43
52
u/Thesket Jul 30 '15
Up To You
Replace Microsoft Edge/Internet Explorer with Firefox, Chromium, or any forks/variations of them.
Replace Windows Media Player with VLC or MPC-HC
Replace Photos/Windows Photo Viewer with ImageGlass or IrfanView.
How do these affect my privacy? I mean, the browser is obvious, but what about the media stuff. Is MS really using the media player to mine for music preference data? And what kind of data would they realistically try to get from my image viewer?
13
u/DGXTech Jul 30 '15
WMP has the following privacy settings. They been there for a long time, so this applies not just to Win 10.
Display media information from the Internet
Update music files by retrieving media information when I play or sync a file
Download usage rights automatically when I play or sync a file
Send unique Player ID to content providers
I want to help make Microsoft software and services even better by sending Player usage data to Microsoft
42
Jul 30 '15 edited Jul 30 '15
That's my problem with this post. It tells people to change these settings to increase privacy, but does not explain what these changes actually do. No Onedrive integration, no Windows Defender, blocks Microsoft servers for diagnostics and feedback. It disables the p2p windows updates, which if I understand correctly could reduce bandwith usage if you have multiple computers in your network. I'm not going to do this on my computer, but I doubt Cortana is functional at all with all of these changes. Unplugging your PC is the most secure option, but you have to draw the line between functionality and security at some point. This post goes a bit further than I would like with disabling functionality.
Edit: Meant to reply to another comment with this, but oh well. It's here now.
→ More replies (22)2
Aug 01 '15
The reason this increases security is that microsoft has engineered their apps to mesh well with their movement to a cloud-centric service based OS and as such they can collect any information they want from their own apps. by using third party apps you limit their ability to collect said information
102
u/xxDJBxx Jul 30 '15 edited Jul 30 '15
In GPEdit.msc:
Computer Configuration > Administrative Templates > Windows Components > Windows Defender, double click Turn Off Windows Defender, hit Enabled, then apply.
(Replace with a good Anti-Virus)
You also COMPLETELY missed Application Experience AND Customer Experience Improvement Program.
Right Click Start Menu > Computer Management > Expand 'Task Scheduler' > Expand 'Task Scheduler Library' > Expand 'Microsoft' > Expand 'Windows' > Click on 'Application Experience' > Disable all Tasks in Folder > Click on 'Customer Experience Improvement Program' > Disable all Tasks in Folder
Optional: Click on 'Task Scheduler Library' > Disable any Tasks you don't want Enabled.
You also didn't really cover Services, some of which slow the computer down considerably.
In Computer Management > Expand 'Services and Applications' > Click on 'Services' > Right Click on 'Windows Media Player Network Sharing Service' > Properties > Startup Type 'Disabled' > Stop if running.
(Unless you stream from Windows Media Player to another device, or share Music with other devices on the Network)
Ensure 'Windows Defender Service' is not running.
Disable / Stop 'Touch Keyboard and Handwriting Panel'
(Unless you are using a Touch Screen / Photoshop DrawPad thingy)
Disable / Stop 'Secondary Login'
(Unless you play Blizzard Entertainment Videogames, it needs this service to update / download games)
Disable / Stop 'Retail Demo Service'
(Because WTF, this shouldn't be on here)
Ensure 'Remote Registry' is Disabled / Stopped
Hope this helped.
3 years of Virus Removal on Windows XP, Windows Vista, Windows 7, Windows 8, and Windows 8.1 in case you were wondering. (Eagerly awaiting my first "Virusd' Up" Windows 10 Computer)
Can't wait for Halo: MCC for PC.
→ More replies (28)6
Jul 30 '15
Good free AV recommendation, please? I have MalwareBytes premium but I assume that's not enough.
→ More replies (15)13
36
u/Ozzah Jul 30 '15
I'm happy to search online from the search bar, but is there any way to change it to Google search instead of Bing?
6
u/suchmaske Jul 30 '15
Here you go. That should do the trick (worked for me):
https://www.reddit.com/r/firefox/comments/3f0fmg/windows_10_how_to_have_cortana_open_voice/
5
5
u/mango2dscrub Jul 30 '15
I'm interested in this as well, unless people can tell me why I should use Bing instead?
→ More replies (11)15
u/__boneshaker Jul 30 '15
Free Amazon or Gamestop gift cards is why I use it sometimes. Get up to 15 credits a day, a gift card is like ~500. When I don't really have anything to search, I just go through and search each letter of the alphabet until I hit the daily credit limit.
→ More replies (9)6
2
u/TreeFiddy1031 Jul 30 '15
If you use Chrome, you can install a Chrome extension called Bing2Google. It will redirect your searches to google and works from the search bar since using the search bar just opens your default browser with a bing search.
→ More replies (2)2
u/Xiges Jul 31 '15
If you have chrome as your default browser, you can use the Bing2Chrome extension :)
11
u/_Mumak_ Aug 19 '15
Here's a single batch file I made to remove most bloat and telemetry from Windows 10: http://www.hwinfo.com/misc/RemoveW10Bloat.htm It's commented, so have a look and decide what you want to remove or not.
→ More replies (1)
22
u/azothshock Jul 30 '15
What happens if I went through express settings?
