Avoiding telemetry Windows 7/ 8.1

carrierPigeon

Limp Gawd
Joined
Sep 22, 2017
Messages
162
There is a lot of mention of abilities/efforts to avoid telemetry in windows 7 and 8.1.

To go through the history, it seems that at first Microsoft rolled out telemetry to these operating systems as an optional update, then they rolled it out as a required update/ disguised as something else. Some users address the issue by monitoring their list of updates vs the list of "problematic" updates (not getting the update or removing the update).

I also understand that there is Spybot anti-beacon, which seems to be a less popular approach on this forum.

I think I also came across a github project that is related but I can't seem to put my finger on it right now.

I'd imagine there are also versions of these operating systems that have limited telemetry-- industry/ government computers that demand more privacy (perhaps enterprise versions, maybe server versions). I suppose those are the best options (compared to other mentions in this post), but not easily available.

Of course, some of what I have read (in gathering the above information) could be outdated as a lot of it was 1-4 year old.

Are these options all still available? How shaky or firm is the avoiding/removing various updates path?
 
You can find an updated list (through the June 2018 "Patch Tuesday" last week) here:

https://pastebin.com/jWX2zHdr

<Blah blah fucking blah OMG another change to bash Microsoft, hurray!>

And I have to ask: where the hell did that Github diatribe above come from, and what the hell does it have to do with some Windows Updates? I mean, really? :bored::whistle::rolleyes:
 
Last edited by a moderator:
OP - Spybots anti beacon seems to work pretty well. I don’t know if it removes updates, but it blocks the communication to Microsoft’s servers at least. It’s regularly updated to keep up with Microsoft’s changes and is from a very trusted company.
 
Heatlesssun and Boonie.......What the hell is wrong with you people.....answer the question, or move along.
enough with the BS dick waving
 
Here's the batch file I use
Code:
@echo off

echo "Compatibility" update for upgrading Windows 7
wusa /uninstall /kb:2952664 /quiet /norestart
echo "Compatibility" update for Windows 7 RTM
wusa /uninstall /kb:2977759 /quiet /norestart
echo Update that enables you to upgrade from Windows 7 to a later version of Windows
wusa /uninstall /kb:2990214 /quiet /norestart
echo Update that adds telemetry points to consent.exe in Windows 8.1 and Windows 7
wusa /uninstall /kb:3015249 /quiet /norestart
echo Update to Windows 7 SP1 for performance improvements
wusa /uninstall /kb:3021917 /quiet /norestart
echo Update for customer experience and diagnostic telemetry
wusa /uninstall /kb:3022345 /quiet /norestart
echo Update installs Get Windows 10 app in Windows 8.1 and Windows 7 SP1
wusa /uninstall /kb:3035583 /quiet /norestart
echo Update that enables you to upgrade from Windows 8.1 to a later version of Windows
wusa /uninstall /kb:3044374 /quiet /norestart
echo Update for customer experience and diagnostic telemetry
wusa /uninstall /kb:3068708 /quiet /norestart
echo Update that adds telemetry points to consent.exe in Windows 8.1 and Windows 7
wusa /uninstall /kb:3075249 /quiet /norestart
echo Update for customer experience and diagnostic telemetry
wusa /uninstall /kb:3080149 /quiet /norestart
echo Updated capabilities to upgrade Windows 8.1 and Windows 7
wusa /uninstall /kb:3123862 /quiet /norestart
echo Updated Internet Explorer 11 capabilities to upgrade Windows 8.1 and Windows 7
wusa /uninstall /kb:3146449 /quiet /norestart

pause
 
Why uninstall performance improvement? :)

Do you have undocumented info about these updates?
 
No I have documented info: http://support.microsoft.com/kb/3021917
This update performs diagnostics in Windows 7 Service Pack 1 (SP1) in order to determine whether performance issues may be encountered when the latest Windows operating system is installed. Telemetry is sent back to Microsoft for those computers that participate in the Windows Customer Experience Improvement Program (CEIP). This update will help Microsoft and its partners deliver better system performance for customers who are seeking to install the latest Windows operating system.

