Information
This policy setting controls whether the use of Camera devices on the machine are permitted.
The recommended state for this setting is: Disabled.
Rationale:
Cameras in a high security environment can pose serious privacy and data exfiltration risks - they should be disabled to help mitigate that risk.
Impact:
Users will not be able to utilize the camera on a system.
Solution
To establish the recommended configuration via GP, set the following UI path to Disabled:
Computer Configuration\Policies\Administrative Templates\Windows Components\Camera\Allow Use of Camera
Note: This Group Policy path may not exist by default. It is provided by the Group Policy template Camera.admx/adml that is included with the Microsoft Windows 10 Release 1607 & Server 2016 Administrative Templates (or newer).
Default Value:
Enabled. (Camera devices are enabled.)
Item Details
Category: CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION
References: 800-53|CM-1, 800-53|CM-2, 800-53|CM-6, 800-53|CM-7, 800-53|CM-7(1), 800-53|CM-9, 800-53|SA-3, 800-53|SA-8, 800-53|SA-10, CSCv7|5.1
Control ID: b4d1c73f3a565b8088939b4f3849b36b19a189284f3f6348da97f5d2347bda8c