Windows Registry Editor Version 5.00 ; 1. Automatic Root Certificates Update. Disable auto update [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\AuthRoot] "DisableRootAutoUpdate"=dword:1 ; 1. Automatic Root Certificates Update. Disable auto update [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\ChainEngine\Config] "ChainUrlRetrievalTimeoutMilliseconds"=dword:15000 ; 1. Automatic Root Certificates Update. Disable auto update [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\ChainEngine\Config] "ChainRevAccumulativeUrlRetrievalTimeoutMilliseconds"=dword:20000 ; 1. Automatic Root Certificates Update. Disable auto update [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\ChainEngine\Config] "Options"=dword:0 ; 1. Automatic Root Certificates Update. Disable auto update [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\ChainEngine\Config] "CrossCertDownloadIntervalHours"=dword:168 ; 1. Automatic Root Certificates Update. Disable auto update [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\DPNGRA\Certificates] ; 1. Automatic Root Certificates Update. Disable auto update [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\DPNGRA\CRLs] ; 1. Automatic Root Certificates Update. Disable auto update [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\DPNGRA\CTLs] ; 1. Automatic Root Certificates Update. Disable auto update [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\FVE\Certificates] ; 1. Automatic Root Certificates Update. Disable auto update [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\FVE\CRLs] ; 1. Automatic Root Certificates Update. Disable auto update [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SystemCertificates\FVE\CTLs] ; 2.1 Cortana and Search Group Policies. Turn off Cortana [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Windows Search] "AllowCortana"=dword:0 ; 2.1 Cortana and Search Group Policies. Block access to location information for Cortana [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Windows Search] "AllowSearchToUseLocation"=dword:0 ; 2.1 Cortana and Search Group Policies. Remove the option to search the Internet from Cortana [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Windows Search] "DisableWebSearch"=dword:1 ; 2.1 Cortana and Search Group Policies. Stop web queries and results from showing in Search [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Windows Search] "ConnectedSearchUseWeb"=dword:0 ; 2.1 Cortana and Search Group Policies. Firewall block rule [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\FirewallRules] "{0DE40C8E-C126-4A27-9371-A27DAB1039F7}"="v2.25|Action=Block|Active=TRUE|Dir=Out|Protocol=6|App=%windir%\\SystemApps\\Microsoft.Windows.Cortana_cw5n1h2txyewy\\searchUI.exe|Name=Block outbound Cortana|" ; !!!!!!!!! ; 3. Date & Time. Disable NTP [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\W32Time\Parameters] "Type"="NoSync" ; !!!!!!!!! ; 3. Date & Time. Disable NTP [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\W32time\TimeProviders\NtpClient] "Enabled"=dword:0 ; 4. Device metadata retrieval. Prevent [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Device Metadata] "PreventDeviceMetadataFromNetwork"=dword:1 ; 5. Find My Device. Turn off [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\FindMyDevice] "AllowFindMyDevice"=dword:0 ; 6. Font streaming. Disable download on demand [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System] "EnableFontProviders"=dword:0 ; 7. Insider Preview builds. Turn off Insider Preview builds [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\PreviewBuilds] "AllowBuildPreview"=dword:0 ; 7. Insider Preview builds. Turn off Insider Preview builds [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate] "ManagePreviewBuildsPolicyValue"=dword:1 ; 7. Insider Preview builds. Turn off Insider Preview builds [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate] "BranchReadinessLevel"=- ; 8. Internet Explorer. Disable suggested Sites [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Suggested Sites] "Enabled"=dword:0 ; 8. Internet Explorer. Disable enhanced suggestion in Address Bar [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer] "AllowServicePoweredQSA"=dword:0 ; !!!!!!!!! ; 8. Internet Explorer. Disable auto complete [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete] "AutoSuggest"="no" ; 8. Internet Explorer. Disable geolocation [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Geolocation] "PolicyDisableGeolocation"=dword:1 ; 8. Internet Explorer. Prevent managing Microsoft Defender SmartScreen [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\PhishingFilter] "EnabledV9"=dword:0 ; 8. Internet Explorer. Turn off Compatibility View [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\BrowserEmulation] "DisableSiteListEditing"=dword:1 ; 8. Internet Explorer. Turn off the flip ahead with page prediction feature [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\FlipAhead] "Enabled"=dword:0 ; 8. Internet Explorer. Turn off background synchronization for feeds and Web Slices [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\Feeds] "BackgroundSyncStatus"=dword:0 ; 8. Internet Explorer. Disallow Online Tips [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] "AllowOnlineTips"=dword:0 ; 9. License Manager. Turn off related traffic [HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LicenseManager] "Start"=dword:00000004 ; 10. Live Tiles. Turn off [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\PushNotifications] "NoCloudApplicationNotification"=dword:1 ; 11. Mail synchronization. Turn off the Windows Mail app [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Mail] "ManualLaunchAllowed"=dword:00000000 ; 12. Microsoft Account. Disable Microsoft Account Sign-In Assistant: [HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\wlidsvc] "Start"=dword:00000004 ;13.1 Microsoft Edge Group Policies. Disable Address Bar drop-down list suggestions [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\MicrosoftEdge\ServiceUI] "ShowOneBox"=dword:0 ;13.1 Microsoft Edge Group Policies. Disable configuration updates for the Books Library [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\MicrosoftEdge\BooksLibrary] "AllowConfigurationUpdateForBooksLibrary"=dword:0 ;13.1 Microsoft Edge Group Policies. Turn off autofill [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\MicrosoftEdge\Main] "Use FormSuggest"="no" ;13.1 Microsoft Edge Group Policies. Don't send "Do Not Track" [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\MicrosoftEdge\Main] "DoNotTrack"=dword:1 ;13.1 Microsoft Edge Group Policies. Disable password manager [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\MicrosoftEdge\Main] "FormSuggest Passwords"="no" ;13.1 Microsoft Edge Group Policies. Turn off search suggestion in address bar [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\MicrosoftEdge\SearchScopes] "ShowSearchSuggestionsGlobal"=dword:0 ;13.1 Microsoft Edge Group Policies. Turn off SmartScreen [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\MicrosoftEdge\PhishingFilter] "EnabledV9"=dword:0 ;13.1 Microsoft Edge Group Policies. Open blank new tab [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\MicrosoftEdge\ServiceUI] "AllowWebContentOnNewTabPage"=dword:0 ;13.1 Microsoft Edge Group Policies. Set blank homepage [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\MicrosoftEdge\Internet Settings] "ProvisionedHomePages"="<>" ;13.1 Microsoft Edge Group Policies. Prevent the First Run webpage from opening [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\MicrosoftEdge\Main] "PreventFirstRunPage"=dword:1 ;13.1 Microsoft Edge Group Policies. Disable compatibility mode [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\MicrosoftEdge\BrowserEmulation] "MSCompatibilityMode"=dword:0 ; 13.2 Microsoft Edge Enterprise. [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge] "SearchSuggestEnabled"=dword:00000000 ; 13.2 Microsoft Edge Enterprise. [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge] "AutofillAddressEnabled"=dword:00000000 ; 13.2 Microsoft Edge Enterprise. [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge] "AutofillCreditCardEnabled"=dword:00000000 ; 13.2 Microsoft Edge Enterprise. [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge] "ConfigureDoNotTrack"=dword:00000001 ; 13.2 Microsoft Edge Enterprise. [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge] "PasswordManagerEnabled"=dword:00000000 ; 13.2 Microsoft Edge Enterprise. [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge] "DefaultSearchProviderEnabled"=dword:00000000 ; 13.2 Microsoft Edge Enterprise. [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge] "HideFirstRunExperience"=dword:00000001 ; 13.2 Microsoft Edge Enterprise. [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge] "SmartScreenEnabled"=dword:00000000 ; 13.2 Microsoft Edge Enterprise. [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge] "NewTabPageLocation"="about:blank" ; 13.2 Microsoft Edge Enterprise. [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge] "RestoreOnStartup"=dword:00000005 ; 13.2 Microsoft Edge Enterprise. [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge\RestoreOnStartupURLs] "1"="about:blank" ; 13.2 Microsoft Edge Enterprise. [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge\EdgeUpdate] "UpdateDefault"=dword:00000000 ; 13.2 Microsoft Edge Enterprise. [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge\EdgeUpdate] "AutoUpdateCheckPeriodMinutes"=dword:00000000 ; 13.2 Microsoft Edge Enterprise. [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge\EdgeUpdate] "ExperimentationAndConfigurationServiceControl"=dword:00000000 ; 14. Network Connection Status Indicator. Turn off active probe [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\NetworkConnectivityStatusIndicator] "NoActiveProbe"=dword:1 ; 15. Offline maps. Disable download and