|Platform: win2016||Date: (C)2017-08-03 (M)2018-02-19|
"Password protect the screen saver"
If the Password protect the screen saver setting is enabled, then all screen savers are password protected, if it is disabled then password protection cannot be set on any screen saver.
If a user forgets to lock their computer when they walk away it is possible that a passerby will hijack it.
Configure this policy setting to Enabled so that when the other screen saver settings are implemented the risk of a user's desktop session being hijacked by a passerby is reduced.
Users will have to provide their logon credentials when they want to access their locked desktop session.
(1) GPO: User Configuration\Administrative Templates\Control Panel\Personalization
(2) REG: HKEY_USERS\Software\Policies\Microsoft\Windows\Control Panel\Desktop!ScreenSaverIsSecure
|SCAP Repo OVAL Definition||oval:org.secpod.oval:def:40260|