Windows 10: Windows 10 Creators Update - Security Breach Found (or feature...)

Call this a feature if you want, but it's a terrible one..

Things you'll need setup to reproduce the issue:

• Windows 10, Version 1703, OS Build - 15063.296
• A PIN/Password code login
• Display timeout of 1 minute

By pressing the Windows Key, search 'power plan' and select Edit Power Plan.Set 'Turn off the display' after 1 minute.
How to replicate the issue:

Firstly, lock your PC with CTRL + L on your keyboard to confirm that when you slide the lockscreen up, it prompts you to enter a PIN/Password.

If that works fine, then try to do this step and replicate the issue I'm having.

Let your PC lock after 1min, don't touch anything.

If it blacks out, wake the screen but stay on the lockscreen.

Now, slide the lockscreen up by pressing any key and it should promp-..... it's probably taken you straight into the computer without asking for any PIN/Passcode.

Solution:
Call up Microsoft/live chat to Microsoft and allow them to Remote Desktop into your PC only to make them realize that they can't do anything. They kept telling me the update wasn't the issue and to roll back..

It's happened on my Home PC and now my recently updated Work PC. So it's not a coincidence, this is ridiculous and Microsoft should know better.

All in all, there is no solution. Stay on the Anniversary Update or previous builds.

Let me know your results.

(glad to be a part of the community)

###############UPDATE##################

Solution provided by Edwin

"You'll need to use Screen Saver settings to enable that security feature."





:)

 

latest intel security flaw

Is there going to be an update from Microsoft to protect me from this potential security breach? (Win 10 Creators)

 

Windows Defender

From the sound of things, you just installed the latest Feature Update called the Windows 10 Creators Update version 1703.

Previous versions include: Windows 10 Anniversary Update (1607), Windows 10 November Update (1511) and Windows 10 (1507).

The next major feature update coming this fall is called the Windows 10 Fall Creators Update (1709).

The Windows Defender Security Center is the successor to the Windows Defender Antivirus utility, providing a comprehensive environment for managing the security of your computer including Antivirus, Network Security, Performance and Health.

You can learn more about using it to protect your computer, including scanning the system.

Windows 10 Creators Update Feature: Windows Defender Security ...

 

Turning the display off isn't the same as locking your PC.

Consider a desktop.. say you switch the monitor off, then switch it back on again. Would you expect to have to log in?

(I don't use a PIN though so can't compare- but I do use the AU).

 

Of course turning the display off isn't the same as locking but what if you forget to lock your device and want the PC to lock after the display turns off?

This used to work perfectly fine in the previous builds as mentioned, namely the Anniversary Update.

Thanks for your input.

 

There has always been a delay in the requirement for a password, (or now pin), entry in windows after the Screen timeout activates. it's there to allow users to return to their work if the timeout occurs at an inconvenient time, This often happens in business when a user is reviewing a document, and has the timeout set to a low number and the require Password on wakeup is set.

It used to be 30 secs IIRC but I could be wrong as my memory is no longer foolproof. (I still know all the stuff I used to but there's lots of junk stacked on top of it *Wink )

Incidentally there is also a delay built into the wake-up of a system in sleep or hibernation, which can be caused by a mouse vibration, if no activity occurs in a set time, (3 Mins?), the system will go back to sleep /hibernation - This delay did have an entry in the registry so could be adjusted on systems that are prone to this issue but not sure if there is a similar option for the password requirement delay

 

See this explains it.

But where the hell is that setting gone in this update and why does it seem like that setting has been wiped indefinitely so there is no timeout anymore..

 

It's under settings, system, power & sleep. Adjust the sleep timeout to match the screen turn off time.

Under settings, accounts, sign in options is the option to require the computer to ask for a password when waking from sleep. There is no option to ask for password when only turning the screen back on after the it has turned off.

 

You'll need to use Screen Saver settings to enable that security feature.

 

Just beat me to it Edwin!! *Wink

 

A collaborative effort! *Wink

 

Maybe this needs to be read , I've not checked if the key actually exists in the latest release , and if so what the default is but at least I've remembered "Grace Period" *Redface

Change Screen Saver Password Grace Period in Windows Windows 10 General Tips Tutorials

 

Wow.

Why isn't this site named Microsoft Help Desk instead...

Quicker and more reliable!

I just don't understand why they've changed the settings they have in the new update. Everything worked excellently in previous builds

 

Courtesy of the Creators Update.

GraceTime has been removed in terms of it's key