CIS Microsoft Windows 10 Enterprise Release 1909 Benchmark

Impact:

None - this is the default behavior. If logon hours are not used in your organization, this policy setting will have no impact. If logon hours are used, existing user sessions will be forcibly terminated when their logon hours expire.

Default Value:

Enabled. (Client sessions with the SMB service are forcibly disconnected when the client's logon hours expire.)

References:

1. CCE-34911-8

CIS Controls:

Version 6

16 Account Monitoring and Control Account Monitoring and Control

Version 7

16.13 Alert on Account Login Behavior Deviation Alert when users deviate fromnormal login behavior, such as time-of-day, workstation location and duration.

220 | P a g e