18.9.12.1 Ensure 'Allow Use of Camera' is set to 'Disabled'

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

This policy setting controls whether the use of Camera devices on the machine are permitted.

The recommended state for this setting is: Disabled.

Rationale:

Cameras in a high security environment can pose serious privacy and data exfiltration risks - they should be disabled to help mitigate that risk.

Solution

To establish the recommended configuration via GP, set the following UI path to Disabled:

Computer Configuration\Policies\Administrative Templates\Windows Components\Camera\Allow Use of Camera

Note: This Group Policy path may not exist by default. It is provided by the Group Policy template Camera.admx/adml that is included with the Microsoft Windows 10 Release 1607 & Server 2016 Administrative Templates (or newer).


Impact:

Users will not be able to utilize the camera on a system.

Default Value:

Enabled. (Camera devices are enabled.)

See Also

https://workbench.cisecurity.org/files/2781

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7, CSCv6|13, CSCv7|5.1

Plugin: Windows

Control ID: 3154dab1518ff915ab51029851e473a5c636967bdf75d980140943db4264c916