Avoid Windows data collection services.

Big_Brother_is_Watching_Wide

One of the biggest issues and concerns that people have with Windows 10 is the fact that it dials back to HQ(Microsoft) and provides usage statistics. The quickest route to avoid this is to install Linux on your machine, something like Linux Mint is what I would recommend. Alternatively there are many documented ways to disable this “feature” in Windows 10, I have done it at home, but since moved back to windows 8.1 with classic shell. Soon I’m moving to Linux, I’m just waiting for Steam OS to be released.
Gaming is the only thing holding me back.
One thing you might not be aware of is that Windows 7 and 8+, are implementing the same Telemetry systems as Windows 10.
Umm, no thanks.
These systems will install on your computer via Windows update.
As such here is a list of the updates you should avoid in order to omit anonymous data collection by your operating system and have it sent back to Microshaft (Microsoft).

(KB2952664) — This update helps Microsoft make improvements to the current operating system in order to ease the upgrade experience to the latest version of Windows. This Update seems to seriously corrupt systems.
(KB2976978) — This update helps Microsoft make improvements to the current operating system in order to ease the upgrade experience to the latest version of Windows.
(KB2990214) — This update helps Microsoft make improvements to the current operating system in order to ease the upgrade experience to the latest version of Windows.
(KB3068708) — This kind of update helps the overall application experience on Windows, by improving the current operating system for upgrade to the latest version of Windows.
(KB3035583) —  will pitch the free Windows 10 upgrade to customers.  which does not seem to cause a problem other than it readies my computer for Microsoft to start sending “reminders” to upgrade (Malware by most definitions).
(KB3022345) — which corrupts system files, as can be seen if your run SFC following this update. 
(KB2977759) — This update will help Microsoft and its partners ensure compatibility for customers who are seeking to install the latest Windows operating system.
(KB2922324) — Looks like this one has been pulled.
(KB3021917) — This update will help Microsoft and its partners deliver better system performance for customers who are seeking to install the latest Windows operating system.
(KB3050265) — General improvements are made to support upgrades to a later version of Windows.
(KB3068708) — This update introduces the Diagnostics and Telemetry tracking service to in-market devices. By applying this service, you can add benefits from the latest version of Windows to systems that have not yet upgraded.

The Malicious update KB’s need to be ripped out by the roots!!
(KB3014460) Effects Win8.x

Source.

Update:

Here is a quick little script to help you remove all and any of the updates you have installed. Paste this into a txt file and then rename it with a .bat extension. Run the batch file with admin rights.

:: KB killer
@echo off
wusa /uninstall /kb:2952664 /quiet /norestart
wusa /uninstall /kb:2976978 /quiet /norestart
wusa /uninstall /kb:2990214 /quiet /norestart
wusa /uninstall /kb:3068708 /quiet /norestart
wusa /uninstall /kb:3035583 /quiet /norestart
wusa /uninstall /kb:3022345 /quiet /norestart
wusa /uninstall /kb:2977759 /quiet /norestart
wusa /uninstall /kb:2922324 /quiet /norestart
wusa /uninstall /kb:3021917 /quiet /norestart
wusa /uninstall /kb:3050265 /quiet /norestart
wusa /uninstall /kb:3068708 /quiet /norestart
END

 

Add and remove the KBs as desired. Please note that not all the KBs described in the article are in the script. Specifically the Windows 8 one.

Here is another script that I found on hakspek.com, paste it into a .txt file and then change the extension to .bat. Then run the batch file as an administrator.

@echo off
echo

echo Step 1: Delete Updates…
echo Delete KB3075249 (telemetry for Win7/8.1)
start /w wusa.exe /uninstall /kb:3075249
echo Delete KB3080149 (telemetry for Win7/8.1)
start /w wusa.exe /uninstall /kb:3080149
echo Delete KB3021917 (telemetry for Win7)
start /w wusa.exe /uninstall /kb:3021917
echo Delete KB3022345 (telemetry)
start /w wusa.exe /uninstall /kb:3022345
echo Delete KB3068708 (telemetry)
start /w wusa.exe /uninstall /kb:3068708
echo Delete KB3044374 (Get Windows 10 for Win8.1)
start /w wusa.exe /uninstall /kb:3044374
echo Delete KB3035583 (Get Windows 10 for Win7sp1/8.1)
start /w wusa.exe /uninstall /kb:3035583
echo Delete KB2990214 (Get Windows 10 for Win7 without sp1)
start /w wusa.exe /uninstall /kb:2990214
echo Delete KB2990214 (Get Windows 10 for Win7)
start /w wusa.exe /uninstall /kb:2990214
echo Delete KB2952664 (Get Windows 10 assistant)
start /w wusa.exe /uninstall /kb:2952664
echo Delete KB3075853 (update for “Windows Update” on Win8.1/Server 2012R2)
start /w wusa.exe /uninstall /kb:3075853
echo Delete KB3065987 (update for “Windows Update” on Win7/Server 2008R2)
start /w wusa.exe /uninstall /kb:3065987
echo Delete KB3050265 (update for “Windows Update” on Win7)
start /w wusa.exe /uninstall /kb:3050265
echo Delete KB971033 (license validation)
start /w wusa.exe /uninstall /kb:971033
echo Delete KB2902907 (description not available)
start /w wusa.exe /uninstall /kb:2902907
echo Delete KB2976987 (description not available)
start /w wusa.exe /uninstall /kb:2976987

