mirror of
https://github.com/TommyTran732/Windows-Setup.git
synced 2024-11-25 17:41:44 -05:00
Fix formatting
Signed-off-by: Tommy <contact@tommytran.io>
This commit is contained in:
parent
ecba1dc734
commit
e24a6e8279
@ -6,5 +6,5 @@ Choose drive encryption method and cipher strength (Windows 10 [Version 1511] an
|
||||
|
||||
## Operating System Drives
|
||||
|
||||
Require additional authentication at startup -> Enabled -> Do not allow TPM, Allow startup PIN with TPM, Do not allow startup key with TPM, Allow startup key and PIN with TPM. (**This is especially important as we do not want the TPM to automatically release the encryption key at boot.**)
|
||||
Allow enhanced PINs for startup -> Enabled.
|
||||
- Require additional authentication at startup -> Enabled -> Do not allow TPM, Allow startup PIN with TPM, Do not allow startup key with TPM, Allow startup key and PIN with TPM. (**This is especially important as we do not want the TPM to automatically release the encryption key at boot.**)
|
||||
- Allow enhanced PINs for startup -> Enabled.
|
||||
|
@ -4,7 +4,7 @@
|
||||
|
||||
I mostly disable all cloud content because they are way too annoying. There are also a few group policies relating to "personalization", so I am not entirely sure on the privacy implication of that either.
|
||||
|
||||
Turn off cloud optimized content -> Enabled
|
||||
Turn off cloud consumer account state content -> Enabled
|
||||
Do not show Windows tips -> Enabled
|
||||
Turn of Microsoft consumer experiences -> Enabled
|
||||
- Turn off cloud optimized content -> Enabled
|
||||
- Turn off cloud consumer account state content -> Enabled
|
||||
- Do not show Windows tips -> Enabled
|
||||
- Turn of Microsoft consumer experiences -> Enabled
|
@ -2,6 +2,6 @@
|
||||
|
||||
`Computer Configuration\Administrative Templates\Windows Component\Location and Sensors`
|
||||
|
||||
Turn off location scription -> Enabled
|
||||
Turn off location -> Enabled
|
||||
Turn off sensors -> Enabled
|
||||
- Turn off location scription -> Enabled
|
||||
- Turn off location -> Enabled
|
||||
- Turn off sensors -> Enabled
|
@ -4,9 +4,9 @@
|
||||
|
||||
**Probably for the legacy Microsoft Edge, not the Chromium based one**
|
||||
|
||||
Configure Autofill -> Disable (Password Manager is off so no reason for autofill to be on)
|
||||
Configure Do Not Track -> Enable
|
||||
Allow Extensions -> Disable (I do not use extensions, and they reduce security in a lot of cases. Don't disable this if you need extensions, of course.)
|
||||
Allow Adobe Flash -> Disable (Dead technology, dangerous)
|
||||
Configure Password Manager -> Disable (**The password manager does NOT have E2EE**)
|
||||
Prevent using Localhost IP address for WebRTC -> Enable
|
||||
- Configure Autofill -> Disable (Password Manager is off so no reason for autofill to be on)
|
||||
- Configure Do Not Track -> Enable
|
||||
- Allow Extensions -> Disable (I do not use extensions, and they reduce security in a lot of cases. Don't disable this if you need extensions, of course.)
|
||||
- Allow Adobe Flash -> Disable (Dead technology, dangerous)
|
||||
- Configure Password Manager -> Disable (**The password manager does NOT have E2EE**)
|
||||
- Prevent using Localhost IP address for WebRTC -> Enable
|
@ -2,4 +2,4 @@
|
||||
|
||||
`Computer Configuration\Administrative Templates\Windows Components\Windows Error Reporting`
|
||||
|
||||
Disable Windows Error Reporting -> Enable
|
||||
- Disable Windows Error Reporting -> Enable
|
@ -4,6 +4,6 @@
|
||||
|
||||
I mostly disable all cloud content because they are way too annoying. There are also a few group policies relating to "personalization", so I am not entirely sure on the privacy implication of that either.
|
||||
|
||||
Do not use diagnostic data for tailored experiences -> Enabled
|
||||
Turn off all Windows spotlight features -> Enabled
|
||||
Turn off the Windows Welcome Experience -> Enabled
|
||||
- Do not use diagnostic data for tailored experiences -> Enabled
|
||||
- Turn off all Windows spotlight features -> Enabled
|
||||
- Turn off the Windows Welcome Experience -> Enabled
|
Loading…
Reference in New Issue
Block a user