Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
Windows Ink Workspace must be configured to disallow access above the lock.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-253424 | WN11-CC-000385 | SV-253424r958404_rule | Medium |
| Description |
|---|
| This action secures Windows Ink, which contains applications and features oriented toward pen computing. |
| STIG | Date |
|---|---|
| Microsoft Windows 11 Security Technical Implementation Guide | 2024-06-10 |
Details
| Check Text ( C-56877r829354_chk ) |
|---|
| If the following registry value does not exist or is not configured as specified, this is a finding: Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \Software\Policies\Microsoft\WindowsInkWorkspace Value Name: AllowWindowsInkWorkspace Value Type: REG_DWORD Value data: 1 |
| Fix Text (F-56827r829355_fix) |
|---|
| Disable the convenience PIN sign-in. To correct this, configure the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Windows Ink Workspace >> Set "Allow Windows Ink Workspace" to "Enabled and set Options "On, but disallow access above lock". |