Privacy & Security

Windows 10 and 11 come with numerous telemetry and data collection features enabled by default. Winhance gives you back control over your data and improves your system's security posture.

Registry Details

Each setting below includes expandable registry details for power users. Click "Registry Details" to see the exact registry keys and values that are modified.

Security

Core Windows security settings including User Account Control, remote access, and system maintenance.

User Account Control Level security-uac-level

Controls UAC notification level and secure desktop behavior. Options: Prompt for Credentials, Always notify, Notify when apps try to make changes, Notify when apps try to make changes (no dim), Never notify.

Registry Details

Path	`HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System`
Value	`ConsentPromptBehaviorAdmin`
Type	DWORD
Options	0=Never notify, 1=Prompt for Credentials, 2=Always notify, 5=Notify when apps try to make changes
Default	5

Path	`HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System`
Value	`PromptOnSecureDesktop`
Type	DWORD
Enabled	1 (secure desktop)
Disabled	0 (no dim)
Default	1

Block Workplace Join Messages security-workplace-join-messages

Blocks the 'Allow my organization to manage my device' and 'No, sign in to this app only' pop-up messages.

Registry Details

Path	`HKLM\SOFTWARE\Policies\Microsoft\Windows\WorkplaceJoin`
Value	`BlockAADWorkplaceJoin`
Type	DWORD
Enabled	1
Disabled	Key deleted
Default	Key absent

Path	`HKCU\SOFTWARE\Policies\Microsoft\Windows\WorkplaceJoin`
Value	`BlockAADWorkplaceJoin`
Type	DWORD
Enabled	1
Disabled	Key deleted
Default	Key absent

Prevent BitLocker Auto Encryption security-bitlocker-auto-encryption Windows 11 Only

Prevents Windows from automatically encrypting your device with BitLocker without user consent.

Registry Details

Path	`HKLM\SYSTEM\CurrentControlSet\Control\BitLocker`
Value	`PreventDeviceEncryption`
Type	DWORD
Enabled	1 (prevent auto encryption)
Disabled	0
Default	0

WiFi-Sense security-wifi-sense

Allow sharing WiFi passwords with contacts and automatically connecting to suggested open hotspots.

Registry Details

Path	`HKLM\Software\Microsoft\PolicyManager\default\WiFi\AllowWiFiHotSpotReporting`
Value	`Value`
Type	DWORD
Enabled	1
Disabled	0
Default	Key absent

Path	`HKLM\Software\Microsoft\PolicyManager\default\WiFi\AllowAutoConnectToWiFiSenseHotspots`
Value	`Value`
Type	DWORD
Enabled	1
Disabled	0
Default	Key absent

Automatic Maintenance security-automatic-maintenance

Choose if Windows should run automatic system maintenance tasks during idle time.

Registry Details

Path	`HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Maintenance`
Value	`MaintenanceDisabled`
Type	DWORD
Enabled (maintenance ON)	0
Disabled (maintenance OFF)	1
Default	0

Windows Error Reporting security-error-reporting

Choose if Windows should collect and send crash reports and error information to Microsoft.

Registry Details

Path	`HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting`
Value	`Disabled`
Type	DWORD
Enabled (reporting ON)	0
Disabled (reporting OFF)	1
Default	0

Path	`HKCU\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting`
Value	`Disabled`
Type	DWORD
Enabled (reporting ON)	0
Disabled (reporting OFF)	1
Default	0

Remote Assistance security-remote-assistance

Choose if other people can connect to your computer remotely to provide technical support.

Registry Details

Path	`HKLM\SYSTEM\CurrentControlSet\Control\Remote Assistance`
Value	`fAllowToGetHelp`
Type	DWORD
Enabled	1
Disabled	0
Default	1

Content Delivery & Advertising

Control promotional content, suggested apps, and advertising throughout Windows.

Master Control

The "Ads, Suggestions and Promotional Content" setting is a master control. Set it to Deny to disable all advertising features at once, or Custom to configure individual settings below.

Ads, Suggestions and Promotional Content privacy-ads-promotional-master

Controls all advertising, suggestions, and promotional content throughout Windows. Options: Allow, Deny, Custom.

Registry Details

Path	`HKCU\Software\Winhance\Settings`
Value	`AdsPromotionalContentMode`
Type	DWORD
Options	0=Allow, 1=Deny, 2=Custom
Default	2

Content Delivery privacy-content-delivery-allowed

Allows Windows to deliver promotional content and automatically install suggested apps.

