STIGUI
V-221595CAT II — Medium severitySV-221595r960963_rule

Autoplay must be disabled.

Rule version DTBC-0064 · STIG v2 · 2025-05-15

Discussion

This allows a user to control if videos can play automatically with audio content (without user consent) in Google Chrome.

If the policy is set to "True", Google Chrome is allowed to autoplay media. If the policy is set to "False", Google Chrome is not allowed to autoplay media. The "AutoplayAllowlist" policy can be used to override this for certain URL patterns. By default, Google Chrome is not allowed to autoplay media. The "AutoplayAllowlist" policy can be used to override this for certain URL patterns.

Check

Universal method: 1. In the omnibox (address bar) type chrome://policy 2. If "AutoplayAllowed" is not displayed under the "Policy Name" column or it is not set to "False", this is a finding. Windows method: 1. Start regedit 2. Navigate to HKLM\Software\Policies\Google\Chrome\ 3. If the "AutoplayAllowed" value name does not exist or its value data is not set to "0", this is a finding.

Fix

Windows group policy: 1. Open the “group policy editor” tool with gpedit.msc 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Google\Google Chrome\ Policy Name: Allow media autoplay Policy State: Disabled Policy Value: N/A

Identifiers

Group ID
V-221595
Group title
SRG-APP-000141
Rule ID
SV-221595r960963_rule
Check ID
C-23310r415912_chk
Fix ID
F-23299r415913_fix