Detections
Analytics

1.117 WN16-CC-000290

Information

Windows Telemetry must be configured to Security or Basic.

GROUP ID: V-224936
RULE ID: SV-224936r991589

Some features may communicate with the vendor, sending system information or downloading data or components for the feature. Limiting this capability will prevent potentially sensitive information from being sent outside the enterprise. The 'Security' option for Telemetry configures the lowest amount of data, effectively none outside of the Malicious Software Removal Tool (MSRT), Defender, and telemetry client settings. 'Basic' sends basic diagnostic and usage data and may be required to support some Microsoft services.

Solution

Configure the policy value for

Computer Configuration >> Administrative Templates >> Windows Components >> Data Collection and Preview Builds>> 'Allow Telemetry'

to 'Enabled' with '0 - Security [Enterprise Only]' or '1 - Basic' selected in 'Options'.

See Also

https://workbench.cisecurity.org/benchmarks/23093

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-224936r991589_rule, STIG-ID|WN16-CC-000290, Vuln-ID|V-224936

Plugin: Windows

Control ID: 99b01fa81a896b1c003e2861f51b41431b7e4200140c01ddfaab18671b379f83