[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244625

 
 

909

 
 

193379

 
 

277

Paid content will be excluded from the download.


Download | Alert*
OVAL

Turn on convenience PIN sign-in

ID: oval:org.secpod.oval:def:35451Date: (C)2016-06-10   (M)2023-12-13
Class: COMPLIANCEFamily: windows




This policy setting allows you to control whether a domain user can sign in using a convenience PIN. In Windows 10, convenience PIN was replaced with Passport, which has stronger security properties. To configure Passport for domain users, use the policies under Computer configuration\Administrative Templates\Windows Components\Microsoft Passport for Work. If you enable this policy setting, a domain user can set up and sign in with a convenience PIN. If you disable or don't configure this policy setting, a domain user can't set up and use a convenience PIN. Note: that the user's domain password will be cached in the system vault when using this feature. Counter Measure: Disable this policy setting. Potential Impact: If you enable this policy setting, a domain user can set up and sign in with a PIN. If you disable or don't configure this policy setting, a domain user can't set up and use a PIN." Fix: (1) GPO: Computer Configuration\Administrative Templates\System\Logon\Turn on convenience PIN sign-in (2) REG: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System!AllowDomainPINLogon

Platform:
Microsoft Windows 10
Reference:
CCE-44437-2
CCE    1
CCE-44437-2
XCCDF    1
xccdf_org.secpod_benchmark_general_Windows_10

© SecPod Technologies