Go down
neo
neo

[EX-100-x.x.x.x] [RS6] - please remove - Telemetry & Scheduled Tasks Empty [EX-100-x.x.x.x] [RS6] - please remove - Telemetry & Scheduled Tasks

on Sat 14 Sep 2019 - 18:20
[EX-100-x.x.x.x] [RS6] - please remove - Telemetry & Scheduled Tasks

1. Please allow disabling or removing Scheduled tasks, especially telemetry related.
2. Please remove telemetry files associated with some of these scheduled tasks

Also,
Maybe do cleanup to certain scheduled tasks, based on removed-items, for example Exploit Guard scheduled task.

Schtasks.exe /Change /TN "\Microsoft\Windows\Management\Provisioning\Logon" /Disable
Schtasks.exe /Change /TN "\Microsoft\Windows\Management\Provisioning\Retry" /Disable
;The Logon Task generates tons of "TW-xxx" folders in Windows\Temp folder, daily.
;Disabled the Retry too, and no more TW folders.
;Triggers >> %systemRoot%\system32\ProvTool.exe

Schtasks.exe /Change /TN "\Microsoft\Windows\TPM\Tpm-Maintenance" /Disable
;"This task supports the Trusted Platform Module (TPM) by performing background actions on behalf of the OS."

Schtasks.exe /Change /TN "\Microsoft\Windows\Speech\SpeechModelDownloadTask" /Disable
;Scheduled for daily downloads
;Triggers >> c:\Windows\system32\Speech_OneCore\common\SpeechRuntime.exe

Schtasks.exe /Change /TN "\Microsoft\Windows\Setup\SetupCleanupTask" /Disable
;"Deletes previous Windows installation files a few days after installation."

Schtasks.exe /Change /TN "\Microsoft\Windows\RetailDemo\CleanupOfflineContent" /Disable
;"Auto cleanup RetailDemo Offline content"

Schtasks.exe /Change /TN "\Microsoft\Windows\ExploitGuard\ExploitGuard MDM policy Refresh" /Disable
;Part of Defender Exploit Guard

Schtasks.exe /Change /TN "\Microsoft\Windows\Diagnosis\RecommendedTroubleshootingScanner" /Disable
;"Check for recommended troubleshooting from Microsoft."
;Triggers >> c:\Windows\System32\mitigationscanner.exe


Schtasks.exe /Change /TN "\Microsoft\Windows\Device Information\Device" /Disable
;Triggers >> DeviceCensus.exe on daily bases! to collect Telemetry

Schtasks.exe /Change /TN "\Microsoft\Windows\Customer Experience Improvement Program\Consolidator" /Disable
;Telemetry
;Starts this utility >> %SystemRoot%\System32\wsqmcons.exe
;By default - Enabled - even if Opt-Out of the Windows Customer Experience Improvement program ..
;"If the user has consented to participate in the Windows Customer Experience Improvement Program, this job collects and sends usage data to Microsoft."

Schtasks.exe /Change /TN "\Microsoft\Windows\Active Directory Rights Management Services Client\AD RMS Rights Policy Template Management (Automated)" /Disable
;Seems relevant for Clients connected to Active Directory services only
;"Updates the AD RMS rights policy templates for the user. This job does not provide a credential prompt if authentication to the template distribution web service on the server fails. In this case, it fails silently."

Thank you,
Neo
Back to top
Permissions in this forum:
You cannot reply to topics in this forum