February 9, 2017

Blocking Telemetry in Windows 7 and 8.1

Microsoft pushed patches to devices running Windows 7 and 8.1 in recent time that collect information and transfer data to Microsoft regularly.
One of the main issues that Windows users may have with telemetry is that Microsoft does not reveal what it is collecting, and what is included when telemetry data is transferred to the company.
The following tutorial provides suggestions on limiting Windows data collecting and transferring. There is no guarantee that nothing is collected and/or submitted after making privacy related changes to the operating system, but a guarantee that data collecting is severely limited at the very least.
Information taken from various places around the Internet including this Ask Woody comment, this German forum post, and Günter Born's post.

Blocking Telemetry in Windows 7 and 8.1



The following Windows updates are related to telemetry and diagnostic data.
  • KB971033-- Description of the update for Windows Activation Technologies
  • KB2952664 -- Compatibility update for keeping Windows up-to-date in Windows 7
  • KB2976978 -- Compatibility update for keeping Windows up-to-date in Windows 8.1 and Windows 8
  • KB2990214 -- Update that enables you to upgrade from Windows 7 to a later version of Windows
  • KB3021917 -- Update to Windows 7 SP1 for performance improvements
  • KB3022345 -- Update for customer experience and diagnostic telemetry
  • KB3035583 -- Update installs Get Windows 10 app in Windows 8.1 and Windows 7 SP1
  • KB3044374 -- Update that enables you to upgrade from Windows 8.1 to Windows 10
  • KB3068708 --  Update for customer experience and diagnostic telemetry
  • KB3075249 -- Update that adds telemetry points to consent.exe in Windows 8.1 and Windows 7
  • KB3080149 -- Update for customer experience and diagnostic telemetry
  • KB3123862 -- Updated capabilities to upgrade Windows 8.1 and Windows 7
You can remove any of the patches using two methods:
  1. Tap on the Windows-key, type Windows Update, and hit the Enter-key.
  2. Select Installed Updates on the window that opens.
  3. Right-click on updates and select uninstall to remove them from the system.
Second method uses the command line instead:
  1. Tap on the Windows-key, type cmd.exe, hold down Shift and Ctrl, and hit the Enter-key. This opens an elevated command prompt.
  2. Use the command wusa /uninstall /kb:3080149 /quiet /norestart to remove updates.
  3. Replace the number after kb: with the update that you want to remove.
Make sure you hide any update that you have removed, as it will be picked up by Windows again the next time Windows Update checks for update.

Turn off the Customer Experience Improvement Program



We have posted a tutorial already that explains how to turn off the Customer Experience Improvement Program.
Basically, what you do is click on Start, type customer experience, and select the "change customer experience improvement program settings" result. Select "No, I don't want to participate in the program" when the new settings window opens.

Remove the Telemetry service

Next thing on the list is to remove the Diagnostic Tracking service. Open an elevated command prompt -- if it is not still open -- and run the following commands:
  1. sc stop Diagtrack
  2. sc delete Diagtrack
The first command stops the Diagtrack service, the second deletes it.

Blocking Microsoft Servers

Note: the following servers cannot be blocked using the hosts file. You need to block them using another means, e.g. router firewall or installed firewall.
  • onesettings-hk2.metron.live.com.nsatc.net
  • onesettings-bn2.metron.live.com.nsatc.net
  • onesettings-cy2.metron.live.com.nsatc.net
  • vortex-hk2.metron.live.com.nsatc.net
  • vortex-db5.metron.live.com.nsatc.net
Other servers you may want to block:
  • 134.170.30.202
  • 137.116.81.24
  • 204.79.197.200
  • 23.218.212.69
  • 65.39.117.230
  • 65.55.108.23
  • a-0001.a-msedge.net
  • choice.microsoft.com
  • choice.microsoft.com.nsatc.net
  • compatexchange.cloudapp.net
  • corp.sts.microsoft.com
  • corpext.msitadfs.glbdns2.microsoft.com
  • cs1.wpc.v0cdn.net
  • df.telemetry.microsoft.com
  • diagnostics.support.microsoft.com
  • fe2.update.microsoft.com.akadns.net
  • feedback.microsoft-hohm.com
  • feedback.search.microsoft.com
  • feedback.windows.com
  • i1.services.social.microsoft.com
  • i1.services.social.microsoft.com.nsatc.net
  • oca.telemetry.microsoft.com
  • oca.telemetry.microsoft.com.nsatc.net
  • pre.footprintpredict.com
  • redir.metaservices.microsoft.com
  • reports.wes.df.telemetry.microsoft.com
  • services.wes.df.telemetry.microsoft.com
  • settings-sandbox.data.microsoft.com
  • settings-win.data.microsoft.com
  • sls.update.microsoft.com.akadns.net
  • sqm.df.telemetry.microsoft.com
  • sqm.telemetry.microsoft.com
  • sqm.telemetry.microsoft.com.nsatc.net
  • statsfe1.ws.microsoft.com
  • statsfe2.update.microsoft.com.akadns.net
  • statsfe2.ws.microsoft.com
  • survey.watson.microsoft.com
  • telecommand.telemetry.microsoft.com
  • telecommand.telemetry.microsoft.com.nsatc.net
  • telemetry.appex.bing.net
  • telemetry.appex.bing.net:443
  • telemetry.microsoft.com
  • telemetry.urs.microsoft.com
  • vortex.data.microsoft.com
  • vortex-sandbox.data.microsoft.com
  • vortex-win.data.microsoft.com
  • watson.live.com
  • watson.microsoft.com
  • watson.ppe.telemetry.microsoft.com
  • watson.telemetry.microsoft.com
  • watson.telemetry.microsoft.com.nsatc.net
  • wes.df.telemetry.microsoft.com

Deleting Scheduled Tasks



Windows 7 and 8.1 run a lot of tasks that send data to Microsoft.
  1. Tap on the Windows-key, type Task Scheduler, and hit the Enter-key.
  2. Navigate to Microsoft > Windows in the task hierarchy, and delete (or disable) the following tasks:
  3. All tasks with Application Experience.
  4. All tasks with Autochk.
  5. All tasks with Customer Experience Improvement Program.
  6. DiskDiagnosticDataCollector under DiskDiagnostic.
  7. WinSAT under Maintenance.
  8. Deactivate all Media Center tasks.

Closing Words

There is always the chance that new updates will add new services or tasks. This is why it is recommended to set Windows Update to inform but not download and install automatically.
Source: http://www.ghacks.net/2017/02/11/blocking-telemetry-in-windows-7-and-8-1/