CCE-43781-4Platform: win10 | Date: (C)2016-09-23 (M)2022-10-10 |
Disable: 'Do not sync start settings' for DisableStartLayoutSettingSync
Prevent the "Start layout" group from syncing to and from this PC. This turns off and disables the "Start layout" group on the "sync your settings" page in PC settings.
If you enable this policy setting, the "Start layout" group will not be synced.
Use the option "Allow users to turn start syncing on" so that syncing is turned off by default but not disabled.
If you do not set or disable this setting, syncing of the "Start layout" group is on by default and configurable by the user.
Counter Measure:
Configure this setting depending on your organization's requirements.
Potential Impact:
Start settings do not sync with the device.
Parameter:
Technical Mechanism:
(1) GPO: Computer Configuration\Administrative Templates\Windows Components\Sync your settings\Do not sync start settings
(2) REG: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\SettingSync\DisableStartLayoutSettingSync,DisableStartLayoutSettingSyncUserOverride
CCSS Severity: | CCSS Metrics: |
CCSS Score : | Attack Vector: |
Exploit Score: | Attack Complexity: |
Impact Score: | Privileges Required: |
Severity: | User Interaction: |
Vector: | Scope: |
| Confidentiality: |
| Integrity: |
| Availability: |
| |
References: Resource Id | Reference |
---|
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:35309 |
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:35309 |
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:35309 |