[{"data":1,"prerenderedAt":278},["ShallowReactive",2],{"doku:en:richtlinien-anhang\u002Frichtlinien-grundeinstellungen":3},{"seite":4,"start":25,"leiste":26,"bereich":224,"zurueck":276,"weiter":277},{"sprache":5,"rel":6,"zu":7,"id":8,"titel":9,"titelHtml":9,"beschreibung":10,"kennzeile":11,"imMenue":12,"html":13,"ueberschriften":14},"en","richtlinien-anhang\u002Frichtlinien-grundeinstellungen","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-grundeinstellungen","referenz-richtlinien-grundeinstellungen","Defaults and privacy settings","The defaults and privacy settings that are always on the medium.","since 0.9.8.11",true,"\u003Ch2 id=\"purpose\">Purpose\u003C\u002Fh2>\n\u003Cp>This page lists the Setup Foundry defaults and its privacy settings. They are not part of the eleven packages and are always on the medium. The page is generated from the catalog and never edited by hand.\u003C\u002Fp>\n\u003Cp>133 settings.\u003C\u002Fp>\n\u003Ch2 id=\"notes\">Notes\u003C\u002Fh2>\n\u003Ch3 id=\"e-20ebafd2eb\">Configures LSASS to run as a protected process\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>RunAsPPL\u003C\u002Fcode> registry value controls whether the Local Security Authority process (\u003Ccode>LSASS.exe\u003C\u002Fcode>) runs with added LSA protection as a Protected Process Light (PPL). LSASS performs functions that include validating local and remote sign-ins, enforcing local security policy, and managing credentials used for authentication.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Control\\Lsa\\RunAsPPL = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-localsecurityauthority-configurelsaprotectedprocess\">Configures LSASS to run as a protected process\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows-server\u002Fsecurity\u002Fcredentials-protection-and-management\u002Fconfiguring-additional-lsa-protection\">Microsoft Learn: Configure added LSA protection\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa> · \u003Ca href=\"https:\u002F\u002Fwww.cyber.gov.au\u002Fsites\u002Fdefault\u002Ffiles\u002F2025-09\u002Fhardening_microsoft_windows_11_workstations_september_2025.pdf\">ACSC\u002FASD: Hardening Microsoft Windows 11 workstations\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-9aaa9fff76\">Local Security Authority protection at boot\u003C\u002Fh3>\n\u003Cp>Microsoft does not publish a technical reference that assigns an independent, supported meaning to \u003Ccode>RunAsPPLBoot\u003C\u002Fcode> with data \u003Ccode>1\u003C\u002Fcode>. In particular, the official documentation does not establish that this value by itself enables Local Security Authority (LSA) protection or starts \u003Ccode>LSASS.exe\u003C\u002Fcode> as a protected process.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Control\\Lsa\\RunAsPPLBoot = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-9aaa9fff7627-runaspplboot\">Local Security Authority protection at boot\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows-server\u002Fsecurity\u002Fcredentials-protection-and-management\u002Fconfiguring-additional-lsa-protection\">Microsoft Learn: Configure added LSA protection\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-693cdb372e\">Network security: LAN Manager authentication level\u003C\u002Fh3>\n\u003Cp>The DWORD value \u003Ccode>5\u003C\u002Fcode> corresponds to \u003Cstrong>Send NTLMv2 responses only. Refuse LM & NTLM\u003C\u002Fstrong>. For network logons that use NTLM challenge-response authentication, the computer generates only NTLMv2 responses when acting as a client. It also uses NTLMv2 session security when the remote system supports it.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Control\\Lsa\\LmCompatibilityLevel = 5 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-693cdb372e33-lmcompatibilitylevel\">Network security: LAN Manager authentication level\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fsecurity\u002Fthreat-protection\u002Fsecurity-policy-settings\u002Fnetwork-security-lan-manager-authentication-level\">Microsoft Learn: Network security: LAN Manager authentication level\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-33e356d155\">Microsoft network server: Digitally sign communications (always)\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>RequireSecuritySignature\u003C\u002Fcode> DWORD value controls the signing requirement of the SMB server component. A value of \u003Ccode>1\u003C\u002Fcode> requires SMB signing for incoming connections. The server continues a connection only when the client supports signing and valid SMB message signatures can be exchanged.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\LanmanServer\\Parameters\\RequireSecuritySignature = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-33e356d155cb-requiresecuritysignature\">Microsoft network server: Digitally sign communications (always)\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows-server\u002Fstorage\u002Ffile-server\u002Fsmb-signing-overview\">Microsoft Learn: What is Server Message Block signing?\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-b821f72e3e\">Microsoft network client: Digitally sign communications (always)\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>RequireSecuritySignature\u003C\u002Fcode> registry value controls the SMB client's signing requirement for outbound SMB connections. Its data type is \u003Ccode>REG_DWORD\u003C\u002Fcode>. A value of \u003Ccode>1\u003C\u002Fcode> requires the client to use signed communication with the SMB server. The connection fails if the server does not support SMB signing.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\LanmanWorkstation\\Parameters\\RequireSecuritySignature = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-b821f72e3e6b-requiresecuritysignature\">Microsoft network client: Digitally sign communications (always)\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows-server\u002Fstorage\u002Ffile-server\u002Fsmb-signing-overview\">Microsoft Learn: What is Server Message Block signing?\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-b0c61c8f8e\">Require devices to use Network Level Authentication to connect\u003C\u002Fh3>\n\u003Cp>A DWORD value of \u003Ccode>1\u003C\u002Fcode> requires Network Level Authentication (NLA) for incoming connections through the RDP-Tcp listener. Users must therefore authenticate before Windows establishes the full Remote Desktop connection or remote session.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Control\\Terminal Server\\WinStations\\RDP-Tcp\\UserAuthentication = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-b0c61c8f8e02-userauthentication\">Require devices to use Network Level Authentication to connect\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows-hardware\u002Fcustomize\u002Fdesktop\u002Funattend\u002Fmicrosoft-windows-terminalservices-rdp-winstationextensions-userauthentication\">Microsoft Learn: UserAuthentication\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-9924e70de9\">Allow delegating saved credentials\u003C\u002Fh3>\n\u003Cp>This computer policy determines the servers to which applications using the Credential Security Support Provider (CredSSP), such as Remote Desktop Connection, may delegate a user's saved credentials. Saved credentials are credentials that the user chose to store through Windows Credential Manager.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\CredentialsDelegation\\AllowSavedCredentials = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-credentialsssp-allowsavedcredentials\">Allow delegating saved credentials\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-admx-credssp\">Microsoft Learn: Policy CSP – ADMX_CredSsp\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-d56a992c6a\">Allow delegating saved credentials with NTLM-only server authentication\u003C\u002Fh3>\n\u003Cp>This computer policy controls the target servers to which applications using the Credential Security Support Provider (CredSSP), such as Remote Desktop Connection, may delegate saved user credentials when the server was authenticated through NTLM. In this context, saved credentials are credentials retained in Windows Credential Manager.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\CredentialsDelegation\\AllowSavedCredentialsWhenNTLMOnly = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-credentialsssp-allowsavedcredentialswhenntlmonly\">Allow delegating saved credentials with NTLM-only server authentication\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-admx-credssp#allowsavedcredentialswhenntlmonly\">Microsoft Learn: ADMX_CredSsp Policy CSP — AllowSavedCredentialsWhenNTLMOnly\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-741482e6f3\">Do not require encryption on removable drives\u003C\u002Fh3>\n\u003Cp>Microsoft does not document a supported Windows or BitLocker function for the \u003Ccode>RDVRequireEncryption\u003C\u002Fcode> DWORD value at this registry path. Consequently, no reliable direct effect on removable-drive encryption or write access can be attributed to the value \u003Ccode>0\u003C\u002Fcode>.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\FVE\\RDVRequireEncryption = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-741482e6f35a-rdvrequireencryption\">Do not require encryption on removable drives\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fsecurity\u002Foperating-system-security\u002Fdata-protection\u002Fbitlocker\u002Fconfigure\">Microsoft Learn: Configure BitLocker\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-af3e0b6cbc\">Allow write access to unencrypted removeable drives\u003C\u002Fh3>\n\u003Cp>Description to follow.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\FVE\\RDVDenyWriteAccess = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-f24315a387\">Enforce drive encryption type on removable data drives\u003C\u002Fh3>\n\u003Cp>This registry value belongs to the BitLocker Group Policy setting for removable data drives. It determines the encryption type BitLocker uses when a removable drive is encrypted for the first time:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\FVE\\RDVEncryptionType = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-volumeencryption-rdvencryptiontype-name\">Enforce drive encryption type on removable data drives\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fsecurity\u002Foperating-system-security\u002Fdata-protection\u002Fbitlocker\u002Fconfigure\">Microsoft Learn: Configure BitLocker\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-cb485638a6\">Disable Windows content delivery platform\u003C\u002Fh3>\n\u003Cp>Setup Foundry writes the computer-wide registry value as a \u003Ccode>DWORD\u003C\u002Fcode> with data \u003Ccode>0\u003C\u002Fcode>.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\CloudContent\\ContentDeliveryAllowed = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-cb485638a666-contentdeliveryallowed\">Disable Windows content delivery platform\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-experience\">Microsoft Learn: Experience Policy CSP\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-93008ddfa9\">Turn off the advertising ID\u003C\u002Fh3>\n\u003Cp>This device-level policy value turns off the Windows advertising ID. Apps can no longer use the identifier for advertising and other personalized experiences across apps. Windows APIs that normally expose the advertising ID return an empty string while the feature is turned off.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\AdvertisingInfo\\DisabledByGroupPolicy = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-userprofiles-disableadvertisingid\">Turn off the advertising ID\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-privacy#disableadvertisingid\">Microsoft Learn: Policy CSP – Privacy – DisableAdvertisingId\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-f1f403459b\">Turn off Microsoft consumer experiences\u003C\u002Fh3>\n\u003Cp>This registry value controls the device-wide policy that suppresses Microsoft consumer experiences in Windows. It uses the \u003Ccode>REG_DWORD\u003C\u002Fcode> type. A value of \u003Ccode>1\u003C\u002Fcode> turns off consumer-oriented content and features, including Start suggestions, Microsoft membership notifications, post-OOBE app installation, and redirect tiles.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\CloudContent\\DisableWindowsConsumerFeatures = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-cloudcontent-disablewindowsconsumerfeatures\">Turn off Microsoft consumer experiences\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-experience#allowwindowsconsumerfeatures\">Microsoft Learn: Policy CSP – Experience – AllowWindowsConsumerFeatures\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-114af142f5\">Do not show Windows tips\u003C\u002Fh3>\n\u003Cp>This machine-wide value determines whether Windows can display contextual Windows Tips, also referred to as the “soft landing” experience. These pop-ups introduce Windows features and explain how to use them.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\CloudContent\\DisableSoftLanding = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-cloudcontent-disablesoftlanding\">Do not show Windows tips\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-experience#allowwindowstips\">Microsoft Learn: Experience Policy CSP – AllowWindowsTips\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-f12ff8940c\">Turn off all Windows spotlight features\u003C\u002Fh3>\n\u003Cp>This per-user registry value disables all Windows spotlight features for the affected user. The scope includes Windows spotlight on the lock screen, Windows Tips, Microsoft consumer features, and other related content and suggestion experiences.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\CloudContent\\DisableWindowsSpotlightFeatures = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-cloudcontent-disablewindowsspotlightfeatures\">Turn off all Windows spotlight features\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-experience#allowwindowsspotlight\">Microsoft Learn: Policy CSP – Experience – AllowWindowsSpotlight\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-ff59259405\">Disable Windows Spotlight on lock screen\u003C\u002Fh3>\n\u003Cp>Setup Foundry sets this \u003Ccode>DWORD\u003C\u002Fcode> registry value to \u003Ccode>1\u003C\u002Fcode> with the intention of disabling Windows spotlight on the lock screen. However, Microsoft does not document this specific value under \u003Ccode>HKLM\u003C\u002Fcode> as a supported policy mapping. Its effect on Windows spotlight therefore cannot be confirmed from official Microsoft documentation.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\CloudContent\\DisableWindowsSpotlightOnLockScreen = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-ff5925940583-disablewindowsspotlightonlockscreen\">Disable Windows Spotlight on lock screen\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-experience#configurewindowsspotlightonlockscreen\">Microsoft Learn: Policy CSP – Experience – ConfigureWindowsSpotlightOnLockScreen\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-ebb75140ae\">Do not suggest third-party content in Windows spotlight\u003C\u002Fh3>\n\u003Cp>This per-user registry value controls whether Windows spotlight can suggest apps and content from third-party software publishers. It covers Windows spotlight experiences such as lock screen spotlight, suggested apps in the Start menu, and Windows tips.