55.2 Ensure 'Allow Game DVR' is set to 'Block'

Information

This setting enables or disables the Windows Game Recording and Broadcasting features.

The recommended state for this setting is: Block.

If this setting is allowed, users could record and broadcast session info to external sites, which is both a risk of accidentally exposing sensitive company data (on-screen) outside the company as well as a privacy concern.

Solution

To establish the recommended configuration via configuration profiles, set the following Settings Catalog path to Block :

Microsoft App Store\Allow Game DVR

Impact:

Windows Game Recording will not be allowed.

See Also

https://workbench.cisecurity.org/benchmarks/27291

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, 800-53|CM-7, CSCv7|9.2

Plugin: Windows

Control ID: c9603ffe3f9a0175b9fd5f4076024e70b19cc24fc508a91852375affd924e383