noid-privacy/Modules/Privacy/Config/Privacy-Paranoid.json

458 lines
14 KiB
JSON

{
"Mode": "Paranoid",
"Description": "Hardcore privacy - Works on all editions (NOT recommended for production)",
"BestFor": "Air-gapped, kiosk systems, extreme privacy requirements only",
"Warnings": [
"AllowTelemetry=0: Enterprise/Education only (Pro falls back to Required=1)",
"Force Deny ALL: Mic, Camera, Location, Contacts, Calendar, etc.",
"BREAKS: Teams, Zoom, Skype, and ALL video conferencing!",
"WerSvc disabled: NO error reporting, support severely limited",
"Scheduled tasks disabled: CEIP, AppExperience, DiskDiagnostic",
"NOT recommended for production - use only in controlled environments"
],
"DataCollection": {
"HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows\\DataCollection": {
"AllowTelemetry": {
"Type": "DWord",
"Value": 0,
"Description": "Diagnostic data OFF"
},
"LimitDiagnosticLogCollection": {
"Type": "DWord",
"Value": 1,
"Description": "Limit additional diagnostic log collection"
},
"DoNotShowFeedbackNotifications": {
"Type": "DWord",
"Value": 1,
"Description": "No feedback popups"
},
"DisableOneSettingsDownloads": {
"Type": "DWord",
"Value": 1,
"Description": "Block dynamic config downloads from Microsoft"
}
}
},
"Personalization": {
"HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows\\CloudContent": {
"DisableTailoredExperiencesWithDiagnosticData": {
"Type": "DWord",
"Value": 1,
"Description": "No personalized tips from diagnostic data"
},
"DisableWindowsSpotlightFeatures": {
"Type": "DWord",
"Value": 1,
"Description": "Disable all Windows Spotlight features"
},
"DisableWindowsSpotlightOnSettings": {
"Type": "DWord",
"Value": 1,
"Description": "No Spotlight on Settings page"
},
"DisableWindowsSpotlightOnActionCenter": {
"Type": "DWord",
"Value": 1,
"Description": "No Spotlight on Action Center"
},
"DisableThirdPartySuggestions": {
"Type": "DWord",
"Value": 1,
"Description": "No third-party suggestions"
},
"DisableSpotlightCollectionOnDesktop": {
"Type": "DWord",
"Value": 1,
"Description": "No Spotlight collection on desktop"
},
"DisableCloudOptimizedContent": {
"Type": "DWord",
"Value": 1,
"Description": "No cloud-optimized content/tips from Microsoft"
}
},
"HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows\\AdvertisingInfo": {
"DisabledByGroupPolicy": {
"Type": "DWord",
"Value": 1,
"Description": "Disable Advertising ID (via Group Policy)"
}
},
"HKCU:\\Software\\Policies\\Microsoft\\Windows\\Explorer": {
"DisableSoftLanding": {
"Type": "DWord",
"Value": 1,
"Description": "No tips and suggestions bubbles"
}
},
"HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows\\Explorer": {
"DisableGraphRecentItems": {
"Type": "DWord",
"Value": 1,
"Description": "Disable cloud file metadata in Explorer (Recent, Recommended, Insights from MS account)"
}
},
"HKCU:\\Software\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced": {
"Start_IrisRecommendations": {
"Type": "DWord",
"Value": 0,
"Description": "Disable Start Menu app recommendations/ads"
},
"ShowSyncProviderNotifications": {
"Type": "DWord",
"Value": 0,
"Description": "Disable OneDrive/Sync provider ads in Explorer"
},
"Start_TrackProgs": {
"Type": "DWord",
"Value": 0,
"Description": "Disable app launch tracking for Start/Search improvements"
}
},
"HKCU:\\Control Panel\\International\\User Profile": {
"HttpAcceptLanguageOptOut": {
"Type": "DWord",
"Value": 1,
"Description": "Disable websites accessing language list"
}
},
"HKCU:\\Software\\Microsoft\\Windows\\CurrentVersion\\ContentDeliveryManager": {
"ContentDeliveryAllowed": {
"Type": "DWord",
"Value": 0,
"Description": "Disable content delivery (suggested content)"
},
"SubscribedContent-338393Enabled": {
"Type": "DWord",
"Value": 0,
"Description": "Disable suggested content in Settings app"
},
"SubscribedContent-353694Enabled": {
"Type": "DWord",
"Value": 0,
"Description": "Disable suggested content in Settings app"
},
"SubscribedContent-353696Enabled": {
"Type": "DWord",
"Value": 0,
"Description": "Disable suggested content in Settings app"
},
"SubscribedContentEnabled": {
"Type": "DWord",
"Value": 0,
"Description": "Disable all subscribed content"
},
"SystemPaneSuggestionsEnabled": {
"Type": "DWord",
"Value": 0,
"Description": "Disable system pane suggestions"
}
},
