View difference between Paste ID: VTvdWqzH and MgGvsXVQ

-@echo off &title must-have privacy policies for windows
+@echo off &title must-have privacy policies for windows 10
-:: based on MANAGE CONNECTIONS FROM WINDOWS OPERATING SYSTEM COMPONENTS TO MICROSOFT SERVICES as of 2022.02.09
+:: based on MANAGE CONNECTIONS FROM WINDOWS 10 OPERATING SYSTEM COMPONENTS TO MICROSOFT SERVICES as of 2019.09.16
 
-:: ask for elevation
+:: ask for elevation passing args and preventing loop
-fltmc>nul || (set _=/d/x/r start "%~n0" "%~f0" %*& powershell -nop -c start -verb runas cmd $env:_ & exit /b)
+set "args="%~f0" %*" & reg query HKU\S-1-5-19>nul 2>nul || if "%_%" neq "y" (
 powershell -c "$Env:_='y';$ErrorActionPreference=0;start cmd -Arg \"/c call $Env:args\" -verb runas" & exit)
 
-reg load HKU\New "%SystemDrive%\Users\Default\NTUSER.DAT" >nul && set "HKU=1" || set "HKU="
+
 reg load HKU\New "C:\Users\Default\NTUSER.DAT" >nul && set "HKU=1" || set "HKU="
-:: show commands on screen
+
-set ----------=@echo/^&^<nul set /p @=& prompt $H & color 1f & echo on
+:: main
 set @=@echo/^&^<nul set/p @=&prompt $H& color 1e& echo on
-:: to remove a policy, uncomment the reg delete entry below it
+
-@echo ignore any ERROR: text, it is shown for output consistency
+rem TO DISABLE A POLICY, UNCOMMENT THE REG DELETE ENTRY BELOW IT
 
-%----------% 0. Telemetry - Security level [0] is only supported on Education and Enterprise [best editions privacy-wise]
+%@% 0. Telemetry - Security level is only supported on Education and Enterprise [best editions privacy-wise]
 reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DataCollection" /f /v AllowTelemetry /d 0 /t reg_dword
 ::reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\DataCollection" /f /v AllowTelemetry
 
-%----------% 1. Automatic Root Certificates Update [delete recommended]
+%@% 1. Automatic Root Certificates Update [delete recommended]
 ::reg add "HKLM\SOFTWARE\Policies\Microsoft\SystemCertificates\AuthRoot" /f /v DisableRootAutoUpdate /d 1 /t reg_dword
 reg delete "HKLM\SOFTWARE\Policies\Microsoft\SystemCertificates\AuthRoot" /f /v DisableRootAutoUpdate
 
-%----------% 2. Cortana and Search
+%@% 2. Cortana and Search
 reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /f /v AllowCortana /d 0 /t reg_dword
 ::reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /f /v AllowCortana
 
-%----------% Search and Cortana to use location
+%@% - Search and Cortana to use location
 reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /f /v AllowSearchToUseLocation /d 0 /t reg_dword
 ::reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /f /v AllowSearchToUseLocation
 
-%----------% Web search
+%@% - Web search
 ::reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /f /v DisableWebSearch /d 1 /t reg_dword
 reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /f /v DisableWebSearch
 
-%----------% Search the web or display web results in Search
+%@% - Search the web or display web results in Search
 ::reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /f /v ConnectedSearchUseWeb /d 0 /t reg_dword
 reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /f /v ConnectedSearchUseWeb
 
-%----------% Outbound Cortana traffic
+%@% - Outbound Cortana traffic
-@set "rule=v2.25|Action=Block|Active=TRUE|Dir=Out|Protocol=6|App=%systemroot%"
+reg add "HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\FirewallRules" /f /v {0DE40C8E-C126-4A27-9371-A27DAB1039F7} /d "v2.25|Action=Block|Active=TRUE|Dir=Out|Protocol=6|App=%windir%\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\searchUI.exe|Name=Block outbound Cortana|"
-@set "rule=%rule%\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\searchUI.exe|Name=Block outbound Cortana|"
+
-reg add "HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\FirewallRules" /f /v {0DE40C8E-C126-4A27-9371-A27DAB1039F7} /d "%rule%"
+
 %@% 3. Set the time automatically [delete recommended]
 ::reg add "HKLM\SOFTWARE\Policies\Microsoft\W32time\TimeProviders\NtpClient" /f /v Enabled /d 0 /t reg_dword
-%----------% 3. Set the time automatically
+
 
 %@% 4. Device metadata retrieval
 reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Device Metadata" /f /v PreventDeviceMetadataFromNetwork /d 1 /t reg_dword
-%----------% 4. Device metadata retrieval
+
 
