Details
This policy setting turns off the advertising ID, preventing apps from using the ID for experiences across apps.
The recommended state for this setting is: Enabled.
Rationale:
Tracking user activity for advertising purposes, even anonymously, may be a privacy concern. In an enterprise managed environment, applications should not need or require tracking for targeted advertising.
Impact:
The advertising ID is turned off. Apps can’t use the ID for experiences across apps.
Solution
To establish the recommended configuration via GP, set the following UI path to Enabled:
Computer ConfigurationPoliciesAdministrative TemplatesSystemUser ProfilesTurn off the advertising ID
Note: This Group Policy path may not exist by default. It is provided by the Group Policy template UserProfiles.admx/adml that is included with the Microsoft Windows 8.1 & Server 2012 R2 Administrative Templates (or newer).
Default Value:
Disabled. (Users can control whether apps can use the advertising ID for experiences across apps.)
Supportive Information
The following resource is also helpful.
This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Windows.