"HKCU:\\Software\\Microsoft\\Windows\\CurrentVersion\\SystemSettings\\AccountNotifications": {
"EnableAccountNotifications": {
"Type": "DWord",
"Value": 0,
"Description": "Disable notifications in Settings app"
}
},
"HKCU:\\Software\\Microsoft\\Windows\\CurrentVersion\\UserProfileEngagement": {
"ScoobeSystemSettingEnabled": {
"Type": "DWord",
"Value": 0,
"Description": "Disable 'Get the most out of Windows' suggestions"
}
}
},
"SearchAndCloud": {
"HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows\\Windows Search": {
"DisableWebSearch": {
"Type": "DWord",
"Value": 1,
"Description": "No web search in Start menu"
},
"ConnectedSearchUseWeb": {
"Type": "DWord",
"Value": 0,
"Description": "No connected search to web"
},
"AllowCloudSearch": {
"Type": "DWord",
"Value": 0,
"Description": "No cloud search"
},
"AllowCortana": {
"Type": "DWord",
"Value": 0,
"Description": "Disable Cortana (legacy)"
}
},
"HKCU:\\Software\\Microsoft\\Windows\\CurrentVersion\\Search": {
"BingSearchEnabled": {
"Type": "DWord",
"Value": 0,
"Description": "Disable Bing search integration (user-level)"
}
},
"HKCU:\\Software\\Microsoft\\Windows\\CurrentVersion\\SearchSettings": {
"IsDynamicSearchBoxEnabled": {
"Type": "DWord",
"Value": 0,
"Description": "Disable Search Highlights (trending topics, news)"
}
}
},
"InputAndSync": {
"HKLM:\\SOFTWARE\\Policies\\Microsoft\\InputPersonalization": {
"AllowInputPersonalization": {
"Type": "DWord",
"Value": 0,
"Description": "No cloud-based input personalization"
}
},
"HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows\\System": {
"EnableActivityFeed": {
"Type": "DWord",
"Value": 0,
"Description": "Disable activity feed"
},
"PublishUserActivities": {
"Type": "DWord",
"Value": 0,
"Description": "Don't publish user activities"
},
"UploadUserActivities": {
"Type": "DWord",
"Value": 0,
"Description": "Don't upload user activities to cloud"
},
"AllowCrossDeviceClipboard": {
"Type": "DWord",
"Value": 0,
"Description": "Disable cloud clipboard sync between devices"
},
"AllowClipboardHistory": {
"Type": "DWord",
"Value": 0,
"Description": "Disable clipboard history (Win+V) - PARANOID ONLY"
},
"EnableCdp": {
"Type": "DWord",
"Value": 0,
"Description": "Disable cross-device experiences (Continue on PC)"
}
},
"HKCU:\\SOFTWARE\\Microsoft\\InputPersonalization": {
"RestrictImplicitTextCollection": {
"Type": "DWord",
"Value": 1,
"Description": "Block typing data collection"
},
"RestrictImplicitInkCollection": {
"Type": "DWord",
"Value": 1,
"Description": "Block inking/handwriting data collection"
}
},
"HKCU:\\SOFTWARE\\Microsoft\\Personalization\\Settings": {
"AcceptedPrivacyPolicy": {
"Type": "DWord",
"Value": 0,
"Description": "Disable inking/typing personalization toggle in Settings"
}
},
"HKCU:\\SOFTWARE\\Microsoft\\InputPersonalization\\TrainedDataStore": {
"HarvestContacts": {
"Type": "DWord",
"Value": 0,
"Description": "Don't harvest contacts for personalization"
}
},
"HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows\\SettingSync": {
"DisableSettingSync": {
"Type": "DWord",
"Value": 1,
"Description": "Disable settings sync"
},
"DisableSettingSyncUserOverride": {
"Type": "DWord",
"Value": 1,
"Description": "User cannot override sync disable"
}
},
"HKLM:\\SOFTWARE\\Policies\\Microsoft\\Dsh": {
"AllowNewsAndInterests": {
"Type": "DWord",
"Value": 0,
"Description": "Disable Widgets/News and Interests"
}
},
"HKLM:\\SOFTWARE\\Policies\\Microsoft\\FindMyDevice": {
"AllowFindMyDevice": {
"Type": "DWord",
"Value": 0,
"Description": "Disable Find My Device tracking - PARANOID ONLY"
}
}
},
"LocationAndAppPrivacy": {
"HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows\\LocationAndSensors": {
"DisableLocation": {
"Type": "DWord",
"Value": 1,
"Description": "Disable location services"
}
},
"HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows\\AppPrivacy": {
"LetAppsAccessLocation": {
"Type": "DWord",
"Value": 2,
"Description": "Force Deny location access for apps"
},
"LetAppsAccessRadios": {
"Type": "DWord",
"Value": 2,
"Description": "Force Deny radio access for apps"
},
"LetAppsAccessCallHistory": {
"Type": "DWord",
"Value": 2,
"Description": "Force Deny call history access"
},
"LetAppsAccessMicrophone": {
"Type": "DWord",
"Value": 2,
"Description": "Force Deny microphone (BREAKS Teams/Zoom/Skype!)"
