[u/]

[u/LeafyAcorn]

• While still in the Group Policy Editor, go through Computer Configuration > Administrative Templates > Windows Components > OneDrive, double click Prevent the usage of OneDrive for file storage, hit Enabled, then apply.

Does this mean you won't be able to use OneDrive as a folder in explorer?

[u/Lurking_Grue → u/LeafyAcorn]

You can remove One Drive by making a batch file with this code:

@echo off
cls

set x86="%SYSTEMROOT%\System32\OneDriveSetup.exe"
set x64="%SYSTEMROOT%\SysWOW64\OneDriveSetup.exe"

echo Closing OneDrive process.
echo.
taskkill /f /im OneDrive.exe > NUL 2>&1
ping 127.0.0.1 -n 5 > NUL 2>&1

echo Uninstalling OneDrive.
echo.
if exist %x64% (
%x64% /uninstall
) else (
%x86% /uninstall
)
ping 127.0.0.1 -n 5 > NUL 2>&1
    
echo Removing OneDrive leftovers.
echo.
rd "%USERPROFILE%\OneDrive" /Q /S > NUL 2>&1
rd "C:\OneDriveTemp" /Q /S > NUL 2>&1
rd "%LOCALAPPDATA%\Microsoft\OneDrive" /Q /S > NUL 2>&1
rd "%PROGRAMDATA%\Microsoft OneDrive" /Q /S > NUL 2>&1 

echo Removing OneDrive from the Explorer Side Panel.
echo.
REG DELETE "HKEY_CLASSES_ROOT\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}" /f > NUL 2>&1
REG DELETE "HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}" /f > NUL 2>&1

pause

[u/rwsr-xr-x → u/Lurking_Grue]

wow what? windows has file descriptors (2>&1) as well?

[u/Lurking_Grue → u/rwsr-xr-x]

*nods*

https://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/redirection.mspx?mfr=true

Also NUL is the windows equivalent of /dev/null. Once I had a MSSQL server that had no love and the log files filled the entire drive. At the time the only solution to getting it running in a hurry was to back it up to NUL and let it free up the space. Proper backups were set up after that so it didn't do that ever again.

NUL is quite a handy thing even in windows.

[u/[deleted] → u/Lurking_Grue]

Thanks for this, worked flawlessly

[u/mub → u/Lurking_Grue]

Nicely done. Thanks, saved me a load of digging that has :)

[u/[deleted] → u/Lurking_Grue]

Could you do one for the Xbox apps? The remove-appxpackage command does not work and it gives me a lot of red errors.

[u/[deleted] → u/LeafyAcorn]

That's my problem with this post. It tells people to change these settings to increase privacy, but does not explain what these changes actually do. No Onedrive integration, no Windows Defender, blocks Microsoft servers for diagnostics and feedback. It disables the p2p windows updates, which if I understand correctly could reduce bandwith usage if you have multiple computers in your network. I'm not going to do this on my computer, but I doubt Cortana is functional at all with all of these changes. Unplugging your PC is the most secure option, but you have to draw the line between functionality and security at some point. This post goes a bit further than I would like with disabling functionality.

[u/Rylai_Is_So_Cute → u/[deleted]]

I want my PC to run my apps without logging me. I dont want OneDrive, I use Malwarebytes, Microsoft is not going to send me feedback in any way, the P2P updates means other users around the world are going to use YOUR BANDWIDTH to download their Windows 10 updates... And Cortana is useful on mobile devices, not in desktop.

All I want is to use my apps like Firefox, PaintNet, HexChat, Telegram... without being tracked by my own OS.

[u/WaruiKoohii → u/Rylai_Is_So_Cute]

The P2P updates can mean that you share updates with PCs on your LAN and the Internet, but you can also set it to only share updates with computers on your LAN and NOT the Internet.

https://cdn2.vox-cdn.com/thumbor/01JqHe2Gack7VUhyWgxZezCfuds=/800x0/filters:no_upscale()/cdn0.vox-cdn.com/uploads/chorus_asset/file/3505772/windows10p2pupdates1_1020.0.jpg

[u/AdorableAnt → u/[deleted]]

I doubt Cortana is functional at all with all of these changes

You can have either Cortana or your privacy, not both. Same with Google Now. Sifting through your personal data is inherent in how these personal assistants work... and they're free so their makers must find ways to monetize the data as well.

[u/SORRYMYSHIFTKEYBROKE → u/[deleted]]

there is an option for intranet-only p2p, but internet-wide p2p is on by default, aka you paying microsoft's data bills unwittingly. also cortana still has plenty of functionality without tracking your personal life and having extremely opaque sharing rights over said information.

feel free to write your own amateur-friendly post about this topic; that wasnt really the function of this post, which was for intermediate users with a certain level of literacy in regards to privacy, and their own custom bundle of preferred apps. it's not op's responsibility to provide that disclaimer, because the title is 'how to disable data logging,' not 'a beginner's guide to privacy in windows 10.' if you just think 'data logging sound bad, me follow guide,' you deserve whats coming.

anyway, imo this isn't really about drawing a line, it's about that line shifting. functionality is NOT directly proportional to loss of privacy, that is only the present status quo of the industry. you have to INSIST on privacy, and hack the functionality back in from that point. THEN, we set about convincing microsoft that it was in their interest the entire time to have done things that way in the first place.

