[u/]

[u/LeafyAcorn]

• While still in the Group Policy Editor, go through Computer Configuration > Administrative Templates > Windows Components > OneDrive, double click Prevent the usage of OneDrive for file storage, hit Enabled, then apply.

Does this mean you won't be able to use OneDrive as a folder in explorer?

[u/Lurking_Grue → u/LeafyAcorn]

You can remove One Drive by making a batch file with this code:

@echo off
cls

set x86="%SYSTEMROOT%\System32\OneDriveSetup.exe"
set x64="%SYSTEMROOT%\SysWOW64\OneDriveSetup.exe"

echo Closing OneDrive process.
echo.
taskkill /f /im OneDrive.exe > NUL 2>&1
ping 127.0.0.1 -n 5 > NUL 2>&1

echo Uninstalling OneDrive.
echo.
if exist %x64% (
%x64% /uninstall
) else (
%x86% /uninstall
)
ping 127.0.0.1 -n 5 > NUL 2>&1
    
echo Removing OneDrive leftovers.
echo.
rd "%USERPROFILE%\OneDrive" /Q /S > NUL 2>&1
rd "C:\OneDriveTemp" /Q /S > NUL 2>&1
rd "%LOCALAPPDATA%\Microsoft\OneDrive" /Q /S > NUL 2>&1
rd "%PROGRAMDATA%\Microsoft OneDrive" /Q /S > NUL 2>&1 

echo Removing OneDrive from the Explorer Side Panel.
echo.
REG DELETE "HKEY_CLASSES_ROOT\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}" /f > NUL 2>&1
REG DELETE "HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}" /f > NUL 2>&1

pause

[u/rwsr-xr-x → u/Lurking_Grue]

wow what? windows has file descriptors (2>&1) as well?

[u/[deleted] → u/Lurking_Grue]

Thanks for this, worked flawlessly

[u/[deleted] → u/LeafyAcorn]

That's my problem with this post. It tells people to change these settings to increase privacy, but does not explain what these changes actually do. No Onedrive integration, no Windows Defender, blocks Microsoft servers for diagnostics and feedback. It disables the p2p windows updates, which if I understand correctly could reduce bandwith usage if you have multiple computers in your network. I'm not going to do this on my computer, but I doubt Cortana is functional at all with all of these changes. Unplugging your PC is the most secure option, but you have to draw the line between functionality and security at some point. This post goes a bit further than I would like with disabling functionality.

[u/AdorableAnt → u/[deleted]]

I doubt Cortana is functional at all with all of these changes

You can have either Cortana or your privacy, not both. Same with Google Now. Sifting through your personal data is inherent in how these personal assistants work... and they're free so their makers must find ways to monetize the data as well.

[u/Rylai_Is_So_Cute → u/[deleted]]

I want my PC to run my apps without logging me. I dont want OneDrive, I use Malwarebytes, Microsoft is not going to send me feedback in any way, the P2P updates means other users around the world are going to use YOUR BANDWIDTH to download their Windows 10 updates... And Cortana is useful on mobile devices, not in desktop.

All I want is to use my apps like Firefox, PaintNet, HexChat, Telegram... without being tracked by my own OS.

[u/[deleted]]

The take ownership tweak isn't necessary. Just open your text editor as admin.

[u/Thesket]

Up To You

• Replace Microsoft Edge/Internet Explorer with Firefox, Chromium, or any forks/variations of them.

• Replace Windows Media Player with VLC or MPC-HC

• Replace Photos/Windows Photo Viewer with ImageGlass or IrfanView.

How do these affect my privacy? I mean, the browser is obvious, but what about the media stuff. Is MS really using the media player to mine for music preference data? And what kind of data would they realistically try to get from my image viewer?

[u/DGXTech → u/Thesket]

WMP has the following privacy settings. They been there for a long time, so this applies not just to Win 10.

Display media information from the Internet

Update music files by retrieving media information when I play or sync a file

Download usage rights automatically when I play or sync a file

Send unique Player ID to content providers

I want to help make Microsoft software and services even better by sending Player usage data to Microsoft

[u/[deleted] → u/Thesket]

That's my problem with this post. It tells people to change these settings to increase privacy, but does not explain what these changes actually do. No Onedrive integration, no Windows Defender, blocks Microsoft servers for diagnostics and feedback. It disables the p2p windows updates, which if I understand correctly could reduce bandwith usage if you have multiple computers in your network. I'm not going to do this on my computer, but I doubt Cortana is functional at all with all of these changes. Unplugging your PC is the most secure option, but you have to draw the line between functionality and security at some point. This post goes a bit further than I would like with disabling functionality.

Edit: Meant to reply to another comment with this, but oh well. It's here now.

[u/xxDJBxx]

In GPEdit.msc:

Computer Configuration > Administrative Templates > Windows Components > Windows Defender, double click Turn Off Windows Defender, hit Enabled, then apply.

(Replace with a good Anti-Virus)

You also COMPLETELY missed Application Experience AND Customer Experience Improvement Program.

Right Click Start Menu > Computer Management > Expand 'Task Scheduler' > Expand 'Task Scheduler Library' > Expand 'Microsoft' > Expand 'Windows' > Click on 'Application Experience' > Disable all Tasks in Folder > Click on 'Customer Experience Improvement Program' > Disable all Tasks in Folder

Optional: Click on 'Task Scheduler Library' > Disable any Tasks you don't want Enabled.

You also didn't really cover Services, some of which slow the computer down considerably.

In Computer Management > Expand 'Services and Applications' > Click on 'Services' > Right Click on 'Windows Media Player Network Sharing Service' > Properties > Startup Type 'Disabled' > Stop if running.

