22.06.2016 Views

CIS Microsoft Windows 10 Enterprise RTM (Release 1507) Benchmark

CIS_Microsoft_Windows_10_Enterprise_RTM_Release_1507_Benchmark_v1.0.0

CIS_Microsoft_Windows_10_Enterprise_RTM_Release_1507_Benchmark_v1.0.0

SHOW MORE
SHOW LESS

You also want an ePaper? Increase the reach of your titles

YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.

18.8.19.1.3 (L2) Set 'Turn off handwriting recognition error reporting' to<br />

'Enabled' (Scored)<br />

Profile Applicability:<br />

Level 2<br />

Level 2 + BitLocker<br />

Description:<br />

Turns off the handwriting recognition error reporting tool.<br />

The handwriting recognition error reporting tool enables users to report errors<br />

encountered in Tablet PC Input Panel. The tool generates error reports and transmits them<br />

to <strong>Microsoft</strong> over a secure connection. <strong>Microsoft</strong> uses these error reports to improve<br />

handwriting recognition in future versions of <strong>Windows</strong>.<br />

The recommended state for this setting is: Enabled.<br />

Rationale:<br />

A person's handwriting is Personally Identifiable Information (PII), especially when it<br />

comes to your signature. As such, it is unacceptable in many environments to automatically<br />

upload PII to a website without explicit approval by the user.<br />

Audit:<br />

Navigate to the UI Path articulated in the Remediation section and confirm it is set as<br />

prescribed. This group policy setting is backed by the following registry location:<br />

HKEY_LOCAL_MACHINE\Software\Policies\<strong>Microsoft</strong>\<strong>Windows</strong>\HandwritingErrorReports:Prevent<br />

HandwritingErrorReports<br />

Remediation:<br />

To establish the recommended configuration via GP, set the following UI path to Enabled:<br />

Computer Configuration\Policies\Administrative Templates\System\Internet Communication<br />

Management\Internet Communication settings\Turn off handwriting recognition error<br />

reporting<br />

Impact:<br />

If you enable this policy, users cannot start the handwriting recognition error reporting<br />

tool or send error reports to <strong>Microsoft</strong>.<br />

484 | P a g e

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!