18.9.48.1 (L2) Ensure 'Turn off the advertising ID' is set to 'Enabled'

Information

This policy setting turns off the advertising ID, preventing apps from using the ID for experiences across apps.

The recommended state for this setting is: Enabled

Tracking user activity for advertising purposes, even anonymously, may be a privacy concern. In an enterprise managed environment, applications should not need or require tracking for targeted advertising.

Solution

To establish the recommended configuration via GP, set the following UI path to Enabled :

Computer Configuration\Policies\Administrative Templates\System\User Profiles\Turn off the advertising ID

Note: This Group Policy path may not exist by default. It is provided by the Group Policy template UserProfiles.admx/adml that is included with the Microsoft Windows 8.1 & Server 2012 R2 Administrative Templates (or newer).

Impact:

The advertising ID is turned off. Apps can't use the ID for experiences across apps.

See Also

https://workbench.cisecurity.org/benchmarks/15273

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-4, CSCv7|9.2

Plugin: Windows

Control ID: fb2c6d8f3fdd77f546bdcab65efe330e153adff41e63a259e2c391c500ffe252