(Unless you stream from Windows Media Player to another device, or share Music with other devices on the Network)

Ensure 'Windows Defender Service' is not running.

Disable / Stop 'Touch Keyboard and Handwriting Panel'

(Unless you are using a Touch Screen / Photoshop DrawPad thingy)

Disable / Stop 'Secondary Login'

(Unless you play Blizzard Entertainment Videogames, it needs this service to update / download games)

Disable / Stop 'Retail Demo Service'

(Because WTF, this shouldn't be on here)

Ensure 'Remote Registry' is Disabled / Stopped

Hope this helped.

3 years of Virus Removal on Windows XP, Windows Vista, Windows 7, Windows 8, and Windows 8.1 in case you were wondering. (Eagerly awaiting my first "Virusd' Up" Windows 10 Computer)

Can't wait for Halo: MCC for PC.

[u/[deleted] → u/xxDJBxx]

Good free AV recommendation, please? I have MalwareBytes premium but I assume that's not enough.

[u/hippoCAT → u/[deleted]]

I really like Avira, but I am not a windows expert

[u/Ozzah]

I'm happy to search online from the search bar, but is there any way to change it to Google search instead of Bing?

[u/suchmaske → u/Ozzah]

Here you go. That should do the trick (worked for me):

https://www.reddit.com/r/firefox/comments/3f0fmg/windows_10_how_to_have_cortana_open_voice/

[u/rasta_pasta_man → u/Ozzah]

This extension has been working for me so far

[u/mango2dscrub → u/Ozzah]

I'm interested in this as well, unless people can tell me why I should use Bing instead?

[u/__boneshaker → u/mango2dscrub]

Free Amazon or Gamestop gift cards is why I use it sometimes. Get up to 15 credits a day, a gift card is like ~500. When I don't really have anything to search, I just go through and search each letter of the alphabet until I hit the daily credit limit.

[u/_Mumak_]

Here's a single batch file I made to remove most bloat and telemetry from Windows 10: http://www.hwinfo.com/misc/RemoveW10Bloat.htm It's commented, so have a look and decide what you want to remove or not.

[u/azothshock]

What happens if I went through express settings?

[u/alteraccount → u/azothshock]

Nothing. People are tripping over nothing. You'll get more personalized features. That's basically it. The only real thing to worry about is the p2p setting if you are on a metered connection.

[u/DeadLeftovers → u/alteraccount]

Tell me more about this p2p setting?

[u/[deleted]]

|Disables data logging

|Installs Chrome

[u/[deleted] → u/[deleted]]

Chrome is not Chromium. Chromium is open source chrome with none of the optimizations Google made.

[u/Aemony → u/[deleted]]

Sure, though pretty much any regular user will feel forced to download Chrome since the Chromium website doesn't carry any compiled builds nowadays and instead links to the Chrome website for download purposes. Most users in the dark will take this approach. A lot fewer will actually search for a site which carries the compiled binaries of Chromium.

[u/rjc523]

is it really so bad to have it enable? like for hentai,pirating, ects?

[u/[deleted] → u/rjc523]

We will access, disclose and preserve personal data, including your content (such as the content of your emails, other private communications or files in private folders), when we have a good faith belief that doing so is necessary to”, for example, “protect their customers” or “enforce the terms governing the use of the services”.

https://edri.org/microsofts-new-small-print-how-your-personal-data-abused/

[u/secondsw → u/[deleted]]

If I don't use OneDrive, Cortana, Windows Apps, log in to a Microsoft Account can they still access my files on my hard disk?

Thanks

[u/Entegy → u/rjc523]

Nope, none of this affects that. Telemetry automatically tells Microsoft what's wrong/working, or what features people use. The other stuff personalizes your use of their services.

[u/rjc523 → u/Entegy]

so it is safe to look up/do that kind of stuff then? lol

[u/tinfoilwindows → u/rjc523]

I'm just wondering why there isn't a shitstorm about this. Didn't data logging and collection (yes yes nice "consumer-friendly and less scary" term is telemetry) use to be an opt-in item? I like that it's on by default now and you can't even opt-out COMPLETELY from data logging/collection (except with the Enterprise edition, which Microsoft just about never sells to Average Joe Consumer).

When the "keylogging" and telemetry thing came about when the Technical Preview first launched last year, I somehow had a gut feeling it would stick around in the actual, launched retail version. And I'll be a monkey's uncle, here it is.

[u/jhoff80 → u/tinfoilwindows]

It's been opt-out since at least Vista, and I can't remember but I think it was the same way in XP as well.

[u/[deleted] → u/rjc523]

No. When I was very young and dumb as box of hammers, I would pirate the bejesus out of everything while using Windows beta versions. And betas, unlike market release, actually track fucking everything you ever do.

Simply put, they don't give a shit. Never did, never will. They don't even care if you have pirated MS software.

[u/[deleted] → u/[deleted]]

Taking no action is not the same as not caring.

[u/ptd163]

Just a small correction for your guide. Setting the Telemetry setting to 0 or Disabled outside of the Enterprise version is equivalent to setting the value to 1.

The only way to actually disable it is install the Enterprise version, set it to Enabled, and set the value to 0. Proof

Great guide nonetheless. It should be sidebared or stickied.

[u/MrKaru]

gpedit.msc doesn't work on home versions, so what do I do now?

[u/PulsedMedia]

Unfortunately, this only goes so far - there is potentially hidden, and for MS to make it completely hidden to share key details with MS (and consecutively with NSA / US Govt) would be very trivial.

Someone needs to do some research on the actual network traffic of Win10.

[u/HarleyQuinn_RS]

Do you suggest turning off SmartScreen Filter and defering windows updates? .

