Deaktivierung der Datensammlung und Weitergabe an Microsoft als Skript
7. Juni 2018
Hier finden Sie eine Zusammenfassung zur Deaktivierung der Datensammlung und Weitergab an Microsoft. In diesem Skript wird sowohl verschiedene Konfigurationen angepasst, Dienste beendet und deaktiviert, Aufgabenplaner deaktiviert und Anwendungen bzw. Apps deinstalliert.
Eine detaillierte Auflistung der einzelnen Punkte finden Sie unter Deaktivierung der Datensammlung und Weitergabe an Microsoft über GPO
Möchten Sie dieses Skript über GPO ausführen, so beachten Sie diesen Artikel: GPO PowerShell- und Batch-Konfiguration
Aktuell ist das Skript noch nicht vollständig. Dies wird in den kommenden Tagen nachgeholt.
Wichtig: Bevor Sie das Skript ausführen, sollten Sie prüfen ob diese Einstellungen das arbetien nicht behindert oder unmöglich macht. Detailiert Infos erhalten Sie über die Seite Deaktivierung der Datensammlung und Weitergabe an Microsoft über GPO
PowerShell
Das PowerShell Skript können Sie sowohl lokal als auch über GPO ausführen.
ACHTUNG: Prüfen Sie bitte vor ausführung die gesetzen Einstellungen!
# Registry eintraege - deaktivieren
$reg = @(
# Cortana und Suche
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\Windows Search";name="AllowCortana";value="0";type="DWord"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\Windows Search";name="AllowCortanaInAAD";value="1";type="DWord"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\Windows Search";name="AllowCortanaInAADPathOOBE ";value="0";type="DWord"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\Windows Search";name="AllowSearchToUseLocation";value="0";type="DWord"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\Windows Search";name="DisableWebSearch";value="1";type="DWord"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\Windows Search";name="ConnectedSearchUseWeb";value="0";type="DWord"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\Windows Search";name="ConnectedSearchPrivacy";value="3";type="DWord"}
# Geraetemetadaten
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\Device Metadata";name="PreventDeviceMetadataFromNetwork";value="1";type="DWord"}
# Geraet finden
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\FindMyDevice";name="AllowFindMyDevice";value="0";type="DWord"}
# Preview Builds
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\PreviewBuilds";name="AllowBuildPreview";value="0";type="DWord"}
# IE-Edge Geolocaton
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Internet Explorer\Geolocation";name="PolicyDisableGeolocation";value="1";type="DWord"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\MicrosoftEdge\Main";name="SendIntranetTraffictoInternetExplorer";value="0";type="DWord"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\ Internet Explorer\PhishingFilter";name="EnabledV9";value="0";type="DWord"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\MicrosoftEdge\PhishingFilter";name="EnabledV9";value="0";type="DWord"}
# Websites Sprachlistenzugriff
[PSCustomObject]@{path="HKCU:\Control Panel\International\User Profile";name="HttpAcceptLanguageOptOut";value="1";type="DWord"}
# Kalender und Mail
[PSCustomObject]@{path="HKLM:\Software\Microsoft\Windows\CurrentVersion\Policies\Windows";name="TurnOffWinCal";value="1";type="DWord"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows Mail";name="DisableCommunities";value="1";type="DWord"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows Mail";name="ManualLaunchAllowed";value="0";type="DWord"}
[PSCustomObject]@{path="HKCU:\Software\Microsoft\Windows\CurrentVersion\Policies\Windows";name="TurnOffWinCal";value="1";type="DWord"}
[PSCustomObject]@{path="HKCU:\SOFTWARE\Policies\Microsoft\Windows Mail";name="DisableCommunities";value="1";type="DWord"}
[PSCustomObject]@{path="HKCU:\SOFTWARE\Policies\Microsoft\Windows Mail";name="ManualLaunchAllowed";value="0";type="DWord"}
# OneDrive
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\OneDrive";name="DisableFileSyncNGSC";value="1";type="DWord"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\OneDrive";name="PreventNetworkTrafficPreUserSignIn";value="1";type="DWord"}
# Allgemein Werbe-ID
[PSCustomObject]@{path="HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion";name="AdvertisingInfo";value="0";type="DWord"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AdvertisingInfo";name="DisabledByGroupPolicy";value="1";type="DWord"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\AdvertisingInfo";name="Enabled";value="0";type="DWord"}
