18.8.31.2 Ensure 'Allow upload of User Activities' is set to 'Disabled'

Information

This policy setting determines whether published User Activities can be uploaded to the cloud.

The recommended state for this setting is: Disabled.

Rationale:

Due to privacy concerns, data should never be sent to any 3rd party since this data could contain sensitive information.

Impact:

Activities of type User Activity are not allowed to be uploaded to the cloud. The Timeline feature will not function across devices.

Solution

To establish the recommended configuration via GP, set the following UI path to Disabled:

Computer Configuration\Policies\Administrative Templates\System\OS Policies\Allow upload of User Activities

Note: This Group Policy path may not exist by default. It is provided by the Group Policy template OSPolicy.admx/adml that is included with the Microsoft Windows 10 Release 1803 Administrative Templates (or newer).

Default Value:

Enabled. (Activities of type User Activity are allowed to be uploaded to the cloud.)

See Also

https://workbench.cisecurity.org/files/3784

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7, CSCv7|9.2

Plugin: Windows

Control ID: fc9041c23f1a632b468ec8f1890399f3e66f41d80b790215ccdcb0989a0aba85