Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- Computers, Gaming, Mobile Guides
- Completely Disable the Windows 10 Logging / Telemetry / Data Leaching issues 100% Solved! Early launch builds, Insider builds (10240 TESTED)? RTM, Make Windows 10 buttery smooth, no lag, no “under water” feeling, no input slowness, no hiccups, no delays, no shutdown hangs, smoother performance and higher benching performance and feel all around! Most of this also applies to Windows 8.1! (Page 1 – 6) Copyright YourFriendLew.com
- I went on a personal journey to disable this data leaching. This has been months in the making, months of grueling testing and fixing to get this information here. I believe I am the only person to have fully disabled this telemetry and logging and data leaching. I know info came out in Oct 14 about this and some others have posted tidbits of this data that work, but I have never found anything as exact as my information here. This goes all the way. And I ask that anyone that wants to distribute this link to this guide, do so only if you are going to backlink to my site here and mention that I, the author, am the one who published this data. Thank you!
- As many have known since the initial public release of the Windows Technical Preview first incarnation, there has been a telemetry/keylogging discussion. Keystrokes are/were recorded, data is sent and recieved, and much much more. While it’s agreed upon when you install it, I personally find this way to invasive, and on top of this, data hogging. The performance DOES suffer somewhat with the data leaching. And as a performance, power user, and long time pc hardware aficionado, I find this very unacceptable on my daily machine. Granted, it’s a technical preview and many would argue you shouldn’t even be running it on your main rig, however, I have the technical abilities and know how to have my main pc running the latest tech preview VERY stable…..probably just as stable or more so than a complete copy of Windows 7 or 8.1 actually. And there is just simply no doubt about it – from day one of the technical preview all the way til now, there is massive data leaching, telemetry, and keylogging that is not only invasive, but performance hogging. Upon initial install, all will seem well, if not alittle “under water” feeling. This is the data telemetry being utilized. This bothered me so much so, that I went on a personal quest and literally have brainstormed and tweaked/modified settings for weeks and months to get a telemetry / data logging free Windows Technical Preview machine running. And I believe I have achieved just that after weeks and months of digging. After first release, a few fellows posted keylogging workarounds. While they worked somewhat efficient, they did not unfortunately take care of the root problem or all of issues at hand. I have tested each Technical Preview Update, and each one has as many connections as the last, if not more so. Even now the current Fast Ring build of 10130 (current) has incredible amounts of telemetry going on. So as of now, not much has changed. Now, will Microsoft change this with RC or final build? No clue. There may be no telemetry at all, there might be an reduced amount, or there might still be a massive amount. Nobody knows. And my goal isn’t really to be mad at the company for this. It’s just the performance user in me that went on a quest to fix the issue at hand.
- This is where a few necessary programs come in – Task Manager (CTRL,ALT,DEL under Windows), Windows Firewall (Built In, make sure it’s enabled that all incoming connections are blocked for Public and Private… and finally TCPView
- TCPView is a small, powerful, and robust, utility program that shows your current connections outgoing and incoming. While YourfriendLew.com is not affiliated with the program, I will say I wholeheartedly recommend it and everyone should have it on their computer.
- The problem with the Technical Preview is, the data leaching/telemetry issue at hand is present in alot of the functionality of the OS current build. If you open search or cortana for example, or even click the start button to the start menu, you will see multiple “searchui” connections (sometimes more than 5+! And these then combine with others as you type or open more parts of the OS. It is truly common to see sometimes 10-12 established connections after initial install, even more when combined.
- win1039
- win1030
- Note how there are multiple “established connections”. So now here we are. You ask – So….how do we fix this problem YourFriendLew? Well, it isn’t entirely easy and it’s not step by step here because of the nature of testing I had to employ. So try to bare with me here and follow along, and try to do as many of the steps as you can. Each will add to the improvement of the Telemetry issue at hand.
- Disclaimer – I believe I have found a true method to disable all telemetry and keylogging. These methods change around the default look of Windows 10 Technical Preview. You may or may not lose some functionality, and the look of the OS may be slightly different. You may have to go about using the OS in a different manner by disabling everything here. In my opinion, it’s much better than default. I get the full functionality I need, I am lacking nothing by doing this, the OS is fast and tweaked, and there is no invasive connections and I can search for and get to my programs just as fast. So for me it’s a total win. Another thing is, this is a technical preview and when some of these methods are used are, the OS can behave slightly different. I am in no way responsible for any data loss you may incur and if you so choose to attempt this, remember to back up first in whatever way you prefer and that anything could happen.