 %@% 5. Find My Device
 ::reg add "HKLM\SOFTWARE\Policies\Microsoft\FindMyDevice" /f /v AllowFindMyDevice /d 0 /t reg_dword
-%----------% 5. Find My Device
+reg delete "HKLM\SOFTWARE\Policies\Microsoft\FindMyDevice" /f /v AllowFindMyDevice
-reg add "HKLM\SOFTWARE\Policies\Microsoft\FindMyDevice" /f /v AllowFindMyDevice /d 0 /t reg_dword
+
-::reg delete "HKLM\SOFTWARE\Policies\Microsoft\FindMyDevice" /f /v AllowFindMyDevice
+%@% 6. Font streaming
 ::reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\System" /f /v EnableFontProviders /d 0 /t reg_dword
-%----------% 6. Font streaming
+
 
 %@% 7. Insider Preview builds - all such builds force Telemetry to FULL !!!
 ::reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\PreviewBuilds" /f /v AllowBuildPreview /d 0 /t reg_dword
-%----------% 7. Insider Preview builds - all such builds force Telemetry to FULL !!!
+
 
 %@% 8. Internet Explorer
 
-%----------% 8. Internet Explorer
+%@% - First run wizard
 reg add "HKCU\SOFTWARE\Policies\Microsoft\Internet Explorer\Main" /f /v DisableFirstRunCustomize /d 1 /t reg_dword
-%----------% First run wizard
+
 
 if defined HKU reg add "HKU\New\SOFTWARE\Policies\Microsoft\Internet Explorer\Main" /f /v DisableFirstRunCustomize /d 1 /t reg_dword
 ::if defined HKU reg delete "HKU\New\SOFTWARE\Policies\Microsoft\Internet Explorer\Main" /f /v DisableFirstRunCustomize
-%----------% First run wizard [new users]
+
-reg add "HKU\New\SOFTWARE\Policies\Microsoft\Internet Explorer\Main" /f /v DisableFirstRunCustomize /d 1 /t reg_dword
+%@% - Online Tips
-::reg delete "HKU\New\SOFTWARE\Policies\Microsoft\Internet Explorer\Main" /f /v DisableFirstRunCustomize
+
 ::reg delete "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /f /v AllowOnlineTips
-%----------% Online Tips
+
 %@% - Browser geolocation
 reg add "HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer\Geolocation" /f /v PolicyDisableGeolocation /d 1 /t reg_dword
 ::reg delete "HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer\Geolocation" /f /v PolicyDisableGeolocation
-%----------% Browser geolocation
+
 %@% - SmartScreen filter [delete recommended]
 ::reg add "HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer\PhishingFilter" /f /v EnabledV9 /d 0 /t reg_dword
 reg delete "HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer\PhishingFilter" /f /v EnabledV9
-%----------% SmartScreen filter
+
 %@% - Flip ahead with page prediction feature
 reg add "HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer\FlipAhead" /f /v Enabled /d 0 /t reg_dword
 ::reg delete "HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer\FlipAhead" /f /v Enabled
-%----------% Flip ahead with page prediction feature
+
 %@% - Background synchronization for feeds and Web Slices
 reg add "HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer\Feeds" /f /v BackgroundSyncStatus /d 0 /t reg_dword
 ::reg delete "HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer\Feeds" /f /v BackgroundSyncStatus
-%----------% Background synchronization for feeds and Web Slices
+
 %@% 8.1 ActiveX control blocking [delete recommended]
 ::reg add "HKCU\Software\Microsoft\Internet Explorer\VersionManager" /f /v DownloadVersionList /d 0 /t reg_dword
 reg delete "HKCU\Software\Microsoft\Internet Explorer\VersionManager" /f /v DownloadVersionList
-%----------% 8.1 ActiveX control blocking
+
-reg add "HKCU\Software\Microsoft\Internet Explorer\VersionManager" /f /v DownloadVersionList /d 0 /t reg_dword
+::if defined HKU reg add "HKU\New\Software\Microsoft\Internet Explorer\VersionManager" /f /v DownloadVersionList /d 0 /t reg_dword
-::reg delete "HKCU\Software\Microsoft\Internet Explorer\VersionManager" /f /v DownloadVersionList
+if defined HKU reg delete "HKU\New\Software\Microsoft\Internet Explorer\VersionManager" /f /v DownloadVersionList
 
-%----------% 8.1 ActiveX control blocking [new users]
+%@% 9. License Manager [3 recommended]
-reg add "HKU\New\Software\Microsoft\Internet Explorer\VersionManager" /f /v DownloadVersionList /d 0 /t reg_dword
+
-::reg delete "HKU\New\Software\Microsoft\Internet Explorer\VersionManager" /f /v DownloadVersionList
+
 
-%----------% 9. License Manager [3 recommended]
+%@% 10. Live Tiles
 ::reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\PushNotifications" /f /v NoCloudApplicationNotification /d 1 /t reg_dword
 reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\PushNotifications" /f /v NoCloudApplicationNotification
 