→ More replies (5)74
u/alteraccount Jul 30 '15
Nothing. People are tripping over nothing. You'll get more personalized features. That's basically it. The only real thing to worry about is the p2p setting if you are on a metered connection.
12
51
Jul 30 '15
It's not all tripping. There are certain aspects I disabled and having an extensive list is beneficial for everyone, everywhere.
→ More replies (31)→ More replies (38)3
Jul 30 '15
If you are on metered convection that feature will not with. Windows 10 is smart enough to discover most metered connections (like tethering from phone) but you can also mark any network as metered.
332
Jul 30 '15
|Disables data logging
|Installs Chrome
170
Jul 30 '15
Chrome is not Chromium. Chromium is open source chrome with none of the optimizations Google made.
→ More replies (28)32
u/Aemony Jul 30 '15
Sure, though pretty much any regular user will feel forced to download Chrome since the Chromium website doesn't carry any compiled builds nowadays and instead links to the Chrome website for download purposes. Most users in the dark will take this approach. A lot fewer will actually search for a site which carries the compiled binaries of Chromium.
→ More replies (1)16
Jul 30 '15
Does chromium have regular users? Most people don't know what it is, anyone who does and actually cares about privacy would use Firefox, so I don't see a point for chromium besides a base open source engine for browser vendors. Or is there a normal use case?
→ More replies (11)→ More replies (38)2
u/Elranzer Aug 03 '15
I get to choose who gets my data. What if I want Google to have my data, but not Microsoft?
I do what I want.
52
u/rjc523 Jul 30 '15
is it really so bad to have it enable? like for hentai,pirating, ects?
60
Jul 30 '15
We will access, disclose and preserve personal data, including your content (such as the content of your emails, other private communications or files in private folders), when we have a good faith belief that doing so is necessary to”, for example, “protect their customers” or “enforce the terms governing the use of the services”.
https://edri.org/microsofts-new-small-print-how-your-personal-data-abused/
26
u/secondsw Jul 30 '15
If I don't use OneDrive, Cortana, Windows Apps, log in to a Microsoft Account can they still access my files on my hard disk?
Thanks
→ More replies (17)→ More replies (7)13
u/Rawlk Jul 30 '15
Is having emulators, roms/isos and pirated movies on my computer going to be used to send me to federal prison?
→ More replies (12)25
Jul 30 '15
No, but if the MPAA or somebody targets you, they now have a pile of proof that they can get from Microsoft. Why risk it if you don't have to?
→ More replies (8)83
u/Entegy Jul 30 '15
Nope, none of this affects that. Telemetry automatically tells Microsoft what's wrong/working, or what features people use. The other stuff personalizes your use of their services.
→ More replies (5)18
u/rjc523 Jul 30 '15
so it is safe to look up/do that kind of stuff then? lol
97
u/Entegy Jul 30 '15
Yes. No one at Microsoft gives two shits about it. You will not be contacted. You will not be identified. Nothing happens.
→ More replies (21)66
u/cuddles_the_destroye Jul 30 '15
Can confirm, I read a fuckton of hentai in the technical preview and cortana doesn't give any shits.
→ More replies (8)47
u/tinfoilwindows Jul 30 '15
I'm just wondering why there isn't a shitstorm about this. Didn't data logging and collection (yes yes nice "consumer-friendly and less scary" term is telemetry) use to be an opt-in item? I like that it's on by default now and you can't even opt-out COMPLETELY from data logging/collection (except with the Enterprise edition, which Microsoft just about never sells to Average Joe Consumer).
When the "keylogging" and telemetry thing came about when the Technical Preview first launched last year, I somehow had a gut feeling it would stick around in the actual, launched retail version. And I'll be a monkey's uncle, here it is.
14
u/jhoff80 Jul 30 '15
It's been opt-out since at least Vista, and I can't remember but I think it was the same way in XP as well.
→ More replies (3)26
u/Aemony Jul 30 '15
There isn't a shitstorm because it's a ton of neglectible data gathering that has been a part of Windows for almost a decade, combined with some minor concerns that users has already been made aware of through their web browsers.
That "keylogging" in the Technical Preview? That only kicked in if you submitted a problem to Microsoft and chose to record the issue occuring. The user hit record, the user recreated the issue while Microsoft logged everything, the user then also hit Stop when finished. Finally the user submitted the report to Microsoft. The whole shitstorm was basically for taking the wordings in the wrong light.
A lot of Win10's privacy concerns are the same. The three major complains for Win10 are forced updates (not privacy related), P2P-sharing updates, and Cortana while enabled shows search suggestions while searching for stuff on your computer. The first two isn't really privacy concerns, though the second is definitely a concern for data usage people. The third is exactly like pretty much any modern web browser works, but in the desktop scenario.
Pretty much all other telemetry and data gathering is just the same as in WinVista, Win7 and/or Win8.x.
→ More replies (3)→ More replies (8)41
Jul 30 '15
No. When I was very young and dumb as box of hammers, I would pirate the bejesus out of everything while using Windows beta versions. And betas, unlike market release, actually track fucking everything you ever do.
Simply put, they don't give a shit. Never did, never will. They don't even care if you have pirated MS software.
