1.98 WN10-CC-000005

Information

Camera access from the lock screen must be disabled.

GROUP ID: V-220792RULE ID: SV-220792r958478

Enabling camera access from the lock screen could allow for unauthorized use. Requiring logon will ensure the device is only used by authorized personnel.

Solution

If the device does not have a camera, this is NA.

Configure the policy value for

Computer Configuration >> Administrative Templates >> Control Panel >> Personalization >> 'Prevent enabling lock screen camera'

to 'Enabled'.

See Also

https://workbench.cisecurity.org/benchmarks/23869