one thing to remember is that window servers are deployed with GPO pre-configured, so you don’t usually see these unless admins leave them at their defaults. plus enterprise/education can turn off tracking using the same mechanisms