18.10.58.4 (L2) Ensure 'Allow search highlights' is set to 'Disabled'

Information

This policy setting controls search highlights in the start menu search box and in search home.

The recommended state for this setting is: Disabled

In a high security environment, data should never be sent to or received by any third-party since this data could contain sensitive information.

Solution

To establish the recommended configuration via GP, set the following UI path to Disabled :

Computer Configuration\Policies\Administrative Templates\Windows Components\Search\Allow search highlights

Note: This Group Policy path may not exist by default. It is provided by the Group Policy template Search.admx/adml that is included with the Microsoft Windows 10 Release 21H2 Administrative Templates (or newer).

Impact:

'Interesting', 'informative', and 'noteworthy' information about the current date will not be displayed (by Microsoft) to the user.

See Also

https://workbench.cisecurity.org/benchmarks/17096

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, 800-53|CM-7

Plugin: Windows

Control ID: fcacd5a03417e1e8c02e4a9d18436c420f483ac0f87271337960fab02b225d29