{"id":13387918,"url":"https://github.com/adolfintel/windows10-privacy","last_synced_at":"2025-10-02T08:31:31.097Z","repository":{"id":44130718,"uuid":"99481058","full_name":"adolfintel/Windows10-Privacy","owner":"adolfintel","description":"Windows 10 Privacy Guide","archived":true,"fork":false,"pushed_at":"2019-07-05T04:21:57.000Z","size":13759,"stargazers_count":1410,"open_issues_count":4,"forks_count":119,"subscribers_count":88,"default_branch":"master","last_synced_at":"2024-09-27T22:22:34.514Z","etag":null,"topics":["4chan","debotnet","privacy","windows-10"],"latest_commit_sha":null,"homepage":"https://fdossena.com/?p=w10debotnet/index_1903.frag","language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/adolfintel.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2017-08-06T11:06:25.000Z","updated_at":"2024-09-19T11:51:01.000Z","dependencies_parsed_at":"2022-09-21T16:53:43.799Z","dependency_job_id":null,"html_url":"https://github.com/adolfintel/Windows10-Privacy","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/adolfintel%2FWindows10-Privacy","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/adolfintel%2FWindows10-Privacy/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/adolfintel%2FWindows10-Privacy/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/adolfintel%2FWindows10-Privacy/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/adolfintel","download_url":"https://codeload.github.com/adolfintel/Windows10-Privacy/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":219875666,"owners_count":16554697,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["4chan","debotnet","privacy","windows-10"],"created_at":"2024-07-30T12:01:39.187Z","updated_at":"2025-10-02T08:31:30.453Z","avatar_url":"https://github.com/adolfintel.png","language":null,"funding_links":[],"categories":["\u003ca id=\"b478e9a9a324c963da11437d18f04998\"\u003e\u003c/a\u003e工具"],"sub_categories":["\u003ca id=\"6d2fe834b7662ecdd48c17163f732daf\"\u003e\u003c/a\u003eEnvironment\u0026\u0026环境\u0026\u0026配置"],"readme":"# Windows 10 Privacy Guide - 1903 Update\r\n![](https://raw.githubusercontent.com/adolfintel/Windows10-Privacy/master/data/nutella_1903.jpg)\r\n\r\n## Important: Maintainer needed!\r\nI am switching to Linux as my main OS and 1903 will be the last update for this guide from me. \u003ca href=\"https://github.com/adolfintel/Windows10-Privacy/issues/45\"\u003eWant to pick up the project?\u003c/a\u003e\r\n\r\n## Introduction\r\nWindows 10 has raised several concerns about privacy due to the fact that it has a lot of telemetry and online features. In response to these concerns, Microsoft released [a document explaining exactly what data they collect](https://technet.microsoft.com/itpro/windows/configure/windows-diagnostic-data), and now Windows 10 even has a [Diagnostic Data Viewer](https://www.microsoft.com/en-us/store/p/diagnostic-data-viewer/9n8wtrrsq8f7). Most of it seems pretty legit stuff when telemetry is set to basic, but still, if you don't trust them, here's how to prevent Windows 10 from sending your data to Microsoft.  \r\nLast update: July 5, 2019\r\n\r\n__Important:__ This procedure cannot be reverted without reinstalling Windows. Do not follow this guide if:\r\n* You are not an experienced user\r\n* You need to use a Microsoft Account for any reason (outside of your web browser)\r\n* You need to download anything from the Windows Store (including distros for the Linux subsystem if you want to use it)\r\n* You need to add/remove user accounts to your PC (new accounts will not work properly)\r\n\r\nYou're doing this at your own risk, I am not responsible for any data loss or damage that may occur.\r\n\r\nLet's start.\r\n\r\n## Do not use the default settings\r\nAt the end of the setup process, create a local account, don't use Cortana and turn off everything in the privacy settings.