How to disable an integrated webcam using Group Policy Objects
So I have been having the problem for quite a while where I wished to disable camera's that are integrated into laptops and screens on desktop solutions. I had a look around the internet, but couldn't find any simple way of disabling it using group policy. Most of the suggestions on the internet require rolling out software called devcon and using that to disable them. I wasn’t that keen on the idea, so a colleague and I went hunting for some registry settings that would disable the webcam. In the end we came up with the following registry solution :
Value : Start
If you set the value start to 3, the webcam driver is enabled. If you set it to 4, the webcam is disabled. If an additional webcam device is plugged in that device will not be disabled, it only affects the integrated webcam/first webcam that’s installed.
Using these settings we can now setup an adm file that we can attached to a group policy to then enable or disable the webcam.
Here is the adm template to disable the integrated webcam :
CATEGORY "Disable USB integrated webcam"
POLICY "Turn On/Off Usb connected webcam"
EXPLAIN "If this policy is enabled, the usb webcam driver Usbvideo.sys will be enabled. If you disable this policy the webcam driver Usbvideo.sys will be disabled. Not configuring this policy will not make any changes."
VALUEON NUMERIC 3
VALUEOFF NUMERIC 4
If you copy and paste the text into a notepad and save it as an adm file you are ready to attach it to a group policy and test the settings. O
A reboot of the computer/laptop is required for the settings to take effect; this is on top of a reboots for the policy to be picked up.
PLEASE make sure you fully test these settings before you roll out across any network.
Tuesday, May 7. 2013
Display comments as (Linear | Threaded)
The author does not allow comments to this entry