Intune Endpoint Hardening
search
Ctrlk
Intune Endpoint Hardening
  • Intune Endpoint Hardening
    • 2. Local Policies
      • 2.2 User Rights Assignment
      • 2.3 Security Options
        • 2.3.1 Accounts
        • 2.3.2 Audit
        • 2.3.3 DCOM
        • 2.3.4 Devices
        • 2.3.5 Domain controller
        • 2.3.6 Domain member
        • 2.3.7 Interactive logon
          • 2.3.7.1 (L1) Ensure 'Interactive logon: Do not require CTRL+ALT+DEL' is set to 'Disabled' (Automate
          • 2.3.7.2 (L1) Ensure 'Interactive logon: Don't display last signed-in' is set to 'Enabled' (Automate
          • 2.3.7.3 (BL) Ensure 'Interactive logon: Machine account lockout threshold' is set to '10 or fewer i
          • 2.3.7.4 (L1) Ensure 'Interactive logon: Machine inactivity limit' is set to '900 or fewer second(s)
          • 2.3.7.5 (L1) Configure 'Interactive logon: Message text for users attempting to log on' (Automated)
          • 2.3.7.6 (L1) Configure 'Interactive logon: Message title for users attempting to log on' (Automated
          • *2.3.7.7 (L2) Ensure 'Interactive logon: Number of previous logons to cache (in case domain control
          • *2.3.7.8 (L1) Ensure 'Interactive logon: Prompt user to change password before expiration' is set t
          • 2.3.7.9 (L1) Ensure 'Interactive logon: Smart card removal behavior' is set to 'Lock Workstation' o
        • 2.3.8 Microsoft network client
        • 2.3.9 Microsoft network server
    • Account Protection
    • Auditing and Logs
    • Identification and Authentication
    • 17. Advanced Audit Policy Configuration
    • 18. Administrative Templates (Computer)
gitbookPowered by GitBook
block-quoteOn this pagechevron-down
  1. Intune Endpoint Hardeningchevron-right
  2. 2. Local Policieschevron-right
  3. 2.3 Security Options

2.3.7 Interactive logon

2.3.7 Interactive logon

2.3.7.1 (L1) Ensure 'Interactive logon: Do not require CTRL+ALT+DEL' is set to 'Disabled' (Automatechevron-right2.3.7.2 (L1) Ensure 'Interactive logon: Don't display last signed-in' is set to 'Enabled' (Automatechevron-right2.3.7.3 (BL) Ensure 'Interactive logon: Machine account lockout threshold' is set to '10 or fewer ichevron-right2.3.7.4 (L1) Ensure 'Interactive logon: Machine inactivity limit' is set to '900 or fewer second(s)chevron-right2.3.7.5 (L1) Configure 'Interactive logon: Message text for users attempting to log on' (Automated)chevron-right2.3.7.6 (L1) Configure 'Interactive logon: Message title for users attempting to log on' (Automatedchevron-right*2.3.7.7 (L2) Ensure 'Interactive logon: Number of previous logons to cache (in case domain controlchevron-right*2.3.7.8 (L1) Ensure 'Interactive logon: Prompt user to change password before expiration' is set tchevron-right2.3.7.9 (L1) Ensure 'Interactive logon: Smart card removal behavior' is set to 'Lock Workstation' ochevron-right
Previous*2.3.6.6 (L1) Ensure 'Domain member: Require strong (Windows 2000 or later) session key' is set tochevron-leftNext2.3.7.1 (L1) Ensure 'Interactive logon: Do not require CTRL+ALT+DEL' is set to 'Disabled' (Automatechevron-right

Last updated 2 years ago