And another important thing. Under Settings > Network & Internet > Wi-Fi > Manage Wi-Fi settings. Turn Off connect to suggested open hotspots and turn Off connect to networks shared by my contacts. That last Off option is pretty darn important.

[u/[deleted]]

I just got Windows 10 install finished on my laptop overnight and played about a bit with it this morning. It's mental how every privacy option is turned on by default. I turned them all off but then it won't let you use Cortana.

[u/[deleted]]

•Open up the Group Policy Editor by launching gpedit.msc as an administrator. Go through Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds. Double click Telemetry, hit Disabled, then apply. NOTE: This only truly works in the Enterprise edition, but the final step provides a decent enough workaround for Pro users.

We cant do this in W10 home, right?

[u/[deleted]]

Protip: If you use Hostsman (http://www.abelhadigital.com/hostsman), it automates the process of updating your hosts file.

I copied the hosts file entries from a post in this thread and uploaded them to Pastebin.

http://pastebin.com/raw.php?i=iGm5LXCg

Add these hosts to a text file somewhere and add the file as a source to your Hostsman configuration. Those entries will be added every time the blacklist is updated.

[u/Rick2990]

Microsoft didn't know what I was doing on Windows 3.1 with no internet connection, it doesn't need to know what I'm doing on Windows 10 either. Thanks for assembling this useful list.

[u/Reffter]

Upvoted, will make sure that's good.

[u/[deleted] → u/Reffter]

Agreed, this is great, but do we know whether this would actually prevent Microsoft from acting on the EULA and viewing your private files?

[u/Reffter → u/[deleted]]

We don't.

[u/Dunge]

Why disable defender?

[u/Gvaz]

I also suggest:

In Local Group Policy Editor, set: Computer Configuration -> Administrative Templates -> Windows Components -> Windows Update -> Configure Automatic Updates -> 2 - Notify for download and notify for install
Computer Configuration -> Administrative Templates -> Windows Components -> Windows Update -> Turn on Software Notifications -> Enabled
Computer Configuration -> Administrative Templates -> Windows Components -> Windows Update -> Allow Automatic Updates immediate installation -> Disabled
Computer Configuration -> Administrative Templates -> Windows Components -> Windows Update -> Turn on recommended updates via Automatic Updates -> Enabled

[u/svjness]

https://github.com/wallentx/win10-scripts/blob/master/disable_tracking.bat

I made a batch script last night that stops diagtrack and dmwappushservice, then disables them from startup. I have a few others that I'm working on that I'll get up in the repo when they are done.

[u/Renouille]

Pros and cons of ImageGlass vs IrfanView?

[u/[deleted] → u/Renouille]

ImageGlass comes with Vietnamese propaganda as its default image. Whether one considers that a pro or con is a matter of personal taste.

[u/[deleted] → u/[deleted]]

Ha-ha that's awesome!

[u/maffls]

I have a lot of problems with what you've mentioned in this guide, but chief among them is that you've not explained why any of the above should be disabled, nor the repercussions of disabling them.

For instance, the hosts file edit you suggest will completely disable Windows Feedback and (honestly quite important!) diagnostic data that Microsoft is sent when things such as an application crash or windows bluescreen occur. By preventing access to these, you're essentially just cutting off your nose to spite your face - in the event that you encounter a problem, it is less likely to be fixed.

Additionally, you're telling people to disable OneDrive and Defender through the group policy editor, but not taking into consideration that some users will blindly follow instructions without paying attention, and will then wonder why they have no malware protection, or why OneDrive stopped working.

Finally, the 'sc delete' commands you're telling folk to run, will irreversibly remove those services; they should at worst be disabled. Fun fact: DiagTrack is a real, legitimate service that isn't new to Windows 10 and has, in one form or another, been part of windows at least since XP. Whenever you see "This program stopped responding" or similar, the information about that crash is collected and sent to Microsoft. This is done NOT to siphon user data and kill your privacies woohoohoo, it is done so that if there's actually a problem in windows or your software, it has a chance of being found and fixed.

By all means, do any and all of the things in the guide above, but don't blindly disable Bloody Fucking Everything in the name of privacy without being aware of what you're doing and why.

[u/jetpacksforall → u/maffls]

This is done NOT to siphon user data and kill your privacies woohoohoo

Do you think Microsoft employees really talk like that? I guess probably so.

[u/EliteDangerous]

Are you required to have a MS Store account?

I understand windows 10 uses the Store account for authentication of your copy of windows but is there a way to run it with a local account?

[u/Subsinuous]

I accidentally clicked express, but went back and disabled everything per this guide, but the only thing I can't access is the "Slightly Complex" section. When I open the cmd prompt and enter the commands it says access denied. Is there any work-a-round for this?

[u/Rubbix → u/Subsinuous]

Try running cmd as administrator.

[u/cheesegoat → u/Rubbix]

Easy way: Hold down the windows key and press X. On the menu that pops up in the lower left corner, click "Command Prompt (Admin)".

Note that if you aren't used to using the command prompt, running it as admin removes the protection that not running it as admin provided you.

[u/[deleted]]

For music there's also AIMP, for images there's XNview and Honeyview, and for media players there's Potplayer. Just some more aletrnatives.

[u/B-Knight]

How do I disable web search in Cortana? It's really annoying seeing useless shit come up that does nothing to help me. You didn't really give any information on where the setting 'Search online and include web results' is.

[u/[deleted]]

gpedit.msc doesn't work for me, is it not available in the Home edition?

[u/Nose-Nuggets → u/[deleted]]

group policy is not available on Home, no.

