atorralb · August 3, 2015 13:43
diff --git a/windows 10 privacy full b/windows 10 privacy full
 All the options are "easily" deactivated, even to a layman it will take much less than an hour to complete this guide, to someone even vaguely familiar with windows and common tweaks, this will take 10 to 15 minutes.
 As u/aDeadSoul pointed out, some of these fixes are overkill, if you are not sure what to do only stick to the "before installation" and "after installation" parts. DON'T start mucking about with the powershell or the registry editor if you don't have at least a good idea of what you are doing. Also DON'T disable windows updates if you are not 100% sure that is what you want to do, there are probably quite a bit of security flaws that will be fixed in later updates, disabling updates leaves you vulnerable to yet undiscovered security holes.
 ----Before/During Installation----
 Do not use Express Settings. Hit Customize, and make sure everything is turned off. It's strongly preferred that you use a local account with Windows 10.
 ----After Installation----
 Head to Settings > Privacy, and disable everything, unless there are some things you really need.
 While within the Privacy page, go to Feedback, select Never in the first box, and Basic in the second box.
 Head to Settings > Update and Security > Advanced Options > Choose how updates are delivered, and turn the first switch off.
 Disable Cortana by right clicking the Search bar/icon.
 (Optional) Disable web search in Search by going to Settings, and turning off Search online and include web results.
 ----Slightly Complex----
 Open up the Command Prompt by launching cmd as an administrator (hit windows key or click start menu button, type "cmd" then right click on the command prompt icon at the top of the list and select "run as administrator"), and enter the following:
 sc delete DiagTrack
 sc delete dmwappushservice
 echo "" > C:\ProgramData\Microsoft\Diagnosis ETLLogsAutoLogger\AutoLogger-Diagtrack-Listener.etl
 Open up the Group Policy Editor by launching gpedit.msc as an administrator (same method as cmd).
 Go through Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds. Double click Telemetry, hit Disabled, then apply.
 NOTE: This only truly works in the Enterprise edition, but the final step provides a decent enough workaround for Pro users.
 While still in the Group Policy Editor, go through Computer Configuration > Administrative Templates > Windows Components > OneDrive, double click Prevent the usage of OneDrive for file storage, hit Enabled, then apply.
 Open up the Registry Editor by launching regedit as an administrator (yet again same method as cmd).
 Go through HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\DataCollection, select AllowTelemetry, change its value to 0, then apply.
 !WARNING! editing hosts file may cause problems with steam overlay !WARNING!
 First, download the Take Ownership tweak[http://www.howtogeek.com/howto/windows-vista/add-take-ownership-to-explorer-right-click-menu-in-vista/] and enable it.
 Then, head to the Hosts File by going through C:\Windows\System32\Drivers\Etc, take ownership of the hosts file, and add the following IPs into it (using notepad or whatever equivalent you prefer).
 127.0.0.1 vortex.data.microsoft.com
 127.0.0.1 vortex-win.data.microsoft.com
 127.0.0.1 telecommand.telemetry.microsoft.com
 127.0.0.1 telecommand.telemetry.microsoft.com.nsatc.net
 127.0.0.1 oca.telemetry.microsoft.com
 127.0.0.1 oca.telemetry.microsoft.com.nsatc.net
 127.0.0.1 sqm.telemetry.microsoft.com
 127.0.0.1 sqm.telemetry.microsoft.com.nsatc.net
 127.0.0.1 watson.telemetry.microsoft.com
 127.0.0.1 watson.telemetry.microsoft.com.nsatc.net
 127.0.0.1 redir.metaservices.microsoft.com
 127.0.0.1 choice.microsoft.com
 127.0.0.1 choice.microsoft.com.nsatc.net
 127.0.0.1 df.telemetry.microsoft.com
 127.0.0.1 reports.wes.df.telemetry.microsoft.com
 127.0.0.1 services.wes.df.telemetry.microsoft.com
 127.0.0.1 sqm.df.telemetry.microsoft.com
 127.0.0.1 telemetry.microsoft.com
 127.0.0.1 watson.ppe.telemetry.microsoft.com
 127.0.0.1 telemetry.appex.bing.net
 127.0.0.1 telemetry.urs.microsoft.com
 127.0.0.1 telemetry.appex.bing.net:443
 127.0.0.1 settings-sandbox.data.microsoft.com
 127.0.0.1 vortex-sandbox.data.microsoft.com
 127.0.0.1 telemetry.*
 ----Up To You----
 Replace Microsoft Edge/Internet Explorer with Firefox, Chromium, or any forks/variations of them (if you install chrome you're just choosing to have your data stolen by google instead of microsoft). Replace Windows Media Player with VLC or MPC-HC Replace Groove Music with Foobar2000, Winamp, or MusicBee. Replace Photos/Windows Photo Viewer with ImageGlass or IrfanView.
