[Guide]Way to Disable Keylogger/ Telemetry v3.55

You call this a discovery?

repair won't be attempted automatically
it's manually for this command:

Code:

Dism /Online /Cleanup-Image /RestoreHealth

 

So making that change isn't worth it/shouldn't be done?

 

Let's say you have this scenario:
1. You use an LTSB version (no Cortana, Store or Apps) with everything Off in all tabs of Settings -> Privacy
2. You removed OneDrive from startup and then disabled it via Group Policy
3. You disabled Telemetry via Group Policy (and it should actually disable it as the setting only does something on Enterprise/LTSB but not Home/Pro)
4. You disabled DiagTrack, dmwappushservice and diagnosticshub.standardcollector.service
5. You blocked the AutoLogger-Diagtrack-Listener.etl file

In that case, is there any reason to use scripts or tools that remove Telemetry/privacy-related packages or block hosts/deletes files and so on? or are those 5 conditions enough to avoid privacy issues?

 

these 5 steps don't disable 100 %, dont matter what win10 version you are on

 

I'm interested in knowing what's actually being shared after disabling using those methods. Probably just anonymous usage data (no keystrokes and such) but would be nice to confirm.

 

abbodi,

Thanks for pointing that out, but...
You use this command if you want to explicitly tell Windows to repair itself from the source you specify in the DISM command.
It does not block Windows from using Windows Update to repair itself (Yes, it does happen automatically)!

So, the Group Policy setting I "discovered" does actually block WU as a repair source.
I did a test:

1. Set the Group Policy setting to "Enabled", Source 0.0.0.0. and CHECKED "Never attempt to download payload from Windows Update".

2. Two days ago (2015-08-04), I went to C:\Windows\System32, took ownership of all the language folders (ar-SA, bg-BG, cs-CZ, da-DK, , de-DE, el-GR, fr-FR, ru-RU, etc...), and deleted them, except for en-US, of course.

3. Installed all updates that WU offered, including the two cumulative updates that WU offered today.

4. Restarted the OS.

5. The language folders I deleted DID NOT come back.

Before this GPEDIT tweak, after deleting those language folders, they came back. Now they don't. So my tweak seems to work.

 

What did you change in Group Policy ? You didn't write.
(e.g. Administrative template => Windows components).

 

cuteee,

Check a few posts above.

 

It's plenty of registry tweaks.
I prefer not to use them.

 

Don't use the registry tweaks. Use GPEDIT.MSC.
1. Go to:
GPEDIT.MSC > Computer Configuration > Administrative Templates > System: Specify settings for optional installation and component repair

2. Enable the setting (read the description)

3. type an alternate repair source. For example: 0.0.0.0

4. CHECK "Never attempt to download payload from Windows Update"

 

And if I'm not using DISM command am I need this gpedit.msc setting ?

 

cuteee,
If you want to prevent WU from repairing system files automatically (which you've manually changed/removed), then you need to use this GPEDIT setting.

 

What the meaning of 0.0.0.0 ?

 

Means same as 127.0.0.1 but in opposite to this way, 0.0.0.0 is faster to process for the system.

 

If I'm not going to be modifiying any system files do I need to do this tweak ericgl?

 

Sorry for many questions. What do you mean "process for the system" ?

 

You need to login to view this posts content.

 

Not sure. I'm currently on pro, so I'm not sure which ones of these features are associated with which entry and stuff.
We really need to see how many of these things we can disable via policy editor before we go around messing with firewall.
Firewall settings are bad form. We should try to figure out how to do things without modding them if we can.