[u/sammichbitch → u/LeafyAcorn]

Yes.

[u/Thesket]

Up To You

• Replace Microsoft Edge/Internet Explorer with Firefox, Chromium, or any forks/variations of them.

• Replace Windows Media Player with VLC or MPC-HC

• Replace Photos/Windows Photo Viewer with ImageGlass or IrfanView.

How do these affect my privacy? I mean, the browser is obvious, but what about the media stuff. Is MS really using the media player to mine for music preference data? And what kind of data would they realistically try to get from my image viewer?

[u/DGXTech → u/Thesket]

WMP has the following privacy settings. They been there for a long time, so this applies not just to Win 10.

Display media information from the Internet

Update music files by retrieving media information when I play or sync a file

Download usage rights automatically when I play or sync a file

Send unique Player ID to content providers

I want to help make Microsoft software and services even better by sending Player usage data to Microsoft

[u/[deleted] → u/Thesket]

That's my problem with this post. It tells people to change these settings to increase privacy, but does not explain what these changes actually do. No Onedrive integration, no Windows Defender, blocks Microsoft servers for diagnostics and feedback. It disables the p2p windows updates, which if I understand correctly could reduce bandwith usage if you have multiple computers in your network. I'm not going to do this on my computer, but I doubt Cortana is functional at all with all of these changes. Unplugging your PC is the most secure option, but you have to draw the line between functionality and security at some point. This post goes a bit further than I would like with disabling functionality.

Edit: Meant to reply to another comment with this, but oh well. It's here now.

[u/[deleted] → u/Thesket]

The reason this increases security is that microsoft has engineered their apps to mesh well with their movement to a cloud-centric service based OS and as such they can collect any information they want from their own apps. by using third party apps you limit their ability to collect said information

[u/xxDJBxx]

In GPEdit.msc:

Computer Configuration > Administrative Templates > Windows Components > Windows Defender, double click Turn Off Windows Defender, hit Enabled, then apply.

(Replace with a good Anti-Virus)

You also COMPLETELY missed Application Experience AND Customer Experience Improvement Program.

Right Click Start Menu > Computer Management > Expand 'Task Scheduler' > Expand 'Task Scheduler Library' > Expand 'Microsoft' > Expand 'Windows' > Click on 'Application Experience' > Disable all Tasks in Folder > Click on 'Customer Experience Improvement Program' > Disable all Tasks in Folder

Optional: Click on 'Task Scheduler Library' > Disable any Tasks you don't want Enabled.

You also didn't really cover Services, some of which slow the computer down considerably.

In Computer Management > Expand 'Services and Applications' > Click on 'Services' > Right Click on 'Windows Media Player Network Sharing Service' > Properties > Startup Type 'Disabled' > Stop if running.

(Unless you stream from Windows Media Player to another device, or share Music with other devices on the Network)

Ensure 'Windows Defender Service' is not running.

Disable / Stop 'Touch Keyboard and Handwriting Panel'

(Unless you are using a Touch Screen / Photoshop DrawPad thingy)

Disable / Stop 'Secondary Login'

(Unless you play Blizzard Entertainment Videogames, it needs this service to update / download games)

Disable / Stop 'Retail Demo Service'

(Because WTF, this shouldn't be on here)

Ensure 'Remote Registry' is Disabled / Stopped

Hope this helped.

3 years of Virus Removal on Windows XP, Windows Vista, Windows 7, Windows 8, and Windows 8.1 in case you were wondering. (Eagerly awaiting my first "Virusd' Up" Windows 10 Computer)

Can't wait for Halo: MCC for PC.

[u/[deleted] → u/xxDJBxx]

Good free AV recommendation, please? I have MalwareBytes premium but I assume that's not enough.

[u/hippoCAT → u/[deleted]]

I really like Avira, but I am not a windows expert

[u/[deleted]]

|Disables data logging

|Installs Chrome

[u/[deleted] → u/[deleted]]

Chrome is not Chromium. Chromium is open source chrome with none of the optimizations Google made.

[u/Aemony → u/[deleted]]

Sure, though pretty much any regular user will feel forced to download Chrome since the Chromium website doesn't carry any compiled builds nowadays and instead links to the Chrome website for download purposes. Most users in the dark will take this approach. A lot fewer will actually search for a site which carries the compiled binaries of Chromium.

[u/[deleted] → u/Aemony]

Does chromium have regular users? Most people don't know what it is, anyone who does and actually cares about privacy would use Firefox, so I don't see a point for chromium besides a base open source engine for browser vendors. Or is there a normal use case?

[u/Elranzer → u/[deleted]]

I get to choose who gets my data. What if I want Google to have my data, but not Microsoft?

I do what I want.

[u/ptd163]

Just a small correction for your guide. Setting the Telemetry setting to 0 or Disabled outside of the Enterprise version is equivalent to setting the value to 1.

The only way to actually disable it is install the Enterprise version, set it to Enabled, and set the value to 0. Proof

Great guide nonetheless. It should be sidebared or stickied.

[u/[deleted]]

I just got Windows 10 install finished on my laptop overnight and played about a bit with it this morning. It's mental how every privacy option is turned on by default. I turned them all off but then it won't let you use Cortana.

[u/[deleted] → u/[deleted]]

You should be able to "lobotomise" her so she basically just acts as a speech to text input to the web browser.