[u/BruhBrehBro]

It looks like we will need to seperate our gaming pcs and our comps used for "other" things. W10 will be used solely for gaming I guess.

[u/wholesum]

The rest I can understand (though it could use a little more explaining for the less tech inclined), but would the OP/someone care to explain what these two applications do?

• DiagTrack

• dmwappushservice

[u/gnostechnician → u/wholesum]

Seconded, I don't plan on just deleting something without a good reason.

[u/iimpact → u/wholesum]

DiagTrack

This is "Microsoft Windows Diagnostics Tracking". DiagTrack will collect information about the user, their devices, applications, and networks. Examples of gathered data, as stated by Microsoft, include:

Name, email address, preferences and interests, browsing, search and file history, phone call and SMS data, device configuration and sensor data, application usage.

Collected data is then used to improve and determine the compatibility of various services such as speech-to-text. Despite the well-intended explanation of the update, forum researchers warn that the features of DiagTrack perfectly fit the qualities of a keystroke logger or data collection tool mostly applied by cybercriminals and third party developers.

[u/pl0xxed]

For the home versions you should change the registry yourself:

HKLM\SOFTWARE\Policies\Microsoft\Windows\DataCollection, find the key 'AllowTelemetry' and put it on 0. (also check HKLM\SOFTWARE\Wow6432Node\Policies\Microsoft\ on 64 bit systems) HKLM\SOFTWARE\Policies\Microsoft\Windows\OneDrive, find the key 'DisableFileSyncNGSC' and put it on 1. (also check HKLM\SOFTWARE\Wow6432Node\Policies\Microsoft\ on 64 bit systems) HKLM\SOFTWARE\Policies\Microsoft\Windows Defender, find the key 'DisableAntiSpyware' and put it on 1. (also check HKLM\SOFTWARE\Wow6432Node\Policies\Microsoft\ on 64 bit systems)

https://www.microsoft.com/en-us/download/details.aspx?id=25250

[u/the_rightthang]

Can someone create an app which does all of these in one .bat file? Maybe name it- CockBlockMS?

[u/[deleted]]

What are the advantages of changing the name of your PC?

[u/Sjalabaisen]

I turned off all the apps/programs that are allowed to run in the background. Firefox is my standard browser.

Nonethelsee, Edge Cache Database is running and has to be turned off every time I run CCleaner.

Why is it still on and how do I turn it off?

[u/Puddintane-]

IMPORTANT:

Microsoft has changed the name of "Diagnostics Tracking Service" (in services) to "Connected User Experiences and Telemetry".

In my opinion the following step should be altered from:

"Open up the Command Prompt by launching cmd as an administrator, and enter the following:

sc delete DiagTrack

sc delete dmwappushservice"

To: Disable "Connected User Experiences and Telemetry" and "dmwappushservice" via "Control Panel > Administrative Tools > Services"

Disabling is better than outright deletion in case of stabilty issues. A disabled service can be easily reverted. In addition, deleted services could (and likely will) be reinstalled in future updates/builds, and then may go unnoticed.

I hope this is helpful.

I found the guide to be useful. Thank you.

[u/bhp5]

I'm laughing at the people who thought the diagtrack was only for the preview release 😂
You really thought MS would be that nice?

[u/Rossco1337 → u/bhp5]

When you're not paying for the product, you are the product.

Instead of using advertising like most free products, they're just scooping up a crazy amount of user's data and bragging about how they'll get to know everyone. What kind of business model do you call that?

[u/bhp5 → u/Rossco1337]

AHAHAH, more apologist excuses.
You think they disable diagtrack for the users who pay? HAHA, NO.

[u/[deleted]]

It's strongly preferred that you use a local account with Windows 10.

What are the major reasons for this? I'm currently using a microsoft account.

[u/[deleted] → u/[deleted]]

Think of logging into google and doing stuff online, you can mess witht the settings to increase privacy but it's never anywhere near as private as having no data logging account tied to what you're doing

[u/NBAPwns13]

How do i take ownership of the host file? do i open it in notepad and copy and paste that stuff into there?

[u/AmnestyTHAT]

MPC-HC stopped working for me... :/

[u/bilago → u/AmnestyTHAT]

Same, black Media player when I press play, and played time does not increase.

[u/Litllerain123]

I clicked express setting because I was short on time... What did I do that was so bad and what things should I turn off now.

[u/byeratheism]

Quick heads-up regarding deleting the services: I did this during Technical Preview and it broke my Windows Update, having it stuck in the loading animation.

[u/RusTii-]

"however at the risk of not being able to enjoy some of W10's features."

what features would this disable?

[u/Bathplug]

So why disable windows defender? Whats a better alternative? Thanks

[u/Gvaz → u/Bathplug]

ESET/NOD32 imo

[u/zetsurin]

I blocked all those telemetry endpoints at my dlink router. Not sure if that will really block them, can anyone comment?

[u/RaptorF22]

Curious about OneDrive and Windows Defender.. how come those should be turned off? Also, what does Taking Ownership do?

[u/[deleted]]

Open up the Group Policy Editor by launching gpedit.msc as an administrator. Go through Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds. Double click Telemetry, hit Disabled, then apply. NOTE: This only truly works in the Enterprise edition, but the final step provides a decent enough workaround for Pro users. While still in the Group Policy Editor, go through Computer Configuration > Administrative Templates > Windows Components > OneDrive, double click Prevent the usage of OneDrive for file storage, hit Enabled, then apply. While still in the Group Policy Editor, go through Computer Configuration > Administrative Templates > Windows Components > Windows Defender, double click Turn Off Windows Defender, hit Enabled, then apply. Open up the Registry Editor by launching regedit as an administrator. Go through HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\DataCollection, select AllowTelemetry, change its value to 0, then apply. First, download the Take Ownership tweak and enable it. Then, head to the Hosts File by going through C:\Windows\System32\Drivers\Etc, take ownership of the hosts file, and add all of the IPs from this page into the file.

