From a5dbe66fc175e39397f296ab2ff703e9b0ab4d7c Mon Sep 17 00:00:00 2001 From: undergroundwires Date: Fri, 7 Aug 2020 21:16:58 +0100 Subject: [PATCH] tweaks to disable webcam, speech and compatibility telemetry --- src/application/application.yaml | 26 ++++++++++++++++++++++++++ 1 file changed, 26 insertions(+) diff --git a/src/application/application.yaml b/src/application/application.yaml index 64cbac42..12f1fbdc 100644 --- a/src/application/application.yaml +++ b/src/application/application.yaml @@ -351,6 +351,26 @@ actions: schtasks /change /TN "\Microsoft\Windows\Customer Experience Improvement Program\Consolidator" /ENABLE schtasks /change /TN "\Microsoft\Windows\Customer Experience Improvement Program\KernelCeipTask" /ENABLE schtasks /change /TN "\Microsoft\Windows\Customer Experience Improvement Program\UsbCeip" /ENABLE + - + name: Disable Webcam Telemetry (devicecensus.exe) + recommend: true + docs: https://www.ghacks.net/2019/09/23/what-is-devicecensus-exe-on-windows-10-and-why-does-it-need-internet-connectivity/ + code: schtasks /change /TN "Microsoft\Windows\Device Information\Device" /DISABLE + revertCode: schtasks /change /TN "Microsoft\Windows\Device Information\Device" /ENABLE + - + name: Disable Application Experience (Compatibility Telemetry) + recommend: true + code: |- + schtasks /change /TN "Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser" /DISABLE + schtasks /change /TN "Microsoft\Windows\Application Experience\ProgramDataUpdater" /DISABLE + schtasks /change /TN "Microsoft\Windows\Application Experience\StartupAppTask" /DISABLE + schtasks /change /TN "Microsoft\Windows\Application Experience\AitAgent" /DISABLE + reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\CompatTelRunner.exe" /v Debugger /t REG_SZ /d "%windir%\System32\taskkill.exe" /f + revertCode: |- + schtasks /change /TN "Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser" /ENABLE + schtasks /change /TN "Microsoft\Windows\Application Experience\ProgramDataUpdater" /ENABLE + schtasks /change /TN "Microsoft\Windows\Application Experience\StartupAppTask" /ENABLE + schtasks /change /TN "Microsoft\Windows\Application Experience\AitAgent" /ENABLE - name: Disable telemetry in data collection policy recommend: true @@ -389,6 +409,12 @@ actions: revertCode: |- reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Device Metadata" /v "PreventDeviceMetadataFromNetwork" /t REG_DWORD /d 0 /f reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Device Metadata" /v "PreventDeviceMetadataFromNetwork" /t REG_DWORD /d 0 /f + - + name: Disable cloud speech recognation + recommend: true + docs: https://www.tenforums.com/tutorials/101902-turn-off-online-speech-recognition-windows-10-a.html + code: reg add "HKCU\Software\Microsoft\Speech_OneCore\Settings\OnlineSpeechPrivacy" /v "HasAccepted" /t "REG_DWORD" /d 0 /f + revertCode: reg add "HKCU\Software\Microsoft\Speech_OneCore\Settings\OnlineSpeechPrivacy" /v "HasAccepted" /t "REG_DWORD" /d 1 /f - name: Disable active prompting (pings to MSFT NCSI server) recommend: false