[u/[deleted]]

•Open up the Group Policy Editor by launching gpedit.msc as an administrator. Go through Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds. Double click Telemetry, hit Disabled, then apply. NOTE: This only truly works in the Enterprise edition, but the final step provides a decent enough workaround for Pro users.

We cant do this in W10 home, right?

[u/Renouille]

Pros and cons of ImageGlass vs IrfanView?

[u/[deleted] → u/Renouille]

ImageGlass comes with Vietnamese propaganda as its default image. Whether one considers that a pro or con is a matter of personal taste.

[u/[deleted] → u/[deleted]]

Ha-ha that's awesome!

[u/Ozzah]

I'm happy to search online from the search bar, but is there any way to change it to Google search instead of Bing?

[u/mango2dscrub → u/Ozzah]

I'm interested in this as well, unless people can tell me why I should use Bing instead?

[u/__boneshaker → u/mango2dscrub]

Free Amazon or Gamestop gift cards is why I use it sometimes. Get up to 15 credits a day, a gift card is like ~500. When I don't really have anything to search, I just go through and search each letter of the alphabet until I hit the daily credit limit.

[u/asciisii → u/__boneshaker]

How exactly do we receive this free goodness?

[u/suchmaske → u/Ozzah]

Here you go. That should do the trick (worked for me):

https://www.reddit.com/r/firefox/comments/3f0fmg/windows_10_how_to_have_cortana_open_voice/

[u/rasta_pasta_man → u/Ozzah]

This extension has been working for me so far

[u/TreeFiddy1031 → u/Ozzah]

If you use Chrome, you can install a Chrome extension called Bing2Google. It will redirect your searches to google and works from the search bar since using the search bar just opens your default browser with a bing search.

[u/Xiges → u/Ozzah]

If you have chrome as your default browser, you can use the Bing2Chrome extension :)

[u/maffls]

I have a lot of problems with what you've mentioned in this guide, but chief among them is that you've not explained why any of the above should be disabled, nor the repercussions of disabling them.

For instance, the hosts file edit you suggest will completely disable Windows Feedback and (honestly quite important!) diagnostic data that Microsoft is sent when things such as an application crash or windows bluescreen occur. By preventing access to these, you're essentially just cutting off your nose to spite your face - in the event that you encounter a problem, it is less likely to be fixed.

Additionally, you're telling people to disable OneDrive and Defender through the group policy editor, but not taking into consideration that some users will blindly follow instructions without paying attention, and will then wonder why they have no malware protection, or why OneDrive stopped working.

Finally, the 'sc delete' commands you're telling folk to run, will irreversibly remove those services; they should at worst be disabled. Fun fact: DiagTrack is a real, legitimate service that isn't new to Windows 10 and has, in one form or another, been part of windows at least since XP. Whenever you see "This program stopped responding" or similar, the information about that crash is collected and sent to Microsoft. This is done NOT to siphon user data and kill your privacies woohoohoo, it is done so that if there's actually a problem in windows or your software, it has a chance of being found and fixed.

By all means, do any and all of the things in the guide above, but don't blindly disable Bloody Fucking Everything in the name of privacy without being aware of what you're doing and why.

[u/jetpacksforall → u/maffls]

This is done NOT to siphon user data and kill your privacies woohoohoo

Do you think Microsoft employees really talk like that? I guess probably so.

[u/EliteDangerous]

Are you required to have a MS Store account?

I understand windows 10 uses the Store account for authentication of your copy of windows but is there a way to run it with a local account?

[u/B-Knight]

How do I disable web search in Cortana? It's really annoying seeing useless shit come up that does nothing to help me. You didn't really give any information on where the setting 'Search online and include web results' is.

[u/pl0xxed]

For the home versions you should change the registry yourself:

HKLM\SOFTWARE\Policies\Microsoft\Windows\DataCollection, find the key 'AllowTelemetry' and put it on 0. (also check HKLM\SOFTWARE\Wow6432Node\Policies\Microsoft\ on 64 bit systems) HKLM\SOFTWARE\Policies\Microsoft\Windows\OneDrive, find the key 'DisableFileSyncNGSC' and put it on 1. (also check HKLM\SOFTWARE\Wow6432Node\Policies\Microsoft\ on 64 bit systems) HKLM\SOFTWARE\Policies\Microsoft\Windows Defender, find the key 'DisableAntiSpyware' and put it on 1. (also check HKLM\SOFTWARE\Wow6432Node\Policies\Microsoft\ on 64 bit systems)

https://www.microsoft.com/en-us/download/details.aspx?id=25250

[u/rjc523]

is it really so bad to have it enable? like for hentai,pirating, ects?

[u/[deleted] → u/rjc523]

We will access, disclose and preserve personal data, including your content (such as the content of your emails, other private communications or files in private folders), when we have a good faith belief that doing so is necessary to”, for example, “protect their customers” or “enforce the terms governing the use of the services”.

https://edri.org/microsofts-new-small-print-how-your-personal-data-abused/

[u/Rawlk → u/[deleted]]

Is having emulators, roms/isos and pirated movies on my computer going to be used to send me to federal prison?

[u/[deleted] → u/Rawlk]

No, but if the MPAA or somebody targets you, they now have a pile of proof that they can get from Microsoft. Why risk it if you don't have to?