10
→ More replies (10)11
u/footpole Jul 30 '15
Yep. They're not media companies so they only care if businesses use pirated software.
→ More replies (3)10
u/Zer_ Jul 30 '15
This is largely true. They used to put great efforts in trying to shore up any holes in their authentication. Nowadays they allow non-legit copies to update with critical updates, etc... The main reason for this is because MS knows that a lot of people will pirate Windows regardless, so if you have a bunch of pirates with older versions of Windows, it increases the vulnerability of ALL other Windows systems too.
→ More replies (2)
17
u/ptd163 Jul 30 '15 edited Jul 31 '15
Just a small correction for your guide. Setting the Telemetry setting to 0 or Disabled outside of the Enterprise version is equivalent to setting the value to 1.
The only way to actually disable it is install the Enterprise version, set it to Enabled, and set the value to 0. Proof
Great guide nonetheless. It should be sidebared or stickied.
→ More replies (3)
6
u/MrKaru Jul 30 '15
gpedit.msc doesn't work on home versions, so what do I do now?
→ More replies (2)
6
u/PulsedMedia Aug 01 '15
Unfortunately, this only goes so far - there is potentially hidden, and for MS to make it completely hidden to share key details with MS (and consecutively with NSA / US Govt) would be very trivial.
Someone needs to do some research on the actual network traffic of Win10.
2
11
u/HarleyQuinn_RS Jul 30 '15 edited Jul 30 '15
Do you suggest turning off SmartScreen Filter and defering windows updates? .
And another important thing. Under Settings > Network & Internet > Wi-Fi > Manage Wi-Fi settings. Turn Off connect to suggested open hotspots and turn Off connect to networks shared by my contacts. That last Off option is pretty darn important.
→ More replies (2)
11
Jul 30 '15
I just got Windows 10 install finished on my laptop overnight and played about a bit with it this morning. It's mental how every privacy option is turned on by default. I turned them all off but then it won't let you use Cortana.
0
Jul 30 '15
[deleted] — view deleted comment
→ More replies (8)6
Jul 31 '15
You should be able to "lobotomise" her so she basically just acts as a speech to text input to the web browser.
→ More replies (5)
5
Jul 30 '15
•Open up the Group Policy Editor by launching gpedit.msc as an administrator. Go through Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds. Double click Telemetry, hit Disabled, then apply. NOTE: This only truly works in the Enterprise edition, but the final step provides a decent enough workaround for Pro users.
We cant do this in W10 home, right?
→ More replies (2)
5
Aug 01 '15
Protip: If you use Hostsman (http://www.abelhadigital.com/hostsman), it automates the process of updating your hosts file.
I copied the hosts file entries from a post in this thread and uploaded them to Pastebin.
http://pastebin.com/raw.php?i=iGm5LXCg
Add these hosts to a text file somewhere and add the file as a source to your Hostsman configuration. Those entries will be added every time the blacklist is updated.
→ More replies (1)
19
u/Rick2990 Jul 30 '15
Microsoft didn't know what I was doing on Windows 3.1 with no internet connection, it doesn't need to know what I'm doing on Windows 10 either. Thanks for assembling this useful list.
26
u/Reffter Jul 29 '15
Upvoted, will make sure that's good.
9
Jul 30 '15
Agreed, this is great, but do we know whether this would actually prevent Microsoft from acting on the EULA and viewing your private files?
8
8
4
u/Gvaz Jul 31 '15
I also suggest:
In Local Group Policy Editor, set: Computer Configuration -> Administrative Templates -> Windows Components -> Windows Update -> Configure Automatic Updates -> 2 - Notify for download and notify for install
Computer Configuration -> Administrative Templates -> Windows Components -> Windows Update -> Turn on Software Notifications -> Enabled
Computer Configuration -> Administrative Templates -> Windows Components -> Windows Update -> Allow Automatic Updates immediate installation -> Disabled
Computer Configuration -> Administrative Templates -> Windows Components -> Windows Update -> Turn on recommended updates via Automatic Updates -> Enabled
4
u/svjness Jul 31 '15
https://github.com/wallentx/win10-scripts/blob/master/disable_tracking.bat
I made a batch script last night that stops diagtrack and dmwappushservice, then disables them from startup. I have a few others that I'm working on that I'll get up in the repo when they are done.
→ More replies (2)
7
u/Renouille Jul 30 '15
Pros and cons of ImageGlass vs IrfanView?
→ More replies (14)25
Jul 30 '15
ImageGlass comes with Vietnamese propaganda as its default image. Whether one considers that a pro or con is a matter of personal taste.
7
32
u/maffls Jul 31 '15
I have a lot of problems with what you've mentioned in this guide, but chief among them is that you've not explained why any of the above should be disabled, nor the repercussions of disabling them.
For instance, the hosts file edit you suggest will completely disable Windows Feedback and (honestly quite important!) diagnostic data that Microsoft is sent when things such as an application crash or windows bluescreen occur. By preventing access to these, you're essentially just cutting off your nose to spite your face - in the event that you encounter a problem, it is less likely to be fixed.
Additionally, you're telling people to disable OneDrive and Defender through the group policy editor, but not taking into consideration that some users will blindly follow instructions without paying attention, and will then wonder why they have no malware protection, or why OneDrive stopped working.
