3 ms·
You don‘t need any third-party tools for that. Since Windows Vista and Windows XP SP3 the inbuilt Windows Firewall can take care of all that. Just create a rul
by lwkl 8y ago
You don‘t need any third-party tools for that. Since Windows Vista and Windows XP SP3 the inbuilt Windows Firewall can take care of all that.
Just create a rule that denies internet access for the telemetry service. It can be configured by GUI and script.
- laumars 8y agoThe point of Zone Alarm and it's ilk is that you can have deny all rules and you'd get a desktop notification when an application attempts to make an outbound connection - which you can then approve or deny. As far as I know Windows firewall doesn't do this. Thus with Windows firewall you'd need to know all of the services you want to block up front - which is definitely not that easy for experts let alone the novices the GP was discussing.
- lwkl 8y agoThe way you describe it would not be feasible for a novice either. Almost every piece of software you use today needs internet access. That‘s why Microsoft delivers Windows with sane Firewall rules and just asks if you‘re in a trusted network and adjusts the firewall rules based on that. Also most software developers configure firewall rules during setup. If a unknown executable will try to access the internet there is a pop-up like you described that asks you if you want to allow access. Anyways the OP was asking if there are any tools available to the basic user to deny internet access for these telemtry services and there is the inbuilt Windows Firewall. I even found a script [0] that does what the OP is looking for. I‘m not sure if it‘s up to date though. All the information needed to update the script is published in the public documentation provided by Microsoft though. Thanks to GDPR you have extensive documentation on all things telemtry related to Windows 10 and Microsoft Office. For most users setting their telemetry settings to basic should suffice. [0] https://winaero.com/blog/stop-windows-10-spying-on-you-using-just-windows-firewall/ https://winaero.com/blog/stop-windows-10-spying-on-you-using...
- laumars 8y ago> The way you describe it would not be feasible for a novice either. Almost every piece of software you use today needs internet access. That‘s why Microsoft delivers Windows with sane Firewall rules and just asks if you‘re in a trusted network and adjusts the firewall rules based on that. Also most software developers configure firewall rules during setup. If a unknown executable will try to access the internet there is a pop-up like you described that asks you if you want to allow access. You're assuming that Zone Alarm et al wouldn't also contain sane defaults ;) > Anyways the OP was asking if there are any tools available to the basic user to deny internet access for these [telemetry] services To which I offered one possible solution > and there is the inbuilt Windows Firewall. Windows firewall is not novice friendly though. This is why -and at risk of repeating myself- I suggested a 3rd party solution that was designed specifically for home users who might not be technical rather than suggesting Windows firewall. Contrary to what you seem to assume, I was aware of the existence of Windows firewall before your post however I wanted to suggest something that I felt might be more accessible for non-techies. > I even found a script [0] that does what the OP is looking for. I‘m not sure if it‘s up to date though. All the information needed to update the script is published in the public documentation provided by Microsoft though. Thanks to GDPR you have extensive documentation on all things [telemetry] related to Windows 10 and Microsoft Office. For most users setting their telemetry settings to basic should suffice. At least now you're finally starting to contribute something to the question rather than dismantling anyone else who was trying to help :) However your "novice friendly" suggestion requires manual steps to be kept updated - which have to be manually researched - and is installed via dozens of lines of code into cmd.exe. I think you and I have very different ideas about just how capable the average novice is. While I do actually prefer your solution from a technology ideology, it's definitely more of a power-user solution than something I'd expect novices to do. However at least the GP now has two solutions he can choose from.
- lwkl 8y agoFirst: I'm sorry if I came of as aggressive. That wasn't my intention. > You're assuming that Zone Alarm et al wouldn't also contain sane defaults ;) I worked with third party firewalls and that is the case. They also are most of the time really similar to the Windows default. My point is the Windows Firewall is a really good product. It's easy to understand for a normal user since it basically asks if you trust the network when you join it. This means no technical knowledge is needed for a sane configuration. Most normal users I know are overwhelmed by the Pop-Up they get when the Windows Firewall asks them if they want to allow Internet access for a unknown application. The problem is there is no good solution to avoid the collection of telemetry data for the basic Windows user. But this is not a problem with Windows, this is a problem with most software in the year 2018. Since telemetry is everywhere and it's used more and more. If a basic Windows User is really privacy conscious they should jsut configure the settings at the first login (I think they are easy enough to understand and you can disable most of the data collection there) or get a professional help them setup their system. Edit: The following link provides information about the data collected by Windows: https://docs.microsoft.com/en-us/windows/privacy/ https://docs.microsoft.com/en-us/windows/privacy/