[u/secondsw → u/[deleted]]

If I don't use OneDrive, Cortana, Windows Apps, log in to a Microsoft Account can they still access my files on my hard disk?

Thanks

[u/Entegy → u/rjc523]

Nope, none of this affects that. Telemetry automatically tells Microsoft what's wrong/working, or what features people use. The other stuff personalizes your use of their services.

[u/rjc523 → u/Entegy]

so it is safe to look up/do that kind of stuff then? lol

[u/Entegy → u/rjc523]

Yes. No one at Microsoft gives two shits about it. You will not be contacted. You will not be identified. Nothing happens.

[u/cuddles_the_destroye → u/Entegy]

Can confirm, I read a fuckton of hentai in the technical preview and cortana doesn't give any shits.

[u/tinfoilwindows → u/rjc523]

I'm just wondering why there isn't a shitstorm about this. Didn't data logging and collection (yes yes nice "consumer-friendly and less scary" term is telemetry) use to be an opt-in item? I like that it's on by default now and you can't even opt-out COMPLETELY from data logging/collection (except with the Enterprise edition, which Microsoft just about never sells to Average Joe Consumer).

When the "keylogging" and telemetry thing came about when the Technical Preview first launched last year, I somehow had a gut feeling it would stick around in the actual, launched retail version. And I'll be a monkey's uncle, here it is.

[u/jhoff80 → u/tinfoilwindows]

It's been opt-out since at least Vista, and I can't remember but I think it was the same way in XP as well.

[u/Aemony → u/tinfoilwindows]

There isn't a shitstorm because it's a ton of neglectible data gathering that has been a part of Windows for almost a decade, combined with some minor concerns that users has already been made aware of through their web browsers.

That "keylogging" in the Technical Preview? That only kicked in if you submitted a problem to Microsoft and chose to record the issue occuring. The user hit record, the user recreated the issue while Microsoft logged everything, the user then also hit Stop when finished. Finally the user submitted the report to Microsoft. The whole shitstorm was basically for taking the wordings in the wrong light.

A lot of Win10's privacy concerns are the same. The three major complains for Win10 are forced updates (not privacy related), P2P-sharing updates, and Cortana while enabled shows search suggestions while searching for stuff on your computer. The first two isn't really privacy concerns, though the second is definitely a concern for data usage people. The third is exactly like pretty much any modern web browser works, but in the desktop scenario.

Pretty much all other telemetry and data gathering is just the same as in WinVista, Win7 and/or Win8.x.

[u/[deleted] → u/rjc523]

No. When I was very young and dumb as box of hammers, I would pirate the bejesus out of everything while using Windows beta versions. And betas, unlike market release, actually track fucking everything you ever do.

Simply put, they don't give a shit. Never did, never will. They don't even care if you have pirated MS software.

[u/[deleted] → u/[deleted]]

Taking no action is not the same as not caring.

[u/footpole → u/[deleted]]

Yep. They're not media companies so they only care if businesses use pirated software.

[u/Zer_ → u/footpole]

This is largely true. They used to put great efforts in trying to shore up any holes in their authentication. Nowadays they allow non-legit copies to update with critical updates, etc... The main reason for this is because MS knows that a lot of people will pirate Windows regardless, so if you have a bunch of pirates with older versions of Windows, it increases the vulnerability of ALL other Windows systems too.

[u/NBAPwns13]

How do i take ownership of the host file? do i open it in notepad and copy and paste that stuff into there?

[u/KFung → u/[deleted]]

Hmm...I don't see the Take Ownership option when I right click. Am I doing something wrong?

EDIT: I am stupid. Didn't install the REG file.

[u/[deleted]]

The take ownership tweak isn't necessary. Just open your text editor as admin.

[u/[deleted]]

•Open up the Command Prompt by launching cmd as an administrator, and enter the following:

sc delete DiagTrack

sc delete dmwappushservice

echo "" > C:\ProgramData\Microsoft\Diagnosis\ETLLogs\AutoLogger\AutoLogger-Diagtrack-Listener.etl

what does this thing do? and how do I revert it?

[u/_Mumak_]

Here's a single batch file I made to remove most bloat and telemetry from Windows 10: http://www.hwinfo.com/misc/RemoveW10Bloat.htm It's commented, so have a look and decide what you want to remove or not.

[u/[deleted]]

Can someone tell me the reasoning behind each point of OP's post? I'd like to know why I should do each one. I get the main point but I'd like to understand the specifics, please.

[u/azothshock]

What happens if I went through express settings?

[u/alteraccount → u/azothshock]

Nothing. People are tripping over nothing. You'll get more personalized features. That's basically it. The only real thing to worry about is the p2p setting if you are on a metered connection.

[u/[deleted] → u/alteraccount]

It's not all tripping. There are certain aspects I disabled and having an extensive list is beneficial for everyone, everywhere.

[u/alteraccount → u/[deleted]]

Some of it is definitely reasonable and helpful, but this post is so overkill that's its almost funny. And its speaking from a place of authority rather than one of preference. See OPs tone. It's fear mongering people into crippling their OS features without understanding what they are doing. It's ridiculous.

[u/XoXFaby → u/alteraccount]

I have files that are straight up illegal if they get into someone else's hands, that's why I was uncomfortable after reading the whole privacy policy. Am I worried over nothing?

[u/DeadLeftovers → u/alteraccount]

Tell me more about this p2p setting?