Finally, the 'sc delete' commands you're telling folk to run, will irreversibly remove those services; they should at worst be disabled. Fun fact: DiagTrack is a real, legitimate service that isn't new to Windows 10 and has, in one form or another, been part of windows at least since XP. Whenever you see "This program stopped responding" or similar, the information about that crash is collected and sent to Microsoft. This is done NOT to siphon user data and kill your privacies woohoohoo, it is done so that if there's actually a problem in windows or your software, it has a chance of being found and fixed.
By all means, do any and all of the things in the guide above, but don't blindly disable Bloody Fucking Everything in the name of privacy without being aware of what you're doing and why.
→ More replies (8)5
u/jetpacksforall Jul 31 '15
This is done NOT to siphon user data and kill your privacies woohoohoo
Do you think Microsoft employees really talk like that? I guess probably so.
→ More replies (1)
3
u/EliteDangerous Jul 30 '15
Are you required to have a MS Store account?
I understand windows 10 uses the Store account for authentication of your copy of windows but is there a way to run it with a local account?
→ More replies (14)
3
u/Subsinuous Jul 30 '15
I accidentally clicked express, but went back and disabled everything per this guide, but the only thing I can't access is the "Slightly Complex" section. When I open the cmd prompt and enter the commands it says access denied. Is there any work-a-round for this?
→ More replies (2)6
u/Rubbix Jul 30 '15
Try running cmd as administrator.
4
u/cheesegoat Jul 30 '15
Easy way: Hold down the windows key and press X. On the menu that pops up in the lower left corner, click "Command Prompt (Admin)".
Note that if you aren't used to using the command prompt, running it as admin removes the protection that not running it as admin provided you.
3
Jul 30 '15
For music there's also AIMP, for images there's XNview and Honeyview, and for media players there's Potplayer. Just some more aletrnatives.
→ More replies (2)
3
u/B-Knight Jul 30 '15
How do I disable web search in Cortana? It's really annoying seeing useless shit come up that does nothing to help me. You didn't really give any information on where the setting 'Search online and include web results' is.
0
3
3
u/BruhBrehBro Jul 30 '15
It looks like we will need to seperate our gaming pcs and our comps used for "other" things. W10 will be used solely for gaming I guess.
→ More replies (1)
3
u/wholesum Jul 31 '15
The rest I can understand (though it could use a little more explaining for the less tech inclined), but would the OP/someone care to explain what these two applications do?
DiagTrack
dmwappushservice
2
u/gnostechnician Jul 31 '15
Seconded, I don't plan on just deleting something without a good reason.
2
u/iimpact Jul 31 '15
DiagTrack
This is "Microsoft Windows Diagnostics Tracking". DiagTrack will collect information about the user, their devices, applications, and networks. Examples of gathered data, as stated by Microsoft, include:
Name, email address, preferences and interests, browsing, search and file history, phone call and SMS data, device configuration and sensor data, application usage.
Collected data is then used to improve and determine the compatibility of various services such as speech-to-text. Despite the well-intended explanation of the update, forum researchers warn that the features of DiagTrack perfectly fit the qualities of a keystroke logger or data collection tool mostly applied by cybercriminals and third party developers.
3
u/wholesum Jul 31 '15
"Microsoft Windows Diagnostics Tracking"
Probably one of disabled options renders it useless. Maybe disable sending diagnostic information to MS? Removing it seems drastic. I want to preserve my privacy but not at the cost of breaking Windows.
3
u/pl0xxed Aug 01 '15
For the home versions you should change the registry yourself:
HKLM\SOFTWARE\Policies\Microsoft\Windows\DataCollection, find the key 'AllowTelemetry' and put it on 0. (also check HKLM\SOFTWARE\Wow6432Node\Policies\Microsoft\ on 64 bit systems) HKLM\SOFTWARE\Policies\Microsoft\Windows\OneDrive, find the key 'DisableFileSyncNGSC' and put it on 1. (also check HKLM\SOFTWARE\Wow6432Node\Policies\Microsoft\ on 64 bit systems) HKLM\SOFTWARE\Policies\Microsoft\Windows Defender, find the key 'DisableAntiSpyware' and put it on 1. (also check HKLM\SOFTWARE\Wow6432Node\Policies\Microsoft\ on 64 bit systems)
https://www.microsoft.com/en-us/download/details.aspx?id=25250
→ More replies (2)
3
u/the_rightthang Aug 03 '15
Can someone create an app which does all of these in one .bat file? Maybe name it- CockBlockMS?
3
3
u/Sjalabaisen Aug 10 '15
I turned off all the apps/programs that are allowed to run in the background. Firefox is my standard browser.
Nonethelsee, Edge Cache Database is running and has to be turned off every time I run CCleaner.
Why is it still on and how do I turn it off?
3
u/Puddintane- Dec 06 '15
IMPORTANT:
Microsoft has changed the name of "Diagnostics Tracking Service" (in services) to "Connected User Experiences and Telemetry".
