How to Disable Telemetry in Windows 11 Safely

What Windows actually collects, in two tiers

Microsoft documents two levels. Required diagnostic data is the minimum set: device model, OS build, installed update state, basic reliability signals such as whether a driver crashed. It is what the update service uses to decide which packages your hardware should receive, and it is the level you cannot turn off on Home or Pro editions. Optional diagnostic data adds the rest — which apps you open and for how long, how features are used, memory snapshots when something crashes, browsing activity in Microsoft's own browser.

That distinction matters because it defines what is realistically achievable. Switching Optional off is a supported, reversible, one-click change that removes the bulk of what people object to. Removing Required data is not offered on consumer editions, and the registry value that appears to do it is only honoured on Enterprise and Education. Anything promising more on a Home machine is either editing something that has no effect, or breaking a component.

It is also worth separating telemetry from the other things people lump in with it: the advertising ID used to personalize ads in the Microsoft Store and some apps, activity history, Cortana and search personalization, and per-app permissions for location, camera and microphone. Those are distinct switches in distinct places, and each one is worth setting deliberately.

The Settings switches that do most of the work

Everything in this section lives under Settings → Privacy & security and needs no administrator rights, no registry editing and no third-party tool. Go through the list once; it takes about five minutes and is the entire supported surface for a home user.

• Diagnostics & feedback → Send optional diagnostic data → Off
• Diagnostics & feedback → Tailored experiences → Off
• Diagnostics & feedback → Feedback frequency → Never
• Diagnostics & feedback → Delete diagnostic data → Delete (clears what is already held)
• General → Let apps show me personalized ads using my advertising ID → Off
• General → Let websites show locally relevant content by accessing my language list → Off
• Activity history → Store my activity history on this device → Off
• Search permissions → Search history on this device → Clear, and turn off cloud content search

The advertising ID and activity history, in more detail

The advertising ID is a per-user identifier that apps can read to link your activity across them for ad targeting. Turning it off in Settings → Privacy & security → General resets the identifier and stops apps from reading it. The underlying value is HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\AdvertisingInfo, where Enabled set to 0 is exactly what the toggle writes. Ads do not disappear; they stop being personalized, which is the honest description.

Activity history is what fed the old Timeline feature and still syncs some app and document usage to your Microsoft account if you allow it. Turning off “Store my activity history on this device” stops local collection, and the “Clear activity history” button removes what is already there. If you have a Microsoft account signed in, also visit the account's privacy dashboard in a browser — data already uploaded is deleted there, not on the PC.

DiagTrack: what stopping the service really changes

DiagTrack, displayed as “Connected User Experiences and Telemetry”, is the service that collects and uploads diagnostic events. Check its state with Get-Service DiagTrack in PowerShell. To stop it, open services.msc, find it, set Startup type to Disabled and press Stop; from an elevated prompt the equivalent is sc config DiagTrack start=disabled followed by sc stop DiagTrack. It writes its traces under C:\ProgramData\Microsoft\Diagnosis, which is also where the space it occupies goes.

Be clear about the effect. With optional diagnostics already off, disabling DiagTrack mostly removes the remaining background service activity — it is a modest change, and its main practical benefit on an older machine is less background disk I/O. It does not affect Windows Update, activation or Defender definitions, all of which use separate services. It does break the Feedback Hub and some enterprise health reporting, which no home user will notice.

The related service dmwappushservice (“Device Management Wireless Application Protocol Push message Routing Service”) was part of older telemetry advice and no longer exists on current Windows 11 builds. If you find guides telling you to disable it and the service is not there, that is expected, not a problem to solve.

Group Policy and the registry: what works on which edition

On Windows 11 Pro, Enterprise and Education, gpedit.msc offers Computer Configuration → Administrative Templates → Windows Components → Data Collection and Preview Builds → “Allow Diagnostic Data”. Setting it to “Send required diagnostic data” enforces the minimum level for all users and greys out the Settings toggle so nothing re-enables it later. The equivalent registry value is AllowTelemetry, a DWORD under HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection.

The value people copy from forums is 0, meaning “Diagnostic data off”. On Enterprise and Education that is honoured. On Home and Pro it is silently treated as 1 — Required — so the result is identical to the supported setting, and the claim that setting it to 0 makes a Home machine send nothing is simply not true. Setting it to 1 on Pro is a legitimate, documented configuration; expecting 0 to do more on Home is not.

Windows Home has no gpedit.msc, and the answers that suggest installing it from a third-party package are worth refusing: the policy engine is present in Home, but many policies are not evaluated there, and the package sources are not trustworthy. Use the Settings switches on Home, and treat the registry value as a way to make a Pro setting stick rather than a way to go further.

Scheduled tasks worth turning off

Three scheduled tasks under Task Scheduler → Task Scheduler Library → Microsoft → Windows collect data on a timer, and each can be disabled from the right-click menu. In \Application Experience there is Microsoft Compatibility Appraiser, which inventories installed software for upgrade compatibility and is genuinely heavy on older machines, plus ProgramDataUpdater. In \Customer Experience Improvement Program there are Consolidator and UsbCeip, which upload CEIP data.

Disable them rather than deleting them, so they can be restored with one click. The realistic benefit is less periodic background CPU and disk activity, most noticeable on a mechanical drive; the realistic risk is that a future feature update re-enables them, which is worth re-checking after major upgrades. One caveat specific to Microsoft Compatibility Appraiser: it feeds the upgrade-readiness checks, so if a feature update later refuses to install, re-enable it before troubleshooting further.

What not to do

Blocking Microsoft domains in C:\Windows\System32\drivers\etc\hosts is the most common bad advice on this topic. The telemetry endpoints share infrastructure with Windows Update, the Store, activation and Defender definitions, so a copy-pasted hosts block reliably produces a machine that cannot update and cannot reactivate after a hardware change — and the cause is invisible weeks later when the problem surfaces. Windows also ignores hosts entries for some of its own services, so the block is partly ineffective in addition to being harmful.

The same applies to “debloat” scripts that remove system apps, delete services and rewrite dozens of policies in one run. They usually work on the day they are run and leave the machine unable to install the next feature update; the damage is hard to reverse because nothing recorded what was changed. If you use one at all, take a restore point first and read what it does.

The safe version of this work is the ordered list above: optional diagnostics off, advertising ID off, activity history off and cleared, tailored experiences off, DiagTrack disabled, the three scheduled tasks disabled, and on Pro the Group Policy setting to hold the level in place. Kleaner PRO's privacy tweaks page groups exactly those toggles with a plain description of what each one costs, and takes a restore point before applying them — but everything it changes is reachable by hand through the steps above.

Questions and Answers

Read next

All articles · FAQ