18.10.58.2 (L2) Ensure 'Allow Cloud Search' is set to 'Enabled: Disable Cloud Search'

Information

This policy setting allows search and Cortana to search cloud sources like OneDrive and SharePoint.

The recommended state for this setting is: Enabled: Disable Cloud Search

Due to privacy concerns, data should never be sent to any third-party since this data could contain sensitive information.

Solution

To establish the recommended configuration via GP, set the following UI path to Enabled: Disable Cloud Search :

Computer Configuration\Policies\Administrative Templates\Windows Components\Search\Allow Cloud Search

Note: This Group Policy path may not exist by default. It is provided by the Group Policy template Search.admx/adml that is included with the Microsoft Windows 10 Release 1709 Administrative Templates (or newer).

Impact:

Search and Cortana will not be permitted to search cloud sources like OneDrive and SharePoint.

See Also

https://workbench.cisecurity.org/benchmarks/16913