CCE-42536-3| Platform: cpe:/o:microsoft:windows_10 | Date: (C)2016-09-23 (M)2023-07-04 |
Disable: 'Allow Cortana' on the device'
This policy setting specifies whether Cortana is allowed on the device.
If you enable or don't configure this setting, Cortana will be allowed on the device. If you disable this setting, Cortana will be turned off.
When Cortana is off, users will still be able to use search to find things on the device and on the Internet.
Counter Measure:
Configure this setting depending on your organization's requirements.
Potential Impact:
Users will not be able to use Cortana.
Parameter:
[enable/disable]
Technical Mechanism:
(1) GPO: Computer ConfigurationAdministrative TemplatesWindows ComponentsSearchAllow Cortana
(2) REG: HKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoftWindowsWindows SearchAllowCortana
| CCSS Severity: | CCSS Metrics: |
| CCSS Score : 5.3 | Attack Vector: NETWORK |
| Exploit Score: 3.9 | Attack Complexity: LOW |
| Impact Score: 1.4 | Privileges Required: NONE |
| Severity: MEDIUM | User Interaction: NONE |
| Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N | Scope: UNCHANGED |
| | Confidentiality: LOW |
| | Integrity: NONE |
| | Availability: NONE |
| | |
References: | Resource Id | Reference |
|---|
| SCAP Repo OVAL Definition | oval:org.secpod.oval:def:35129 |
