Session Lock

Win - OIB - SC - Device Security - D - Login and Lock Screen - v3.1

CMMC Control Mapping Matrix

Name	Value
Basics
Name	Win - OIB - SC - Device Security - D - Login and Lock Screen - v3.1
Description
Profile type	Settings catalog
Platform supported	Windows 10 and later
Created	Thursday, February 26, 2026 5:39:13 AM
Last modified	Thursday, February 26, 2026 5:39:13 AM
Scope tags	Default

Table 13. Basics - Win - OIB - SC - Device Security - D - Login and Lock Screen - v3.1

Name	Value
Above Lock
Allow Cortana Above Lock	Block
Allow Toasts	Block
Administrative Templates
Personalization
Prevent enabling lock screen camera	Enabled
Prevent enabling lock screen slide show	Enabled
Logon
Turn off app notifications on the lock screen	Enabled
Credential User Interface
Do not display the password reveal button	Enabled
Windows Logon Options
Configure the mode of automatically signing in and locking last interactive user after a restart or cold boot	Enabled
Configure the mode of automatically signing in and locking last interactive user after a restart or cold boot (Device)	Enabled if BitLocker is on and not suspended
Sign-in and lock last interactive user automatically after a restart	Enabled
Authentication
Allow Aad Password Reset	Allow
Privacy
Let Apps Activate With Voice Above Lock	Force deny. Windows apps cannot be activated by voice while the screen is locked, and users cannot change it.

Table 14. Settings - Win - OIB - SC - Device Security - D - Login and Lock Screen - v3.1

Win - OIB - SC - Device Security - U - Power and Device Lock - v3.6

Name	Value
Basics
Name	Win - OIB - SC - Device Security - U - Power and Device Lock - v3.6
Description
Profile type	Settings catalog
Platform supported	Windows 10 and later
Created	Thursday, February 26, 2026 5:39:14 AM
Last modified	Thursday, February 26, 2026 5:39:14 AM
Scope tags	Default

Table 15. Basics - Win - OIB - SC - Device Security - U - Power and Device Lock - v3.6

Name	Value
Administrative Templates
Sleep Settings
Require a password when a computer wakes (on battery)	Enabled
Require a password when a computer wakes (plugged in)	Enabled
Specify the system sleep timeout (on battery)	Enabled
System Sleep Timeout (seconds):	600
Specify the system sleep timeout (plugged in)	Enabled
System Sleep Timeout (seconds):	900
Video and Display Settings
Turn off the display (on battery)	Enabled
On battery power, turn display off after (seconds)	300
Turn off the display (plugged in)	Enabled
When plugged in, turn display off after (seconds)	600
Power
Unattended Sleep Timeout On Battery	600
Unattended Sleep Timeout Plugged In	900

Table 16. Settings - Win - OIB - SC - Device Security - U - Power and Device Lock - v3.6