Group Policy Management
body { font-size:68%;font-family:MS Shell Dlg; margin:0px,0px,0px,0px; border: 1px solid #666666; background:#F6F6F6; width:100%; word-break:normal; word-wrap:break-word; } .head { font-weight:bold; font-size:160%; font-family:MS Shell Dlg; width:100%; color:#6587DC; background:#E3EAF9; border:1px solid #5582D2; padding-left:8px; height:24px; } .path { margin-left: 10px; margin-top: 10px; margin-bottom:5px;width:100%; } .info { padding-left:10px;width:100%; } table { font-size:100%; width:100%; border:1px solid #999999; } th { border-bottom:1px solid #999999; text-align:left; padding-left:10px; height:24px; } td { background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; } .btn { width:100%; text-align:right; margin-top:16px; } .hdr { font-weight:bold; border:1px solid #999999; text-align:left; padding-top: 4px; padding-left:10px; height:24px; margin-bottom:-1px; width:100%; } .bdy { width:100%; height:182px; display:block; overflow:scroll; z-index:2; background:#FFFFFF; padding-left:10px; padding-bottom:10px; padding-top:10px; border:1px solid #999999; } button { width:6.9em; height:2.1em; font-size:100%; font-family:MS Shell Dlg; margin-right:15px; } @media print { .bdy { display:block; overflow:visible; } button { display:none; } .head { color:#000000; background:#FFFFFF; border:1px solid #000000; } }
Setting Path:
Explanation
No explanation is available for this setting.
Supported On:
Not available
gp-pack.com-MS-1607-Telemetry_and_Privacy_Edition_Release
Computer Configuration (Enabled)
Policies
Windows Settings
Security Settings
Public Key Policies/Certificate Path Validation Settings/Stores
PolicySetting
Allow user trusted root Certificate Authorities (CAs) to be used to validate certificatesEnabled
Allow users to trust peer trust certificatesEnabled
Peer trust certificate purposes:Client Authentication; Secure Email; Encrypting File System
Root CAs that client computers can trust:Third-Party Root Certification Authorities and Enterprise Root Certification Authorities
For certificate-based authentication of users and computers, along with CAs that are registered in Active Directory, the client computer must use should also use user principal name (UPN) constraint compliant CAsDisabled
Public Key Policies/Certificate Path Validation Settings/Network Retrieval
PolicySetting
Default URL retrieval timeout in seconds15
Default path validation cumulative timeout in seconds20
Allow issuer certificate retrieval during path validationEnabled
Default cross-certificate download interval in hours168
Administrative Templates
Policy definitions (ADMX files) retrieved from the central store.
Control Panel/Regional and Language Options/Handwriting personalization
PolicySettingComment
Turn off automatic learningEnabled
Network/Fonts
PolicySettingComment
Enable Font ProvidersDisabled
Network/TCPIP Settings/IPv6 Transition Technologies
PolicySettingComment
Set Teredo StateDisabled
Privacy and Telemetry
PolicySettingComment
10. Disable Microsoft Account cloud authentication serviceEnabled
21. Turn off sending data by MRTEnabled
3.Prevent Windows from time synchronisationEnabled
SCM: Wi-Fi Sense
PolicySettingComment
Disable Wi-Fi SenseEnabled
System/Device Installation
PolicySettingComment
Prevent device metadata retrieval from the InternetEnabled
System/Group Policy
PolicySettingComment
Continue experiences on this deviceDisabled
System/Internet Communication Management/Internet Communication settings
PolicySettingComment
Turn off Automatic Root Certificates UpdateEnabled
Turn off Windows Network Connectivity Status Indicator active testsDisabled
System/User Profiles
PolicySettingComment
Turn off the advertising IDEnabled
Windows Components/App Privacy
PolicySettingComment
Let Windows apps access account informationEnabled
Default for all apps:Force Deny
Put user in control of these specific apps (use Package Family Names):
Force allow these specific apps (use Package Family Names):
Force deny these specific apps (use Package Family Names):
PolicySettingComment
Let Windows apps access call historyEnabled
Default for all apps:Force Deny
Put user in control of these specific apps (use Package Family Names):
Force allow these specific apps (use Package Family Names):
Force deny these specific apps (use Package Family Names):
PolicySettingComment
Let Windows apps access contactsEnabled
Default for all apps:Force Deny
Put user in control of these specific apps (use Package Family Names):
