← Back to Google Chrome Current Windows Security Technical Implementation Guide

V-221595

CAT II (Medium)

Autoplay must be disabled.

Rule ID

SV-221595r960963_rule

STIG

Google Chrome Current Windows Security Technical Implementation Guide

Version

V2R11

CCIs

CCI-000381

Discussion

This allows a user to control if videos can play automatically with audio content (without user consent) in Google Chrome. If the policy is set to "True", Google Chrome is allowed to autoplay media. If the policy is set to "False", Google Chrome is not allowed to autoplay media. The "AutoplayAllowlist" policy can be used to override this for certain URL patterns. By default, Google Chrome is not allowed to autoplay media. The "AutoplayAllowlist" policy can be used to override this for certain URL patterns.

Check Content

Universal method: 
 1. In the omnibox (address bar) type chrome://policy
 2. If "AutoplayAllowed" is not displayed under the "Policy Name" column or it is not set to "False", this is a finding.
Windows method:
 1. Start regedit
 2. Navigate to HKLM\Software\Policies\Google\Chrome\
 3. If the "AutoplayAllowed" value name does not exist or its value data is not set to "0", this is a finding.

Fix Text

Windows group policy:
1. Open the “group policy editor” tool with gpedit.msc
2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Google\Google Chrome\
Policy Name: Allow media autoplay
Policy State: Disabled
Policy Value: N/A