Since the first day Microsoft released Windows 10 there is a lot to do about the data Microsoft is collecting from you when using this OS. A lot of those apps connect to the internet and you have no idea what data is collected
In this blog I will show you how you can use Microsoft Intune to take control of the privacy settings on the company managed devices.
Setting up Intune policies
When i google all or most of the info on Windows Setup EMS Enabled pertains to windows server 2003. RTFMID10T 6 Junior Poster in Training. Sep 23, 2020 Use BCDEdit /emssettings command and its parameters to establish EMS settings for all boot entries. Then, use the BCDEdit /ems command to enable EMS for a particular boot entry. Feb 09, 2016 Hi all, We are utilising the Intel vPro/AMT technology and have found it useful to connect to machine via Serial Over LAN (SOL). We can't utilise the KVM as the graphics cards are not the Intel On-board GPU, but rather a discrete graphics card.If we boot the machine via a Windows PE image (based on Windows 2003), we can connect to the machine and of course we can get to the SAC prompt,.
To block apps from accessing you information with Microsoft Intune we need to use CSP policies which you can find on docs.microsoft.com. We will first disable the Advertising ID. Look up for the right policy under Privacy. On the below screen you see Privacy/DisableAdvertisingId, this is part of the OMA-URI you need to set in the Intune configuration Profile. And you can see there are three options which you can set by providing one of the three corresponding numbers in the Intune policy.
Now open the Azure portal and open the Intune tab. Choose Device configuration, Profiles and click on Create profile.
Give the policy your preferred name, choose Windows 10 and later as platform en policy type is Custom. Next to OMA-URI settings click Add.
Give the Row a name, as OMA-URI you see a complete OMA-URI (part of that we found on docs.microsoft.com), Data type is Integer and add the value 1 to Enable the setting.
OMA-URI: ./Device/Vendor/MSFT/Policy/Config/Privacy/DisableAdvertisingID
Data type: Integer
Value: 1
Now perform a sync with Intune on a managed Windows 10 device and switch over to Settings, Privacy, General. Let apps use advertising is switched off and greyed out. You also see a message some settings are managed by your organization.
The next example is to block apps from accessing your location. On docs.microsoft.com you can find the policy and options you can set.
Add an extra Row in your Intune policy and use these settings:
OMA-URI: ./Device/Vendor/MSFT/Policy/Config/Privacy/LetAppsAccessLocation
Data type: Integer
Value: 2
After syncing the setting from Intune, switch over to Location. Location service is switched off and greyed out.
The third example is to stop apps from accessing the diagnostics information. Look up the policy we need for this; Privacy/LetAppsGetDiagnosticsInfo
Add an extra Row in your Intune policy and use these settings:
OMA-URI: ./Device/Vendor/MSFT/Policy/Config/Privacy/LetAppsGetDiagnosticsInfo
Data type: Integer
Value: 2
Perform a sync again and this is the result for Diagnostics.
With these examples you are able to completely turn these privacy settings on or off. There are also policies to force allow or force deny an specific app access for example your Contacts. To Deny apps access to contacts you need to provide these apps Package Family Names, semi-colon separated.
Ems Enabled Windows 10 Free
To get the Package Family Name for the Maps app, open PowerShell Get-AppxPackage -Name *maps*
Use the PackageFamilyName in your Intune policy.
OMA-URI: ./Device/Vendor/MSFT/Policy/Config/Privacy/LetAppsAccessContacts_ForceDenyTheseApps
Data type: String
Value: Microsoft.WindowsMaps_8wekyb3d8bbwe;Microsoft.Windows.Photos_8wekyb3d8bbwe
When we now go to the Contacts tab you see the overall setting is not greyed out. The two apps are force denied, all other apps can be turn on/ off by the user.
With these examples you should be able to take control over most of the Windows 10 privacy settings using Microsoft Intune.
Update November 17th:
Today I was setting up a Windows 10 configuration policy for one of our customers and I noticed two tabs under Device Restrictions one called Privacy and the other one Per-app privacy exceptions. I really have no idea since when these tabs are there, maybe they are completely new, maybe I just haven`t noticed them for weeks, but this makes life much easier when setting Windows 10 Privacy settings :).
Below you can see almost all the privacy settings discussed before in this blog. On this tab you can set an Allow or Block for the mentioned app.
When we open the second tab we can add separate apps by row and we can set an exception for every app.
