STIGQter: STIG Summary: Microsoft Windows 11 Security Technical Implementation Guide Version: 2 Release: 8 Benchmark Date: 01 Jul 2026:

Windows Telemetry must not be configured to Full.

DISA Rule

SV-253393r1210293_rule

Vulnerability Number

V-253393

Group Title

SRG-OS-000205-GPOS-00083

Rule Version

WN11-CC-000205

Severity

CAT II

CCI(s)

• CCI-001312 - Generates error messages that provide information necessary for corrective actions without revealing information that could be exploited.

Weight

10

Fix Recommendation

For GPO-managed systems:

Configure the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Data Collection and Preview Builds >> "Allow Diagnostic Data" to "Enabled" with "Send required diagnostic data" selected in "Options:".

For Intune-managed systems:

Revise the Intune policy to enable sending diagnostic data for Data Collection.

Check Contents

If the following registry value does not exist or is not configured as specified, this is a finding:

Registry Hive: HKEY_LOCAL_MACHINE
Registry Path: \SOFTWARE\Policies\Microsoft\Windows\DataCollection\ (For GPO-managed systems)
Or
Registry Path: \SOFTWARE\Policies\Microsoft\Windows\DataCollection!AllowTelemetry (For Intune-managed systems)

Value Name: AllowTelemetry

Type: REG_DWORD
Value: 0x00000000 (0) (Security)
0x00000001 (1) (Basic)

Vulnerability Number

V-253393

Documentable

False

Rule Version

WN11-CC-000205

Severity Override Guidance

If the following registry value does not exist or is not configured as specified, this is a finding:

Registry Hive: HKEY_LOCAL_MACHINE
Registry Path: \SOFTWARE\Policies\Microsoft\Windows\DataCollection\ (For GPO-managed systems)
Or
Registry Path: \SOFTWARE\Policies\Microsoft\Windows\DataCollection!AllowTelemetry (For Intune-managed systems)

Value Name: AllowTelemetry

Type: REG_DWORD
Value: 0x00000000 (0) (Security)
0x00000001 (1) (Basic)

Check Content Reference

M

Target Key

5471