From 4dc76ec838e726903fcbdd36d9540b0c08a3280c Mon Sep 17 00:00:00 2001
From: Graham Williams <gray@fleetdm.com>
Date: Wed, 22 Oct 2025 18:02:55 +0100
Subject: [PATCH] Create windows-device-privacy-speechrecognition-disabled.xml
 (#34505)

- Uses randomly generated UUID for the CmdID as required by [CmdID
Specs](https://learn.microsoft.com/en-us/openspecs/windows_protocols/ms-mdm/d7321df8-ecb2-4c81-8a24-54630bc7456f)
- Created **Device** profile to disable the setting as required based on
[Microsoft
Docs](https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-system#bootstartdriverinitialization)
- Profiles return as **Verified** in FleetUI
- Event Viewer shows no errors
- Ability to enable service disabled

<img width="1025" height="406" alt="image"
src="https://github.com/user-attachments/assets/13efdd05-7248-4dc5-b41f-0d550b3c3f0e"
/>

---------

Co-authored-by: Dale Ribeiro <dale@fleetdm.com>
---
 ...ows-device-privacy-speechrecognition-disabled.xml | 12 ++++++++++++
 1 file changed, 12 insertions(+)
 create mode 100644 docs/solutions/windows/configuration-profiles/windows-device-privacy-speechrecognition-disabled.xml

diff --git a/docs/solutions/windows/configuration-profiles/windows-device-privacy-speechrecognition-disabled.xml b/docs/solutions/windows/configuration-profiles/windows-device-privacy-speechrecognition-disabled.xml
new file mode 100644
index 0000000000..86afe426ed
--- /dev/null
+++ b/docs/solutions/windows/configuration-profiles/windows-device-privacy-speechrecognition-disabled.xml
@@ -0,0 +1,12 @@
+<Replace>
+  <Item>
+    <Target>
+      <LocURI>./Device/Vendor/MSFT/Policy/Config/Privacy/AllowInputPersonalization</LocURI>
+    </Target>
+    <Meta>
+      <Format xmlns="syncml:metinf">int</Format>
+    </Meta>
+    <Data>0</Data>
+  </Item>
+</Replace>
+