|Platform: win2016||Date: (C)2017-08-03 (M)2017-10-16|
"Prevent enabling lock screen camera"
Disables the lock screen camera toggle switch in PC Settings and prevents a camera from being invoked on the lock screen.
By default, users can enable invocation of an available camera on the lock screen.
If you enable this setting, users will no longer be able to enable or disable lock screen camera access in PC Settings, and the camera cannot be invoked on the lock screen.
This may allow a malicious agent to access the camera and associated photos or screenshots that may have confidential information.
Enable this policy setting and users cannot access the camera toggle from a locked state.
Users must unlock the device to access the camera toggle.
(1) GPO: Computer Configuration\Administrative Templates\Control Panel\Personalization
(2) REG: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Personalization!NoLockScreenCamera
|SCAP Repo OVAL Definition||oval:org.secpod.oval:def:40335|