Windows 11 must be configured to disable Windows Game Recording and Broadcasting.

Overview

Finding IDVersionRule IDIA ControlsSeverity
V-253399WN11-CC-000252SV-253399r1210295_ruleCCI-000381medium
Description
Windows Game Recording and Broadcasting is intended for use with games; however, it could record screenshots of other applications and expose sensitive data. Disabling the feature will prevent this from occurring. Note: A different registry location is needed when systems are managed by Intune versus GPO.
STIGDate
Microsoft Windows 11 Security Technical Implementation Guide2026-05-19

Details

Check Text (C-253399r1210295_chk)

This is NA for Windows 11 LTSC. If the following registry value does not exist or is not configured as specified, this is a finding: Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \SOFTWARE\Policies\Microsoft\Windows\GameDVR\ (For GPO-managed systems) Or Registry Path: \SOFTWARE\Policies\Microsoft\Windows\GameDVR!AllowGameDVR (For Intune-managed systems) Value Name: AllowGameDVR Type: REG_DWORD Value: 0x00000000 (0)

Fix Text (F-56802r1210216_fix)

For GPO-managed systems: Configure the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Windows Game Recording and Broadcasting >> "Enables or disables Windows Game Recording and Broadcasting" to "Disabled". For Intune-managed systems: Revise the Intune policy to disable Windows Game Recording and Broadcasting.