CCE-37671-5Platform: cpe:/o:microsoft:windows_server_2012::r2 | Date: (C)2015-10-08 (M)2023-07-04 |
Lock Enhanced Storage when the computer is locked
This policy will enable the Enhanced Storage device to be locked when the computer is locked.
This policy is supported in Windows Enterprise and Business SKUs only.
If you enable this policy setting, the Enhanced Storage device will remain locked when the computer is locked.
If you disable or do not configure this policy setting, the Enhanced Storage device state is not changed when the computer is locked.
Parameter:
[enable/disable]
Technical Mechanism:
(1) GPO: Computer ConfigurationAdministrative TemplatesSystemEnhanced Storage Access!Lock Enhanced Storage when the computer is locked
(2) REG: HKEY_LOCAL_MACHINESoftwarePoliciesMicrosoftWindowsEnhancedStorageDevices!LockDeviceOnMachineLock
CCSS Severity: | CCSS Metrics: |
CCSS Score : 6.8 | Attack Vector: PHYSICAL |
Exploit Score: 0.9 | Attack Complexity: LOW |
Impact Score: 5.9 | Privileges Required: NONE |
Severity: MEDIUM | User Interaction: NONE |
Vector: AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | Scope: UNCHANGED |
| Confidentiality: HIGH |
| Integrity: HIGH |
| Availability: HIGH |
| |
References: Resource Id | Reference |
---|
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:28147 |