Detections
Analytics

18.9.31.2 (L2) Ensure 'Allow upload of User Activities' is set to 'Disabled'

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

This policy setting determines whether published User Activities can be uploaded to the cloud.

The recommended state for this setting is: Disabled.

Due to privacy concerns, data should never be sent to any third-party since this data could contain sensitive information.

Solution

To establish the recommended configuration via GP, set the following UI path to Disabled :

Computer Configuration\Policies\Administrative Templates\System\OS Policies\Allow upload of User Activities

Note: This Group Policy path may not exist by default. It is provided by the Group Policy template OSPolicy.admx/adml that is included with the Microsoft Windows 10 Release 1803 Administrative Templates (or newer).

Impact:

Activities of type User Activity are not allowed to be uploaded to the cloud. The Timeline feature will not function across devices.

See Also

https://workbench.cisecurity.org/benchmarks/22944

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7b., CSCv7|9.2

Plugin: Windows

Control ID: 78fa837077393dd90514058ab5a3f8150c1feb44ce7b7464ec5af30507294a29