In other words, jack all to do with performance, just data collection.

Edit: :)
 
Last edited:
Here's the batch file I use
Code:
@echo off

echo "Compatibility" update for upgrading Windows 7
wusa /uninstall /kb:2952664 /quiet /norestart
echo "Compatibility" update for Windows 7 RTM
wusa /uninstall /kb:2977759 /quiet /norestart
echo Update that enables you to upgrade from Windows 7 to a later version of Windows
wusa /uninstall /kb:2990214 /quiet /norestart
echo Update that adds telemetry points to consent.exe in Windows 8.1 and Windows 7
wusa /uninstall /kb:3015249 /quiet /norestart
echo Update to Windows 7 SP1 for performance improvements
wusa /uninstall /kb:3021917 /quiet /norestart
echo Update for customer experience and diagnostic telemetry
wusa /uninstall /kb:3022345 /quiet /norestart
echo Update installs Get Windows 10 app in Windows 8.1 and Windows 7 SP1
wusa /uninstall /kb:3035583 /quiet /norestart
echo Update that enables you to upgrade from Windows 8.1 to a later version of Windows
wusa /uninstall /kb:3044374 /quiet /norestart
echo Update for customer experience and diagnostic telemetry
wusa /uninstall /kb:3068708 /quiet /norestart
echo Update that adds telemetry points to consent.exe in Windows 8.1 and Windows 7
wusa /uninstall /kb:3075249 /quiet /norestart
echo Update for customer experience and diagnostic telemetry
wusa /uninstall /kb:3080149 /quiet /norestart
echo Updated capabilities to upgrade Windows 8.1 and Windows 7
wusa /uninstall /kb:3123862 /quiet /norestart
echo Updated Internet Explorer 11 capabilities to upgrade Windows 8.1 and Windows 7
wusa /uninstall /kb:3146449 /quiet /norestart

pause
Thanks for sharing this. I ran it and found only 1 that was installed which was then removed after a reboot. After the restart, I went to updates and hid that KB from showing up again.
 
Window 8.1 Embedded Industry Pro doesn't have any of those updates in the "important updates" list.
Is it more likely that they just name them something else or do they actually just not have them?
 
Window 8.1 Embedded Industry Pro doesn't have any of those updates in the "important updates" list.
Is it more likely that they just name them something else or do they actually just not have them?
Alerts 1

I've read about the upcoming Anti Beacon 3.0, and found downloads for 2.6, but I can't find a 32 bit installer for Windows 7. Can anyone help?
 
I have a list of methods people can use to disable and block telemetry in this blog post: https://linustechtips.com/main/blogs/entry/1102-disabling-windows-7-8-10-telemetry-data-collection/


I didn't have this updated telemetry-update list, though. I'll add it:

You can find an updated list (through the June 2018 "Patch Tuesday" last week) here:

https://pastebin.com/jWX2zHdr



Another method you can use is to install Windows 7 from a June 2015-updated ISO, and then disable Windows Update permanently. Microsoft started back-adding telemetry to Windows 7 after that point.

If a person is concerned about security, they can get up-to-date protection from running an anti-virus program, MalwareBytes, Spybot, etc.

I have a June 2015-updated ISO of Windows 7 Ultimate 64 for download, here:

https://linustechtips.com/main/blog...dates-blockers-oct-16-oct17-security-updates/

You'll need your own license key for Windows 7 Ultimate 64 in order to install it. One can be bought easily on eBay, reddit, and elsewhere for a few dollars.
 
