[Guide] Way to Disable Windows 10 Build-In Keylogger


As many of you know Windows 10 is logging every single step you take while testing it, because i love my privacy and many of you do same here is how to disable it.

Before/During Installation

  • Do not use Express Settings. Hit Customize, and make sure everything is turned off.
  • It’s strongly recommended that you use a local account with Windows 10.

After Installation

  • Head to Settings > Privacy, and disable everything, unless there are some things you really need.
  • While within the Privacy page, go to Feedback, select Never in the first box, and Basic in the second box.
  • Head to Settings > Update and Security > Advanced Options > Choose how updates are delivered, and turn the first switch off.
  • Disable Cortana by clicking the Search bar/icon.
  • (Optional) Disable web search in Search by going to Settings, and turning off Search online and include web results.

Slightly Complex

  • Open up the Command Prompt by launching cmd as an administrator, and enter the following:
sc delete DiagTrack
sc delete dmwappushservice
echo “” > C:\ProgramData\Microsoft\Diagnosis\ETLLogs\AutoLogger\AutoLogger-Diagtrack-Listener.etl
  • Open up the Group Policy Editor by launching gpedit.msc as an administrator. Go through Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds. Double click Telemetry, hit Disabled, then apply. NOTE: This only truly works in the Enterprise edition, but the final step provides a decent enough workaround for Pro users.
  • While still in the Group Policy Editor, go through Computer Configuration > Administrative Templates > Windows Components > OneDrive, double click Prevent the usage of OneDrive for file storage, hit Enabled, then apply.
  • Open up the Registry Editor by launching regedit as an administrator. Go through HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\DataCollection, select AllowTelemetry, change its value to 0, then apply.
  • First, download the Take Ownership tweak and enable it. Then, head to the Hosts File by going through C:\Windows\System32\Drivers\Etc, take ownership of the hosts file, and add the following IPs into it.
127.0.0.1 vortex.data.microsoft.com
127.0.0.1 vortex-win.data.microsoft.com
127.0.0.1 telecommand.telemetry.microsoft.com
127.0.0.1 telecommand.telemetry.microsoft.com.nsatc.net
127.0.0.1 oca.telemetry.microsoft.com
127.0.0.1 oca.telemetry.microsoft.com.nsatc.net
127.0.0.1 sqm.telemetry.microsoft.com
127.0.0.1 sqm.telemetry.microsoft.com.nsatc.net
127.0.0.1 watson.telemetry.microsoft.com
127.0.0.1 watson.telemetry.microsoft.com.nsatc.net
127.0.0.1 redir.metaservices.microsoft.com
127.0.0.1 choice.microsoft.com
127.0.0.1 choice.microsoft.com.nsatc.net
127.0.0.1 df.telemetry.microsoft.com
127.0.0.1 reports.wes.df.telemetry.microsoft.com
127.0.0.1 services.wes.df.telemetry.microsoft.com
127.0.0.1 sqm.df.telemetry.microsoft.com
127.0.0.1 telemetry.microsoft.com
127.0.0.1 watson.ppe.telemetry.microsoft.com
127.0.0.1 telemetry.appex.bing.net
127.0.0.1 telemetry.urs.microsoft.com
127.0.0.1 telemetry.appex.bing.net:443
127.0.0.1 settings-sandbox.data.microsoft.com
127.0.0.1 vortex-sandbox.data.microsoft.com

EXTRA: Don’t want to see any spaying/annoying advertisement’s ever in the app store and apps? You can add this list to your host file (same action as above)!

Up To You

Thats all Folks!

I’ve run a test for day all good, but its running under the hood / kernel its very hard to ensure

I have had no system crash or hiccups from this.

Got question or found something to edit?! Contact me via Twitter.

UPDATED: 30/1/2015

Advertisements

7 thoughts on “[Guide] Way to Disable Windows 10 Build-In Keylogger

  1. Why the hell would anyone disable those things in Technical Preview that was meant for testing and getting feedback?

    Don’t want keylogger? Don’t use Technical Preview.

  2. Hello, I’m using Windows 8.1 and this service was installed with the last batch of Windows Updates I installed on Sunday, April 26th 2015. I did not give any consent for this program to run.

  3. I’ve tested it and it’s ALSO present in the final 29th July RTM version. Incredible.
    Microsoft just went CRAZY. I’m uninstalling W10 now, this is UNTOLERABLE !

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s