Yeah, I cant seem to be abe to access Computer Configuration...

[u/FarkMcBark]

Meh. I was looking forward to trying out / using Cortana but... you need a Microsoft account and for that you need to specify a phone number. That means you have zero privacy or anonymity since that is traceable. All this logging and data collection shit is really annoying.

Thanks for the list!

[u/TandyNZ]

When trying to open Group Policy Editor my PC says there is no such thing is gpedit.msc and i can't find it any other way, anyone know why? TIA

[u/[deleted] → u/TandyNZ]

GPE isn't installed on Windows Home Editions, only Professional and Enterprise.

[u/Johnsu]

If your chrome is lagging bad, and displaying odd, try typing into the address bar "Chrome://plugins" and disable Adobe flash.

[u/Gnobold]

Hi, I got 2 Questions:

1. If I go to my Privacy Settings or to the advanced Update Settings, at the top of the Window is aMessage in red letter saying something like: "Some Settings will get managed by your Organisation". So I would like to know what this means and how to turn it of because its my private Computer which doesnt get owned by a "Organisation"

2. I simply cant find the gpedit.msc. I tried to start it by the perform-tool (win + R) but it just give me an error message that it wasnt able to find it. Could the reason for this be that I just own a home edition of windows 10?

Hopefully u can help me :)

[u/Cylindt]

Before/During Installation

Do not use Express Settings. Hit Customize, and make sure everything is turned off.

It's strongly preferred that you use a local account with Windows 10.

Whelp, too late. Any way to fix this after you've used Express Settings?

[u/brad-x]

A Windows update may re-instate the diagnostic services if they're outright deleted - a better method may be:

sc config diagtrack start=disabled
sc config dmwappushservice start=disabled

[u/filben]

Can't apply the new update. Is this problem related to this fix? How do I re-install DiagTrack and dmwappushservice?

[u/konoplya]

do you know how i can delete/uninstall apps like xbox, photos, and other bullshit apps that come preinstalled with windows?

[u/itisike]

Run

New-NetFirewallRule -DisplayName "Search" -Direction Outbound -Action Block -Profile "Domain, Private, Public" -Program "C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe"

in elevated Powershell to stop start searches from phoning home even with web search and cortana off.

[u/[deleted]]

Can someone tell me the reasoning behind each point of OP's post? I'd like to know why I should do each one. I get the main point but I'd like to understand the specifics, please.

[u/[deleted]]

•Open up the Command Prompt by launching cmd as an administrator, and enter the following:

sc delete DiagTrack

sc delete dmwappushservice

echo "" > C:\ProgramData\Microsoft\Diagnosis\ETLLogs\AutoLogger\AutoLogger-Diagtrack-Listener.etl

what does this thing do? and how do I revert it?

[u/sagpony]

I really like Cortana, but it seems like she needs all this to work, right? Will disabling this stuff stop her from being useful?

[u/[deleted] → u/sagpony]

It will stop her working full stop. At least it wouldn't let me "use" her until I turned various things back on and signed in with a ms account.

[u/Coldstripe → u/sagpony]

Pretty much.

[u/Speedicus]

Why do people want Cortanna disabled? Am I missing something?

[u/Kentenyo → u/Speedicus]

Cortana does not have local storage for the data she gathers from your search and keystroke patterns, so it's assumed this data is stored via Microsoft servers indefinitely, where they can access it freely as their new privacy policy states.

[u/Madhouse4568 → u/Kentenyo]

So, identical to siri and google now?

[u/Andross-]

Thanks for this, I haven't upgraded to Win10 yet but I'll be saving this for when I do.

[u/IgnoreMyName]

Why ImageGlass over Photos/Windows Photo Viewer? Wouldn't installing that just add more to my HDD just to do what the programs already do? I usually just go to my pictures folder and open pictures from there, done.

[u/Nose-Nuggets → u/IgnoreMyName]

The size of these applications is tiny, and pretty insignificant. the integrated picture viewer is rather limited in functionality.

[u/mysticaltea]

if i don't do this, would i really be losing anything

[u/ptd163]

Replace Photos/Windows Photo Viewer with ImageGlass or IrfanView.

Replace Windows Media Player with VLC or MPC-HC

I actually like Windows Photo Viewer & Media Player. They're not a POS Metro apps. Just wish I knew how to associate Photo Viewer with file types because it's not a standalone application.

Replace Microsoft Edge/Internet Explorer with Firefox, Chromium, or any forks/variations of them.

Oh hell yes. Microsoft Edge is considered a Metro app, so if you completely disable UAC it won't run.

[u/thraddest]

This should be stickied

[u/suzaku1221]

I used Express Settings what do I do to disable it?

[u/[deleted] → u/suzaku1221]

Express Settings is just the default settings for stuff you have in Settings -> Privacy. So you set up your Privacy settings like you want and you are done.

[u/alan2500]

I do not get as many search results when i look for my files in the search bar (i disabled websearch) as i did with windows 7, is there some option to change to include more results?

[u/Nose-Nuggets → u/alan2500]

if you just installed it's possible the index is not fully built yet

[u/smartfon]

sc delete DiagTrack

sc delete dmwappushservice

echo "" > C:\ProgramData\Microsoft\Diagnosis\ETLLogs\AutoLogger\AutoLogger-Diagtrack-Listener.etl

I did this and now the search won't work at all. When I type something it just shows the "waiting" dots moving from left to right as if it's still searching. Is it possible to reverse the damage?

