Windows Sicherheitseinschränkung Einstellungen Synchronisieren

Verschiedene Einstellungsmöglichkeiten können mit der Microsoft Cloud Synchronisiert werden. Im folgneden Einträgen werden diese deaktiviert.

Einstellungen

Computerkonfiguration\Richtlinien\Administrative Vorlagen\Windows-Komponenten\Einstellungen synchronisieren

App-Einstellungen nicht synchronisieren

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\SettingSync!DisableApplicationSettingSync
REG_DWORD: 2
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\SettingSync!DisableApplicationSettingSyncUserOverride
REG_DWORD: 1

Apps nicht synchronisieren

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\SettingSync!DisableAppSyncSettingSync
REG_DWORD: 2
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\SettingSync!DisableAppSyncSettingSyncUserOverride
REG_DWORD: 1

Browsereinstellungen nicht synchronisieren

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\SettingSync!DisableWebBrowserSettingSync
REG_DWORD: 2 
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\SettingSync!DisableWebBrowserSettingSyncUserOverride
REG_DWORD: 1

Desktoppersonalisierung nicht synchronisieren

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\SettingSync!DisableDesktopThemeSettingSync
REG_DWORD: 2 
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\SettingSync!DisableDesktopThemeSettingSyncUserOverride
REG_DWORD: 1

Keine Synchronisierung über getakte Verbindungen

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\SettingSync!DisableSyncOnPaidNetwork
REG_DWORD: 1

Kennwörter nicht synchronisieren

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\SettingSync!DisableCredentialsSettingSync
REG_DWORD: 2 
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\SettingSync!DisableCredentialsSettingSyncUserOverride
REG_DWORD: 1

Nicht synchronisieren

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\SettingSync!DisableSettingSync
REG_DWORD: 2 
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\SettingSync!DisableSettingSyncUserOverride
REG_DWORD: 1

Personalisierung nicht synchronisieren

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\SettingSync!DisablePersonalizationSettingSync
REG_DWORD: 2 
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\SettingSync!DisablePersonalizationSettingSyncUserOverride
REG_DWORD: 1

Starteinstellungen nicht synchronisieren

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\SettingSync!DisableStartLayoutSettingSync
REG_DWORD: 2 
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\SettingSync!DisableStartLayoutSettingSyncUserOverride
REG_DWORD: 1

Weitere Windows-Einstellungen nicht synchronisieren

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\SettingSync!DisableWindowsSettingSync
REG_DWORD: 2 
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\SettingSync!DisableWindowsSettingSyncUserOverride
REG_DWORD: 1

---

Nachrichten

Computerkonfiguration\Richtlinien\Administrative Vorlagen\Windows-Komponenten\Nachrichten

Synchronisierung von Nachrichtendienstcloud zulassen

HKEY_CURRENT_USER\SOFTWARE\Microsoft\Messaging!CloudServiceSyncEnabled 
REG_DWORD: 0

---

Skript für vorherige Konfiguration

# Registry eintraege - deaktivieren
$reg = @(    
    # Einstellungen Sync
    [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync";name="DisableApplicationSettingSync";value="2";type="DWord"}
    [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync";name="DisableApplicationSettingSyncUserOverride";value="1";type="DWord"}
    [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync";name="DisableAppSyncSettingSync";value="2";type="DWord"}
    [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync";name="DisableAppSyncSettingSyncUserOverride";value="1";type="DWord"}
    [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync";name="DisableWebBrowserSettingSync";value="2";type="DWord"}
    [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync";name="DisableWebBrowserSettingSyncUserOverride";value="1";type="DWord"}
    [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync";name="DisableDesktopThemeSettingSync";value="2";type="DWord"}
    [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync";name="DisableDesktopThemeSettingSyncUserOverride";value="1";type="DWord"}
    [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync";name="DisableSyncOnPaidNetwork";value="1";type="DWord"}
    [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync";name="DisableCredentialsSettingSync";value="2";type="DWord"}
    [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync";name="DisableCredentialsSettingSyncUserOverride";value="1";type="DWord"}
    [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync";name="DisableSettingSync";value="2";type="DWord"}
    [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync";name="DisableSettingSyncUserOverride";value="1";type="DWord"}
    [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync";name="DisablePersonalizationSettingSync";value="2";type="DWord"}
    [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync";name="DisablePersonalizationSettingSyncUserOverride";value="1";type="DWord"}
    [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync";name="DisableStartLayoutSettingSync";value="2";type="DWord"}
    [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync";name="DisableStartLayoutSettingSyncUserOverride";value="1";type="DWord"}
    [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync";name="DisableWindowsSettingSync";value="2";type="DWord"}
    [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync";name="DisableWindowsSettingSyncUserOverride";value="1";type="DWord"} 
    [PSCustomObject]@{path="HKCU:\SOFTWARE\Microsoft\Messaging";name="CloudServiceSyncEnabled";value="0";type="DWord"}
)

# Reg-Eintraege schreiben
foreach($r in $reg){
    if(Test-Path $r.path){
        New-ItemProperty -Path $r.path -Name $r.name -Value $r.value -PropertyType $r.type -Force | Out-Null
    }
    else{
        New-Item -Path $r.path -Force | Out-Null
        New-ItemProperty -Path $r.path -Name $r.name -Value $r.value -PropertyType $r.type -Force | Out-Null
    }
}

Weitere Links

Deaktivierung der Datensammlung und Weitergabe an Microsoft über GPO