-%----------% 10. Live Tiles
+%@% 11. Mail synchronization [delete recommended]
 ::reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Mail" /f /v ManualLaunchAllowed /d 0 /t reg_dword
 reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows Mail" /f /v ManualLaunchAllowed
 
-%----------% 11. Mail synchronization [delete recommended]
+%@% 12. Microsoft Account Sign-In Assistant [3 recommended]
 ::reg add "HKLM\System\CurrentControlSet\Services\wlidsvc" /f /v Start /d 4 /t reg_dword
 reg add "HKLM\System\CurrentControlSet\Services\wlidsvc" /f /v Start /d 3 /t reg_dword
 
-%----------% 12. Microsoft Account Sign-In Assistant [3 recommended]
+%@% 13. Microsoft Edge
 
 %@% - First run ad
 reg add "HKLM\SOFTWARE\Policies\Microsoft\MicrosoftEdge\Main" /f /v PreventFirstRunPage /d 1 /t reg_dword
-%----------% 13. Microsoft Edge
+
 
-%----------% First run ad
+%@% - Live Tile telemetry
 reg add "HKLM\SOFTWARE\Policies\Microsoft\MicrosoftEdge\Main" /f /v PreventLiveTileDataCollection /d 1 /t reg_dword
 ::reg delete "HKLM\SOFTWARE\Policies\Microsoft\MicrosoftEdge\Main" /f /v PreventLiveTileDataCollection
 
-%----------% First run ad [new]
+%@% - Adobe Flash
-reg add "HKLM\SOFTWARE\Policies\Microsoft\Edge" /f /v HideFirstRunExperience /d 1 /t reg_dword
+
-::reg delete "HKLM\SOFTWARE\Policies\Microsoft\Edge" /f /v HideFirstRunExperience
+
 
-%----------% Live Tile telemetry
+%@% - Windows Defender SmartScreen Filter [delete recommended]
 ::reg add "HKLM\SOFTWARE\Policies\Microsoft\MicrosoftEdge\PhishingFilter" /f /v EnabledV9 /d 0 /t reg_dword
 reg delete "HKLM\SOFTWARE\Policies\Microsoft\MicrosoftEdge\PhishingFilter" /f /v EnabledV9
 
-%----------% Adobe Flash
+%@% - Pre-launch at Windows startup, when the system is idle, and each time Microsoft Edge is closed
 reg add "HKLM\SOFTWARE\Policies\Microsoft\MicrosoftEdge\Main" /f /v AllowPrelaunch /d 0 /t reg_dword
 ::reg delete "HKLM\SOFTWARE\Policies\Microsoft\MicrosoftEdge\Main" /f /v AllowPrelaunch
 
-%----------% Windows Defender SmartScreen Filter
+%@% - Load the Start and New Tab page at Windows startup and each time Microsoft Edge is closed
 reg add "HKCU\SOFTWARE\Policies\Microsoft\MicrosoftEdge\TabPreloader" /f /v AllowTabPreloading /d 0 /t reg_dword
 ::reg delete "HKCU\SOFTWARE\Policies\Microsoft\MicrosoftEdge\TabPreloader" /f /v AllowTabPreloading
 
-%----------% Windows Defender SmartScreen Filter [new]
+if defined HKU reg add "HKU\New\SOFTWARE\Policies\Microsoft\MicrosoftEdge\TabPreloader" /f /v AllowTabPreloading /d 0 /t reg_dword
-::reg add "HKLM\SOFTWARE\Policies\Microsoft\Edge" /f /v SmartScreenEnabled /d 0 /t reg_dword
+::if defined HKU reg delete "HKU\New\SOFTWARE\Policies\Microsoft\MicrosoftEdge\TabPreloader" /f /v AllowTabPreloading
-reg delete "HKLM\SOFTWARE\Policies\Microsoft\Edge" /f /v SmartScreenEnabled
+
 %@% 14. Network Connection Status Indicator
-%----------% Pre-launch at Windows startup, when the system is idle, and each time Microsoft Edge is closed
+reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\NetworkConnectivityStatusIndicator" /f /v NoActiveProbe /d 1 /t reg_dword
 ::reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\NetworkConnectivityStatusIndicator" /f /v NoActiveProbe
 
 %@% 15. Offline maps
-%----------% Load the Start and New Tab page at Windows startup and each time Microsoft Edge is closed
+
 ::reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\Maps" /f /v AutoDownloadAndUpdateMapData
 
 reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Maps" /f /v AllowUntriggeredNetworkTrafficOnSettingsPage /d 0 /t reg_dword
-%----------% Load the Start and New Tab page at Windows startup and each time Microsoft Edge is closed [new users]
+
-reg add "HKU\New\SOFTWARE\Policies\Microsoft\MicrosoftEdge\TabPreloader" /f /v AllowTabPreloading /d 0 /t reg_dword
+
-::reg delete "HKU\New\SOFTWARE\Policies\Microsoft\MicrosoftEdge\TabPreloader" /f /v AllowTabPreloading
+%@% 16. OneDrive
 reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\OneDrive" /f /v DisableFileSyncNGSC /d 1 /t reg_dword
-%----------% Update Default
+::reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\OneDrive" /f /v DisableFileSyncNGSC
-reg add "HKLM\SOFTWARE\Policies\Microsoft\Edge\EdgeUpdate" /f /v UpdateDefault /d 0 /t reg_dword
+
-::reg delete "HKLM\SOFTWARE\Policies\Microsoft\Edge\EdgeUpdate" /f /v UpdateDefault
+
 ::reg delete "HKLM\SOFTWARE\Microsoft\OneDrive" /f /v PreventNetworkTrafficPreUserSignIn
-%----------% Auto Update Check Period Minutes
+
-reg add "HKLM\SOFTWARE\Policies\Microsoft\Edge\EdgeUpdate" /f /v AutoUpdateCheckPeriodMinutes /d 0 /t reg_dword
+%@% 17. Preinstalled apps - try Education Edition
-::reg delete "HKLM\SOFTWARE\Policies\Microsoft\Edge\EdgeUpdate" /f /v AutoUpdateCheckPeriodMinutes
+
 %@% 18.1 Settings - Privacy - General
-%----------% Experimentation and Configuration Service
+
-reg add "HKLM\SOFTWARE\Policies\Microsoft\Edge\EdgeUpdate" /f /v ExperimentationAndConfigurationServiceControl /d 0 /t reg_dword
+%@% - Let apps use advertising ID to make ads more interesting to you based on your app usage
-::reg delete "HKLM\SOFTWARE\Policies\Microsoft\Edge\EdgeUpdate" /f /v ExperimentationAndConfigurationServiceControl
+
 ::reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AdvertisingInfo" /f /v Enabled
-%----------% 14. Network Connection Status Indicator
+
-::reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\NetworkConnectivityStatusIndicator" /f /v NoActiveProbe /d 1 /t reg_dword
+
-reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\NetworkConnectivityStatusIndicator" /f /v NoActiveProbe
+
 
-%----------% 15. Offline maps
+%@% - Let websites provide locally relevant content by accessing my language list
 reg add "HKCU\Control Panel\International\User Profile" /f /v HttpAcceptLanguageOptOut /d 1 /t reg_dword
 ::reg delete "HKCU\Control Panel\International\User Profile" /f /v HttpAcceptLanguageOptOut
 
-%----------% Untriggered traffic
+if defined HKU reg add "HKU\New\Control Panel\International\User Profile" /f /v HttpAcceptLanguageOptOut /d 1 /t reg_dword
 ::if defined HKU reg delete "HKU\New\Control Panel\International\User Profile" /f /v HttpAcceptLanguageOptOut
 
 %@% - Let Windows track app launches to improve Start and search results
-%----------% 16. OneDrive
+::reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /f /v Start_TrackProgs /d 0 /t reg_dword
-::reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\OneDrive" /f /v DisableFileSyncNGSC /d 1 /t reg_dword
+reg delete "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /f /v Start_TrackProgs
-reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\OneDrive" /f /v DisableFileSyncNGSC
+
 ::if defined HKU reg add "HKU\New\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /f /v Start_TrackProgs /d 0 /t reg_dword
-%----------% Pre sign-in traffic
+if defined HKU reg delete "HKU\New\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /f /v Start_TrackProgs
 
 %@% - SmartScreen Filter to check web content (URLs) that Microsoft Store apps use [delete recommended]
 ::reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\AppHost" /f /v EnableWebContentEvaluation /d 0 /t reg_dword
-%----------% 17. Preinstalled apps - try Education Edition
+
 
-%----------% 18.1 Settings - Privacy - General
+::if defined HKU reg add "HKU\New\SOFTWARE\Microsoft\Windows\CurrentVersion\AppHost" /f /v EnableWebContentEvaluation /d 0 /t reg_dword
 if defined HKU reg delete "HKU\New\SOFTWARE\Microsoft\Windows\CurrentVersion\AppHost" /f /v EnableWebContentEvaluation
-%----------% Let apps use advertising ID to make ads more interesting to you based on your app usage
+
 %@% - Let apps on my other devices open apps and continue experiences on this device
 ::reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\System" /f /v EnableCdp /d 0 /t reg_dword
 reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\System" /f /v EnableCdp
-%----------% AdvertisingInfo Disabled By Group Policy
+
 %@% 18.2 Settings - Privacy - Location
 
 %@% - Location for this device
-%----------% Let websites provide locally relevant content by accessing my language list
+
 ::reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" /f /v LetAppsAccessLocation
 
 %@% - Location
-%----------% Let websites provide locally relevant content by accessing my language list [new users]
+
-reg add "HKU\New\Control Panel\International\User Profile" /f /v HttpAcceptLanguageOptOut /d 1 /t reg_dword
+
-::reg delete "HKU\New\Control Panel\International\User Profile" /f /v HttpAcceptLanguageOptOut
+
 %@% 18.3 Settings - Privacy - Camera [delete recommended]
-%----------% Let Windows track app launches to improve Start and search results
+
-reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /f /v Start_TrackProgs /d 0 /t reg_dword
+
-::reg delete "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /f /v Start_TrackProgs
+
 %@% 18.4 Settings - Privacy - Microphone [delete recommended]
-%----------% Let Windows track app launches to improve Start and search results [new users]
+
-reg add "HKU\New\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /f /v Start_TrackProgs /d 0 /t reg_dword
+
-::reg delete "HKU\New\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /f /v Start_TrackProgs
+
 %@% 18.5 Settings - Privacy - Notifications
-%----------% SmartScreen Filter to check web content (URLs) that Microsoft Store apps use
+
 %@% - Let apps access my notifications [delete recommended]
 ::reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" /f /v LetAppsAccessNotifications /d 2 /t reg_dword
 reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" /f /v LetAppsAccessNotifications
-%----------% SmartScreen Filter to check web content (URLs) that Microsoft Store apps use [new users]
+
-::reg add "HKU\New\SOFTWARE\Microsoft\Windows\CurrentVersion\AppHost" /f /v EnableWebContentEvaluation /d 0 /t reg_dword
+%@% 18.6 Settings - Privacy - Speech
-reg delete "HKU\New\SOFTWARE\Microsoft\Windows\CurrentVersion\AppHost" /f /v EnableWebContentEvaluation
+
 ::reg delete "HKCU\Software\Microsoft\Speech_OneCore\Settings\OnlineSpeechPrivacy" /f /v HasAccepted
-%----------% Let apps on my other devices open apps and continue experiences on this device
+
-reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\System" /f /v EnableCdp /d 0 /t reg_dword
+if defined HKU reg add "HKU\New\Software\Microsoft\Speech_OneCore\Settings\OnlineSpeechPrivacy" /f /v HasAccepted /d 0 /t reg_dword
-::reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\System" /f /v EnableCdp
+::if defined HKU reg delete "HKU\New\Software\Microsoft\Speech_OneCore\Settings\OnlineSpeechPrivacy" /f /v HasAccepted
 
-%----------% 18.2 Settings - Privacy - Location
+
 ::reg delete "HKLM\SOFTWARE\Policies\Microsoft\Speech" /f /v AllowSpeechModelUpdate
-%----------% Location for this device
+
 %@% 18.7 Settings - Privacy - Account info [delete recommended]
 ::reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" /f /v LetAppsAccessAccountInfo /d 2 /t reg_dword
 reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" /f /v LetAppsAccessAccountInfo
-%----------% Location
+
 %@% 18.8 Settings - Privacy - Contacts [delete recommended]
 ::reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" /f /v LetAppsAccessContacts /d 2 /t reg_dword
 reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" /f /v LetAppsAccessContacts
-%----------% 18.3 Settings - Privacy - Camera
+
 %@% 18.9 Settings - Privacy - Calendar [delete recommended]
 ::reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" /f /v LetAppsAccessCalendar /d 2 /t reg_dword
 reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" /f /v LetAppsAccessCalendar
-%----------% 18.4 Settings - Privacy - Microphone
+
 %@% 18.10 Settings - Privacy - Call history [delete recommended]
 ::reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" /f /v LetAppsAccessCallHistory /d 2 /t reg_dword
 reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" /f /v LetAppsAccessCallHistory
-%----------% 18.5 Settings - Privacy - Notifications
+
 %@% 18.11 Settings - Privacy - Email [delete recommended]
-%----------% Let apps access my notifications
+
 reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" /f /v LetAppsAccessEmail
 
 %@% 18.12 Settings - Privacy - Messaging [delete recommended]
-%----------% 18.6 Settings - Privacy - Speech
+
 reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" /f /v LetAppsAccessMessaging
 
 ::reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Messaging" /f /v AllowMessageSync /d 0 /t reg_dword
-%----------% Online Speech Privacy Accepted [new users]
+
-reg add "HKU\New\Software\Microsoft\Speech_OneCore\Settings\OnlineSpeechPrivacy" /f /v HasAccepted /d 0 /t reg_dword
+
-::reg delete "HKU\New\Software\Microsoft\Speech_OneCore\Settings\OnlineSpeechPrivacy" /f /v HasAccepted
+%@% 18.13 Settings - Privacy - Phone calls [delete recommended]
 ::reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" /f /v LetAppsAccessPhone /d 2 /t reg_dword
-%----------% Allow Speech Model Update
+
 