\r\n![](https://raw.githubusercontent.com/adolfintel/Windows10-Privacy/master/data/setup1809_1.jpg)\r\n![](https://raw.githubusercontent.com/adolfintel/Windows10-Privacy/master/data/setup1809_2.jpg)\r\n![](https://raw.githubusercontent.com/adolfintel/Windows10-Privacy/master/data/setup1809_3.jpg)\r\n![](https://raw.githubusercontent.com/adolfintel/Windows10-Privacy/master/data/setup1903_4.jpg)\r\n![](https://raw.githubusercontent.com/adolfintel/Windows10-Privacy/master/data/setup1903_5.jpg)\r\n![](https://raw.githubusercontent.com/adolfintel/Windows10-Privacy/master/data/setup1809_coll.jpg)\r\nIf you already installed Windows with the default settings, go to Start \u003e Settings \u003e Privacy to turn them off. You should also go to Account and disconnect your Microsoft account because this guide will prevent it from working properly.\r\n\r\n## Let it download all the updates\r\nOnce you get to the desktop, go to Settings \u003e Updates and security, and let it download all the updates. Reboot and repeat until no more updates are available.  \r\nThis is important because Windows Update may interfere with our activities.\r\n![](https://raw.githubusercontent.com/adolfintel/Windows10-Privacy/master/data/updates1903_1.jpg)  \r\nNow open the Store app, and let it download updates too.  \r\nAgain, this is important because updates would interfere with our activities.  \r\nThis may take some time. \r\n![](https://raw.githubusercontent.com/adolfintel/Windows10-Privacy/master/data/updates1809_2.jpg)\r\n![](https://raw.githubusercontent.com/adolfintel/Windows10-Privacy/master/data/updates1809_3.jpg)  \r\nMake sure you check for updates several times, because we absolutely don't want it to download stuff while we're removing it.\r\n\r\nNow that the system is fully updated, make sure Windows is activated with your license (or KMSPico).\r\n\r\n## Remove everything you can\r\nOpen the start menu and remove all the applications. Some of them, such as Microsoft Edge, will not have an uninstall option; we'll remove them later.  \r\nWhat's important now is to remove all the OEM software and the shitty games like Candy Crush and Minecraft.\r\n\r\nIf you used previous versions of Windows 10, you'll notice that this time we can remove more stuff, like Paint 3D, without resorting to tricks.\r\n\r\n## Tools\r\n* You will need __Install_Wim_Tweak__. Download [this archive](https://raw.githubusercontent.com/adolfintel/Windows10-Privacy/master/data/install_wim_tweak.zip), extract it to your Desktop, then move it to C:\\Windows\\System32\r\n![](https://raw.githubusercontent.com/adolfintel/Windows10-Privacy/master/data/iwt1809_extr.jpg)  \r\nThis is a very handy tool that allows us to remove Windows components with a single command. You can delete it from System32 when you're finished with this guide.  \r\n* We need a command prompt, so click start, type ``cmd`` and run it as administrator\r\n![](https://raw.githubusercontent.com/adolfintel/Windows10-Privacy/master/data/cmd1809_1.jpg)\r\n* We will also need PowerShell, so click start, type ``PowerShell`` and run it as administrator\r\n![](https://raw.githubusercontent.com/adolfintel/Windows10-Privacy/master/data/ps1809_1.jpg)\r\n\r\n## Removing Windows Defender\r\nIn the command prompt, type the following commands:\r\n```\r\nreg add \"HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\" /v SmartScreenEnabled /t REG_SZ /d \"Off\" /f\r\nreg add \"HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\AppHost\" /v \"EnableWebContentEvaluation\" /t REG_DWORD /d \"0\" /f\r\nreg add \"HKCU\\Software\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\PhishingFilter\" /v \"EnabledV9\" /t REG_DWORD /d \"0\" /f\r\nreg add \"HKLM\\SOFTWARE\\Policies\\Microsoft\\Windows Defender\" /v DisableAntiSpyware /t REG_DWORD /d 1 /f\r\nreg add \"HKLM\\SOFTWARE\\Policies\\Microsoft\\Windows Defender\\Spynet\" /v SpyNetReporting /t REG_DWORD /d 0 /f\r\nreg add \"HKLM\\SOFTWARE\\Policies\\Microsoft\\Windows Defender\\Spynet\" /v SubmitSamplesConsent /t REG_DWORD /d 2 /f\r\nreg add \"HKLM\\SOFTWARE\\Policies\\Microsoft\\Windows Defender\\Spynet\" /v DontReportInfectionInformation /t REG_DWORD /d 1 /f\r\nreg delete \"HKLM\\SYSTEM\\CurrentControlSet\\Services\\Sense\" /f\r\nreg add \"HKLM\\SOFTWARE\\Policies\\Microsoft\\MRT\" /v \"DontReportInfectionInformation\" /t REG_DWORD /d 1 /f\r\nreg add \"HKLM\\SOFTWARE\\Policies\\Microsoft\\MRT\" /v \"DontOfferThroughWUAU\" /t REG_DWORD /d 1 /f\r\nreg delete \"HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run\" /v \"SecurityHealth\" /f\r\nreg delete \"HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\StartupApproved\\Run\" /v \"SecurityHealth\" /f\r\nreg add \"HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Image File Execution Options\\SecHealthUI.exe\" /v Debugger /t REG_SZ /d \"%windir%\\System32\\taskkill.exe\" /f\r\ninstall_wim_tweak /o /c Windows-Defender /r\r\nreg add \"HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Notifications\\Settings\\Windows.SystemToast.SecurityAndMaintenance\" /v \"Enabled\" /t REG_DWORD /d 0 /f\r\nreg delete \"HKLM\\SYSTEM\\CurrentControlSet\\Services\\SecurityHealthService\" /f\r\n```\r\nThis will take 1-2 minutes.  \r\nUnfortunately, since June 2018, the Windows Security icon in the Start menu can no longer be removed without breaking the system.\r\n\r\nIf Windows complains about the system being unprotected, right click the notification and hide it.\r\n![](https://raw.githubusercontent.com/adolfintel/Windows10-Privacy/master/data/wdend1803_1.jpg)\r\n\r\n## Removing features\r\nWe will now remove almost all UWP features in Windows. The only UWP app you'll have left will be the settings app.  \r\nIf you manually install UWP apps later (like cracked UWP games) they may not work properly.\r\n\r\n__Note:__ if some of the apps reappear after a few minutes, it's because you didn't wait for the updates to finish. You can simply remove them again using the same commands.\r\n\r\n### Windows Store\r\nIn the PowerShell, type:\r\n```\r\nGet-AppxPackage -AllUsers *store* | Remove-AppxPackage\r\n```\r\nYou can ignore any error that pops up.  \r\nIn the command prompt, type:\r\n```\r\ninstall_wim_tweak /o /c Microsoft-Windows-ContentDeliveryManager /r\r\ninstall_wim_tweak /o /c Microsoft-Windows-Store /r\r\nreg add \"HKLM\\Software\\Policies\\Microsoft\\WindowsStore\" /v RemoveWindowsStore /t REG_DWORD /d 1 /f\r\nreg add \"HKLM\\Software\\Policies\\Microsoft\\WindowsStore\" /v DisableStoreApps /t REG_DWORD /d 1 /f\r\nreg add \"HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\AppHost\" /v \"EnableWebContentEvaluation\" /t REG_DWORD /d 0 /f\r\nreg add \"HKLM\\SOFTWARE\\Policies\\Microsoft\\PushToInstall\" /v DisablePushToInstall /t REG_DWORD /d 1 /f\r\nreg add \"HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\ContentDeliveryManager\" /v SilentInstalledAppsEnabled /t REG_DWORD /d 0 /f\r\nsc delete PushToInstall\r\n```\r\n\r\n### Music, TV, ...\r\nIn the PowerShell, type:\r\n```\r\nGet-AppxPackage -AllUsers *zune* | Remove-AppxPackage\r\nGet-WindowsPackage -Online | Where PackageName -like *MediaPlayer* | Remove-WindowsPackage -Online -NoRestart\r\n```\r\n\r\n__Alternatives__: [MPC-HC](https://mpc-hc.org/), [VLC](https://www.videolan.org/vlc/), [MPV](https://mpv.srsfckn.biz/)\r\n\r\n### Xbox and Game DVR\r\nIn the PowerShell, type:\r\n```\r\nGet-AppxPackage -AllUsers *xbox* | Remove-AppxPackage\r\n```\r\nYou can ignore any error that pops up.  \r\nIn the command prompt, type:\r\n```\r\nsc delete XblAuthManager\r\nsc delete XblGameSave\r\nsc delete XboxNetApiSvc\r\nsc delete XboxGipSvc\r\nreg delete \"HKLM\\SYSTEM\\CurrentControlSet\\Services\\xbgm\" /f\r\nschtasks /Change /TN \"Microsoft\\XblGameSave\\XblGameSaveTask\" /disable\r\nschtasks /Change /TN \"Microsoft\\XblGameSave\\XblGameSaveTaskLogon\" /disable\r\nreg add \"HKLM\\SOFTWARE\\Policies\\Microsoft\\Windows\\GameDVR\" /v AllowGameDVR /t REG_DWORD /d 0 /f\r\n```\r\nAdditionally, go to Start \u003e Settings \u003e Gaming and turn off everything.\r\n\r\n### Sticky Notes\r\nIn the PowerShell, type:\r\n```\r\nGet-AppxPackage -AllUsers *sticky* | Remove-AppxPackage\r\n```\r\n__Alternatives__: [Notebot](http://notebot.fdossena.com/)\r\n\r\n### Maps\r\nIn the PowerShell, type:\r\n```\r\nGet-AppxPackage -AllUsers *maps* | Remove-AppxPackage\r\n```\r\nIn the command prompt, type:\r\n```\r\nsc delete MapsBroker\r\nsc delete lfsvc\r\nschtasks /Change /TN \"\\Microsoft\\Windows\\Maps\\MapsUpdateTask\" /disable\r\nschtasks /Change /TN \"\\Microsoft\\Windows\\Maps\\MapsToastTask\" /disable\r\n```\r\n\r\n### Alarms and Clock\r\nIn the PowerShell, type:\r\n```\r\nGet-AppxPackage -AllUsers *alarms* | Remove-AppxPackage\r\nGet-AppxPackage -AllUsers *people* | Remove-AppxPackage\r\n```\r\nYou can ignore any error that pops up.\r\n\r\n### Mail, Calendar, ...