Removing/disabling telemetry manually

[Octopuss]

I want to write my own batch file to deal with all the telemetry present in Windows 7.

Does anyone know about any site with up to date (ideally actively maintained, but that's probably too much to ask for) list of updates to uninstall and services/tasks to stop/disable/delete?

Thus far I was able to find presumably outdated list of updates and this:

sc stop DiagTrack
sc stop dmwappushservice
sc delete DiagTrack
sc delete dmwappushservice
echo "" > C:\ProgramData\Microsoft\Diagnosis\ETLLogs\AutoLogger\AutoLogger-Diagtrack-Listener.etl

Everything under “Application Experience”
Everything under “Autochk”
Everything under “Customer Experience Improvement Program”
Under “Disk Diagnostic” delete only the “Microsoft-Windows-DiskDiagnosticDataCollector”
Under “Maintenance” “WinSAT”
“Media Center” and click the “status” column, then select all non-disabled entries and disable them.

[351837]

I think you look something like this:

https://github.com/th3power/aegis-voat/releases

[submix8c]

On first look (without actually downloading) it LOOKS like a/some PowerShells.

[351837]

1 hour ago, submix8c said:

On first look (without actually downloading) it LOOKS like a/some PowerShells.

Two of them ( for hiding and uninstalling updates ) rest are adm and cmd.

I suggested it as info and some sort of example.

Edited April 14, 2016 by 351837
typo

[Octopuss]

On 14. duben 2016 at 5:02 PM, 351837 said:

I think you look something like this:

https://github.com/th3power/aegis-voat/releases

Oh yes. I actually saw this before. It's a bit complicated, and the person who wrote it certainly knows a LOT about scripting

It turned out there's not a whole lot to disable/delete if you're not hysterically paranoid. One or two services max, some registry keys and several scheduled tasks. Plus it's probably a good idea to remove everything GWX related before too. I actually kind of combined parts of the above and https://tweakhound.com/2015/11/01/remove-and-block-gwx-in-windows-7-2/ and created my own simple batch file I am happy enough with.

[bphlpt]

So, will you share or are you keeping the results to yourself?

Cheers and Regards

[Octopuss]

Haha!! I expected that kind of reply Didn't think anyone would be interested, considering there's a ton of such on the internet already.

@ECHO OFF
echo Stopping GWX process
taskkill /im gwx.exe /t /f
echo.
echo Removing GWX tasks
echo.
schtasks /delete /tn "\microsoft\windows\setup\gwx\launchtrayprocess" /f
schtasks /delete /tn "\microsoft\windows\setup\gwx\refreshgwxconfig" /f
schtasks /delete /tn "\microsoft\windows\setup\gwx\refreshgwxconfigandcontent" /f
schtasks /delete /tn "\microsoft\windows\setup\gwx\refreshgwxcontent" /f
schtasks /delete /tn "\microsoft\windows\setup\gwx" /f
echo.
for %%A in (2952664 2977759 3021917 3035583 3068708 3075249 3080149) do (
echo Uninstalling KB%%A...
wusa.exe /kb:%%A /uninstall /quiet /norestart)
echo.
Echo Deleting GWX folders
echo.
takeown /f %windir%\System32\GWX /r /d y
icacls %windir%\System32\GWX /grant administrators:F /t
rd /s /q %windir%\System32\GWX
copy nul %windir%\System32\gwx
icacls %windir%\System32\gwx /deny Everyone:F
echo.
takeown /f %localappdata%\GWX /r /d y
icacls %localappdata%\GWX /grant administrators:F /t
rmdir /s /q %localappdata%\GWX\
echo.
takeown /f %systemdrive%\$Windows~BT /r /d y
icacls %systemdrive%\$Windows~BT /grant administrators:F /t
rmdir /s /q %systemdrive%\$Windows~BT\
rmdir /s /q %systemdrive%\$Windows.~WS\
echo.

echo Disabling GWX and OS upgrade
echo.
reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\GWX /t REG_DWORD /v DisableGWX /d 1 /f
reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate /t REG_DWORD /v "DisableOSUpgrade" /d 1 /f
reg add HKLM\SOFTWARE\Wow6432Node\Policies\Microsoft\Windows\WindowsUpdate /t REG_DWORD /v "DisableOSUpgrade" /d 1 /f
echo.
echo Hiding GWX related updates. This may take a while.
echo.
start "title" /b /wait cscript.exe "%~dp0HideGWXetc.vbs" 2952664 2977759 3021917 3035583 3068708 3075249 3080149
echo.
echo Telemetry
echo.
echo Stopping and deleting Diagnostic Tracking Service
sc stop DiagTrack
sc delete DiagTrack
echo "" > C:\ProgramData\Microsoft\Diagnosis\ETLLogs\AutoLogger\AutoLogger-Diagtrack-Listener.etl

reg add HKLM\SOFTWARE\Microsoft\Windows\ScriptedDiagnosticsProvider\Policy /v EnableQueryRemoteServer /t REG_DWORD /d 0 /f
echo.