 %@% 18.14 Settings - Privacy - Radios [delete recommended]
 ::reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" /f /v LetAppsAccessRadios /d 2 /t reg_dword
-%----------% 18.7 Settings - Privacy - Account info
+
 
 %@% 18.15 Settings - Privacy - Other devices [delete recommended]
 ::reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" /f /v LetAppsSyncWithDevices /d 2 /t reg_dword
-%----------% 18.8 Settings - Privacy - Contacts
+
 
 ::reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" /f /v LetAppsAccessTrustedDevices /d 2 /t reg_dword
 reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" /f /v LetAppsAccessTrustedDevices
-%----------% 18.9 Settings - Privacy - Calendar
+
 %@% 18.16 Settings - Privacy - Feedback and diagnostics
 
 %@% - Ask for feedback
-%----------% 18.10 Settings - Privacy - Call history
+
 ::reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\DataCollection" /f /v DoNotShowFeedbackNotifications
 
 reg add "HKCU\Software\Microsoft\Siuf\Rules" /f /v PeriodInNanoSeconds /d 0 /t reg_dword
-%----------% 18.11 Settings - Privacy - Email
+
 
 if defined HKU reg add "HKU\New\Software\Microsoft\Siuf\Rules" /f /v PeriodInNanoSeconds /d 0 /t reg_dword
 ::if defined HKU reg delete "HKU\New\Software\Microsoft\Siuf\Rules" /f /v PeriodInNanoSeconds
-%----------% 18.12 Settings - Privacy - Messaging
+
 reg add "HKCU\Software\Microsoft\Siuf\Rules" /f /v NumberOfSIUFInPeriod /d 0 /t reg_dword
 ::reg delete "HKCU\Software\Microsoft\Siuf\Rules" /f /v NumberOfSIUFInPeriod
 
-%----------% Message sync
+if defined HKU reg add "HKU\New\Software\Microsoft\Siuf\Rules" /f /v NumberOfSIUFInPeriod /d 0 /t reg_dword
 ::if defined HKU reg delete "HKU\New\Software\Microsoft\Siuf\Rules" /f /v NumberOfSIUFInPeriod
 
 %@% - Tailored experiences with relevant tips and recommendations by using your diagnostics data
-%----------% 18.13 Settings - Privacy - Phone calls
+
 ::reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\CloudContent" /f /v DisableWindowsConsumerFeatures
 
 reg add "HKCU\SOFTWARE\Policies\Microsoft\Windows\CloudContent" /f /v DisableTailoredExperiencesWithDiagnosticData /d 1 /t reg_dword
-%----------% 18.14 Settings - Privacy - Radios
+
 
 if defined HKU reg add "HKU\New\SOFTWARE\Policies\Microsoft\Windows\CloudContent" /f /v DisableTailoredExperiencesWithDiagnosticData /d 1 /t reg_dword
 ::if defined HKU reg delete "HKU\New\SOFTWARE\Policies\Microsoft\Windows\CloudContent" /f /v DisableTailoredExperiencesWithDiagnosticData
-%----------% 18.15 Settings - Privacy - Other devices
+
 %@% 18.17 Background apps [delete recommended]
 ::reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" /f /v LetAppsRunInBackground /d 2 /t reg_dword
 reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" /f /v LetAppsRunInBackground
-%----------% Let Apps Access Trusted Devices
+
 %@% 18.18 Motion [delete recommended]
 ::reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" /f /v LetAppsAccessMotion /d 2 /t reg_dword
 reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" /f /v LetAppsAccessMotion
-%----------% 18.16 Settings - Privacy - Feedback and diagnostics
+
 %@% 18.19 Tasks [delete recommended]
-%----------% Ask for feedback
+
 reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" /f /v LetAppsAccessTasks
 
 %@% 18.20 App Diagnostics [delete recommended]
-%----------% Period In NanoSeconds
+reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" /f /v LetAppsGetDiagnosticInfo /d 2 /t reg_dword
 ::reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" /f /v LetAppsGetDiagnosticInfo
 
 %@% 18.21 Inking and Typing
-%----------% Period In NanoSeconds [new users]
+reg add "HKLM\SOFTWARE\Policies\Microsoft\InputPersonalization" /f /v RestrictImplicitTextCollection /d 1 /t reg_dword
-reg add "HKU\New\Software\Microsoft\Siuf\Rules" /f /v PeriodInNanoSeconds /d 0 /t reg_dword
+::reg delete "HKLM\SOFTWARE\Policies\Microsoft\InputPersonalization" /f /v RestrictImplicitTextCollection
-::reg delete "HKU\New\Software\Microsoft\Siuf\Rules" /f /v PeriodInNanoSeconds
+
 %@% 18.22 Activity History
-%----------% Number Of SIUF In Period
+
 reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\System" /f /v EnableActivityFeed
 
 reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\System" /f /v PublishUserActivities /d 2 /t reg_dword
-%----------% Number Of SIUF In Period [new users]
+
-reg add "HKU\New\Software\Microsoft\Siuf\Rules" /f /v NumberOfSIUFInPeriod /d 0 /t reg_dword
+
-::reg delete "HKU\New\Software\Microsoft\Siuf\Rules" /f /v NumberOfSIUFInPeriod
+
 ::reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\System" /f /v UploadUserActivities
-%----------% Tailored experiences with relevant tips and recommendations by using your diagnostics data
+
 %@% 18.23 Voice Activation
 ::reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" /f /v LetAppsActivateWithVoice /d 2 /t reg_dword
 reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" /f /v LetAppsActivateWithVoice
-%----------% Disable Tailored Experiences With Diagnostic Data
+
 ::reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" /f /v LetAppsActivateWithVoiceAboveLock /d 2 /t reg_dword
 reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" /f /v LetAppsActivateWithVoiceAboveLock
 
-%----------% Disable Tailored Experiences With Diagnostic Data [new users]
+%@% 19. Software Protection Platform [delete recommended]
-reg add "HKU\New\SOFTWARE\Policies\Microsoft\Windows\CloudContent" /f /v DisableTailoredExperiencesWithDiagnosticData /d 1 /t reg_dword
+
-::reg delete "HKU\New\SOFTWARE\Policies\Microsoft\Windows\CloudContent" /f /v DisableTailoredExperiencesWithDiagnosticData
+
 
-%----------% 18.17 Background apps
+%@% 20. Storage health
 reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\StorageHealth" /f /v AllowDiskHealthModelUpdates /d 0 /t reg_dword
 ::reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\StorageHealth" /f /v AllowDiskHealthModelUpdates
 
-%----------% 18.18 Motion
+%@% 21. Sync your settings
 ::reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\SettingSync" /f /v DisableSettingSync /d 2 /t reg_dword
 reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\SettingSync" /f /v DisableSettingSync
 
-%----------% 18.19 Tasks
+
 reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\SettingSync" /f /v DisableSettingSyncUserOverride
 
 ::reg add "HKCU\SOFTWARE\Microsoft\Messaging" /f /v CloudServiceSyncEnabled /d 0 /t reg_dword
-%----------% 18.20 App Diagnostics
+reg delete "HKCU\SOFTWARE\Microsoft\Messaging" /f /v CloudServiceSyncEnabled
-::reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" /f /v LetAppsGetDiagnosticInfo /d 2 /t reg_dword
+
-reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" /f /v LetAppsGetDiagnosticInfo
+::if defined HKU reg add "HKU\New\SOFTWARE\Microsoft\Messaging" /f /v CloudServiceSyncEnabled /d 0 /t reg_dword
 if defined HKU reg delete "HKU\New\SOFTWARE\Microsoft\Messaging" /f /v CloudServiceSyncEnabled
-%----------% 18.21 Inking and Typing
+
-reg add "HKCU\Software\Microsoft\InputPersonalization" /f /v RestrictImplicitInkCollection /d 1 /t reg_dword
+%@% 22. Teredo [delete recommended]
-::reg delete "HKCU\Software\Microsoft\InputPersonalization" /f /v RestrictImplicitInkCollection
+
 reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\TCPIP\v6Transition" /f /v Teredo_State
-%----------% Restrict Implicit Ink Collection [new users]
+
-reg add "HKU\New\Software\Microsoft\InputPersonalization" /f /v RestrictImplicitInkCollection /d 1 /t reg_dword
+%@% 23. Wi-Fi Sense
-::reg delete "HKU\New\Software\Microsoft\InputPersonalization" /f /v RestrictImplicitInkCollection
+
 ::reg delete "HKLM\SOFTWARE\Microsoft\WcmSvc\wifinetworkmanager\config" /f /v AutoConnectAllowedOEM
-%----------% Restrict Implicit Text Collection
+
-reg add "HKCU\Software\Microsoft\InputPersonalization" /f /v RestrictImplicitTextCollection /d 1 /t reg_dword
+%@% 24. Windows Defender
-::reg delete "HKCU\Software\Microsoft\InputPersonalization" /f /v RestrictImplicitTextCollection
+
 ::reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Spynet" /f /v SubmitSamplesConsent
-%----------% Restrict Implicit Text Collection [new users]
+
-reg add "HKU\New\Software\Microsoft\InputPersonalization" /f /v RestrictImplicitTextCollection /d 1 /t reg_dword
+
-::reg delete "HKU\New\Software\Microsoft\InputPersonalization" /f /v RestrictImplicitTextCollection
+
 