\r\nIn the PowerShell, type:\r\n```\r\nGet-AppxPackage -AllUsers *comm* | Remove-AppxPackage\r\nGet-AppxPackage -AllUsers *mess* | Remove-AppxPackage\r\n```\r\nYou can ignore any error that pops up.\r\n\r\n__Alternatives__: [Thunderbird](https://www.mozilla.org/thunderbird/)\r\n\r\n### OneNote\r\nIn the PowerShell, type:\r\n```\r\nGet-AppxPackage -AllUsers *onenote* | Remove-AppxPackage\r\n```\r\n\r\n### Photos\r\nIn the PowerShell, type:\r\n```\r\nGet-AppxPackage -AllUsers *photo* | Remove-AppxPackage\r\n```\r\n__Alternatives__: [JPEGView](https://sourceforge.net/projects/jpegview/), or the old Windows Photo Viewer\r\n\r\n### Camera\r\nIn the PowerShell, type:\r\n```\r\nGet-AppxPackage -AllUsers *camera* | Remove-AppxPackage\r\n```\r\nIgnore any error that pops up\r\n\r\n### Weather, News, ...\r\nIn the PowerShell, type:\r\n```\r\nGet-AppxPackage -AllUsers *bing* | Remove-AppxPackage\r\n```\r\n\r\n### Calculator\r\nIn the PowerShell, type:\r\n```\r\nGet-AppxPackage -AllUsers *calc* | Remove-AppxPackage\r\n```\r\n__Alternatives__: [SpeedCrunch](http://www.speedcrunch.org/)\r\n\r\n### Sound Recorder\r\nIn the PowerShell, type:\r\n```\r\nGet-AppxPackage -AllUsers *soundrec* | Remove-AppxPackage\r\n```\r\n__Alternatives__: [Audacity](http://www.audacityteam.org/)\r\n\r\n### Microsoft Edge\r\nSince May 2019, Edge can no longer be fully removed without breaking Windows Update. We can neutralize it, but the icon will still be there in the start menu.\r\n\r\nRight click the Edge icon on your taskbar and unpin it.\r\n\r\nIn the PowerShell, type:\r\n```\r\ntaskkill /F /IM browser_broker.exe\r\ntaskkill /F /IM RuntimeBroker.exe\r\ntaskkill /F /IM MicrosoftEdge.exe\r\ntaskkill /F /IM MicrosoftEdgeCP.exe\r\ntaskkill /F /IM MicrosoftEdgeSH.exe\r\nmv C:\\Windows\\SystemApps\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe C:\\Windows\\SystemApps\\Microsoft.MicrosoftEdge_8wekyb3d8bbwe_BAK\r\nreg add \"HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Image File Execution Options\\MicrosoftEdge.exe\" /v Debugger /t REG_SZ /d \"%windir%\\System32\\taskkill.exe\" /f\r\nGet-WindowsPackage -Online | Where PackageName -like *InternetExplorer* | Remove-WindowsPackage -Online -NoRestart\r\n```  \r\n__Alternatives__: [Firefox](http://www.firefox.com/\"), [Chromium](http://chromium.woolyss.com/), [Iridium Browser](https://iridiumbrowser.de), [Pale Moon](https://www.palemoon.org/)\r\n\r\n### Contact Support, Get Help\r\nIn the command prompt, type:\r\n```\r\ninstall_wim_tweak /o /c Microsoft-Windows-ContactSupport /r\r\n```\r\nIn the PowerShell, type:\r\n```\r\nGet-AppxPackage -AllUsers *GetHelp* | Remove-AppxPackage\r\n```\r\nAdditionally, Go to Start \u003e Settings \u003e Apps \u003e Manage optional features, and remove Contact Support (if present).\r\n\r\n### Microsoft Quick Assist\r\nIn the PowerShell, type:\r\n```\r\nGet-WindowsPackage -Online | Where PackageName -like *QuickAssist* | Remove-WindowsPackage -Online -NoRestart\r\n```\r\n\r\n### Connect\r\nIn the command prompt, type:\r\n```\r\ninstall_wim_tweak /o /c Microsoft-PPIProjection-Package /r\r\n```\r\n\r\n### Your Phone\r\nIn the PowerShell, type:\r\n```\r\nGet-AppxPackage -AllUsers *phone* | Remove-AppxPackage\r\n```\r\n\r\n### Hello Face\r\nIn the PowerShell, type:\r\n```\r\nGet-WindowsPackage -Online | Where PackageName -like *Hello-Face* | Remove-WindowsPackage -Online -NoRestart\r\n```\r\n\r\nIn the command prompt, type:\r\n```\r\nschtasks /Change /TN \"\\Microsoft\\Windows\\HelloFace\\FODCleanupTask\" /Disable\r\n```\r\n\r\n### Edit with 3D Paint / 3D Print\r\nIt is now possible to remove 3D Paint and 3D Print, but they forgot to remove the option in the context menu when you remove them. To remove it, run this in the command prompt:\r\n```\r\nfor /f \"tokens=1* delims=\" %I in (' reg query \"HKEY_CLASSES_ROOT\\SystemFileAssociations\" /s /k /f \"3D Edit\" ^| find /i \"3D Edit\" ') do (reg delete \"%I\" /f )\r\nfor /f \"tokens=1* delims=\" %I in (' reg query \"HKEY_CLASSES_ROOT\\SystemFileAssociations\" /s /k /f \"3D Print\" ^| find /i \"3D Print\" ') do (reg delete \"%I\" /f )\r\n```\r\n\r\n### System Restore\r\nIn the PowerShell, type:\r\n```\r\nDisable-ComputerRestore -Drive \"C:\\\"\r\nvssadmin delete shadows /all /Quiet\r\nreg add \"HKLM\\SOFTWARE\\Policies\\Microsoft\\Windows NT\\SystemRestore\" /v \"DisableConfig\" /t \"REG_DWORD\" /d \"1\" /f\r\nreg add \"HKLM\\SOFTWARE\\Policies\\Microsoft\\Windows NT\\SystemRestore\" /v \"DisableSR \" /t \"REG_DWORD\" /d \"1\" /f\r\nreg add \"HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\SystemRestore\" /v \"DisableConfig\" /t \"REG_DWORD\" /d \"1\" /f\r\nreg add \"HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\SystemRestore\" /v \"DisableSR \" /t \"REG_DWORD\" /d \"1\" /f\r\nschtasks /Change /TN \"\\Microsoft\\Windows\\SystemRestore\\SR\" /disable\r\n```\r\n\r\n### Reboot!