 ----Get rid of "APPS"----
    Open PowerShell with Admin privileges (yet again, same method as cmd), enter:
 Get-AppxPackage -AllUsers | Remove-AppxPackage
    -OR- for full debloat (all on one line)
 Get-AppxPackage -AllUsers | where {$.name -notlike "calc" -AND $.name -notlike "store" -AND $.name -notlike "onenote" -AND $.name -notlike "NET." -AND $.name -notlike "VCLibs" -AND $.name -notlike "Host" -AND $_.name -notlike "AccountsControl"} | Remove-AppxPackage
 ----Get rid of OneDrive---- Use this batch file, run it.
 http://www62.zippyshare.com/d/IfLGZv7J/339/OneDrive%20Uninstaller%20v0.4.cmd
 ----Disabled automatic Windows Updates----
 (again, I wouldn't recommend this step for most users, updates are essential to fixing security holes yet to be discovered)
 Open Admin Command Prompt and type: gpedit.msc
 Maneuver to: Computer Configuration -> Administrative Templates -> Windows Components -> Windows Update Select it and select disable, apply and ok.
 ----"Something Happened" error----
 Change your language to English (US). Control Panel -> Clock, Language, and Region -> Region -> Administrative -> Change system locale
 ----Disable Hybrid Sleep----
 (save on your HDD/SSD/PCI-E SSD TB write amount)
 Open cmd.exe as admin, type in:
 powercfg -h off
 ----extras added from r/pcmasterrace guide----
 thanks to u/mtndewaddict for pointing this out
 !WARNING! editing hosts file may cause problems with steam overlay !WARNING!
 If you want to use the windows app store but don't want ads, simply add this list to your hosts file in c:/windows/system32/drivers/etc
 here is a quick guide to disabling windows defender. This step is not recommended for anyone UNLESS it is to install a better anti-virus program (it is not recommended to have more than one anti virus program on any machine at any given time as the programs will most likely interfere with each other).
	All the options are "easily" deactivated, even to a layman it will take much less than an hour to complete this guide, to someone even vaguely familiar with windows and common tweaks, this will take 10 to 15 minutes.
	As u/aDeadSoul pointed out, some of these fixes are overkill, if you are not sure what to do only stick to the "before installation" and "after installation" parts. DON'T start mucking about with the powershell or the registry editor if you don't have at least a good idea of what you are doing. Also DON'T disable windows updates if you are not 100% sure that is what you want to do, there are probably quite a bit of security flaws that will be fixed in later updates, disabling updates leaves you vulnerable to yet undiscovered security holes.
	----Before/During Installation----
	Do not use Express Settings. Hit Customize, and make sure everything is turned off. It's strongly preferred that you use a local account with Windows 10.
	----After Installation----
	Head to Settings > Privacy, and disable everything, unless there are some things you really need.
	While within the Privacy page, go to Feedback, select Never in the first box, and Basic in the second box.
	Head to Settings > Update and Security > Advanced Options > Choose how updates are delivered, and turn the first switch off.
	Disable Cortana by right clicking the Search bar/icon.
	(Optional) Disable web search in Search by going to Settings, and turning off Search online and include web results.
	----Slightly Complex----
	Open up the Command Prompt by launching cmd as an administrator (hit windows key or click start menu button, type "cmd" then right click on the command prompt icon at the top of the list and select "run as administrator"), and enter the following:
	sc delete DiagTrack
	sc delete dmwappushservice
	echo "" > C:\ProgramData\Microsoft\Diagnosis ETLLogsAutoLogger\AutoLogger-Diagtrack-Listener.etl
	Open up the Group Policy Editor by launching gpedit.msc as an administrator (same method as cmd).
	Go through Computer Configuration > Administrative Templates > Windows Components > Data Collection and Preview Builds. Double click Telemetry, hit Disabled, then apply.
	NOTE: This only truly works in the Enterprise edition, but the final step provides a decent enough workaround for Pro users.
	While still in the Group Policy Editor, go through Computer Configuration > Administrative Templates > Windows Components > OneDrive, double click Prevent the usage of OneDrive for file storage, hit Enabled, then apply.
