Windows 10 Privacy Fixes Script

Windows-10-logo-679x170

Windows 10 has hit and it is a fast stable operating system. however MS has given us some features that we should be disabling immediately. For example windows updates delivery optimization uses your computer to send windows updates to other folks on the internet. You can disable it by knowing where to go to disable the radio buttons etc. However I receive calls from people on how to address this and it is much easier for me to script it and send the file to them and correct all their issues with a simple double click of the mouse.

Update: added VB script version

what issues does this script address

  • windows update optimization
  • sync info to cloud account
  • data collection by MS
  • Ad personalization by MS
  • windows error reporting

Now that you know what you are looking to correct here is how you can get things set. Just copy and paste the following into a txt file and save it with a .bat or .cmd extension and double click it. the settings will be changed without you having to hunt through all the hidden menus. Or you can just download it already to go from here. windows10scripts

@echo off

REM disable using your machine for sending windows updates to others

reg add “HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\DeliveryOptimization\Config” /v DownloadMode /t REG_DWORD /d 0 /f

REM disable sending settings to cloud

reg add “HKLM\SOFTWARE\Policies\Microsoft\Windows\SettingSync” /v DisableSettingSync /t REG_DWORD /d 2 /f

REM disable synchronizing files to cloud

reg add “HKLM\SOFTWARE\Policies\Microsoft\Windows\SettingSync” /v DisableSettingSyncUserOverride /t REG_DWORD /d 1 /f

REM disable ad customization

reg add “HKLM\SOFTWARE\Policies\Microsoft\Windows\AdvertisingInfo” /v DisabledByGroupPolicy /t REG_DWORD /d 1 /f

REM disable data collection and sending to MS

reg add “HKLM\SOFTWARE\Policies\Microsoft\Windows\DataCollection” /v AllowTelemetry /t REG_DWORD /d 0 /f

REM disable sending files to encrypted drives

reg add “HKLM\SOFTWARE\Policies\Microsoft\Windows\EnhancedStorageDevices” /v TCGSecurityActivationDisabled /t REG_DWORD /d 0 /f

REM disable sync files to one drive

reg add “HKLM\SOFTWARE\Policies\Microsoft\Windows\OneDrive” /v DisableFileSyncNGSC /t REG_DWORD /d 1 /f

REM disable certificate revocation check

reg add “HKLM\SOFTWARE\Policies\Microsoft\Windows\safer\codeidentifiers” /v authenticodeenabled /t REG_DWORD /d 0 /f

REM disable send additional info with error reports

reg add “HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting” /v DontSendAdditionalData /t REG_DWORD /d 1 /f

REM disable cortana in windows search

reg add “HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search” /v AllowCortana /t REG_DWORD /d 0 /f

REM disable web search in search bar

reg add “HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search” /v DisableWebSearch /t REG_DWORD /d 1 /f

REM disable search web when searching pc

reg add “HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search” /v ConnectedSearchUseWeb /t REG_DWORD /d 0 /f

REM disable search indexing

reg add “HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search” /v AllowIndexingEncryptedStoresOrItems /t REG_DWORD /d 0 /f

REM disable location based info in searches

reg add “HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search” /v AllowSearchToUseLocation /t REG_DWORD /d 0 /f

REM disable language detection

reg add “HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search” /v AlwaysUseAutoLangDetection /t REG_DWORD /d 0 /f

 

For those of you who prefer to work with VB scripting You can use the following code.

 

