This policy setting allows you to prevent app notifications from appearing on the lock screen. If you enable this policy setting, no app notifications are displayed on the lock screen. If you disable or do not configure this policy setting, users can choose which apps display notifications on the lock screen. Countermeasure: Enable this policy setting. Potential Impact: If you enable this policy setting, no app notifications are displayed on the lock screen. If you disable or do not configure this policy setting, users can choose which apps display notifications on the lock screen." Fix: (1) GPO: Computer ConfigurationAdministrative TemplatesSystemLogonTurn off app notifications on the lock screen (2) REG: HKEY_LOCAL_MACHINESoftwarePoliciesMicrosoftWindowsSystem!DisableLockScreenAppNotifications

[enabled/disabled]

(1) GPO: Computer Configuration\Administrative Templates\System\Logon\Turn off app notifications on the lock screen (2) REG: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System!DisableLockScreenAppNotifications