Deaktivierung der Datensammlung und Weitergabe an Microsoft als Skript
Hier finden Sie eine Zusammenfassung zur Deaktivierung der Datensammlung und Weitergab an Microsoft. In diesem Skript wird sowohl verschiedene Konfigurationen angepasst, Dienste beendet und deaktiviert, Aufgabenplaner deaktiviert und Anwendungen bzw. Apps deinstalliert.
Eine detaillierte Auflistung der einzelnen Punkte finden Sie unter Deaktivierung der Datensammlung und Weitergabe an Microsoft über GPO
Möchten Sie dieses Skript über GPO ausführen, so beachten Sie diesen Artikel: GPO PowerShell- und Batch-Konfiguration
Aktuell ist das Skript noch nicht vollständig. Dies wird in den kommenden Tagen nachgeholt.
Wichtig: Bevor Sie das Skript ausführen, sollten Sie prüfen ob diese Einstellungen das arbetien nicht behindert oder unmöglich macht. Detailiert Infos erhalten Sie über die Seite Deaktivierung der Datensammlung und Weitergabe an Microsoft über GPO
PowerShell
Das PowerShell Skript können Sie sowohl lokal als auch über GPO ausführen.
ACHTUNG: Prüfen Sie bitte vor ausführung die gesetzen Einstellungen!
# Registry eintraege - deaktivieren $reg = @( # Cortana und Suche [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\Windows Search";name="AllowCortana";value="0";type="DWord"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\Windows Search";name="AllowCortanaInAAD";value="1";type="DWord"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\Windows Search";name="AllowCortanaInAADPathOOBE ";value="0";type="DWord"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\Windows Search";name="AllowSearchToUseLocation";value="0";type="DWord"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\Windows Search";name="DisableWebSearch";value="1";type="DWord"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\Windows Search";name="ConnectedSearchUseWeb";value="0";type="DWord"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\Windows Search";name="ConnectedSearchPrivacy";value="3";type="DWord"} # Geraetemetadaten [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\Device Metadata";name="PreventDeviceMetadataFromNetwork";value="1";type="DWord"} # Geraet finden [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\FindMyDevice";name="AllowFindMyDevice";value="0";type="DWord"} # Preview Builds [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\PreviewBuilds";name="AllowBuildPreview";value="0";type="DWord"} # IE-Edge Geolocaton [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Geolocation";name="PolicyDisableGeolocation";value="1";type="DWord"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\MicrosoftEdge\Main";name="SendIntranetTraffictoInternetExplorer";value="0";type="DWord"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\ Internet Explorer\PhishingFilter";name="EnabledV9";value="0";type="DWord"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\MicrosoftEdge\PhishingFilter";name="EnabledV9";value="0";type="DWord"} # Websites Sprachlistenzugriff [PSCustomObject]@{path="HKCU:\Control Panel\International\User Profile";name="HttpAcceptLanguageOptOut";value="1";type="DWord"} # Kalender und Mail [PSCustomObject]@{path="HKLM:\Software\Microsoft\Windows\CurrentVersion\Policies\Windows";name="TurnOffWinCal";value="1";type="DWord"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows Mail";name="DisableCommunities";value="1";type="DWord"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows Mail";name="ManualLaunchAllowed";value="0";type="DWord"} [PSCustomObject]@{path="HKCU:\Software\Microsoft\Windows\CurrentVersion\Policies\Windows";name="TurnOffWinCal";value="1";type="DWord"} [PSCustomObject]@{path="HKCU:\SOFTWARE\Policies\Microsoft\Windows Mail";name="DisableCommunities";value="1";type="DWord"} [PSCustomObject]@{path="HKCU:\SOFTWARE\Policies\Microsoft\Windows Mail";name="ManualLaunchAllowed";value="0";type="DWord"} # OneDrive [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\OneDrive";name="DisableFileSyncNGSC";value="1";type="DWord"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\OneDrive";name="PreventNetworkTrafficPreUserSignIn";value="1";type="DWord"} # Allgemein Werbe-ID [PSCustomObject]@{path="HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion";name="AdvertisingInfo";value="0";type="DWord"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AdvertisingInfo";name="DisabledByGroupPolicy";value="1";type="DWord"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\AdvertisingInfo";name="Enabled";value="0";type="DWord"} # Allgemein