Set WSHShell = CreateObject(“Wscript.Shell”)
On Error Resume Next
#
#This script will remove and create new registry entries on your windows 10 PC it is intended only for windows 10
#Ths script is provided for informational use only please use at your own risk
#Len McGeary http://www.mcgearytech.com
#these commands delete all currently created keys for settings we want to change we do this so we can re create the keys as we want them cleanly
#
#delete key disable using your machine for sending windows updates to others
WSHShell.RegDelete “HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\DeliveryOptimization\Config\DownloadMode”
#delete disable sending settings to cloud
WSHShell.RegDelete “HKLM\SOFTWARE\Policies\Microsoft\Windows\SettingSync\DisableSettingSync”
#delete disable syncronizing files to cloud
WSHShell.RegDelete “HKLM\SOFTWARE\Policies\Microsoft\Windows\SettingSync\DisableSettingSyncUserOverride”
#delete disable ad customization
WSHShell.RegDelete “HKLM\SOFTWARE\Policies\Microsoft\Windows\AdvertisingInfo\DisabledByGroupPolicy”
#delete disable data collection and sending to MS
WSHShell.RegDelete “HKLM\SOFTWARE\Policies\Microsoft\Windows\DataCollection\AllowTelemetry”
#delete disable sending files to encrypted drives
WSHShell.RegDelete “HKLM\SOFTWARE\Policies\Microsoft\Windows\EnhancedStorageDevices\TCGSecurityActivationDisabled”
#delete disable sync files to one drive
WSHShell.RegDelete “HKLM\SOFTWARE\Policies\Microsoft\Windows\OneDrive\DisableFileSyncNGSC”
#delete disable certificate revocation check
WSHShell.RegDelete “HKLM\SOFTWARE\Policies\Microsoft\Windows\safer\codeidentifiers\authenticodeenabled”
#delete disable send additional info with error reports
WSHShell.RegDelete “HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting\DontSendAdditionalData”
#delete disable cortana in windows search
WSHShell.RegDelete “HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search\AllowCortana”
#delete disable web search in search bar
WSHShell.RegDelete “HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search\DisableWebSearch”
#delete disable seach web when searching pc
WSHShell.RegDelete “HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search\ConnectedSearchUseWeb”
#delete disable search indexing
WSHShell.RegDelete “HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search\AllowIndexingEncryptedStoresOrItems”
#delete disable location based info in searches
WSHShell.RegDelete “HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search\AllowSearchToUseLocation”
#delete disable language detection
WSHShell.RegDelete “HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search\AlwaysUseAutoLangDetection”
#
#
#Now We will write our new registry entries
#
#
#write disable using your machine for sending windows updates to others
WSHShell.RegWrite “HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\DeliveryOptimization\Config\DownloadMode”, 0,”REG_DWORD”
#write disable sending settings to cloud
WSHShell.RegWrite “HKLM\SOFTWARE\Policies\Microsoft\Windows\SettingSync\DisableSettingSync”, 2,”REG_DWORD”
#write disable syncronizing files to cloud
WSHShell.RegWrite “HKLM\SOFTWARE\Policies\Microsoft\Windows\SettingSync\DisableSettingSyncUserOverride”, 1,”REG_DWORD”
#write disable ad customization
WSHShell.RegWrite “HKLM\SOFTWARE\Policies\Microsoft\Windows\AdvertisingInfo\DisabledByGroupPolicy”, 1,”REG_DWORD”
#write disable data collection and sending to MS
WSHShell.RegWrite “HKLM\SOFTWARE\Policies\Microsoft\Windows\DataCollection”, 0,”REG_DWORD”
#write disable sending files to encrypted drives
WSHShell.RegWrite “HKLM\SOFTWARE\Policies\Microsoft\Windows\EnhancedStorageDevices\TCGSecurityActivationDisabled”, 0,”REG_DWORD”
#write disable sync files to one drive
WSHShell.RegWrite “HKLM\SOFTWARE\Policies\Microsoft\Windows\OneDrive\DisableFileSyncNGSC”, 1,”REG_DWORD”
#write disable certificate revocation check
WSHShell.RegWrite “HKLM\SOFTWARE\Policies\Microsoft\Windows\safer\codeidentifiers\authenticodeenabled”, 0,”REG_DWORD”
#write disable send additional info with error reports
WSHShell.RegWrite “HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting\DontSendAdditionalData”, 1,”REG_DWORD”
#write disable cortana in windows search
WSHShell.RegWrite “HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search\AllowCortana”, 0,”REG_DWORD”
#write disable web search in search bar
WSHShell.RegWrite “HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search\DisableWebSearch”, 1,”REG_DWORD”
#write disable seach web when searching pc
WSHShell.RegWrite “HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search\ConnectedSearchUseWeb”, 0,”REG_DWORD”
#write disable search indexing
WSHShell.RegWrite “HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search\AllowIndexingEncryptedStoresOrItems”, 0,”REG_DWORD”
#write disable location based info in searches
WSHShell.RegWrite “HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search\AllowSearchToUseLocation”, 0,”REG_DWORD”
#write disable language detection
WSHShell.RegWrite “HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search\AlwaysUseAutoLangDetection”, 0,”REG_DWORD”
#
#Thats it you are all done
#
Set WSHShell = Nothing