# Allgemein Daten Systemuebergreifend verwenden
[PSCustomObject]@{path="HKLM:\Software\Policies\Microsoft\Windows\System";name="EnableCdp";value="0";type="DWord"}
# Windows Positionssuche
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\LocationAndSensors";name="DisableWindowsLocationProvider";value="1";type="DWord"}
# Apps
[PSCustomObject]@{path="HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced";name="Start_TrackProgs";value="0";type="DWord"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsRunInBackground";value="2";type="DWord"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsRunInBackground_ForceAllowTheseApps";value="";type="MultiString"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsRunInBackground_ForceDenyTheseApps";value="";type="MultiString"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsRunInBackground_UserInControlOfTheseApps";value="";type="MultiString"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessRadios";value="2";type="DWord"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessRadios_ForceAllowTheseApps";value="";type="MultiString"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessRadios_ForceDenyTheseApps";value="";type="MultiString"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessRadios_UserInControlOfTheseApps";value="";type="MultiString"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsSyncWithDevices";value="2";type="DWord"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsSyncWithDevices_ForceAllowTheseApps";value="";type="MultiString"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsSyncWithDevices_ForceDenyTheseApps";value="";type="MultiString"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsSyncWithDevices_UserInControlOfTheseApps";value="";type="MultiString"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessPhone";value="2";type="DWord"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessPhone_ForceAllowTheseApps";value="";type="MultiString"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessPhone_ForceDenyTheseApps";value="";type="MultiString"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessPhone_UserInControlOfTheseApps";value="";type="MultiString"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessTasks";value="2";type="DWord"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessTasks_ForceAllowTheseApps";value="";type="MultiString"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessTasks_ForceDenyTheseApps";value="";type="MultiString"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessTasks_UserInControlOfTheseApps";value="";type="MultiString"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessNotifications";value="2";type="DWord"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessNotifications_ForceAllowTheseApps";value="";type="MultiString"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessNotifications_ForceDenyTheseApps";value="";type="MultiString"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessNotifications_UserInControlOfTheseApps";value="";type="MultiString"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessMotion";value="2";type="DWord"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessMotion_ForceAllowTheseApps";value="";type="MultiString"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessMotion_ForceDenyTheseApps";value="";type="MultiString"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessMotion_UserInControlOfTheseApps";value="";type="MultiString"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessMicrophone";value="2";type="DWord"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessMicrophone_ForceAllowTheseApps";value="";type="MultiString"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessMicrophone_ForceDenyTheseApps";value="";type="MultiString"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessMicrophone_UserInControlOfTheseApps";value="";type="MultiString"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessCalendar";value="2";type="DWord"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessCalendar_ForceAllowTheseApps";value="";type="MultiString"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessCalendar_ForceDenyTheseApps";value="