# Device Health Attestation Service

`Computer Configuration\Policies\Administrative Templates\System\Device Health Attestation Service`

- Enable Device Health Attestation Monitoring and Reporting -> Disabled (Not inherently bad, but unless you have access to the cloud based reporting portal, why even bother keeping it on?)