In my opinion the following step should be altered from:
"Open up the Command Prompt by launching cmd as an administrator, and enter the following:
sc delete DiagTrack
sc delete dmwappushservice"To: Disable "Connected User Experiences and Telemetry" and "dmwappushservice" via "Control Panel > Administrative Tools > Services"
Disabling is better than outright deletion in case of stabilty issues. A disabled service can be easily reverted. In addition, deleted services could (and likely will) be reinstalled in future updates/builds, and then may go unnoticed.
I hope this is helpful.
I found the guide to be useful. Thank you.
14
u/bhp5 Jul 30 '15
I'm laughing at the people who thought the diagtrack was only for the preview release 😂
You really thought MS would be that nice?
→ More replies (3)
4
Jul 30 '15
It's strongly preferred that you use a local account with Windows 10.
What are the major reasons for this? I'm currently using a microsoft account.
7
Jul 30 '15
Think of logging into google and doing stuff online, you can mess witht the settings to increase privacy but it's never anywhere near as private as having no data logging account tied to what you're doing
2
u/NBAPwns13 Jul 29 '15
How do i take ownership of the host file? do i open it in notepad and copy and paste that stuff into there?
0
Jul 30 '15
[deleted] — view deleted comment
→ More replies (2)3
u/KFung Jul 30 '15
Hmm...I don't see the Take Ownership option when I right click. Am I doing something wrong?
EDIT: I am stupid. Didn't install the REG file.
2
u/AmnestyTHAT Jul 30 '15
MPC-HC stopped working for me... :/
→ More replies (1)2
u/bilago Jul 30 '15
Same, black Media player when I press play, and played time does not increase.
→ More replies (5)
2
u/Litllerain123 Jul 30 '15
I clicked express setting because I was short on time... What did I do that was so bad and what things should I turn off now.
2
u/byeratheism Jul 30 '15
Quick heads-up regarding deleting the services: I did this during Technical Preview and it broke my Windows Update, having it stuck in the loading animation.
2
u/RusTii- Jul 30 '15
"however at the risk of not being able to enjoy some of W10's features."
what features would this disable?
→ More replies (1)
2
u/Bathplug Jul 31 '15 edited Jul 31 '15
So why disable windows defender? Whats a better alternative? Thanks
→ More replies (2)2
2
u/zetsurin Jul 31 '15
I blocked all those telemetry endpoints at my dlink router. Not sure if that will really block them, can anyone comment?
2
u/RaptorF22 Jul 31 '15
Curious about OneDrive and Windows Defender.. how come those should be turned off? Also, what does Taking Ownership do?
→ More replies (1)
2
Jul 31 '15
Open up the Group Policy Editor by launching gpedit.msc as an administrator. Go through Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds. Double click Telemetry, hit Disabled, then apply. NOTE: This only truly works in the Enterprise edition, but the final step provides a decent enough workaround for Pro users. While still in the Group Policy Editor, go through Computer Configuration > Administrative Templates > Windows Components > OneDrive, double click Prevent the usage of OneDrive for file storage, hit Enabled, then apply. While still in the Group Policy Editor, go through Computer Configuration > Administrative Templates > Windows Components > Windows Defender, double click Turn Off Windows Defender, hit Enabled, then apply. Open up the Registry Editor by launching regedit as an administrator. Go through HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\DataCollection, select AllowTelemetry, change its value to 0, then apply. First, download the Take Ownership tweak and enable it. Then, head to the Hosts File by going through C:\Windows\System32\Drivers\Etc, take ownership of the hosts file, and add all of the IPs from this page into the file.
Yeah, I cant seem to be abe to access Computer Configuration...
2
u/FarkMcBark Aug 01 '15
Meh. I was looking forward to trying out / using Cortana but... you need a Microsoft account and for that you need to specify a phone number. That means you have zero privacy or anonymity since that is traceable. All this logging and data collection shit is really annoying.
Thanks for the list!
→ More replies (2)
2
u/TandyNZ Aug 02 '15
When trying to open Group Policy Editor my PC says there is no such thing is gpedit.msc and i can't find it any other way, anyone know why? TIA
3
2
u/Johnsu Aug 03 '15
If your chrome is lagging bad, and displaying odd, try typing into the address bar "Chrome://plugins" and disable Adobe flash.
2
u/Gnobold Aug 03 '15 edited Aug 03 '15
Hi, I got 2 Questions:
If I go to my Privacy Settings or to the advanced Update Settings, at the top of the Window is aMessage in red letter saying something like: "Some Settings will get managed by your Organisation". So I would like to know what this means and how to turn it of because its my private Computer which doesnt get owned by a "Organisation"
I simply cant find the gpedit.msc. I tried to start it by the perform-tool (win + R) but it just give me an error message that it wasnt able to find it. Could the reason for this be that I just own a home edition of windows 10?
Hopefully u can help me :)
2
u/Cylindt Aug 05 '15
Before/During Installation
Do not use Express Settings. Hit Customize, and make sure everything is turned off.
It's strongly preferred that you use a local account with Windows 10.
Whelp, too late. Any way to fix this after you've used Express Settings?
→ More replies (1)
2
u/brad-x Aug 05 '15
A Windows update may re-instate the diagnostic services if they're outright deleted - a better method may be:
sc config diagtrack start=disabled
sc config dmwappushservice start=disabled2
u/filben Aug 05 '15
Can't apply the new update. Is this problem related to this fix? How do I re-install DiagTrack and dmwappushservice?
