18.10.10.1 (L2) Ensure 'Allow Use of Camera' is set to 'Disabled'

Information

This policy setting controls whether the use of Camera devices on the machine are permitted.

The recommended state for this setting is: Disabled

Cameras in a high security environment can pose serious privacy and data exfiltration risks - they should be disabled to help mitigate that risk.

Solution

To establish the recommended configuration via GP, set the following UI path to Disabled :

Computer Configuration\Policies\Administrative Templates\Windows Components\Camera\Allow Use of Camera

Note: This Group Policy path may not exist by default. It is provided by the Group Policy template Camera.admx/adml that is included with the Microsoft Windows 10 Release 1607 & Server 2016 Administrative Templates (or newer).

Impact:

Users will not be able to utilize the camera on a system.

See Also

https://workbench.cisecurity.org/benchmarks/17096

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, 800-53|CM-7

Plugin: Windows

Control ID: 23b346c81a444d8c9b13f9e8b87e7dd413e8893ed5e9f6de79c4cec3fd601820