Limit Secure Boot Required Service Data

Policy ID
LimitSecureBootRequiredServiceData
Scope
Computer Configuration
Supported on
At least Windows Server 2012 R2, Windows 8.1 or Windows RT 8.1
Source
Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
Category
Windows Components › Secure Boot

Description

This policy setting controls whether the operating system emits the daily Secure Boot required service data event. The event contains information about the device's Secure Boot configuration and firmware variable state, and is normally sent regardless of the Allow Telemetry diagnostic data level because it is classified as security-required.

By enabling this policy setting, the daily Secure Boot required service data event will not be emitted. This is intended for enterprises operating under the Windows Restricted Traffic Limited Functionality Baseline.

If you disable or do not configure this policy setting, the operating system continues to emit the Secure Boot required service data event according to the existing telemetry permission rules.

Registry

ComputerHKEY_LOCAL_MACHINE
  • LimitSecureBootRequiredServiceDataREG_DWORD

Other policies in the same category

View all policies in this category (4)