Category: Windows

DoNotSpy11 Update

DoNotSpy11 update adds option to disable Windows AI features

Posted on by Martin Brinkmann

DoNotspy11 is a long-standing privacy and tweaking application for Windows. The first update of 2024 introduces new features and compatibility with recent Windows releases.

It is a small tool that you may use to modify Windows settings with ease. It addresses one of the main issues that privacy-conscious users have with Windows: the scattering of privacy-related preferences and policies.

Instead of having to use the Control Panel, Settings app, Registry, Group Policy Editor, and some other tools to improve privacy, it delivers everything in a single easy-to-use interface.

Word of Advice: Windows may throw a SmartScreen error when you try to run the program on your device. This is not because it is malicious or faulty. SmartScreen displays also when a program is new.

Another great privacy tool is O&O ShutUp10++, which I reviewed some time ago.

A short DoNotspy11 Intro

DoNotSpy11 displays all applicable privacy tweaks in the interface. It uses color codes to highlight the safety of tweaks. The following colors are used:

  • Blue — These are safe settings that should not have any ill-effects.
  • Orange — It is necessary to read the description, as they may impact other features among other things.
  • Red — Usually not recommended to change.
  • Gray — These settings have not changed since the last use of the application.

The program suggests to create a System Restore point whenever changes are made. This allows you to go back to the previous state in case something does not work anymore. I never ran into this problem while using the app, but a backup option is always welcome.

Just check or uncheck the available options and hit the apply button in the end to make the change. It is easy to undo changes manually or through System Restore points.

DoNotSpy11 1.2.1.0 Changelog

The update introduces ten new tweaks, including a new Windows AI category. It also adds general compatibility with Windows 11 version 23H2 Moment 5 and Windows 11 version 24H2, which will be released later this year.

The final change adds high DPI support, which should improve visuals on high DPI displays.

As for the tweaks, here is what is new:

  1. AI: Disable Recall (Snapshots) (from build 26100)
  2. Apps: Disable Access to Cellular Data
  3. Apps: Disable Access to Eye Tracking
  4. Apps: Disable Access to Motion / Activity
  5. Edge: Disable Control Copilot Access to Browser Context
  6. Edge: Disable Spell Checking Provided by Microsoft Editor
  7. Edge: Disable Website Typo Protection
  8. Edge: Hide App Launcher on Microsoft Edge New Tab Page
  9. Start: Disable Recommended Section
  10. Start: Disable Website Recommendations in Recommended Section

Three tweaks have been updated. The first two add options to disable Copilot and the Copilot taskbar button on Windows 10 devices. The third changes the disable background applications recommendation from blue (safe) to yellow (read comment).

You can check out the full changelog here.

Do you use tweaking tools to improve privacy or other features of Windows devices?

Microsoft announces changes to Recall in Windows 11 after backlash

Posted on by Martin Brinkmann

When Microsoft announced the AI feature Recall in May, it felt confidence in its AI strategy. Recall, a feature that takes snapshots of the PC screen every five seconds, was designed to be the selling point for a new breed of PCs, that Microsoft calls Copilot+ PCs.

A lot depended on Recall. It was the first major AI feature that Microsoft designed exclusively for this new PC type.

The reveal and the days that followed turned out different. Recall was criticized left and right.

Core points were:

  • Windows 11 activated Recall for users automatically and there was no opt-out option.
  • The Recall database was not properly secured.

This would have made Recall one of the most lucrative target in computing history.

Tip: you can disable Recall in Windows 11 in several ways.

Microsoft announces changes to Recall

Recall new setup with opt-out and opt-in

Today, Microsoft announced a series of changes to Recall that “improve privacy and security safeguards”.

  • The setup experience is changed. Users need to make a decision now to activate Recall or keep it disabled.
  • Windows Hello enrollment is required to enable Recall.
  • Proof of presence is required before users may interact with Recall’s database.
  • Additional security layers, including “just in time” decryption, is also enabled.

Closing words

Microsoft plans to ship the updated version of Recall on June 18th to Windows 11 Insider devices. By then, tinkerers will have another go at the feature to see if it is still possible to gain access to the database.

For a company that announced its new “security first” motto shortly before the reveal of Recall, feedback has been disastrous.

To end on a personal note. I still cannot find a use case for Recall. I do not see how it could help me improve my productivity on Windows PCs. Then again, I’m probably not the target audience for the feature.

What about you? Would you use the safer version of Recall?

TotalRecall: search Windows 11 Recall data and return results

Posted on by Martin Brinkmann

TotalRecall is a new open source tool for Windows that can be used to run searches across the entire Recall database.