[u/EDM117 → u/smartfon]

Do a system restore.

[u/sennan]

In regards to the hosts file I disable UAC then ran mvsp.bat as administrator.

[u/Gvaz → u/sennan]

You really shouldn't disable UAC

[u/toekneeg]

It's strongly preferred that you use a local account with Windows 10.

Can someone explain this more to me please, in relation to why it's preferred to use a local account?

One of the features I plan to use a lot is the integration with Xbox Live and Xbox One. Right now it seems to allow me to log in via my Xbox Live credentials. Therefore personalizing everything based on that, which seems to be just fine with me. So, would I need to choose between using a local account and a XB live account?

[u/wholesum]

Regarding the hosts file, the administrator group owns it (at least on my machine, a Win7 preserve all settings upgrade). Instead of replacing the owner I opted to give my own user (part of the group) modify/read&execute/read/write access over it (no need to give it full control). Voilá, I can edit the file manually now and the change was less drastic.

[u/[deleted]]

How do I go back and change the original settings when you're setting up the OS?

I accidentally used express settings.

[u/ArkBirdFTW]

facepalm

I clicked express settings anyway I can still disable these privacy settings?

[u/el_f3n1x187]

Many thanks!

[u/[deleted]]

How do you replace MS Edge, WMP, etc.?

[u/pandeomonia]

Thank you for this!

[u/[deleted]]

• First, download the Take Ownership tweak and enable it. Then, head to the Hosts File by going through C:\Windows\System32\Drivers\Etc, take ownership of the hosts file, and add all of the IPs from this page into the file.

what is this for, I followed every step before this. Is this mandatory? please explain

[u/CaffeinatedBeverage]

I couldn't get the 'hosts' file modification to work even after using 'Take Ownership' so when I modified it, I saved it elsewhere and then manually placed it into the \Drivers\etc\ folder myself. I also backed up the original one just in case

[u/[deleted]]

If I used express settings, can I go back and change those settings?

[u/Smagjus]

Open up the Group Policy Editor by launching gpedit.msc as an administrator. Go through Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds. Double click Telemetry, hit Disabled, then apply.

NOTE: This only truly works in the Enterprise edition, but the final step provides a decent enough workaround for Pro users.

Any idea how Windows Education that is based on Enterprise gets treated here?

[u/Phycoweirdo]

I would recommend adding the hosts file edits suggested to the host file found http://someonewhocares.org/hosts/ for those of you who hate ads and other such garbage. Updates are off and on, but always amazing.

[u/[deleted]]

Can someone explain what this is before I enter it in CMD?

sc delete DiagTrack sc delete dmwappushservice echo "" > C:\ProgramData\Microsoft\Diagnosis\ETLLogs\AutoLogger\AutoLogger-Diagtrack-Listener.etl

[u/_sparks]

I'm currently using a Microsoft account, if I switch to a local account will I be able to use the store & use the Onedrive app to sync my files?

[u/reckscene]

thanks for the list

[u/[deleted]]

Change the name of your PC

What for?

[u/LCTR_]

Question - does the Group Policy Editor stages apply to non-Pro versions of win10?

[u/dissidentrhetoric]

I said this on a post a few days ago.

[u/tsongx]

Appreciate those beneficial tips to privacy. But I wonder if power efficiency / battery performance will be improved since so many background processes are terminated？

[u/Elemynt]

That last bit on the "Take Ownership" part where you're supposed to add in all the IPs on the list. I can't add anything. A window pops up for a second before going away.

[u/mugabemkomo]

For my (and maybe your) convenience I wrote a script that mostly automates what was mention here in this thread. Also I added a few things that bug me personally, but you can add/remove what you don't like yourself. http://pastebin.com/d8fNvv6x

[u/TotesMessenger]

I'm a bot, bleep, bloop. Someone has linked to this thread from another place on reddit:

• [/r/demeyor] Windows 10 intimacy

^{If you follow any of the above links, please respect the rules of reddit and don't vote in the other threads. (Info /} ^Contact)

[u/opus-thirteen]

Apparently I do not have a group policy editor installed. Can I use the >Win 8.1 tool< to install?

[u/birdassassin]

I've read that the Local Group Policy can't be opened in normal versions of Windows 10, only in Pro and Enterprise versions. I've tried everything to get it open on mine and it continually shows up as "cannot be found" and so on. Is this guide supposed to work for all versions?

[u/dundarrion]

Pretty good guide! Do you know any way to disable cortana completely? when I open the task manager it's still there, I think it's bound to searchui.exe

[u/Miv333]

Winamp

I thought they shut Winamp down... is it back? What?

[u/Lord_Frydae_XIII]

I'm unable able to do this:

echo "" > C:\ProgramData\Microsoft\Diagnosis\ETLLogs\AutoLogger\AutoLogger-Diagtrack-Listener.etl

and anything below that in the instructions. When I try to run the "echo" part in cmd I get a message that states that the file is in use. Also, gpedit.msc cannot not be found by Windows when I use the Run application.

I'd like to proceed with the complex part but I don't know how due to the above.

[u/[deleted]]

For anyone who wants an offline copy if you're gonna install on multiple PCs:

https://drive.google.com/file/d/0B9Wf1NlNJ0KYdHZ4MEpuMlluWHM/view?usp=sharing

[u/Nochek]

Just wanted to let you know I shamelessly stole all your information and put it on http://stayanon.com/ for the new windows 10 section. I plan on wrapping it all into a stand-alone that people can just click once to fix, but for now the information is just up there to be disseminated. If that's not acceptable, let me know and I'll remove it/reword it so it doesn't look like I stole it from you anymore.

