4.1.1 Ensure 'Allow or deny screen capture' is set to 'Disabled'

Information

This setting controls whether Google Chrome can use screen-share APIs including web-based online meetings, video, or screen sharing.

The recommended state for this setting is: Disabled (0)

NOTE: This setting is not considered (and a site will be allowed to use screen-share APIs) if the site matches an origin pattern in any of the following other settings: ScreenCaptureAllowedByOrigins, WindowCaptureAllowedByOrigins, TabCaptureAllowedByOrigins, SameOriginTabCaptureAllowedByOrigins.

Rationale:

Allowing screen-share APIs within Google Chrome could potentially allow for sensitive data to be shared via screen captures.

Impact:

Users will be unable to utilize APIs which support web-based meetings (video conferencing screen sharing), video, and screen capture. This could potentially cause disruption to users who may have utilized these abilities in the past.

Solution

To establish the recommended configuration via Group Policy, set the following UI path to Disabled:

Computer Configuration\Policies\Administrative Templates\Google\Google Chrome\Allow or deny screen capture\Allow or deny screen capture

Default Value:

Unset (Same as Enabled, but user can change)

See Also

https://workbench.cisecurity.org/benchmarks/8691

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7b.

Plugin: Windows

Control ID: a14ed08ea5ec3c178f382f1df2ec2f53c15be4b3d89a39be50f3091ac4de299e