Recall is a new feature of Windows 11 that takes snapshots of the screen every five seconds. It stores them locally and makes them available for processing by the user.

Recall is enabled by default on supported systems. Users may disable Recall, but only after the initial setup. While that may change before public release, and Microsoft would do good to make the change, it is on by default right now.

The feature is officially available only for a batch of ARM64 devices at the time of writing, but it will expand to Intel and AMD hardware soon as well. Plus, there are tools available already to make it work on older ARM devices that do not have a NPU chip.

The data is protected, but unlocked once the user logs in. It is then accessible by the user, but also by System or Admin accounts. In other words, any process that runs as System or Admin may be used to access the data.

It does not take an Einstein to connect the dots here to spot the elephant in the room: malware and spyware will target Recall data. It reveals any activity of the user, with the exception of activity in certain private browsing windows.

Forget tracking, you get a clear picture of a user’s likes, dislikes, webpages, apps, games, documents, financial transactions, online banking, private and public messages on forums and chats, and much more, when you gain access to that data.

TotalRecall

TotalRecall is a third-party tool that makes the data searchable via the command line. Run a search for password, and the tool runs a query to return any user activity associated with the term password.

It saves the search results to a text document on the system. This file provides details on the “captured windows, images, and search results”.

You can limit the search to a specific data range or run it across the entire data.

Here is what the tool does:

TotalRecall copies the databases and screenshots and then parses the database for potentially interesting artifacts. You can define dates to limit the extraction as well as search for strings (that were extracted via Recall OCR) of interest. There is no rocket science behind all this. It’s very basic SQLite parsing.

Closing Words

Microsoft, probably, did not expect to receive that much backlash for Recall. It is anyone’s guess whether Microsoft is going to make adjustments to Recall.

Windows 11 users who buy a laptop that is Recall capable, may want to strongly consider turning it off. While it may be a useful tool in very specific work scenarios, the chance of Recall turning into a nightmare for many Windows users is a real one.

Windows 11 Recall data is not secured properly

Posted on by Martin Brinkmann

Is the upcoming Recall AI feature of the Windows 11 operating system a privacy nightmare? While the verdict is still out about that, it is clearly problematic on several levels in its current state.

Recall takes screenshots of the computer screen every 5 seconds. The default configuration takes screenshots of pretty much everything. The only exceptions are private browsing windows of popular browsers and DRM-protected content.

Every other activity, including views of financial documents, porn, games, visited websites, messages, and more may be captured.

It saves the data to a locally stored SQLite database. There it is kept until it is either deleted to make room for newer data or deleted by the user.

Users have several options:

  • Disable Recall entirely, which will likely erase the entire database.
  • Reduce the assigned storage size, which will delete older entries.
  • Use the delete snapshots option to delete some or all snapshots taken.

Multiple parties want access to Recall

Since Recall saves a user’s entire work history on a device for three months by default, it will be seen as a treasure trove by multiple parties.

  • Malware actors may find ways to grab the entire database, which is not encrypted when the system is running.
  • Law enforcement, customs, spies, state sponsored hackers may also want access to it.

Recall offers interesting data. Screenshots of one-time messages, or messages that get deleted by the user of the PC. These remain in the database until they are flushed out because of age.

Recall is not all that useful for most Windows users

The idea of searching through the computing activity of the past three months may sound appealing to some users.

In work or research environments, it may be seen as a great feature, provided that Microsoft gets privacy, security, regulatory requirements, and all of that in order before release.

For most home users, Recall does not have a great value proposition.

What problem is Recall solving? How often do home users need to find something very specific on their devices that they have trouble finding using the built-in search or manual searching?

In all of Microsoft’s talks and announcements, the company has not really answered that question.

If you weight this now against the prospect of maintaining a database on your computer that reveals what you have done on it in the past three months, then it is likely that most users may pass on this.

Depending on how it launches, enabled by default, with or without notification to the user, it is probably not going to see the wide use that Microsoft hopes it will have.

Closing Words

Recall is not here yet and things may change before the final release later this year. Most home users who happen to purchase Copilot+ PCs may want to consider disabling Recall to block the feature from recording everything they do on their devices.

I suggest you check out the following thread on Recall for additional information on it and the issues that it introduces.

What about you? Would you make use of Recall, if it would be available on your devices?

O&O ShutUp10++ update

O&O ShutUp10++ update adds more privacy goodness

Posted on by Martin Brinkmann

The first O&O ShutUp10++ update for Windows 10 and 11 of 2024 is now available. It is an excellent privacy tool to improve privacy through an easy to use interface.