echo Removing scheduled tasks
echo.
schtasks /delete /tn "\microsoft\windows\application experience\aitagent" /f
schtasks /delete /tn "\microsoft\windows\application experience\microsoft compatibility appraiser" /f
schtasks /delete /tn "\microsoft\windows\application experience\programdataupdater" /f
schtasks /delete /tn "\microsoft\windows\autochk\proxy" /f
schtasks /delete /tn "\microsoft\windows\customer experience improvement program\consolidator" /f
schtasks /delete /tn "\microsoft\windows\customer experience improvement program\kernelceiptask" /f
schtasks /delete /tn "\microsoft\windows\customer experience improvement program\usbceip" /f
schtasks /delete /tn "\microsoft\windows\diskdiagnostic\microsoft-windows-diskdiagnosticdatacollector" /f
schtasks /change /disable /tn "\microsoft\windows\maintenance\winsat"
schtasks /change /disable /tn  "\microsoft\windows\media center\activatewindowssearch"
schtasks /change /disable /tn  "\microsoft\windows\media center\configureinternettimeservice"
schtasks /change /disable /tn  "\microsoft\windows\media center\dispatchrecoverytasks"
schtasks /change /disable /tn  "\microsoft\windows\media center\ehdrminit"
schtasks /change /disable /tn  "\microsoft\windows\media center\installplayready"
schtasks /change /disable /tn  "\microsoft\windows\media center\mcupdate"
schtasks /change /disable /tn  "\microsoft\windows\media center\mediacenterrecoverytask"
schtasks /change /disable /tn  "\microsoft\windows\media center\objectstorerecoverytask"
schtasks /change /disable /tn  "\microsoft\windows\media center\ocuractivate"
schtasks /change /disable /tn  "\microsoft\windows\media center\ocurdiscovery"
schtasks /change /disable /tn  "\microsoft\windows\media center\pbdadiscovery"
schtasks /change /disable /tn  "\microsoft\windows\media center\pbdadiscoveryw1"
schtasks /change /disable /tn  "\microsoft\windows\media center\pbdadiscoveryw2"
schtasks /change /disable /tn  "\microsoft\windows\media center\pvrrecoverytask"
schtasks /change /disable /tn  "\microsoft\windows\media center\pvrscheduletask"
schtasks /change /disable /tn  "\microsoft\windows\media center\registersearch"
schtasks /change /disable /tn  "\microsoft\windows\media center\reindexsearchroot"
schtasks /change /disable /tn  "\microsoft\windows\media center\sqlliterecoverytask"
schtasks /change /disable /tn  "\microsoft\windows\media center\updaterecordpath"
schtasks /delete /tn "\Microsoft\Windows\Windows Error Reporting\QueueReporting" /f
rem schtasks /change /disable /tn  ""
rem schtasks /delete /tn "" /f
echo.
echo ... All operations complete. Reboot now.
pause

and the vbs file (which I didn't even look at because I don't understand programming one bit

Dim hideupdates(7)

hideupdates(0) = "KB2952664"
hideupdates(1) = "KB2977759"
hideupdates(2) = "KB3021917"
hideupdates(3) = "KB3035583"
hideupdates(4) = "KB3068708"
hideupdates(5) = "KB3075249"
hideupdates(6) = "KB3080149"

set updateSession = createObject("Microsoft.Update.Session")
set updateSearcher = updateSession.CreateupdateSearcher()

Set searchResult = updateSearcher.Search("IsInstalled=0 and Type='Software'")

For i = 0 To searchResult.Updates.Count-1
set update = searchResult.Updates.Item(i)
For j = LBound(hideupdates) To UBound(hideupdates)
'MsgBox hideupdates(j)
if instr(1, update.Title, hideupdates(j), vbTextCompare) = 0 then
  'Wscript.echo "No match found for " & hideupdates(j)
else
Wscript.echo "Hiding updates..." & hideupdates(j)
update.IsHidden = True
end if
Next
Next