	Open up the Registry Editor by launching regedit as an administrator (yet again same method as cmd).
	Go through HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\DataCollection, select AllowTelemetry, change its value to 0, then apply.
	!WARNING! editing hosts file may cause problems with steam overlay !WARNING!
	First, download the Take Ownership tweak[http://www.howtogeek.com/howto/windows-vista/add-take-ownership-to-explorer-right-click-menu-in-vista/] and enable it.
	Then, head to the Hosts File by going through C:\Windows\System32\Drivers\Etc, take ownership of the hosts file, and add the following IPs into it (using notepad or whatever equivalent you prefer).
	127.0.0.1 vortex.data.microsoft.com
	127.0.0.1 vortex-win.data.microsoft.com
	127.0.0.1 telecommand.telemetry.microsoft.com
	127.0.0.1 telecommand.telemetry.microsoft.com.nsatc.net
	127.0.0.1 oca.telemetry.microsoft.com
	127.0.0.1 oca.telemetry.microsoft.com.nsatc.net
	127.0.0.1 sqm.telemetry.microsoft.com
	127.0.0.1 sqm.telemetry.microsoft.com.nsatc.net
	127.0.0.1 watson.telemetry.microsoft.com
	127.0.0.1 watson.telemetry.microsoft.com.nsatc.net
	127.0.0.1 redir.metaservices.microsoft.com
	127.0.0.1 choice.microsoft.com
	127.0.0.1 choice.microsoft.com.nsatc.net
	127.0.0.1 df.telemetry.microsoft.com
	127.0.0.1 reports.wes.df.telemetry.microsoft.com
	127.0.0.1 services.wes.df.telemetry.microsoft.com
	127.0.0.1 sqm.df.telemetry.microsoft.com
	127.0.0.1 telemetry.microsoft.com
	127.0.0.1 watson.ppe.telemetry.microsoft.com
	127.0.0.1 telemetry.appex.bing.net
	127.0.0.1 telemetry.urs.microsoft.com
	127.0.0.1 telemetry.appex.bing.net:443
	127.0.0.1 settings-sandbox.data.microsoft.com
	127.0.0.1 vortex-sandbox.data.microsoft.com
	127.0.0.1 telemetry.*
	----Up To You----
	Replace Microsoft Edge/Internet Explorer with Firefox, Chromium, or any forks/variations of them (if you install chrome you're just choosing to have your data stolen by google instead of microsoft). Replace Windows Media Player with VLC or MPC-HC Replace Groove Music with Foobar2000, Winamp, or MusicBee. Replace Photos/Windows Photo Viewer with ImageGlass or IrfanView.
	----Get rid of "APPS"----
	Open PowerShell with Admin privileges (yet again, same method as cmd), enter:
	Get-AppxPackage -AllUsers \| Remove-AppxPackage
	-OR- for full debloat (all on one line)
	Get-AppxPackage -AllUsers \| where {$.name -notlike "calc" -AND $.name -notlike "store" -AND $.name -notlike "onenote" -AND $.name -notlike "NET." -AND $.name -notlike "VCLibs" -AND $.name -notlike "Host" -AND $_.name -notlike "AccountsControl"} \| Remove-AppxPackage
	----Get rid of OneDrive---- Use this batch file, run it.
	http://www62.zippyshare.com/d/IfLGZv7J/339/OneDrive%20Uninstaller%20v0.4.cmd
	----Disabled automatic Windows Updates----
	(again, I wouldn't recommend this step for most users, updates are essential to fixing security holes yet to be discovered)
	Open Admin Command Prompt and type: gpedit.msc
	Maneuver to: Computer Configuration -> Administrative Templates -> Windows Components -> Windows Update Select it and select disable, apply and ok.
	----"Something Happened" error----
	Change your language to English (US). Control Panel -> Clock, Language, and Region -> Region -> Administrative -> Change system locale
	----Disable Hybrid Sleep----
	(save on your HDD/SSD/PCI-E SSD TB write amount)
	Open cmd.exe as admin, type in:
	powercfg -h off
	----extras added from r/pcmasterrace guide----
	thanks to u/mtndewaddict for pointing this out
	!WARNING! editing hosts file may cause problems with steam overlay !WARNING!
	If you want to use the windows app store but don't want ads, simply add this list to your hosts file in c:/windows/system32/drivers/etc
	here is a quick guide to disabling windows defender. This step is not recommended for anyone UNLESS it is to install a better anti-virus program (it is not recommended to have more than one anti virus program on any machine at any given time as the programs will most likely interfere with each other).