You can check out my full review of O&O ShutUp10++ for in-depth information.

O&O ShutUp10++ 1.9.1437

The new version of the free application is available already. It was released about a week ago. New and existing users may download it from the official project website.

The update introduces new privacy options and also quality of life improvements. As far as privacy options are concerned, here is what is new:

  • NEW: Disable remote assistance connections to this computer
  • NEW: Disable remote connections to this computer

You find these two new options under Local Machine > Miscellaneous at the very bottom of the page.

The remaining changes improve usability of the app. Whenever you make a change, you receive a prompt to create a system restore point. If the feature is disabled, O&O ShutUp10++ may now launch the Control Panel in this case to rectify this.

Existing users may also notice that the start of the app is faster than before.

The configuration file is saved to the start directory now, and it is automatically migrated from previous versions. The file is called OOSU10.cfg and you find it in the same directory that you run O&O ShutUp10++ from. This makes it easier to migrate the configuration to other systems.

The application supports making bulk changes. It distinguishes between recommended, somewhat recommended, and all settings. A click on any of those under Actions displays the number of changed preferences now.

Tip: while these actions sound useful, they are applied immediately. It is better to make changes manually instead.

  1. Select View > Group by Categories to disable the grouping of settings.
  2. Click on “recommended” in the table to sort by recommendation state.
  3. Go through the list from top to bottom and make the changes manually.

Closing Words

O&O ShutUP10++ is an excellent free application for Windows to improve user privacy on the system. It is updated frequently to introduce new privacy options, such as disabling Copilot.

Do you use privacy tweak tools or system optimization tools? Which do you use and prefer?

How to disable Recall taking snapshots of the screen in Windows 11

Posted on by Martin Brinkmann

Recall is an upcoming AI feature of Windows 11. It takes captures of the screen every five seconds and saves them on the local system. Users may then interact with AI to look up information or process data that has been captured.

Most current Windows 11 PCs won’t get Recall functionality, as a Copilot+ PC is required. These PCs have specific requirements that include a neural processing unit and 16 GB of RAM.

The first iteration of Recall will only be available for specific Snapdragon ARM processors on top of that. With time, Recall will become available for AMD and Intel PCs as well.

Recall Criticism

Windows 11’s Recall feature is not without criticism. Here are the main points:

  • It records a user’s entire activity on the Windows PC, with a few exceptions. This makes it the holy grail for law enforcement, spammers, malicious actors, advertisers and marketers.
  • Recall snapshots require lots of storage. The default is 25 GB on a 256 GB hard drive. While you can drop that to 10 GB, it is still a lot of space. On 1 TB+ drives, the default is 150 GB of storage.

Disabling Recall in Windows 11

There are three options to disable Recall on PCs that support it.

  • Via the Settings app.
  • Via the Group Policy Editor.
  • Via the Registry (not yet available)

Settings app

Disable Windows 11 Recall in Settings
  1. Open the Start menu and select Settings.
  2. Go to Privacy & security > Recall and snapshots.
  3. Toggle Save snapshots to off.

This is all to it. Recall is disabled from that moment on for that user account.

Turn off Recall in the Group Policy Editor

Note: The Group Policy Editor is only available in Windows 11 Pro, Enterprise, and Education editions. Home systems may disable Recall in the Registry, which is explained in the next section.

  1. Open the Start menu.
  2. Type gpedit.msc and press the Enter-key to load the Group Policy Editor.
  3. Use the hierarchy on the left to go to User Configuration > Administrative Templates > Windows Components > Windows AI.
  4. Double-click on Turn off Saving Snapshots for Windows.
  5. Change the statues from Not Configured to Disabled.
  6. Restart the PC.

Disable Recall in the Registry

Information not yet available, will update once it becomes available.

Recall memories

About Windows 11 version 24H2 Recall AI feature

Posted on by Martin Brinkmann

A lot has been written about the upcoming Recall feature of Windows 11 version 24H2. Reserved exclusively for Copilot+ PCs, it will be unavailable to the majority of users who upgrade their Windows 11 PCs to the new version.

Recall, in a nutshell, takes frequent captures of the entire screen and stores them encrypted on the local system. Windows 11 users may then invoke the Recall feature to interact with the saved content.

From searching for specific information over getting summaries of watched videos or telecalls to finding that specific asparagus recipe that you looked at some time ago in Edge.

It is a proactive feature, unlike Copilot’s rewrite feature and others.

