[Forgot Password]
Login  Register Subscribe

24128

 
 

131615

 
 

114154

 
 

909

 
 

88671

 
 

136

Paid content will be excluded from the download.


Download | Alert*
CCE
view XML

CCE-44698-9

Platform: win2016Date: (C)2017-08-03   (M)2018-03-26



"Enable screen saver" This policy setting allows you to manage whether or not screen savers run. If the Screen Saver setting is disabled screen savers do not run and the screen saver section of the Screen Saver tab in Display in Control Panel is disabled. If this setting is enabled a screen saver will run if the following two conditions are met: first, that a valid screen saver is specified on the client via the Screen Saver Executable Name group policy setting or Control Panel on the client. Second, the screensaver timeout is set to a value greater than zero via the Screen Saver Timeout group policy setting or Control Panel on the client. Vulnerability: If a user forgets to lock their computer when they walk away it is possible that a passerby will hijack it. Counter Measure: Configure this policy setting to Enabled so that when the other screen saver settings are implemented the risk of a user's desktop session being hijacked by a passerby is reduced. Potential Impact: The screen saver will automatically activate when the computer has been unattended for the amount of time specified by the Screen Saver timeout setting. The impact should be minimal since the screen saver is enabled by default.


Parameter: ScreenSaveActive


Technical Mechanism: Fix: (1) GPO: User Configuration\Administrative Templates\Control Panel\Personalization (2) REG: HKEY_USERS\Software\Policies\Microsoft\Windows\Control Panel\Desktop!ScreenSaveActive

References:

Resource IdReference
SCAP Repo OVAL Definitionoval:org.secpod.oval:def:40228


OVAL    1
oval:org.secpod.oval:def:40228

© SecPod Technologies