Let Windows apps access diagnostic information about other apps

This policy setting specifies whether Windows apps can get diagnostic information about other Windows apps, including user name.

You can specify either a default setting for all apps or a per-app setting by specifying a Package Family Name. You can get the Package Family Name for an app by using the Get-AppPackage Windows PowerShell cmdlet. A per-app setting overrides the default setting.

If you choose the "User is in control" option, employees in your organization can decide whether Windows apps can get diagnostic information about other apps using Settings > Privacy on the device.

If you choose the "Force Allow" option, Windows apps are allowed to get diagnostic information about other apps and employees in your organization cannot change it.

If you choose the "Force Deny" option, Windows apps are not allowed to get diagnostic information about other apps and employees in your organization cannot change it.

If you disable or do not configure this policy setting, employees in your organization can decide whether Windows apps can get diagnostic information about other apps by using Settings > Privacy on the device.

If an app is open when this Group Policy object is applied on a device, employees must restart the app or device for the policy changes to be applied to the app.

Supported on: At least Windows Server 2016, Windows 10 Version 1703

Default for all apps:


  1. User is in control
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSoftware\Policies\Microsoft\Windows\AppPrivacy
    Value NameLetAppsGetDiagnosticInfo
    Value TypeREG_DWORD
    Value0
  2. Force Allow
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSoftware\Policies\Microsoft\Windows\AppPrivacy
    Value NameLetAppsGetDiagnosticInfo
    Value TypeREG_DWORD
    Value1
  3. Force Deny
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSoftware\Policies\Microsoft\Windows\AppPrivacy
    Value NameLetAppsGetDiagnosticInfo
    Value TypeREG_DWORD
    Value2

Put user in control of these specific apps (use Package Family Names):



Registry HiveHKEY_LOCAL_MACHINE
Registry PathSoftware\Policies\Microsoft\Windows\AppPrivacy
Value NameLetAppsGetDiagnosticInfo_UserInControlOfTheseApps
Value TypeREG_MULTI_SZ
Default Value

Force allow these specific apps (use Package Family Names):



Registry HiveHKEY_LOCAL_MACHINE
Registry PathSoftware\Policies\Microsoft\Windows\AppPrivacy
Value NameLetAppsGetDiagnosticInfo_ForceAllowTheseApps
Value TypeREG_MULTI_SZ
Default Value

Force deny these specific apps (use Package Family Names):



Registry HiveHKEY_LOCAL_MACHINE
Registry PathSoftware\Policies\Microsoft\Windows\AppPrivacy
Value NameLetAppsGetDiagnosticInfo_ForceDenyTheseApps
Value TypeREG_MULTI_SZ
Default Value

appprivacy.admx

Administrative Templates (Computers)

Administrative Templates (Users)