Marion wrote:
These go beyond baseline service disables (#1) & registry policies (#3). These are a hybrid which combines service shutdowns such as
(MapsBroker, SysMain, etc.), Group Policy edits (telemetry level,
pre-release features), and registry rules (SIUF, CEIP, AIT).
UPDATE
I invested a few hours today finding more ways to modify Windows
to be more private, where I show the copy-&-paste steps below.
Optional Cloud & App Integration Restrictions
Objective: Reduce MSA, cloud sync, app store, & browser data sharing
Items:
Account & Cloud Integration
(local account, sync settings, OneDrive auto-start)
Edge / Browser Telemetry
(search suggestions, personalized ads, preloading)
Windows Store / Apps
(auto app updates, Start menu suggestions, bundled apps)
Notifications & Advertising
(tips, tricks, suggestions, ad ID double-check)
Network & Connectivity
(Hotspot 2.0, open Wi-Fi, SmartScreen review)
Miscellaneous Services
(Fax, Print Spooler, Remote Assistance, Bluetooth if unused)
Local vs Microsoft Account:
Since I have only a local account, there's nothing to do here.
But others may be on a Microsoft Account (MSA).
You can switch to a local account under:
Win+I > Settings > Accounts > Your info >
Sign in with a local account instead
Sync settings:
Even with a Microsoft Account, you can turn off sync under:
Win+I > Settings > Accounts > Sync your settings
OneDrive:
Disable OneDrive auto start:
Press {Ctrl+Shift+Esc} to open Task Manager
Go to the Startup tab
Find Microsoft OneDrive in the list
Right click and choose Disable
Or unlink the PC in OneDrive settings:
Click the OneDrive cloud icon in the system tray
Select Help and Settings > Settings
Go to the Account tab
Click Unlink this PC
Edge and Browser Telemetry
Objective: Reduce browser data collection and background activity
Items:
Turn off search and site suggestions
Disable tracking and ad personalization
Disable background preloading of pages
Search and site suggestions:
Runbox > msedge > edge://settings/search
Turn off "Show me search and site suggestions using my typed characters"
(if present)
Set "Search on new tabs" from "Search Box" to "Address bar"
Tracking prevention:
Runbox > msedge > edge://settings/privacy
Set Tracking prevention to "Strict" (or Balanced if needed)
Optional form and payment autofill:
Runbox > msedge > edge://settings/payments
Turn off "Save and fill payment info" if not needed
Runbox > msedge > edge://settings/addresses
Turn off "Save and fill addresses" if not needed
Runbox > msedge > edge://settings/passwords
Turn off "Offer to save passwords" if not needed
Background preloading:
Runbox > msedge > edge://settings/system
Turn off "Startup boost"
Turn off "Continue running background apps when Microsoft Edge is closed"
Turn off "Preload the new tab page" (if present)
Windows Store and Apps
Objective: Limit automatic app installs, updates, and suggested content
Items:
Disable automatic app updates
Turn off Start menu suggestions
Remove or disable bundled apps you do not use
Disable automatic app updates:
Win+I > Settings > Update and Security > Windows Update > Advanced
options
Turn off "Receive updates for other Microsoft products when you update Windows"
(This reduces Store app auto updates tied to Windows Update)
Turn off Start menu suggestions:
Win+I > Settings > Personalization > Start
Turn off "Show suggestions occasionally in Start"
Remove or disable bundled apps:
Runbox > powershell > right click > Run as administrator
Use command: Get-AppxPackage *appname* | Remove-AppxPackage
(Replace *appname* with the package name, e.g. xboxapp, skypeapp, etc.)
Or uninstall directly from Start menu > right click app > Uninstall
Notifications and Advertising
Objective: Reduce Windows tips, suggestions, and advertising ID
tracking
Items:
Turn off Windows tips, tricks, and suggestions
Disable Start and lock screen suggestions
Double check advertising ID setting
Turn off Windows tips, tricks, and suggestions:
Win+I > Settings > System > Notifications and actions
Turn off "Get tips, tricks, and suggestions as you use Windows"
Disable Start and lock screen suggestions:
Win+I > Settings > Personalization > Start
Turn off "Show suggestions occasionally in Start"
Win+I > Settings > Personalization > Lock screen
Turn off "Get fun facts, tips, tricks, and more on your lock screen"
Advertising ID:
Win+I > Settings > Privacy > General
Turn off "Let apps use advertising ID to make ads more interesting to
you"
Network and Connectivity
Objective: Reduce automatic network connections and review SmartScreen
Items:
Disable Hotspot 2.0 networks
Disable automatic connection to open Wi-Fi
Review SmartScreen settings
Disable Hotspot 2.0 networks:
Win+I > Settings > Network and Internet > Wi-Fi > Manage known networks
Look for "Hotspot 2.0 networks" and turn it Off (if present)
Disable automatic connection to open Wi-Fi:
Win+I > Settings > Network and Internet > Wi-Fi
Turn off "Connect to suggested open hotspots"
Turn off "Connect to networks shared by my contacts" (if present)
Review SmartScreen settings:
Win+I > Settings > Update and Security > Windows Security > App and
browser control
Under "Check apps and files" and "SmartScreen for Microsoft Edge"
Choose your preferred level (Warn or Off if you want less Microsoft data collection)
Miscellaneous Services
Objective: Disable background or legacy services not needed on most systems
Items:
Fax service
Print Spooler (if you never print)
Remote Assistance
Bluetooth (if unused)
Fax service:
Runbox > services.msc
Find "Fax"
Right click > Properties > Startup type: Disabled
Click Stop if running
Print Spooler:
Runbox > services.msc
Find "Print Spooler"
Right click > Properties > Startup type: Disabled
Click Stop if running
(Only do this if you never print or use PDF printers)
Remote Assistance:
Win+I > Settings > System > Remote Desktop
Turn off "Enable Remote Assistance connections to this computer"
Bluetooth (if unused):
Win+I > Settings > Devices > Bluetooth & other devices
Turn off Bluetooth
Runbox > services.msc > Find "Bluetooth Support Service"
Right click > Properties > Startup type: Disabled
--- PyGate Linux v1.0
* Origin: Dragon's Lair, PyGate NNTP<>Fido Gate (3:633/10)