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\CloudContent\\DisableThirdPartySuggestions = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-cloudcontent-disablethirdpartysuggestions\">Do not suggest third-party content in Windows spotlight\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-experience#allowthirdpartysuggestionsinwindowsspotlight\">Microsoft Learn: Experience Policy CSP – AllowThirdPartySuggestionsInWindowsSpotlight\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-55ad6daa42\">Do not use diagnostic data for tailored experiences\u003C\u002Fh3>\n\u003Cp>This registry value controls, on a per-user basis, whether Windows may use diagnostic data from the device to personalize recommendations, tips, and offers. Setting the \u003Ccode>REG_DWORD\u003C\u002Fcode> value data to \u003Ccode>1\u003C\u002Fcode> prevents this use.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\CloudContent\\DisableTailoredExperiencesWithDiagnosticData = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-cloudcontent-disabletailoredexperienceswithdiagnosticdata\">Do not use diagnostic data for tailored experiences\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-experience#allowtailoredexperienceswithdiagnosticdata\">Microsoft Learn: Experience Policy CSP – AllowTailoredExperiencesWithDiagnosticData\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-02b3863231\">Turn off user tracking\u003C\u002Fh3>\n\u003Cp>This user-scoped policy stops Windows from tracking the programs run by the affected user. Windows consequently cannot use that usage information to personalize features that depend on it. In particular, frequently used programs are no longer displayed on the Start menu.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\\NoInstrumentation = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-startmenu-noinstrumentation\">Turn off user tracking\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-admx-startmenu#noinstrumentation\">Microsoft Learn: ADMX_StartMenu Policy CSP — NoInstrumentation\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-ad9791486e\">Don't launch privacy settings experience on user logon\u003C\u002Fh3>\n\u003Cp>This value controls whether Windows presents the privacy settings experience when a newly created user account signs in for the first time. The experience can also appear when an existing user signs in for the first time after a Windows upgrade.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\OOBE\\DisablePrivacyExperience = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-oobe-disableprivacyexperience\">Don't launch privacy settings experience on user logon\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-privacy#disableprivacyexperience\">Microsoft Learn: Policy CSP – Privacy: DisablePrivacyExperience\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-5160565c76\">Turn off Windows Copilot\u003C\u002Fh3>\n\u003Cp>This per-user policy value controls the original Copilot in Windows experience integrated into the Windows shell.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsCopilot\\TurnOffWindowsCopilot = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-windowscopilot-turnoffwindowscopilot\">Turn off Windows Copilot\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-windowsai#turnoffwindowscopilot\">Microsoft Learn: WindowsAI Policy CSP – TurnOffWindowsCopilot\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-54b96cf33b\">Allow widgets\u003C\u002Fh3>\n\u003Cp>This machine-scoped policy value determines whether the Windows 11 widgets feature is allowed on the device.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Dsh\\AllowNewsAndInterests = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-newsandinterests-allownewsandinterests\">Allow widgets\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-newsandinterests\">Microsoft Learn: NewsAndInterests Policy CSP\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-765a9dde60\">Do not show feedback notifications\u003C\u002Fh3>\n\u003Cp>This device-wide \u003Ccode>REG_DWORD\u003C\u002Fcode> value controls whether Windows displays notifications asking users to provide feedback to Microsoft.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\DataCollection\\DoNotShowFeedbackNotifications = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-feedbacknotifications-donotshowfeedbacknotifications\">Do not show feedback notifications\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-experience#donotshowfeedbacknotifications\">Microsoft Learn: Policy CSP – Experience – DoNotShowFeedbackNotifications\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-938077adf3\">Allow Diagnostic Data\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>AllowTelemetry\u003C\u002Fcode> registry value controls how much Windows diagnostic data is collected and sent to Microsoft. It is a \u003Ccode>REG_DWORD\u003C\u002Fcode> value representing the corresponding policy setting in Computer Configuration or User Configuration.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\DataCollection\\AllowTelemetry = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-datacollection-allowtelemetry\">Allow Diagnostic Data\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-system#allowtelemetry\">Microsoft Learn: System Policy CSP – AllowTelemetry\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-cc4f1950d3\">Turn off display of recent search entries in the File Explorer search box\u003C\u002Fh3>\n\u003Cp>This policy prevents File Explorer from displaying suggestions based on previous queries while a user types in its search box. New search-box entries are also prevented from being stored in the registry for later use.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\Explorer\\DisableSearchBoxSuggestions = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-windowsexplorer-disablesearchboxsuggestions\">Turn off display of recent search entries in the File Explorer search box\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-admx-windowsexplorer#disablesearchboxsuggestions\">Microsoft Learn: ADMX_WindowsExplorer Policy CSP – DisableSearchBoxSuggestions\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-9e38462bfe\">Remove Personalized Website Recommendations from the Recommended section in the Start Menu\u003C\u002Fh3>\n\u003Cp>This registry value controls whether Windows displays personalized website recommendations in the Recommended section of the Start menu. A value of \u003Ccode>1\u003C\u002Fcode> hides these recommendations; a value of \u003Ccode>0\u003C\u002Fcode> allows them to be shown.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\Explorer\\HideRecommendedPersonalizedSites = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-startmenu-hiderecommendedpersonalizedsites\">Remove Personalized Website Recommendations from the Recommended section in the Start Menu\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-start#hiderecommendedpersonalizedsites\">Microsoft Learn: Start Policy CSP – HideRecommendedPersonalizedSites\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-bfae21d4bc\">Remove Recommended section from Start Menu\u003C\u002Fh3>\n\u003Cp>This policy value controls whether the Windows Start menu displays the entire Recommended section. A value of \u003Ccode>1\u003C\u002Fcode> hides the section, including the files and apps recommended there. A value of \u003Ccode>0\u003C\u002Fcode> displays the section.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\Explorer\\HideRecommendedSection = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-startmenu-hiderecommendedsection\">Remove Recommended section from Start Menu\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-start#hiderecommendedsection\">Microsoft Learn: Start Policy CSP – HideRecommendedSection\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-5608ebd88e\">Allow users to enable online speech recognition services\u003C\u002Fh3>\n\u003Cp>This \u003Ccode>REG_DWORD\u003C\u002Fcode> value controls, at the device level, whether users may enable Microsoft's online speech recognition services.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\InputPersonalization\\AllowInputPersonalization = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-globalization-allowinputpersonalization\">Allow users to enable online speech recognition services\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-privacy#allowinputpersonalization\">Microsoft Learn: Privacy Policy CSP – AllowInputPersonalization\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-8aeee72f0b\">Disable speech model updates\u003C\u002Fh3>\n\u003Cp>Description to follow.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\Speech\\AllowSpeechModelUpdate = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-d9ff0f1975\">Disable Click to Do\u003C\u002Fh3>\n\u003Cp>Setting this \u003Ccode>DWORD\u003C\u002Fcode> value to \u003Ccode>1\u003C\u002Fcode> disables Click to Do at the device level. The Click to Do component and its entry points are unavailable to users of the computer.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsAI\\DisableClickToDo = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-d9ff0f197509-disableclicktodo\">Disable Click to Do\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmanage-click-to-do\">Microsoft Learn: Manage Click to Do\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-16ece8bacb\">Disable AI Recall\u003C\u002Fh3>\n\u003Cp>Current Microsoft documentation does not define a Windows policy or interpreted value semantics for the \u003Ccode>DisableRecall\u003C\u002Fcode> registry value. There is therefore no documented basis for claiming that setting this \u003Ccode>DWORD\u003C\u002Fcode> value to \u003Ccode>1\u003C\u002Fcode> disables Recall, prevents snapshots from being saved, or deletes existing Recall data.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsAI\\DisableRecall = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-16ece8bacba7-disablerecall\">Disable AI Recall\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-windowsai#disableaidataanalysis\">Microsoft Learn: Policy CSP – WindowsAI – DisableAIDataAnalysis\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-88840784ea\">Disable the lock screen background picture on the sign-in screen\u003C\u002Fh3>\n\u003Cp>A \u003Ccode>DWORD\u003C\u002Fcode> value of \u003Ccode>1\u003C\u002Fcode> prevents Windows from displaying the lock screen background picture on the sign-in screen for the entire device. The sign-in screen uses a solid-color background instead.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\System\\DisableLogonBackgroundImage = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-88840784ea1f-disablelogonbackgroundimage\">Disable the lock screen background picture on the sign-in screen\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fapps\u002Fdevelop\u002Fsettings\u002Fsettings-common#lock-screen\">Microsoft Learn: Reference for Windows 11 and Windows 10 settings – Lock screen\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-55b0902881\">Allow publishing of User Activities\u003C\u002Fh3>\n\u003Cp>This computer policy determines whether applications and the operating system may publish User Activities. A User Activity represents the state of a task so that Windows and supporting applications can present it in the activity feed or make it possible to resume the task later.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\System\\PublishUserActivities = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-ospolicy-publishuseractivities\">Allow publishing of User Activities\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-privacy#publishuseractivities\">Microsoft Learn: Privacy Policy CSP – PublishUserActivities\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-97e67f00ee\">Allow upload of User Activities\u003C\u002Fh3>\n\u003Cp>This machine-wide policy value determines whether published User Activities may be uploaded. User Activities are activity-history records that can relate to apps and services used, files opened, or websites visited.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\System\\UploadUserActivities = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-ospolicy-uploaduseractivities\">Allow upload of User Activities\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-privacy#uploaduseractivities\">Microsoft Learn: Privacy Policy CSP – UploadUserActivities\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-cb79e2c7f8\">Disable Widgets\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>AllowWidgets\u003C\u002Fcode> \u003Ccode>DWORD\u003C\u002Fcode> value, when set to \u003Ccode>0\u003C\u002Fcode>, disables Windows Widgets at the device level. This also makes the Widgets Board unavailable. Widgets provide customizable content such as news and feeds.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\Widgets\\AllowWidgets = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-cb79e2c7f820-allowwidgets\">Disable Widgets\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fprivacy\u002Fmanage-connections-from-windows-operating-system-components-to-microsoft-services#32-widgets\">Microsoft Learn: Manage connections from Windows operating system components to Microsoft services – Widgets\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-e593a8fad4\">Turn off saving snapshots for use with Recall\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>DisableAIDataAnalysis\u003C\u002Fcode> DWORD value maps to the Windows policy that controls whether Recall can save screen snapshots. A value of \u003Ccode>1\u003C\u002Fcode> prevents Recall from saving new snapshots. Any Recall snapshots previously stored on the device are deleted when the policy takes effect.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsAI\\DisableAIDataAnalysis = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-e593a8fad4e9-disableaidataanalysis\">Turn off saving snapshots for use with Recall\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-windowsai#disableaiddataanalysis\">Microsoft Learn: Policy CSP – WindowsAI – DisableAIDataAnalysis\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-620ff3fa89\">Location services\u003C\u002Fh3>\n\u003Cp>This string value (\u003Ccode>REG_SZ\u003C\u002Fcode>) controls location services at the device level. Setting it to \u003Ccode>Deny\u003C\u002Fcode> turns off Windows access to the device’s location. Windows and applications consequently receive no device-location data through the Windows location service.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_LOCAL_MACHINE\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\CapabilityAccessManager\\ConsentStore\\location\\Value = Deny (REG_SZ)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-620ff3fa8953-value\">Location services\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Ftroubleshoot\u002Fwindows-client\u002Fshell-experience\u002Fcannot-set-timezone-automatically\">Microsoft Learn: Can't set time zone automatically in Windows 10\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-e58c174aed\">Turn off automatic learning\u003C\u002Fh3>\n\u003Cp>This computer-scoped policy turns off automatic learning for Microsoft handwriting-recognition personalization. Automatic learning collects text information and ink input so that recognition can adapt to users’ vocabulary and handwriting styles.