Disable or enable software Secure Attention SequenceID: oval:org.secpod.oval:def:19594 | Date: (C)2014-05-29 (M)2023-07-04 |
Class: COMPLIANCE | Family: windows |
The Disable or enable software Secure Attention Sequence machine setting should be configured correctly.
This policy setting controls whether or not software can simulate the Secure Attention Sequence (SAS). If you enable this policy setting, you have one of four options: If you set this policy setting to "None," user mode software cannot simulate the SAS. If you set this policy setting to "Services," services can simulate the SAS. If you set this policy setting to "Ease of Access applications," Ease of Access applications can simulate the SAS. If you set this policy setting to "Services and Ease of Access applications," both services and Ease of Access applications can simulate the SAS. If you disable or do not configure this setting, only Ease of Access applications running on the secure desktop can simulate the SAS.
Fix:
(1) GPO: Computer Configuration\Administrative Templates\Windows Components\Windows Logon Options\Disable or enable software Secure Attention Sequence
(2) KEY: HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\SoftwareSASGeneration
Platform: |
Microsoft Windows Server 2008 R2 |