Registry Details

Path	`HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager`
Value	`ContentDeliveryAllowed`
Type	DWORD
Enabled	1
Disabled	0
Default	1

Subscribed Content privacy-subscribed-content

Enables promotional content subscriptions from Microsoft and partners throughout Windows.

Registry Details

Path	`HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager`
Value	`SubscribedContentEnabled`
Type	DWORD
Enabled	1
Disabled	0
Default	1 (Absence = Enabled)

Feature Management privacy-feature-management

Enables Windows feature management functionality for promotional features and automatic app installations.

Registry Details

Path	`HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager`
Value	`FeatureManagementEnabled`
Type	DWORD
Enabled	1
Disabled	0
Default	1

Soft Landing Experiences privacy-soft-landing

Displays tips and notifications about Windows features as you use the operating system.

Registry Details

Path	`HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager`
Value	`SoftLandingEnabled`
Type	DWORD
Enabled	1
Disabled	0
Default	1

OEM Pre-installed Apps privacy-oem-preinstalled-apps

Prevents OEM manufacturers from automatically installing bloatware apps.

Registry Details

Path	`HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager`
Value	`OemPreInstalledAppsEnabled`
Type	DWORD
Enabled	1
Disabled	0
Default	1

Pre-installed Suggested Apps privacy-preinstalled-apps

Prevents Microsoft from automatically installing suggested apps.

Registry Details

Path	`HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager`
Value	`PreInstalledAppsEnabled`
Type	DWORD
Enabled	1
Disabled	0
Default	1

Pre-installed Apps History Tracking privacy-preinstalled-apps-ever

Disables tracking of whether pre-installed apps were ever enabled.

Registry Details

Path	`HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager`
Value	`PreInstalledAppsEverEnabled`
Type	DWORD
Enabled	1
Disabled	0
Default	1 (Absence = Enabled)

Silent App Installation privacy-silent-installed-apps

Prevents apps from being silently installed in the background.

Registry Details

Path	`HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager`
Value	`SilentInstalledAppsEnabled`
Type	DWORD
Enabled	1
Disabled	0
Default	1

Lock Screen

Settings related to the Windows lock screen behavior and content.

Lock Screen privacy-lock-screen

Allows users to lock their computer using Windows+L, Start menu, or Ctrl+Alt+Del screen.

Registry Details

Path	`HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon`
Value	`DisableLockWorkstation`
Type	DWORD
Enabled (lock allowed)	0
Disabled (lock blocked)	1
Default	0

Windows Spotlight on Lock Screen privacy-rotating-lock-screen

Displays rotating Windows Spotlight images on your lock screen instead of a static background.

Registry Details

Path	`HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager`
Value	`RotatingLockScreenEnabled`
Type	DWORD
Enabled	1
Disabled	0
Default	1

Lock Screen Fun Facts and Tips privacy-lock-screen-overlay

Displays fun facts, tips, and tricks as an overlay on your lock screen.

Registry Details

Path	`HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager`
Value	`RotatingLockScreenOverlayEnabled`
Type	DWORD
Enabled	1
Disabled	0
Default	1

Lock Screen Slideshow privacy-lock-screen-slideshow

Enables slideshow option for lock screen background.

Registry Details

Path	`HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager`
Value	`SlideshowEnabled`
Type	DWORD
Enabled	1
Disabled	0
Default	0 (Absence = Enabled)

General Privacy

Core privacy settings for advertising ID, language tracking, and personalization.

Let apps show me personalized ads by using my advertising ID privacy-advertising-id

Windows generates a unique advertising ID that apps use to track your activity and deliver personalized ads based on your behavior across different apps.

Registry Details

Path	`HKCU\Software\Microsoft\Windows\CurrentVersion\AdvertisingInfo`
Value	`Enabled`
Type	DWORD
Enabled	1
Disabled	0
Default	1

Path	`HKCU\SOFTWARE\Policies\Microsoft\Windows\AdvertisingInfo`
Value	`DisabledByGroupPolicy`
Type	DWORD
Enabled (ads allowed)	0
Disabled (ads blocked)	1
Default	0

Path	`HKLM\SOFTWARE\Policies\Microsoft\Windows\AdvertisingInfo`
Value	`DisabledByGroupPolicy`
Type	DWORD
Enabled (ads allowed)	0
Disabled (ads blocked)	1
Default	0

Let websites show me locally relevant content by accessing my language list privacy-language-list

Allows websites to access your language preferences so they can automatically display content in your preferred language without requiring manual configuration on each site.