update offline maps [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Maps] "AutoDownloadAndUpdateMapData"=dword:0 ; 15. Offline maps. Disable download and update offline maps [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Maps] "AllowUntriggeredNetworkTrafficOnSettingsPage"=dword:0 ; 16. OneDrive. Prevent the usage of OneDrive for file storage [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\OneDrive] "DisableFileSyncNGSC"=dword:1 ; 16. OneDrive. Prevent OneDrive from generating network traffic until the user signs in to OneDrive [HKEY_LOCAL_MACHINE\Software\Microsoft\OneDrive] "PreventNetworkTrafficPreUserSignIn"=dword:1 ; 18.1 General. Turn off advertising ID [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AdvertisingInfo] "Enabled"=dword:00000000 ; 18.1 General. Turn off advertising ID [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AdvertisingInfo] "DisabledByGroupPolicy"=dword:1 ; 18.1 General. Disable continue experiences [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System] "EnableCdp"=dword:0 ; 18.2 Location. Prevent apps from accessing the location [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\LocationAndSensors] "DisableLocation"=dword:1 ; 18.2 Location. Prevent apps from accessing the location [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsAccessLocation"=dword:2 ; 18.2 Location. Prevent apps from accessing the location [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsAccessLocation_UserInControlOfTheseApps"=hex(7):00,00 ; 18.2 Location. Prevent apps from accessing the location [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsAccessLocation_ForceAllowTheseApps"=hex(7):00,00 ; 18.2 Location. Prevent apps from accessing the location [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsAccessLocation_ForceDenyTheseApps"=hex(7):00,00 ; 18.3 Camera. Prevent apps from accessing the camera [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsAccessCamera"=dword:2 ; 18.3 Camera. Prevent apps from accessing the camera [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsAccessCamera_UserInControlOfTheseApps"=hex(7):00,00 ; 18.3 Camera. Prevent apps from accessing the camera [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsAccessCamera_ForceAllowTheseApps"=hex(7):00,00 ; 18.3 Camera. Prevent apps from accessing the camera [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsAccessCamera_ForceDenyTheseApps"=hex(7):00,00 ; 18.4 Microphone. Prevent apps from accessing the microphone [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsAccessMicrophone"=dword:2 ; 18.4 Microphone. Prevent apps from accessing the microphone [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsAccessMicrophone_UserInControlOfTheseApps"=hex(7):00,00 ; 18.4 Microphone. Prevent apps from accessing the microphone [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsAccessMicrophone_ForceAllowTheseApps"=hex(7):00,00 ; 18.4 Microphone. Prevent apps from accessing the microphone [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsAccessMicrophone_ForceDenyTheseApps"=hex(7):00,00 ; 18.5 Notifications. Turn off cloud notifications notifications [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\PushNotifications] "NoCloudApplicationNotification"=dword:1 ; 18.5 Notifications. Prevent apps from accessing my notifications [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsAccessNotifications"=dword:2 ; 18.5 Notifications. Prevent apps from accessing my notifications [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsAccessNotifications_UserInControlOfTheseApps"=hex(7):00,00 ; 18.5 Notifications. Prevent apps from accessing my notifications [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsAccessNotifications_ForceAllowTheseApps"=hex(7):00,00 ; 18.5 Notifications. Prevent apps from accessing my notifications [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsAccessNotifications_ForceDenyTheseApps"=hex(7):00,00 ; 18.6 Speech. Turn off updates to the speech recognition and speech synthesis models [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Speech] "AllowSpeechModelUpdate"=dword:0 ; 18.6 Speech. Turn off updates to the speech recognition and speech synthesis models [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\InputPersonalization] "AllowInputPersonalization"=dword:0 ; 18.7 Account info. Prevent apps from accessing account info [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsAccessAccountInfo"=dword:2 ; 18.7 Account info. Prevent apps from accessing account info [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsAccessAccountInfo_UserInControlOfTheseApps"=hex(7):00,00 ; 18.7 Account info. Prevent apps from accessing account info [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsAccessAccountInfo_ForceAllowTheseApps"=hex(7):00,00 ; 18.7 Account info. Prevent apps from accessing account info [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsAccessAccountInfo_ForceDenyTheseApps"=hex(7):00,00 ; 18.8 Contacts. Prevent apps from accessing contacts [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsAccessContacts"=dword:2 ; 18.8 Contacts. Prevent apps from accessing contacts [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsAccessContacts_UserInControlOfTheseApps"=hex(7):00,00 ; 18.8 Contacts. Prevent apps from accessing contacts [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsAccessContacts_ForceAllowTheseApps"=hex(7):00,00 ; 18.8 Contacts. Prevent apps from accessing contacts [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsAccessContacts_ForceDenyTheseApps"=hex(7):00,00 ; 18.9 Calendar. Prevent apps from accessing calendar [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsAccessCalendar"=dword:2 ; 18.9 Calendar. Prevent apps from accessing calendar [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsAccessCalendar_UserInControlOfTheseApps"=hex(7):00,00 ; 18.9 Calendar. Prevent apps from accessing calendar [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsAccessCalendar_ForceAllowTheseApps"=hex(7):00,00 ; 18.9 Calendar. Prevent apps from accessing calendar [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsAccessCalendar_ForceDenyTheseApps"=hex(7):00,00 ; 18.10 Call history. Prevent apps from accessing call history [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsAccessCallHistory"=dword:2 ; 18.10 Call history. Prevent apps from accessing call history [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsAccessCallHistory_UserInControlOfTheseApps"=hex(7):00,00 ; 18.10 Call history. Prevent apps from accessing call history [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsAccessCallHistory_ForceAllowTheseApps"=hex(7):00,00 ; 18.10 Call history. Prevent apps from accessing call history [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsAccessCallHistory_ForceDenyTheseApps"=hex(7):00,00 ; 18.11 Email. Prevent apps from accessing emails [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsAccessEmail"=dword:2 ; 18.11 Email. Prevent apps from accessing emails [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsAccessEmail_UserInControlOfTheseApps"=hex(7):00,00 ; 18.11 Email. Prevent apps from accessing emails [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsAccessEmail_ForceAllowTheseApps"=hex(7):00,00 ; 18.11 Email. Prevent apps from accessing emails [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsAccessEmail_ForceDenyTheseApps"=hex(7):00,00 ; 18.12 Messaging. Prevent apps from accessing messages [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsAccessMessaging"=dword:2 ; 18.12 Messaging. Prevent apps from accessing messages [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsAccessMessaging_UserInControlOfTheseApps"=hex(7):00,00 ; 18.12 Messaging. Prevent apps from accessing messages [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsAccessMessaging_ForceAllowTheseApps"=hex(7):00,00 ; 18.12 Messaging. Prevent apps from accessing messages [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsAccessMessaging_ForceDenyTheseApps"=hex(7):00,00 ; 18.12 Messaging. Turn off Message Sync [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Messaging] "AllowMessageSync"=dword:0 ; 18.13 Phone calls. Prevent apps from accessing phone calls [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsAccessPhone"=dword:2 ; 18.13 Phone calls. Prevent apps from accessing phone calls [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsAccessPhone_UserInControlOfTheseApps"=hex(7):00,00 ; 18.13 Phone calls. Prevent apps from accessing phone calls [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsAccessPhone_ForceAllowTheseApps"=hex(7):00,00 ; 18.13 Phone calls. Prevent apps from accessing phone calls [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsAccessPhone_ForceDenyTheseApps"=hex(7):00,00 ; 18.14 Radios. Prevent apps from accessing radio [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsAccessRadios"=dword:2 ; 18.14 Radios. Prevent apps from accessing radio [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsAccessRadios_UserInControlOfTheseApps"=hex(7):00,00 ; 18.14 Radios. Prevent apps from accessing radio [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsAccessRadios_ForceAllowTheseApps"=hex(7):00,00 ; 18.14 Radios. Prevent apps from accessing radio [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsAccessRadios_ForceDenyTheseApps"=hex(7):00,00 ; 18.15 Other devices. Prevent communications with unpaired devices [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsSyncWithDevices"=dword:2 ; 18.15 Other devices. Prevent communications with unpaired devices [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsSyncWithDevices_UserInControlOfTheseApps"=hex(7):00,00 ; 18.15 Other devices. Prevent communications with unpaired devices [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsSyncWithDevices_ForceAllowTheseApps"=hex(7):00,00 ; 18.15 Other devices. Prevent communications with unpaired