Detections
Analytics

18.10.11.1 (L2) Ensure 'Allow Use of Camera' is set to 'Disabled'

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

This policy setting controls whether the use of Camera devices on the machine are permitted.

The recommended state for this setting is: Disabled.

Cameras in a high security environment can pose serious privacy and data exfiltration risks - they should be disabled to help mitigate that risk.

Solution

To establish the recommended configuration via GP, set the following UI path to Disabled :

Computer Configuration\Policies\Administrative Templates\Windows Components\Camera\Allow Use of Camera

Note: This Group Policy path may not exist by default. It is provided by the Group Policy template Camera.admx/adml that is included with the Microsoft Windows 10 Release 1607 & Server 2016 Administrative Templates (or newer).

Impact:

Users will not be able to utilize the camera on a system.

See Also

https://workbench.cisecurity.org/benchmarks/24135

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, 800-53|CM-7

Plugin: Windows

Control ID: e4debb0a18f1a637c1e9658163c908e72fdd74232bb00b2a79eed81dd8d7e1fc