CIS Microsoft Windows 10 Enterprise RTM (Release 1507) Benchmark

19.5 Start Menu and Taskbar
This section contains recommendations for Start Menu and Taskbar settings.
19.5.1 Notifications
This section contains recommendations for Notification settings.
19.5.1.1 (L1) Set 'Turn off toast notifications on the lock screen' to
'Enabled' (Scored)
Profile Applicability:
Level 1
Level 1 + BitLocker
Description:
This policy setting turns off toast notifications on the lock screen. If you enable this policy
setting, applications will not be able to raise toast notifications on the lock screen. If you
disable or do not configure this policy setting, toast notifications on the lock screen are
enabled and can be turned off by the administrator or user. No reboots or service restarts
are required for this policy setting to take effect.
The recommended state for this setting is Enabled.
Rationale:
While this feature can be handy for users applications that provide toast notifications
might display sensitive personal or business data while the device is unattended.
Audit:
Navigate to the UI Path articulated in the Remediation section and confirm it is set as
prescribed. This group policy setting is backed by the following registry location:
HKEY_USERS\\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\PushNotifications\
NoToastApplicationNotificationOnLockScreen
848 | P a g e