devices [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsSyncWithDevices_ForceDenyTheseApps"=hex(7):00,00 ; 18.15 Other devices. Prevent communications with tursted devices [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsAccessTrustedDevices"=dword:2 ; 18.15 Other devices. Prevent communications with tursted devices [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsAccessTrustedDevices_UserInControlOfTheseApps"=hex(7):00,00 ; 18.15 Other devices. Prevent communications with tursted devices [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsAccessTrustedDevices_ForceAllowTheseApps"=hex(7):00,00 ; 18.15 Other devices. Prevent communications with tursted devices [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsAccessTrustedDevices_ForceDenyTheseApps"=hex(7):00,00 ; 18.16 Feedback & diagnostics. Turn off Feedback notifications [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DataCollection] "DoNotShowFeedbackNotifications"=dword:1 ; 18.16 Feedback & diagnostics. Disable telemetry [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DataCollection] "AllowTelemetry"=dword:0 ; 18.16 Feedback & diagnostics. Turn off tailored experiences [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CloudContent] "DisableWindowsConsumerFeatures"=dword:1 ; 18.17 Background apps. Turn off background app [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsRunInBackground"=dword:2 ; 18.17 Background apps. Turn off background app [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsRunInBackground_UserInControlOfTheseApps"=hex(7):00,00 ; 18.17 Background apps. Turn off background app [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsRunInBackground_ForceAllowTheseApps"=hex(7):00,00 ; 18.17 Background apps. Turn off background app [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsRunInBackground_ForceDenyTheseApps"=hex(7):00,00 ; 18.18 Motion. Prevent apps from accessing motion data [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsAccessMotion"=dword:2 ; 18.18 Motion. Prevent apps from accessing motion data [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsAccessMotion_UserInControlOfTheseApps"=hex(7):00,00 ; 18.18 Motion. Prevent apps from accessing motion data [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsAccessMotion_ForceAllowTheseApps"=hex(7):00,00 ; 18.18 Motion. Prevent apps from accessing motion data [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsAccessMotion_ForceDenyTheseApps"=hex(7):00,00 ; 18.19 Tasks. Prevent apps from accessing tasks [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsAccessTasks"=dword:2 ; 18.19 Tasks. Prevent apps from accessing tasks [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsAccessTasks_UserInControlOfTheseApps"=hex(7):00,00 ; 18.19 Tasks. Prevent apps from accessing tasks [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsAccessTasks_ForceAllowTheseApps"=hex(7):00,00 ; 18.19 Tasks. Prevent apps from accessing tasks [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsAccessTasks_ForceDenyTheseApps"=hex(7):00,00 ; 18.20 App Diagnostics. Prevent apps from accessing diagnostic information [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsGetDiagnosticInfo"=dword:2 ; 18.20 App Diagnostics. Prevent apps from accessing diagnostic information [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsGetDiagnosticInfo_UserInControlOfTheseApps"=hex(7):00,00 ; 18.20 App Diagnostics. Prevent apps from accessing diagnostic information [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsGetDiagnosticInfo_ForceAllowTheseApps"=hex(7):00,00 ; 18.20 App Diagnostics. Prevent apps from accessing diagnostic information [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsGetDiagnosticInfo_ForceDenyTheseApps"=hex(7):00,00 ; 18.21 Inking & Typing. Turn off Inking & Typing data collection [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\TextInput] "AllowLinguisticDataCollection"=dword:0 ; 18.22 Activity History. Turn off tracking of your Activity History [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System] "EnableActivityFeed"=dword:0 ; 18.22 Activity History. Turn off tracking of your Activity History [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System] "PublishUserActivities"=dword:0 ; 18.22 Activity History. Turn off tracking of your Activity History [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System] "UploadUserActivities"=dword:0 ; 18.23 Voice Activation. Turn Off apps ability to listen for a Voice keyword [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsActivateWithVoice"=dword:2 ; 18.23 Voice Activation. Turn Off apps ability to listen for a Voice keyword [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppPrivacy] "LetAppsActivateWithVoiceAboveLock"=dword:2 ; 18.24 News and interests. Disable Windows Feeds [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Feeds] "EnableFeeds"=dword:00000000 ; 19. Software Protection Platform. Turn off sending KMS