";type="MultiString"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessCalendar_UserInControlOfTheseApps";value="";type="MultiString"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsGetDiagnosticInfo";value="2";type="DWord"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsGetDiagnosticInfo_ForceAllowTheseApps";value="";type="MultiString"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsGetDiagnosticInfo_ForceDenyTheseApps";value="";type="MultiString"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsGetDiagnosticInfo_UserInControlOfTheseApps";value="";type="MultiString"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessCallHistory";value="2";type="DWord"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessCallHistory_ForceAllowTheseApps";value="";type="MultiString"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessCallHistory_ForceDenyTheseApps";value="";type="MultiString"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessCallHistory_UserInControlOfTheseApps";value="";type="MultiString"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessCamera";value="2";type="DWord"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessCamera_ForceAllowTheseApps";value="";type="MultiString"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessCamera_ForceDenyTheseApps";value="";type="MultiString"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessCamera_UserInControlOfTheseApps";value="";type="MultiString"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessEmail";value="2";type="DWord"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessEmail_ForceAllowTheseApps";value="";type="MultiString"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessEmail_ForceDenyTheseApps";value="";type="MultiString"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessEmail_UserInControlOfTheseApps";value="";type="MultiString"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessGazeInput";value="2";type="DWord"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessGazeInput_ForceAllowTheseApps";value="";type="MultiString"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessGazeInput_ForceDenyTheseApps";value="";type="MultiString"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessGazeInput_UserInControlOfTheseApps";value="";type="MultiString"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessContacts";value="2";type="DWord"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessContacts_ForceAllowTheseApps";value="";type="MultiString"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessContacts_ForceDenyTheseApps";value="";type="MultiString"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessContacts_UserInControlOfTheseApps";value="";type="MultiString"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessAccountInfo";value="2";type="DWord"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessAccountInfo_ForceAllowTheseApps";value="";type="MultiString"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessAccountInfo_ForceDenyTheseApps";value="";type="MultiString"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessAccountInfo_UserInControlOfTheseApps";value="";type="MultiString"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessMessaging";value="2";type="DWord"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessMessaging_ForceAllowTheseApps";value="";type="MultiString"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessMessaging_ForceDenyTheseApps";value="";type="MultiString"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessMessaging_UserInControlOfTheseApps";value="";type="MultiString"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessLocation";value="2";type="DWord"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessLocation_ForceAllowTheseApps";value="";type="MultiString"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessLocation_ForceDenyTheseApps";value="";type="MultiString"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\LocationAndSensors";name="DisableLocation";value="1";type="DWord"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessLocation_UserInControlOfTheseApps";value="";type="MultiString"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessTrustedDevices";value="2";type="DWord"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessTrustedDevices_ForceAllowTheseApps";value="";type="MultiString"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessTrustedDevices_ForceDenyTheseApps";value="";type="MultiString"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy";name="LetAppsAccessTrustedDevices_UserInControlOfTheseApps";value="";type="MultiString"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\PushNotifications";name="NoCloudApplicationNotification";value="1";type="DWord"}
[PSCustomObject]@{path="HKLM:\Software\Policies\Microsoft\Windows\System";name="EnableAppUriHandlers";value="0";type="DWord"}
# Sprache und Stifteingabe
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\InputPersonalization";name="RestrictImplicitInkCollection";value="1";type="DWord"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Microsoft\Personalization\Settings";name="AcceptedPrivacyPolicy";value="0";type="DWord"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Microsoft\InputPersonalization\TrainedDataStore";name="HarvestContacts";value="0";type="DWord"}
[PSCustomObject]@{path="HKLM:\Software\Microsoft\Windows\CurrentVersion\Policies\TextInput";name="AllowLinguisticDataCollection";value="0";type="DWord"}
# Feedback und Diagnose
[PSCustomObject]@{path="HKLM:\Software\Policies\Microsoft\Windows\DataCollection";name="DoNotShowFeedbackNotifications";value="1";type="DWord"}
[PSCustomObject]@{path="HKLM:\Software\Policies\Microsoft\Windows\DataCollection";name="DisableTelemetryOptInSettingsUx";value="1";type="DWord"}
[PSCustomObject]@{path="HKLM:\Software\Policies\Microsoft\Windows\DataCollection";name="DisableTelemetryOptInChangeNotification";value="1";type="DWord"}
[PSCustomObject]@{path="HKLM:\Software\Policies\Microsoft\Windows\DataCollection";name="AllowDeviceNameInTelemetry";value="0";type="DWord"}
[PSCustomObject]@{path="HKLM:\Software\Policies\Microsoft\Windows\DataCollection";name="AllowTelemetry";value="0";type="DWord"}
[PSCustomObject]@{path="HKCU:\Software\Policies\Microsoft\Windows\CloudContent";name="DisableTailoredExperiencesWithDiagnosticData";value="1";type="DWord"}
[PSCustomObject]@{path="HKLM:\Software\Policies\Microsoft\Windows\DataCollection";name="LimitEnhancedDiagnosticDataWindowsAnalytics";value="0";type="DWord"}
[PSCustomObject]@{path="HKCU:\Software\Policies\Microsoft\Windows\DataCollection";name="AllowTelemetry";value="0";type="DWord"}
[PSCustomObject]@{path="HKLM:\Software\Policies\Microsoft\Windows\GameDVR";name="AllowGameDVR";value="0";type="DWord"}
[PSCustomObject]@{path="HKLM:\Software\Policies\Microsoft\Windows\System";name="EnableActivityFeed";value="0";type="DWord"}
[PSCustomObject]@{path="HKLM:\Software\Policies\Microsoft\Windows\System";name="PublishUserActivities";value="PublishUserActivities";type="DWord"}
[PSCustomObject]@{path="HKLM:\Software\Policies\Microsoft\Windows\System";name="UploadUserActivities";value="0";type="DWord"}
# Einstellungen Sync
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync";name="DisableApplicationSettingSync";value="2";type="DWord"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync";name="DisableApplicationSettingSyncUserOverride";value="1";type="DWord"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync";name="DisableAppSyncSettingSync";value="2";type="DWord"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync";name="DisableAppSyncSettingSyncUserOverride";value="1";type="DWord"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync";name="DisableWebBrowserSettingSync";value="2";type="DWord"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync";name="DisableWebBrowserSettingSyncUserOverride";value="1";type="DWord"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync";name="DisableDesktopThemeSettingSync";value="2";type="DWord"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync";name="DisableDesktopThemeSettingSyncUserOverride";value="1";type="DWord"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync";name="DisableSyncOnPaidNetwork";value="1";type="DWord"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync";name="DisableCredentialsSettingSync";value="2";type="DWord"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync";name="DisableCredentialsSettingSyncUserOverride";value="1";type="DWord"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync";name="DisableSettingSync";value="2";type="DWord"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync";name="DisableSettingSyncUserOverride";value