Registry Details

Path	`HKCU\Control Panel\International\User Profile`
Value	`HttpAcceptLanguageOptOut`
Type	DWORD
Enabled (share language)	0
Disabled (don't share)	1
Default	0 (Absence = Enabled)

Let Windows improve Start and search results by tracking app launches privacy-app-launch-tracking

Windows records which apps you use most frequently to personalize your Start menu and improve search results, making your most-used apps more accessible.

Registry Details

Path	`HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced`
Value	`Start_TrackProgs`
Type	DWORD
Enabled	1
Disabled	0
Default	1 (Absence = Enabled)

Show me suggested content in the Settings app privacy-settings-content

Microsoft displays promotional content, tips, and feature suggestions within the Windows Settings app to help you discover new features and functionality.

Registry Details

Path	`HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager`
Value	`SubscribedContent-338393Enabled`
Type	DWORD
Enabled	1
Disabled	0
Default	1 (Absence = Enabled)

Path	`HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager`
Value	`SubscribedContent-353694Enabled`
Type	DWORD
Enabled	1
Disabled	0
Default	1 (Absence = Enabled)

Path	`HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager`
Value	`SubscribedContent-353696Enabled`
Type	DWORD
Enabled	1
Disabled	0
Default	1 (Absence = Enabled)

Settings App Notifications privacy-settings-notifications

Shows account notifications in the Settings app, including prompts to reauthenticate, backup your device, and manage subscriptions.

Registry Details

Path	`HKCU\Software\Microsoft\Windows\CurrentVersion\SystemSettings\AccountNotifications`
Value	`EnableAccountNotifications`
Type	DWORD
Enabled	1
Disabled	0
Default	1 (Absence = Enabled)

Speech

Settings for speech recognition and voice-based services.

Online Speech Recognition privacy-speech-recognition

Use your voice for apps using Microsoft's online speech recognition technology.

Registry Details

Path	`HKCU\Software\Microsoft\Speech_OneCore\Settings\OnlineSpeechPrivacy`
Value	`HasAccepted`
Type	DWORD
Enabled	1
Disabled	0
Default	1

Path	`HKCU\SOFTWARE\Policies\Microsoft\InputPersonalization`
Value	`AllowInputPersonalization`
Type	DWORD
Enabled	1
Disabled	0
Default	1

Path	`HKLM\SOFTWARE\Policies\Microsoft\InputPersonalization`
Value	`AllowInputPersonalization`
Type	DWORD
Enabled	1
Disabled	0
Default	1

Narrator Online Services privacy-narrator-online-services

Allow Narrator to use Microsoft cloud services for features like intelligent image descriptions and enhanced voice models.

Registry Details

Path	`HKCU\Software\Microsoft\Narrator\NoRoam`
Value	`OnlineServicesEnabled`
Type	DWORD
Enabled	1
Disabled	0
Default	1 (Absence = Enabled)

Narrator Scripting Support privacy-narrator-scripting

Allow Narrator to execute scripts for automation and custom functionality.

Registry Details

Path	`HKCU\Software\Microsoft\Narrator\NoRoam`
Value	`ScriptingEnabled`
Type	DWORD
Enabled	1
Disabled	0
Default	1 (Absence = Enabled)

Inking and Typing Personalization

Settings for inking and typing personalization features.

Custom Inking and Typing Dictionary privacy-inking-typing-dictionary

Uses your typing history and handwriting patterns to create a custom dictionary. Turning off will clear all words in your custom dictionary.

Registry Details

Path	`HKCU\Software\Microsoft\Windows\CurrentVersion\CPSS\Store\InkingAndTypingPersonalization`
Value	`Value`
Type	DWORD
Enabled	1
Disabled	0
Default	1

Path	`HKCU\Software\Microsoft\Personalization\Settings`
Value	`AcceptedPrivacyPolicy`
Type	DWORD
Enabled	1
Disabled	0
Default	1

Path	`HKCU\Software\Microsoft\InputPersonalization`
Value	`RestrictImplicitTextCollection`
Type	DWORD
Enabled (not restricted)	0
Disabled (restricted)	1
Default	0

Path	`HKCU\Software\Microsoft\InputPersonalization\TrainedDataStore`
Value	`HarvestContacts`
Type	DWORD
Enabled	1
Disabled	0
Default	1

Diagnostics & Feedback

Settings for telemetry, diagnostic data collection, and feedback to Microsoft.

