Policy
Limit Secure Boot Required Service Data
Microsoft Windows
Policy overview
Key metadata and intent for this policy.
Supported OS tags: Windows10, Windows10RT, Windows11, Windows81, WindowsRT81, WindowsServer2012R2, WindowsServer2016
This policy setting controls whether the operating system emits the daily Secure Boot required service data event. The event contains information about the device's Secure Boot configuration and firmware variable state, and is normally sent regardless of the Allow Telemetry diagnostic data level because it is classified as security-required. By enabling this policy setting, the daily Secure Boot required service data event will not be emitted. This is intended for enterprises operating under the Windows Restricted Traffic Limited Functionality Baseline. If you disable or do not configure this policy setting, the operating system continues to emit the Secure Boot required service data event according to the existing telemetry permission rules.
Registry values
How enabled and disabled states update the registry.
| Scope | Registry location | Type | Enabled value | Disabled value | Copy |
|---|---|---|---|---|---|
| Computer | Path SYSTEM\CurrentControlSet\Control\SecureBoot Value name LimitSecureBootRequiredServiceData | REG_DWORD | HKLM 1 | HKLM 0 |
Policy elements
Inputs and configuration options exposed by this policy.
This policy has no additional user input fields.