-%----------% 18.22 Activity History
+
 ::reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Reporting" /f /v DisableEnhancedNotifications
 
 %@% - Could trade a bit of privacy for more security against unclassified software by enabling SpyNet advanced membership
-%----------% Publish User Activities
+
 reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Spynet" /f /v SpyNetReporting
 
 %@% 24.1 Windows Defender SmartScreen
-%----------% Upload User Activities
+
 ::reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\System" /f /v EnableSmartScreen
 
 reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\SmartScreen" /f /v ConfigureAppInstallControlEnabled /d 1 /t reg_dword
-%----------% 18.23 Voice Activation
+
-reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" /f /v LetAppsActivateWithVoice /d 2 /t reg_dword
+
-::reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" /f /v LetAppsActivateWithVoice
+
 ::reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\SmartScreen" /f /v ConfigureAppInstallControl
-%----------%  Let Apps Activate With Voice AboveLock
+
-reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" /f /v LetAppsActivateWithVoiceAboveLock /d 2 /t reg_dword
+%@% 25. Windows Spotlight
-::reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" /f /v LetAppsActivateWithVoiceAboveLock
+
 reg delete "HKCU\SOFTWARE\Policies\Microsoft\Windows\CloudContent" /f /v DisableWindowsSpotlightFeatures
-%----------% 19. Software Protection Platform
+
 ::if defined HKU reg add "HKU\New\SOFTWARE\Policies\Microsoft\Windows\CloudContent" /f /v DisableWindowsSpotlightFeatures /d 1 /t reg_dword
 if defined HKU reg delete "HKU\New\SOFTWARE\Policies\Microsoft\Windows\CloudContent" /f /v DisableWindowsSpotlightFeatures
 
-%----------% 20. Storage health
+
 reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\Personalization" /f /v NoLockScreen
 
 %@% - Alternatively can set static Lock Screen
-%----------% 21. Sync your settings
+::reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Personalization" /f /v LockScreenImage /d "%SystemRoot%\web\screen\lockscreen.jpg"
-reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\SettingSync" /f /v DisableSettingSync /d 2 /t reg_dword
+reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\Personalization" /f /v LockScreenImage
-::reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\SettingSync" /f /v DisableSettingSync
+
 ::reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Personalization" /f /v LockScreenOverlaysDisabled /d 1 /t reg_dword
-%----------% Disable Setting Sync User Override
+reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\Personalization" /f /v LockScreenOverlaysDisabled
 
 %@% - Windows tips
 reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\CloudContent" /f /v DisableSoftLanding /d 1 /t reg_dword
-%----------% Cloud Service Sync Enabled
+
-reg add "HKCU\SOFTWARE\Microsoft\Messaging" /f /v CloudServiceSyncEnabled /d 0 /t reg_dword
+
-::reg delete "HKCU\SOFTWARE\Microsoft\Messaging" /f /v CloudServiceSyncEnabled
+%@% - Install bloat from Store
 reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\CloudContent" /f /v DisableWindowsConsumerFeatures /d 1 /t reg_dword
-%----------% Cloud Service Sync Enabled [new users]
+
-reg add "HKU\New\SOFTWARE\Microsoft\Messaging" /f /v CloudServiceSyncEnabled /d 0 /t reg_dword
+
-::reg delete "HKU\New\SOFTWARE\Microsoft\Messaging" /f /v CloudServiceSyncEnabled
+%@% 26. Microsoft Store AutoDownload
 reg add "HKLM\SOFTWARE\Policies\Microsoft\WindowsStore" /f /v AutoDownload /d 2 /t reg_dword
-%----------% 22. Teredo [XBox]
+
 
 %@% 27. Apps for websites [delete recommended]
 ::reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\System" /f /v EnableAppUriHandlers /d 0 /t reg_dword
-%----------% 23. Wi-Fi Sense
+
 
 %@% 28. Windows Update Delivery Optimization
 reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization" /f /v DODownloadMode /d 100 /t reg_dword
-%----------% 24. Windows Defender
+
 
 %@% 29. Windows Update AutoDownload [delete recommended]
 ::reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\WindowsStore\WindowsUpdate" /f /v AutoDownload /d 5 /t reg_dword
-%----------% Submit Samples Consent
+reg delete "HKLM\Software\Microsoft\Windows\CurrentVersion\WindowsStore\WindowsUpdate" /f /v AutoDownload
 
 :: HKCU entries will also be propagated to new users
 reg unload HKU\New >nul
-%----------% Disable Enhanced Notifications
+
 rem done!
 pause
 ::                          AveYo: more effectively could run this script via setupcomplete.cmd during windows 10 setup