Force allow these specific apps (use Package Family Names):
Force deny these specific apps (use Package Family Names):
PolicySettingComment
Let Windows apps access emailEnabled
Default for all apps:Force Deny
Put user in control of these specific apps (use Package Family Names):
Force allow these specific apps (use Package Family Names):
Force deny these specific apps (use Package Family Names):
PolicySettingComment
Let Windows apps access locationEnabled
Default for all apps:Force Deny
Put user in control of these specific apps (use Package Family Names):
Force allow these specific apps (use Package Family Names):
Force deny these specific apps (use Package Family Names):
PolicySettingComment
Let Windows apps access messagingEnabled
Default for all apps:Force Deny
Put user in control of these specific apps (use Package Family Names):
Force allow these specific apps (use Package Family Names):
Force deny these specific apps (use Package Family Names):
PolicySettingComment
Let Windows apps access motionEnabled
Default for all apps:Force Deny
Put user in control of these specific apps (use Package Family Names):
Force allow these specific apps (use Package Family Names):
Force deny these specific apps (use Package Family Names):
PolicySettingComment
Let Windows apps access notificationsEnabled
Default for all apps:Force Deny
Put user in control of these specific apps (use Package Family Names):
Force allow these specific apps (use Package Family Names):
Force deny these specific apps (use Package Family Names):
PolicySettingComment
Let Windows apps access the calendarEnabled
Default for all apps:Force Deny
Put user in control of these specific apps (use Package Family Names):
Force allow these specific apps (use Package Family Names):
Force deny these specific apps (use Package Family Names):
PolicySettingComment
Let Windows apps access the cameraEnabled
Default for all apps:Force Deny
Put user in control of these specific apps (use Package Family Names):
Force allow these specific apps (use Package Family Names):
Force deny these specific apps (use Package Family Names):
PolicySettingComment
Let Windows apps access the microphoneEnabled
Default for all apps:Force Deny
Put user in control of these specific apps (use Package Family Names):
Force allow these specific apps (use Package Family Names):
Force deny these specific apps (use Package Family Names):
PolicySettingComment
Let Windows apps access trusted devicesEnabled
Default for all apps:Force Deny
Put user in control of these specific apps (use Package Family Names):
Force allow these specific apps (use Package Family Names):
Force deny these specific apps (use Package Family Names):
PolicySettingComment
Let Windows apps control radiosEnabled
Default for all apps:Force Deny
Put user in control of these specific apps (use Package Family Names):
Force allow these specific apps (use Package Family Names):
Force deny these specific apps (use Package Family Names):
PolicySettingComment
Let Windows apps make phone callsEnabled
Default for all apps:Force Deny
Put user in control of these specific apps (use Package Family Names):
Force allow these specific apps (use Package Family Names):
Force deny these specific apps (use Package Family Names):
PolicySettingComment
Let Windows apps sync with devicesEnabled
Default for all apps:Force Deny
Put user in control of these specific apps (use Package Family Names):
Force allow these specific apps (use Package Family Names):
Force deny these specific apps (use Package Family Names):
Windows Components/Data Collection and Preview Builds
PolicySettingComment
Allow TelemetryEnabled
0 - Security [Enterprise Only]
PolicySettingComment
Do not show feedback notificationsEnabled
Toggle user control over Insider buildsDisabled
Windows Components/Delivery Optimization
PolicySettingComment
Download ModeEnabled
Download Mode:Bypass
Windows Components/File Explorer
PolicySettingComment
Configure Windows SmartScreenDisabled
Windows Components/Internet Explorer
PolicySettingComment
Allow Microsoft services to provide enhanced suggestions as the user types in the Address barDisabled
Disable Periodic Check for Internet Explorer software updatesEnabled
Turn off browser geolocationEnabled
Turn off the auto-complete feature for web addressesEnabled
Turn on Suggested SitesDisabled
Windows Components/Internet Explorer/Internet Control Panel/Advanced Page
PolicySettingComment
Turn off the flip ahead with page prediction featureEnabled