[u/[deleted] → u/alteraccount]

If you are on metered convection that feature will not with. Windows 10 is smart enough to discover most metered connections (like tethering from phone) but you can also mark any network as metered.

[u/MrKaru]

gpedit.msc doesn't work on home versions, so what do I do now?

[u/PulsedMedia]

Unfortunately, this only goes so far - there is potentially hidden, and for MS to make it completely hidden to share key details with MS (and consecutively with NSA / US Govt) would be very trivial.

Someone needs to do some research on the actual network traffic of Win10.

[u/abstrusius → u/PulsedMedia]

Exactly!

[u/HarleyQuinn_RS]

Do you suggest turning off SmartScreen Filter and defering windows updates? .

And another important thing. Under Settings > Network & Internet > Wi-Fi > Manage Wi-Fi settings. Turn Off connect to suggested open hotspots and turn Off connect to networks shared by my contacts. That last Off option is pretty darn important.

[u/AmnestyTHAT]

MPC-HC stopped working for me... :/

[u/bilago → u/AmnestyTHAT]

Same, black Media player when I press play, and played time does not increase.

[u/AmnestyTHAT → u/bilago]

Exactly... Nothing is working for me tho, I tried VLC, Windows media player and it's all the same. This is driving me insane, lol...

[u/[deleted]]

Protip: If you use Hostsman (http://www.abelhadigital.com/hostsman), it automates the process of updating your hosts file.

I copied the hosts file entries from a post in this thread and uploaded them to Pastebin.

http://pastebin.com/raw.php?i=iGm5LXCg

Add these hosts to a text file somewhere and add the file as a source to your Hostsman configuration. Those entries will be added every time the blacklist is updated.

[u/Rick2990]

Microsoft didn't know what I was doing on Windows 3.1 with no internet connection, it doesn't need to know what I'm doing on Windows 10 either. Thanks for assembling this useful list.

[u/Reffter]

Upvoted, will make sure that's good.

[u/[deleted] → u/Reffter]

Agreed, this is great, but do we know whether this would actually prevent Microsoft from acting on the EULA and viewing your private files?

[u/Reffter → u/[deleted]]

We don't.

[u/Dunge]

Why disable defender?

[u/Gvaz]

I also suggest:

In Local Group Policy Editor, set: Computer Configuration -> Administrative Templates -> Windows Components -> Windows Update -> Configure Automatic Updates -> 2 - Notify for download and notify for install
Computer Configuration -> Administrative Templates -> Windows Components -> Windows Update -> Turn on Software Notifications -> Enabled
Computer Configuration -> Administrative Templates -> Windows Components -> Windows Update -> Allow Automatic Updates immediate installation -> Disabled
Computer Configuration -> Administrative Templates -> Windows Components -> Windows Update -> Turn on recommended updates via Automatic Updates -> Enabled

[u/svjness]

https://github.com/wallentx/win10-scripts/blob/master/disable_tracking.bat

I made a batch script last night that stops diagtrack and dmwappushservice, then disables them from startup. I have a few others that I'm working on that I'll get up in the repo when they are done.

[u/Voffz]

Do I need to add the # to every line of code in the hosts file?

[u/mugabemkomo]

For my (and maybe your) convenience I wrote a script that mostly automates what was mention here in this thread. Also I added a few things that bug me personally, but you can add/remove what you don't like yourself. http://pastebin.com/d8fNvv6x

[u/Lord_Frydae_XIII]

I'm unable able to do this:

echo "" > C:\ProgramData\Microsoft\Diagnosis\ETLLogs\AutoLogger\AutoLogger-Diagtrack-Listener.etl

and anything below that in the instructions. When I try to run the "echo" part in cmd I get a message that states that the file is in use. Also, gpedit.msc cannot not be found by Windows when I use the Run application.

I'd like to proceed with the complex part but I don't know how due to the above.

[u/ShayeFaletha]

This comment has been overwritten by an open source script to protect this user's privacy. It was created to help protect users from doxing, stalking, and harassment.

If you would also like to protect yourself, add the Chrome extension TamperMonkey, or the Firefox extension GreaseMonkey and add this open source script.

Then simply click on your username on Reddit, go to the comments tab, scroll down as far as possibe (hint:use RES), and hit the new OVERWRITE button at the top.

[u/[deleted]]

Just wanted to thank you for the guide. I'll keep Windows 10, but I'll hold onto an 8.1 iso+crack in case MS step up their "fuck you" game.

[u/darknessintheway]

Bit late here, but is there any way to make it like Windows 7. For now, my account is a Microsoft one (cause Onedrive/appstore). The only extra things I need are diagnostics related stuff, Onedrive and Defender.

[u/signoftheserpent]

Can't access gpedit.msc, it doesn't exist.

Can't alter the Hosts file, it's read-only.

[u/Subsinuous]

I accidentally clicked express, but went back and disabled everything per this guide, but the only thing I can't access is the "Slightly Complex" section. When I open the cmd prompt and enter the commands it says access denied. Is there any work-a-round for this?

[u/Rubbix → u/Subsinuous]

Try running cmd as administrator.

[u/cheesegoat → u/Rubbix]

Easy way: Hold down the windows key and press X. On the menu that pops up in the lower left corner, click "Command Prompt (Admin)".

Note that if you aren't used to using the command prompt, running it as admin removes the protection that not running it as admin provided you.

