[Guide]Way to Disable Keylogger/ Telemetry v3.55

Group Policy Editor -> Administrative Templates -> Windows Components -> Data Collection and Preview Builds

 

So do we know, what are the differences between level 0 and level 1 (basic)?
What data is transferred in Win10 Pro compared to level 0 in Win10 Enterprise?

 

There is an update for Windows 8.1 that installs DiagTrack
This is the kb article https ://support.microsoft.com/en-us/kb/306870
This is part of the description:
[h=3]The included service uses SSL (TCP Port 443) to download manifests and upload data to Microsoft when data is available for upload. The service uses the following DNS endpoints:[/h]

• vortex-win.data.microsoft.com
• settings-win.data.microsoft.com

This update contains the following two manifests that are occasionally updated by the Diagnostic Tracking Service:

• telemetry.ASM-WindowsDefault.json
• utc.app.json

The two files are marked as static files in the update. When an advanced user runs the System File Checker Tool (sfc.exe), the files are unintentionally flagged as corrupted. There is no impact or actual corruption on a device that is running this update, and this issue will be fixed in a later service update.

Probably windows 10 uses the same dns servers, so would be good to log the network traffic after turning off the DiagTrack

 

so does this reg key truly disable telemetry?

edit:

so i messed around with the reg key and group policy method. i wanted to compare the two. from what i can tell, both do exactly the same exact thing. both don't appear to actually disable telemetry on core or pro.

from what i noticed:

set telemetry to enhance and/or full in settings - privacy pane
open group policy
set telemetry to "0 - enterprise only"
go back to settings - privacy - telemetry
telemetry is greyed out and set to basic now

set everything back to normal again, reboot, redo it, but this time reboot after changing group policy, and still everything is the same. group policy just changes whatever you have to a greyed out menu defaulted to basic

now try the reg method
set telemetry to enhance and/or full in settings - privacy pane
add the reg key which sets it to 0
reboot
go back to settings - privacy - telemetry
telemetry is greyed out and set to basic now

from what it appears, it doesn't disable it, but just does what group policy editor does. seems like core and pro "0" truly behaves as "1."

 

Do they record everything including passwords typed during email logins and other accounts?

 

This doesn't fully disable telemetry, the "Allow Telemetry" option in group policy (Administrative Templates -> Windows Components -> Data Collection and Preview builds) sets this value depending on what you choose, and this is what it shows: hxxp://i.imgur.com/CpUDKHU.png

You'll still be sending telemetry, just a limited amount of it. If you want it fully disable I'd recommend disabling diagtrack & that other service.

 

block the addresses in hosts file.

0.0.0.0 vortex.data.microsoft.com
0.0.0.0 vortex-win.data.microsoft.com

 

You have to change it in the group policy editor. It has a weird thing where you set it to Enabled, but set the amt of data to 0 for enterprise.

@the other ppl. yes, the greyed out option means its not functioning.
Being set to basic and greyed out does not mean that it still sends basic data.
It gets that setting from the diagnostics threshold setting. If the threshold setting is set to 7 it sets basic.
Normally when you set the option to 0 in Enterprise it also sets the threshold to 1, which is no data.
It doesn't mean that it's actually sending data, tho.

Why didn't I mention this? Because home/pro have no option to actually set the threshold to 1. It could bork people's system and I don't want that.

 

How is this in comparison to what Lite8 posted? hxxps://goo.gl/dYuyPs

 

You need to login to view this posts content.

 

You need to login to view this posts content.

 

how to know the pc infected by keylogger?

 

Settings -> Privacy -> writing option

 

There's lots of valuable info in this thread to lock W10 down from Microsoft's snooping nose. But they're spread all over the pages, it's hard to keep up. Will OP update the front page (or someone else) with a long guide on removing/cutting down on M$ data logging?

Offtopic: Damn I've been living under a rock and I had no idea that murphy hung out on here - huge fan of your work.

 

This picture sums up Windows 10 very well:

 

"if you have nothing to hide you have nothing to fear" - Joseph Goebbels in 1933

Even if you delete dmwappushservice and DiagTrack, somehow this thing connects via port 443 to a secure server.
I hope you all enjoy "your" DX12...

 

sorry to say you're so right, but the level of response on a keylogger was even pretty low
they just learned from it