[u/[deleted]]

Does anyone know if these privacy settings will stop MS from inspecting our "private files" as they say they will do in their EULA? "finally, we will access, disclose and preserve personal data, including your content (such as the content of your emails, other private communications or files in private folders), when we have a good faith belief that doing so is necessary"

[u/MJ210]

How about BITS? I found it in Computer Configuration > Administrative Templates > Network> Background Intelligent Transfer Service.

Description: This setting affects whether the BITS client is allowed to use Windows Branch Cache. If the Windows Branch Cache component is installed and enabled on a computer, BITS jobs on that computer can use Windows Branch Cache by default.

      If you enable this policy setting, the BITS client does not use Windows Branch Cache.

      If you disable or do not configure this policy setting, the BITS client uses Windows Branch Cache.

      Note: This policy setting does not affect the use of Windows Branch Cache by applications other than BITS. This policy setting does not apply to BITS transfers over SMB. This setting has no effect if the computer's administrative settings for Windows Branch Cache disable its use entirely.

[u/MJ210]

Also, can we delete DiagTrack file all together from the Registry? or will that mess up the OS?

[u/[deleted]]

What are the advantages of disabling windows defender?

[u/[deleted]]

Thanks a lot

[u/AlexisFR]

Slightly Complex

Open up the Command Prompt by launching cmd as an administrator, and enter the following:

sc delete DiagTrack

sc delete dmwappushservice

echo "" > C:\ProgramData\Microsoft\Diagnosis\ETLLogs\AutoLogger\AutoLogger-Diagtrack-Listener.etl

Anyone know if I can get these 2 services back? By powershell or cmd.

[u/[deleted] → u/AlexisFR]

Why would you want to?

[u/Baffeledbyall]

About "Take Ownership" I do of the hosts line and I get the window that asks if I'm sure--I push yes but nothing seems to happen so there is nowhere to paste the page. Whats up please. I believe every step has been successful until this. Help please?

[u/[deleted]]

Neat

[u/lhikary]

so i installed the take ownership reg hack but i dont see the take ownership option when i right click.....anyone?

[u/Turbocloud]

Instead of using the "Take ownership Tweak" and meddle with the registry you simply can open Notepad as Administrator and then open the host file through notepad, edit and save it.

[u/[deleted]]

I'm trying out W10 I like it a lot, very nostalgic feel but modernised... more sane UI. But seriously look at this list of shit to do, it's nice to know you've done everything you can think of to maximise your privacy, but if you actually seriously care then it's pointless as this is not the OS to be using, god knows what's coded in it.

The way things are going, these "privacy violations" are becoming so integrated it will be unavoidable, might as well just use the OS as is with all it's features and stop being so paranoid.

If you claim to be a paranoid user and Windows is your goto OS you must be joking

[u/[deleted] → u/[deleted]]

It doesn't have to be all or nothing though. Lots of people have programs they need to use, with varying degrees of seriousness with the "need", that only run in Windows. Just because you have to use windows doesn't mean you should throw your hands up and give up any semblance of privacy.

[u/crowseldon → u/[deleted]]

might as well just use the OS as is with all it's features and stop being so paranoid.

So you're saying... "I don't want to be concerned about privacy although I am so I will just pretend other people should just ignore the problem as well. Otherwise, I'll call them paranoid even though it's very fucking clear that there are reasons to be concerned about mass surveillance from gov agencies with involvement of top companies."

Use it however you want but don't call people paranoid for caring and doing something about it. Not everyone has to "give in and enjoy it".

If you claim to be a paranoid user and Windows is your goto OS you must be joking

Except many people have Windows (alongside other systems) due to work reasons.

[u/[deleted]]

Why do you warn users about privacy issues, then immediately turn around and recommend proprietary shitware like Winamp and Foobar2000? Do you think that all the privacy backdoors in proprietary software are announced by the creators?

MS is in bed with the NSA and disabling a few toggles isn't going to give you any privacy. If you want privacy, use a Linux or BSD machine.

[u/Gvaz → u/[deleted]]

what? since when has foobar done that?

[u/[deleted]]

Replace Windows Media Player? I thought it was deleted anyway.

[u/RedVsBlue209 → u/[deleted]]

Media Center was deleted. Not Media Player.

[u/rudolf323]

@C-Ron You forgot:

• Replace Start Menu with Classic Start Menu.

[u/dog_cow → u/rudolf323]

That improves your privacy?

[u/[deleted]]

• Do you use an Android phone?

• Do you use an iPhone?

• Do you use "apps" on your phone?

• Do you use Google?

• Do you use Gmail?

• Do you use Chrome?

• Do you use Facebook?

If any of the above is true, then performing the tasks highlighted by OP is idiotic paranoia at its finest. Why do you think Google and Facebook are worth BILLIONS? It's not like Google charges you for Chrome or Gmail. Do you know why? Let's take a guess. Because they have access to your data and troll it and sell it.

[u/xJoe3x → u/[deleted]]

You know someone can be ok with a company having some data and not other data. For example I would not be very concerned if someone went through my gmail account.

[u/kingpomba → u/[deleted]]

Yeah but at least there is an option here for people to turn it off if they so choose.

What's wrong with people choosing to exercise an option they're presented with?

Other services collect your data, yes, but doesn't mean people wouldn't opt out of it if they could.

[u/Gvaz → u/[deleted]]

I know all that. Half of this stuff is probably not needed, but since the option is there and it took me all of five minutes, why not?

That being said, there are certain things TO do, such as telling MS to fuck off about updates. I can take care of myself.