- For starters, make sure you download the latest build, install all windows updates and drivers correctly, and have windows firewall enabled blocking all incoming connections.
- What I then do, is open administrative tools. I get there by right clicking, placing the cursor in “find a setting”, typing in “control panel”, then “administrative tools”. Here you will find a list with everything you pretty much need. Pin a copy of Command Prompt to start, desktop, or task. Pin a copy of run to start, desktop, or task. And finally, pin a copy of control panel to start, desktop, or task. I use these three to pretty much keep the windows experience in line with the old days. All three should be easily found under all apps/WindowsSystem under start menu.
- NEW UPDATE : Windows 10 RTM 10240 click Cortana, go to the gear icon, turn off search online and include web results NEW UPDATE
- cortana windows 10
- Right click on desktop, go to “personalize”, then the back arrow at the top pointing left, then “update & security”, “Recovery”, “Advanced Startup – Restart Now”. Once under there, migrate to the advanced startup option by clicking Troubleshoot, Advanced Options, and finally Startup Settings. It will show a list of things you can disable with a number next to it. You want to disable 7,8, and 9. You will have to repeat these steps after hitting each number until you have disabled all three. Disable Driver Signature Enforcement, Disable Early Launch Anti-Malware Protection, and Automatic Restart On System Failure.
- Logging on with a local account is much less intrusive and it’s something I do always. You may not get access to certain MS features…but who really says you need that? Right click, personalize, hit the gear icon, accounts. When first installing windows you have the choice to use a MS insider account or skip and create a local. I recommend local.
- Microsoft supplies default “win-xxxx” computer names under Technical Preview. I change mine myself, to anything. Just make up something original and change the computer name by right clicking the control panel, system, then change settings under “Computer name, domain, and workgroup settings” then apply and restart.
- You want to delete or block cortana. Go to view, hidden items, now You can access the main folder by going to C:\ProgramFiles\WindowsApps. Clicking on it will say you do not have administrator rights. Right click, go to security, then change permissions by going to advanced, find, then selecting “everyone” from the list. This is the harder route, as you need to know how to change folder/file permissions. If you want to go the easier route, just go to control panel, windows firewall, then outbound connections, then create a new rule, select C:\ProgramFiles\WindowsApps\Cortana folder, then from within there, select “searchUI.exe” and block that connection under public, private, and domain. As I said before, you will probably need to do some folder/file permission changes, which are easily searchable on google. It is a must to delete or block the “searchUI.exe” functionality right from the get go.
- Next under Services.msc look for and stop/disable the services as you see in the pictures:
- AllJoyn Router Service
- Disable BITS
- Data Sharing Service
- Disable BITS
- DataCollectionPublishingService
- Diagnostic Policy Service
- Diagnostic Service Host
- Diagnostic System Host
- Diagnostics Tracking Service
- Downloaded Maps Manager
- Geolocation Service
- ALL Hyper-V services
- IP Helper
- Microsoft (R) Diagnostic Hub Standard Collector Service
- Microsoft Account Sign In Assistant
- Microsoft iSCSI Initiator Service
- Problem Reports & Solutions
- Program Compatibility Assistant
- Security Center
- Sensor Data Service
- Sensor Monitoring Service
- Sensor Service
- Smart Card
- Smart Card Device Enumerator Service
- Smart Card Removal Policy
- TCP/IP Netbios Helper
- Update Orchestrator Service
- UPNP Device Host
- WalletSVC
- Windows Biometric Service
- Windows Encryption Provider Host Service
- Windows Error Reporting Service
- Windows Update
- Xbox Live Auth Manager
- Xbox Live Game Save
- Disable BITS
- Xbox Live Networking Service
- win104
- win103
- Win102
- Win101
- Win10
- Examples of enabling / disabling services under services.msc
- Windows 10 Logging / Telemetry / Data Leaching 100% Solved!
