Windows-Setup/Group Policies Objects/Default Domain Policy/App Privacy.md

# App Privacy

`Computer Configuration\Policies\Administrative Templates\Windows Components\App Privacy`

These contains some settings that are not in the Settings app (and vice versa). Most of these stuff I will never use, therefore I am forcing them to be off. You do not need to follow me on this, but you should at least check out all of the policies there.

- Let Windows apps access account information -> Enabled -> Force Deny
- Let Windows apps access user movements while running in the background -> Enabled -> Force Deny
- Let Windows apps access the calendar -> Enabled -> Force Deny
- Let Windows apps access call history -> Enabled -> Force Deny
- Let Windows apps access contacts -> Enabled -> Force Deny
- Let Windows apps access email -> Enabled -> Force Deny
- Let Windows apps access and eye tracker device -> Enabled -> Force Deny
- Let Windows apps take screenshots of various windows or displays -> Enabled -> Force Deny
- Let Windows apps turn off the screenshot border -> Enabled -> Force Deny
- Let Windows apps access presence sensing -> Enabled -> Force Deny
- Let Windows apps access location -> Enabled -> Force Deny
- Let Windows apps access messaging -> Enabled -> Force Deny
- Let Windows apps access motion -> Enabled -> Force Deny
- Let Windows apps access notifications -> Enabled -> Force Deny
- Let Windows apps make phone calls -> Enabled -> Force Deny
- Let Windows apps control radios -> Enabled -> Force Deny
- Let Windows apps access Tasks -> Enabled -> Force Deny
- Let Windows apps access trusted devices -> Enabled -> Force Deny
- Let Windows apps activate with voice -> Enabled -> Force Deny
- Let Windows apps activate with voice while the system is locked -> Enabled -> Force Deny
- Let Windows apps access diagnostic information about other apps -> Enabled -> Force Deny
- Let Winodws apps communicate with unpaired devices -> Enabled -> Force Deny