card for a logged-on user is removed from the smart card reader.

The options are-
- No Action
- Lock Workstation
- Force Logoff

Solution

Configure the policy value for Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options -> 'Interactive logon- Smart card removal behavior' to 'Lock Workstation' or 'Force Logoff'.

See Also

http://iasecontent.disa.mil/stigs/zip/Oct2016/U_Windows_Vista_V6R41_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-28467r1_rule, STIG-ID|3.047, Vuln-ID|V-1157

Plugin: Windows

Control ID: f7a90a352262763231d4822eb57f3d4f4c92d09b78ce1742bdd928de96ba49bf