disable internal microphone for all users without disabling sound

I need to disable the internal microphone and not the sound for users in group. I can change the setfacl and chmod on a file dev/snd/pcmC2D0c but it resets upon restart how do i fix this i tried adding the command to rc.local but I wasnt sure if i needed to add something different