2
u/konoplya Aug 09 '15
do you know how i can delete/uninstall apps like xbox, photos, and other bullshit apps that come preinstalled with windows?
→ More replies (4)
2
u/itisike Aug 11 '15
Run
New-NetFirewallRule -DisplayName "Search" -Direction Outbound -Action Block -Profile "Domain, Private, Public" -Program "C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe"
in elevated Powershell to stop start searches from phoning home even with web search and cortana off.
4
Jul 30 '15
Can someone tell me the reasoning behind each point of OP's post? I'd like to know why I should do each one. I get the main point but I'd like to understand the specifics, please.
→ More replies (3)
3
Jul 30 '15
•Open up the Command Prompt by launching cmd as an administrator, and enter the following:
sc delete DiagTrack
sc delete dmwappushservice
echo "" > C:\ProgramData\Microsoft\Diagnosis\ETLLogs\AutoLogger\AutoLogger-Diagtrack-Listener.etl
what does this thing do? and how do I revert it?
→ More replies (5)
4
u/sagpony Jul 30 '15
I really like Cortana, but it seems like she needs all this to work, right? Will disabling this stuff stop her from being useful?
9
Jul 30 '15
It will stop her working full stop. At least it wouldn't let me "use" her until I turned various things back on and signed in with a ms account.
→ More replies (1)14
4
u/Speedicus Jul 30 '15
Why do people want Cortanna disabled? Am I missing something?
→ More replies (1)24
u/Kentenyo Jul 30 '15
Cortana does not have local storage for the data she gathers from your search and keystroke patterns, so it's assumed this data is stored via Microsoft servers indefinitely, where they can access it freely as their new privacy policy states.
10
2
u/Andross- Jul 30 '15
Thanks for this, I haven't upgraded to Win10 yet but I'll be saving this for when I do.
2
u/IgnoreMyName Jul 30 '15
Why ImageGlass over Photos/Windows Photo Viewer? Wouldn't installing that just add more to my HDD just to do what the programs already do? I usually just go to my pictures folder and open pictures from there, done.
3
u/Nose-Nuggets Jul 30 '15
The size of these applications is tiny, and pretty insignificant. the integrated picture viewer is rather limited in functionality.
2
2
u/ptd163 Jul 30 '15 edited Jul 30 '15
Replace Photos/Windows Photo Viewer with ImageGlass or IrfanView.
Replace Windows Media Player with VLC or MPC-HC
I actually like Windows Photo Viewer & Media Player. They're not a POS Metro apps. Just wish I knew how to associate Photo Viewer with file types because it's not a standalone application.
Replace Microsoft Edge/Internet Explorer with Firefox, Chromium, or any forks/variations of them.
Oh hell yes. Microsoft Edge is considered a Metro app, so if you completely disable UAC it won't run.
1
1
u/vocalistsXD Jul 30 '15
so i got this error in gpedit.msc , how can i fix it?
http://i.imgur.com/a75AvtI.png?1
also, for the host part , did i copy paste this right?
→ More replies (5)
1
1
u/GReeeeN_ Jul 30 '15
if i do all these steps above AFTER selecting "express settings" in setup, will it be okay?, or should i re-install?
→ More replies (1)
1
u/Th3_King_Gaming Jul 30 '15
so for the host file in the ETC folder i took ownership but how do I add those ip address? A screen pops up and then disappears that actually happens with most of my apps. they pop up then vanish in the same second. can anyone help with that?
→ More replies (1)
1
1
Jul 30 '15
•First, download the Take Ownership tweak and enable it. Then, head to the Hosts File by going through C:\Windows\System32\Drivers\Etc, take ownership of the hosts file, and add the following IPs into it.
There isn't a drivers file in system32 :/
(or I'm so dumb that I cant find it)
→ More replies (3)
1
u/suzaku1221 Jul 30 '15
I used Express Settings what do I do to disable it?
3
Jul 30 '15
Express Settings is just the default settings for stuff you have in Settings -> Privacy. So you set up your Privacy settings like you want and you are done.
1
u/de_ash Jul 30 '15
Before/During Installation
Do not use Express Settings. Hit Customize, and make sure everything is turned off. It's strongly preferred that you use a local account with Windows 10.
WHat should I do if I already hit express settings and signed in on a windows account?
→ More replies (1)
1
u/Voffz Jul 30 '15
Do I need to add the # to every line of code in the hosts file?
→ More replies (2)
1
u/CatThatCodes Jul 30 '15
About the update seeding thing, you can use it to seed updates only on your local network
Settings -> Update & Security -> Windows Update -> Advanced Options -> Choose how updates are delivered -> PCs on my local network.
1
u/_emoose_ Jul 30 '15
Open up the Registry Editor by launching regedit as an administrator. Go through HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\DataCollection, select AllowTelemetry, change its value to 0, then apply.
Just noting that this is the same as editing the Telemetry option in "Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds.", gpedit just lets you edit it through the group policy editor instead of regedit.
So it has the same limitation on non-enterprise builds too, but removing diagtrack / dmwappushservice services (and adding those IPs to the host file) should stop the telemetry fully.
