Detections
Analytics

1.3.2 (L1) Ensure 'TelemetryLevel' is set to 'Enabled: off'

Information

This policy setting controls telemetry for VS Code and extensions.

The recommended state for this setting is: Enabled: off.

Enabling this feature sends data to Microsoft and potentially third-party extension developers, which could lead to sensitive data being exposed.

Solution

To establish the recommended configuration via GP, set the following UI path to Enabled: off :

Computer Configuration\Policies\Administrative Templates\Visual Studio Code\Telemetry\TelemetryLevel

Note : This Group Policy path may not exist by default. It is provided by the Group Policy template VScode.admx, which is available in the VS Code installation directory under the policies folder.

Impact:

Data will not be shared with Microsoft or extension developers.

See Also

https://workbench.cisecurity.org/benchmarks/22749

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7b.

Plugin: Windows

Control ID: 673b1769e8c21d23d027c9b42187d0d85cd39e6f8b7b8173dbfaf3e41962de08