Detections
Analytics
WN11-CC-000365 - Windows 11 must be configured to prevent Windows apps from being activated by voice while the system is locked.
Information
Allowing Windows apps to be activated by voice from the lock screen could allow for unauthorized use. Requiring logon will ensure the apps are used only by authorized personnel.Solution
Configure the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> App Privacy >> 'Let Windows apps activate with voice while the system is locked' to 'Enabled' with Default for all Apps: set to Force Deny.The requirement is NA if the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> App Privacy >> 'Let Windows apps activate with voice' is configured to 'Enabled' with Default for all Apps: set to Force Deny.
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_11_V2R9_STIG.zip
Item Details
Audit Name: DISA Microsoft Windows 11 STIG v2r9
Category: ACCESS CONTROL
References: 800-53|AC-11b., CAT|II, CCI|CCI-000056, Rule-ID|SV-253422r1256685_rule, STIG-ID|WN11-CC-000365, Vuln-ID|V-253422
Plugin: Windows
Control ID: 91a72aa69d392a1c920927ce9e0062860acc561ed35e2647b4cb6f4f0a6a5e23