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\InputPersonalization\\RestrictImplicitTextCollection = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-globalization-implicitdatacollectionoff-2\">Turn off automatic learning\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-admx-globalization#implicitdatacollectionoff_2\">Microsoft Learn: ADMX_Globalization – Turn off automatic learning (ImplicitDataCollectionOff_2)\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-e01ffe512d\">Turn off automatic learning\u003C\u002Fh3>\n\u003Cp>This computer-scoped policy turns off automatic learning for Microsoft handwriting-recognition personalization. Automatic learning collects text information and ink input so that recognition can adapt to users’ vocabulary and handwriting styles.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\InputPersonalization\\RestrictImplicitInkCollection = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-globalization-implicitdatacollectionoff-2\">Turn off automatic learning\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-admx-globalization#implicitdatacollectionoff_2\">Microsoft Learn: ADMX_Globalization – Turn off automatic learning (ImplicitDataCollectionOff_2)\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-1045f85feb\">Allow search highlights\u003C\u002Fh3>\n\u003Cp>This device-wide registry value controls Windows search highlights. Search highlights add changing visual content and information about notable or current moments to the Windows Search experience.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\Windows Search\\EnableDynamicContentInWSB = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-fullarmor-policies-3b9ea2b5-a1d1-4cd5-9ede-75b22990bc21-allowsearchhighlights\">Allow search highlights\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-search#allowsearchhighlights\">Microsoft Learn: Search Policy CSP – AllowSearchHighlights\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-0d0cdfa066\">Prevent users from moving their Windows known folders to OneDrive\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>KFMBlockOptIn\u003C\u002Fcode> DWORD value set to \u003Ccode>1\u003C\u002Fcode> prevents users from moving their Windows \u003Cstrong>Desktop\u003C\u002Fstrong>, \u003Cstrong>Documents\u003C\u002Fstrong>, and \u003Cstrong>Pictures\u003C\u002Fstrong> folders to a OneDrive account through OneDrive Known Folder Move.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\OneDrive\\KFMBlockOptIn = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-0d0cdfa0668e-kfmblockoptin\">Prevent users from moving their Windows known folders to OneDrive\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fsharepoint\u002Fuse-group-policy\">Microsoft Learn: Use OneDrive policies to control sync settings\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-da6a7b7e26\">Hide toast and activity center notifications that prompt users to sign in to the OneDrive sync app with existing credentials\u003C\u002Fh3>\n\u003Cp>This DWORD value controls whether OneDrive prompts users to set up a personal OneDrive account when a Microsoft account (MSA) is detected on the device.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\OneDrive\\DisableNewAccountDetection = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-da6a7b7e264d-disablenewaccountdetection\">Hide toast and activity center notifications that prompt users to sign in to the OneDrive sync app with existing credentials\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fsharepoint\u002Fuse-group-policy\">Microsoft Learn: IT Admins – Use OneDrive policies to control sync settings\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-27d0a9cb0d\">Allow Recall to be enabled\u003C\u002Fh3>\n\u003Cp>A DWORD value of \u003Ccode>0\u003C\u002Fcode> makes Recall unavailable on the device. Windows places the optional Recall component in a disabled state and removes the Recall component files from the device.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsAI\\AllowRecallEnablement = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-27d0a9cb0d55-allowrecallenablement\">Allow Recall to be enabled\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-windowsai#allowrecallenablement\">Microsoft Learn: WindowsAI Policy CSP – AllowRecallEnablement\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-6519a74668\">Turn off Windows Copilot\u003C\u002Fh3>\n\u003Cp>This per-user policy value controls the original Copilot in Windows experience integrated into the Windows shell.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsCopilot\\TurnOffWindowsCopilot = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-windowscopilot-turnoffwindowscopilot\">Turn off Windows Copilot\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-windowsai#turnoffwindowscopilot\">Microsoft Learn: WindowsAI Policy CSP – TurnOffWindowsCopilot\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-fd116eddbe\">Turn off display of recent search entries in the File Explorer search box\u003C\u002Fh3>\n\u003Cp>This policy prevents File Explorer from displaying suggestions based on previous queries while a user types in its search box. New search-box entries are also prevented from being stored in the registry for later use.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\SOFTWARE\\Policies\\Microsoft\\Windows\\Explorer\\DisableSearchBoxSuggestions = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-windowsexplorer-disablesearchboxsuggestions\">Turn off display of recent search entries in the File Explorer search box\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-admx-windowsexplorer#disablesearchboxsuggestions\">Microsoft Learn: ADMX_WindowsExplorer Policy CSP – DisableSearchBoxSuggestions\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-1d363728f7\">Turn off all Windows spotlight features\u003C\u002Fh3>\n\u003Cp>This per-user registry value disables all Windows spotlight features for the affected user. The scope includes Windows spotlight on the lock screen, Windows Tips, Microsoft consumer features, and other related content and suggestion experiences.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\SOFTWARE\\Policies\\Microsoft\\Windows\\CloudContent\\DisableWindowsSpotlightFeatures = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-cloudcontent-disablewindowsspotlightfeatures\">Turn off all Windows spotlight features\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-experience#allowwindowsspotlight\">Microsoft Learn: Policy CSP – Experience – AllowWindowsSpotlight\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-4142917780\">Do not suggest third-party content in Windows spotlight\u003C\u002Fh3>\n\u003Cp>This per-user registry value controls whether Windows spotlight can suggest apps and content from third-party software publishers. It covers Windows spotlight experiences such as lock screen spotlight, suggested apps in the Start menu, and Windows tips.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\SOFTWARE\\Policies\\Microsoft\\Windows\\CloudContent\\DisableThirdPartySuggestions = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-cloudcontent-disablethirdpartysuggestions\">Do not suggest third-party content in Windows spotlight\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-experience#allowthirdpartysuggestionsinwindowsspotlight\">Microsoft Learn: Experience Policy CSP – AllowThirdPartySuggestionsInWindowsSpotlight\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: \u003Ca href=\"https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fdownload\u002Fdetails.aspx?id=55319\">Windows 11 v25H2 Security Baseline\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-a17e1ea724\">FeatureManagementEnabled\u003C\u002Fh3>\n\u003Cp>\u003Ccode>FeatureManagementEnabled\u003C\u002Fcode> is a per-user \u003Ccode>DWORD\u003C\u002Fcode> registry value in the internal configuration area of Windows Content Delivery Manager. Setup Foundry sets it to \u003Ccode>0\u003C\u002Fcode>.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ContentDeliveryManager\\FeatureManagementEnabled = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-a17e1ea724a7-featuremanagementenabled\">FeatureManagementEnabled\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fconfiguration\u002Fwindows-spotlight\u002F\">Microsoft Learn: Configure Windows spotlight\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-20c8c9cabc\">Disable rotating lock screen\u003C\u002Fh3>\n\u003Cp>This per-user DWORD value controls the rotating Windows spotlight imagery on the lock screen. Value data \u003Ccode>0\u003C\u002Fcode> disables the automatic rotation of these lock screen images for the affected user.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ContentDeliveryManager\\RotatingLockScreenEnabled = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-20c8c9cabc73-rotatinglockscreenenabled\">Disable rotating lock screen\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fconfiguration\u002Fwindows-spotlight\">Microsoft Learn: Configure Windows spotlight\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-1cfd3ba956\">Get Fun Facts, Tips, Tricks, and More on Your Lock Screen\u003C\u002Fh3>\n\u003Cp>This per-user \u003Ccode>DWORD\u003C\u002Fcode> value controls supplementary content displayed over the lock screen background. That content primarily includes fun facts, tips, tricks, and similar information supplied by Microsoft.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ContentDeliveryManager\\RotatingLockScreenOverlayEnabled = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-1cfd3ba956e5-rotatinglockscreenoverlayenabled\">Get Fun Facts, Tips, Tricks, and More on Your Lock Screen\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fconfiguration\u002Fwindows-spotlight\u002F\">Microsoft Learn: Configure Windows spotlight\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-8a35041ddc\">Show suggestions occasionally in Start\u003C\u002Fh3>\n\u003Cp>This registry value stores a per-user preference for suggestions presented by the Windows shell. In Windows 10, it is associated with the “Show suggestions occasionally in Start” setting. Setting the \u003Ccode>REG_DWORD\u003C\u002Fcode> value to \u003Ccode>0\u003C\u002Fcode> suppresses the app and content suggestions governed by this preference in Start or other affected system panes.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ContentDeliveryManager\\SystemPaneSuggestionsEnabled = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-8a35041ddc18-systempanesuggestionsenabled\">Show suggestions occasionally in Start\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows-server\u002Fremote\u002Fremote-desktop-services\u002Fremote-desktop-services-vdi-optimize-configuration\">Microsoft Learn: Optimizing Windows configuration for VDI desktops\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-f78a9ab924\">Disable Windows tips (soft landing)\u003C\u002Fh3>\n\u003Cp>A DWORD value of \u003Ccode>0\u003C\u002Fcode> disables the delivery of Windows tips known as “soft landing” for the current user profile. This suppresses tips and suggestions that Windows may present after the Out-of-Box Experience (OOBE) or during subsequent use.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ContentDeliveryManager\\SoftLandingEnabled = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-f78a9ab924e9-softlandingenabled\">Disable Windows tips (soft landing)\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-experience#allowwindowstips\">Microsoft Learn: Policy CSP – Experience – AllowWindowsTips\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-c367330ce6\">Prevent silent installation of suggested apps\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>SilentInstalledAppsEnabled\u003C\u002Fcode> DWORD value controls, for the current user profile, whether Windows Content Delivery Manager may install suggested apps without an explicit user action.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ContentDeliveryManager\\SilentInstalledAppsEnabled = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-c367330ce674-silentinstalledappsenabled\">Prevent silent installation of suggested apps\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-experience#allowwindowsconsumerfeatures\">Microsoft Learn: Policy CSP – Experience – AllowWindowsConsumerFeatures\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-0386ae32d3\">Disable preinstalled consumer apps\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>PreInstalledAppsEnabled\u003C\u002Fcode> DWORD value controls automatic downloading of preinstalled content by Windows Content Delivery Manager for the current user. A value of \u003Ccode>0\u003C\u002Fcode> disables this automatic content download.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ContentDeliveryManager\\PreInstalledAppsEnabled = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-0386ae32d365-preinstalledappsenabled\">Disable preinstalled consumer apps\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fvirtual-desktop\u002Fapp-attach-setup#disable-automatic-updates\">Microsoft Learn: Add and manage App Attach applications in Azure Virtual Desktop – Disable automatic updates\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-25395c6861\">Disable reinstallation of preinstalled apps\u003C\u002Fh3>\n\u003Cp>Setup Foundry writes \u003Ccode>0\u003C\u002Fcode> to this per-user \u003Ccode>DWORD\u003C\u002Fcode> value. The value is part of the Windows Content Delivery Manager's internal state and is intended to prevent preinstalled or consumer-experience apps from being enabled or installed again for the current user.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ContentDeliveryManager\\PreInstalledAppsEverEnabled = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-25395c6861af-preinstalledappseverenabled\">Disable reinstallation of preinstalled apps\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fmsix\u002Fdesktop\u002Fdeploy-preinstalled-apps\">Microsoft Learn: Preinstalling packaged apps\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-af09a4f2f7\">Disable OEM preinstalled apps\u003C\u002Fh3>\n\u003Cp>This per-user DWORD value controls OEM-related app offers processed by the Windows Content Delivery Manager for the current user profile. A value of \u003Ccode>0\u003C\u002Fcode> disables this delivery channel. Associated OEM apps should therefore not be subsequently enabled or installed for that user as part of Windows content delivery.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ContentDeliveryManager\\OemPreInstalledAppsEnabled = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-af09a4f2f770-oempreinstalledappsenabled\">Disable OEM preinstalled apps\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-experience#allowwindowsconsumerfeatures\">Microsoft Learn: Policy CSP – Experience\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-9d447c376d\">SubscribedContent-310013Enabled\u003C\u002Fh3>\n\u003Cp>Setup Foundry stores this registry value as \u003Ccode>REG_DWORD\u003C\u002Fcode> data \u003Ccode>0\u003C\u002Fcode> in the current user's profile. The value is located under the Windows Content Delivery Manager key and, according to the Setup Foundry catalog, is intended to disable a subscribed category of consumer content.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ContentDeliveryManager\\SubscribedContent-310013Enabled = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-9d447c376d94-subscribedcontent-310013enabled\">SubscribedContent-310013Enabled\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-experience#allowwindowsconsumerfeatures\">Microsoft Learn: Policy CSP – Experience – AllowWindowsConsumerFeatures\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-2833e6871a\">Disable consumer subscribed content\u003C\u002Fh3>\n\u003Cp>Setup Foundry writes \u003Ccode>0\u003C\u002Fcode> to this per-user \u003Ccode>DWORD\u003C\u002Fcode> value with the intention of disabling the associated category of subscribed consumer content.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ContentDeliveryManager\\SubscribedContent-310023Enabled = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-2833e6871a18-subscribedcontent-310023enabled\">Disable consumer subscribed content\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-experience#allowwindowsconsumerfeatures\">Microsoft Learn: Policy CSP – Experience – AllowWindowsConsumerFeatures\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-0bbb07336d\">Show the Windows welcome experience after updates and when signed in to show what's new and suggested\u003C\u002Fh3>\n\u003Cp>This per-user DWORD value controls the subscribed-content category associated with the Windows welcome experience. A value of \u003Ccode>0\u003C\u002Fcode> disables that content category for the current user. Windows should consequently stop presenting the welcome experience after updates or at sign-in to highlight new or changed features and show suggestions.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ContentDeliveryManager\\SubscribedContent-310093Enabled = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-0bbb07336d34-subscribedcontent-310093enabled\">Show the Windows welcome experience after updates and when signed in to show what's new and suggested\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-experience#allowwindowsspotlightwindowswelcomeexperience\">Microsoft Learn: Policy CSP – Experience – AllowWindowsSpotlightWindowsWelcomeExperience\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-a6953e08eb\">Disable subscribed content 338381\u003C\u002Fh3>\n\u003Cp>A \u003Ccode>DWORD\u003C\u002Fcode> value of \u003Ccode>0\u003C\u002Fcode> disables, for the current user, the Content Delivery Manager subscription identified by the numeric ID \u003Ccode>338381\u003C\u002Fcode>.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ContentDeliveryManager\\SubscribedContent-338381Enabled = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-a6953e08eb72-subscribedcontent-338381enabled\">Disable subscribed content 338381\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fconfiguration\u002Fwindows-spotlight\">Microsoft Learn: Configure Windows spotlight\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-2bd064540f\">SubscribedContent-338380Enabled\u003C\u002Fh3>\n\u003Cp>This per-user \u003Ccode>DWORD\u003C\u002Fcode> value belongs to the Windows Content Delivery Manager. A value of \u003Ccode>0\u003C\u002Fcode> marks the internal content subscription ID \u003Ccode>338380\u003C\u002Fcode> as disabled for the current user profile.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ContentDeliveryManager\\SubscribedContent-338380Enabled = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-2bd064540f52-subscribedcontent-338380enabled\">SubscribedContent-338380Enabled\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fconfiguration\u002Fwindows-spotlight\u002F\">Microsoft Learn: Configure Windows spotlight\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-038e4ed574\">Get fun facts, tips, tricks, and more on your lock screen\u003C\u002Fh3>\n\u003Cp>This per-user \u003Ccode>DWORD\u003C\u002Fcode> value controls Content Delivery Manager subscription ID \u003Ccode>338387\u003C\u002Fcode>. The subscription is associated with additional Microsoft-provided lock-screen content, such as tips, facts, and suggestions.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ContentDeliveryManager\\SubscribedContent-338387Enabled = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-038e4ed57438-subscribedcontent-338387enabled\">Get fun facts, tips, tricks, and more on your lock screen\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fconfiguration\u002Fwindows-spotlight\">Microsoft Learn: Configure Windows spotlight\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-cb6e5ab9f5\">Show suggestions occasionally in Start\u003C\u002Fh3>\n\u003Cp>This DWORD value controls a specific Content Delivery Manager subscription for the current user. On supported Windows 10 versions, setting it to \u003Ccode>0\u003C\u002Fcode> disables subscription category \u003Ccode>338388\u003C\u002Fcode>, which is associated with occasional app and content suggestions in Start.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ContentDeliveryManager\\SubscribedContent-338388Enabled = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-cb6e5ab9f52c-subscribedcontent-338388enabled\">Show suggestions occasionally in Start\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fconfiguration\u002Fwindows-spotlight\">Microsoft Learn: Configure Windows spotlight\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-1ad65bb24b\">Get tips and suggestions when using Windows\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>SubscribedContent-338389Enabled\u003C\u002Fcode> DWORD value controls the per-user Windows feature that presents tips and suggestions while the operating system is being used. A value of \u003Ccode>0\u003C\u002Fcode> disables the associated subscribed-content category, so Windows no longer presents those tips and suggestions to the affected user.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ContentDeliveryManager\\SubscribedContent-338389Enabled = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-1ad65bb24bc8-subscribedcontent-338389enabled\">Get tips and suggestions when using Windows\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-experience#allowwindowstips\">Microsoft Learn: Policy CSP – Experience (\u003Ccode>AllowWindowsTips\u003C\u002Fcode>)\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-677fb1675c\">Disable suggested apps and content\u003C\u002Fh3>\n\u003Cp>Setup Foundry writes \u003Ccode>0\u003C\u002Fcode> to this per-user DWORD value. The value belongs to Windows Content Delivery Manager, which manages several categories of subscribed recommendations and other content delivered by Microsoft.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ContentDeliveryManager\\SubscribedContent-353693Enabled = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-677fb1675c5d-subscribedcontent-353693enabled\">Disable suggested apps and content\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-experience\">Microsoft Learn: Experience Policy CSP\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-71993703eb\">Show me suggested content in the Settings app\u003C\u002Fh3>\n\u003Cp>This per-user \u003Ccode>DWORD\u003C\u002Fcode> value controls a content subscription used by Windows Content Delivery Manager. A value of \u003Ccode>0\u003C\u002Fcode> disables subscription \u003Ccode>353694\u003C\u002Fcode>, which Microsoft lists in the context of suggested content in the Windows Settings app. This content can introduce Windows features or suggest apps and other content that may interest the user.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ContentDeliveryManager\\SubscribedContent-353694Enabled = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-71993703ebb8-subscribedcontent-353694enabled\">Show me suggested content in the Settings app\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows-server\u002Fremote\u002Fremote-desktop-services\u002Fremote-desktop-services-vdi-optimize-configuration\">Microsoft Learn: Optimizing Windows configuration for VDI desktops\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-60c11dad3a\">Show me suggested content in the Settings app\u003C\u002Fh3>\n\u003Cp>This registry value belongs to the per-user content subscriptions managed by Windows Content Delivery Manager. When stored as a \u003Ccode>DWORD\u003C\u002Fcode> with a value of \u003Ccode>0\u003C\u002Fcode>, it disables the subscription identified by \u003Ccode>353696\u003C\u002Fcode> for the affected user. That subscription is associated with suggested content in the Windows Settings app.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ContentDeliveryManager\\SubscribedContent-353696Enabled = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-60c11dad3a91-subscribedcontent-353696enabled\">Show me suggested content in the Settings app\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Fsupport.microsoft.com\u002Fen-us\u002Fwindows\u002Fprivacy\u002Fgeneral-privacy-settings-in-windows\">Microsoft Support: General privacy settings in Windows\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-225d2fe392\">Show suggestions occasionally in Timeline\u003C\u002Fh3>\n\u003Cp>This per-user \u003Ccode>DWORD\u003C\u002Fcode> value controls suggestions in the Windows 10 Timeline. Timeline extends Task View with past activities, such as previously opened files, apps, and websites.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ContentDeliveryManager\\SubscribedContent-353698Enabled = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-225d2fe3929f-subscribedcontent-353698enabled\">Show suggestions occasionally in Timeline\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Fsupport.microsoft.com\u002Fen-us\u002Fwindows\u002Fai\u002Fai-features\u002Fget-help-with-timeline\">Microsoft Support: Get Help With Timeline\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-60041e32da\">Turn off Spotlight collection on Desktop\u003C\u002Fh3>\n\u003Cp>This per-user policy value controls whether Spotlight collection is available as a desktop background. When the turn-off policy is in effect, Spotlight collection is removed from the personalization options. The affected user therefore cannot select Microsoft’s daily images for the desktop.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\SOFTWARE\\Policies\\Microsoft\\Windows\\CloudContent\\DisableSpotlightCollectionOnDesktop = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-cloudcontent-disablespotlightcollectionondesktop\">Turn off Spotlight collection on Desktop\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-experience#allowspotlightcollection\">Microsoft Learn: Experience Policy CSP – AllowSpotlightCollection\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-d672e00cde\">Turn off Windows Spotlight on Action Center\u003C\u002Fh3>\n\u003Cp>This per-user policy value prevents Windows Spotlight notifications from appearing in Action Center. It primarily affects notifications from Microsoft that suggest apps or Windows features.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\SOFTWARE\\Policies\\Microsoft\\Windows\\CloudContent\\DisableWindowsSpotlightOnActionCenter = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-cloudcontent-disablewindowsspotlightonactioncenter\">Turn off Windows Spotlight on Action Center\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-experience#allowwindowsspotlightonactioncenter\">Microsoft Learn: Policy CSP – Experience – AllowWindowsSpotlightOnActionCenter\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-711f30c772\">Turn off Windows Spotlight on Settings\u003C\u002Fh3>\n\u003Cp>This per-user registry value controls the corresponding Group Policy setting for Microsoft suggestions in the Windows Settings app. When the policy is in effect, Settings no longer displays suggested content intended to introduce users to apps and features available in Windows or across their devices.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\SOFTWARE\\Policies\\Microsoft\\Windows\\CloudContent\\DisableWindowsSpotlightOnSettings = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-cloudcontent-disablewindowsspotlightonsettings\">Turn off Windows Spotlight on Settings\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-experience#allowwindowsspotlightonsettings\">Microsoft Learn: Experience Policy CSP – AllowWindowsSpotlightOnSettings\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-1915026d6f\">Turn off the Windows Welcome Experience\u003C\u002Fh3>\n\u003Cp>This per-user policy setting suppresses the Windows Spotlight welcome experience. Windows no longer presents the affected user with a welcome experience describing what is new, changed, or suggested after updates or changes to Windows and its apps.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\SOFTWARE\\Policies\\Microsoft\\Windows\\CloudContent\\DisableWindowsSpotlightWindowsWelcomeExperience = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-cloudcontent-disablewindowsspotlightwindowswelcomeexperience\">Turn off the Windows Welcome Experience\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-experience#allowwindowsspotlightwindowswelcomeexperience\">Microsoft Learn: Policy CSP – Experience – AllowWindowsSpotlightWindowsWelcomeExperience\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-d9f66e0298\">Turn off cloud optimized content\u003C\u002Fh3>\n\u003Cp>This device-level policy controls whether Windows experiences can use cloud-optimized content. When the policy is enabled, Windows experiences that rely on the cloud-optimized content client component display their designated default fallback content instead.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\SOFTWARE\\Policies\\Microsoft\\Windows\\CloudContent\\DisableCloudOptimizedContent = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-cloudcontent-disablecloudoptimizedcontent\">Turn off cloud optimized content\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-experience#disablecloudoptimizedcontent\">Microsoft Learn: Experience Policy CSP – DisableCloudOptimizedContent\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-3879d4d86d\">Turn off cloud consumer account state content\u003C\u002Fh3>\n\u003Cp>This machine-scoped registry value controls whether Windows experiences may use content supplied through the cloud consumer account state content client component.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\SOFTWARE\\Policies\\Microsoft\\Windows\\CloudContent\\DisableConsumerAccountStateContent = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-cloudcontent-disableconsumeraccountstatecontent\">Turn off cloud consumer account state content\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-experience#disableconsumeraccountstatecontent\">Microsoft Learn: Experience Policy CSP – DisableConsumerAccountStateContent\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-a57287ab59\">Turn off saving snapshots for use with Recall\u003C\u002Fh3>\n\u003Cp>When this \u003Ccode>DWORD\u003C\u002Fcode> value is set to \u003Ccode>1\u003C\u002Fcode>, Windows prevents Recall from saving periodic screen snapshots for the affected user. Recall builds its timeline and search capabilities from snapshots that are stored and analyzed locally, so no new searchable Recall history is created for that user.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_CURRENT_USER\\SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsAI\\DisableAIDataAnalysis = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-a57287ab59b7-disableaidataanalysis\">Turn off saving snapshots for use with Recall\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-windowsai#disableaidataanalysis\">Microsoft Learn: Policy CSP – WindowsAI (DisableAIDataAnalysis)\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-f7a5dae52f\">Store my activity history on this device\u003C\u002Fh3>\n\u003Cp>Setting this \u003Ccode>REG_DWORD\u003C\u002Fcode> value to \u003Ccode>0\u003C\u002Fcode> turns off local Windows activity-history storage for the current user. On Windows versions that honor the setting, Windows stops recording new supported activities in that user's local activity history. Such activities can include apps and services used, files opened, and websites browsed.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Privacy\\ActivityHistoryEnabled = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-f7a5dae52f8d-activityhistoryenabled\">Store my activity history on this device\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-privacy\">Microsoft Learn: Privacy Policy CSP\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-b3f53bba14\">Disable location for this user\u003C\u002Fh3>\n\u003Cp>The catalog entry writes \u003Ccode>0\u003C\u002Fcode> to the per-user \u003Ccode>LocationEnabled\u003C\u002Fcode> DWORD value with the intention of turning off location access for the current user.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\LocationAndSensors\\LocationEnabled = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-b3f53bba14a7-locationenabled\">Disable location for this user\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-system#allowlocation\">Microsoft Learn: Policy CSP – System – AllowLocation\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-0a8b75583f\">Let apps run in the background\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>GlobalUserDisabled\u003C\u002Fcode> DWORD value controls background access for the current user. A value of \u003Ccode>1\u003C\u002Fcode> turns off the global user permission. Apps that use the Windows background-activity model are consequently prevented from performing the corresponding background tasks while they are not in active use.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\BackgroundAccessApplications\\GlobalUserDisabled = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-0a8b75583fb5-globaluserdisabled\">Let apps run in the background\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fmicrosoftteams\u002Fvdi-2-troubleshooting\">Microsoft Learn: Troubleshooting the VDI 2.0 solution for Teams\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-4f24601bf9\">Turn off Windows Copilot\u003C\u002Fh3>\n\u003Cp>This per-user policy value controls the original Copilot in Windows experience integrated into the Windows shell.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_USERS\\.DEFAULT\\SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsCopilot\\TurnOffWindowsCopilot = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-windowscopilot-turnoffwindowscopilot\">Turn off Windows Copilot\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-windowsai#turnoffwindowscopilot\">Microsoft Learn: WindowsAI Policy CSP – TurnOffWindowsCopilot\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-d32b616d13\">Turn off display of recent search entries in the File Explorer search box\u003C\u002Fh3>\n\u003Cp>This policy prevents File Explorer from displaying suggestions based on previous queries while a user types in its search box. New search-box entries are also prevented from being stored in the registry for later use.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_USERS\\.DEFAULT\\SOFTWARE\\Policies\\Microsoft\\Windows\\Explorer\\DisableSearchBoxSuggestions = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-windowsexplorer-disablesearchboxsuggestions\">Turn off display of recent search entries in the File Explorer search box\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-admx-windowsexplorer#disablesearchboxsuggestions\">Microsoft Learn: ADMX_WindowsExplorer Policy CSP – DisableSearchBoxSuggestions\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-91ea2887a1\">Turn off all Windows spotlight features\u003C\u002Fh3>\n\u003Cp>This per-user registry value disables all Windows spotlight features for the affected user. The scope includes Windows spotlight on the lock screen, Windows Tips, Microsoft consumer features, and other related content and suggestion experiences.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_USERS\\.DEFAULT\\SOFTWARE\\Policies\\Microsoft\\Windows\\CloudContent\\DisableWindowsSpotlightFeatures = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-cloudcontent-disablewindowsspotlightfeatures\">Turn off all Windows spotlight features\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-experience#allowwindowsspotlight\">Microsoft Learn: Policy CSP – Experience – AllowWindowsSpotlight\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-9893bf96a9\">Do not suggest third-party content in Windows spotlight\u003C\u002Fh3>\n\u003Cp>This per-user registry value controls whether Windows spotlight can suggest apps and content from third-party software publishers. It covers Windows spotlight experiences such as lock screen spotlight, suggested apps in the Start menu, and Windows tips.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_USERS\\.DEFAULT\\SOFTWARE\\Policies\\Microsoft\\Windows\\CloudContent\\DisableThirdPartySuggestions = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-cloudcontent-disablethirdpartysuggestions\">Do not suggest third-party content in Windows spotlight\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-experience#allowthirdpartysuggestionsinwindowsspotlight\">Microsoft Learn: Experience Policy CSP – AllowThirdPartySuggestionsInWindowsSpotlight\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-9eafab62b0\">FeatureManagementEnabled\u003C\u002Fh3>\n\u003Cp>\u003Ccode>FeatureManagementEnabled\u003C\u002Fcode> is an internal \u003Ccode>DWORD\u003C\u002Fcode> value associated with the Windows Content Delivery Manager. Microsoft does not publish a technical reference defining the supported data for this value or its precise effects. It therefore cannot be reliably established that setting this value to \u003Ccode>0\u003C\u002Fcode> by itself disables rotating lock-screen images.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_USERS\\.DEFAULT\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ContentDeliveryManager\\FeatureManagementEnabled = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-9eafab62b026-featuremanagementenabled\">FeatureManagementEnabled\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fconfiguration\u002Fwindows-spotlight\u002F\">Microsoft Learn: Configure Windows spotlight\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-eec53ff34a\">Disable rotating lock screen\u003C\u002Fh3>\n\u003Cp>This DWORD value controls rotating Windows spotlight lock-screen images for the user registry hive in which Windows evaluates it. A value of \u003Ccode>0\u003C\u002Fcode> disables that image rotation. Consequently, the lock screen no longer receives periodically changing Windows spotlight images through this setting.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_USERS\\.DEFAULT\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ContentDeliveryManager\\RotatingLockScreenEnabled = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-eec53ff34a16-rotatinglockscreenenabled\">Disable rotating lock screen\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fconfiguration\u002Fwindows-spotlight\">Microsoft Learn: Configure Windows spotlight\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-f6b2a69218\">Disable lock screen overlay\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>RotatingLockScreenOverlayEnabled\u003C\u002Fcode> DWORD value controls overlay content shown on the lock screen in connection with Windows Spotlight. The value \u003Ccode>0\u003C\u002Fcode>, as set by Setup Foundry, disables this overlay. This suppresses supplementary content such as suggestions, fun facts, or tips displayed over the lock screen image.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_USERS\\.DEFAULT\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ContentDeliveryManager\\RotatingLockScreenOverlayEnabled = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-f6b2a69218c1-rotatinglockscreenoverlayenabled\">Disable lock screen overlay\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fconfiguration\u002Fwindows-spotlight\u002F\">Microsoft Learn: Configure Windows spotlight\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-5673815243\">Disable system pane suggestions and tips\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>SystemPaneSuggestionsEnabled\u003C\u002Fcode> \u003Ccode>DWORD\u003C\u002Fcode> value is a Windows Content Delivery Manager preference. A value of \u003Ccode>0\u003C\u002Fcode> disables Content Delivery Manager suggestions in system surfaces for the profile containing the value. On Windows versions that use this setting, it primarily affects recommendations presented through Windows shell surfaces, historically including suggested apps or content in Start.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_USERS\\.DEFAULT\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ContentDeliveryManager\\SystemPaneSuggestionsEnabled = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-5673815243c7-systempanesuggestionsenabled\">Disable system pane suggestions and tips\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows-server\u002Fremote\u002Fremote-desktop-services\u002Fremote-desktop-services-vdi-optimize-configuration\">Microsoft Learn: Optimizing Windows configuration for VDI desktops\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-1fe8439352\">Disable Windows Tips \u002F soft landing\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>SoftLandingEnabled\u003C\u002Fcode> DWORD value, when set to \u003Ccode>0\u003C\u002Fcode>, is intended to suppress the Windows Tips experience known as “soft landing.” This experience presents suggestions that introduce users to Windows features.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_USERS\\.DEFAULT\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ContentDeliveryManager\\SoftLandingEnabled = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-1fe843935270-softlandingenabled\">Disable Windows Tips \u002F soft landing\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-experience#allowwindowstips\">Microsoft Learn: Policy CSP – Experience – AllowWindowsTips\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-a70f88cea8\">Prevent silent installation of suggested apps\u003C\u002Fh3>\n\u003Cp>\u003Ccode>SilentInstalledAppsEnabled\u003C\u002Fcode> is a \u003Ccode>DWORD\u003C\u002Fcode> switch used by Windows Content Delivery Manager. A value of \u003Ccode>0\u003C\u002Fcode> is intended to stop that per-user mechanism from silently delivering suggested apps.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_USERS\\.DEFAULT\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ContentDeliveryManager\\SilentInstalledAppsEnabled = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-a70f88cea8d3-silentinstalledappsenabled\">Prevent silent installation of suggested apps\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-experience#allowwindowsconsumerfeatures\">Microsoft Learn: Policy CSP – Experience\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-a2bf07bd70\">Disable preinstalled consumer apps\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>PreInstalledAppsEnabled\u003C\u002Fcode> DWORD with value data \u003Ccode>0\u003C\u002Fcode> disables automatic content-delivery downloads performed by Windows Content Delivery Manager. Microsoft documents this behavior for the per-user value under \u003Ccode>HKCU\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ContentDeliveryManager\u003C\u002Fcode>.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_USERS\\.DEFAULT\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ContentDeliveryManager\\PreInstalledAppsEnabled = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-a2bf07bd7029-preinstalledappsenabled\">Disable preinstalled consumer apps\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fvirtual-desktop\u002Fapp-attach-setup\">Microsoft Learn: Add and manage App Attach applications in Azure Virtual Desktop\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-30a59becc8\">Disable reinstallation of preinstalled apps\u003C\u002Fh3>\n\u003Cp>Setup Foundry writes \u003Ccode>0\u003C\u002Fcode> to this \u003Ccode>DWORD\u003C\u002Fcode> value. However, Microsoft does not document the semantics of \u003Ccode>PreInstalledAppsEverEnabled\u003C\u002Fcode> or a supported effect for the value \u003Ccode>0\u003C\u002Fcode>. It therefore cannot be reliably established that this registry value, by itself, prevents preinstalled apps from being reinstalled.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_USERS\\.DEFAULT\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ContentDeliveryManager\\PreInstalledAppsEverEnabled = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-30a59becc8c6-preinstalledappseverenabled\">Disable reinstallation of preinstalled apps\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fazure\u002Fvirtual-desktop\u002Fapp-attach-setup\">Microsoft Learn: Add and manage App Attach applications in Azure Virtual Desktop\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-5ff61fee76\">Disable OEM preinstalled apps\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>OemPreInstalledAppsEnabled\u003C\u002Fcode> DWORD with data set to \u003Ccode>0\u003C\u002Fcode> is intended to prevent the Windows Content Delivery Manager from delivering OEM-preinstalled apps for a user.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_USERS\\.DEFAULT\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ContentDeliveryManager\\OemPreInstalledAppsEnabled = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-5ff61fee7628-oempreinstalledappsenabled\">Disable OEM preinstalled apps\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fwin32\u002Fsysinfo\u002Fpredefined-keys\">Microsoft Learn: Predefined Keys\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-d35b193e8e\">Disable consumer subscribed content\u003C\u002Fh3>\n\u003Cp>The DWORD value \u003Ccode>0\u003C\u002Fcode> marks the subscribed-content item identified internally as \u003Ccode>310013\u003C\u002Fcode> as disabled for Windows Content Delivery Manager.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_USERS\\.DEFAULT\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ContentDeliveryManager\\SubscribedContent-310013Enabled = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-d35b193e8e24-subscribedcontent-310013enabled\">Disable consumer subscribed content\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-experience#allowwindowsconsumerfeatures\">Microsoft Learn: Policy CSP – Experience – AllowWindowsConsumerFeatures\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-b4622ea424\">Disable SubscribedContent-310023\u003C\u002Fh3>\n\u003Cp>Setup Foundry creates this \u003Ccode>REG_DWORD\u003C\u002Fcode> value with value data \u003Ccode>0\u003C\u002Fcode>. Its stated catalog purpose is to disable consumer subscribed content.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_USERS\\.DEFAULT\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ContentDeliveryManager\\SubscribedContent-310023Enabled = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-b4622ea42402-subscribedcontent-310023enabled\">Disable SubscribedContent-310023\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-experience#allowwindowsconsumerfeatures\">Microsoft Learn: Policy CSP – Experience – AllowWindowsConsumerFeatures\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-4a25e13d2e\">Show the Windows welcome experience after updates and when signed in to show what's new and suggested\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>DWORD\u003C\u002Fcode> value \u003Ccode>SubscribedContent-310093Enabled\u003C\u002Fcode> is a profile-specific Windows Content Delivery Manager setting. A value of \u003Ccode>0\u003C\u002Fcode> suppresses the Windows welcome experience for the affected profile. This experience can appear after updates or at sign-in to highlight new or changed Windows features and suggestions.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_USERS\\.DEFAULT\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ContentDeliveryManager\\SubscribedContent-310093Enabled = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-4a25e13d2ed1-subscribedcontent-310093enabled\">Show the Windows welcome experience after updates and when signed in to show what's new and suggested\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-experience#allowwindowsspotlightwindowswelcomeexperience\">Microsoft Learn: Policy CSP – Experience\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-cb18e93fe1\">SubscribedContent-338381Enabled\u003C\u002Fh3>\n\u003Cp>Setup Foundry writes \u003Ccode>0\u003C\u002Fcode> as the DWORD data for this value. The value belongs to the Windows Content Delivery Manager and, based on its name, acts as a switch for numbered content subscription ID \u003Ccode>338381\u003C\u002Fcode>.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_USERS\\.DEFAULT\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ContentDeliveryManager\\SubscribedContent-338381Enabled = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-cb18e93fe198-subscribedcontent-338381enabled\">SubscribedContent-338381Enabled\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-experience\">Microsoft Learn: Policy CSP — Experience\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-95320dcc69\">Disable subscribed content 338380\u003C\u002Fh3>\n\u003Cp>This \u003Ccode>DWORD\u003C\u002Fcode> value is a per-user switch used by Windows Content Delivery Manager. A value of \u003Ccode>0\u003C\u002Fcode> records the internal content subscription ID \u003Ccode>338380\u003C\u002Fcode> as disabled.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_USERS\\.DEFAULT\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ContentDeliveryManager\\SubscribedContent-338380Enabled = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-95320dcc6961-subscribedcontent-338380enabled\">Disable subscribed content 338380\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fconfiguration\u002Fwindows-spotlight\">Microsoft Learn: Configure Windows spotlight\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-bcfd224cfd\">Get fun facts, tips, tricks, and more on your lock screen\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>SubscribedContent-338387Enabled\u003C\u002Fcode> DWORD value is a per-user Windows Content Delivery Manager setting. A value of \u003Ccode>0\u003C\u002Fcode> is associated with disabling additional Microsoft content on the lock screen, particularly fun facts, tips, and related suggestions.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_USERS\\.DEFAULT\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ContentDeliveryManager\\SubscribedContent-338387Enabled = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-bcfd224cfd25-subscribedcontent-338387enabled\">Get fun facts, tips, tricks, and more on your lock screen\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fconfiguration\u002Fwindows-spotlight\">Microsoft Learn: Configure Windows spotlight\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-487a072972\">SubscribedContent-338388Enabled\u003C\u002Fh3>\n\u003Cp>This registry value is an internal, per-user switch used by Windows Content Delivery Manager. Microsoft uses it as a \u003Ccode>DWORD\u003C\u002Fcode> with data \u003Ccode>0\u003C\u002Fcode> to disable subscribed-content ID \u003Ccode>338388\u003C\u002Fcode>.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_USERS\\.DEFAULT\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ContentDeliveryManager\\SubscribedContent-338388Enabled = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-487a07297214-subscribedcontent-338388enabled\">SubscribedContent-338388Enabled\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows-server\u002Fremote\u002Fremote-desktop-services\u002Fremote-desktop-services-vdi-optimize-configuration\">Microsoft Learn: Optimizing Windows configuration for VDI desktops\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-2a7b1b32b0\">Get tips and suggestions when using Windows\u003C\u002Fh3>\n\u003Cp>This DWORD value controls the subscribed-content channel identified internally as \u003Ccode>338389\u003C\u002Fcode>. Setting it to \u003Ccode>0\u003C\u002Fcode> disables that individual subscription. In the applicable Windows versions, it corresponds to the user preference for receiving tips and suggestions while using Windows. The Windows Content Delivery Manager consequently stops providing the associated tips and suggestions to the affected user profile.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_USERS\\.DEFAULT\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ContentDeliveryManager\\SubscribedContent-338389Enabled = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-2a7b1b32b0dd-subscribedcontent-338389enabled\">Get tips and suggestions when using Windows\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fconfiguration\u002Fwindows-spotlight\u002F\">Microsoft Learn: Configure Windows spotlight\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-6ac7bcb0d0\">SubscribedContent-353693Enabled\u003C\u002Fh3>\n\u003Cp>Setup Foundry writes \u003Ccode>0\u003C\u002Fcode> to this \u003Ccode>DWORD\u003C\u002Fcode> value. The value belongs to the Windows Content Delivery Manager settings and, based on its name, represents a subscribed content channel identified internally as \u003Ccode>353693\u003C\u002Fcode>.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_USERS\\.DEFAULT\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ContentDeliveryManager\\SubscribedContent-353693Enabled = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-6ac7bcb0d022-subscribedcontent-353693enabled\">SubscribedContent-353693Enabled\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-experience#allowthirdpartysuggestionsinwindowsspotlight\">Microsoft Learn: Policy CSP – Experience\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-8a0ef30762\">Show me suggested content in the Settings app\u003C\u002Fh3>\n\u003Cp>This value belongs to the Windows Content Delivery Manager. Setting the DWORD to \u003Ccode>0\u003C\u002Fcode> disables the content subscription identified as \u003Ccode>353694\u003C\u002Fcode>, which is associated with suggested content in the Settings app. This content can introduce Windows features or recommend apps and other potentially relevant offerings.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_USERS\\.DEFAULT\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ContentDeliveryManager\\SubscribedContent-353694Enabled = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-8a0ef30762bd-subscribedcontent-353694enabled\">Show me suggested content in the Settings app\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows-hardware\u002Fmanufacture\u002Fdesktop\u002Fcustomize-the-default-user-profile-by-using-copyprofile?view=windows-11\">Microsoft Learn: Customize the default user profile by using CopyProfile\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-0ce77562b8\">Show me suggested content in the Settings app\u003C\u002Fh3>\n\u003Cp>This DWORD value controls a numbered subscription channel used by the Windows Content Delivery Manager. A value of \u003Ccode>0\u003C\u002Fcode> disables that channel for the affected user profile.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_USERS\\.DEFAULT\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ContentDeliveryManager\\SubscribedContent-353696Enabled = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-0ce77562b80e-subscribedcontent-353696enabled\">Show me suggested content in the Settings app\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows-server\u002Fremote\u002Fremote-desktop-services\u002Fremote-desktop-services-vdi-optimize-configuration\">Microsoft Learn: Optimizing Windows configuration for VDI desktops\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-6c59ac9ce5\">Show suggestions occasionally in Timeline\u003C\u002Fh3>\n\u003Cp>In older Windows 10 releases, the \u003Ccode>SubscribedContent-353698Enabled\u003C\u002Fcode> DWORD is associated with the per-user preference for occasional suggestions in Timeline. A value of \u003Ccode>0\u003C\u002Fcode> suppresses those suggestions. It does not disable Timeline itself or prevent activity history from being stored or displayed.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_USERS\\.DEFAULT\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ContentDeliveryManager\\SubscribedContent-353698Enabled = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-6c59ac9ce57f-subscribedcontent-353698enabled\">Show suggestions occasionally in Timeline\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fwin32\u002Fsysinfo\u002Fregistry-hives\">Microsoft Learn: Registry Hives\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-868db932fe\">Turn off Spotlight collection on Desktop\u003C\u002Fh3>\n\u003Cp>This per-user policy value controls whether Spotlight collection is available as a desktop background. When the turn-off policy is in effect, Spotlight collection is removed from the personalization options. The affected user therefore cannot select Microsoft’s daily images for the desktop.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_USERS\\.DEFAULT\\SOFTWARE\\Policies\\Microsoft\\Windows\\CloudContent\\DisableSpotlightCollectionOnDesktop = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-cloudcontent-disablespotlightcollectionondesktop\">Turn off Spotlight collection on Desktop\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-experience#allowspotlightcollection\">Microsoft Learn: Experience Policy CSP – AllowSpotlightCollection\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-69b43f891f\">Turn off Windows Spotlight on Action Center\u003C\u002Fh3>\n\u003Cp>This per-user policy value prevents Windows Spotlight notifications from appearing in Action Center. It primarily affects notifications from Microsoft that suggest apps or Windows features.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_USERS\\.DEFAULT\\SOFTWARE\\Policies\\Microsoft\\Windows\\CloudContent\\DisableWindowsSpotlightOnActionCenter = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-cloudcontent-disablewindowsspotlightonactioncenter\">Turn off Windows Spotlight on Action Center\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-experience#allowwindowsspotlightonactioncenter\">Microsoft Learn: Policy CSP – Experience – AllowWindowsSpotlightOnActionCenter\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-ac3e29873c\">Turn off Windows Spotlight on Settings\u003C\u002Fh3>\n\u003Cp>This per-user registry value controls the corresponding Group Policy setting for Microsoft suggestions in the Windows Settings app. When the policy is in effect, Settings no longer displays suggested content intended to introduce users to apps and features available in Windows or across their devices.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_USERS\\.DEFAULT\\SOFTWARE\\Policies\\Microsoft\\Windows\\CloudContent\\DisableWindowsSpotlightOnSettings = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-cloudcontent-disablewindowsspotlightonsettings\">Turn off Windows Spotlight on Settings\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-experience#allowwindowsspotlightonsettings\">Microsoft Learn: Experience Policy CSP – AllowWindowsSpotlightOnSettings\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-8d9591a598\">Turn off the Windows Welcome Experience\u003C\u002Fh3>\n\u003Cp>This per-user policy setting suppresses the Windows Spotlight welcome experience. Windows no longer presents the affected user with a welcome experience describing what is new, changed, or suggested after updates or changes to Windows and its apps.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_USERS\\.DEFAULT\\SOFTWARE\\Policies\\Microsoft\\Windows\\CloudContent\\DisableWindowsSpotlightWindowsWelcomeExperience = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-cloudcontent-disablewindowsspotlightwindowswelcomeexperience\">Turn off the Windows Welcome Experience\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-experience#allowwindowsspotlightwindowswelcomeexperience\">Microsoft Learn: Policy CSP – Experience – AllowWindowsSpotlightWindowsWelcomeExperience\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-60023a78a5\">Turn off cloud optimized content\u003C\u002Fh3>\n\u003Cp>This device-level policy controls whether Windows experiences can use cloud-optimized content. When the policy is enabled, Windows experiences that rely on the cloud-optimized content client component display their designated default fallback content instead.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_USERS\\.DEFAULT\\SOFTWARE\\Policies\\Microsoft\\Windows\\CloudContent\\DisableCloudOptimizedContent = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-cloudcontent-disablecloudoptimizedcontent\">Turn off cloud optimized content\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-experience#disablecloudoptimizedcontent\">Microsoft Learn: Experience Policy CSP – DisableCloudOptimizedContent\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-a63fb3efbd\">Turn off cloud consumer account state content\u003C\u002Fh3>\n\u003Cp>This machine-scoped registry value controls whether Windows experiences may use content supplied through the cloud consumer account state content client component.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_USERS\\.DEFAULT\\SOFTWARE\\Policies\\Microsoft\\Windows\\CloudContent\\DisableConsumerAccountStateContent = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-microsoft-policies-cloudcontent-disableconsumeraccountstatecontent\">Turn off cloud consumer account state content\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-experience#disableconsumeraccountstatecontent\">Microsoft Learn: Experience Policy CSP – DisableConsumerAccountStateContent\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-040ea7419d\">Disable the desktop Spotlight theme provider\u003C\u002Fh3>\n\u003Cp>The DWORD value \u003Ccode>0\u003C\u002Fcode> marks the Windows spotlight theme provider as disabled for the desktop configuration stored in \u003Ccode>HKEY_USERS\\.DEFAULT\u003C\u002Fcode>. Windows spotlight is therefore not used as the desktop background provider in this registry context, so the desktop does not receive Microsoft's daily images through that provider.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_USERS\\.DEFAULT\\Control Panel\\Desktop\\WindowsSpotlight = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-040ea7419d64-windowsspotlight\">Disable the desktop Spotlight theme provider\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fconfiguration\u002Fwindows-spotlight\">Microsoft Learn: Configure Windows spotlight\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-54b2d2df98\">Desktop wallpaper\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>WallPaper\u003C\u002Fcode> string value (\u003Ccode>REG_SZ\u003C\u002Fcode>) stores the path of an image that Windows can use as the desktop wallpaper for the associated user registry hive. The value \u003Ccode>C:\\Windows\\Web\\Wallpaper\\Windows\\img0.jpg\u003C\u002Fcode> refers to a locally stored Windows wallpaper image.