Tomster/Windows-Setup
1
0
Fork 0
mirror of https://github.com/TommyTran732/Windows-Setup.git synced 2024-09-16 08:24:51 -04:00
Code

Fix formatting

Browse Source 
Signed-off-by: Tommy <contact@tommytran.io>
This commit is contained in:
Tommy 2023-11-06 08:12:37 -07:00
parent ecba1dc734
commit e24a6e8279
No known key found for this signature in database
GPG Key ID: D30DEC268D3FEB17
6 changed files with 19 additions and 19 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
Group Policies/Computer Configuration/Bitlocker Drive Encryption.md
View File

@ -6,5 +6,5 @@ Choose drive encryption method and cipher strength (Windows 10 [Version 1511] an
## Operating System Drives
Require additional authentication at startup -> Enabled -> Do not allow TPM, Allow startup PIN with TPM, Do not allow startup key with TPM, Allow startup key and PIN with TPM. (**This is especially important as we do not want the TPM to automatically release the encryption key at boot.**)
Allow enhanced PINs for startup -> Enabled.
- Require additional authentication at startup -> Enabled -> Do not allow TPM, Allow startup PIN with TPM, Do not allow startup key with TPM, Allow startup key and PIN with TPM. (**This is especially important as we do not want the TPM to automatically release the encryption key at boot.**)
- Allow enhanced PINs for startup -> Enabled.

8
Group Policies/Computer Configuration/Cloud Content.md
View File

@ -4,7 +4,7 @@
I mostly disable all cloud content because they are way too annoying. There are also a few group policies relating to "personalization", so I am not entirely sure on the privacy implication of that either.
Turn off cloud optimized content -> Enabled
Turn off cloud consumer account state content -> Enabled
Do not show Windows tips -> Enabled
Turn of Microsoft consumer experiences -> Enabled
- Turn off cloud optimized content -> Enabled
- Turn off cloud consumer account state content -> Enabled
- Do not show Windows tips -> Enabled
- Turn of Microsoft consumer experiences -> Enabled

6
Group Policies/Computer Configuration/Location and Sensors.md
View File

@ -2,6 +2,6 @@
`Computer Configuration\Administrative Templates\Windows Component\Location and Sensors`
Turn off location scription -> Enabled
Turn off location -> Enabled
Turn off sensors -> Enabled
- Turn off location scription -> Enabled
- Turn off location -> Enabled
- Turn off sensors -> Enabled

12
Group Policies/Computer Configuration/Microsoft Edge.md
View File

@ -4,9 +4,9 @@
**Probably for the legacy Microsoft Edge, not the Chromium based one**
Configure Autofill -> Disable (Password Manager is off so no reason for autofill to be on)
Configure Do Not Track -> Enable
Allow Extensions -> Disable (I do not use extensions, and they reduce security in a lot of cases. Don't disable this if you need extensions, of course.)
Allow Adobe Flash -> Disable (Dead technology, dangerous)
Configure Password Manager -> Disable (**The password manager does NOT have E2EE**)
Prevent using Localhost IP address for WebRTC -> Enable
- Configure Autofill -> Disable (Password Manager is off so no reason for autofill to be on)
- Configure Do Not Track -> Enable
- Allow Extensions -> Disable (I do not use extensions, and they reduce security in a lot of cases. Don't disable this if you need extensions, of course.)
- Allow Adobe Flash -> Disable (Dead technology, dangerous)
- Configure Password Manager -> Disable (**The password manager does NOT have E2EE**)
- Prevent using Localhost IP address for WebRTC -> Enable

2
Group Policies/Computer Configuration/Windows Error Reporting.md
View File

@ -2,4 +2,4 @@
`Computer Configuration\Administrative Templates\Windows Components\Windows Error Reporting`
Disable Windows Error Reporting -> Enable
- Disable Windows Error Reporting -> Enable

6
Group Policies/User Configuration/Cloud Content.md
View File

@ -4,6 +4,6 @@
I mostly disable all cloud content because they are way too annoying. There are also a few group policies relating to "personalization", so I am not entirely sure on the privacy implication of that either.
Do not use diagnostic data for tailored experiences -> Enabled
Turn off all Windows spotlight features -> Enabled
Turn off the Windows Welcome Experience -> Enabled
- Do not use diagnostic data for tailored experiences -> Enabled
- Turn off all Windows spotlight features -> Enabled
- Turn off the Windows Welcome Experience -> Enabled