1. Home
  2. Security Hardening
  3. CIS Microsoft Edge L2 V1.0.0
  4. Ensure ‘Allow or deny screen capture’ is set to ‘Disabled’

Ensure ‘Allow or deny screen capture’ is set to ‘Disabled’

Details

This policy setting controls whether Microsoft Edge can use screen-share APIs including web-based online meetings, video, or screen sharing.

The recommended state for this setting is: Disabled.

Rationale:

Allowing screen-share APIs within Microsoft Edge could potentially allow for sensitive data to be shared via screen captures.

Impact:

Users will be unable to utilize APIs which support web-based meetings, video, and screen capture. This could potentially have disruption to users whom may have utilized these abilities in the past.

Solution

To establish the recommended configuration via GP, set the following UI path to Disabled

Computer ConfigurationPoliciesAdministrative TemplatesMicrosoft EdgeAllow or deny screen capture

Note: This Group Policy path may not exist by default. It is provided by the Group Policy template MSEdge.admx/adml that can be downloaded from Microsoft here.

Default Value:

Enabled.

Supportive Information

The following resource is also helpful.

This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Windows.

References

Source

Updated on July 16, 2022
Was this article helpful?

Related Articles