\r\nReboot the system and you're now free of UWP garbage.\r\n\r\n## Disabling Cortana\r\nWith the Anniversary Update, Microsoft hid the option to disable Cortana.  \r\n__Warning__: Do not attempt to remove the Cortana package using install_wim_tweak or the PowerShell, as it will break Windows Search and you will have to reinstall Windows!\r\n\r\nOpen our command prompt again and use this command:\r\n```\r\nreg add \"HKLM\\SOFTWARE\\Policies\\Microsoft\\Windows\\Windows Search\" /v AllowCortana /t REG_DWORD /d 0 /f\r\nreg add \"HKLM\\SYSTEM\\CurrentControlSet\\Services\\SharedAccess\\Parameters\\FirewallPolicy\\FirewallRules\"  /v \"{2765E0F4-2918-4A46-B9C9-43CDD8FCBA2B}\" /t REG_SZ /d  \"BlockCortana|Action=Block|Active=TRUE|Dir=Out|App=C:\\windows\\systemapps\\microsoft.windows.cortana_cw5n1h2txyewy\\searchui.exe|Name=Search  and Cortana  application|AppPkgId=S-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742|\" /f\r\nreg add \"HKLM\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Search\" /v BingSearchEnabled /t REG_DWORD /d 0 /f\r\n```\r\nReboot again and Cortana is gone. The icon is still there, but it will open the regular search instead.\r\n\r\n## More tweaking\r\nOpen the command prompt again.\r\n### Turn off Windows Error reporting\r\nIn the command prompt, type:\r\n```\r\nreg add \"HKLM\\SOFTWARE\\Policies\\Microsoft\\Windows\\Windows Error Reporting\" /v Disabled /t REG_DWORD /d 1 /f\r\nreg add \"HKLM\\SOFTWARE\\Microsoft\\Windows\\Windows Error Reporting\" /v Disabled /t REG_DWORD /d 1 /f\r\n```\r\nWe will remove the service later, but in case an update reinstalls it, this will at least keep it turned off.\r\n\r\n### No more forced updates\r\nThis will notify when updates are available, and you decide when to install them.  \r\nIn the command prompt, type:\r\n```\r\nreg add \"HKLM\\SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate\\AU\" /v NoAutoUpdate /t REG_DWORD /d 0 /f\r\nreg add \"HKLM\\SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate\\AU\" /v AUOptions /t REG_DWORD /d 2 /f\r\nreg add \"HKLM\\SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate\\AU\" /v ScheduledInstallDay /t REG_DWORD /d 0 /f\r\nreg add \"HKLM\\SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate\\AU\" /v ScheduledInstallTime /t REG_DWORD /d 3 /f\r\n```\r\n\r\n### No license checking\r\nBy default, Windows will check your license every time you turn on your PC, this will prevent it.  \r\nIn the command prompt, type:\r\n```\r\nreg add \"HKLM\\Software\\Policies\\Microsoft\\Windows NT\\CurrentVersion\\Software Protection Platform\" /v NoGenTicket /t REG_DWORD /d 1 /f\r\n```\r\n\r\n### Disable sync\r\nIt doesn't really affect you if you're not using a Microsoft Account, but it will at least disable the Sync settings from the Settings app.  \r\nIn the command prompt, type:\r\n```\r\nreg add \"HKLM\\Software\\Policies\\Microsoft\\Windows\\SettingSync\" /v DisableSettingSync /t REG_DWORD /d 2 /f\r\nreg add \"HKLM\\Software\\Policies\\Microsoft\\Windows\\SettingSync\" /v DisableSettingSyncUserOverride /t REG_DWORD /d 1 /f\r\n```\r\n\r\n### No Windows Tips\r\nIn the command prompt, type:\r\n```\r\nreg add \"HKLM\\Software\\Policies\\Microsoft\\Windows\\CloudContent\" /v DisableSoftLanding /t REG_DWORD /d 1 /f\r\nreg add \"HKLM\\Software\\Policies\\Microsoft\\Windows\\CloudContent\" /v DisableWindowsSpotlightFeatures /t REG_DWORD /d 1 /f\r\nreg add \"HKLM\\Software\\Policies\\Microsoft\\Windows\\CloudContent\" /v DisableWindowsConsumerFeatures /t REG_DWORD /d 1 /f\r\nreg add \"HKLM\\Software\\Policies\\Microsoft\\Windows\\DataCollection\" /v