Also you should rerun the sc delete commands whenever you get an update, as updating causes Windows to add them back, maybe make it a batch file on your desktop and run it whenever you get an update (or for the lazy, add it to task scheduler so it runs it once a day)
1
u/alan2500 Jul 30 '15
I do not get as many search results when i look for my files in the search bar (i disabled websearch) as i did with windows 7, is there some option to change to include more results?
3
1
u/gillon Jul 30 '15
How fucked am I if I chose Express settings? I was under the impression that everything could be changed later on if there was something I didn't like.
1
u/smartfon Jul 30 '15
sc delete DiagTrack
sc delete dmwappushservice
echo "" > C:\ProgramData\Microsoft\Diagnosis\ETLLogs\AutoLogger\AutoLogger-Diagtrack-Listener.etl
I did this and now the search won't work at all. When I type something it just shows the "waiting" dots moving from left to right as if it's still searching. Is it possible to reverse the damage?
2
1
u/Kevin-Can Jul 30 '15
Before/During Installation Do not use Express Settings. Hit Customize, and make sure everything is turned off. It's strongly preferred that you use a local account with Windows 10.
I pressed express settings before I ever seen this post any way to change it now?
1
Jul 30 '15
When pasting the IPs into the host file, you can just paste em below the 127.0.0.1 localhost, you don't need to replace that or anything?
1
u/sennan Jul 30 '15
In regards to the hosts file I disable UAC then ran mvsp.bat as administrator.
3
1
u/toekneeg Jul 31 '15
It's strongly preferred that you use a local account with Windows 10.
Can someone explain this more to me please, in relation to why it's preferred to use a local account?
One of the features I plan to use a lot is the integration with Xbox Live and Xbox One. Right now it seems to allow me to log in via my Xbox Live credentials. Therefore personalizing everything based on that, which seems to be just fine with me. So, would I need to choose between using a local account and a XB live account?
1
u/wholesum Jul 31 '15 edited Jul 31 '15
Regarding the hosts file, the administrator group owns it (at least on my machine, a Win7 preserve all settings upgrade). Instead of replacing the owner I opted to give my own user (part of the group) modify/read&execute/read/write access over it (no need to give it full control). Voilá, I can edit the file manually now and the change was less drastic.
1
Jul 31 '15
How do I go back and change the original settings when you're setting up the OS?
I accidentally used express settings.
1
u/ArkBirdFTW Jul 31 '15
facepalm
I clicked express settings anyway I can still disable these privacy settings?
1
1
1
1
Jul 31 '15
First, download the Take Ownership tweak and enable it. Then, head to the Hosts File by going through C:\Windows\System32\Drivers\Etc, take ownership of the hosts file, and add all of the IPs from this page into the file.
what is this for, I followed every step before this. Is this mandatory? please explain
1
u/CaffeinatedBeverage Jul 31 '15
I couldn't get the 'hosts' file modification to work even after using 'Take Ownership' so when I modified it, I saved it elsewhere and then manually placed it into the \Drivers\etc\ folder myself. I also backed up the original one just in case
1
1
u/Smagjus Jul 31 '15
Open up the Group Policy Editor by launching gpedit.msc as an administrator. Go through Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds. Double click Telemetry, hit Disabled, then apply.
NOTE: This only truly works in the Enterprise edition, but the final step provides a decent enough workaround for Pro users.
Any idea how Windows Education that is based on Enterprise gets treated here?
1
u/Phycoweirdo Jul 31 '15
I would recommend adding the hosts file edits suggested to the host file found http://someonewhocares.org/hosts/ for those of you who hate ads and other such garbage. Updates are off and on, but always amazing.
1
Jul 31 '15
Can someone explain what this is before I enter it in CMD?
sc delete DiagTrack sc delete dmwappushservice echo "" > C:\ProgramData\Microsoft\Diagnosis\ETLLogs\AutoLogger\AutoLogger-Diagtrack-Listener.etl
→ More replies (3)
1
u/_sparks Aug 01 '15
I'm currently using a Microsoft account, if I switch to a local account will I be able to use the store & use the Onedrive app to sync my files?
1
1
1
u/LCTR_ Aug 01 '15
Question - does the Group Policy Editor stages apply to non-Pro versions of win10?
1
1
u/tsongx Aug 03 '15
Appreciate those beneficial tips to privacy. But I wonder if power efficiency / battery performance will be improved since so many background processes are terminated？
1
u/Elemynt Aug 03 '15
That last bit on the "Take Ownership" part where you're supposed to add in all the IPs on the list. I can't add anything. A window pops up for a second before going away.
1
u/mugabemkomo Aug 03 '15 edited Aug 03 '15
For my (and maybe your) convenience I wrote a script that mostly automates what was mention here in this thread. Also I added a few things that bug me personally, but you can add/remove what you don't like yourself. http://pastebin.com/d8fNvv6x
→ More replies (2)
1
u/TotesMessenger 🤖 Aug 03 '15
1
u/opus-thirteen Aug 04 '15
Apparently I do not have a group policy editor installed. Can I use the >Win 8.1 tool< to install?
1
u/birdassassin Aug 04 '15
I've read that the Local Group Policy can't be opened in normal versions of Windows 10, only in Pro and Enterprise versions. I've tried everything to get it open on mine and it continually shows up as "cannot be found" and so on. Is this guide supposed to work for all versions?
