Detections
Analytics

18.9.51.1 Ensure 'Turn off the advertising ID' is set to 'Enabled'

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

This policy setting turns off the advertising ID, preventing apps from using the ID for experiences across apps.

The recommended state for this setting is: Enabled.

In high-security environments, data must never be shared with third-parties without explicit consent, as it may contain sensitive information. In addition, tracking user activity for advertising purposes, even anonymously, could be a privacy concern.

Solution

To establish the recommended configuration via GP, set the following UI path to Enabled :

Computer Configuration\Policies\Administrative Templates\System\User Profiles\Turn off the advertising ID

Note: This Group Policy path may not exist by default. It is provided by the Group Policy template UserProfiles.admx/adml that is included with the Microsoft Windows 8.1 & Server 2012 R2 Administrative Templates (or newer).

Impact:

The advertising ID is turned off. Apps can't use the ID for experiences across apps.

See Also

https://workbench.cisecurity.org/benchmarks/25733

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7b., CSCv7|9.2

Plugin: Windows

Control ID: c220368995d53c9ac0e9a8937adba45efbf6d8f62d1c3cf53ce8d4e47378fb52