Again we need the Package Family Name you can query with PowerShell and the App name. Then you can choose per app if you want to Allow or Block the app, or Leave the user in control.
:max_bytes(150000):strip_icc()/windows-7-install-11-56a6f8cf5f9b58b7d0e5c1f4.jpg "Enabled")
Related posts:
Discus and support Editing config.nt for Win 10 32 Bit to enable EMS in Windows 10 Customization to solve the problem; Hi Microsoft Community,We are trying to get a legacy 16 bit application running on Win 10 32 bit which requires EMS memory.We have enabled NTVDM... Discussion in 'Windows 10 Customization' started by DarrenT_MC, Dec 17, 2018.
Ems Enabled Windows 10 Software
Editing config.nt for Win 10 32 Bit to enable EMS
Editing config.nt for Win 10 32 Bit to enable EMS - Similar Threads - Editing config Bit
Win 10 32-bit to 64-bit
in Windows 10 Updates and ActivationWin 10 32-bit to 64-bit: Hello, I recently upgraded my old Dell Optiplex 390 pc I had laying around. I started with updating to Windows 10 then added some more RAM to the system. Unfortunately i'm running on the 32 bit OS and it cannot use the extra 5 RAM i added to it and its currently being used as...Win 10 64 bit/over win 10 32/bit
in Windows 10 Installation and UpgradeWin 10 64 bit/over win 10 32/bit: can I install win 10 pro 64 bit on existing win 10 home 32 bit computer without losing data?https://answers.microsoft.com/en-us/windows/forum/all/win-10-64-bitover-win-10-32bit/49a5575d-2e69-497c-ba17-78619d6d62bbWin 10 64-bit to 32-bit
in Windows 10 Installation and UpgradeWin 10 64-bit to 32-bit: I have Win 10 64-bit but some older programs won't work on it. The maker of the programs have abandoned them so I can't go back for updated versions. I've tried the compatibility mode, etc. I'm thinking I might solve the problem by installing the Win 10 32-bit version. I...Win 10 difficulty with 32 bit
in Windows 10 Updates and ActivationWin 10 difficulty with 32 bit: Dear, with the new computer, a Windows 10 pro, a 32 bit version of windows was purchased. But I can see that my computer does not work the best, especially since the GPU does not support the 32-bit driver in the win 10 version. When I bought my windows while i was installing...Converting Win 10 32 bit to 64 bit
in Windows 10 Installation and UpgradeConverting Win 10 32 bit to 64 bit: Converting Win 10 32 bit to 64 bithttps://answers.microsoft.com/en-us/windows/forum/all/converting-win-10-32-bit-to-64-bit/a9fcc6c3-ace6-48a6-a227-2cd103d5c880Win 10 32 bit
in Windows 10 Installation and UpgradeWin 10 32 bit: I'm having issues with installing windows 10 on a system. It has an m3a78-em motherboard and I've been able to boot an unactivated copy of win 32 (but couldn't update, meaning that the windows store is unavailable, which is necessary). This PC is for my little brother, and he...Converting Win 10 32 bit to 64 bit
in Windows 10 Installation and UpgradeConverting Win 10 32 bit to 64 bit: Is there any way this can be done without a clean install?https://answers.microsoft.com/en-us/windows/forum/all/converting-win-10-32-bit-to-64-bit/5c2a0e9a-dd35-4a1d-a924-e350ef1abf00update win 10 32 bit to 64 bit
in Windows 10 Installation and Upgradeupdate win 10 32 bit to 64 bit: My old Dell 530S mother board will run 32 bit or 64 bit, it came with 32 bit. So when I did the free upgrade from win 7 to win 10 it of course kept it at 32 bit. I did the reset of win 10 but did not see any option for 64 bit. All the computers in the family are 64 bit. Can...Win 10 32 bit to Win 10 64 bit
in Windows 10 Installation and UpgradeWin 10 32 bit to Win 10 64 bit: I am wanting to upgrade my wife's comp from win 10 32 bit to win 10 64 bit, her win 10 is activated. I've downloaded the Win 10 64 bit ISO to my machine (Win 10 64 bit). Do I just burn the ISO to DVD and then boot my wife's machine with that or do I mount it on my machine...
Windows 10 Iso
EDITING CONFIG.NT OF WINDOW10 32 BIT COULD NOT BE SAVED
,how to edit the config.nt in 32 bit window10