="1";type="DWord"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync";name="DisablePersonalizationSettingSync";value="2";type="DWord"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync";name="DisablePersonalizationSettingSyncUserOverride";value="1";type="DWord"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync";name="DisableStartLayoutSettingSync";value="2";type="DWord"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync";name="DisableStartLayoutSettingSyncUserOverride";value="1";type="DWord"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync";name="DisableWindowsSettingSync";value="2";type="DWord"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\SettingSync";name="DisableWindowsSettingSyncUserOverride";value="1";type="DWord"}
[PSCustomObject]@{path="HKCU:\SOFTWARE\Microsoft\Messaging";name="CloudServiceSyncEnabled";value="0";type="DWord"}
# Windows Defender
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows Defender";name="DisableAntiSpyware";value="1";type="DWord"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows Defender";name="AllowFastServiceStartup";value="0";type="DWord"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\MRT";name="DontReportInfectionInformation";value="1";type="DWord"}
[PSCustomObject]@{path="HKLM:\Software\Policies\Microsoft\Windows Defender\Signature Updates";name="DefinitionUpdateFileSharesSources";delete="1"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows Defender\Signature Updates";name="FallbackOrder";value="FileShares";type="String"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows Defender\Signature Updates";name="DisableUpdateOnStartupWithoutEngine";value="1";type="DWord"}
[PSCustomObject]@{path="HKLM:\Software\Policies\Microsoft\Windows Defender\Spynet!SpynetReporting HKLM\Software\Policies\Microsoft\Windows Defender\Spynet";name="SpynetReporting";value="0";type="DWord"}
[PSCustomObject]@{path="HKLM:\Software\Policies\Microsoft\Windows Defender\Spynet";name="SubmitSamplesConsent";value="0";type="DWord"}
[PSCustomObject]@{path="HKLM:\Software\Policies\Microsoft\Windows Defender\Spynet";name="DisableBlockAtFirstSeen";value="0";type="DWord"}
[PSCustomObject]@{path="HKLM:\Software\Policies\Microsoft\Windows Defender\Spynet";name="DisableBlockAtFirstSeen";value="1";type="DWord"}
[PSCustomObject]@{path="HKLM:\Software\Policies\Microsoft\Windows Defender\Spynet";name="LocalSettingOverrideSpynetReporting";value="0";type="DWord"}
# Windows Blickpunkt
[PSCustomObject]@{path="HKCU:\Software\Policies\Microsoft\Windows\CloudContent";name="ConfigureWindowsSpotlight";value="0";type="DWord"}
[PSCustomObject]@{path="HKCU:Software\Policies\Microsoft\Windows\CloudContent";name="IncludeEnterpriseSpotlight";value="0";type="DWord"}
[PSCustomObject]@{path="HKCU:\Software\Policies\Microsoft\Windows\CloudContent";name="DisableWindowsSpotlightOnSettings";value="0";type="DWord"}
[PSCustomObject]@{path="HKCU:\SOFTWARE\Policies\Microsoft\Windows\CloudContent";name="DisableWindowsSpotlightFeatures";value="1";type="DWord"}
[PSCustomObject]@{path="HKCU:\Software\Policies\Microsoft\Windows\CloudContent";name="DisableWindowsSpotlightOnActionCenter";value="0";type="DWord"}
[PSCustomObject]@{path="HKCU:\Software\Policies\Microsoft\Windows\CloudContent";name="DisableWindowsSpotlightOnSettings";value="0";type="DWord"}
[PSCustomObject]@{path="HKCU:\Software\Policies\Microsoft\Windows\CloudContent";name="DisableWindowsSpotlightWindowsWelcomeExperience";value="0";type="DWord"}
##[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\Personalization";name="LockScreenImage";value="C:\Windows\Web\screen\lockscreen.jpg";type="DWord"}
##[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\Personalization";name="LockScreenOverlaysDisabled";value="1";type="DWord"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\CloudContent";name="DisableWindowsConsumerFeatures";value="1";type="DWord"}
# Store
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\WindowsStore";name="DisableStoreApps";value="0";type="DWord"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\WindowsStore";name="AutoDownload ";value="1";type="DWord"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\WindowsStore";name="AutoDownload";value="2";type="DWord"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\WindowsStore";name="DisableOSUpgrade ";value="1";type="DWord"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\WindowsStore";name="RequirePrivateStoreOnly ";value="1";type="DWord"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\WindowsStore";name="RemoveWindowsStore ";value="1";type="DWord"}