Daten Systemuebergreifend verwenden [PSCustomObject]@{path="HKLM:\Software\Policies\Microsoft\Windows\System";name="EnableCdp";value="0";type="DWord"} # Windows Positionssuche [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\LocationAndSensors";name="DisableWindowsLocationProvider";value="1";type="DWord"} # Apps [PSCustomObject]@{path="HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced";name="Start_TrackProgs";value="0";type="DWord"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsRunInBackground";value="2";type="DWord"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsRunInBackground_ForceAllowTheseApps";value="";type="MultiString"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsRunInBackground_ForceDenyTheseApps";value="";type="MultiString"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsRunInBackground_UserInControlOfTheseApps";value="";type="MultiString"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessRadios";value="2";type="DWord"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessRadios_ForceAllowTheseApps";value="";type="MultiString"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessRadios_ForceDenyTheseApps";value="";type="MultiString"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessRadios_UserInControlOfTheseApps";value="";type="MultiString"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsSyncWithDevices";value="2";type="DWord"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsSyncWithDevices_ForceAllowTheseApps";value="";type="MultiString"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsSyncWithDevices_ForceDenyTheseApps";value="";type="MultiString"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsSyncWithDevices_UserInControlOfTheseApps";value="";type="MultiString"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessPhone";value="2";type="DWord"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessPhone_ForceAllowTheseApps";value="";type="MultiString"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessPhone_ForceDenyTheseApps";value="";type="MultiString"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessPhone_UserInControlOfTheseApps";value="";type="MultiString"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessTasks";value="2";type="DWord"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessTasks_ForceAllowTheseApps";value="";type="MultiString"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessTasks_ForceDenyTheseApps";value="";type="MultiString"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessTasks_UserInControlOfTheseApps";value="";type="MultiString"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessNotifications";value="2";type="DWord"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessNotifications_ForceAllowTheseApps";value="";type="MultiString"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessNotifications_ForceDenyTheseApps";value="";type="MultiString"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessNotifications_UserInControlOfTheseApps";value="";type="MultiString"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessMotion";value="2";type="DWord"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessMotion_ForceAllowTheseApps";value="";type="MultiString"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessMotion_ForceDenyTheseApps";value="";type="MultiString"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessMotion_UserInControlOfTheseApps";value="";type="MultiString"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessMicrophone";value="2";type="DWord"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessMicrophone_ForceAllowTheseApps";value="";type="MultiString"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessMicrophone_ForceDenyTheseApps";value="";type="MultiString"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessMicrophone_UserInControlOfTheseApps";value="";type="MultiString"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessCalendar";value="2";type="DWord"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessCalendar_ForceAllowTheseApps";value="";type="MultiString"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessCalendar_ForceDenyTheseApps";value="";type="MultiString"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessCalendar_UserInControlOfTheseApps";value="";type="MultiString"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsGetDiagnosticInfo";value="2";type="DWord"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsGetDiagnosticInfo_ForceAllowTheseApps";value="";type="MultiString"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsGetDiagnosticInfo_ForceDenyTheseApps";value="";type="MultiString"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsGetDiagnosticInfo_UserInControlOfTheseApps";value="";type="MultiString"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessCallHistory";value="2";type="DWord"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessCallHistory_ForceAllowTheseApps";value="";type="MultiString"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessCallHistory_ForceDenyTheseApps";value="";type="MultiString"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessCallHistory_UserInControlOfTheseApps";value="";type="MultiString"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessCamera";value="2";type="DWord"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessCamera_ForceAllowTheseApps";value="";type="MultiString"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessCamera_ForceDenyTheseApps";value="";type="MultiString"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessCamera_UserInControlOfTheseApps";value="";type="MultiString"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessEmail";value="2";type="DWord"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessEmail_ForceAllowTheseApps";value="";type="MultiString"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessEmail_ForceDenyTheseApps";value="";type="MultiString"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessEmail_UserInControlOfTheseApps";value="";type="MultiString"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessGazeInput";value="2";type="DWord"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessGazeInput_ForceAllowTheseApps";value="";type="MultiString"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessGazeInput_ForceDenyTheseApps";value="";type="MultiString"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessGazeInput_UserInControlOfTheseApps";value="";type="MultiString"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessContacts";value="2";type="DWord"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessContacts_ForceAllowTheseApps";value="";type="MultiString"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessContacts_ForceDenyTheseApps";value="";type="MultiString"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessContacts_UserInControlOfTheseApps";value="";type="MultiString"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessAccountInfo";value="2";type="DWord"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessAccountInfo_ForceAllowTheseApps";value="";type="MultiString"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessAccountInfo_ForceDenyTheseApps";value="";type="MultiString"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessAccountInfo_UserInControlOfTheseApps";value="";type="MultiString"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessMessaging";value="2";type="DWord"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessMessaging_ForceAllowTheseApps";value="";type="MultiString"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessMessaging_ForceDenyTheseApps";value="";type="MultiString"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessMessaging_UserInControlOfTheseApps";value="";type="MultiString"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessLocation";value="2";type="DWord"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessLocation_ForceAllowTheseApps";value="";type="MultiString"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessLocation_ForceDenyTheseApps";value="";type="MultiString"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\LocationAndSensors";name="DisableLocation";value="1";type="DWord"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessLocation_UserInControlOfTheseApps";value="";type="MultiString"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessTrustedDevices";value="2";type="DWord"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessTrustedDevices_ForceAllowTheseApps";value="";type="MultiString"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessTrustedDevices_ForceDenyTheseApps";value="";type="MultiString"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessTrustedDevices_UserInControlOfTheseApps";value="";type="MultiString"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\PushNotifications";name="NoCloudApplicationNotification";value="1";type="DWord"} [PSCustomObject]@{path="HKLM:\Software\Policies\Microsoft\Windows\System";name="EnableAppUriHandlers";value="0";type="DWord"} # Sprache