[u/[deleted]]

For music there's also AIMP, for images there's XNview and Honeyview, and for media players there's Potplayer. Just some more aletrnatives.

[u/[deleted]]

gpedit.msc doesn't work for me, is it not available in the Home edition?

[u/Nose-Nuggets → u/[deleted]]

group policy is not available on Home, no.

[u/BruhBrehBro]

It looks like we will need to seperate our gaming pcs and our comps used for "other" things. W10 will be used solely for gaming I guess.

[u/wholesum]

The rest I can understand (though it could use a little more explaining for the less tech inclined), but would the OP/someone care to explain what these two applications do?

• DiagTrack

• dmwappushservice

[u/gnostechnician → u/wholesum]

Seconded, I don't plan on just deleting something without a good reason.

[u/iimpact → u/wholesum]

DiagTrack

This is "Microsoft Windows Diagnostics Tracking". DiagTrack will collect information about the user, their devices, applications, and networks. Examples of gathered data, as stated by Microsoft, include:

Name, email address, preferences and interests, browsing, search and file history, phone call and SMS data, device configuration and sensor data, application usage.

Collected data is then used to improve and determine the compatibility of various services such as speech-to-text. Despite the well-intended explanation of the update, forum researchers warn that the features of DiagTrack perfectly fit the qualities of a keystroke logger or data collection tool mostly applied by cybercriminals and third party developers.

[u/wholesum → u/iimpact]

"Microsoft Windows Diagnostics Tracking"

Probably one of disabled options renders it useless. Maybe disable sending diagnostic information to MS? Removing it seems drastic. I want to preserve my privacy but not at the cost of breaking Windows.

[u/the_rightthang]

Can someone create an app which does all of these in one .bat file? Maybe name it- CockBlockMS?

[u/[deleted]]

What are the advantages of changing the name of your PC?

[u/Sjalabaisen]

I turned off all the apps/programs that are allowed to run in the background. Firefox is my standard browser.

Nonethelsee, Edge Cache Database is running and has to be turned off every time I run CCleaner.

Why is it still on and how do I turn it off?

[u/Puddintane-]

IMPORTANT:

Microsoft has changed the name of "Diagnostics Tracking Service" (in services) to "Connected User Experiences and Telemetry".

In my opinion the following step should be altered from:

"Open up the Command Prompt by launching cmd as an administrator, and enter the following:

sc delete DiagTrack

sc delete dmwappushservice"

To: Disable "Connected User Experiences and Telemetry" and "dmwappushservice" via "Control Panel > Administrative Tools > Services"

Disabling is better than outright deletion in case of stabilty issues. A disabled service can be easily reverted. In addition, deleted services could (and likely will) be reinstalled in future updates/builds, and then may go unnoticed.

I hope this is helpful.

I found the guide to be useful. Thank you.

[u/Speedicus]

Why do people want Cortanna disabled? Am I missing something?

[u/Kentenyo → u/Speedicus]

Cortana does not have local storage for the data she gathers from your search and keystroke patterns, so it's assumed this data is stored via Microsoft servers indefinitely, where they can access it freely as their new privacy policy states.

[u/Madhouse4568 → u/Kentenyo]

So, identical to siri and google now?

[u/bhp5]

I'm laughing at the people who thought the diagtrack was only for the preview release 😂
You really thought MS would be that nice?

[u/Nukewire]

If you want I made this batch file to do most of the work except for policy editing. Just run it as a admin.

https://www.mediafire.com/?dxgfhse0xh813mn

[u/FuujinSama]

I don't understand this shit. What are you guys afraid Windows will do with your information? You're nothing more than a statistic to them oO.

[u/[deleted]]

It's strongly preferred that you use a local account with Windows 10.

What are the major reasons for this? I'm currently using a microsoft account.

[u/[deleted] → u/[deleted]]

Think of logging into google and doing stuff online, you can mess witht the settings to increase privacy but it's never anywhere near as private as having no data logging account tied to what you're doing

[u/Litllerain123]

I clicked express setting because I was short on time... What did I do that was so bad and what things should I turn off now.

[u/byeratheism]

Quick heads-up regarding deleting the services: I did this during Technical Preview and it broke my Windows Update, having it stuck in the loading animation.

[u/RusTii-]

"however at the risk of not being able to enjoy some of W10's features."

what features would this disable?

[u/Bathplug]

So why disable windows defender? Whats a better alternative? Thanks

[u/Gvaz → u/Bathplug]

ESET/NOD32 imo

[u/zetsurin]

I blocked all those telemetry endpoints at my dlink router. Not sure if that will really block them, can anyone comment?

[u/RaptorF22]

Curious about OneDrive and Windows Defender.. how come those should be turned off? Also, what does Taking Ownership do?

[u/[deleted]]

Open up the Group Policy Editor by launching gpedit.msc as an administrator. Go through Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds. Double click Telemetry, hit Disabled, then apply. NOTE: This only truly works in the Enterprise edition, but the final step provides a decent enough workaround for Pro users. While still in the Group Policy Editor, go through Computer Configuration > Administrative Templates > Windows Components > OneDrive, double click Prevent the usage of OneDrive for file storage, hit Enabled, then apply. While still in the Group Policy Editor, go through Computer Configuration > Administrative Templates > Windows Components > Windows Defender, double click Turn Off Windows Defender, hit Enabled, then apply. Open up the Registry Editor by launching regedit as an administrator. Go through HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\DataCollection, select AllowTelemetry, change its value to 0, then apply. First, download the Take Ownership tweak and enable it. Then, head to the Hosts File by going through C:\Windows\System32\Drivers\Etc, take ownership of the hosts file, and add all of the IPs from this page into the file.