)
# Servicevariable
$services = "diagtrack","dmwapppushsvc","dmwappushservice","RetailDemo"
# Taskvariable
$tasks = "Microsoft Compatibility Appraiser","ProgramDataUpdater","Consolidator","KernelCeipTask","UsbCeip","AnalyzeSystem","FamilySafetyMonitor","FamilySafetyRefresh","AitAgent","StartupAppTask","Proxy","BthSQM","Consolidator"
#DNS Adressenvaribale
$dnss = "a.ads1.msn.com","a.ads2.msn.com","a-0001.a-msedge.net","ad.doubleclick.net","adnexus.net","adnxs.com","ads.msn.com","ads1.msads.net","ads1.msn.com","az361816.vo.msecnd.net","az512334.vo.msecnd.net","ca.telemetry.microsoft.com","choice.microsoft.com","choice.microsoft.com.nsatc.net","compatexchange.cloudapp.net","corp.sts.microsoft.com","corpext.msitadfs.glbdns2.microsoft.com","cs1.wpc.v0cdn.net","df.telemetry.microsoft.com","diagnostics.support.microsoft.com","fe2.update.microsoft.com.akadns.net","feedback.microsoft-hohm.com","feedback.search.microsoft.com","feedback.windows.com","i1.services.social.microsoft.com","i1.services.social.microsoft.com.nsatc.net","oca.telemetry.microsoft.com","oca.telemetry.microsoft.com.nsatc.net","pre.footprintpredict.com","preview.msn.com","rad.msn.com","redir.metaservices.microsoft.com","reports.wes.df.telemetry.microsoft.com","services.wes.df.telemetry.microsoft.com","settings-sandbox.data.microsoft.com","sls.update.microsoft.com.akadns.net","spynet2.microsoft.com","spynetalt.microsoft.com","sqm.df.telemetry.microsoft.com","sqm.telemetry.microsoft.com","sqm.telemetry.microsoft.com.nsatc.net","ssw.live.com","statsfe1.ws.microsoft.com","statsfe2.update.microsoft.com.akadns.net","statsfe2.ws.microsoft.com","survey.watson.microsoft.com","telecommand.telemetry.microsoft.com","telecommand.telemetry.microsoft.com.nsatc.net","telemetry.appex.bing.net","telemetry.appex.bing.net:443","telemetry.microsoft.com","telemetry.urs.microsoft.com","vortex.data.microsoft.com","vortex-sandbox.data.microsoft.com","vortex-win.data.microsoft.com","watson.live.com","watson.microsoft.com","watson.ppe.telemetry.microsoft.com","watson.telemetry.microsoft.com","watson.telemetry.microsoft.com.nsatc.net","wes.df.telemetry.microsoft.com"
# DNS - Pfad für Hostdatei
$hostfile = [System.Environment]::ExpandEnvironmentVariables("%WINDIR%") + "\system32\drivers\etc\hosts"
# OneDrive Registry eintraege Deinstallation
$regOneDrive = @(
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\Windows\OneDrive";name="DisableFileSyncNGSC";value="1";type="DWord"}
[PSCustomObject]@{path="HKLM:\SOFTWARE\Policies\Microsoft\OneDrive";name="PreventNetworkTrafficPreUserSignIn";value="1";type="DWord"}
[PSCustomObject]@{path="HKCR:\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}";name="System.IsPinnedToNameSpaceTree";value="0";type="DWord"}
[PSCustomObject]@{path="HKCR:\Wow6432Node\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}";name="System.IsPinnedToNameSpaceTree";value="0";type="DWord"}
)
# OneDrive Folder
$OneDriveFolder = @(
[PSCustomObject]@{name=[System.Environment]::ExpandEnvironmentVariables("%USERPROFILE%") + "OneDrive"}
[PSCustomObject]@{name="C:\OneDriveTemp"}
[PSCustomObject]@{name=[System.Environment]::ExpandEnvironmentVariables("%LOCALAPPDATA%") + "\Microsoft\OneDrive"}
[PSCustomObject]@{name=[System.Environment]::ExpandEnvironmentVariables("%PROGRAMDATA%") + "\Microsoft OneDrive"}
)
# Apps deinsatllation
# Gekennzeichnete Apps (##) sollten nicht entfernt werden
$apps = @(
[PSCustomObject]@{name="*EclipseManager"}
[PSCustomObject]@{name="*PicsArt-PhotoStudio"}
[PSCustomObject]@{name="*Twitter"}
[PSCustomObject]@{name="AdobeSystemsIncorporated.AdobePhotoshopExpress"}
[PSCustomObject]@{name="Microsoft.3DBuilder"}
[PSCustomObject]@{name="Microsoft.Appconnector"}
[PSCustomObject]@{name="Microsoft.BingNews"}
[PSCustomObject]@{name="Microsoft.BingWeather"}
[PSCustomObject]@{name="Microsoft.BingFinance"}
[PSCustomObject]@{name="Microsoft.BingSports"}
[PSCustomObject]@{name="Microsoft.FreshPaint"}
[PSCustomObject]@{name="Microsoft.GetHelp"}
[PSCustomObject]@{name="Microsoft.Getstarted"}
##[PSCustomObject]@{name="Microsoft.DesktopAppInstaller"}
[PSCustomObject]@{name="Microsoft.Messaging"}
[PSCustomObject]@{name="Microsoft.Microsoft3DViewer"}
