Groups > alt.comp.os.windows-10 > #182524

Re: Windows Spotlight shows picture information data on lock screen of one PC, but not others.

From	Java Jive <java@evij.com.invalid>
Newsgroups	alt.comp.os.windows-10
Subject	Re: Windows Spotlight shows picture information data on lock screen of one PC, but not others.
Date	2025-02-23 22:04 +0000
Organization	A noiseless patient Spider
Message-ID	<vpg619$maqe$1@dont-email.me> (permalink)
References	<vpctqt$1jqq$1@dont-email.me> <vpd8ad$3i85$1@dont-email.me> <11c91l2g7uznt$.dlg@v.nguard.lh>

Show all headers | View raw

On 2025-02-23 18:35, VanguardLH wrote:
> Java Jive <java@evij.com.invalid> wrote:
> 
>> On 2025-02-22 16:26, Java Jive wrote:
>>>
>>> Last night I launched GPEdit.msc on the problem build and disabled all
>>> settings, then launched SecPol.msc and began to do the same, but got
>>> tired before I'd really got into the latter, hibernated the PC, and went
>>> to bed.
>>>
>>> This morning, I powered it up, and lo, the Spotlight icon is there!
>>>
>>> So I'm guessing that it's either the default browser or the GPEdit
>>> settings, most probably the latter if I manage to nail it down further,
>>> I'll post back.
>>
>> Nailed it.  For my builds, it's the following policy setting in
>> GPEdit.msc ...
>>
>>       Computer Configuration
>>       Windows Settings
>>       Security Settings
>>       Local Policies
>>       Security Options
>>       Interactive Logon: Do not require CTRL-ALT-DEL
>>
>> ... which in my case was
>>
>>       Disabled
>>
>> ... meaning (after parsing out the confusing double negative) ...
>>
>>       Require CTRL-ALT-DEL
>>
>> Setting this to ...
>>
>>       Enabled
>>
>> ... meaning (after parsing out the confusing double negative) ...
>>
>>       Do NOT require CTRL-ALT-DEL
>>
>> ... allows the Spotlight icon ...
>>
>>       Like what you see?
>>
>> ... to appear on the lock screen.
>>
>> As Paul suggests, this is, or at least used to be, something of a
>> security issue, as described here ...
>>
>> https://www.manageengine.com/vulnerability-management/misconfiguration/logon-security/how-to-enable-secure-login-ctrl-alt-delete-logon-via-group-policy.html
>>
>> ... and accordingly I've always previously disabled this policy on my
>> builds, so that <Ctrl-Alt-Delete> is required to log on.  How much of an
>> issue this is still, or whether more recent versions of Windows are more
>> secure against logon window spoofing rendering the policy redundant, I'm
>> no longer sufficiently in the know to be able to comment further.
> 
> I never cared for Spotlight.  More glitz and fluff on wasted effort than
> Microsoft engaging those resources on bug fixes and truly important
> features.

Each to his own, but, whether you care to acknowledge so or not, in many 
people's opinion, including my own, some of the pictures are very beautiful.

> I have my Win boxes configured to require Ctrl+Alt+Del.  I've never
> encountered the Spotlight issue, because, well, I never use it.  I'd
> eradicate the glitz crap if there was a way.

As I have done up til now, but now I have to decide whether being able 
to find out the location of the most beautiful Spotlight pictures easily 
  -  there is a tedious and more involved way of using reverse image 
search  -  is worth a slight reduction in security.  I have yet to make 
that decision, mainly because, while I was still working I used to 
receive copies of all the security bulletins that the firm received, but 
having not worked for over a decade and having moved far away to a 
remote part of the country, I am no longer able to keep abreast of the 
latest security stories.

-- 

Fake news kills!

I may be contacted via the contact address given on my website: 
www.macfh.co.uk

Thread

csiph-web