Details
This policy setting allows you to set whether the end-user is prompted for access to audio capture devices. This may be Enabled (Default) or Disabled, in which case audio capture will only work for URLs configured in the AudioCaptureAllowedUrls setting.
Note: The AudioCaptureAllowedUrls setting will also need to be configured along with this setting.
The recommended state for this setting is: Disabled.
Rationale:
With the end-user having the ability to allow or deny audio capture for websites in Microsoft Edge, could open an organization up to a malicious site that may capture proprietary information through the browser. By limiting or disallowing this setting, it removes the end-user’s discretion leaving it up to the organization as to the sites allowed to use this ability.
Impact:
If this setting is disabled users will not be prompted for audio devices when using websites which may need this access, for example a web-based conferencing system. If there are sites which access will be allowed, this will need to be configured in the AudioCaptureAllowedUrls setting.
Solution
To establish the recommended configuration via GP, set the following UI path to Disabled
Computer ConfigurationPoliciesAdministrative TemplatesMicrosoft EdgeAllow or block audio capture
Note: This Group Policy path may not exist by default. It is provided by the Group Policy template MSEdge.admx/adml that can be downloaded from Microsoft here.
Default Value:
Enabled.
Supportive Information
The following resource is also helpful.
This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Windows.