[PSCustomObject]@{name="Microsoft.MicrosoftOfficeHub"}
[PSCustomObject]@{name="Microsoft.MicrosoftPowerBIForWindows"}
[PSCustomObject]@{name="Microsoft.MicrosoftSolitaireCollection"}
[PSCustomObject]@{name="Microsoft.MicrosoftStickyNotes"}
[PSCustomObject]@{name="Microsoft.MSPaint"}
[PSCustomObject]@{name="Microsoft.Office.Sway"}
[PSCustomObject]@{name="Microsoft.Office.OneNote"}
[PSCustomObject]@{name="Microsoft.OneConnect"}
[PSCustomObject]@{name="Microsoft.People"}
[PSCustomObject]@{name="Microsoft.Print3D"}
[PSCustomObject]@{name="Microsoft.SkypeApp"}
##[PSCustomObject]@{name="Microsoft.StorePurchaseApp"}
[PSCustomObject]@{name="Microsoft.Wallet"}
##[PSCustomObject]@{name="Microsoft.WebMediaExtensions"}
##[PSCustomObject]@{name="Microsoft.WindowsAlarms"}
##[PSCustomObject]@{name="Microsoft.WindowsCalculator"}
##[PSCustomObject]@{name="Microsoft.WindowsCamera"}
[PSCustomObject]@{name="microsoft.windowscommunicationsapps"}
[PSCustomObject]@{name="Microsoft.WindowsFeedbackHub"}
[PSCustomObject]@{name="Microsoft.WindowsMaps"}
[PSCustomObject]@{name="Microsoft.WindowsPhone"}
##[PSCustomObject]@{name="Microsoft.Windows.Photos"}
##[PSCustomObject]@{name="Microsoft.WindowsSoundRecorder"}
##[PSCustomObject]@{name="Microsoft.WindowsStore"}
[PSCustomObject]@{name="Microsoft.XboxApp"}
[PSCustomObject]@{name="Microsoft.Xbox.TCUI"}
[PSCustomObject]@{name="Microsoft.XboxGameOverlay"}
[PSCustomObject]@{name="Microsoft.XboxGamingOverlay"}
[PSCustomObject]@{name="Microsoft.XboxIdentityProvider"}
[PSCustomObject]@{name="Microsoft.XboxSpeechToTextOverlay"}
[PSCustomObject]@{name="Microsoft.ZuneMusic"}
[PSCustomObject]@{name="Microsoft.ZuneVideo"}
)
Import-Module -DisableNameChecking $PSScriptRoot\..\lib\force-mkdir.psm1
Import-Module -DisableNameChecking $PSScriptRoot\..\lib\take-own.psm1
$ErrorActionPreference = "SilentlyContinue"
# Reg-Eintraege schreiben
foreach($r in $reg){
if(!$r.delete){
if(Test-Path $r.path){
New-ItemProperty -Path $r.path -Name $r.name -Value $r.value -PropertyType $r.type -Force | Out-Null
}
else{
New-Item -Path $r.path -Force | Out-Null
New-ItemProperty -Path $r.path -Name $r.name -Value $r.value -PropertyType $r.type -Force | Out-Null
}
}
else{
Remove-ItemProperty -Path $r.path -Name $r.name
}
}
#Firewallconfig
# Cortanasuche web
New-NetFirewallRule -DisplayName "Cortana Websuche disabled" -Direction Outbound -Program "%windir%\systemapps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe" -Action Block -Profile Any -Protocol TCP -LocalPort Any -RemotePort Any
# Service stoppen und deaktivieren
foreach($service in $services){
if(Get-Service $service){
Stop-Service $service
Set-Service $service -StartupType disabled
}
}
# Task deaktivieren
foreach($task in $tasks){
$t = Get-ScheduledTask $task
if($t.TaskName -contains $tasks){
if($t.State -ine "disabled"){
Disable-ScheduledTask $t
}
}
}
# Host-Datei erweitern
foreach($dns in $dnss){
if ( -not (Select-String -path $hostfile -pattern "$dns" -Quiet)) {
"0.0.0.0 $dns" >> $hostfile
}
}
# Deinstallation OneDrive
# Task beenden
taskkill.exe /F /IM "OneDrive.exe"
taskkill.exe /F /IM "explorer.exe"
# Uninsall
if (Test-Path "$env:systemroot\System32\OneDriveSetup.exe") {
& "$env:systemroot\System32\OneDriveSetup.exe" /uninstall
}
if (Test-Path "$env:systemroot\SysWOW64\OneDriveSetup.exe") {
& "$env:systemroot\SysWOW64\OneDriveSetup.exe" /uninstall
}
# Reg-Eintraege anpassen
foreach($r in $regOneDrive){
if(Test-Path $r.path){
New-ItemProperty -Path $r.path -Name $r.name -Value $r.value -PropertyType $r.type -Force | Out-Null
}
else{
New-Item -Path $r.path -Force | Out-Null
New-ItemProperty -Path $r.path -Name $r.name -Value $r.value -PropertyType $r.type -Force | Out-Null
}
}
#Verzeichnisse loeschen
foreach($f in $OneDriveFolder){
if(Test-Path $r.name){
Remove-Item -Path "C:\test" -Recurse -Force
}
}
# Apps loeschen
foreach($a in $apps){
# neue Benutzer
Get-AppxProvisionedPackage -Online | Where-Object {$_.PackageName -Like $a.name} | ForEach-Object { Remove-AppxProvisionedPackage -Online -PackageName $_.PackageName}
# aktueller Benutzer
Get-AppxPackage $a.name | Remove-AppxPackage
}
Weitere Links
Deaktivierung der Datensammlung und Weitergabe an Microsoft über GPO
Das könnte dich auch interessieren
Tool zur Konfigurierung Windows 10 Datenschutz
Datenschutz und Sicherheit in Chrome über GPO
2 Kommentare
Pingback:
Pingback: