I am attempting to air gap a windows 10 pc, all previous attempts have failed miserably at protecting my files. I do not use any remote or virtual services. I have been disabling everything I can think of, but there's still so many things I'm not sure what they are exactly.
I only need to be able to run Adobe PhotoShop CS6, and access my bit locker drives.
Below I will include services from process hacker.
That is the reason, why it is suggested not disable any services, dependencies. But if you insist.
Black Vipers Windows 10 Service Configurations | Black Viper | www.blackviper.com
You can check Services section in this batch, it is mostly safe.
[Batch] Windows Tweaks Light - Pastebin.com
Depends what your goals are for doing this. Some big ones are on the "Black Viper’s Windows 10 Service Configurations" as mentioned above.
A big one I disable is Windows Search. Some other's are Windows Update, Update Orchestrator Service. (this will break windows from updating)
If you don't intend to use System Restore then disable Windows Backup and Volume Shadow Copy.
Disabling Windows services is risky with unpredictable results. The problem is that there is no complete list available anywhere that fully describes what each service does. Many do more than documented and unrelated things you would not expect. Incidentally, and contrary to frequent claims, setting a service start to "Manual" is NOT a safe alternative to disabling it. With this setting either an application or the system can start the service if it were needed. But you can't safely assume that this will actually happen.
I have disconnected from the network, but I am still seeing outgoing data in tcpview and process explorer. I have disabled remote access remote desktop and all other unneeded services a million times but they still run in task manager.
blocked these things in Group Policy as well as in the registry but I still see sessions 2 and 3 while the pc is in use. I also have session "%sfrom%S" in event viewer along with !@#$. These things are not happening during inactive hours and not one person I've asked for help is able to give me an explanation why suddenly while I'm busy designing my heart out there are new sessions started. Or even why these services like Telephony are somehow running in task manager.
I have ran every scan out there, I have reformatted the hard drive and done a clean install every single time windows pushes out an update for the last 14 months. The only thing that has actually worked to stop "remote access" "remote access connection manager" and telephony from popping up in my task manager; this last install was after purchasing an AMD graphics card and getting rid of my nvidia card.
Anyway, I just want to be able to create my art, own my OWN intellectual property and not have to worry that some software has turned my pc into a server or virtual machine.
That sounds impossible.. and you have a desktop, so presumably no Wifi. Presumably you pulled your ethernet connection from your PC, which should surely be enough.I have disconnected from the network, but I am still seeing outgoing data in tcpview and process explorer.
Why not keep your project files in an encrypted area? Disconnect while working on them, close access to that area and carry on. The only thing someone could copy usefully then would be any temporary files. So you could run Ccleaner before reconnecting.
E.g. Truecrypt or its successors.
Please beware that using Spybot Anti-Beacon and similar can give rise to puzzling
'Some settings are managed by your organisation' in red in various places in Settings, and some things being disabled.
That is aimed at supposed MS spying- things reporting to MS. So would not be likely to stop other nefarious activities.
Quote