[REPO] Windows 10 TELEMETRY REPOSITORY

Discussion in 'Windows 10' started by Yen, Aug 4, 2015.

  1. Steven Sveinbjоrn

    Steven Sveinbjоrn MDL Junior Member

    Oct 12, 2020
    75
    31
    0
    #1441 Steven Sveinbjоrn, Feb 23, 2022
    Last edited: Feb 23, 2022
    I downloaded the program PowerRun_x64.exe and then did as in the picture.
    Thanks, now everything works.
    Can you give a link to the official website of the PowerRun_x64.exe program? I see a lot of links to different versions, maybe not official ones...
    I used install.wim from en-us_windows_10_enterprise_ltsc_2021_x64_dvd_d289cf96.iso (19044.1288)
    SHA-1: 2fb2897373c4f71b06f4490943b3d564b0f0fd6d
    SHA-256: c90a6df8997bf49e56b9673982f3e80745058723a707aef8f22998ae6479597d
    I got one ERROR (?) :
    Code:
    ....................................................
    ...................................................
    D:\Service>rem == disable onedrive from installing ==
    
    D:\Service>reg delete "HKLM\NTUSER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "OneDriveSetup" /f
    ERROR: The system was unable to find the specified registry key or value.
    
    D:\Service>reg unload HKLM\NTUSER
    The operation completed successfully.
    .................................................
    .................................................
     
     
  2. Steven Sveinbjоrn

    Steven Sveinbjоrn MDL Junior Member

    Oct 12, 2020
    75
    31
    0
    #1443 Steven Sveinbjоrn, Feb 23, 2022
    Last edited: Feb 23, 2022
    When should I change the ..\Windows\Panther\unattend.xml file?
    When is it really necessary?
    I know that in the Chinese versions of "CMGE_V2020-L.1207.iso" and "CMGE_V2022-L.1345.iso" the unattend.xml file is used, among other things, to configure language settings, for example, set en-US instead of zh-CN …

    If we change the ..\Windows\Panther\unattend.xml file, then (maybe) we will get incompatibility with some versions of Windows... :(
    ***
    However, I don't see this folder ..\Windows\Panther\ in the official versions: en_windows_10_enterprise_ltsc_2019_x64_dvd_74865958.iso and
    en-us_windows_10_enterprise_ltsc_2021_x64_dvd_d289cf96.iso
    Perhaps I should install the unattend.xml file only if it's missing?
     
  3. freddie-o

    freddie-o MDL Expert

    Jul 29, 2009
    1,168
    1,580
    60
    #1444 freddie-o, Feb 23, 2022
    Last edited: Feb 23, 2022
    The unattend.xml I included is to bypass OOBE. The script creates the panther folder then adds the xml
    If you remove certain Services such as dmwappushservice you will get stuck at the OOBE phase of Windows setup
    It's up to you. If you want to use CMGE settings then don't use the unattend.xml I included.

    Edit
    I tested "CMGE V2022 Version 21H2 en-US"
    I prefer my unattend.xml and script to CMGEs
     
  4. Steven Sveinbjоrn

    Steven Sveinbjоrn MDL Junior Member

    Oct 12, 2020
    75
    31
    0
    #1445 Steven Sveinbjоrn, Feb 23, 2022
    Last edited: Feb 23, 2022
    CMGE_V2020-L.1207.iso works fine, but CMGE_V2022-L.1345.iso is a strange system...
    To my regret, I cannot find these folders in the official CMGE_V2022-L.1345.iso
    Those folders with license files should be here, but they've been removed... that's weird:
    Code:
    \Windows\winSxS\amd64_microsoft-windows-l..-volume-enterpriseg_31bf3856ad364e35_10.0.19041.1266_none_6791b7344acf195c
    \Windows\winSxS\x86_microsoft-windows-l..nse-oem-enterpriseg_31bf3856ad364e35_10.0.19041.1320_none_b04cb785cf95f722
    \Windows\winSxS\x86_microsoft-windows-l..-volume-enterpriseg_31bf3856ad364e35_10.0.19041.1266_none_0b731bb09271a826
    \Windows\winSxS\amd64_microsoft-windows-l..nse-oem-enterpriseg_31bf3856ad364e35_10.0.19041.1320_none_0c6b530987f36858
    
    These folders have a non-standard license file:
    Code:
    \Windows\winSxS\amd64_microsoft-windows-l..default-enterpriseg_31bf3856ad364e35_10.0.19041.1415_none_5318075ea13ef68d
    \Windows\winSxS\x86_microsoft-windows-l..default-enterpriseg_31bf3856ad364e35_10.0.19041.1415_none_f6f96bdae8e18557
    
    Therefore, problems and unpredictability arise when I install en-US here... I have no confidence in the reliability of this system.
     
