Skip to content

Enhanced anti-spoofing for facial recognition must be enabled on Window 10.

An XCCDF Rule

Description

Enhanced anti-spoofing provides additional protections when using facial recognition with devices that support it.

ID
SV-220830r991589_rule
Version
WN10-CC-000195
Severity
Medium
References
Updated

Remediation Templates

A Manual Procedure

Configure the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Biometrics >> Facial Features >> "Configure enhanced anti-spoofing" to "Enabled". 

v1607:
The policy name is "Use enhanced anti-spoofing when available".