[Forgot Password]
Login  Register Subscribe

30430

 
 

423868

 
 

247768

 
 

909

 
 

194555

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CCE
view XML

CCE-42493-7

Platform: cpe:/o:microsoft:windows_10Date: (C)2016-09-23   (M)2023-07-04



Disable: 'Allow input personalization' This policy enables the automatic learning component of input personalization that includes speech, inking, and typing. Automatic learning enables the collection of speech and handwriting patterns, typing history, contacts, and recent calendar information. It is required for the use of Cortana. Some of this collected information may be stored on the user's OneDrive, in the case of inking and typing; some of the information will be uploaded to Microsoft to personalize speech. Automatic learning for speech may not be available for all languages, even when inking and typing is available. If this policy is enabled, automatic learning of speech, inking, and typing will be enabled and users cannot change its value via PC Settings. If this policy is disabled, automatic learning of speech, inking, and typing stops and users cannot change its value via PC Settings. If this policy is not configured, the user may configure the speech, inking, and typing personalization setting via PC Settings. Counter Measure: Disable this policy setting. Potential Impact: Users are unable to use the automatic learning component.


Parameter:

[enable/disable]


Technical Mechanism:

(1) GPO: Computer ConfigurationAdministrative TemplatesControl PanelRegional and Language OptionsAllow input personalization (2) REG: HKEY_LOCAL_MACHINESoftwarePoliciesMicrosoftInputPersonalizationAllowInputPersonalization

CCSS Severity:CCSS Metrics:
CCSS Score : 3.7Attack Vector: NETWORK
Exploit Score: 2.2Attack Complexity: HIGH
Impact Score: 1.4Privileges Required: NONE
Severity: LOWUser Interaction: NONE
Vector: AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:NScope: UNCHANGED
 Confidentiality: LOW
 Integrity: NONE
 Availability: NONE
  

References:
Resource IdReference
SCAP Repo OVAL Definitionoval:org.secpod.oval:def:35110


OVAL    1
oval:org.secpod.oval:def:35110
XCCDF    2
xccdf_org.secpod_benchmark_NIST_800_171_R1_Windows_10
xccdf_org.secpod_benchmark_general_Windows_10

© SecPod Technologies