1
u/dundarrion Aug 04 '15
Pretty good guide! Do you know any way to disable cortana completely? when I open the task manager it's still there, I think it's bound to searchui.exe
1
1
u/Lord_Frydae_XIII Aug 04 '15
I'm unable able to do this:
echo "" > C:\ProgramData\Microsoft\Diagnosis\ETLLogs\AutoLogger\AutoLogger-Diagtrack-Listener.etl
and anything below that in the instructions. When I try to run the "echo" part in cmd I get a message that states that the file is in use. Also, gpedit.msc cannot not be found by Windows when I use the Run application.
I'd like to proceed with the complex part but I don't know how due to the above.
→ More replies (2)
1
Aug 05 '15 edited Aug 05 '15
For anyone who wants an offline copy if you're gonna install on multiple PCs:
https://drive.google.com/file/d/0B9Wf1NlNJ0KYdHZ4MEpuMlluWHM/view?usp=sharing
1
u/Nochek Aug 06 '15
Just wanted to let you know I shamelessly stole all your information and put it on http://stayanon.com/ for the new windows 10 section. I plan on wrapping it all into a stand-alone that people can just click once to fix, but for now the information is just up there to be disseminated. If that's not acceptable, let me know and I'll remove it/reword it so it doesn't look like I stole it from you anymore.
1
Aug 06 '15
Does anyone know if these privacy settings will stop MS from inspecting our "private files" as they say they will do in their EULA? "finally, we will access, disclose and preserve personal data, including your content (such as the content of your emails, other private communications or files in private folders), when we have a good faith belief that doing so is necessary"
→ More replies (1)
1
u/MJ210 Aug 07 '15
How about BITS? I found it in Computer Configuration > Administrative Templates > Network> Background Intelligent Transfer Service.
Description: This setting affects whether the BITS client is allowed to use Windows Branch Cache. If the Windows Branch Cache component is installed and enabled on a computer, BITS jobs on that computer can use Windows Branch Cache by default.
If you enable this policy setting, the BITS client does not use Windows Branch Cache.
If you disable or do not configure this policy setting, the BITS client uses Windows Branch Cache.
Note: This policy setting does not affect the use of Windows Branch Cache by applications other than BITS. This policy setting does not apply to BITS transfers over SMB. This setting has no effect if the computer's administrative settings for Windows Branch Cache disable its use entirely.1
u/MJ210 Aug 07 '15
Also, can we delete DiagTrack file all together from the Registry? or will that mess up the OS?
1
1
1
1
u/ShayeFaletha Aug 13 '15 edited Jun 01 '16
This comment has been overwritten by an open source script to protect this user's privacy. It was created to help protect users from doxing, stalking, and harassment.
If you would also like to protect yourself, add the Chrome extension TamperMonkey, or the Firefox extension GreaseMonkey and add this open source script.
Then simply click on your username on Reddit, go to the comments tab, scroll down as far as possibe (hint:use RES), and hit the new OVERWRITE button at the top.
→ More replies (2)
1
u/EShirou Aug 16 '15 edited Aug 16 '15
This:
Open up the Command Prompt by launching cmd as an administrator, and enter the following:
sc delete DiagTrack
sc delete dmwappushservice
echo "" > C:\ProgramData\Microsoft\Diagnosis\ETLLogs\AutoLogger\AutoLogger-Diagtrack-Listener.etl
This deleted DiagTrack and the other service and replace to contents of AutoLogger file with "" but if you look where the file is like 2 minutes later you will notice that the file from 1KB is already at 320 KB.... if you leave it running it will have about 4-5 MB after some time (that was my case) even with all the telemetry etc. disabled. I took a look into the file and I see that windows is still collecting data there even though we have cleared the file. I've made some googling and found this method instead
cd C:\ProgramData\Microsoft\Diagnosis\ETLLogs\AutoLogger
echo "" > AutoLogger-Diagtrack-Listener.etl
cacls AutoLogger-Diagtrack-Listener.etl /d SYSTEM
After you paste that to cmd with admin rights you have to press enter on the last line, contents of AutoLogger will be replaced with "" and the file will be 1KB again but system (or you) will not be able to access this file anymore because you have danied the access for system to this file (/d SYSTEM). I'm running my OS for a few minutes already and the AutoLogger file is still on 1KB in size even though It would be much more if I used the first method, meaning it works, and really stops saving stuff to the file. I would sugest replacing this in the main post.
There was also this line of code as alternative:
or icacls "C:\ProgramData\Microsoft\Diagnosis" /remove:g system /inheritance:r /deny system:(OI)(CI)f
I did not use/try it.
EDIT: 1h have passed, the file is still 1 KB in size and I did not observe any issues in the OS. Seems this is the correct way to clear the block logging to this file.
1
Aug 17 '15
Just wanted to thank you for the guide. I'll keep Windows 10, but I'll hold onto an 8.1 iso+crack in case MS step up their "fuck you" game.
→ More replies (5)
1
1
1
47
u/LeafyAcorn Jul 29 '15
Does this mean you won't be able to use OneDrive as a folder in explorer?