search

ayohrling / local_security_policy

Apache License 2.0
6 stars 28 forks source link

18.1.2.2 Ensure 'Allow input personalization' is set to 'Disabled' #45

Open pillarsdotnet opened 4 years ago

pillarsdotnet commented 4 years ago

18.1.2.2 Ensure 'Allow input personalization' is set to 'Disabled'

Info

This policy enables the automatic learning component of input personalization that includes > speech, inking, and typing. Automatic learning enables the collection of speech and handwriting patterns, typing history, contacts, and recent calendar information. It is required for the use of Cortana. Some of this collected information may be stored on the user's OneDrive, in the case of inking and typing; some of the information will be uploaded to Microsoft to personalize speech. The recommended state for this setting is: 'Disabled'. Rationale: If this setting is Enabled sensitive information could be stored in the cloud or sent to Microsoft.

Solution

To establish the recommended configuration via GP, set the following UI path to 'Disabled': Computer Configuration\Policies\Administrative Templates\Control Panel\Regional and Language Options\Allow input personalization Note: This Group Policy path may not exist by default. It is provided by the Group Policy template 'Globalization.admx/adml' that is included with the Microsoft Windows 10 RTM (Release 1507) Administrative Templates (or newer). Impact: Automatic learning of speech, inking, and typing stops and users cannot change its value via PC Settings.

spalmstr commented 3 years ago

I have been unable to find Computer Configuration -> Policies -> Administrative Templates -> Control Panel -> Regional and Language Options -> Allow Input Personalization in Windows 10 or Windows Datacenter 2019. Microsoft Windows 10 RTM (Release 1507) Administrative Templates is no longer available. Does anyone know how to find it?