Ensure 'Do not use diagnostic data for tailored experiences' is set to 'Enabled'

OrtaDüzey 2Otomatikwindows

Açıklama

This setting determines if Windows can use diagnostic data to provide tailored experiences to the user. The recommended state for this setting is: Enabled.

Nasıl denetlenir

Denetim yöntemi: Windows kayıt defteri

registry

$bad = @(); $bad += @(Get-ChildItem Registry::HKEY_USERS | Where-Object { $_.PSChildName -match '^S-1-5-21-\d+-\d+-\d+-\d+$' } | ForEach-Object { $v = (Get-ItemProperty -Path ('Registry::HKEY_USERS\' + $_.PSChildName + '\[USERSID]\Software\Policies\Microsoft\Windows\CloudContent') -Name 'DisableTailoredExperiencesWithDiagnosticData' -ErrorAction SilentlyContinue).'DisableTailoredExperiencesWithDiagnosticData'; if (-not ($null -ne $v -and @(1) -contains [int64]$v)) { $_.PSChildName + ':DisableTailoredExperiencesWithDiagnosticData=' + $v } }); if ($bad.Count -eq 0) { 'compliant' } else { 'non-compliant: ' + ($bad -join ', ') }

Beklenen çıktı: compliant

Nasıl düzeltilir

Düzeltme yöntemi: Kılavuz veya altyapı yaması

Configure through Group Policy (User Configuration): User Configuration\Policies\Administrative Templates\Windows Components\Cloud Content\Do not use diagnostic data for tailored experiences

Özellikler

İşletim sistemleri: windows-server-2022-dc, windows-server-2022-ms
Etiketler: cis-convertedregistrywindows
Referans: CIS Microsoft Windows Server 2022 Benchmark v5.1.0 - 19.7.8.3

Bu ana makineyi denetle

Bunu denetleme izniniz olan bir makinede çalıştırın. Tarama salt okunurdur.

shell

tmaegis scan --target windows --level 2