none
Set Windows 10 privacy, feedback, etc defaults without forcibly disabling them

    Question

  • Hello all,

    The philosophy I'd like to take with all the many privacy settings of Windows 10 is to have pretty much everything disabled by default, but retain the user's ability to enable any such options they want. I'm looking through the reference material for win 10 1607 group policy and many settings are 'user in control with no ability to set a default' or 'totally disabled and user cannot enable'.

    Has anyone achieved such a policy stance? How'd you do it?


    born to learn!

    Thursday, October 27, 2016 3:26 AM

All replies

  • Hi,
     
    Am 27.10.2016 um 05:26 schrieb AJM Admin:
    > The philosophy I'd like to take with all the many privacy settings of
    > Windows 10 is to have pretty much everything disabled by default, but
    > retain the user's ability to enable any such options they want.
     
    If it´s policy or a registry entry inside the .\policies deployed by any
    kind of technic, there is no way to allow a user decision.
     
    Policies do not make suggestions. They rule it.
     
    The only complete list I know is:
    But mostly it´s policy. You need to find the "Preference" Registrykey
    that can be user controlled. Usually it will be like the Policies entry,
    but the key is without the .\policies.
     
    O&O have a free tool, which can export and import settings to deploy
    them, but inside the CFG file they use their own switches, like
    S001    +
    S002    -
     
    Make a registry snapshot, run the tool, make another snapshot and
    compare ...
     
    Mark
    --
    Mark Heitbrink - MVP Group Policy - Cloud and Datacenter Management
     
    Homepage:  http://www.gruppenrichtlinien.de - deutsch
     
    Thursday, October 27, 2016 7:56 AM
  • Hi,

    To achieve your goal, you could configure group policy preference.

    The group policy preference settings suitable default value, so that the user could change the default value.

    Here is an article below may be helpful to you.

    Windows 10 privacy – All Group Policy settings

    https://4sysops.com/archives/windows-10-privacy-all-group-policy-settings/

    Best Regards,

    Jay


    Please remember to mark the replies as answers if they help and unmark them if they provide no help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Thursday, October 27, 2016 10:27 AM
    Moderator
  • findings after some R&D:

    at least by Group Policy, many settings are forced on/off, or unconfigured (on by default usually). Most 'app privacy' settings are this way. After team discussion, these are the group policy settings we're going to deploy as the default 'privacy' configuration for Windows 10 v1607+.

    • Control Panel/Regional and Language Options/Allow input personalization = Disabled; we'll totally make it known that folks can sign up to use Cortana, but by its nature I don't see how we can enable it for the "reasonably private by default" config.
    • System/User Profiles/Turn off the advertising ID = Enabled
    • Windows Components/Data Collection and Preview Builds/Allow Telemetry = Enabled (1 - Basic); if you set this higher, PII might be collected as part of crash dumps/etc.
    • Windows Components/Search/Set what information is shared in Search = Enabled (Anonymous info)

    In Configuration Manager; we've set MAPS involvement to Basic for workstations which provides a reasonable assurance that unintended info doesn't accidentally leave our org.

    With this config, I think we're set to curtail all privacy concerns that might happen "under the hood" without the user really knowing about it.


    born to learn!

    Wednesday, November 02, 2016 2:34 PM