Skip to content

Enhanced anti-spoofing for facial recognition must be enabled on Windows 11.

An XCCDF Rule

Description

Enhanced anti-spoofing provides additional protections when using facial recognition with devices that support it.

ID
SV-253389r991589_rule
Version
WN11-CC-000195
Severity
Medium
References
Updated

Remediation Templates

A Manual Procedure

Configure the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Biometrics >> Facial Features >> "Configure enhanced anti-spoofing" to "Enabled".