Windows 10 build 1809 + LTSC Privacy and Telemetry components

[Clanger]

im certain garlin has mentioned firewall and windows activation(related to MT_'s project), which item would i have to keep for windows activation?

 

[qou]

Do you mean as firewall rule?, if I'm not mistaken the activation goes through port 80 and 443.

 

[Clanger]

on w7 now, i need to get ltsc plugged in to look, back in a while.

 

[garlin]

Do you mean as firewall rule?, if I'm not mistaken the activation goes through port 80 and 443.

Correct. If you wanted to add firewall rules blocking known MS DNS addresses for privacy, do it after activation.

 

[crypticus]

I use this tool for firewall configuration. also this command to block or unblock every exe in a folder.

cd "CD TO A EMTPY FOLDER THAT YOU ARE SURE EXISTS, OR YOU CREATED. JUST TO BE SURE IF DESIRED FOLDER IS NOT THERE OR ELSE COMMAND WILL BLOCK RANDOM THINGS, YOU CAN EVEN MAKEDIR BEFORE THIS COMMAND MAYBE..." >Nul 2>&1
cd "CD TO THE DESIRED FOLDER U WANT TO BLOCK OR UNBLOCK*" >Nul 2>&1
for /R %%a in (*.exe) do (
netsh advfirewall firewall delete rule name="Allowed %%a" >Nul 2>&1
netsh advfirewall firewall delete rule name="Blocked %%a" >Nul 2>&1
netsh advfirewall firewall add rule name="Allowed %%a" dir=out action=allow profile=any program="%%a" >Nul 2>&1
netsh advfirewall firewall add rule name="Allowed %%a" dir=in action=allow profile=any program="%%a" >Nul 2>&1
)

Change action=allow to action=block to block instead of allowing. or remove allow block commands to remove command u created.

 

[garlin]

While GPO settings can be exported to keys, using a GPO collects all your policy decisions in one place and makes it easier to audit. The templates provide explanations for what the key values should be. Sometimes the right one is actually "not" the "do not" setting.

Plus "gpupdate /force" will reset unknown changes back to a known state.

If you prefer keys, MS offers the LGPO tool to export policy files as their reg equivalents.

 

[Clanger]

Sometimes the right one is actually "not" the "do not" setting.

think i know what you mean, had looks inside gpedit.msc before, its kinda like reverse phsycology.

 

[Clanger]

putting this on hold while i go through everything i got so far.
i want to check the options during setup, find their policy, their registry settings then find those options in ntlite so i can reg/cmd files and a preset.xml for beginners. thank you so far guys

 

[Clanger]

ditditdit://docs.microsoft.com/en-us/windows/privacy/windows-10-and-privacy-compliance

aha! they are the ones you get during setup

i was looking for those

 

[Clanger]

so i got all the ntlite privacy settings but there are more with other tools, might have to combine their outputs.

 

[garlin]

I found this audit tool. Don't think it exports what it changed, but use as a spring board for ideas.
https://www.w10privacy.de/english-home/instructions-1/

 

[Clanger]

got that, found it here.

 

[Clanger]

Right from the horse's mouth.
https://docs.microsoft.com/en-us/windows/privacy/windows-10-and-privacy-compliance

I need a refresh. That is the page that covers the settings during setup yes?

 

[garlin]

That and more. Jump to section 2.2
If you want to convert GPO to registry, search for the same policy names on https://admx.help (for W10 or W11).

 

[Clanger]

garlin Excellent, thank you. Ive got them here somewhere but my storage is all s--t order . I want the setup lot 1st, i can move onto the rest when ive got an install running. I want to drop windows 7 .