Send Diagnostic Data privacy-diagnostics

Send diagnostic data to Microsoft to help improve Windows and keep it secure.

Registry Details

Path	`HKCU\Software\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack`
Value	`ShowedToastAtLevel`
Type	DWORD
Enabled (full)	3
Disabled (basic)	1
Default	3

Path	`HKCU\SOFTWARE\Policies\Microsoft\Windows\DataCollection`
Value	`AllowTelemetry`
Type	DWORD
Options	0=Off, 1=Basic, 3=Full
Default	3

Path	`HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\DataCollection`
Value	`AllowTelemetry`
Type	DWORD
Options	1=Basic, 3=Full
Default	3

Path	`HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\DataCollection`
Value	`AllowTelemetry`
Type	DWORD
Options	1=Basic, 3=Full
Default	3

Path	`HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\DataCollection`
Value	`MaxTelemetryAllowed`
Type	DWORD
Options	1=Basic, 3=Full
Default	3

Path	`HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\DataCollection`
Value	`MaxTelemetryAllowed`
Type	DWORD
Options	1=Basic, 3=Full
Default	3

Path	`HKLM\SOFTWARE\Policies\Microsoft\Windows\DataCollection`
Value	`AllowTelemetry`
Type	DWORD
Options	0=Off, 1=Basic, 3=Full
Default	3

Improve inking and typing privacy-improve-inking-typing

Send optional inking and typing diagnostic data to Microsoft. Requires "Send Diagnostic Data" to be enabled.

Registry Details

Path	`HKCU\Software\Microsoft\Input\TIPC`
Value	`Enabled`
Type	DWORD
Enabled	1
Disabled	0
Default	1

Path	`HKCU\Software\Microsoft\Windows\CurrentVersion\CPSS\Store\ImproveInkingAndTyping`
Value	`Value`
Type	DWORD
Enabled	1
Disabled	0
Default	1

Tailored Experiences privacy-tailored-experiences

Let Microsoft use your diagnostic data to show personalized tips, ads and recommendations.

Registry Details

Path	`HKCU\Software\Microsoft\Windows\CurrentVersion\Privacy`
Value	`TailoredExperiencesWithDiagnosticDataEnabled`
Type	DWORD
Enabled	1
Disabled	0
Default	1

Path	`HKCU\Software\Policies\Microsoft\Windows\CloudContent`
Value	`DisableTailoredExperiencesWithDiagnosticData`
Type	DWORD
Enabled (tailored ON)	0
Disabled (tailored OFF)	1
Default	0

Path	`HKLM\Software\Policies\Microsoft\Windows\CloudContent`
Value	`DisableTailoredExperiencesWithDiagnosticData`
Type	DWORD
Enabled (tailored ON)	0
Disabled (tailored OFF)	1
Default	0

Allow Windows to ask you for feedback privacy-feedback-frequency

Let Windows ask you to provide feedback on experiences in Windows.

Registry Details

Path	`HKCU\SOFTWARE\Policies\Microsoft\Windows\DataCollection`
Value	`DoNotShowFeedbackNotifications`
Type	DWORD
Enabled (feedback ON)	Key deleted
Disabled (feedback OFF)	1
Default	Key absent (Absence = Enabled)

Path	`HKLM\SOFTWARE\Policies\Microsoft\Windows\DataCollection`
Value	`DoNotShowFeedbackNotifications`
Type	DWORD
Enabled (feedback ON)	Key deleted
Disabled (feedback OFF)	1
Default	Key absent (Absence = Enabled)

Activity History

Settings for Windows activity history and timeline features.

Activity History privacy-activity-history Windows 10 Only

Allows you to jump back into what you were doing with apps, docs, or other activities on startup.

Registry Details

Path	`HKCU\SOFTWARE\Policies\Microsoft\Windows\System`
Value	`PublishUserActivities`
Type	DWORD
Enabled	1
Disabled	0
Default	1 (Absence = Enabled)

Path	`HKLM\SOFTWARE\Policies\Microsoft\Windows\System`
Value	`PublishUserActivities`
Type	DWORD
Enabled	1
Disabled	0
Default	1 (Absence = Enabled)

Timeline Suggestions privacy-timeline-suggestions Windows 10 Only

Shows suggestions in the Windows 10 Timeline feature.

Registry Details

Path	`HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager`
Value	`SubscribedContent-353698Enabled`
Type	DWORD
Enabled	1
Disabled	0
Default	1 (Absence = Enabled)

Search Permissions

Settings for Windows Search behavior and cloud integration.