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_USERS\\.DEFAULT\\Control Panel\\Desktop\\WallPaper = C:\\Windows\\Web\\Wallpaper\\Windows\\img0.jpg (REG_SZ)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-54b2d2df9869-wallpaper\">Desktop wallpaper\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fwin32\u002Fcontrols\u002Fthemesfileformat-overview#control-paneldesktop-section\">Microsoft Learn: Theme File Format – Control Panel\\Desktop section\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-e341192a89\">Desktop background style: Fill\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>WallpaperStyle\u003C\u002Fcode> string value set to \u003Ccode>10\u003C\u002Fcode> selects the \u003Cstrong>Fill\u003C\u002Fstrong> presentation mode for a desktop background image. Windows scales the image proportionally until it covers the entire display area, then crops any portions extending beyond that area. The image's aspect ratio is preserved.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_USERS\\.DEFAULT\\Control Panel\\Desktop\\WallpaperStyle = 10 (REG_SZ)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-e341192a89c4-wallpaperstyle\">Desktop background style: Fill\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fwin32\u002Fcontrols\u002Fthemesfileformat-overview\">Microsoft Learn: Theme File Format\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-289a9d99d9\">Show recommendations for tips, shortcuts, new apps and more\u003C\u002Fh3>\n\u003Cp>\u003Ccode>Start_IrisRecommendations\u003C\u002Fcode> is a per-user Windows 11 setting that controls recommendations in the Start menu. Its data type is \u003Ccode>REG_DWORD\u003C\u002Fcode>. A value of \u003Ccode>0\u003C\u002Fcode> disables recommendations for tips, shortcuts, new apps, and similar content; a value of \u003Ccode>1\u003C\u002Fcode> enables them.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_USERS\\.DEFAULT\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\Start_IrisRecommendations = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-289a9d99d916-start-irisrecommendations\">Show recommendations for tips, shortcuts, new apps and more\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fapps\u002Fdevelop\u002Fsettings\u002Fsettings-windows-11\">Microsoft Learn: Reference for Windows 11 settings\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-8c6c281213\">Show sync provider notifications\u003C\u002Fh3>\n\u003Cp>This DWORD value controls whether File Explorer displays notification banners from sync providers. A value of \u003Ccode>0\u003C\u002Fcode> suppresses these banners. They include OneDrive-related messages and, according to Microsoft, notifications about new Windows features.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_USERS\\.DEFAULT\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\ShowSyncProviderNotifications = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-8c6c28121315-showsyncprovidernotifications\">Show sync provider notifications\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fanswers\u002Fquestions\u002F3189723\u002Fsync-notification-and-feed-source\">Microsoft Q&A: Sync notification and feed source\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-9cf8fc07e2\">Disable SCOOBE post-update prompts\u003C\u002Fh3>\n\u003Cp>\u003Ccode>ScoobeSystemSettingEnabled\u003C\u002Fcode> is a per-user \u003Ccode>DWORD\u003C\u002Fcode> value associated with the Second Chance Out of Box Experience (SCOOBE). SCOOBE can reappear after the initial Windows setup and prompt the user to finish setting up the device. Depending on the Windows version and device configuration, the experience can include Microsoft account sign-in and offers for additional Windows and Microsoft services.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_USERS\\.DEFAULT\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\UserProfileEngagement\\ScoobeSystemSettingEnabled = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-9cf8fc07e21e-scoobesystemsettingenabled\">Disable SCOOBE post-update prompts\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows-server\u002Fremote\u002Fremote-desktop-services\u002Fremote-desktop-services-vdi-optimize-configuration\">Microsoft Learn: Optimizing Windows configuration for VDI desktops\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-f6ebcd2d0e\">Disable advertising ID for this profile\u003C\u002Fh3>\n\u003Cp>The \u003Ccode>Enabled\u003C\u002Fcode> DWORD value with data \u003Ccode>0\u003C\u002Fcode> is intended to turn off the Windows advertising ID in the affected registry context. When the advertising ID is effectively disabled, Windows apps cannot obtain an identifier through \u003Ccode>AdvertisingManager.AdvertisingId\u003C\u002Fcode>; the API returns an empty string instead.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_USERS\\.DEFAULT\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\AdvertisingInfo\\Enabled = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-f6ebcd2d0e60-enabled\">Disable advertising ID for this profile\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fuwp\u002Fapi\u002Fwindows.system.userprofile.advertisingmanager.advertisingid\">Microsoft Learn: AdvertisingManager.AdvertisingId property\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-d3447216ff\">Tailored experiences\u003C\u002Fh3>\n\u003Cp>This registry value is associated with the per-user Windows setting for tailored experiences. A \u003Ccode>DWORD\u003C\u002Fcode> value of \u003Ccode>0\u003C\u002Fcode> marks the feature as off. Windows should then refrain from using diagnostic data to personalize tips, advertisements, recommendations, and offers for the affected user context.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_USERS\\.DEFAULT\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Privacy\\TailoredExperiencesWithDiagnosticDataEnabled = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-d3447216ff7f-tailoredexperienceswithdiagnosticdataenabled\">Tailored experiences\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-experience#allowtailoredexperienceswithdiagnosticdata\">Microsoft Learn: Experience Policy CSP – AllowTailoredExperiencesWithDiagnosticData\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-ab4500c6f6\">Turn off saving snapshots for use with Recall\u003C\u002Fh3>\n\u003Cp>\u003Ccode>DisableAIDataAnalysis\u003C\u002Fcode> is the registry value associated with the Windows policy that prevents Recall snapshots from being saved. When a \u003Ccode>DWORD\u003C\u002Fcode> value of \u003Ccode>1\u003C\u002Fcode> is effective in a Microsoft-supported user or device policy scope, Recall stops saving new snapshots of the screen. Windows also deletes previously saved Recall snapshots.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Policy: \u003Ccode>HKEY_USERS\\.DEFAULT\\SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsAI\\DisableAIDataAnalysis = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-ab4500c6f6f3-disableaidataanalysis\">Turn off saving snapshots for use with Recall\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-windowsai#disableaidataanalysis\">Microsoft Learn: WindowsAI Policy CSP (\u003Ccode>DisableAIDataAnalysis\u003C\u002Fcode>)\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-e60be4a85d\">ActivityHistoryEnabled\u003C\u002Fh3>\n\u003Cp>Setup Foundry creates a \u003Ccode>DWORD\u003C\u002Fcode> (\u003Ccode>REG_DWORD\u003C\u002Fcode>) value of \u003Ccode>0\u003C\u002Fcode> at this location. However, Microsoft does not document a supported meaning for \u003Ccode>ActivityHistoryEnabled\u003C\u002Fcode> at this registry path or map it to the Windows setting “Store my activity history on this device.” It therefore cannot be confirmed that this value disables activity history.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_USERS\\.DEFAULT\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Privacy\\ActivityHistoryEnabled = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-e60be4a85d99-activityhistoryenabled\">ActivityHistoryEnabled\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-privacy\">Microsoft Learn: Policy CSP – Privacy\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-9b709ec8e0\">Disable location (HKEY_USERS.DEFAULT)\u003C\u002Fh3>\n\u003Cp>Setup Foundry writes the DWORD value \u003Ccode>0\u003C\u002Fcode> to an older, user-scoped registry entry associated with location state. Microsoft does not publish a current, version-independent definition for this exact path and value. In particular, Microsoft documentation does not establish that current Windows 10 or Windows 11 releases still evaluate the entry or that it reliably disables the location service.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_USERS\\.DEFAULT\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\LocationAndSensors\\LocationEnabled = 0 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-9b709ec8e0b6-locationenabled\">Disable location (HKEY_USERS.DEFAULT)\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-system#allowlocation\">Microsoft Learn: System Policy CSP – AllowLocation\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-878124a02b\">Disable background apps globally for the system account\u003C\u002Fh3>\n\u003Cp>\u003Ccode>GlobalUserDisabled\u003C\u002Fcode> is a per-user \u003Ccode>DWORD\u003C\u002Fcode> value governing background access for Windows apps. In an interactive user's registry hive, a value of \u003Ccode>1\u003C\u002Fcode> indicates that background activity is globally disabled for the apps covered by the setting. Those apps can no longer perform their usual background operations, such as synchronization, content updates, or notification processing. Traditional desktop applications are not governed by this Windows setting.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Registry value: \u003Ccode>HKEY_USERS\\.DEFAULT\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\BackgroundAccessApplications\\GlobalUserDisabled = 1 (REG_DWORD)\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-878124a02bb0-globaluserdisabled\">Disable background apps globally for the system account\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fmicrosoftteams\u002Fvdi-2-troubleshooting\">Microsoft Learn: Troubleshooting the VDI 2.0 solution for Teams\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Recommended by: Setup Foundry\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-81e02366a0\">Account lockout threshold\u003C\u002Fh3>\n\u003Cp>This security setting specifies how many failed sign-in attempts Windows counts before locking an account. The entry \u003Ccode>[System Access] LockoutBadCount = 10\u003C\u002Fcode> establishes a threshold of ten attempts. When the counter reaches the tenth failed attempt, the affected account can no longer be used for authentication while it remains locked.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Security policy: \u003Ccode>[System Access] LockoutBadCount = 10\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-lockoutbadcount\">Account lockout threshold\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Fit-pro\u002Fwindows-10\u002Fsecurity\u002Fthreat-protection\u002Fsecurity-policy-settings\u002Faccount-lockout-threshold\">Microsoft Learn: Account lockout threshold\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-89095d3706\">Account lockout duration\u003C\u002Fh3>\n\u003Cp>This security setting specifies how many minutes a locked account remains locked before Windows unlocks it automatically. A value of \u003Ccode>2\u003C\u002Fcode> sets a two-minute lockout period. During that period, the affected account cannot be used for a new sign-in unless it is unlocked administratively first.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Security policy: \u003Ccode>[System Access] LockoutDuration = 2\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-lockoutduration\">Account lockout duration\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Fit-pro\u002Fwindows-10\u002Fsecurity\u002Fthreat-protection\u002Fsecurity-policy-settings\u002Faccount-lockout-duration\">Microsoft Learn: Account lockout duration\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-7c8364ca4c\">Reset account lockout counter after\u003C\u002Fh3>\n\u003Cp>This account lockout setting specifies, in minutes, when Windows resets the failed sign-in attempt counter to \u003Ccode>0\u003C\u002Fcode>. With \u003Ccode>ResetLockoutCount = 2\u003C\u002Fcode>, the counter returns to zero when two minutes have elapsed since the most recent failed sign-in attempt without another failure occurring.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Security policy: \u003Ccode>[System Access] ResetLockoutCount = 2\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-resetlockoutcount\">Reset account lockout counter after\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Fit-pro\u002Fwindows-10\u002Fsecurity\u002Fthreat-protection\u002Fsecurity-policy-settings\u002Freset-account-lockout-counter-after\">Microsoft Learn: Reset account lockout counter after\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-e986dba011\">Allow Administrator account lockout\u003C\u002Fh3>\n\u003Cp>A value of \u003Ccode>1\u003C\u002Fcode> makes the built-in local Administrator account subject to the account lockout policy. If the account exceeds the configured threshold for failed sign-in attempts, Windows locks it out from network logons, including Remote Desktop Protocol (RDP) logons.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Security policy: \u003Ccode>[System Access] AllowAdministratorLockout = 1\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-allowadministratorlockout\">Allow Administrator account lockout\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fclient-management\u002Fmdm\u002Fpolicy-csp-devicelock#allowadministratorlockout\">Microsoft Learn: Policy CSP – DeviceLock (\u003Ccode>AllowAdministratorLockout\u003C\u002Fcode>)\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-43a129797b\">Minimum password length\u003C\u002Fh3>\n\u003Cp>This local account policy defines the minimum number of characters that a password must contain. With a value of \u003Ccode>14\u003C\u002Fcode>, Windows accepts newly assigned, reset, or changed passwords for affected local user accounts only when they contain at least 14 characters.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Account policy: \u003Ccode>net accounts \u002Fminpwlen:14\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Policies › Quick policy settings\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-minimumpasswordlength\">Minimum password length\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Fit-pro\u002Fwindows-10\u002Fsecurity\u002Fthreat-protection\u002Fsecurity-policy-settings\u002Fminimum-password-length\">Microsoft Learn: Minimum password length\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-58e18f1749\">Maximum password age\u003C\u002Fh3>\n\u003Cp>This security setting defines how many days a password may be used before Windows requires it to be changed. A value of \u003Ccode>0\u003C\u002Fcode> means that passwords do not expire because of their age. Users are therefore not prompted to choose a new password solely because a certain amount of time has passed since the previous password change.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Account policy: \u003Ccode>net accounts \u002Fmaxpwage:unlimited\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Policies › Quick policy settings\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-maximumpasswordage\">Maximum password age\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Fit-pro\u002Fwindows-10\u002Fsecurity\u002Fthreat-protection\u002Fsecurity-policy-settings\u002Fmaximum-password-age\">Microsoft Learn: Maximum password age\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-be968531bd\">Accounts: Limit local account use of blank passwords to console logon only\u003C\u002Fh3>\n\u003Cp>A \u003Ccode>REG_DWORD\u003C\u002Fcode> value of \u003Ccode>1\u003C\u002Fcode> enables this computer-wide security option. Local user accounts with blank passwords can no longer be used for network logons or remote interactive logons. This includes, for example, Remote Desktop Services and network services such as Telnet or FTP.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Security policy: \u003Ccode>[Registry Values] MACHINE\\System\\CurrentControlSet\\Control\\Lsa\\LimitBlankPasswordUse = 4,1\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-limitblankpassworduse\">Accounts: Limit local account use of blank passwords to console logon only\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fsecurity\u002Fthreat-protection\u002Fsecurity-policy-settings\u002Faccounts-limit-local-account-use-of-blank-passwords-to-console-logon-only\">Microsoft Learn: Accounts: Limit local account use of blank passwords to console logon only\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-789d32ea04\">User Account Control: Behavior of the elevation prompt for standard users\u003C\u002Fh3>\n\u003Cp>A \u003Ccode>REG_DWORD\u003C\u002Fcode> value of \u003Ccode>1\u003C\u002Fcode> causes Windows to display a credential prompt on the secure desktop when a standard user initiates an operation that requests elevation to administrative privileges. The user must supply the user name and password of a suitably privileged account. Windows continues the operation with the applicable elevated privileges only after those credentials have been validated.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Security policy: \u003Ccode>[Registry Values] MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\ConsentPromptBehaviorUser = 4,1\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-consentpromptbehavioruser\">User Account Control: Behavior of the elevation prompt for standard users\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fsecurity\u002Fapplication-security\u002Fapplication-control\u002Fuser-account-control\u002Fsettings-and-configuration?tabs=reg\">Microsoft Learn: User Account Control settings and configuration\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-d19ea80531\">Deny access to this computer from the network\u003C\u002Fh3>\n\u003Cp>This user right identifies the accounts and groups that are explicitly denied a network logon to the computer. Network logons are used by services such as SMB file and printer sharing.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Security policy: \u003Ccode>[Privilege Rights] SeDenyNetworkLogonRight =\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-sedenynetworklogonright\">Deny access to this computer from the network\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Fit-pro\u002Fwindows-10\u002Fsecurity\u002Fthreat-protection\u002Fsecurity-policy-settings\u002Fdeny-access-to-this-computer-from-the-network\">Microsoft Learn: Deny access to this computer from the network\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-776f273417\">Deny log on through Remote Desktop Services\u003C\u002Fh3>\n\u003Cp>This user right identifies the users and groups that are prohibited from performing a remote logon with the RemoteInteractive logon type. A denial takes precedence even when an account has the “Allow log on through Remote Desktop Services” right directly or through group membership.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Security policy: \u003Ccode>[Privilege Rights] SeDenyRemoteInteractiveLogonRight =\u003C\u002Fcode>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Always on the medium, no switch\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-sedenyremoteinteractivelogonright\">Deny log on through Remote Desktop Services\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fprevious-versions\u002Fwindows\u002Fit-pro\u002Fwindows-10\u002Fsecurity\u002Fthreat-protection\u002Fsecurity-policy-settings\u002Fdeny-log-on-through-remote-desktop-services\">Microsoft Learn: Deny log on through Remote Desktop Services\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3 id=\"e-7ded4c2b51\">Interactive logon: Machine inactivity limit\u003C\u002Fh3>\n\u003Cp>This computer-level security setting specifies how many seconds may pass without user input before Windows locks a signed-in session. The value uses the \u003Ccode>REG_DWORD\u003C\u002Fcode> data type. Setup Foundry sets it to \u003Ccode>900\u003C\u002Fcode>, causing the session to lock after 15 minutes of inactivity.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Technical:\n\u003Cul>\n\u003Cli>Security policy: \u003Ccode>[Registry Values] MACHINE\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\System\\InactivityTimeoutSecs = 4,900\u003C\u002Fcode>\u003C\u002Fli>\n\u003Cli>Setup sets this value only when the “Screen lock” option is checked; otherwise it stays off.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Switch in the app: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien\">Policies › Quick policy settings\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In detail: \u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Fhilfe-inactivitytimeoutsecs\">Interactive logon: Machine inactivity limit\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Source: \u003Ca href=\"https:\u002F\u002Flearn.microsoft.com\u002Fen-us\u002Fwindows\u002Fsecurity\u002Fthreat-protection\u002Fsecurity-policy-settings\u002Finteractive-logon-machine-inactivity-limit\">Microsoft Learn: Interactive logon: Machine inactivity limit\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch2 id=\"see-also\">See also\u003C\u002Fh2>\n\u003Cul>\n\u003Cli>\u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien\">Policy reference\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-windows-update\">Windows Update\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n",[15,19,22],{"ebene":16,"id":17,"text":18},2,"purpose","Purpose",{"ebene":16,"id":20,"text":21},"notes","Notes",{"ebene":16,"id":23,"text":24},"see-also","See also","\u002Fen\u002Fdocumentation",[27,47,59,67,115,135,151,167,191,207,223],{"titel":28,"pfad":29,"seiten":30},"Getting started","erste-schritte",[31,35,39,43],{"rel":32,"titel":33,"zu":34},"erste-schritte\u002Fwas-ist-setup-foundry","Setup Foundry","\u002Fen\u002Fdocumentation\u002Ferste-schritte\u002Fwas-ist-setup-foundry",{"rel":36,"titel":37,"zu":38},"erste-schritte\u002Finstallation","Installing Setup Foundry","\u002Fen\u002Fdocumentation\u002Ferste-schritte\u002Finstallation",{"rel":40,"titel":41,"zu":42},"erste-schritte\u002Fschnellstart","Quick start","\u002Fen\u002Fdocumentation\u002Ferste-schritte\u002Fschnellstart",{"rel":44,"titel":45,"zu":46},"erste-schritte\u002Fablauf","How it works","\u002Fen\u002Fdocumentation\u002Ferste-schritte\u002Fablauf",{"titel":48,"pfad":49,"seiten":50},"Setup","wizard",[51,55],{"rel":52,"titel":53,"zu":54},"wizard\u002Fuebersicht","The setup wizard","\u002Fen\u002Fdocumentation\u002Fwizard\u002Fuebersicht",{"rel":56,"titel":57,"zu":58},"wizard\u002Fsystemanforderungen","System requirements","\u002Fen\u002Fdocumentation\u002Fwizard\u002Fsystemanforderungen",{"titel":60,"pfad":61,"seiten":62},"Setup in detail","einrichtung-detail",[63],{"rel":64,"titel":65,"zu":66},"einrichtung-detail\u002Fwindows-quelle","Import an ISO","\u002Fen\u002Fdocumentation\u002Feinrichtung-detail\u002Fwindows-quelle",{"titel":68,"pfad":69,"seiten":70},"Foundry","konfiguration",[71,75,79,83,87,91,95,99,103,107,111],{"rel":72,"titel":73,"zu":74},"konfiguration\u002Fprofile","Profiles","\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Fprofile",{"rel":76,"titel":77,"zu":78},"konfiguration\u002Fquellen","Sources","\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Fquellen",{"rel":80,"titel":81,"zu":82},"konfiguration\u002Fbenutzer","Configuring users","\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Fbenutzer",{"rel":84,"titel":85,"zu":86},"konfiguration\u002Fbilder","Background picture and logo","\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Fbilder",{"rel":88,"titel":89,"zu":90},"konfiguration\u002Fwindows-bereinigen","Cleaning up Windows","\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Fwindows-bereinigen",{"rel":92,"titel":93,"zu":94},"konfiguration\u002Fapps-entfernen","Removing apps","\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Fapps-entfernen",{"rel":96,"titel":97,"zu":98},"konfiguration\u002Fauswaehlen","Selecting applications","\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Fauswaehlen",{"rel":100,"titel":101,"zu":102},"konfiguration\u002Frichtlinien","Policies","\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Frichtlinien",{"rel":104,"titel":105,"zu":106},"konfiguration\u002Fpc-informationen","PC information","\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Fpc-informationen",{"rel":108,"titel":109,"zu":110},"konfiguration\u002Fnamensschema","Naming scheme","\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Fnamensschema",{"rel":112,"titel":113,"zu":114},"konfiguration\u002Finstall-assist-gestalten","Design the Install Assist","\u002Fen\u002Fdocumentation\u002Fkonfiguration\u002Finstall-assist-gestalten",{"titel":116,"pfad":117,"seiten":118},"Installation","installationsmedien",[119,123,127,131],{"rel":120,"titel":121,"zu":122},"installationsmedien\u002Fusb-stick","Create a USB drive","\u002Fen\u002Fdocumentation\u002Finstallationsmedien\u002Fusb-stick",{"rel":124,"titel":125,"zu":126},"installationsmedien\u002Fiso-erstellen","Creating an ISO","\u002Fen\u002Fdocumentation\u002Finstallationsmedien\u002Fiso-erstellen",{"rel":128,"titel":129,"zu":130},"installationsmedien\u002Fvhd-erstellen","Create VHD","\u002Fen\u002Fdocumentation\u002Finstallationsmedien\u002Fvhd-erstellen",{"rel":132,"titel":133,"zu":134},"installationsmedien\u002Finstall-assist","Install Assist on the target computer","\u002Fen\u002Fdocumentation\u002Finstallationsmedien\u002Finstall-assist",{"titel":136,"pfad":137,"seiten":138},"Machines","pruefmaschine",[139,143,147],{"rel":140,"titel":141,"zu":142},"pruefmaschine\u002Fhyper-v-berechtigungen","Hyper-V permissions","\u002Fen\u002Fdocumentation\u002Fpruefmaschine\u002Fhyper-v-berechtigungen",{"rel":144,"titel":145,"zu":146},"pruefmaschine\u002Fverwenden","Use the test machine","\u002Fen\u002Fdocumentation\u002Fpruefmaschine\u002Fverwenden",{"rel":148,"titel":149,"zu":150},"pruefmaschine\u002Ferstellen","Create a machine","\u002Fen\u002Fdocumentation\u002Fpruefmaschine\u002Ferstellen",{"titel":152,"pfad":153,"seiten":154},"Editions","editionen",[155,159,163],{"rel":156,"titel":157,"zu":158},"editionen\u002Fvergleich","Editions at a glance","\u002Fen\u002Fdocumentation\u002Feditionen\u002Fvergleich",{"rel":160,"titel":161,"zu":162},"editionen\u002Flizenz-aktivieren","Activate a license","\u002Fen\u002Fdocumentation\u002Feditionen\u002Flizenz-aktivieren",{"rel":164,"titel":165,"zu":166},"editionen\u002Faktivierungen-zuruecksetzen","Reset activations","\u002Fen\u002Fdocumentation\u002Feditionen\u002Faktivierungen-zuruecksetzen",{"titel":168,"pfad":169,"seiten":170},"Troubleshooting","fehler",[171,175,179,183,187],{"rel":172,"titel":173,"zu":174},"fehler\u002Fusb","USB drive problems","\u002Fen\u002Fdocumentation\u002Ffehler\u002Fusb",{"rel":176,"titel":177,"zu":178},"fehler\u002Fiso","ISO import problems","\u002Fen\u002Fdocumentation\u002Ffehler\u002Fiso",{"rel":180,"titel":181,"zu":182},"fehler\u002Fhyperv","Hyper-V problems","\u002Fen\u002Fdocumentation\u002Ffehler\u002Fhyperv",{"rel":184,"titel":185,"zu":186},"fehler\u002Finstall-assist","When Setup fails on the target computer","\u002Fen\u002Fdocumentation\u002Ffehler\u002Finstall-assist",{"rel":188,"titel":189,"zu":190},"fehler\u002Fantwortdatei","The answer file","\u002Fen\u002Fdocumentation\u002Ffehler\u002Fantwortdatei",{"titel":192,"pfad":193,"seiten":194},"Reference","referenz",[195,199,203],{"rel":196,"titel":197,"zu":198},"referenz\u002Fbekannte-probleme","Known issues","\u002Fen\u002Fdocumentation\u002Freferenz\u002Fbekannte-probleme",{"rel":200,"titel":201,"zu":202},"referenz\u002Fdiagnose-und-protokolle","Diagnostics and logs","\u002Fen\u002Fdocumentation\u002Freferenz\u002Fdiagnose-und-protokolle",{"rel":204,"titel":205,"zu":206},"referenz\u002Fglossar","Glossary","\u002Fen\u002Fdocumentation\u002Freferenz\u002Fglossar",{"titel":208,"pfad":209,"seiten":210},"Windows appendix","windows-anhang",[211,215,219],{"rel":212,"titel":213,"zu":214},"windows-anhang\u002Fdienste","Services","\u002Fen\u002Fdocumentation\u002Fwindows-anhang\u002Fdienste",{"rel":216,"titel":217,"zu":218},"windows-anhang\u002Faufgaben","Scheduled tasks","\u002Fen\u002Fdocumentation\u002Fwindows-anhang\u002Faufgaben",{"rel":220,"titel":221,"zu":222},"windows-anhang\u002Fapps","App packages","\u002Fen\u002Fdocumentation\u002Fwindows-anhang\u002Fapps",{"titel":224,"pfad":225,"seiten":226},"Policy appendix","richtlinien-anhang",[227,231,235,239,243,247,251,255,259,263,267,271,275],{"rel":228,"titel":229,"zu":230},"richtlinien-anhang\u002Frichtlinien","Policy reference","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien",{"rel":232,"titel":233,"zu":234},"richtlinien-anhang\u002Frichtlinien-office-haertung","Office hardening","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-office-haertung",{"rel":236,"titel":237,"zu":238},"richtlinien-anhang\u002Frichtlinien-edge-internet-explorer","Edge and Internet Explorer","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-edge-internet-explorer",{"rel":240,"titel":241,"zu":242},"richtlinien-anhang\u002Frichtlinien-virenschutz-angriffsflaechen","Virus protection and attack surface","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-virenschutz-angriffsflaechen",{"rel":244,"titel":245,"zu":246},"richtlinien-anhang\u002Frichtlinien-netzwerk-freigaben","Network and file sharing","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-netzwerk-freigaben",{"rel":248,"titel":249,"zu":250},"richtlinien-anhang\u002Frichtlinien-datenschutz-telemetrie","Privacy and telemetry","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-datenschutz-telemetrie",{"rel":252,"titel":253,"zu":254},"richtlinien-anhang\u002Frichtlinien-protokollierung-ueberwachung","Logging and auditing","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-protokollierung-ueberwachung",{"rel":256,"titel":257,"zu":258},"richtlinien-anhang\u002Frichtlinien-anmeldung-konten","Sign-in and accounts","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-anmeldung-konten",{"rel":260,"titel":261,"zu":262},"richtlinien-anhang\u002Frichtlinien-geraete-wechselmedien","Devices and removable media","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-geraete-wechselmedien",{"rel":264,"titel":265,"zu":266},"richtlinien-anhang\u002Frichtlinien-kernschutz","Kernel protection","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-kernschutz",{"rel":268,"titel":269,"zu":270},"richtlinien-anhang\u002Frichtlinien-laufwerksverschluesselung","Drive encryption","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-laufwerksverschluesselung",{"rel":272,"titel":273,"zu":274},"richtlinien-anhang\u002Frichtlinien-windows-update","Windows Update","\u002Fen\u002Fdocumentation\u002Frichtlinien-anhang\u002Frichtlinien-windows-update",{"rel":6,"titel":9,"zu":7},{"titel":273,"zu":274},null,1793199133701]