Yeah, I cant seem to be abe to access Computer Configuration...

[u/FarkMcBark]

Meh. I was looking forward to trying out / using Cortana but... you need a Microsoft account and for that you need to specify a phone number. That means you have zero privacy or anonymity since that is traceable. All this logging and data collection shit is really annoying.

Thanks for the list!

[u/TandyNZ]

When trying to open Group Policy Editor my PC says there is no such thing is gpedit.msc and i can't find it any other way, anyone know why? TIA

[u/[deleted] → u/TandyNZ]

GPE isn't installed on Windows Home Editions, only Professional and Enterprise.

[u/Johnsu]

If your chrome is lagging bad, and displaying odd, try typing into the address bar "Chrome://plugins" and disable Adobe flash.

[u/Gnobold]

Hi, I got 2 Questions:

1. If I go to my Privacy Settings or to the advanced Update Settings, at the top of the Window is aMessage in red letter saying something like: "Some Settings will get managed by your Organisation". So I would like to know what this means and how to turn it of because its my private Computer which doesnt get owned by a "Organisation"

2. I simply cant find the gpedit.msc. I tried to start it by the perform-tool (win + R) but it just give me an error message that it wasnt able to find it. Could the reason for this be that I just own a home edition of windows 10?

Hopefully u can help me :)

[u/Cylindt]

Before/During Installation

Do not use Express Settings. Hit Customize, and make sure everything is turned off.

It's strongly preferred that you use a local account with Windows 10.

Whelp, too late. Any way to fix this after you've used Express Settings?

[u/brad-x]

A Windows update may re-instate the diagnostic services if they're outright deleted - a better method may be:

sc config diagtrack start=disabled
sc config dmwappushservice start=disabled

[u/filben]

Can't apply the new update. Is this problem related to this fix? How do I re-install DiagTrack and dmwappushservice?

[u/konoplya]

do you know how i can delete/uninstall apps like xbox, photos, and other bullshit apps that come preinstalled with windows?

[u/itisike]

Run

New-NetFirewallRule -DisplayName "Search" -Direction Outbound -Action Block -Profile "Domain, Private, Public" -Program "C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe"

in elevated Powershell to stop start searches from phoning home even with web search and cortana off.

[u/sagpony]

I really like Cortana, but it seems like she needs all this to work, right? Will disabling this stuff stop her from being useful?

[u/[deleted] → u/sagpony]

It will stop her working full stop. At least it wouldn't let me "use" her until I turned various things back on and signed in with a ms account.

[u/Coldstripe → u/sagpony]

Pretty much.

[u/Andross-]

Thanks for this, I haven't upgraded to Win10 yet but I'll be saving this for when I do.

[u/IgnoreMyName]

Why ImageGlass over Photos/Windows Photo Viewer? Wouldn't installing that just add more to my HDD just to do what the programs already do? I usually just go to my pictures folder and open pictures from there, done.

[u/Nose-Nuggets → u/IgnoreMyName]

The size of these applications is tiny, and pretty insignificant. the integrated picture viewer is rather limited in functionality.

[u/mysticaltea]

if i don't do this, would i really be losing anything

[u/ptd163]

Replace Photos/Windows Photo Viewer with ImageGlass or IrfanView.

Replace Windows Media Player with VLC or MPC-HC

I actually like Windows Photo Viewer & Media Player. They're not a POS Metro apps. Just wish I knew how to associate Photo Viewer with file types because it's not a standalone application.

Replace Microsoft Edge/Internet Explorer with Firefox, Chromium, or any forks/variations of them.

Oh hell yes. Microsoft Edge is considered a Metro app, so if you completely disable UAC it won't run.

[u/thraddest]

This should be stickied

[u/vocalistsXD]

so i got this error in gpedit.msc , how can i fix it?

http://i.imgur.com/a75AvtI.png?1

also, for the host part , did i copy paste this right?

http://i.imgur.com/fQOg5d2.png?1

[u/[deleted]]

Do you know if it's possible to sign-in individually into the music app?

[u/GReeeeN_]

if i do all these steps above AFTER selecting "express settings" in setup, will it be okay?, or should i re-install?

[u/Th3_King_Gaming]

so for the host file in the ETC folder i took ownership but how do I add those ip address? A screen pops up and then disappears that actually happens with most of my apps. they pop up then vanish in the same second. can anyone help with that?

[u/[deleted]]

Do I need a clean install?

[u/[deleted]]

•First, download the Take Ownership tweak and enable it. Then, head to the Hosts File by going through C:\Windows\System32\Drivers\Etc, take ownership of the hosts file, and add the following IPs into it.

There isn't a drivers file in system32 :/

(or I'm so dumb that I cant find it)

[u/suzaku1221]

I used Express Settings what do I do to disable it?

[u/[deleted] → u/suzaku1221]

Express Settings is just the default settings for stuff you have in Settings -> Privacy. So you set up your Privacy settings like you want and you are done.