- Now, we want to go to settings. Hit the start button, then “settings”, then make sure to disable all “syncing”, Turn Off “Send Microsoft Info About How I Write To Help Us Improve Typing And Writing In The Future”, Turn Off ALL Location, Turn Off “Cortana Getting to Know Me”, turn off “Sync With Devices”, Set Windows “Feedback Frequency” to “Never” – Basic Health And Performance. That should be good for the “settings” department. Ok great, so now you want to head back to “run”, type in “taskschd.msc” which brings up the Task Scheduler, then do the following by right clicking on each folders items and setting “disabled”:
- Examples of “settings” options
- win1034
- win1032
- win1025
- -AppID – Disable SmartScreenSpecific
- -ApplicationExperience – Disable Microsoft Compatibility Appraiser, Disable Program Data Updater, Disable StartAppTask
- -Application Data – Disable DsSvcCleanup,
- -AutoCHK – Disable Proxy
- -Clip – Disable License Validation
- -Customer Experience Improvement Program – Disable Consolidator, Disable HypervisorFlightingTask, Disable Kernel CEIP Task, Disable USB CEIP
- -DiskCleanup – Disable SilentCleanup
- -File Classification Infastracture – Disable Property Definition Sync
- -Location – Disable Notifications, Disable Windows Action Dialog
- -Maintenance – Disable winSAT
- -Maps – Disable MapsToastTask, Disable MapsUpdateTask
- -PowerEfficiencyDiagnostics – Disable AnalyzeSystem
- -Remote Assistance – Disable RemoteAssistanceTask
- -Retail Demo – Disable Cleanup Offline Content
- -Setting Sync – Disable NetworkStateChangeTask
- -TPM – Disable TPM Maintenance Task
- -UpdateOrchestraor – Disable Schedule Scan
- -WDI – Disable Resolution Host’
- -Windows Defender – Disable Windows Defender Cache Maintenance, Disable Windows Defender Cleanup, Disable Windows Defender Scheduled Scan, Disable Windows Defender Verification
- -Windows Error Reporting – Disable Queue Reporting
- -Windows Backup – Disable Configure Notifications
- -Windows Update – Disable Automatic App Update, Disable Scheduled Start
- -WS – Disable Badge Update, Disable License Validation, Disable WSRefreshBannedAppsListTask, Disable WSTask
- Examples of “Task Scheduler” options
- win1028
- Excellent. That should conclude the taskscheduler section.
- Continued on Page 3 (Windows 10 Telemetry Solved)
- Windows 10 Keylogger / Telemetry / Data Leaching 100% Solved!
- Alright, making progress here. Now on to the Group Policy Editor (gpedit.msc). Start, Run, Type gpedit.msc – Local Computer Policy, Administrator Templates, Windows Components and set the following settings:
- -Add Features to Windows 10 – Prevent the Wizard From Running Enabled
- -Application Compatibility – All policy pages Enabled (from prevent access to 16-bit applications to turn off steps recorder)
- -Biometrics – Allow the use of biometrics Disabled, allow users to log on using biometrics Mb>disabled,
- -Data Collection & Preview Builds – Allow Telemetry Disabled
- -Desktop Gadgets – Turn off Desktop Gadgets enabled, turn off user installed desktop gadgets enabled
- -Digital Locket – Do not allow digital locker to run enabled
- -Edge UI – Disable Help Tips Enabled
- -File History – Turn Off File History Enabled
- -Game Explorer – Turn off downloading of game information enabled, turn off game updates enabled, turn off tracking of last play times in game folder enabled
- -Homegroup – Prevent the computer from joining a homegroup enabled
- -Internet Information Services – Prevent IIS installation enabled
- -Locations and Sensors – Turn off location scripting enabled, turn off location enabled, turn off sensors enabled
- -Netmeeting – Turn off Remote Desktop Sharing enabled
- -OneDrive – Prevent the usage of OneDrive for file storage enabled
- -Online Assistance – Turn Off Active Help enabled
- -Presentation Settings – Turn Off Windows Presentations Settings enabled
- -RSS Feeds – Turn off background sync for feeds and web slices enabled, Prevent Automatic discovery of feeds and web slices enabled
- -Search – Allow Cortana disabled, do not allow web search enabled, dont search the web or display web results in search enabled, dont search the web or display web results in search over metered connections enabled, preview pane location enabled – OFF
- -Sound Recorder – Do not allow sound recorder to run enabled
- -Store – Turn off automatic download of updates on win8 machines enabled, turn off automatic download and install of updates enabled, turn off the offer to update to latest version of windows enabled, turn off the store application enabled
