Windows 10 Security Technical Implementation Guide

The Windows 10 Security Technical Implementation Guide (V2 R3) has 257 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

257STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R3

CurrentPublished Mon Nov 01 2021

Windows Ink Workspace must be configured to disallow access above the lock.

Windows 10 Security Technical Implementation Guide

Assessment Title

Rule Text

Windows Ink Workspace must be configured to disallow access above the lock.

Description

Discussion Text

This action secures Windows Ink, which contains applications and features oriented toward pen computing.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-220871

Rule

SV-220871r642141_rule

Severity

medium

Rule Version

WN10-CC-000385

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

If the following registry value does not exist or is not configured as specified, this is a finding.

Registry Hive: HKEY_LOCAL_MACHINE
Registry Path: \Software\Policies\Microsoft\WindowsInkWorkspace

Value Name: AllowWindowsInkWorkspace
Value Type: REG_DWORD
Value data: 1

Implementation Procedure

Fix Text

Disable the convenience PIN sign-in. 

If this needs to be corrected, configure the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Windows Ink Workspace >> Set "Allow Windows Ink Workspace" to "Enabled" and set Options "On, but disallow access above lock".

STIG check 173 of 257 in the Windows 10 STIG checklist

← Previous · V-220870The convenience PIN for Windows 10 must be disabled.Next · V-220872 →Windows 10 should be configured to prevent users from receiving suggestions for third-party or additional applications.