Tomster/Windows-Setup
1
0
Fork 0
mirror of https://github.com/TommyTran732/Windows-Setup.git synced 2024-11-22 08:01:46 -05:00
Code
5fc82e27fc
Windows-Setup/Group Policies Objects/Computer Configuration/Windows Components/App Privacy.md
Tommy a2ada1ba15
Move Bitlocker to its own GPO 
Signed-off-by: Tommy <contact@tommytran.io>
2023-12-30 16:58:55 -07:00

1.8 KiB
Raw Blame History

App Privacy

Computer Configuration\Administrative Templates\Windows Components\App Privacy

These contains some settings that are not in the Settings app (and vice versa). Most of these stuff I will never use, therefore I am forcing them to be off. You do not need to follow me on this, but you should at least check out all of the policies there.

  • Let Windows apps access account information -> Enabled -> Force Deny
  • Let Windows apps access user movements while running in the background -> Enabled -> Force Deny
  • Let Windows apps access the calendar -> Enabled -> Force Deny
  • Let Windows apps access call history -> Enabled -> Force Deny
  • Let Windows apps access contacts -> Enabled -> Force Deny
  • Let Windows apps access email -> Enabled -> Force Deny
  • Let Windows apps access and eye tracker device -> Enabled -> Force Deny
  • Let Windows apps take screenshots of various windows or displays -> Enabled -> Force Deny
  • Let Windows apps turn off the screenshot border -> Enabled -> Force Deny
  • Let Windows apps access presence sensing -> Enabled -> Force Deny
  • Let Windows apps access location -> Enabled -> Force Deny
  • Let Windows apps access messaging -> Enabled -> Force Deny
  • Let Windows apps access motion -> Enabled -> Force Deny
  • Let Windows apps access notifications -> Enabled -> Force Deny
  • Let Windows apps make phone calls -> Enabled -> Force Deny
  • Let Windows apps control radios -> Enabled -> Force Deny
  • Let Windows apps access Tasks -> Enabled -> Force Deny
  • Let Windows apps access trusted devices -> Enabled -> Force Deny
  • Let Windows apps activate with voice -> Enabled -> Force Deny
  • Let Windows apps activate with voice while the system is locked -> Enabled -> Force Deny
  • Let Windows apps access diagnostic information about other apps -> Enabled -> Force Deny