  5. ralf ralf

    ralf ralf MDL Junior Member

    May 11, 2017
    87
    10
    0
    Hi,

    Do I understand you correctly, you modify the install.wim of the respective Windows 10 version before and then you install via USb-Stick and the telemetry is then largely disabled???? In good conscience!???

    Thanks...
     
  6. freddie-o

    freddie-o MDL Expert

    Jul 29, 2009
    1,168
    1,580
    60
    Yes. I also add drivers. I just boot into Windows Recovery and install from there. No need for USB stick
     
  7. ralf ralf

    ralf ralf MDL Junior Member

    May 11, 2017
    87
    10
    0
    #1448 ralf ralf, Feb 23, 2022
    Last edited: Feb 23, 2022
    Can you make another modified script for LTSC 2021!? or not??
     
  8. ralf ralf

    ralf ralf MDL Junior Member

    May 11, 2017
    87
    10
    0
    But theoretically I can of course make a fresh installation via USB stick!!!
     
  9. freddie-o

    freddie-o MDL Expert

    Jul 29, 2009
    1,168
    1,580
    60
    #1450 freddie-o, Feb 23, 2022
    Last edited: Feb 23, 2022
    The script will work in LTSC. Just remove the ones that don't apply to LTSC like Onedrive, Store...
    You will need to go through the script thoroughly because it also disables Windows Defender, Firewall, Windows Update...
    Unless you have a alternative/workaround for these you shouldn't disable them.
     
  10. freddie-o

    freddie-o MDL Expert

    Jul 29, 2009
    1,168
    1,580
    60
    Of course. I meant for me, I dont use USB sticks anymore for installing.
     
  11. ralf ralf

    ralf ralf MDL Junior Member

    May 11, 2017
    87
    10
    0
    What would you recommend?

    What program can you use to install Windows updates after the fact, all file types?
     
  12. Steven Sveinbjоrn

    Steven Sveinbjоrn MDL Junior Member

    Oct 12, 2020
    75
    31
    0
    #1453 Steven Sveinbjоrn, Feb 23, 2022
    Last edited: Feb 23, 2022
    I installed this script on install.wim (Windows 10 21H2 LTSC x64 [19044.1288] ) Then installed Windows.
    The programs work without problems, the sfc /scannow test ends without errors.
    I manually downloaded the cumulative update KB5010342, but it is impossible to install, error 0x80070424 (Service not installed)
    Is this problem being solved, or is the update completely blocked now?
    Or do I need to add updates to install.wim and then install this script?
     
  13. freddie-o

    freddie-o MDL Expert

    Jul 29, 2009
    1,168
    1,580
    60
    #1454 freddie-o, Feb 23, 2022
    Last edited: Feb 24, 2022
    This is how I install updates. In this order.
    https://forums.mydigitallife.net/th...struction-project.80939/page-333#post-1721255


    Adding the updates should work online or offline
     
  14. ralf ralf

    ralf ralf MDL Junior Member

    May 11, 2017
    87
    10
    0
    If I just apply the script as is, error aborts come in!? If so, can you make a list of programs that absolutely must go out with LTSC!?
     
  15. freddie-o

    freddie-o MDL Expert

    Jul 29, 2009
    1,168
    1,580
    60
    #1456 freddie-o, Feb 24, 2022
    Last edited: Jun 23, 2022
    Remove these lines from the script that don't apply to ltsc (don't remove the remark "rem")

    Code:
    rem == disable windows store ==
    reg add "HKLM\SOFTHIVE\Policies\Microsoft\WindowsStore" /v "DisableStoreApps" /t REG_DWORD /d "1" /f
    reg add "HKLM\SOFTHIVE\Policies\Microsoft\WindowsStore" /v "AutoDownload" /t REG_DWORD /d "2" /f
    reg add "HKLM\SOFTHIVE\Policies\Microsoft\WindowsStore" /v "RemoveWindowsStore" /t REG_DWORD /d "1" /f
    
    rem == disable onedrive ==
    reg add "HKLM\SOFTHIVE\Microsoft\OneDrive" /v "PreventNetworkTrafficPreUserSignIn" /t REG_DWORD /d "1" /f
    reg add "HKLM\SOFTHIVE\Policies\Microsoft\Windows\OneDrive" /v "DisableFileSyncNGSC" /t REG_DWORD /d "1" /f
    reg add "HKLM\SOFTHIVE\Microsoft\PolicyManager\default\System\DisableOneDriveFileSync" /v "value" /t REG_DWORD /d "1" /f
    
