Detections
Analytics
WN11-CC-000252 - Windows 11 must be configured to disable Windows Game Recording and Broadcasting.
Information
Windows Game Recording and Broadcasting is intended for use with games; however, it could record screenshots of other applications and expose sensitive data. Disabling the feature will prevent this from occurring.Note: A different registry location is needed when systems are managed by Intune versus GPO.
Solution
For GPO-managed systems:Configure the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Windows Game Recording and Broadcasting >> 'Enables or disables Windows Game Recording and Broadcasting' to 'Disabled'.
For Intune-managed systems:
Revise the Intune policy to disable Windows Game Recording and Broadcasting.
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_11_V2R11_STIG.zip
Item Details
Audit Name: DISA Microsoft Windows 11 STIG v2r11
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-7a., CAT|II, CCI|CCI-000381, Rule-ID|SV-253399r1259989_rule, STIG-ID|WN11-CC-000252, Vuln-ID|V-253399
Plugin: Windows
Control ID: da2380cfc4033eda36bd1e4387b3cbe8ec47a78fb95ce26077cbdd4056cdcf3c