DoNotShowFeedbackNotifications /t REG_DWORD /d 1 /f\r\nreg add \"HKLM\\Software\\Policies\\Microsoft\\WindowsInkWorkspace\" /v AllowSuggestedAppsInWindowsInkWorkspace /t REG_DWORD /d 0 /f\r\n```\r\n\r\n## Removing Telemetry and other unnecessary services\r\nIn the command prompt type the following commands:\r\n```\r\nsc delete DiagTrack\r\nsc delete dmwappushservice\r\nsc delete WerSvc\r\nsc delete OneSyncSvc\r\nsc delete MessagingService\r\nsc delete wercplsupport\r\nsc delete PcaSvc\r\nsc config wlidsvc start=demand\r\nsc delete wisvc\r\nsc delete RetailDemo\r\nsc delete diagsvc\r\nsc delete shpamsvc \r\nsc delete TermService\r\nsc delete UmRdpService\r\nsc delete SessionEnv\r\nsc delete TroubleshootingSvc\r\nfor /f \"tokens=1\" %I in ('reg query \"HKLM\\SYSTEM\\CurrentControlSet\\Services\" /k /f \"wscsvc\" ^| find /i \"wscsvc\"') do (reg delete %I /f)\r\nfor /f \"tokens=1\" %I in ('reg query \"HKLM\\SYSTEM\\CurrentControlSet\\Services\" /k /f \"OneSyncSvc\" ^| find /i \"OneSyncSvc\"') do (reg delete %I /f)\r\nfor /f \"tokens=1\" %I in ('reg query \"HKLM\\SYSTEM\\CurrentControlSet\\Services\" /k /f \"MessagingService\" ^| find /i \"MessagingService\"') do (reg delete %I /f)\r\nfor /f \"tokens=1\" %I in ('reg query \"HKLM\\SYSTEM\\CurrentControlSet\\Services\" /k /f \"PimIndexMaintenanceSvc\" ^| find /i \"PimIndexMaintenanceSvc\"') do (reg delete %I /f)\r\nfor /f \"tokens=1\" %I in ('reg query \"HKLM\\SYSTEM\\CurrentControlSet\\Services\" /k /f \"UserDataSvc\" ^| find /i \"UserDataSvc\"') do (reg delete %I /f)\r\nfor /f \"tokens=1\" %I in ('reg query \"HKLM\\SYSTEM\\CurrentControlSet\\Services\" /k /f \"UnistoreSvc\" ^| find /i \"UnistoreSvc\"') do (reg delete %I /f)\r\nfor /f \"tokens=1\" %I in ('reg query \"HKLM\\SYSTEM\\CurrentControlSet\\Services\" /k /f \"BcastDVRUserService\" ^| find /i \"BcastDVRUserService\"') do (reg delete %I /f)\r\nfor /f \"tokens=1\" %I in ('reg query \"HKLM\\SYSTEM\\CurrentControlSet\\Services\" /k /f \"Sgrmbroker\" ^| find /i \"Sgrmbroker\"') do (reg delete %I /f)\r\nsc delete diagnosticshub.standardcollector.service\r\nreg add \"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Siuf\\Rules\" /v \"NumberOfSIUFInPeriod\" /t REG_DWORD /d 0 /f\r\nreg delete \"HKEY_CURRENT_USER\\SOFTWARE\\Microsoft\\Siuf\\Rules\" /v \"PeriodInNanoSeconds\" /f\r\nreg add \"HKLM\\SYSTEM\\ControlSet001\\Control\\WMI\\AutoLogger\\AutoLogger-Diagtrack-Listener\" /v Start /t REG_DWORD /d 0 /f\r\nreg add \"HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\AppCompat\" /v AITEnable /t REG_DWORD /d 0 /f\r\nreg add \"HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\AppCompat\" /v DisableInventory /t REG_DWORD /d 1 /f\r\nreg add \"HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\AppCompat\" /v DisablePCA /t REG_DWORD /d 1 /f\r\nreg add \"HKEY_LOCAL_MACHINE\\SOFTWARE\\Policies\\Microsoft\\Windows\\AppCompat\" /v DisableUAR /t REG_DWORD /d 1 /f\r\nreg add \"HKLM\\SOFTWARE\\Policies\\Microsoft\\MicrosoftEdge\\PhishingFilter\" /v \"EnabledV9\" /t REG_DWORD /d 0 /f\r\nreg add \"HKLM\\SOFTWARE\\Policies\\Microsoft\\Windows\\System\" /v \"EnableSmartScreen\" /t REG_DWORD /d 0 /f\r\nreg add \"HKCU\\Software\\Microsoft\\Internet Explorer\\PhishingFilter\" /v \"EnabledV9\" /t REG_DWORD /d 0 /f\r\nreg add \"HKCU\\Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\" /v \"NoRecentDocsHistory\" /t REG_DWORD /d 1 /f\r\nreg add \"HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Image File Execution Options\\CompatTelRunner.exe\" /v Debugger /t REG_SZ /d \"%windir%\\System32\\taskkill.exe\" /f\r\nreg add \"HKLM\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Image File Execution Options\\DeviceCensus.exe\" /v Debugger /t REG_SZ /d \"%windir%\\System32\\taskkill.exe\" /f\r\n```\r\n\r\nPress Win+R, type regedit, press enter, and navigate to HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services.  \r\nHere we need to locate the following keys:\r\n* DPS\r\n* WdiServiceHost\r\n* WdiSystemHost\r\n  \r\nThese keys have messed up permissions. To delete them, we must fix them, here's a video showing how to do it:  \r\n![](https://raw.githubusercontent.com/adolfintel/Windows10-Privacy/master/data/delkey.gif)  \r\nRight click the key and select Permissions, then click Advanced, change the Owner to your username, check \"Replace owner on subcontainers and objects\" and \"Replace all child object permission entries with inheritable permission entries from this object\", if inheritance is enabled, disable it and convert to explicit permissions, apply, remove all the permission entries and add one for your username with Full control, confirm everything and delete the key.  \r\nRepeat for the 3 keys and you're done.\r\n\r\n### Scheduled tasks\r\nWindows 10 has a huge amount of scheduled tasks that may report some data. Type these commands in the command prompt to remove them:\r\n```\r\nschtasks /Change /TN \"Microsoft\\Windows\\AppID\\SmartScreenSpecific\" /disable\r\nschtasks /Change /TN \"Microsoft\\Windows\\Application Experience\\AitAgent\" /disable\r\nschtasks /Change /TN \"Microsoft\\Windows\\Application Experience\\Microsoft Compatibility Appraiser\" /disable\r\nschtasks /Change /TN \"Microsoft\\Windows\\Application Experience\\ProgramDataUpdater\" /disable\r\nschtasks /Change /TN \"Microsoft\\Windows\\Application Experience\\StartupAppTask\" /disable\r\nschtasks /Change /TN \"Microsoft\\Windows\\Autochk\\Proxy\" /disable\r\nschtasks /Change /TN \"Microsoft\\Windows\\CloudExperienceHost\\CreateObjectTask\" /disable\r\nschtasks /Change /TN \"Microsoft\\Windows\\Customer Experience Improvement Program\\BthSQM\" /disable\r\nschtasks /Change /TN \"Microsoft\\Windows\\Customer Experience Improvement Program\\Consolidator\" /disable\r\nschtasks /Change /TN \"Microsoft\\Windows\\Customer Experience Improvement Program\\KernelCeipTask\" /disable\r\nschtasks /Change /TN \"Microsoft\\Windows\\Customer Experience Improvement Program\\Uploader\" /disable\r\nschtasks /Change /TN \"Microsoft\\Windows\\Customer Experience Improvement Program\\UsbCeip\" /disable\r\nschtasks /Change /TN \"Microsoft\\Windows\\DiskDiagnostic\\Microsoft-Windows-DiskDiagnosticDataCollector\" /disable\r\nschtasks /Change /TN \"Microsoft\\Windows\\DiskFootprint\\Diagnostics\" /disable\r\nschtasks /Change /TN \"Microsoft\\Windows\\FileHistory\\File History (maintenance mode)\" /disable\r\nschtasks /Change /TN \"Microsoft\\Windows\\Maintenance\\WinSAT\" /disable\r\nschtasks /Change /TN \"Microsoft\\Windows\\PI\\Sqm-Tasks\" /disable\r\nschtasks /Change /TN \"Microsoft\\Windows\\Power Efficiency Diagnostics\\AnalyzeSystem\" /disable\r\nschtasks /Change /TN \"Microsoft\\Windows\\Shell\\FamilySafetyMonitor\" /disable\r\nschtasks /Change /TN \"Microsoft\\Windows\\Shell\\FamilySafetyRefresh\" /disable\r\nschtasks /Change /TN \"Microsoft\\Windows\\Shell\\FamilySafetyUpload\" /disable\r\nschtasks /Change /TN \"Microsoft\\Windows\\Windows Error Reporting\\QueueReporting\" /disable\r\nschtasks /Change /TN \"Microsoft\\Windows\\WindowsUpdate\\Automatic App Update\" /disable\r\nschtasks /Change /TN \"Microsoft\\Windows\\License Manager\\TempSignedLicenseExchange\" /disable\r\nschtasks /Change /TN \"Microsoft\\Windows\\Clip\\License Validation\" /disable\r\nschtasks /Change /TN \"\\Microsoft\\Windows\\ApplicationData\\DsSvcCleanup\" /disable\r\nschtasks /Change /TN \"\\Microsoft\\Windows\\Power Efficiency Diagnostics\\AnalyzeSystem\" /disable\r\nschtasks /Change /TN \"\\Microsoft\\Windows\\PushToInstall\\LoginCheck\" /disable\r\nschtasks /Change /TN \"\\Microsoft\\Windows\\PushToInstall\\Registration\" /disable\r\nschtasks /Change /TN \"\\Microsoft\\Windows\\Shell\\FamilySafetyMonitor\" /disable\r\nschtasks /Change /TN \"\\Microsoft\\Windows\\Shell\\FamilySafetyMonitorToastTask\" /disable\r\nschtasks /Change /TN \"\\Microsoft\\Windows\\Shell\\FamilySafetyRefreshTask\" /disable\r\nschtasks /Change /TN \"\\Microsoft\\Windows\\Subscription\\EnableLicenseAcquisition\" /disable\r\nschtasks /Change /TN \"\\Microsoft\\Windows\\Subscription\\LicenseAcquisition\" /disable\r\nschtasks /Change /TN \"\\Microsoft\\Windows\\Diagnosis\\RecommendedTroubleshootingScanner\" /disable\r\nschtasks /Change /TN \"\\Microsoft\\Windows\\Diagnosis\\Scheduled\" /disable\r\nschtasks /Change /TN \"\\Microsoft\\Windows\\NetTrace\\GatherNetworkInfo\" /disable\r\ndel /F /Q \"C:\\Windows\\System32\\Tasks\\Microsoft\\Windows\\SettingSync\\*\" \r\n```\r\nSome of these may not exist, it's fine.