![[EX-100-x.x.x.x] [RS6] - please remove - Telemetry & Scheduled Tasks Empty](https://2img.net/i/empty.gif)
[EX-100-x.x.x.x] [RS6] - please remove - Telemetry & Scheduled Tasks
1. Please allow disabling or removing Scheduled tasks, especially telemetry related.
2. Please remove telemetry files associated with some of these scheduled tasks
Also,
Maybe do cleanup to certain scheduled tasks, based on removed-items, for example Exploit Guard scheduled task.
Schtasks.exe /Change /TN "\Microsoft\Windows\Management\Provisioning\Logon" /Disable
Schtasks.exe /Change /TN "\Microsoft\Windows\Management\Provisioning\Retry" /Disable
;The Logon Task generates tons of "TW-xxx" folders in Windows\Temp folder, daily.
;Disabled the Retry too, and no more TW folders.
;Triggers >> %systemRoot%\system32\ProvTool.exe
Schtasks.exe /Change /TN "\Microsoft\Windows\TPM\Tpm-Maintenance" /Disable
;"This task supports the Trusted Platform Module (TPM) by performing background actions on behalf of the OS."
Schtasks.exe /Change /TN "\Microsoft\Windows\Speech\SpeechModelDownloadTask" /Disable
;Scheduled for daily downloads
;Triggers >> c:\Windows\system32\Speech_OneCore\common\SpeechRuntime.exe
Schtasks.exe /Change /TN "\Microsoft\Windows\Setup\SetupCleanupTask" /Disable
;"Deletes previous Windows installation files a few days after installation."
Schtasks.exe /Change /TN "\Microsoft\Windows\RetailDemo\CleanupOfflineContent" /Disable
;"Auto cleanup RetailDemo Offline content"
Schtasks.exe /Change /TN "\Microsoft\Windows\ExploitGuard\ExploitGuard MDM policy Refresh" /Disable
;Part of Defender Exploit Guard
Schtasks.exe /Change /TN "\Microsoft\Windows\Diagnosis\RecommendedTroubleshootingScanner" /Disable
;"Check for recommended troubleshooting from Microsoft."
;Triggers >> c:\Windows\System32\mitigationscanner.exe
Schtasks.exe /Change /TN "\Microsoft\Windows\Device Information\Device" /Disable
;Triggers >> DeviceCensus.exe on daily bases! to collect Telemetry
Schtasks.exe /Change /TN "\Microsoft\Windows\Customer Experience Improvement Program\Consolidator" /Disable
;Telemetry
;Starts this utility >> %SystemRoot%\System32\wsqmcons.exe
;By default - Enabled - even if Opt-Out of the Windows Customer Experience Improvement program ..
;"If the user has consented to participate in the Windows Customer Experience Improvement Program, this job collects and sends usage data to Microsoft."
Schtasks.exe /Change /TN "\Microsoft\Windows\Active Directory Rights Management Services Client\AD RMS Rights Policy Template Management (Automated)" /Disable
;Seems relevant for Clients connected to Active Directory services only
;"Updates the AD RMS rights policy templates for the user. This job does not provide a credential prompt if authentication to the template distribution web service on the server fails. In this case, it fails silently."
Thank you,
Neo
1. Please allow disabling or removing Scheduled tasks, especially telemetry related.
2. Please remove telemetry files associated with some of these scheduled tasks
Also,
Maybe do cleanup to certain scheduled tasks, based on removed-items, for example Exploit Guard scheduled task.
Schtasks.exe /Change /TN "\Microsoft\Windows\Management\Provisioning\Logon" /Disable
Schtasks.exe /Change /TN "\Microsoft\Windows\Management\Provisioning\Retry" /Disable
;The Logon Task generates tons of "TW-xxx" folders in Windows\Temp folder, daily.
;Disabled the Retry too, and no more TW folders.
;Triggers >> %systemRoot%\system32\ProvTool.exe
Schtasks.exe /Change /TN "\Microsoft\Windows\TPM\Tpm-Maintenance" /Disable
;"This task supports the Trusted Platform Module (TPM) by performing background actions on behalf of the OS."
Schtasks.exe /Change /TN "\Microsoft\Windows\Speech\SpeechModelDownloadTask" /Disable
;Scheduled for daily downloads
;Triggers >> c:\Windows\system32\Speech_OneCore\common\SpeechRuntime.exe
Schtasks.exe /Change /TN "\Microsoft\Windows\Setup\SetupCleanupTask" /Disable
;"Deletes previous Windows installation files a few days after installation."
Schtasks.exe /Change /TN "\Microsoft\Windows\RetailDemo\CleanupOfflineContent" /Disable
;"Auto cleanup RetailDemo Offline content"
Schtasks.exe /Change /TN "\Microsoft\Windows\ExploitGuard\ExploitGuard MDM policy Refresh" /Disable
;Part of Defender Exploit Guard
Schtasks.exe /Change /TN "\Microsoft\Windows\Diagnosis\RecommendedTroubleshootingScanner" /Disable
;"Check for recommended troubleshooting from Microsoft."
;Triggers >> c:\Windows\System32\mitigationscanner.exe
Schtasks.exe /Change /TN "\Microsoft\Windows\Device Information\Device" /Disable
;Triggers >> DeviceCensus.exe on daily bases! to collect Telemetry
Schtasks.exe /Change /TN "\Microsoft\Windows\Customer Experience Improvement Program\Consolidator" /Disable
;Telemetry
;Starts this utility >> %SystemRoot%\System32\wsqmcons.exe
;By default - Enabled - even if Opt-Out of the Windows Customer Experience Improvement program ..
;"If the user has consented to participate in the Windows Customer Experience Improvement Program, this job collects and sends usage data to Microsoft."
Schtasks.exe /Change /TN "\Microsoft\Windows\Active Directory Rights Management Services Client\AD RMS Rights Policy Template Management (Automated)" /Disable
;Seems relevant for Clients connected to Active Directory services only
;"Updates the AD RMS rights policy templates for the user. This job does not provide a credential prompt if authentication to the template distribution web service on the server fails. In this case, it fails silently."
Thank you,
Neo