From 5de4c2ba1d7b2f8fd7c8cbd2b275a5e8fd9c3e05 Mon Sep 17 00:00:00 2001
From: Yorick Barbanneau <ephase@xieme-art.org>
Date: Fri, 27 Mar 2020 11:09:21 +0100
Subject: [PATCH] Add Voice Activation restriction

---
 modules.d/GPO_VoiceActivation.conf | 33 ++++++++++++++++++++++++++++++
 1 file changed, 33 insertions(+)
 create mode 100644 modules.d/GPO_VoiceActivation.conf

diff --git a/modules.d/GPO_VoiceActivation.conf b/modules.d/GPO_VoiceActivation.conf
new file mode 100644
index 0000000..cda9165
--- /dev/null
+++ b/modules.d/GPO_VoiceActivation.conf
@@ -0,0 +1,33 @@
+{
+    "name" : "Account Info (GPO)",
+    "description" : "This module desactivate Account Info access for third party Apps like GPO did.",
+    "actions" :
+    [
+        {
+            "_comment" : "This is the principal reg key controlled by GPO",
+            "action" : "AddRegKey",
+            "path" : "HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows\\AppPrivacy",
+            "key" : "LetAppsActivateWithVoice",
+            "value" : "2"
+        },
+        {
+            "_comment" : "The 3 bottom keys seems to be some kind of ACL for App right",
+            "action" : "AddRegKey",
+            "path" : "HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows\\AppPrivacy",
+            "key" : "LetAppsActivateWithVoice_UserInControlOfTheseApps",
+            "type" : "MultiString"
+        },
+        {
+            "action" : "AddRegKey",  
+            "path" : "HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows\\AppPrivacy",
+            "key" : "LetAppsActivateWithVoice_ForceAllowTheseApps",
+            "type" : "MultiString"
+        },
+        {
+            "action" : "AddRegKey",  
+            "path" : "HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows\\AppPrivacy",
+            "key" : "LetAppsActivateWithVoice_ForceDenyTheseApps",
+            "type" : "MultiString"
+        }
+    ]
+}