CIS Microsoft Windows 10 Enterprise Release 1909 Benchmark

18.9.5 App Privacy

This section contains recommendations for App Privacy settings.

This Group Policy section is provided by the Group Policy template AppPrivacy.admx/adml that is included with the Microsoft Windows 10 Release 1511 Administrative Templates (or newer). 18.9.5.1 (L1) Ensure 'Let Windows apps activate with voice while the system is locked' is set to 'Enabled: Force Deny' (Scored)

ProfileApplicability:

 Level 1 (L1) - Corporate/Enterprise Environment (general use)

Description:

This policy setting specifies whether Windows apps can be activated by voice (apps and Cortana) while the system is locked.

The recommended state for this setting is: Enabled: Force Deny .

Rationale:

Access to any computer resource should not be allowed when the device is locked.

Audit:

Navigate to the UI Path articulated in the Remediation section and confirm it is set as prescribed. This group policy setting is backed by the following registry location:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy:LetAppsActi vateWithVoiceAboveLock

763 | P a g e