Search history on this device privacy-search-history

Improves search results by allowing Windows Search to store your search history locally on this device. Does not clear existing history.

Registry Details

Path	`HKCU\Software\Microsoft\Windows\CurrentVersion\SearchSettings`
Value	`IsDeviceSearchHistoryEnabled`
Type	DWORD
Enabled	1
Disabled	0
Default	1 (Absence = Enabled)

Show search highlights privacy-search-highlights

See content suggestions in search.

Registry Details

Path	`HKCU\Software\Microsoft\Windows\CurrentVersion\SearchSettings`
Value	`IsDynamicSearchBoxEnabled`
Type	DWORD
Enabled	1
Disabled	0
Default	1 (Absence = Enabled)

Cloud Content Search for Microsoft account privacy-search-msa-cloud

Allow Windows Search to show results from apps and services that you are signed in to with your Microsoft account.

Registry Details

Path	`HKCU\Software\Microsoft\Windows\CurrentVersion\SearchSettings`
Value	`IsMSACloudSearchEnabled`
Type	DWORD
Enabled	1
Disabled	0
Default	1 (Absence = Enabled)

Cloud Content Search for Work or School account privacy-search-aad-cloud

Allow Windows Search to show results from apps and services that you are signed in to with your work or school account.

Registry Details

Path	`HKCU\Software\Microsoft\Windows\CurrentVersion\SearchSettings`
Value	`IsAADCloudSearchEnabled`
Type	DWORD
Enabled	1
Disabled	0
Default	1 (Absence = Enabled)

Allow Cortana privacy-allow-cortana

Enables Microsoft's Cortana virtual assistant for voice commands and searches.

Registry Details

Path	`HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search`
Value	`AllowCortana`
Type	DWORD
Enabled	Key deleted
Disabled	0
Default	Key absent (Absence = Enabled)

Path	`HKCU\SOFTWARE\Policies\Microsoft\Windows\Windows Search`
Value	`AllowCortana`
Type	DWORD
Enabled	Key deleted
Disabled	0
Default	Key absent (Absence = Enabled)

App Permissions

Control which system features apps can access.

Location Services privacy-location-services

Allows Windows and apps to access your device location for location-based features.

Registry Details

Path	`HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\location`
Value	`Value`
Type	String
Enabled	Allow
Disabled	Deny
Default	Allow

Path	`HKCU\SOFTWARE\Policies\Microsoft\Windows\LocationAndSensors`
Value	`DisableLocation`
Type	DWORD
Enabled (location ON)	0
Disabled (location OFF)	1
Default	0

Path	`HKLM\SOFTWARE\Policies\Microsoft\Windows\LocationAndSensors`
Value	`DisableLocation`
Type	DWORD
Enabled (location ON)	0
Disabled (location OFF)	1
Default	0

Camera Access privacy-camera-access

Allow apps to have camera access.

Registry Details

Path	`HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\webcam`
Value	`Value`
Type	String
Enabled	Allow
Disabled	Deny
Default	Allow

Microphone Access privacy-microphone-access

Allow apps to have microphone access.

Registry Details

Path	`HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\microphone`
Value	`Value`
Type	String
Enabled	Allow
Disabled	Deny
Default	Allow

Account Info Access privacy-account-info-access

Allow apps to have account info access.

Registry Details

Path	`HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\userAccountInformation`
Value	`Value`
Type	String
Enabled	Allow
Disabled	Deny
Default	Allow

App Diagnostic Access privacy-app-diagnostic-access

Allow apps to have app diagnostic access.

Registry Details

Path	`HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\appDiagnostics`
Value	`Value`
Type	String
Enabled	Allow
Disabled	Deny
Default	Allow

Disable OneDrive Automatic Backups privacy-onedrive-auto-backup

Prevents OneDrive from automatically backing up important folders (Documents, Pictures, Desktop, etc.).

Registry Details

Path	`HKLM\SOFTWARE\Policies\Microsoft\OneDrive`
Value	`KFMBlockOptIn`
Type	DWORD
Enabled (backup blocked)	1
Disabled (backup allowed)	Key deleted
Default	Key absent

Path	`HKCU\SOFTWARE\Policies\Microsoft\OneDrive`
Value	`KFMBlockOptIn`
Type	DWORD
Enabled (backup blocked)	1
Disabled (backup allowed)	Key deleted
Default	Key absent