Lock down Windows 10 or Just get over it

TechFan180 said:

Afternoon All, I'm a long term reader of Seven, Eight and Ten forums. First post so be gentle.

I support a dozen or so family and friends PC's along with several of my own. Windows 10 has got me more perplexed than any other OS. I'm an early adopter of every version and lock them down as much as I can through Group Policy and vetting all the settings.

However I realise that I'm doing this for my family and friends too, without giving them the oppertunity to experience Windows 10 naturally for themselves.

Reading alot of tech magazines I have never came across an article where it can be proven that Windows 10 has ever used any data over the last three years for nefarious purposes. They are always on either side of the fence, Microsoft is evil or take of your tinfoil hat. This has left me in the middle chopping and changing OS's and not really enjoying computing at the moment.

I am at a point in 2019 where I think sod it let Windows 10 use the express settings and just move on enjoying all the cloud applications, cortana, timeline etc... rather than locking everything down. Surely if there were any truly terrible privacy and security invasions someone would have discovered them since 2015.

So I'm after a bit of advice, should I go with my gut and lack of evidence and trust Windows 10 to manage all our data safely.

Many Thanks

I think you've said it all with the bolded statement above. Why do I say that? Because I'm one of those who complain about Microsoft not letting me control my system by locking down certain features.

As an Insider, I allow Windows to start with everything default. I can change it later if I want to.

The most important thing is to be sure to back up each system as soon as it's finished. The next important thing is to teach them to regularly back up their systems so that if something goes wrong, a simple restore is all that would be required. I use Macrium Reflect Free for backups; it can be set up to automatically back up.

Just use express settings and move on, life's too short

Technology has reached a stage where "complete privacy" no longer exists. It is physically impossible to have your information 100% secure for you and only you. Windows 10 is so advanced that even after you disable many settings to keep your privacy, there are hidden settings that still can view information about your computer. You cannot access those settings at all.

I used to disable many privacy settings in the past in Windows XP and whatnot. Yet as of now, I disable many settings on my computer primarily to help speed it up only.

pepanee said:

Technology has reached a stage where "complete privacy" no longer exists. It is physically impossible to have your information 100% secure for you and only you. Windows 10 is so advanced that even after you disable many settings to keep your privacy, there are hidden settings that still can view information about your computer. You cannot access those settings at all.

Run W10 as a VM on a Linux Host.
Disable the network in the VM Manager and W10 will run problem free.

Since I blocked my W10 Pro 1703 VM from our network (after the 1709 upgrade fiasco) MS hasn't been able to get its grubby paws on it and as a result W10 has run flawlessly.
I've even been able to run Visual Studio & Hyper-V on it.

Obviously this won't work if you run software that needs 24/7 Internet access.

The only info that Microsoft uses from Windows, is hardware, software installed and common settings that users are changing. The real action is more towards Enterprise, which Microsoft is using to tweak their Software with the changes, with insiders being the beta testers of any changes. Microsoft could care less if you are surfing for porn, what your banking info is. I tend to disable anything that can help them make bing better, since I do not use it and use Google for searches.

This is how to see what telemetry data that Windows gathers.

How to See and Delete the Data Windows 10 Collects and Sends to Microsoft
Configure Windows diagnostic data in your organization (Windows 10) | Microsoft Docs
Manage connections from Windows operating system components to Microsoft services (Windows 10) | Microsoft Docs
Microsoft introduces new privacy tools ahead of Data Privacy Day | Windows Experience Blog

TechFan180 said:

Reading alot of tech magazines I have never came across an article where it can be proven that Windows 10 has ever used any data over the last three years for nefarious purposes.

First, and most important, you should always think rationally. Using your own brain is, although not required and often forgotten in computing, always a good idea. I recommend you to ignore the tinfoil hat brigade, I wholeheartedly recommend you to completely ignore posts like this:

dlross said:

Disable One Drive
Disable Cortana and web based search
Set all diagnostic telemetry as low as possible
Delay "feature" updates by 120 days (if possible)
Delay security updates by 11 days (if possible)
Set default search in any/all browsers to DuckDuckGo
Install and use browsers that can use HTTPSAnywhere and PrivacyBadger extensions

I am already repeating myself, having said this multiple times on TenForums, but here we go:

One often heard statement from tinfoil hat brigade is that Microsoft is spying on you. That is, of course, a blatant lie. The telemetry Microsoft collects is to make Windows better, and to make your Windows user experience better. Microsoft will not call your ex if you called her a stupid cow in a Skype chat with a friend. Microsoft will not print your most embarrassing social media photos and put them on display on Redmond campus to give their personnel a good laugh. Microsoft will not report you to the authorities if you mention in an email that you lied in your tax declaration.

In fact, Microsoft is not interested in you as a person. They don't even want to know your personal details. They just collect statistics.

The telemetry is collected to learn how you use Windows, what are you interests, what do you search and use, but it is done anonymously. The only goal for collecting this data is to make Windows and your user experience better. Windows "calling home" is so minimal it has no impact in your Internet speed or storage space.

I am a 30+ year IT veteran. I always set Windows to use full telemetrics, I love how OneDrive helps me to stay organized, I love how Cortana and Windows Search learn my habits offering me more personalized Windows user experience. I use Microsoft's Bing as my search tool, signed in with my Microsoft account to let Bing to know me.

One last thing: as opposed to those tinfoil hat brigade members who fill these forums with questions with this and that issue after they have disabled various services, I have had no real issues with Windows 10. I let Windows to take care of itself as it is designed to do.

It's of course up to you, I have no authority to tell you what you should do. You can join the tinfoil hat brigade here, or you can think rationally and let Windows do what it is designed to do, how it is designed to do it and take care of itself.

Kari