Microsoft describes Recall in the following way:

Search across time to find the content you need. Then, re-engage with it. With Recall, you have an explorable timeline of your PC’s past. Just describe how you remember it and Recall will retrieve the moment you saw it. Any photo, link, or message can be a fresh point to continue from. As you use your PC, Recall takes snapshots of your screen. Snapshots are taken every five seconds while content on the screen is different from the previous snapshot.

How Recall works

You use natural language to find something and Recall returns the information separated into text and visual matches.

Windows 11 Recall feature

Recall is shown as an icon on the Windows 11 taskbar and it may also be started using the keyboard shortcut Windows-J.

Recall displays a timeline on start that you may use to check out a specific day. Recall loads and displays the snapshots of that particular day then, allowing you to interact with the content.

Recall Timeline

Search is the heart of recall. You use natural language to find or interact with the saved content.

Type what you are looking for and Recall returns any matching snapshot. The AI feature displays hits from all apps by default, but you can filter results by a specific app to narrow down the results.

The feature distinguishes between close and related matches:

  • Close matches — includes at least one of the search terms or images that represent the search term.
  • Related matches — displays related items, e.g., cannelloni results when you searched for goat cheese pizza.

Selecting a screenshot launches the Screenray feature. Microsoft says that Screenray anayzes the snapshot and enables interactions with elements of it.

The company writes:

What you can do with each element changes based on what kind of content screenray detects. If you select a picture in the snapshot, you can copy, edit with your default .jpeg app such as Photos, or send it to another app like the Snipping Tool or Paint. When you highlight text with screenray, you can open it in a text editor or copy it.

Is Recall a privacy nightmare?

Recall records most activity on a Windows PC when it is active. It is up to the user to enable or disable Recall.

Microsoft has added options to disallow the capturing of specific apps or websites. Some of these are only available in Edge.

Recall does not capture private browsing sessions in Chromium-based browsers. In Edge, the feature may furthermore block captures of specific websites.

In other words, if you use a different browser than Edge, website filtering won’t work. If you use Firefox or another non-Chromium-based browser, everything will get recorded.

Recall runs locally only according to Microsoft. Captures are stored locally and the OCR feature runs local as well only.

The main privacy concerns

Recall runs locally only. The main concern that some users have is that someone else may gain access to the recorded data.

There are several scenarios where this may happen:

  • Malware infections may gain access to the data. This gives threat actors access to a user’s entire activity on the PC. It may include information about financial services they use, online accounts, password managers or security software, and confidential information in Word or Excel.
  • Law enforcement, including border agents, may want access to the information as it highlights (most of) the activity of a user on the Windows 11 device. Users may be coerced into giving state representatives access to their Windows PCs.

It is your choice

You may or may not use Recall. Most Windows 11 users cannot even use it, as their PCs do not meet the minimum system requirements.

If your PC supports it, you may want to ask yourself a simple question: do I really need it? Is it improving may workflows or helping me in another way?

It is a novelty feature, but how often will you make use of it once that novelty factor wanes off?

If you ask me, I won’t make use of it. All my PCs are not Copilot+ PCs and even if they were, I would turn it off as I do not need it. I know where to look when need to find something.

For businesses, it may play a bigger role. Making everything searchable, including video calls and presentations, is certainly useful in some scenarios.

What about you? Will you use the Recall feature when it comes out?

How to block Windows 10 from restarting automatically after updates

Posted on by Martin Brinkmann

Microsoft configured non-managed Windows 10 systems to restart automatically after the installation of updates. This can be a huge problem for users. If you run certain processes or have important apps up and running, Windows 10 may restart regardless of that.

This happens after a certain inactivity period. Sometimes, this may result in users losing access to work or being thrown out of games or other apps. While some may reload, like Office apps, others may not reload to the state they were in prior to the initialization of the restart.

The following sections offer step-by-step instructions to stop Windows 10 from restarting the system automatically after the installation of updates.

Stop automatic restarts using the Group Policy Editor

Windows 10 prevent automatic restarts after installation of Windows updates

Note: the Group Policy Editor is only available for Pro, Enterprise, and Education editions. In other words, it is not available for Home editions. Please skip this section and check the Registry section below for instructions to enable the same policy on Home devices.

  1. Open the Start Menu.
  2. Type gpedit.msc and select Edit Group Policy from the results. This opens the Group Policy Editor.
  3. Follow the folder structure on the left and go to: Computer Configuration > Administrative Templates > Windows Components > Windows Update.
  4. Double-click on No auto-restart with logged on users for scheduled automatic updates installations.
  5. Set the policy to Enabled.
  6. Select OK.
  7. Double-click on Configure Automatic Updates under the same Windows Update folder.
  8. Set the policy to Enabled.
  9. Set the policy to Auto download and schedule the install.
  10. Click ok.