},
"LetAppsAccessCamera": {
"Type": "DWord",
"Value": 2,
"Description": "Force Deny camera (BREAKS video conferencing!)"
},
"LetAppsAccessContacts": {
"Type": "DWord",
"Value": 2,
"Description": "Force Deny contacts access"
},
"LetAppsAccessCalendar": {
"Type": "DWord",
"Value": 2,
"Description": "Force Deny calendar access"
},
"LetAppsAccessNotifications": {
"Type": "DWord",
"Value": 2,
"Description": "Force Deny notification access for apps - PARANOID ONLY"
},
"LetAppsAccessEmail": {
"Type": "DWord",
"Value": 2,
"Description": "Force Deny email access"
},
"LetAppsAccessMessaging": {
"Type": "DWord",
"Value": 2,
"Description": "Force Deny messaging access"
},
"LetAppsAccessTrustedDevices": {
"Type": "DWord",
"Value": 2,
"Description": "Force Deny trusted devices access"
},
"LetAppsSyncWithDevices": {
"Type": "DWord",
"Value": 2,
"Description": "Force Deny device sync"
},
"LetAppsGetDiagnosticInfo": {
"Type": "DWord",
"Value": 2,
"Description": "Force Deny app diagnostics access"
},
"LetAppsActivateWithVoice": {
"Type": "DWord",
"Value": 2,
"Description": "Force Deny voice activation access"
},
"LetAppsAccessAccountInfo": {
"Type": "DWord",
"Value": 2,
"Description": "Force Deny account info access"
},
"LetAppsAccessPhone": {
"Type": "DWord",
"Value": 2,
"Description": "Force Deny phone calls access"
},
"LetAppsAccessTasks": {
"Type": "DWord",
"Value": 2,
"Description": "Force Deny tasks access"
},
"LetAppsAccessGraphicsCaptureProgrammatic": {
"Type": "DWord",
"Value": 2,
"Description": "Force Deny screenshot/screen recording access"
},
"LetAppsAccessGraphicsCaptureWithoutBorder": {
"Type": "DWord",
"Value": 2,
"Description": "Force Deny screenshot border access"
},
"LetAppsAccessGenerativeAI": {
"Type": "DWord",
"Value": 2,
"Description": "Force Deny generative AI access"
}
},
"HKCU:\\Software\\Microsoft\\Windows\\CurrentVersion\\CapabilityAccessManager\\ConsentStore\\appDiagnostics": {
"Value": {
"Type": "String",
"Value": "Deny",
"Description": "Deny app diagnostics access (UI toggle)"
}
},
"HKLM:\\Software\\Microsoft\\Windows\\CurrentVersion\\CapabilityAccessManager\\ConsentStore\\appDiagnostics": {
"Value": {
"Type": "String",
"Value": "Deny",
"Description": "Deny app diagnostics access system-wide (UI toggle)"
}
}
},
"Services": [
{
"Name": "DiagTrack",
"DisplayName": "Connected User Experiences and Telemetry",
"StartupType": "Disabled",
"Description": "Telemetry service - disabled in Paranoid mode"
},
{
"Name": "dmwappushservice",
"DisplayName": "Device Management Wireless Application Protocol (WAP) Push message Routing Service",
"StartupType": "Disabled",
"Description": "WAP Push service - disabled in Paranoid mode"
},
{
"Name": "WerSvc",
"DisplayName": "Windows Error Reporting Service",
"StartupType": "Disabled",
"Description": "Error reporting service - DISABLED IN PARANOID (breaks error analysis!)"
}
],
"ScheduledTasks": [
"\\Microsoft\\Windows\\Application Experience\\Microsoft Compatibility Appraiser",
"\\Microsoft\\Windows\\Application Experience\\ProgramDataUpdater",
"\\Microsoft\\Windows\\Application Experience\\StartupAppTask",
"\\Microsoft\\Windows\\Customer Experience Improvement Program\\Consolidator",
"\\Microsoft\\Windows\\Customer Experience Improvement Program\\UsbCeip",
"\\Microsoft\\Windows\\DiskDiagnostic\\Microsoft-Windows-DiskDiagnosticDataCollector"
]
}