- -Sync your settings – ALL set to enabled
- -Tablet PC – Touch Input – turn off touch panning enabled, turn off tablet pc touch input enabled
- -Windows Calendar – Turn off windows calendar enabled
- -Windows Customer Experience Improvement Program – allow corporate redirection of customer experience improvement uploads disabled, Tag Windows Customer Experience Improvement Data with study identifier disabled
- -Windows Defender – Turn off Windows Defender enabled
- -Windows Error Reporting – Automatically send memory dumps for OS generated error reports disabled, send data when on connected to a restricted/costed network disabled, sens additional data when on battery power disabled, disable windows error reporting enabled, disable logging enabled, do not send additional data enabled
- -Windows Mail – turn off the communities feature enabled, turn off windows mail application enabled
- -Windows Media Center – Do not allow windows media center to run enabled
- -Windows Media Digital Rights Management – Prevent Windows Media DRM Access enabled
- -Windows Messenger – Do not automatically start windows messenger initially enabled, do not allow windows messenger to be run enabled
- -Windows Mobility Center – Turn off Windows Mobility Center enabled
- win1027
- win1021
- win1020
- win1019
- win1018
- win1017
- win1016
- Examples of Group Policy Settings Edits
- Continued on Page 4 (Windows 10 Telemetry Solved)
- Moving on, lets go to the control panel by right clicking, going to personalize, then using the search box and typing “control panel”. From there, windows firewall. Make sure it’s enabled that you block all incoming connections on public and private. Finally, go to “advanced settings”, then “inbound rules”. Then right click, properties, block connection on:
- Create a new inbound and outbound firewall “program” exception, adding “searchUI” located under C:\windows\systemapps\Microsoft.Windows.Cortana_cw5n1h2txyewy
- -Microsoft.Windows.cloud.experienceHost
- -Microsoft.Windows.cloud.experienceHost (second one)
- -MicrosoftWindowsCommunicationsApps17.4015
- -Checkpoint VPN
- -Checkpoint VPN
- -f5.vpn.client
- -f5.vpn.client
- -insider hub
- -JuniperNetworks.JunosPulseVpn
- -JuniperNetworks.JunosPulseVpn
- -Mail and Calendar
- -Microsoft Photos
- -OneNote
- -Search
- -Store
- -Store
- -Store (BETA)
- -Xbox
- Continued on Page 5
- Continued on Page 5 (Windows 10 Telemetry Solved)
- Now just as we just did under “inbound rules”, go to “outbound rules” right below that category on the left hand side and Block the following:
- -@{Microsoft.AccountsControl_10.0.10074.0_neutral__cw5n1h2txyewy?ms-resource://Microsoft.AccountsControl/Resources/DisplayName}
- -@{Microsoft.Windows.CloudExperienceHost_10.0.10074.0_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.CloudExperienceHost/resources/appDisplayName}
- -@{Microsoft.Windows.CloudExperienceHost_10.0.10074.0_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.CloudExperienceHost/resources/appDisplayName}
- -@{Microsoft.Windows.ContentDeliveryManager_10.0.10074.0_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.ContentDeliveryManager/resources/AppDisplayName}
- -@{Microsoft.Windows.ParentalControls_10.0.10074.0_neutral_neutral_cw5n1h2txyewy?ms-resource://Microsoft.Windows.ParentalControls/resources/DisplayName}
- -@{microsoft.windowscommunicationsapps_17.4015.42271.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/hxcommintl/AppManifest_OutlookDesktop_DisplayName}
- -@{Microsoft.WindowsMaps_4.1503.50410.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsMaps/Resources/AppStoreName}
- -@{Microsoft.WindowsMaps_4.1503.50410.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.WindowsMaps/Resources/AppStoreName}
- -@{Microsoft.ZuneMusic_2.6.666.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.ZuneMusic/resources/IDS_MANIFEST_MUSIC_APP_NAME}
- -@{Microsoft.ZuneVideo_2.6.434.0_x64__8wekyb3d8bbwe?ms-resource://Microsoft.ZuneVideo/resources/IDS_MANIFEST_VIDEO_APP_NAME}
- -Cast to Device functionality (qWave-TCP-Out)
- -Cast to Device functionality (qWave-UDP-Out)
- -Cast to Device streaming server (RTP-Streaming-Out)
- -Cast to Device streaming server (RTP-Streaming-Out)
- -Cast to Device streaming server (RTP-Streaming-Out)
- -CheckPoint.VPN
- -CheckPoint.VPN
- -CheckPoint.VPN
- -Contact Support
- -Email and accounts
- -f5.vpn.client
- -f5.vpn.client
- -Insider Hub
- -JuniperNetworks.JunosPulseVpn
- -JuniperNetworks.JunosPulseVpn
- -Mail and Calendar
- -Microsoft Family
- -Microsoft Photos
- -MSN Weather
- -Music
- -OneNote
- -People
- -Proximity sharing over TCP (TCP sharing-Out)
- -Search
- -SonicWALL.MobileConnect
- -SonicWALL.MobileConnect
- -Store
- -Store
- -Store (BETA)
- -Video
- -Wi-Fi Direct Network Discovery (Out)
- -Wi-Fi Direct Scan Service Use (Out)
- -Wi-Fi Direct Spooler Use (Out)
- -Windows Camera
- -Windows Default Lock Screen
- -Windows Feedback
- -Windows Maps
- -Windows Spotlight
- -windows_ie_ac_001
- -Wireless Display (TCP-Out)
- -Wireless Display (UDP-Out)
- -Wi-Fi Direct ASP Coordination Protocol (UDP-Out)
- -Work or school account
- -XBox.TCUI
- -Your account
- Now, under outbound connections, create a “new rule” in the right hand side. From there, click “program”, then select next. You will now see a box pop up with a location to a program path. Click the browse button, go to C:\windows\system32, then select “svchost”. Block the connection to this under “domain, private, and public”, then name it. Once it’s created, go under the SVCHost rule you just created, make sure it says block connection, then click the “protocols and ports” tab, select “TCP” from the drop down box and make sure it says all ports under remote and local ports.
- Thats it. Seems like alot, but each page will solve this data logging telemetry issue. WSHost is another file you can block located at %SystemRoot%\WinStore\WSHost.exe it may require taking ownership. If you have any questions regarding that post in the comments. I don’t think it’s necessary but I did it because I wanted to try every option.
- svchostblock
- Continued on Page 6 (Windows 10 Telemetry Solved)
- Note the “0” eatablished connections under Windows Technical Preview Build 10130. This means no telemetry or data hogging is going on anymore as far as I can see. I have tested and verified under as many scenerios as possible, from within windows and under different portions of it while doing things, and I can verify no connections or data hogging. As I said earlier, you ARE choosing to do some work arounds here and some methods that go against stock Windows Technical Preview functionality. So I cannot be accountable for any data loss, errors, or problems you may incur. Though having been using my computer with each build (and now the 10162 build currently) I can say everything has been functioning the way I want it to. I can open Spartan Browser fine, start button, I can open control panel…all panels seem to work, and search my drive or within windows…, everything seems to work for me great (and I’ve been doing this for decades). So YMMV, but I feel if you follow each step and nothing catastrophic happens, you should be left with a snappier, smoother computer with no data leaching going on. I feel the disabled options and the benefits it brings far outweigh using the supposed “new features” of this OS. I do recommend you create a shortcut to run and place it in the start button, taskbar, desktop, or all three, also control panel as well. I want to mention that earlier in the tweak I said about disabling windows update. This does disable the ability to update to a newer build or update drivers. If you want to enable this functionality for whatever reason, you can go to services.msc, start the “BITS” service, start the “Windows Update” service, start the “update orchestrator” service, then proceed to download anything you need. Then disable them again afterwards.
- For best results, try to arrange the following icons on your desktop for ease of use. Pin “run” to the start menu as well.
- Capture
- It’s my personal opinion that some or all of this telemetry issue may be carried over to RTM build. At least some of it, because I have also checked Windows 8.1 and it too includes alot of this problem. Maybe I’m wrong, we’ll see when Windows 10 RTM comes out. For now though, enjoy a smooth computer with no telemetry hogging.
- If you have any questions or comments, post below. Email me. Whatever way you want. This is a BIG tweak, lots of steps involved, and I did my best here to relay it. It literally took me weeks, maybe even a month, to perfect and fine tune each detail and test everything right. I may have missed something, I will go over it again further. But for now I feel you should be alot more happy with the feel of your system with the steps applied here.
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement