Skip to content
Log In

Windows Ink Workspace must be configured to disallow access above the lock.

An XCCDF Rule

Description

This action secures Windows Ink, which contains applications and features oriented toward pen computing.

ID
SV-253424r958404_rule
Version
WN11-CC-000385
Severity
Medium
References
Updated

Remediation Templates

A Manual Procedure

Disable the convenience PIN sign-in. 

To correct this, configure the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Windows Ink Workspace >> Set "Allow Windows Ink Workspace" to "Enabled and set Options "On, but disallow access above lock".