\r\n\r\n## Last touches\r\nWe must disable Windows Spotlight, and other \"Suggestions\" (literal ads).\r\n\r\nGo to Start \u003e Settings \u003e Personalization \u003e Lock screen: \r\n* Set the background to Picture\r\n* Set \"Get fun facts, tips, tricks and more on your lock screen\" to off\r\n\r\nGo to Personalization \u003e Start:\r\n* Set Show suggestions occasionally in Start to off (They're literally ads)\r\n\r\nGo back to Settings and go to System \u003e Notifications and actions:\r\n* Set \"Get tips, tricks, and suggestions as you use Windows\" to off\r\n* Set \"Show me the Windows welcome...\" to off\r\n\r\nGo to System \u003e Multitasking:\r\n* Set \"Show suggestions occasionally in your timeline\" to off\r\n \r\nGo back to Settings and go to Privacy:\r\n* Under General, turn off everything\r\n* Under Activity history, turn off everything\r\n* Under Speech, turn off everything\r\n* Under Inking, turn off everything\r\n* Under App diagnostics, set Let apps access diagnostic information to off\r\n\r\nGo back to Settings and go to Search:\r\n* Under Permissions \u0026 History, turn off everything\r\n\r\nLater on, you might get a \"Suggestions\" notification. Right click it and turn it off.\r\n\r\n## Use a firewall!\r\nFor some applications (such as the settings app), the only way to prevent them from reporting data is to block them with a firewall. This is why you should use a firewall to block all traffic except the applications you explicitly allow, like your web browser.\r\nPersonally, I allow Windows Update, Network discovery and sharing, DHCP, DNS, my web browser and nothing more.\r\n\r\n[SimpleWall](https://www.henrypp.org/product/simplewall) is the new recommended firewall for this guide. If you used TinyWall before, it no longer works on 1903, so uninstall it.  \r\nSimpleWall can block/unblock individual executables, UWP apps, and services, as well as filter by address, port and protocol.  \r\nUnlike TinyWall unfortunately, it doesn't have an autolearn mode, but it has a very useful notification that pops up when an application is blocked, so you can decide if you want to block it or allow it permanently. This is very useful when installing new software. Get used to seeing a lot of these in the first hours.  \r\nMy recommended configuration for SimpleWall is this:\r\n* Under Settings \u003e Mode, use Whitelist. This will block all traffic that you don't explicitly allow\r\n* Under Settings \u003e Settings \u003e General, enable \"Load on system startup\", \"Start minimized\", and \"Skip User Account Control prompt\"\r\n* Under Settings \u003e Settings \u003e Rules, select \"Enable boot-time filters\"\r\n* Under Settings \u003e Settings \u003e Rules \u003e System Rules, allow smb (inbound and outbound), if you plan to use network file sharing, and also Windows Update\r\n* Under File \u003e Import, you can load my preset: [download](https://raw.githubusercontent.com/adolfintel/Windows10-Privacy/master/data/simplewall_config.zip). It blocks some Windows features that aren't already blocked by the guide, and allows all apps to access the local network but not the Internet.\r\n* Click on Enable filtering, then select Whitelist\r\n\r\nFeel free to experiment with SimpleWall, it is a very powerful tool.  \r\nThe only disadvantage at the moment is that it blocks Windows Update even if you explicitly allow it. The developer is aware of this issue and it will probably be fixed in later releases. A temporary workaround is available [here](https://github.com/henrypp/simplewall/issues/206#issuecomment-439830634).\r\n\r\n## Congratulations! Your copy of Windows is now Debotnetted!\r\nThings will change in the future, and I'll do what I can to keep this guide updated.\r\nAs of May 2018, this guide works on Windows 10 Pro.\r\n\r\n## Can Windows revert these changes?\r\nWhen a major update is installed, almost all changes will be reverted and you'll have to repeat this procedure. Major updates come out about twice a year.\r\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fadolfintel%2Fwindows10-privacy","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fadolfintel%2Fwindows10-privacy","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fadolfintel%2Fwindows10-privacy/lists"}