Detections
Analytics

18.9.31.2 (L2) Ensure 'Allow upload of User Activities' is set to 'Disabled'

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

This policy setting determines whether published User Activities can be uploaded to the cloud.

The recommended state for this setting is: Disabled.

Due to privacy concerns, data should never be sent to any third-party since this data could contain sensitive information.

Solution

To establish the recommended configuration via GP, set the following UI path to Disabled :

 Computer Configuration\Policies\Administrative Templates\System\OS Policies\Allow upload of User Activities

 Note: This Group Policy path may not exist by default. It is provided by the Group Policy template OSPolicy.admx/adml that is included with the Microsoft Windows 10 Release 1803 Administrative Templates (or newer).

Impact:

Activities of type User Activity are not allowed to be uploaded to the cloud. The Timeline feature will not function across devices.

See Also

https://workbench.cisecurity.org/benchmarks/22481

Item Details

References: CSCv7|9.2

Plugin: Windows

Control ID: 876be30e5c412097b9c1cb5bda932481dd4e8b252e084cbcb66927bc989083df