Intune Endpoint Hardening
Ctrlk
  • Intune Endpoint Hardening
    • 2. Local Policies
      • 2.2 User Rights Assignment
      • 2.3 Security Options
        • 2.3.1 Accounts
        • 2.3.2 Audit
        • 2.3.3 DCOM
        • 2.3.4 Devices
        • 2.3.5 Domain controller
        • 2.3.6 Domain member
        • 2.3.7 Interactive logon
          • 2.3.7.1 (L1) Ensure 'Interactive logon: Do not require CTRL+ALT+DEL' is set to 'Disabled' (Automate
          • 2.3.7.2 (L1) Ensure 'Interactive logon: Don't display last signed-in' is set to 'Enabled' (Automate
          • 2.3.7.3 (BL) Ensure 'Interactive logon: Machine account lockout threshold' is set to '10 or fewer i
          • 2.3.7.4 (L1) Ensure 'Interactive logon: Machine inactivity limit' is set to '900 or fewer second(s)
          • 2.3.7.5 (L1) Configure 'Interactive logon: Message text for users attempting to log on' (Automated)
          • 2.3.7.6 (L1) Configure 'Interactive logon: Message title for users attempting to log on' (Automated
          • *2.3.7.7 (L2) Ensure 'Interactive logon: Number of previous logons to cache (in case domain control
          • *2.3.7.8 (L1) Ensure 'Interactive logon: Prompt user to change password before expiration' is set t
          • 2.3.7.9 (L1) Ensure 'Interactive logon: Smart card removal behavior' is set to 'Lock Workstation' o
        • 2.3.8 Microsoft network client
        • 2.3.9 Microsoft network server
    • Account Protection
    • Auditing and Logs
    • Identification and Authentication
    • 17. Advanced Audit Policy Configuration
    • 18. Administrative Templates (Computer)
Powered by GitBook
On this page
  1. Intune Endpoint Hardening
  2. 2. Local Policies
  3. 2.3 Security Options

2.3.7 Interactive logon

2.3.7 Interactive logon

2.3.7.1 (L1) Ensure 'Interactive logon: Do not require CTRL+ALT+DEL' is set to 'Disabled' (Automate2.3.7.2 (L1) Ensure 'Interactive logon: Don't display last signed-in' is set to 'Enabled' (Automate2.3.7.3 (BL) Ensure 'Interactive logon: Machine account lockout threshold' is set to '10 or fewer i2.3.7.4 (L1) Ensure 'Interactive logon: Machine inactivity limit' is set to '900 or fewer second(s)2.3.7.5 (L1) Configure 'Interactive logon: Message text for users attempting to log on' (Automated)2.3.7.6 (L1) Configure 'Interactive logon: Message title for users attempting to log on' (Automated*2.3.7.7 (L2) Ensure 'Interactive logon: Number of previous logons to cache (in case domain control*2.3.7.8 (L1) Ensure 'Interactive logon: Prompt user to change password before expiration' is set t2.3.7.9 (L1) Ensure 'Interactive logon: Smart card removal behavior' is set to 'Lock Workstation' o
Previous*2.3.6.6 (L1) Ensure 'Domain member: Require strong (Windows 2000 or later) session key' is set toNext2.3.7.1 (L1) Ensure 'Interactive logon: Do not require CTRL+ALT+DEL' is set to 'Disabled' (Automate

Last updated 2 years ago