und Stifteingabe [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\InputPersonalization";name="RestrictImplicitInkCollection";value="1";type="DWord"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Microsoft\Personalization\Settings";name="AcceptedPrivacyPolicy";value="0";type="DWord"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Microsoft\InputPersonalization\TrainedDataStore";name="HarvestContacts";value="0";type="DWord"} [PSCustomObject]@{path="HKLM:\Software\Microsoft\Windows\CurrentVersion\Policies\TextInput";name="AllowLinguisticDataCollection";value="0";type="DWord"} # Feedback und Diagnose [PSCustomObject]@{path="HKLM:\Software\Policies\Microsoft\Windows\DataCollection";name="DoNotShowFeedbackNotifications";value="1";type="DWord"} [PSCustomObject]@{path="HKLM:\Software\Policies\Microsoft\Windows\DataCollection";name="DisableTelemetryOptInSettingsUx";value="1";type="DWord"} [PSCustomObject]@{path="HKLM:\Software\Policies\Microsoft\Windows\DataCollection";name="DisableTelemetryOptInChangeNotification";value="1";type="DWord"} [PSCustomObject]@{path="HKLM:\Software\Policies\Microsoft\Windows\DataCollection";name="AllowDeviceNameInTelemetry";value="0";type="DWord"} [PSCustomObject]@{path="HKLM:\Software\Policies\Microsoft\Windows\DataCollection";name="AllowTelemetry";value="0";type="DWord"} [PSCustomObject]@{path="HKCU:\Software\Policies\Microsoft\Windows\CloudContent";name="DisableTailoredExperiencesWithDiagnosticData";value="1";type="DWord"} [PSCustomObject]@{path="HKLM:\Software\Policies\Microsoft\Windows\DataCollection";name="LimitEnhancedDiagnosticDataWindowsAnalytics";value="0";type="DWord"} [PSCustomObject]@{path="HKCU:\Software\Policies\Microsoft\Windows\DataCollection";name="AllowTelemetry";value="0";type="DWord"} [PSCustomObject]@{path="HKLM:\Software\Policies\Microsoft\Windows\GameDVR";name="AllowGameDVR";value="0";type="DWord"} [PSCustomObject]@{path="HKLM:\Software\Policies\Microsoft\Windows\System";name="EnableActivityFeed";value="0";type="DWord"} [PSCustomObject]@{path="HKLM:\Software\Policies\Microsoft\Windows\System";name="PublishUserActivities";value="PublishUserActivities";type="DWord"} [PSCustomObject]@{path="HKLM:\Software\Policies\Microsoft\Windows\System";name="UploadUserActivities";value="0";type="DWord"} # Einstellungen Sync [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync";name="DisableApplicationSettingSync";value="2";type="DWord"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync";name="DisableApplicationSettingSyncUserOverride";value="1";type="DWord"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync";name="DisableAppSyncSettingSync";value="2";type="DWord"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync";name="DisableAppSyncSettingSyncUserOverride";value="1";type="DWord"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync";name="DisableWebBrowserSettingSync";value="2";type="DWord"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync";name="DisableWebBrowserSettingSyncUserOverride";value="1";type="DWord"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync";name="DisableDesktopThemeSettingSync";value="2";type="DWord"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync";name="DisableDesktopThemeSettingSyncUserOverride";value="1";type="DWord"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync";name="DisableSyncOnPaidNetwork";value="1";type="DWord"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync";name="DisableCredentialsSettingSync";value="2";type="DWord"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync";name="DisableCredentialsSettingSyncUserOverride";value="1";type="DWord"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync";name="DisableSettingSync";value="2";type="DWord"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync";name="DisableSettingSyncUserOverride";value="1";type="DWord"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync";name="DisablePersonalizationSettingSync";value="2";type="DWord"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync";name="DisablePersonalizationSettingSyncUserOverride";value="1";type="DWord"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync";name="DisableStartLayoutSettingSync";value="2";type="DWord"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync";name="DisableStartLayoutSettingSyncUserOverride";value="1";type="DWord"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync";name="DisableWindowsSettingSync";value="2";type="DWord"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync";name="DisableWindowsSettingSyncUserOverride";value="1";type="DWord"} [PSCustomObject]@{path="HKCU:\SOFTWARE\Microsoft\Messaging";name="CloudServiceSyncEnabled";value="0";type="DWord"} # Windows Defender [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows Defender";name="DisableAntiSpyware";value="1";type="DWord"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows Defender";name="AllowFastServiceStartup";value="0";type="DWord"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\MRT";name="DontReportInfectionInformation";value="1";type="DWord"} [PSCustomObject]@{path="HKLM:\Software\Policies\Microsoft\Windows Defender\Signature Updates";name="DefinitionUpdateFileSharesSources";delete="1"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows Defender\Signature Updates";name="FallbackOrder";value="FileShares";type="String"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows Defender\Signature Updates";name="DisableUpdateOnStartupWithoutEngine";value="1";type="DWord"} [PSCustomObject]@{path="HKLM:\Software\Policies\Microsoft\Windows Defender\Spynet!SpynetReporting HKLM\Software\Policies\Microsoft\Windows Defender\Spynet";name="SpynetReporting";value="0";type="DWord"} [PSCustomObject]@{path="HKLM:\Software\Policies\Microsoft\Windows Defender\Spynet";name="SubmitSamplesConsent";value="0";type="DWord"} [PSCustomObject]@{path="HKLM:\Software\Policies\Microsoft\Windows Defender\Spynet";name="DisableBlockAtFirstSeen";value="0";type="DWord"} [PSCustomObject]@{path="HKLM:\Software\Policies\Microsoft\Windows Defender\Spynet";name="DisableBlockAtFirstSeen";value="1";type="DWord"} [PSCustomObject]@{path="HKLM:\Software\Policies\Microsoft\Windows Defender\Spynet";name="LocalSettingOverrideSpynetReporting";value="0";type="DWord"} # Windows Blickpunkt [PSCustomObject]@{path="HKCU:\Software\Policies\Microsoft\Windows\CloudContent";name="ConfigureWindowsSpotlight";value="0";type="DWord"} [PSCustomObject]@{path="HKCU:Software\Policies\Microsoft\Windows\CloudContent";name="IncludeEnterpriseSpotlight";value="0";type="DWord"} [PSCustomObject]@{path="HKCU:\Software\Policies\Microsoft\Windows\CloudContent";name="DisableWindowsSpotlightOnSettings";value="0";type="DWord"} [PSCustomObject]@{path="HKCU:\SOFTWARE\Policies\Microsoft\Windows\CloudContent";name="DisableWindowsSpotlightFeatures";value="1";type="DWord"} [PSCustomObject]@{path="HKCU:\Software\Policies\Microsoft\Windows\CloudContent";name="DisableWindowsSpotlightOnActionCenter";value="0";type="DWord"} [PSCustomObject]@{path="HKCU:\Software\Policies\Microsoft\Windows\CloudContent";name="DisableWindowsSpotlightOnSettings";value="0";type="DWord"} [PSCustomObject]@{path="HKCU:\Software\Policies\Microsoft\Windows\CloudContent";name="DisableWindowsSpotlightWindowsWelcomeExperience";value="0";type="DWord"} ##[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\Personalization";name="LockScreenImage";value="C:\Windows\Web\screen\lockscreen.jpg";type="DWord"} ##[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\Personalization";name="LockScreenOverlaysDisabled";value="1";type="DWord"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\CloudContent";name="DisableWindowsConsumerFeatures";value="1";type="DWord"} # Store [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\WindowsStore";name="DisableStoreApps";value="0";type="DWord"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\WindowsStore";name="AutoDownload ";value="1";type="DWord"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\WindowsStore";name="AutoDownload";value="2";type="DWord"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\WindowsStore";name="DisableOSUpgrade ";value="1";type="DWord"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\WindowsStore";name="RequirePrivateStoreOnly ";value="1";type="DWord"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\WindowsStore";name="RemoveWindowsStore ";value="1";type="DWord"} ) # Servicevariable $services = "diagtrack","dmwapppushsvc","dmwappushservice","RetailDemo" # Taskvariable $tasks = "Microsoft Compatibility Appraiser","ProgramDataUpdater","Consolidator","KernelCeipTask","UsbCeip","AnalyzeSystem","FamilySafetyMonitor","FamilySafetyRefresh","AitAgent","StartupAppTask","Proxy","BthSQM","Consolidator" #DNS Adressenvaribale $dnss = "a.ads1.msn.com","a.ads2.msn.com","a-0001.a-msedge.net","ad.doubleclick.net","adnexus.net","adnxs.com","ads.msn.com","ads1.msads.net","ads1.msn.com","az361816.vo.msecnd.net","az512334.vo.msecnd.net","ca.telemetry.microsoft.com","choice.microsoft.com","choice.microsoft.com.nsatc.net","compatexchange.cloudapp.net","corp.sts.microsoft.com","corpext.msitadfs.glbdns2.microsoft.com","cs1.wpc.v0cdn.net","df.telemetry.microsoft.com","diagnostics.support.microsoft.com","fe2.update.microsoft.com.akadns.net","feedback.microsoft-hohm.com","feedback.search.microsoft.com","feedback.windows.com","i1.services.social.microsoft.com","i1.services.social.microsoft.com.nsatc.net","oca.telemetry.microsoft.com","oca.telemetry.microsoft.com.nsatc.net","pre.footprintpredict.com","preview.msn.com","rad.msn.com","redir.metaservices.microsoft.com","reports.wes.df.telemetry.microsoft.com","services.wes.df.telemetry.microsoft.com","settings-sandbox.data.microsoft.com","sls.update.microsoft.com.akadns.net","spynet2.microsoft.com","spynetalt.microsoft.com","sqm.df.telemetry.microsoft.com","sqm.telemetry.microsoft.com","sqm.telemetry.microsoft.com.nsatc.net","ssw.live.com","statsfe1.ws.microsoft.com","statsfe2.update.microsoft.com.akadns.net","statsfe2.ws.microsoft.com","survey.watson.microsoft.com","telecommand.telemetry.microsoft.com","telecommand.telemetry.microsoft.com.nsatc.net","telemetry.appex.bing.net","telemetry.appex.bing.net:443","telemetry.microsoft.com","telemetry.urs.microsoft.com","vortex.data.microsoft.com","vortex-sandbox.data.microsoft.com","vortex-win.data.microsoft.com","watson.live.com","watson.microsoft.com","watson.ppe.telemetry.microsoft.com","watson.telemetry.microsoft.com","watson.telemetry.microsoft.com.nsatc.net","wes.df.telemetry.microsoft.com" # DNS - Pfad für Hostdatei $hostfile = [System.Environment]::ExpandEnvironmentVariables("%WINDIR%") + "\system32\drivers\etc\hosts" # OneDrive Registry eintraege Deinstallation $regOneDrive = @( [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\OneDrive";name="DisableFileSyncNGSC";value="1";type="DWord"} [PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\OneDrive";name="PreventNetworkTrafficPreUserSignIn";value="1";type="DWord"} [PSCustomObject]@{path="HKCR:\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}";name="System.IsPinnedToNameSpaceTree";value="0";type="DWord"} [PSCustomObject]@{path="HKCR:\Wow6432Node\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}";name="System.IsPinnedToNameSpaceTree";value="0";type="DWord"} ) # OneDrive Folder $OneDriveFolder = @( [PSCustomObject]@{name=[System.Environment]::ExpandEnvironmentVariables("%USERPROFILE%") + "OneDrive"} [PSCustomObject]@{name="C:\OneDriveTemp"} [PSCustomObject]@{name=[System.Environment]::ExpandEnvironmentVariables("%LOCALAPPDATA%") + "\Microsoft\OneDrive"} [PSCustomObject]@{name=[System.Environment]::ExpandEnvironmentVariables("%PROGRAMDATA%") + "\Microsoft OneDrive"} ) # Apps deinsatllation # Gekennzeichnete Apps (##) sollten nicht entfernt werden $apps = @( [PSCustomObject]@{name="*EclipseManager"} [PSCustomObject]@{name="*PicsArt-PhotoStudio"} [PSCustomObject]@{name="*Twitter"} [PSCustomObject]@{name="AdobeSystemsIncorporated.AdobePhotoshopExpress"} [PSCustomObject]@{name="Microsoft.3DBuilder"} [PSCustomObject]@{name="Microsoft.Appconnector"} [PSCustomObject]@{name="Microsoft.BingNews"} [PSCustomObject]@{name="Microsoft.BingWeather"} [PSCustomObject]@{name="Microsoft.BingFinance"} [PSCustomObject]@{name="Microsoft.BingSports"} [PSCustomObject]@{name="Microsoft.FreshPaint"} [PSCustomObject]@{name="Microsoft.GetHelp"} [PSCustomObject]@{name="Microsoft.Getstarted"} ##[PSCustomObject]@{name="Microsoft.DesktopAppInstaller"} [PSCustomObject]@{name="Microsoft.Messaging"} [PSCustomObject]@{name="Microsoft.Microsoft3DViewer"} [PSCustomObject]@{name="Microsoft.MicrosoftOfficeHub"} [PSCustomObject]@{name="Microsoft.MicrosoftPowerBIForWindows"} [PSCustomObject]@{name="Microsoft.MicrosoftSolitaireCollection"} [PSCustomObject]@{name="Microsoft.MicrosoftStickyNotes"} [PSCustomObject]@{name="Microsoft.MSPaint"} [PSCustomObject]@{name="Microsoft.Office.Sway"} [PSCustomObject]@{name="Microsoft.Office.OneNote"} [PSCustomObject]@{name="Microsoft.OneConnect"} [PSCustomObject]@{name="Microsoft.People"} [PSCustomObject]@{name="Microsoft.Print3D"} [PSCustomObject]@{name="Microsoft.SkypeApp"} ##[PSCustomObject]@{name="Microsoft.StorePurchaseApp"} [PSCustomObject]@{name="Microsoft.Wallet"} ##[PSCustomObject]@{name="Microsoft.WebMediaExtensions"} ##[PSCustomObject]@{name="Microsoft.WindowsAlarms"} ##[PSCustomObject]@{name="Microsoft.WindowsCalculator"} ##[PSCustomObject]@{name="Microsoft.WindowsCamera"} [PSCustomObject]@{name="microsoft.windowscommunicationsapps"} [PSCustomObject]@{name="Microsoft.WindowsFeedbackHub"} [PSCustomObject]@{name="Microsoft.WindowsMaps"} [PSCustomObject]@{name="Microsoft.WindowsPhone"} ##[PSCustomObject]@{name="Microsoft.Windows.Photos"} ##[PSCustomObject]@{name="Microsoft.WindowsSoundRecorder"} ##[PSCustomObject]@{name="Microsoft.WindowsStore"} [PSCustomObject]@{name="Microsoft.XboxApp"} [PSCustomObject]@{name="Microsoft.Xbox.TCUI"} [PSCustomObject]@{name="Microsoft.XboxGameOverlay"} [PSCustomObject]@{name="Microsoft.XboxGamingOverlay"} [PSCustomObject]@{name="Microsoft.XboxIdentityProvider"} [PSCustomObject]@{name="Microsoft.XboxSpeechToTextOverlay"} [PSCustomObject]@{name="Microsoft.ZuneMusic"} [PSCustomObject]@{name="Microsoft.ZuneVideo"} ) Import-Module -DisableNameChecking $PSScriptRoot\..\lib\force-mkdir.psm1 Import-Module -DisableNameChecking $PSScriptRoot\..\lib\take-own.psm1 $ErrorActionPreference = "SilentlyContinue" # Reg-Eintraege schreiben foreach($r in $reg){ if(!$r.delete){ if(Test-Path $r.path){ New-ItemProperty -Path $r.path -Name $r.name -Value $r.value -PropertyType $r.type -Force | Out-Null } else{ New-Item -Path $r.path -Force | Out-Null New-ItemProperty -Path $r.path -Name $r.name -Value $r.value -PropertyType $r.type -Force | Out-Null } } else{ Remove-ItemProperty -Path $r.path -Name $r.name } } #Firewallconfig # Cortanasuche web New-NetFirewallRule -DisplayName "Cortana Websuche disabled" -Direction Outbound -Program "%windir%\systemapps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -Action Block -Profile Any -Protocol TCP -LocalPort Any -RemotePort Any # Service stoppen und deaktivieren foreach($service in $services){ if(Get-Service $service){ Stop-Service $service Set-Service $service -StartupType disabled } } # Task deaktivieren foreach($task in $tasks){ $t = Get-ScheduledTask $task if($t.TaskName -contains $tasks){ if($t.State -ine "disabled"){ Disable-ScheduledTask $t } } } # Host-Datei erweitern foreach($dns in $dnss){ if ( -not (Select-String -path $hostfile -pattern "$dns" -Quiet)) { "0.0.0.0 $dns" >> $hostfile } } # Deinstallation OneDrive # Task beenden taskkill.exe /F /IM "OneDrive.exe" taskkill.exe /F /IM "explorer.exe" # Uninsall if (Test-Path "$env:systemroot\System32\OneDriveSetup.exe") { & "$env:systemroot\System32\OneDriveSetup.exe" /uninstall } if (Test-Path "$env:systemroot\SysWOW64\OneDriveSetup.exe") { & "$env:systemroot\SysWOW64\OneDriveSetup.exe" /uninstall } # Reg-Eintraege anpassen foreach($r in $regOneDrive){ if(Test-Path $r.path){ New-ItemProperty -Path $r.path -Name $r.name -Value $r.value -PropertyType $r.type -Force | Out-Null } else{ New-Item -Path $r.path -Force | Out-Null New-ItemProperty -Path $r.path -Name $r.name -Value $r.value -PropertyType $r.type -Force | Out-Null } } #Verzeichnisse loeschen foreach($f in $OneDriveFolder){ if(Test-Path $r.name){ Remove-Item -Path "C:\test" -Recurse -Force } } # Apps loeschen foreach($a in $apps){ # neue Benutzer Get-AppxProvisionedPackage -Online | Where-Object {$_.PackageName -Like $a.name} | ForEach-Object { Remove-AppxProvisionedPackage -Online -PackageName $_.PackageName} # aktueller Benutzer Get-AppxPackage $a.name | Remove-AppxPackage }
Weitere Links
Deaktivierung der Datensammlung und Weitergabe an Microsoft über GPO
2 Kommentare
Pingback:
Pingback: