CIS Microsoft Windows 10 Enterprise RTM (Release 1507) Benchmark

18.8.23 Locale Services
This section contains recommendations for Locale Services settings.
18.8.23.1 (L2) Set 'Disallow copying of user input methods to the system
account for sign-in' to 'Enabled' (Scored)
Profile Applicability:
Level 2
Level 2 + BitLocker
Description:
This policy prevents automatic copying of user input methods to the system account for use
on the sign-in screen. The user is restricted to the set of input methods that are enabled in
the system account.
The recommended state for this setting is: Enabled.
Rationale:
This is a way to increase the security of the system account.
Audit:
Navigate to the UI Path articulated in the Remediation section and confirm it is set as
prescribed. This group policy setting is backed by the following registry location:
HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Control
Panel\International:BlockUserInputMethodsForSignIn
Remediation:
To establish the recommended configuration via GP, set the following UI path to Enabled:
Computer Configuration\Policies\Administrative Templates\System\Locale
Services\Disallow copying of user input methods to the system account for sign-in
Impact:
If the policy is Enabled, then the user will get input methods enabled for the system
account on the sign-in page.
509 | P a g e