Tip: you can also set the second policy to Notify for download and auto install to prevent any automatic downloads of updates or installations of updates.

Stop automatic reboots using the Registry

Stop automatic reboots Windows Update
  1. Open the Start menu.
  2. Type regedit.msc and select Registry Editor.
  3. Confirm the UAC prompt, if it is displayed.
  4. Go to Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU.
  5. If a key does not exist, right-click on the previous key and select New > Key. Name it accordingly.
  6. Right-click on AU and select New > Dword (32-bit) Value. Repeat the steps six times:
    • Name the first AUOptions. Double-click and set its value to 4.
    • Name the second NoAutoRebootWithLoggedOnUsers. Double-click on it and sets its value to 1.
    • Name the third NoAutoUpdate. Double-click on it and set its value to 0.
    • Name the fourth ScheduledInstallDay. Double-click on it and set its value to 0.
    • Name the fifth ScheduledInstallEveryWeek. Double-click on it and set its value to 1.
    • Name the sixth ScheduledInstallTime. Double-click on it and set its value to 3.
  7. Close the Registry Editor.
  8. Restart the PC.

How do you handle updates on Windows devices?

Download Windows ISO images

How to download Windows ISO images (Stable or Insider)

Posted on by Martin Brinkmann

You have several options when it comes to downloading Windows ISO images. From downloading them from Microsoft using the Media Creation Tool to using tools such as Rufus to download them.

One of the easiest options to get the latest Insider or Stable ISO images is to use UUP Dump.

It supports:

  • All Windows releases: Windows 10, Windows 11, and Windows Server.
  • All Windows channels: Public Release, Release Preview, Beta, Dev and Canary.
  • Several Windows editions: Home and Pro
  • All architectures: x64 and ARM64
  • All supported languages.

Here is how it works

  1. Open the UUP Dump website in your browser of choice.
  2. Use
    • Search to find a specific build.
    • Quick Options to get the latest build of a specific channel.
    • Recently added builds to see the latest releases.
  3. Select the desired language and click next.
  4. Select the desired edition, e.g., Windows Home and Pro, and click next.
  5. Make sure download method is set to download and convert to ISO.
  6. Check conversion options:
    • Include updates.
    • Run component cleanup.
    • Integrate .NET Framework 3.5.
    • Use solid (ESD) compression.
  7. Select create download package.
  8. Pick a local folder and select save to download the ZIP archive to the local system.
  9. Right-click on the download ZIP file and load the properties.
  10. Select the unblock option and click ok to proceed.
  11. Extract the ZIP archive.
  12. Modify CustomAppsList.txt to select the Microsoft Store apps that you want installed when using the ISO image. Add # in front to block installation and remove # to include the installation.
  13. Run uup_download_windows.cmd to start the process.
  14. Note that Windows may throw a SmartScreen warning.
  15. The process may take quite some time. Wait until you get the notification that you may press 0 to exit.
  16. The ISO image should now be inside the folder.

That is all to it.

Have you downloaded Windows ISO images recently?

Windows create archives compress to

Windows 11 supporting 7z and Tar creation is a good thing, but you should not be using it

Posted on by Martin Brinkmann

Microsoft has added support for extracting archive formats and creating ZIP archives in its Windows operating system. This is a useful feature, as it allows users to manage several popular archive formats without installation of third-party software.

If you encounter archives occasionally, say once a month, then it is usually easier to use the built-in functionality than third-party tools.

Now, Microsoft is working on bringing support to create 7-Zip and Tar archives to Windows 11. This works identical to creating zip archives.

Just right-click on and select the “compress to” option to see a list of all available archive formats. Pick the one you want and Windows will compress the selection of files to the format.

The three supported formats increase the usefulness of the feature. While Windows continues to lack support for creating other popular formats, such as Rar or Gz, adding native support for more formats is still welcome.

Third-party archive software is superior

While it is great that Windows is getting support for extracting and creating archives, most users may want to use third-party software still.

The main reason is performance. Extracting archives with Windows’ built-in extraction feature is much slower. Similarly, creating archives using Windows’ built-in compress to functionality is also much slower.

This is true for any of the supported formats. It can takes minutes longer to extract an archive using the Windows functionality. Might not be such a big problem if the functionality is needed rarely, but if you happen to extract or compress regularly, you should use third-party software such as 7-Zip or WinRAR to do so.

Closing Words

All in all, it is still a good feature addition to Windows. It improves handling of archives right out of the box. Still, most users should install third-party archive software to manage archives on Windows.

What about you? Do you use archive software? If so which and why this particular piece?