How Do You Enable Screen Capture Protection for an Azure Virtual Desktop Host Pool?
You have an Azure Virtual Desktop deployment that contains a host pool named Pool1. Pool1 contains two session hosts named Host1 and Host2. You need to enable screen capture protection for the deployment. What should you do?
Community Insight
This question tests where AVD screen capture protection is configured and traps candidates into choosing an RDP property such as clipboard redirection, which controls data redirection rather than screen capture.
Screen capture protection for Azure Virtual Desktop is enabled through a Group Policy setting applied to the session hosts, not through RDP Properties. This page confirms why the correct choice is A for Pool1's Host1 and Host2.
The most common wrong answer is B, disabling Clipboard redirection in Pool1's RDP Properties, because clipboard redirection sounds like it blocks copying screen data but it does not prevent screen capture.
Community Discussion (14 comments)
Comments & Corrections
No comments yet — spotted an error or have a note? Share it below.
Expert Analysis
Why the Answer Is Correct
Screen capture protection is a session-host security setting that must be applied on Host1 and Host2, and Microsoft documents it as a Group Policy setting under Computer Configuration > Policies > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Azure Virtual Desktop > Enable screen capture protection. Applying the policy to both session hosts covers sessions in Pool1 without relying on Pool1's RDP Properties. As trashbox notes, "Configure the settings by using Group Policy," and DallasM cites the same administrative-template path. DC095 adds that even Intune-based configuration ultimately creates "a local gp object on the host," which is consistent with configuring Host1 and Host2.Why the Other Options Are Wrong
Option B is wrong because Clipboard redirection determines whether copy-and-paste data can move between the session and the local device; it does not prevent a screenshot of the session. Option D is wrong because disabling encoding of redirected video changes how redirected video is encoded, not whether the desktop screen can be captured. Option C is wrong because AVD screen capture protection is not delivered by an Azure VM extension; lukiduc9625 explicitly asked for the extension name and could not find one, while the Microsoft article points to Group Policy. The comments from Sango reinforce this distinction: "Clipboard Redirection has got nothing to do with screen shot protection."Community Comment Notes
The comment thread shows strong consensus for A: Sango corrected the clipboard idea, trashbox cited the Microsoft Learn article, DallasM gave the exact policy path, and Karl_Anthony_Towns stated "A for sure." DC095's Intune note confirms that the policy still lands as a local Group Policy object on each session host. The only support for C came from a jeff1988 comment that did not name an extension, and lukiduc9625 challenged it with "I cannot find any VM extension which can give mi screen capture protection" while pointing back to the Group Policy documentation. A separate comment naming B is correctly rebutted by the fact that clipboard redirection is unrelated to screenshots.Official Reference
Exam Strategy
When AVD security settings appear, distinguish host/session-level Group Policy or Intune configuration from per-host-pool RDP Properties. Screen capture protection is a session host policy, so apply it to Host1 and Host2; RDP Properties are for redirection and connection behavior.
Frequently Asked Questions
Why is disabling Clipboard redirection in Pool1's RDP Properties not enough for screen capture protection?
Clipboard redirection controls copy/paste data flow only; it does not block a user from capturing the session screen with screenshot tools.
Can Intune configure AVD screen capture protection instead of local Group Policy?
Yes; an Intune policy ultimately configures a local Group Policy object on the session host, so the setting still lands on Host1 and Host2.
Related Analysis
Practice All AZ-140 Questions
Access 64 questions with complete answers and detailed explanations.
View Full AZ-140 Practice Test →