Detections
Analytics

18.9.31.2 (L2) Ensure 'Allow upload of User Activities' is set to 'Disabled'

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

This policy setting determines whether published User Activities can be uploaded to the cloud.

The recommended state for this setting is: Disabled.

Due to privacy concerns, data should never be sent to any third-party since this data could contain sensitive information.

Solution

To establish the recommended configuration via GP, set the following UI path to Disabled :

Computer Configuration\Policies\Administrative Templates\System\OS Policies\Allow upload of User Activities

Note: This Group Policy path may not exist by default. It is provided by the Group Policy template OSPolicy.admx/adml that is included with the Microsoft Windows 10 Release 1803 Administrative Templates (or newer).

Impact:

Activities of type User Activity are not allowed to be uploaded to the cloud. The Timeline feature will not function across devices.

See Also

https://workbench.cisecurity.org/benchmarks/24135

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7b., CSCv7|9.2

Plugin: Windows

Control ID: 75b89cb359468a183876029e2ee2719f8b5b8d281377b7331316e2b589b907ae