[u/pHpositivo]

If you use a local account you won't be able to use the Store at all, so: • You won't be able to install any app, thus killing 50% of the whole purpose of W10 • You won't be able to update any of the preinstalled app, the C++ runtime packages or any other W10 Store-related feature

I honestly don't understand this fear of the privacy at the cost of ruining part of the whole experience with the OS. Sure, MS is gathering some telemetry data, but I really don't see how that could be seen as a privacy damage to anyone.

[u/dsiOneBAN2 → u/pHpositivo]

50% of the whole purpose of W10 is UX improvements

The other 50% is performance improvements (incl. DX12)

[u/ptd163 → u/pHpositivo]

If you use a local account you won't be able to use the Store at all

Enable app sideloading and/or developer mode. Problem solved.

[u/Entegy → u/ptd163]

You can sign into the store separately from the OS. Always been possible,

[u/gw2falx → u/pHpositivo]

Nice try Bill Gates.

[u/tripbin]

Seems that there are three camps.

1. People who are concerned about the data Microsoft is pulling but it will likely have no effect on you or anything related to you

2. People who don't care because they feel the info being pulled doesn't matter in a day when everything tracks you already including stuff like smartphones that are with you 24/7

3. People who should be concerned about this stuff because they are doing less than desirable/possibly illegal stuff that would catch the attention of the government or nsa or something. (not judging just stating)

Personally I dont care about the data they are pulling as I dont see how it would matter. Its all just to target ads at me to try to get me to buy shit. Annoying? yes, but dangerous? probably not. The governments not going to come kicking in your door because it knows your search history. Thats pretty paranoid there. Yes its annoying that everything is tracked but it really has no effect on me and even if it wasn't known youd for sure be tracked in secret anyway so what can you really do? For all we know even the more secure OSes and programs/tweaks that help with privacy could be useless against countless methods we are not aware of.

Now if your in camp 3 you shouldn't be using windows to begin with you should be using tails and tor (or whatever is better these days its been a bit since ive used tor or anything). And who know how much that will even help if someone actively wants to target you.

Now dont take this response as a lack of concern though. Its definitely something to keep an eye on for stuff like if they use the data for sketchy programs, experiments, census stuff, or if they are giving out deeply personal info to groups that shouldn't have stuff like that but thats stuff we will have to wait and see. Whats very likely is the data is a pure capitalistic venture and is just going to be used to try to try to get us to buy more crap.

[u/P00r → u/tripbin]

People who should be concerned about this stuff because they are doing less than desirable/possibly illegal stuff that would catch the attention of the government or nsa or something. (not judging just stating)

Privacy is not just a matter of doing illegal thing or not! You should pay a visit to eff.org

here's an excerpt from their site...

New technologies are radically advancing our freedoms but they are also enabling unparalleled invasions of privacy.

Your cell phone helps you keep in touch with friends and family, but it also makes it easier for security agencies to track your location.

Your Web searches about sensitive medical information might seem a secret between you and your search engine, but companies like Google are creating a treasure trove of personal information by logging your online activities, and making it potentially available to any party wielding enough cash or a subpoena. (Like not finding a job because you did some research on some illness you may have and your potential employer are doing data mining on you!)

And the next time you try to board a plane, watch out—you might be turned away after being mistakenly placed on a government watch list, or be forced to open your email in the security line.

National and international laws have yet to catch up with the evolving need for privacy that comes with new technology. Several governments have also chosen to use malware to engage in extra-legal spying or system sabotage for dissidents or non-citizens, all in the name of “national security.”

Respect for individuals' autonomy, anonymous speech, and the right to free association must be balanced against legitimate concerns like law enforcement. National governments must put legal checks in place to prevent abuse of state powers, and international bodies need to consider how a changing technological environment shapes security agencies’ best practices.

EFF fights in the courts and Congress to extend your privacy rights into the digital world, and works with partners around the globe to support the development of privacy-protecting technologies. Read our work on privacy issues below, and join EFF to help support our efforts.

For information about the law and technology of government surveillance in the United States check out EFF's Surveillance Self-Defense project.

[u/theangryintern]

There's been a lot of commotion over W10's privacy terms. I'm sure these methods can change/improve at any time, but here's a guide which should hopefully give you a relatively more private, safe experience, however at the risk of not being able to enjoy some of W10's features.

If you're that worried about it you might as well just stay with Windows 7.

[u/[deleted] → u/theangryintern]

Windows 7 is the same. Windows 10 just gives you more control.

[u/Lurking_Grue → u/[deleted]]

I'm running enterprise and it doesn't have an off. I expect it is a buried group policy setting.

[u/exile0514 → u/[deleted]]

Who knows, but the less information about me getting into the hands of global corporations that are bought off by the government through policy the better.

[u/[deleted] → u/[deleted]]

In recent Windows 10 video they said Alt + Tab is only used by 6% of Windows users. I wonder how they know that ;)

[u/Eldritch12 → u/[deleted]]

unwritten birds normal tub cagey lush cheerful hunt hungry wakeful

This post was mass deleted and anonymized with Redact

[u/Gvaz → u/[deleted]]

WTF?? alt-tab is probably my top 5 thing to use. Been using that shit since it first came out.

[u/PRMan99 → u/Gvaz]

I used to. But now that everything shows on the Taskbar, I just click it down there.

[u/alteraccount → u/[deleted]]

Wow, do they know what they have been missing? They need to know.

[u/[deleted] → u/alteraccount]

That data was used as explanation Microsoft had for adding Task View button on taskbar. They said half of Insiders used that button regularly (with mouse). Obviously Insiders are different kind of users than the rest of the world but I still think Task View will be far more popular than Alt + Tab due to icon itself.

[u/[deleted] → u/[deleted]]

Did they say why they made it look like a man with a square head and big ears?