Groups > alt.comp.os.windows-10 > #182503

Re: Windows Spotlight shows picture information data on lock screen of one PC, but not others.

From	Java Jive <java@evij.com.invalid>
Newsgroups	alt.comp.os.windows-10
Subject	Re: Windows Spotlight shows picture information data on lock screen of one PC, but not others.
Date	2025-02-23 12:02 +0000
Organization	A noiseless patient Spider
Message-ID	<vpf2oh$g6rf$1@dont-email.me> (permalink)
References	<vpctqt$1jqq$1@dont-email.me> <vpd8ad$3i85$1@dont-email.me> <vpddef.ufg.1@ID-201911.user.individual.net> <vpddaq$4f8p$1@dont-email.me> <vpf1dp.8hc.1@ID-201911.user.individual.net>

Show all headers | View raw

On 2025-02-23 10:39, Frank Slootweg wrote:
> Java Jive <java@evij.com.invalid> wrote:
>> On 2025-02-22 19:52, Frank Slootweg wrote:
>>>
>>> Java Jive <java@evij.com.invalid> wrote:
>>>>
>>>> As Paul suggests, this is, or at least used to be, something of a
>>>> security issue, as described here ...
>>>>
>>>> https://www.manageengine.com/vulnerability-management/misconfiguration/logon-security/how-to-enable-secure-login-ctrl-alt-delete-logon-via-group-policy.html
>>>>
>>>> ... and accordingly I've always previously disabled this policy on my
>>>> builds, so that <Ctrl-Alt-Delete> is required to log on.  How much of an
>>>> issue this is still, or whether more recent versions of Windows are more
>>>> secure against logon window spoofing rendering the policy redundant, I'm
>>>> no longer sufficiently in the know to be able to comment further.
>>>
>>>     Be aware that 'Require CTRL-ALT-DEL' [1] might be turned on again
>>> behind your back. At least that happened to me (on Windows 11) when I
>>> (temporarily) set the lock screen timeout ('If you've been away, when
>>> should Windows require you to sign in again?') to 'Never'.
>>>
>>>     That seemed to be a temporary change, because after a reboot,
>>> CTRL-ALT-DEL was no longer needed to sign-in.
>>>
>>> [1] There is an applet (netplwiz) where you can tick/untick 'Require
>>> users to press Ctrl+Alt+Delete' ("Secure sign-in"), but (at least in my
>>> experience) it doesn't work, i.e. after unticking the setting,
>>> Ctrl+Alt+Delete is still required.
>>
>> Thanks for the warning.
>>
>> Looking at your experience described above, depending on how it was
>> changed, I suspect a reboot can be required to pick up a permanent
>> change to this setting.  To be exact, I'm guessing:
>>       Legacy method, such as netplwiz or gpedit:
>>           Changes policy, reboot required for new policy to be copied to
>> current run settings;
> 
>    Yes, that matches with my experience with netplwiz (don't have
> gpedit), or at least does not contradict it.
> 
>>       Settings app:
>>           Changes only current run settings, not underlying policy, so
>> lost on reboot.
> 
>    I could not find a 'Require CTRL-ALT-DEL' type setting in (Windows 11)
> Settings. Is there?

Can't check in Win 11 ATM, but I'm happy to take your word for it.

>    If you're asking in general, then I think most (all?) Settings
> settings stick accross reboots.

I think that's right except perhaps where a Settings change contradicts 
a policy, as potentially in this case, then I think, if the change is 
allowed to occur at all, then it may well be lost on reboot, but I admit 
that I'm not sure and am guessing about this.  I was rather hoping that 
my previous post, especially if my guess was wrong, might prompt someone 
with greater knowledge to explain exactly how the relationship between 
policies and settings works.

-- 

Fake news kills!

I may be contacted via the contact address given on my website: 
www.macfh.co.uk

Thread

csiph-web