You can find an updated list (through the June 2018 "Patch Tuesday" last week) here:

https://pastebin.com/jWX2zHdr

How do you determine whether to install the new updates that windows has released June - Oct.
I see that Microsoft publishes information about each update. However, nothing sounds "bad."
Here is the windows 8.1 list that I looked through:
https://support.microsoft.com/en-us/help/4009470
Also, here is the Windows 7 SP1 list
https://support.microsoft.com/en-us/help/4009469
 
I use the simplix Update Pack each month that it's released, making a new install.wim file each time as needed for my standard installation ISO.

https://blog.simplix.info/update7/

Site is in Russian so you'll need a translation of it if you not able to read the language; if you visit using Chrome it will offer to auto-translate it well enough. Been using that update pack for years now, never had issues, always works just fine for me. Has the stuff people actually want and can make use of, avoids anything that's questionable or related to telemetry.
 
I use the simplix Update Pack each month that it's released, making a new install.wim file each time as needed for my standard installation ISO.

https://blog.simplix.info/update7/

Site is in Russian so you'll need a translation of it if you not able to read the language; if you visit using Chrome it will offer to auto-translate it well enough. Been using that update pack for years now, never had issues, always works just fine for me. Has the stuff people actually want and can make use of, avoids anything that's questionable or related to telemetry.
Thank you. I copied and pasted a couple of paragraphs/ titles one by one into the Google translate page but it's a bit tough to decipher.
I think the site is telling you which updates get the thumbs up and which get the thumbs down?
 
It provides a lot of info, yes, but realistically all you need to focus on is creating the updated install.wim file and that literally can be done with just a single line of code (as explained on the page). Yes the translation is a bit iffy but the info is there. If you use the update pack to create a fully updated (by fully I mean making it current with the latest update pack, obviously as stated the telemetry and other BS never makes it into these packs) and you start with an original untouched Windows 7 SP1 install.wim file the process could take an hour or longer because it's adding in 280+ updates so it takes time. Both x86 and x64 updates are included in the one big update pack so you can use it to handle both architectures if needed.

Because I keep my install.wim updated with each new update pack, the actual creation time is a few minutes now since it only has to integrate a handful or less with each new monthly update. Doing it with that pure SP1 install.wim takes much much longer as stated. Once you get it updated, doing this monthly with new releases of the update pack is much faster.
 
Its humorous that telemetry even made it into 7.. Almost like they try to understand why people still use it and totally ignore the data. Just sucking up resources to phone home..
 
you have to make sure to also avoid intel and nvidai telemetry.

check your task scheduler
 
Just set up a PiHole.
This. Or, the option to run it on pfsense exists. The package is called pfblockerng.

With pihole or pfsense, you also gain the benefit of protecting all devices on your network from additional sources. For example, sites known as malicious, obtrusive ads (or ads altogether), gambling sites, social media sites, etc. All of this handled at the DNS level, including blocking telemetry. The lists are updated automatically, so once you set it up and configure it, you just keep it running and it'll do all the blocking you need.
 
This. Or, the option to run it on pfsense exists. The package is called pfblockerng.

With pihole or pfsense, you also gain the benefit of protecting all devices on your network from additional sources. For example, sites known as malicious, obtrusive ads (or ads altogether), gambling sites, social media sites, etc. All of this handled at the DNS level, including blocking telemetry. The lists are updated automatically, so once you set it up and configure it, you just keep it running and it'll do all the blocking you need.

What's more, it'll block telemetry on every Windows machine on the network - Simple.

I couldn't believe the number of phone home attempts under a fresh install of Windows 10 using Wireshark. Very concerning, especially considering I couldn't see what the encrypted packets contained.
 
What's more, it'll block telemetry on every Windows machine on the network - Simple.

I couldn't believe the number of phone home attempts under a fresh install of Windows 10 using Wireshark. Very concerning, especially considering I couldn't see what the encrypted packets contained.
I have read that a lot of the big tech companies have many domains, perhaps over 100. So, you might need to update your strategy down the road.
For a home user, I wonder about disconnecting from the internet before boot, but that's a big hassle, of course.
 
I have read that a lot of the big tech companies have many domains, perhaps over 100. So, you might need to update your strategy down the road.
For a home user, I wonder about disconnecting from the internet before boot, but that's a big hassle, of course.
You're right about the amount of domains. These are typically touted as the best lists. Check out some of the domains in them.
https://firebog.net
 
Back
Top