From afc3bfb3b8896f332c9a196973ded3dce8fd21e4 Mon Sep 17 00:00:00 2001 From: undergroundwires Date: Tue, 11 Aug 2020 17:49:55 +0100 Subject: [PATCH] =?UTF-8?q?=E2=9A=99=EF=B8=8F=20enhanced=20tweak=20to=20di?= =?UTF-8?q?sable=20for=20office=20telemetry?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- src/application/application.yaml | 110 +++++++++++++++++++++++++------ 1 file changed, 90 insertions(+), 20 deletions(-) diff --git a/src/application/application.yaml b/src/application/application.yaml index 9945f586..e704a022 100644 --- a/src/application/application.yaml +++ b/src/application/application.yaml @@ -929,27 +929,97 @@ actions: del %appdata%\Code\User\settings.json echo { "telemetry.enableCrashReporter": false, "telemetry.enableTelemetry": false } > %appdata%\Code\User\settings.json - - name: Disable Microsoft Office telemetry - recommend: true + category: Disable Microsoft Office telemetry docs: https://docs.microsoft.com/en-us/deployoffice/compat/manage-the-privacy-of-data-monitored-by-telemetry-in-office - code: |- - reg add "HKCU\SOFTWARE\Policies\Microsoft\Office\15.0\osm" /v "Enablelogging" /t REG_DWORD /d 0 /f - reg add "HKCU\SOFTWARE\Policies\Microsoft\Office\15.0\osm" /v "EnableUpload" /t REG_DWORD /d 0 /f - reg add "HKCU\SOFTWARE\Policies\Microsoft\Office\16.0\osm" /v "Enablelogging" /t REG_DWORD /d 0 /f - reg add "HKCU\SOFTWARE\Policies\Microsoft\Office\16.0\osm" /v "EnableUpload" /t REG_DWORD /d 0 /f - schtasks /change /TN "Microsoft\Office\Office ClickToRun Service Monitor" /DISABLE - schtasks /change /TN "Microsoft\Office\OfficeTelemetryAgentFallBack2016" /DISABLE - schtasks /change /TN "Microsoft\Office\OfficeTelemetryAgentLogOn2016" /DISABLE - sc stop "ClickToRunSvc" & sc config "ClickToRunSvc" start=disabled - revertCode: |- - reg add "HKCU\SOFTWARE\Policies\Microsoft\Office\15.0\osm" /v "Enablelogging" /t REG_DWORD /d 1 /f - reg add "HKCU\SOFTWARE\Policies\Microsoft\Office\15.0\osm" /v "EnableUpload" /t REG_DWORD /d 1 /f - reg add "HKCU\SOFTWARE\Policies\Microsoft\Office\16.0\osm" /v "Enablelogging" /t REG_DWORD /d 1 /f - reg add "HKCU\SOFTWARE\Policies\Microsoft\Office\16.0\osm" /v "EnableUpload" /t REG_DWORD /d 1 /f - schtasks /change /TN "Microsoft\Office\Office ClickToRun Service Monitor" /ENABLE - schtasks /change /TN "Microsoft\Office\OfficeTelemetryAgentFallBack2016" /ENABLE - schtasks /change /TN "Microsoft\Office\OfficeTelemetryAgentLogOn2016" /ENABLE - sc config "ClickToRunSvc" start=auto + children: + - + name: Disable logging + recommend: true + code: |- + reg add "HKCU\SOFTWARE\Microsoft\Office\15.0\Outlook\Options\Mail" /v "EnableLogging" /t REG_DWORD /d 0 /f + reg add "HKCU\SOFTWARE\Microsoft\Office\16.0\Outlook\Options\Mail" /v "EnableLogging" /t REG_DWORD /d 0 /f + reg add "HKCU\SOFTWARE\Microsoft\Office\15.0\Outlook\Options\Calendar" /v "EnableCalendarLogging" /t REG_DWORD /d 0 /f + reg add "HKCU\SOFTWARE\Microsoft\Office\16.0\Outlook\Options\Calendar" /v "EnableCalendarLogging" /t REG_DWORD /d 0 /f + reg add "HKCU\SOFTWARE\Microsoft\Office\15.0\Word\Options" /v "EnableLogging" /t REG_DWORD /d 0 /f + reg add "HKCU\SOFTWARE\Microsoft\Office\16.0\Word\Options" /v "EnableLogging" /t REG_DWORD /d 0 /f + reg add "HKCU\SOFTWARE\Policies\Microsoft\Office\15.0\OSM" /v "EnableLogging" /t REG_DWORD /d 0 /f + reg add "HKCU\SOFTWARE\Policies\Microsoft\Office\16.0\OSM" /v "EnableLogging" /t REG_DWORD /d 0 /f + reg add "HKCU\SOFTWARE\Policies\Microsoft\Office\15.0\OSM" /v "EnableUpload" /t REG_DWORD /d 0 /f + reg add "HKCU\SOFTWARE\Policies\Microsoft\Office\16.0\OSM" /v "EnableUpload" /t REG_DWORD /d 0 /f + revertCode: |- + reg add "HKCU\SOFTWARE\Microsoft\Office\15.0\Outlook\Options\Mail" /v "EnableLogging" /t REG_DWORD /d 1 /f + reg add "HKCU\SOFTWARE\Microsoft\Office\16.0\Outlook\Options\Mail" /v "EnableLogging" /t REG_DWORD /d 1 /f + reg add "HKCU\SOFTWARE\Microsoft\Office\15.0\Word\Options" /v "EnableLogging" /t REG_DWORD /d 1 /f + reg add "HKCU\SOFTWARE\Microsoft\Office\16.0\Word\Options" /v "EnableLogging" /t REG_DWORD /d 1 /f + reg add "HKCU\SOFTWARE\Microsoft\Office\15.0\Outlook\Options\Calendar" /v "EnableCalendarLogging" /t REG_DWORD /d 1 /f + reg add "HKCU\SOFTWARE\Microsoft\Office\16.0\Outlook\Options\Calendar" /v "EnableCalendarLogging" /t REG_DWORD /d 1 /f + reg add "HKCU\SOFTWARE\Policies\Microsoft\Office\15.0\OSM" /v "EnableLogging" /t REG_DWORD /d 1 /f + reg add "HKCU\SOFTWARE\Policies\Microsoft\Office\16.0\OSM" /v "EnableLogging" /t REG_DWORD /d 1 /f + reg add "HKCU\SOFTWARE\Policies\Microsoft\Office\15.0\OSM" /v "EnableUpload" /t REG_DWORD /d 1 /f + reg add "HKCU\SOFTWARE\Policies\Microsoft\Office\16.0\OSM" /v "EnableUpload" /t REG_DWORD /d 1 /f + - + name: Disable client telemetry + recommend: true + code: |- + reg add "HKCU\SOFTWARE\Microsoft\Office\Common\ClientTelemetry" /v "DisableTelemetry" /t REG_DWORD /d 1 /f + reg add "HKCU\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry" /v "DisableTelemetry" /t REG_DWORD /d 1 /f + reg add "HKCU\SOFTWARE\Microsoft\Office\Common\ClientTelemetry" /v "VerboseLogging" /t REG_DWORD /d 0 /f + reg add "HKCU\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry" /v "VerboseLogging" /t REG_DWORD /d 0 /f + revertCode: |- + reg add "HKCU\SOFTWARE\Microsoft\Office\Common\ClientTelemetry" /v "DisableTelemetry" /t REG_DWORD /d 0 /f + reg add "HKCU\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry" /v "DisableTelemetry" /t REG_DWORD /d 0 /f + reg add "HKCU\SOFTWARE\Microsoft\Office\Common\ClientTelemetry" /v "VerboseLogging" /t REG_DWORD /d 1 /f + reg add "HKCU\SOFTWARE\Microsoft\Office\16.0\Common\ClientTelemetry" /v "VerboseLogging" /t REG_DWORD /d 1 /f + - + name: Customer Experience Improvement Program + docs: https://www.stigviewer.com/stig/microsoft_office_system_2013/2014-12-23/finding/V-17612 + recommend: true + code: |- + reg add "HKCU\SOFTWARE\Microsoft\Office\15.0\Common" /v "QMEnable" /t REG_DWORD /d 0 /f + reg add "HKCU\SOFTWARE\Microsoft\Office\16.0\Common" /v "QMEnable" /t REG_DWORD /d 0 /f + revertCode: |- + reg add "HKCU\SOFTWARE\Microsoft\Office\15.0\Common" /v "QMEnable" /t REG_DWORD /d 1 /f + reg add "HKCU\SOFTWARE\Microsoft\Office\16.0\Common" /v "QMEnable" /t REG_DWORD /d 1 /f + - + name: Disable feedback + recommend: true + code: |- + reg add "HKCU\SOFTWARE\Microsoft\Office\15.0\Common\Feedback" /v "Enabled" /t REG_DWORD /d 0 /f + reg add "HKCU\SOFTWARE\Microsoft\Office\16.0\Common\Feedback" /v "Enabled" /t REG_DWORD /d 0 /f + revertCode: |- + reg add "HKCU\SOFTWARE\Microsoft\Office\15.0\Common\Feedback" /v "Enabled" /t REG_DWORD /d 1 /f + reg add "HKCU\SOFTWARE\Microsoft\Office\16.0\Common\Feedback" /v "Enabled" /t REG_DWORD /d 1 /f + - + name: Disable telemetry agent + recommend: true + code: |- + schtasks /change /TN "Microsoft\Office\OfficeTelemetryAgentFallBack" /DISABLE + schtasks /change /TN "Microsoft\Office\OfficeTelemetryAgentFallBack2016" /DISABLE + schtasks /change /TN "Microsoft\Office\OfficeTelemetryAgentLogOn" /DISABLE + schtasks /change /TN "Microsoft\Office\OfficeTelemetryAgentLogOn2016" /DISABLE + revertCode: |- + schtasks /change /TN "Microsoft\Office\OfficeTelemetryAgentFallBack" /ENABLE + schtasks /change /TN "Microsoft\Office\OfficeTelemetryAgentFallBack2016" /ENABLE + schtasks /change /TN "Microsoft\Office\OfficeTelemetryAgentLogOn" /ENABLE + schtasks /change /TN "Microsoft\Office\OfficeTelemetryAgentLogOn2016" /ENABLE + - + name: Disable ClickToRun Service Monitor + recommend: true + code: |- + schtasks /change /TN "Microsoft\Office\Office ClickToRun Service Monitor" /DISABLE + sc stop "ClickToRunSvc" & sc config "ClickToRunSvc" start=disabled + revertCode: |- + schtasks /change /TN "Microsoft\Office\Office ClickToRun Service Monitor" /ENABLE + sc config "ClickToRunSvc" start=auto + - + name: Disable Subscription Heartbeat + recommend: false + code: |- + schtasks /change /TN "Microsoft\Office\Office 15 Subscription Heartbeat" /DISABLE + schtasks /change /TN "Microsoft\Office\Office 16 Subscription Heartbeat" /DISABLE + revertCode: |- + schtasks /change /TN "Microsoft\Office\Office 15 Subscription Heartbeat" /ENABLE + schtasks /change /TN "Microsoft\Office\Office 16 Subscription Heartbeat" /ENABLE - category: Configure browsers children: