6 ms·

I saw this tool being recommended in r/windows10. I have tried it, no issues so far, though haven't tested to see if it does disable telemetry. https://www.oo-

by ssvss 8y ago

I saw this tool being recommended in r/windows10. I have tried it, no issues so far, though haven't tested to see if it does disable telemetry. https://www.oo-software.com/en/shutup10 https://www.oo-software.com/en/shutup10

eastendguy 8y ago
The point of the report above is that you can NOT disable all telemetry, not even in the Enterprise version of Windows.
- tjoff 8y ago
  ...through official means. I don't for a second doubt you can turn it off completely. But unofficial solutions come with tons of potential issues.
  - metildaa 8y ago
    Could just block all communication with Microsoft by the OS. Or, move to non-Windows OSes like the retail giants already have. Kroger and Walmart run Suse Enterprise Linux (relevant Uptime Funk reference) https://www.youtube.com/watch?v=SYRlTISvjww https://www.youtube.com/watch?v=SYRlTISvjww
    - Spooky23 8y ago
      Not in a government or business environment using Office 365. 365 requires all sorts of open connectivity to function.
      - metildaa 8y ago
        If your using Office 365, telemetry in Windows is the least of your concern.
    - Dylan16807 8y ago
      > Could just block all communication with Microsoft by the OS. Easier said than done when there's a minefield of firewall-bypasses for it.
      - rasz 8y ago
        Care to elaborate? Afaik and tested w10 does NOT bypass its own firewall when set to 'drop all' traffic.
        Dylan16807 8y ago
        From what I've seen "drop all" works at the moment but directly blocking the telemetry programs keeps getting undone whenever the file changes and it intentionally doesn't use the hosts file.
        rasz 8y ago
        Dont know what you mean by undone, but running firewall in drop all + whitelisting works fine and block all telemetry (one caveat : dnscache needs to be disabled to remove possibility of dns tunneling)
        Dylan16807 8y ago
        From what I remember, when you say "block all connections by this program" on the relevant files it doesn't just use the filename, it tracks the exact version of the file, and as soon as windows update touches it your firewall block stops working. So a whitelist method works, good, but I think it's fair to said that specifically blocking telemetry is extremely difficult with the way blacklisting works.
Pica_soO 8y ago
One has to love those little parasite riding a parasite schemes. Like a fleas flea. I provide a tool, cutting you off from revenue- now you can ride the service rodeo all you want- but if you pay well, i shall cease to update, i might even reactivate the telemetry by accident.
forrestthewoods 8y ago
This tool is great. Only problem is you have to regularly re-run it because Windows Update will revert changes.
- AnIdiotOnTheNet 8y ago
  Yep, which is why you disable Windows Update too. The people who work on Windows these days should probably all be fired. Out of a cannon. Into the sun.
  - ricardonunez 8y ago
    Telling users to disable updates it's not a good recommendation.
    - Spooky23 8y ago
      Sure it is. Microsoft software deployment on client is a dumpster fire. Blindly installing Windows updates these days is very dangerous and should be avoided. Your best approach for avoiding malware is to use browsers like Firefox and Chrome. Critical task workflows should be in LTSB, iOS or ChromeOS. Microsoft’s guidance is to have around four deployment rings each for Windows and Office, and only immediately patch 10-20% of your enterprise environment and defer to avoid impacts from the quality issues that are very common as Microsoft is supporting like a half dozen Windows 10s. See: https://docs.microsoft.com/en-us/windows/deployment/update/waas-deployment-rings-windows-10-updates https://docs.microsoft.com/en-us/windows/deployment/update/w...
      - wtallis 8y ago
        Yep. All of the Windows machines that I actually rely on for work—the ones that I need to be able to start up and immediately use, and need to be able to trust them to keep running without interruption or regression—are completely firewalled off from the public internet, so that they are secure both from malware, and unwanted updates. The rest of my work is done on other, more obedient operating systems. Windows 95 was capable of 49.7 days of uptime. That's pretty difficult on client versions of Windows 10 unless you take extraordinary measures.

by ssvss 8y ago

eastendguy 8y ago

The point of the report above is that you can NOT disable all telemetry, not even in the Enterprise version of Windows.

tjoff 8y ago
...through official means. I don't for a second doubt you can turn it off completely. But unofficial solutions come with tons of potential issues.
- metildaa 8y ago
  Could just block all communication with Microsoft by the OS. Or, move to non-Windows OSes like the retail giants already have. Kroger and Walmart run Suse Enterprise Linux (relevant Uptime Funk reference) https://www.youtube.com/watch?v=SYRlTISvjww https://www.youtube.com/watch?v=SYRlTISvjww
  - Spooky23 8y ago
    Not in a government or business environment using Office 365. 365 requires all sorts of open connectivity to function.
    - metildaa 8y ago
      If your using Office 365, telemetry in Windows is the least of your concern.
  - Dylan16807 8y ago
    > Could just block all communication with Microsoft by the OS. Easier said than done when there's a minefield of firewall-bypasses for it.
    - rasz 8y ago
      Care to elaborate? Afaik and tested w10 does NOT bypass its own firewall when set to 'drop all' traffic.
      - Dylan16807 8y ago
        From what I've seen "drop all" works at the moment but directly blocking the telemetry programs keeps getting undone whenever the file changes and it intentionally doesn't use the hosts file.
        rasz 8y ago
        Dont know what you mean by undone, but running firewall in drop all + whitelisting works fine and block all telemetry (one caveat : dnscache needs to be disabled to remove possibility of dns tunneling)
        Dylan16807 8y ago
        From what I remember, when you say "block all connections by this program" on the relevant files it doesn't just use the filename, it tracks the exact version of the file, and as soon as windows update touches it your firewall block stops working. So a whitelist method works, good, but I think it's fair to said that specifically blocking telemetry is extremely difficult with the way blacklisting works.

Pica_soO 8y ago

One has to love those little parasite riding a parasite schemes. Like a fleas flea. I provide a tool, cutting you off from revenue- now you can ride the service rodeo all you want- but if you pay well, i shall cease to update, i might even reactivate the telemetry by accident.

forrestthewoods 8y ago

This tool is great. Only problem is you have to regularly re-run it because Windows Update will revert changes.

AnIdiotOnTheNet 8y ago
Yep, which is why you disable Windows Update too. The people who work on Windows these days should probably all be fired. Out of a cannon. Into the sun.
- ricardonunez 8y ago
  Telling users to disable updates it's not a good recommendation.
  - Spooky23 8y ago
    Sure it is. Microsoft software deployment on client is a dumpster fire. Blindly installing Windows updates these days is very dangerous and should be avoided. Your best approach for avoiding malware is to use browsers like Firefox and Chrome. Critical task workflows should be in LTSB, iOS or ChromeOS. Microsoft’s guidance is to have around four deployment rings each for Windows and Office, and only immediately patch 10-20% of your enterprise environment and defer to avoid impacts from the quality issues that are very common as Microsoft is supporting like a half dozen Windows 10s. See: https://docs.microsoft.com/en-us/windows/deployment/update/waas-deployment-rings-windows-10-updates https://docs.microsoft.com/en-us/windows/deployment/update/w...
    - wtallis 8y ago
      Yep. All of the Windows machines that I actually rely on for work—the ones that I need to be able to start up and immediately use, and need to be able to trust them to keep running without interruption or regression—are completely firewalled off from the public internet, so that they are secure both from malware, and unwanted updates. The rest of my work is done on other, more obedient operating systems. Windows 95 was capable of 49.7 days of uptime. That's pretty difficult on client versions of Windows 10 unless you take extraordinary measures.