client activation data to Microsoft [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\CurrentVersion\Software Protection Platform] "NoGenTicket"=dword:1 ; 20. Storage health. Turn off downloading updates to the Disk Failure Prediction Model [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\StorageHealth] "AllowDiskHealthModelUpdates"=dword:0 ; 21. Sync your settings. Turn off settings sync [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\SettingSync] "DisableSettingSync"=dword:2 ; 21. Sync your settings. Turn off settings sync [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\SettingSync] "DisableSettingSyncUserOverride"=dword:1 ; 22. Teredo. Disable Teredo [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\TCPIP\v6Transition] "Teredo_State"="Disabled" ; 23. Wi-Fi Sense. Turn off the feature [HKEY_LOCAL_MACHINE\Software\Microsoft\wcmsvc\wifinetworkmanager\config] "AutoConnectAllowedOEM"=dword:0 ; 24. Microsoft Defender Antivirus. Disconnect from the Microsoft Antimalware Protection Service [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Spynet] "SpynetReporting"=dword:0 ; 24. Microsoft Defender Antivirus. Stop sending file samples back to Microsoft [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Spynet] "SubmitSamplesConsent"=dword:2 ; 24. Microsoft Defender Antivirus. Stop downloading Definition Updates [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Signature Updates] "FallbackOrder"="FileShares" ; 24. Microsoft Defender Antivirus. Stop downloading Definition Updates [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Signature Updates] "DefinitionUpdateFileSharesSources"="Nothing" ; 24. Microsoft Defender Antivirus. Turn off Malicious Software Reporting Tool (MSRT) diagnostic data: [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\MRT] "DontReportInfectionInformation"=dword:00000001 ; 24. Microsoft Defender Antivirus. Turn off Enhanced Notifications [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Reporting] "DisableEnhancedNotifications"=dword:1 ; 24.1 Microsoft Defender SmartScreen. Disable feature [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System] "EnableSmartScreen"=dword:0 ; 24.1 Microsoft Defender SmartScreen. Disable feature [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\SmartScreen] "ConfigureAppInstallControlEnabled"=dword:1 ; 24.1 Microsoft Defender SmartScreen. Disable feature [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\SmartScreen] "ConfigureAppInstallControl"="Anywhere" ; 24.1 Microsoft Defender SmartScreen. Disable feature [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System] "ShellSmartScreenLevel"=- ; 25. Personalized Experiences. Disable feature [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CloudContent] "DisableCloudOptimizedContent"=dword:1 ; 26. Microsoft Store. Disable all apps from Microsoft Store [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsStore] "DisableStoreApps"=dword:1 ; 26. Microsoft Store. Turn off Automatic Download and Install of updates. [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsStore] "AutoDownload"=dword:2 ; 27. Apps for websites. Turn off apps for websites [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System] "EnableAppUriHandlers"=dword:0 ; 28.3. Delivery Optimization. (simple mode) prevent P2P traffic ; Value is Hex 63 = 99 decimal [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeliveryOptimization] "DODownloadMode"=dword:63 ; 29. Windows Update. Turn off [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate] "DoNotConnectToWindowsUpdateInternetLocations"=dword:1 ; 29. Windows Update. Turn off [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate] "DisableWindowsUpdateAccess"=dword:1 ; 29. Windows Update. Turn off [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate] "WUServer"=" " ; 29. Windows Update. Turn off [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate] "WUStatusServer"=" " ; 29. Windows Update. Turn off [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate] "UpdateServiceUrlAlternate"=" " ; 29. Windows Update. Turn off [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU] "UseWUServer"=dword:1 ; 29. Windows Update. Turn off [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate] "FillEmptyContentUrls"=- ; 29. Windows Update. Turn off [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate] "DoNotEnforceEnterpriseTLSCertPinningForUpdateDetection"=- ; 29. Windows Update. Turn off [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate] "SetProxyBehaviorForUpdateDetection"=dword:0 ; 29. Windows Update. Turn off [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsStore\WindowsUpdate] "AutoDownload"=dword:00000005 ; 30. Cloud Clipboard [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System] "AllowCrossDeviceClipboard"=dword:0 ; 31. Services Configuration. Turn off [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DataCollection] "DisableOneSettingsDownloads"=dword:00000001