Recommended Security Settings Settings -> System -> Notifications -> Offer suggestions on how I can set up my device Disable: HKCU\Software\Microsoft\Windows\CurrentVersion\UserProfileEngagement ScoobeSystemSettingEnabled Set DWORD = 0 Enable: HKCU\Software\Microsoft\Windows\CurrentVersion\UserProfileEngagement ScoobeSystemSettingEnabled Set DWORD = 1 Settings -> System -> Notifications -> Get tips and suggestions when I use Windows Disable: HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager SubscribedContent-338389Enabled Set DWORD = 0 Enable: HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager SubscribedContent-338389Enabled Set DWORD = 1 Settings -> Privacy & security -> General -> Let apps show me personalized ads by using my advertising ID Disable: HKCU\Software\Microsoft\Windows\CurrentVersion\AdvertisingInfo Enabled Set DWORD = 0 HKCU\Software\Microsoft\Windows\CurrentVersion\CPSS\Store\AdvertisingInfo Value Set DWORD = 0 Enable: HKCU\Software\Microsoft\Windows\CurrentVersion\AdvertisingInfo Enabled Set DWORD = 1 HKCU\Software\Microsoft\Windows\CurrentVersion\CPSS\Store\AdvertisingInfo Value Set DWORD = 1 Settings -> Privacy & security -> General -> Show me suggested content in the Settings app Disable: HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager SubscribedContent-353696Enabled Set DWORD = 0 HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager SubscribedContent-353694Enabled Set DWORD = 0 HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager SubscribedContent-338393Enabled Set DWORD = 0 Enable: HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager SubscribedContent-353696Enabled Set DWORD = 1 HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager SubscribedContent-353694Enabled Set DWORD = 1 HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager SubscribedContent-338393Enabled Set DWORD = 1 Settings -> Privacy & security -> Diagnostics & feedback -> Send optional diagnostic data Disable: HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\DataCollection AllowTelemetry Set DWORD = 1 HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\DataCollection MaxTelemetryAllowed Set DWORD = 1 HKCU\Software\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack ShowedToastAtLevel Set DWORD = 1 Enable: HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\DataCollection AllowTelemetry Set DWORD = 3 HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\DataCollection MaxTelemetryAllowed Set DWORD = 3 HKCU\Software\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack ShowedToastAtLevel Set DWORD = 3 Settings -> Privacy & security -> Diagnostics & feedback -> Tailored experiences Disable: HKCU\Software\Microsoft\Windows\CurrentVersion\Privacy TailoredExperiencesWithDiagnosticDataEnabled Set DWORD = 0 Enable: HKCU\Software\Microsoft\Windows\CurrentVersion\Privacy TailoredExperiencesWithDiagnosticDataEnabled Set DWORD = 1 Settings -> Privacy & security -> Diagnostics & feedback -> Feedback frequency Set to “Never”: HKCU\Software\Microsoft\Siuf\Rules NumberOfSIUFInPeriod Set DWORD = 0 Set to “Automatically”: Delete registry key Optional Privacy Settings Settings -> Privacy & security -> Location -> Location services Disable: HKLM\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\location Value Set SZ = Deny HKLM\Software\Microsoft\Windows NT\CurrentVersion\Sensor\Overrides\{BFA794E4-F964-4FDB-90F6-51056BFE4B44} SensorPermissionState Set DWORD = 0 Enable: HKLM\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\location Value Set SZ = Allow HKLM\Software\Microsoft\Windows NT\CurrentVersion\Sensor\Overrides\{BFA794E4-F964-4FDB-90F6-51056BFE4B44} SensorPermissionState Set DWORD = 1 Settings -> Privacy & security -> Camera -> Camera access Disable: HKLM\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\webcam Value Set SZ = Deny Enable: HKLM\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\webcam Value Set SZ = Allow Settings -> Privacy & security -> Microphone -> Microphone access Disable: HKLM\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\microphone Value Set SZ = Deny Enable: HKLM\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\microphone Value Set SZ = Allow Settings -> Privacy & security -> Voice activation -> Let apps access voice activation services Disable: HKCU\Software\Microsoft\Speech_OneCore\Settings\VoiceActivation\UserPreferenceForAllApps AgentActivationEnabled Set DWORD = 0 Enable: HKCU\Software\Microsoft\Speech_OneCore\Settings\VoiceActivation\UserPreferenceForAllApps AgentActivationEnabled Set DWORD = 1 Settings -> Privacy & security -> Notifications -> Notification access Disable: HKLM\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\userNotificationListener Value Set SZ = Deny Enable: HKLM\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\userNotificationListener Value Set SZ = Allow Settings -> Privacy & security -> Account info -> Account info access Disable: HKLM\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\userAccountInformation Value Set SZ = Deny Enable: HKLM\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\userAccountInformation Value Set SZ = Allow Settings -> Privacy & security -> Contacts -> Contacts access Disable: HKLM\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\contacts Value Set SZ = Deny Enable: HKLM\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\contacts Value Set SZ = Allow Settings -> Privacy & security -> Phone calls -> Phone call access Disable: HKLM\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\phoneCall Value Set SZ = Deny Enable: HKLM\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\phoneCall Value Set SZ = Allow Settings -> Privacy & security -> Call history -> Call history access Disable: HKLM\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\phoneCallHistory Value Set SZ = Deny Enable: HKLM\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\phoneCallHistory Value Set SZ = Allow Settings -> Privacy & security -> Tasks -> Tasks access Disable: HKLM\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\userDataTasks Value Set SZ = Deny Enable: HKLM\Software\ HKLM\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\userDataTasks Value Set SZ = Allow Settings -> Privacy & security -> Messaging -> Messaging access Disable: HKLM\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\chat Value Set SZ = Deny Enable: HKLM\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\chat Value Set SZ = Allow Settings -> Privacy & security -> Radios -> Radio control access Disable: HKLM\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\radios Value Set SZ = Deny Enable: HKLM\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\radios Value Set SZ = Allow Settings -> Privacy & security -> Other devices -> Communicate with unpaired devices Disable: HKLM\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\bluetoothSync Value Set SZ = Deny Enable: HKLM\Software\ HKLM\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\bluetoothSync Value Set SZ = Allow Settings -> Privacy & security -> App diagnostics -> App diagnostic access HKLM\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\appDiagnostics Value Set SZ = Deny Enable: HKLM\Software\ HKLM\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\appDiagnostics Value Set SZ = Allow