Windows Components/Location and Sensors
PolicySettingComment
Turn off locationEnabled
Windows Components/Maps
PolicySettingComment
Turn off Automatic Download and Update of Map DataDisabled
Turn off unsolicited network traffic on the Offline Maps settings pageDisabled
Windows Components/Microsoft Edge
PolicySettingComment
Allow employees to send Do Not Track headersDisabled
Configure corporate Home pagesEnabled
Use this format: <support.contoso.com><https://support.microsoft.com/>about:blank
PolicySettingComment
Open a new tab with an empty tabDisabled
Turn off address bar search suggestionsDisabled
Turn off AutofillDisabled
Turn off Password ManagerDisabled
Turn off the SmartScreen FilterDisabled
Windows Components/OneDrive
PolicySettingComment
Prevent the usage of OneDrive for file storageEnabled
Windows Components/RSS Feeds
PolicySettingComment
Turn off background synchronization for feeds and Web SlicesEnabled
Windows Components/Search
PolicySettingComment
Allow CortanaDisabled
Allow search and Cortana to use locationDisabled
Do not allow web searchEnabled
Don't search the web or display web results in SearchEnabled
Set what information is shared in SearchEnabled
Type of informationAnonymous info
Windows Components/Software Protection Platform
PolicySettingComment
Turn off KMS Client Online AVS ValidationEnabled
Windows Components/Store
PolicySettingComment
Disable all apps from Windows Store Enabled
Windows Components/Sync your settings
PolicySettingComment
Do not sync app settingsEnabled
Allow users to turn "app settings" syncing on.Disabled
Windows Components/Windows Defender/MAPS
PolicySettingComment
Send file samples when further analysis is requiredEnabled
Send file samples when further analysis is requiredNever send
Windows Components/Windows Defender/Signature Updates
PolicySettingComment
Define file shares for downloading definition updatesEnabled
Define file shares for downloading definition updates
PolicySettingComment
Define the order of sources for downloading definition updatesEnabled
Define the order of sources for downloading definition updatesFileShares
Windows Components/Windows Mail
PolicySettingComment
Turn off Windows Mail applicationEnabled
Windows Components/Windows Update
PolicySettingComment
Do not connect to any Windows Update Internet locationsEnabled
User Configuration (Enabled)
Policies
Administrative Templates
Policy definitions (ADMX files) retrieved from the central store.
Privacy and Telemetry
PolicySettingComment
16.1 Turn off Let websites provide locally relevant content by accessing my language listDisabled
16.16 Choose and Check APPS thats are NOT allowed to run in BackgroundEnabled
46928bounde.EclipseManagerEnabled
ActiproSoftwareLLC.562882FEEB491Enabled
AdobeSystemsIncorporated.AdobePhotoshopExpressEnabled
Microsoft.3DBuilderEnabled
Microsoft.BingNewsEnabled
Microsoft.DesktopAppInstallerEnabled
Microsoft.BingWeatherEnabled
Microsoft.GetstartedEnabled
Microsoft.MessagingEnabled
Microsoft.MicrosoftEdgeEnabled
Microsoft.MicrosoftOfficeHubEnabled
Microsoft.MicrosoftPowerBIForWindowsEnabled
Microsoft.MicrosoftSolitaireCollectionEnabled
Microsoft.MicrosoftStickyNotesEnabled
Microsoft.NetworkSpeedTestEnabled
Microsoft.Office.OneNoteEnabled
Microsoft.Office.SwayEnabled
Microsoft.OneConnectEnabled
Microsoft.PeopleEnabled
Microsoft.PPIProjectionEnabled
Microsoft.SkypeAppEnabled
Microsoft.StorePurchaseAppEnabled
Microsoft.RemoteDesktopEnabled
Microsoft.Windows.CortanaEnabled
Microsoft.Windows.PhotosEnabled
Microsoft.WindowsCalculatorEnabled
Microsoft.WindowsCameraEnabled
microsoft.windowscommunicationsappsEnabled
Microsoft.WindowsFeedbackHubEnabled
Microsoft.WindowsMapsEnabled
Microsoft.WindowsSoundRecorderEnabled
Microsoft.WindowsStoreEnabled
Microsoft.XboxAppEnabled
Microsoft.XboxGameCallableUIEnabled
Microsoft.XboxIdentityProviderEnabled
Microsoft.ZuneMusicEnabled
Microsoft.ZuneVideoEnabled
Windows.ContactSupportEnabled
Windows.MiracastViewEnabled
Windows.PrintDialogEnabled
Windows.ImmersivecontrolpanelEnabled
Start Menu and Taskbar/Notifications
PolicySettingComment
Turn off notifications network usageEnabled
Windows Components/Cloud Content
PolicySettingComment
Turn off all Windows spotlight featuresEnabled
Windows Components/Internet Explorer/Security Features/Add-on Management
PolicySettingComment
Turn off automatic download of the ActiveX VersionListEnabled
Windows Explorer Nodes
PolicySettingComment
Hide OneDrive Icon in ExplorerEnabled