Camera access from the lock screen must be disabled. (Windows 8.1)

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-43237	WN08-CC-000137	SV-55990r1_rule	ECSC-1	Medium

Description
Enabling camera access from the lock screen could allow for unauthorized use. Requiring logon will ensure the device is only used by authorized personnel.

STIG	Date
Windows 8 / 8.1 Security Technical Implementation Guide	2014-04-02

Details

Check Text ( C-49267r4_chk )
This requirement is NA for the initial release of Windows 8. It is applicable to Windows 8.1. If the device does not have a camera, this is NA. Verify the registry value below. If it does not exist or is not configured as specified, this is a finding. Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \SOFTWARE\Policies\Microsoft\Windows\Personalization\ Value Name: NoLockScreenCamera Value Type: REG_DWORD Value: 1

Check Text ( C-49267r4_chk )

This requirement is NA for the initial release of Windows 8. It is applicable to Windows 8.1.
If the device does not have a camera, this is NA.

Verify the registry value below. If it does not exist or is not configured as specified, this is a finding.

Registry Hive: HKEY_LOCAL_MACHINE
Registry Path: \SOFTWARE\Policies\Microsoft\Windows\Personalization\

Value Name: NoLockScreenCamera

Value Type: REG_DWORD
Value: 1

Fix Text (F-48829r3_fix)
This requirement is NA for the initial release of Windows 8. It is applicable to Windows 8.1. If the device does not have a camera, this is NA. Configure the policy value for Computer Configuration -> Administrative Templates -> Control Panel -> Personalization -> "Prevent enabling lock screen camera" to "Enabled".