This Knowledge Base article provides a technical, administrator-focused guide for disabling the Snipping Tool and Windows screen capture mechanisms across Windows environments.
It covers:
Group Policy (GPO)
Registry-based enforcement
Executable-level blocking
AppLocker / SRP controls
Win + Shift + S behavior
Security implications & limitations
Applicable to:
Windows 10 / Windows 11
Domain & standalone systems
Enterprise / managed environments
Windows provides multiple screenshot mechanisms:
| Component | Purpose |
|---|---|
| SnippingTool.exe | Legacy screenshot utility |
| ScreenClippingHost.exe | Win + Shift + S handler |
| Snip & Sketch / Snipping Tool (modern) | UWP-based capture UI |
| Print Screen Key (PrtScn) | Full screen capture |
| Game Bar Capture | Screenshot/video capture |
Disabling only SnippingTool.exe is insufficient in modern Windows versions.
Windows screen capture involves:
User Input
Win + Shift + S
Print Screen
Third-party APIs
Capture Handler
ScreenClippingHost.exe
UWP capture services
Clipboard Integration
Captured image β Clipboard / temp storage
Rendering & UI
Modern Snipping Tool interface
β Disabling Snipping Tool alone does NOT prevent screenshots.
β Users may still capture screens via:
Win + Shift + S
Print Screen
Game Bar
Third-party utilities
Remote session tools
Full prevention requires multi-layered controls.
Common scenarios:
Secure workstation environments
Exam / testing systems
Financial / compliance systems
Kiosk / public systems
Insider threat mitigation
Data leakage prevention (DLP)
Path:
User Configuration
β Administrative Templates
β Windows Components
β Tablet PC
β Accessories
Policy:
Setting:
Path (Windows 10/11):
Policy:
(Availability depends on Windows build)
Path:
Policy:
β Broad impact β disables ALL Windows hotkeys.
β Only partial mitigation.
Critical executables:
| Executable | Function |
|---|---|
SnippingTool.exe | Legacy tool |
ScreenClippingHost.exe | Win+Shift+S |
GameBar.exe | Game Bar capture |
β Windows updates may revert permissions.
Create Rule β Executable Rules β Deny
Targets:
Block via hash/path:
| Issue | Root Cause | Fix |
|---|---|---|
| Tool re-enabled after update | Windows File Protection / Update overwrite | Use AppLocker / SRP |
| Win+Shift+S still works | ScreenClippingHost not blocked | Block executable |
| Users bypass using third-party apps | No application control policy | Implement AppLocker |
| Screenshots via RDP | Remote capture permitted | Harden RDP policies |
β Windows cannot guarantee screenshot prevention.
Users may capture screens via:
External devices (phone camera)
Virtual machines
Remote tools
Accessibility APIs
GPU capture hooks
β DLP solutions
β VDI restrictions
β Endpoint lockdown
β Watermarking
β Session monitoring
β Use AppLocker / WDAC (most reliable)
β Block executables + UWP capture
β Disable Game Bar
β Enforce least privilege
β Monitor clipboard & file activity
β Combine with DLP
β Only disabling Snipping Tool
β Registry-only enforcement
β Permission tweaks without policy control
Disabling screenshots in Windows is not a single-setting operation.
Effective mitigation requires:
Group Policy controls
Executable blocking
Application whitelisting (AppLocker / WDAC)
Security monitoring
Absolute prevention is not technically guaranteed on general-purpose Windows systems.