    rem == disable smartscreen for store and apps ==
    reg add "HKLM\NTUSER\SOFTWARE\Microsoft\Windows\CurrentVersion\AppHost" /v "EnableWebContentEvaluation" /t REG_DWORD /d "0" /f
    reg add "HKLM\NTUSER\SOFTWARE\Microsoft\Windows\CurrentVersion\AppHost" /v "PreventOverride" /t REG_DWORD /d "1" /f
    reg add "HKLM\NTUSER\SOFTWARE\Microsoft\Windows Security Health\State" /v "AppAndBrowser_StoreAppsSmartScreenOff" /t REG_DWORD /d "0" /f
    
    rem == disable onedrive from installing ==
    reg delete "HKLM\NTUSER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "OneDriveSetup" /f
    
    rem == delete onedrivesetup.exe ==
    del /s mount\Windows\SysWOW64\OneDriveSetup.exe
    
    rem == remove all provisioned appx packages ==
    for /f "tokens=2 delims=: " %%i in ('dism /scratchdir:temp /image:mount /Get-ProvisionedAppxPackages ^| find /I "PackageName"') do (dism /scratchdir:temp /image:mount /Remove-ProvisionedAppxPackage /Packagename:%%i)
    for /f %%x in ('dir /b "mount\Program Files\WindowsApps\Microsoft*"') do (rmdir /q /s "mount\Program Files\WindowsApps\%%x")
    
    
     
  16. Steven Sveinbjоrn

    Steven Sveinbjоrn MDL Junior Member

    Oct 12, 2020
    75
    31
    0
    #1457 Steven Sveinbjоrn, Feb 24, 2022
    Last edited: Feb 24, 2022
    Thanks, the update is working now.
    I installed your script on Windows 10 21H2 LTSC x64 (19044.1288)
    Good job, few processes (85-95 instead of 110-130)
    I installed Wireshark-win64-3.6.0 network tool to check network activity after installing this script.

    1. There is no network activity for 30 minutes after Windows starts.
    2. However, when I change the screen resolution, network activity immediately occurs: :(
    93.184.220.29 (UK EDGECAST-NETBLK-03)
    23.46.119.106 (UK)
    204.79.197.200 (US Microsoft)
    13.107.21.200 (US Microsoft)
    also:
    40.124.168.44
    13.107.42.16
    8.238.89.126
    128.75.237.25
    67.26.11.254
    204.79.197.200
    3. The update can be installed via Dism:
    - download the cumulative update KB5010342 from the Microsoft website,
    - unpack (7Zip archiver) this Update to a folder,
    - install from this folder first Stack Update SSU-19041.1525-x64.cab (15 Mb),
    - then install the Update Windows10.0-KB5010342-x64.cab itself (656 Mb)
    4. I did not notice any changes in network activity after installing the cumulative update KB5010342
     
  17. Steven Sveinbjоrn

    Steven Sveinbjоrn MDL Junior Member

    Oct 12, 2020
    75
    31
    0
    #1458 Steven Sveinbjоrn, Feb 24, 2022
    Last edited: Feb 24, 2022
    1. Check network activity Windows 10 EnterpriseG CMGE_V2020-L.1207(17763.2366)[en-US] using Wireshark-win64-3.6.0 network tool.
    Before starting the scan, the Activation service and the Update service are disabled.
    Result of checking:
    No network activity for an hour after starting Windows 10 EnterpriseG CMGE_V2020-L.1207(17763.2366)[en-US]
    Changing the screen resolution does not affect network activity.

    2. Network activity check Windows 10 EnterpriseG CMGE 2022-L (19044.1415) [en-US]- check result is similar to CMGE 2020-L
     
  18. freddie-o

    freddie-o MDL Expert

    Jul 29, 2009
    1,168
    1,580
    60
    #1459 freddie-o, Feb 25, 2022
    Last edited: Jun 9, 2022
    Windows has its ways of phoning home on a regular basis
    svchost.png

    Settings.png



    Configure (Symantec) Firewall to block all outbound (and inbound) traffic

    firewall.png







    # How to disable Telemetry in Symantec Endpoint Protection
    1.png

    2.png

    3.png

    4.png

    5.png

    6.png



     
  19. Raven56

    Raven56 MDL Novice

    Aug 24, 2014
    12
    2
    0
    Is it wise to use Freddie-o script on a Untouched iso and then is it still ok to use MSMG toolkit for the rest.
    OR Is it ok to use MSMG toolkit first on an iso, and then after, use freddie-o's script to block telemetry .

    So use Script Before or after MSMG Toolkit >?