Verschiedene Einstellungsmöglichkeiten können mit der Microsoft Cloud Synchronisiert werden. Im folgneden Einträgen werden diese deaktiviert. Einstellungen Computerkonfiguration\Richtlinien\Administrative Vorlagen\Windows-Komponenten\Einstellungen synchronisieren App-Einstellungen nicht synchronisieren HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\SettingSync!DisableApplicationSettingSync REG_DWORD: 2 HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\SettingSync!DisableApplicationSettingSyncUserOverride REG_DWORD: 1 Apps nicht synchronisieren HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\SettingSync!DisableAppSyncSettingSync REG_DWORD: 2 HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\SettingSync!DisableAppSyncSettingSyncUserOverride REG_DWORD: 1 Browsereinstellungen nicht synchronisieren HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\SettingSync!DisableWebBrowserSettingSync REG_DWORD: 2 HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\SettingSync!DisableWebBrowserSettingSyncUserOverride REG_DWORD: 1 Desktoppersonalisierung nicht synchronisieren HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\SettingSync!DisableDesktopThemeSettingSync REG_DWORD: 2 HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\SettingSync!DisableDesktopThemeSettingSyncUserOverride REG_DWORD: 1 Keine Synchronisierung über getakte Verbindungen HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\SettingSync!DisableSyncOnPaidNetwork REG_DWORD: 1 Kennwörter nicht synchronisieren HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\SettingSync!DisableCredentialsSettingSync REG_DWORD: 2 HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\SettingSync!DisableCredentialsSettingSyncUserOverride REG_DWORD: 1 Nicht synchronisieren HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\SettingSync!DisableSettingSync REG_DWORD: 2 HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\SettingSync!DisableSettingSyncUserOverride REG_DWORD: 1 Personalisierung nicht synchronisieren HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\SettingSync!DisablePersonalizationSettingSync REG_DWORD: 2 HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\SettingSync!DisablePersonalizationSettingSyncUserOverride REG_DWORD: 1 Starteinstellungen nicht synchronisieren HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\SettingSync!DisableStartLayoutSettingSync REG_DWORD: 2 HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\SettingSync!DisableStartLayoutSettingSyncUserOverride REG_DWORD: 1 Weitere Windows-Einstellungen nicht synchronisieren HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\SettingSync!DisableWindowsSettingSync REG_DWORD: 2 HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\SettingSync!DisableWindowsSettingSyncUserOverride REG_DWORD: 1 Nachrichten Computerkonfiguration\Richtlinien\Administrative Vorlagen\Windows-Komponenten\Nachrichten Synchronisierung von Nachrichtendienstcloud zulassen HKEY_CURRENT_USER\SOFTWARE\Microsoft\Messaging!CloudServiceSyncEnabled REG_DWORD: 0 Skript für vorherige Konfiguration # Registry eintraege – deaktivieren $reg = @( # Einstellungen Sync [PSCustomObject]@{path=“HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync“;name=“DisableApplicationSettingSync“;value=“2″;type=“DWord“} [PSCustomObject]@{path=“HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync“;name=“DisableApplicationSettingSyncUserOverride“;value=“1″;type=“DWord“} [PSCustomObject]@{path=“HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync“;name=“DisableAppSyncSettingSync“;value=“2″;type=“DWord“} [PSCustomObject]@{path=“HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync“;name=“DisableAppSyncSettingSyncUserOverride“;value=“1″;type=“DWord“} [PSCustomObject]@{path=“HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync“;name=“DisableWebBrowserSettingSync“;value=“2″;type=“DWord“} [PSCustomObject]@{path=“HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync“;name=“DisableWebBrowserSettingSyncUserOverride“;value=“1″;type=“DWord“} [PSCustomObject]@{path=“HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync“;name=“DisableDesktopThemeSettingSync“;value=“2″;type=“DWord“} [PSCustomObject]@{path=“HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync“;name=“DisableDesktopThemeSettingSyncUserOverride“;value=“1″;type=“DWord“} [PSCustomObject]@{path=“HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync“;name=“DisableSyncOnPaidNetwork“;value=“1″;type=“DWord“} [PSCustomObject]@{path=“HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync“;name=“DisableCredentialsSettingSync“;value=“2″;type=“DWord“} [PSCustomObject]@{path=“HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync“;name=“DisableCredentialsSettingSyncUserOverride“;value=“1″;type=“DWord“} [PSCustomObject]@{path=“HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync“;name=“DisableSettingSync“;value=“2″;type=“DWord“} [PSCustomObject]@{path=“HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync“;name=“DisableSettingSyncUserOverride“;value=“1″;type=“DWord“} [PSCustomObject]@{path=“HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync“;name=“DisablePersonalizationSettingSync“;value=“2″;type=“DWord“} [PSCustomObject]@{path=“HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync“;name=“DisablePersonalizationSettingSyncUserOverride“;value=“1″;type=“DWord“} [PSCustomObject]@{path=“HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync“;name=“DisableStartLayoutSettingSync“;value=“2″;type=“DWord“} [PSCustomObject]@{path=“HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync“;name=“DisableStartLayoutSettingSyncUserOverride“;value=“1″;type=“DWord“} [PSCustomObject]@{path=“HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync“;name=“DisableWindowsSettingSync“;value=“2″;type=“DWord“} [PSCustomObject]@{path=“HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync“;name=“DisableWindowsSettingSyncUserOverride“;value=“1″;type=“DWord“} [PSCustomObject]@{path=“HKCU:\SOFTWARE\Microsoft\Messaging“;name=“CloudServiceSyncEnabled“;value=“0″;type=“DWord“} ) # Reg-Eintraege schreiben foreach($r in $reg){ if(Test-Path $r.path){ New-ItemProperty -Path $r.path -Name $r.name -Value $r.value -PropertyType $r.type -Force | Out-Null } else{ New-Item -Path $r.path -Force | Out-Null New-ItemProperty -Path $r.path -Name $r.name -Value $r.value -PropertyType $r.type -Force | Out-Null } } Weitere Links Deaktivierung der Datensammlung und Weitergabe an Microsoft über GPO