CIS Microsoft Windows 10 Enterprise Release 1909 Benchmark

18.8.49User Profiles

This section contains recommendations related to User Profiles.

This Group Policy section is provided by the Group Policy template UserProfiles.admx/adml that is included with all versions of the Microsoft Windows Administrative Templates. 18.8.49.1 (L2) Ensure 'Turn off the advertising ID' is set to 'Enabled' (Scored)

ProfileApplicability:

 Level 2 (L2) - High Security/Sensitive Data Environment (limited functionality)

Description:

This policy setting turns off the advertising ID, preventing apps from using the ID for experiences across apps.

The recommended state for this setting is: Enabled .

Rationale:

Tracking user activity for advertising purposes, even anonymously, may be a privacy concern. In an enterprise managed environment, applications should not need or require tracking for targeted advertising.

Audit:

Navigate to the UI Path articulated in the Remediation section and confirm it is set as prescribed. This group policy setting is backed by the following registry location:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AdvertisingInfo:Disabl edByGroupPolicy

753 | P a g e