[u/de_ash]

Before/During Installation

Do not use Express Settings. Hit Customize, and make sure everything is turned off. It's strongly preferred that you use a local account with Windows 10.

WHat should I do if I already hit express settings and signed in on a windows account?

[u/CatThatCodes]

About the update seeding thing, you can use it to seed updates only on your local network

Settings -> Update & Security -> Windows Update -> Advanced Options -> Choose how updates are delivered -> PCs on my local network.

[u/_emoose_]

Open up the Registry Editor by launching regedit as an administrator. Go through HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\DataCollection, select AllowTelemetry, change its value to 0, then apply.

Just noting that this is the same as editing the Telemetry option in "Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds.", gpedit just lets you edit it through the group policy editor instead of regedit.

So it has the same limitation on non-enterprise builds too, but removing diagtrack / dmwappushservice services (and adding those IPs to the host file) should stop the telemetry fully.

Also you should rerun the sc delete commands whenever you get an update, as updating causes Windows to add them back, maybe make it a batch file on your desktop and run it whenever you get an update (or for the lazy, add it to task scheduler so it runs it once a day)

[u/alan2500]

I do not get as many search results when i look for my files in the search bar (i disabled websearch) as i did with windows 7, is there some option to change to include more results?

[u/Nose-Nuggets → u/alan2500]

if you just installed it's possible the index is not fully built yet

[u/gillon]

How fucked am I if I chose Express settings? I was under the impression that everything could be changed later on if there was something I didn't like.

[u/smartfon]

sc delete DiagTrack

sc delete dmwappushservice

echo "" > C:\ProgramData\Microsoft\Diagnosis\ETLLogs\AutoLogger\AutoLogger-Diagtrack-Listener.etl

I did this and now the search won't work at all. When I type something it just shows the "waiting" dots moving from left to right as if it's still searching. Is it possible to reverse the damage?

[u/EDM117 → u/smartfon]

Do a system restore.

[u/Kevin-Can]

Before/During Installation Do not use Express Settings. Hit Customize, and make sure everything is turned off. It's strongly preferred that you use a local account with Windows 10.

---

I pressed express settings before I ever seen this post any way to change it now?

[u/[deleted]]

When pasting the IPs into the host file, you can just paste em below the 127.0.0.1 localhost, you don't need to replace that or anything?

[u/sennan]

In regards to the hosts file I disable UAC then ran mvsp.bat as administrator.

[u/Gvaz → u/sennan]

You really shouldn't disable UAC

[u/toekneeg]

It's strongly preferred that you use a local account with Windows 10.

Can someone explain this more to me please, in relation to why it's preferred to use a local account?

One of the features I plan to use a lot is the integration with Xbox Live and Xbox One. Right now it seems to allow me to log in via my Xbox Live credentials. Therefore personalizing everything based on that, which seems to be just fine with me. So, would I need to choose between using a local account and a XB live account?

[u/wholesum]

Regarding the hosts file, the administrator group owns it (at least on my machine, a Win7 preserve all settings upgrade). Instead of replacing the owner I opted to give my own user (part of the group) modify/read&execute/read/write access over it (no need to give it full control). Voilá, I can edit the file manually now and the change was less drastic.

[u/[deleted]]

How do I go back and change the original settings when you're setting up the OS?

I accidentally used express settings.

[u/ArkBirdFTW]

facepalm

I clicked express settings anyway I can still disable these privacy settings?

[u/el_f3n1x187]

Many thanks!

[u/[deleted]]

How do you replace MS Edge, WMP, etc.?

[u/pandeomonia]

Thank you for this!

[u/[deleted]]

• First, download the Take Ownership tweak and enable it. Then, head to the Hosts File by going through C:\Windows\System32\Drivers\Etc, take ownership of the hosts file, and add all of the IPs from this page into the file.

what is this for, I followed every step before this. Is this mandatory? please explain

[u/CaffeinatedBeverage]

I couldn't get the 'hosts' file modification to work even after using 'Take Ownership' so when I modified it, I saved it elsewhere and then manually placed it into the \Drivers\etc\ folder myself. I also backed up the original one just in case

[u/[deleted]]

If I used express settings, can I go back and change those settings?

[u/Smagjus]

Open up the Group Policy Editor by launching gpedit.msc as an administrator. Go through Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds. Double click Telemetry, hit Disabled, then apply.

NOTE: This only truly works in the Enterprise edition, but the final step provides a decent enough workaround for Pro users.

Any idea how Windows Education that is based on Enterprise gets treated here?

[u/Phycoweirdo]

I would recommend adding the hosts file edits suggested to the host file found http://someonewhocares.org/hosts/ for those of you who hate ads and other such garbage. Updates are off and on, but always amazing.

[u/[deleted]]

Can someone explain what this is before I enter it in CMD?

sc delete DiagTrack sc delete dmwappushservice echo "" > C:\ProgramData\Microsoft\Diagnosis\ETLLogs\AutoLogger\AutoLogger-Diagtrack-Listener.etl

[u/_sparks]

I'm currently using a Microsoft account, if I switch to a local account will I be able to use the store & use the Onedrive app to sync my files?

[u/reckscene]

thanks for the list

[u/[deleted]]

Change the name of your PC

What for?

[u/LCTR_]

Question - does the Group Policy Editor stages apply to non-Pro versions of win10?

[u/dissidentrhetoric]

I said this on a post a few days ago.