This policy setting turns off the advertising ID, preventing apps from using the ID for experiences across apps. If you enable this policy setting, the advertising ID is turned off. Apps can't use the ID for experiences across apps. If you disable or do not configure this policy setting, users can control whether apps can use the advertising ID for experiences across apps. Countermeasure: Enable and configure this setting. Potential Impact: Users cannot use or control whether apps can use the advertising ID for experiences across apps. Fix: (1) GPO: Computer ConfigurationAdministrative TemplatesSystemUser ProfilesTurn off the advertising ID (2) REG: HKEY_LOCAL_MACHINESoftwarePoliciesMicrosoftWindowsAdvertisingInfo!DisabledByGroupPolicy

[enabled/disabled]

(1) GPO: Computer Configuration\Administrative Templates\System\User Profiles\Turn off the advertising ID (2) REG: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AdvertisingInfo!DisabledByGroupPolicy