Information
This policy setting controls whether the use of Camera devices on the machine are permitted.
The recommended state for this setting is: Disabled.
Rationale:
Cameras in a high security environment can pose serious privacy and data exfiltration risks - they should be disabled to help mitigate that risk.
Impact:
Users will not be able to utilize the camera on a system.
Solution
To establish the recommended configuration via GP, set the following UI path to Disabled:
Computer Configuration\Policies\Administrative Templates\Windows Components\Camera\Allow Use of Camera
Note: This Group Policy path may not exist by default. It is provided by the Group Policy template Camera.admx/adml that is included with the Microsoft Windows 10 Release 1607 & Server 2016 Administrative Templates (or newer).
Default Value:
Enabled. (Camera devices are enabled.)
Item Details
Category: CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION
References: 800-53|CM-1, 800-53|CM-2, 800-53|CM-6, 800-53|CM-7, 800-53|CM-7(1), 800-53|CM-9, 800-53|SA-3, 800-53|SA-8, 800-53|SA-10, CSCv7|5.1
Control ID: 6b4db9c77e13519ad954c38fe1b747ac479dc52ed3abbc8b0d3e92e8b9c0546a