echo Step 2: Blocking Routes…
route -p add 23.218.212.69 MASK 255.255.255.255 0.0.0.0
route -p add 65.55.108.23 MASK 255.255.255.255 0.0.0.0
route -p add 65.39.117.230 MASK 255.255.255.255 0.0.0.0
route -p add 134.170.30.202 MASK 255.255.255.255 0.0.0.0
route -p add 137.116.81.24 MASK 255.255.255.255 0.0.0.0
route -p add 204.79.197.200 MASK 255.255.255.255 0.0.0.0
route -p add 23.218.212.69 MASK 255.255.255.255 0.0.0.0

echo Step 3: Disabling tasks…
schtasks /Change /TN “\Microsoft\Windows\Application Experience\AitAgent” /DISABLE
schtasks /Change /TN “\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser” /DISABLE
schtasks /Change /TN “\Microsoft\Windows\Application Experience\ProgramDataUpdater” /DISABLE
schtasks /Change /TN “\Microsoft\Windows\Autochk\Proxy” /DISABLE
schtasks /Change /TN “Microsoft\Windows\Customer Experience Improvement Program\Consolidator” /DISABLE
schtasks /Change /TN “Microsoft\Windows\Customer Experience Improvement Program\KernelCeipTask” /DISABLE
schtasks /Change /TN “Microsoft\Windows\Customer Experience Improvement Program\UsbCeip” /DISABLE
schtasks /Change /TN “\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector” /DISABLE
schtasks /Change /TN “\Microsoft\Windows\Maintenance\WinSAT” /DISABLE
schtasks /Change /TN “\Microsoft\Windows\Media Center\ActivateWindowsSearch” /DISABLE
schtasks /Change /TN “\Microsoft\Windows\Media Center\ConfigureInternetTimeService” /DISABLE
schtasks /Change /TN “\Microsoft\Windows\Media Center\DispatchRecoveryTasks” /DISABLE
schtasks /Change /TN “\Microsoft\Windows\Media Center\ehDRMInit” /DISABLE
schtasks /Change /TN “\Microsoft\Windows\Media Center\InstallPlayReady” /DISABLE
schtasks /Change /TN “\Microsoft\Windows\Media Center\mcupdate” /DISABLE
schtasks /Change /TN “\Microsoft\Windows\Media Center\MediaCenterRecoveryTask” /DISABLE
schtasks /Change /TN “\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask” /DISABLE
schtasks /Change /TN “\Microsoft\Windows\Media Center\OCURActivate” /DISABLE
schtasks /Change /TN “\Microsoft\Windows\Media Center\OCURDiscovery” /DISABLE
schtasks /Change /TN “\Microsoft\Windows\Media Center\PBDADiscovery” /DISABLE
schtasks /Change /TN “\Microsoft\Windows\Media Center\PBDADiscoveryW1” /DISABLE
schtasks /Change /TN “\Microsoft\Windows\Media Center\PBDADiscoveryW2” /DISABLE
schtasks /Change /TN “\Microsoft\Windows\Media Center\PvrRecoveryTask” /DISABLE
schtasks /Change /TN “\Microsoft\Windows\Media Center\PvrScheduleTask” /DISABLE
schtasks /Change /TN “\Microsoft\Windows\Media Center\RegisterSearch” /DISABLE
schtasks /Change /TN “\Microsoft\Windows\Media Center\ReindexSearchRoot” /DISABLE
schtasks /Change /TN “\Microsoft\Windows\Media Center\SqlLiteRecoveryTask” /DISABLE
schtasks /Change /TN “\Microsoft\Windows\Media Center\UpdateRecordPath” /DISABLE

echo Step 4: Killing Diagtrack-service (if it still exists)…
sc stop Diagtrack
sc delete Diagtrack

echo Final Step: Stop remoteregistry-service (if it still exists)…
sc config remoteregistry start= disabled
sc stop remoteregistry

echo Done — Reboot!
shutdown -r

Advertisements

Windows 10 Remote Server Administration Tools finally available.

Despite Windows 10 being more like Windows 8 than Windows 7 and a security nightmare, you might be using it at work and there is also a chance you might want to administer your Active Directory. I prefer this method it is easier to work with than having to RDP to the Domain Controller. Microshaft finally decided to release the RSAT tool kit for Windows 10, and you can grab it here: https://www.microsoft.com/en-us/download/details.aspx?id=45520

Install it on your machine and give it a reboot. Once you reboot your computer head over to Control Panel > Programs and Features > Turn Windows features on or off.

Under Remote Server Administration Tools and Role Administration Tools select the features you might want.adds

Note that the Group Policy Administration Tools feature sits under Remote Server Administration Tools > Feature Administration Tools.GPO

There you go, finally you can manage your domain from the comfort of your desktop. Also to note that these features were all installed by default when I installed Windows 10 RSAT, this might be due to the fact that I upgraded from Windows 7 and it had RSAT installed but when I upgraded Windows 10 did not have an equivalent feature set. I’m thinking there might have been a setting left over from the previous OS version, that’s all. If not be sure to chime in.

All these features can be accessed from the Administrative Tools section in the Control Panel.AdminTools

Noe you have to find a way to enjoy the shitty OS.