{"id":11173,"date":"2019-09-14T00:06:00","date_gmt":"2019-09-13T22:06:00","guid":{"rendered":"http:\/\/159.69.82.204\/win\/?p=11173"},"modified":"2019-09-13T22:59:15","modified_gmt":"2019-09-13T20:59:15","slug":"windows-7-security-only-update-kb4516033-with-telemetry","status":"publish","type":"post","link":"https:\/\/borncity.com\/win\/2019\/09\/14\/windows-7-security-only-update-kb4516033-with-telemetry\/","title":{"rendered":"Windows 7: Security-only Update KB4516033 with Telemetry"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" title=\"win7\" style=\"float: left; margin: 0px 10px 0px 0px; display: inline\" border=\"0\" alt=\"win7\" src=\"http:\/\/www.borncity.com\/blog\/wp-content\/uploads\/2012\/03\/win7_thumb1.jpg\" width=\"44\" align=\"left\" height=\"42\">[<a href=\"https:\/\/www.borncity.com\/blog\/2019\/09\/12\/windows-7-security-only-update-kb4516033-vom-10-sep-2019-erneut-mit-telemetrie\/\">German<\/a>]Microsoft has released a security-only update as of September 10, 2019. The Security-only update comes again with telemetry on board. Here is a review of what is known so far.<\/p>\n<p><!--more--><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" alt=\"\" src=\"https:\/\/vg06.met.vgwort.de\/na\/655e906c7b7f4dbca5ce286efed55d5f\" width=\"1\" height=\"1\">I had described the updates in the blog post <a href=\"https:\/\/borncity.com\/win\/2019\/09\/11\/patchday-updates-for-windows-7-8-1-server-sept-10-2019\/\">Patchday: Updates for Windows 7\/8.1\/Server (Sept. 10, 2019)<\/a>.  <\/p>\n<h2>Telemetry on board<\/h2>\n<p>For years, the rollup updates for Windows 7 were equipped with telemetry functions, but the security online updates were telemetry-free. Under WSUS, these updates are offered as standard anyway and installed in corporate environments.  <\/p>\n<p>Users who didn't want any new telemetry functions, but are dependent on Windows Update, have manually installed the Security-online Updates. Unfortunately this model died. Already in July 2019 update KB4507456 comes with telemetry. I had reported in the blog post <a href=\"https:\/\/borncity.com\/win\/2019\/07\/11\/windows-7-update-kb4507456-security-only-with-telemetry\/\">Windows 7 Update KB4507456 (security only) with Telemetry<\/a>. The Security-only Update from August 2019 was shipped without Telemetry.  <\/p>\n<h2>Security-only Update KB4516033 with Telemetry again<\/h2>\n<p>Shortly after the release of the updates I received a mail from blog reader Christoph W. with a hint to the telemetry functions in the security-only update <a href=\"https:\/\/support.microsoft.com\/en-us\/help\/4516033\/\">KB4516033<\/a>.  <\/p>\n<blockquote>\n<p>I just found out that on patchday under win 7 MS a new version of \"CompatTelRunner.exe\" was added! (firewall reported)<\/p>\n<\/blockquote>\n<p><em><img decoding=\"async\" title=\"CompatelRunner Telemetrie (Windows 7)\" alt=\"CompatelRunner Telemetrie (Windows 7)\" src=\"https:\/\/i.imgur.com\/PXG31Bl.jpg\"><\/em>  <\/p>\n<p>Christoph ran ZoneAlarm as a firewall, so one of them got a message. German blog reader Bolko also <a href=\"https:\/\/www.borncity.com\/blog\/2019\/09\/11\/patchday-updates-fr-windows-7-8-1-server-10-sept-2019\/#comment-77394\" target=\"_blank\" rel=\"noopener noreferrer\">left a comment with details<\/a> (thanks).  <\/p>\n<blockquote>\n<p>The security-only update KB4516033 contains telemetry again:<br \/>\u2013 appraiser.dll<br \/>\u2013 CompatTelRunner.exe<br \/>\u2013 diagtrack.dll<br \/>\u2013 DiagTrackRunner.exe  <\/p>\n<p>Previously, these files were included in the KB2952664 update.<\/p>\n<\/blockquote>\n<p>This is of course a nasty situation. Apparently Microsoft want to find out why the machines aren't being updated &#8211; at least that's the only explanation I can think of.  <\/p>\n<h2>Disable the Telemetry<\/h2>\n<p>The telemetry features have, besides the often unwanted data collection, the often unpleasant side effect that TrustedInstaller.exe causes a high CPU load (see <a href=\"https:\/\/answers.microsoft.com\/en-us\/windows\/forum\/windows8_1-performance\/disabling-windows-compatability-telemetry\/f1437548-84ae-4421-9a07-45feb17cab86?auth=1\" target=\"_blank\" rel=\"noopener noreferrer\">this thread<\/a> to Windows 8.1) or lead to problems. Some blog readers gave hints on how to disable the telemetry functions under Windows 7.  <\/p>\n<h3>Disable Task in Task Planner<\/h3>\n<p>Bolko gave the tip <a href=\"https:\/\/www.borncity.com\/blog\/2019\/09\/11\/patchday-updates-fr-windows-7-8-1-server-10-sept-2019\/#comment-77394\" target=\"_blank\" rel=\"noopener noreferrer\">in the comment here<\/a>, to check in the task planner in the branch:<\/p>\n<p><em>\\Microsoft\\Windows\\Application Experience\\Microsoft Compatibility Appraiser<\/em>  <\/p>\n<p>whether the task is switched off. If the task is activated, the programs CompatTelRunner.exe and DiagTrackRunner.exe run daily, which collect the telemetry data and upload it to Microsoft.  <\/p>\n<p><a href=\"https:\/\/i.imgur.com\/xvSyGga.jpg\"><img loading=\"lazy\" decoding=\"async\" title=\"Telemetrie-Task\" alt=\"Telemetrie-Task\" src=\"https:\/\/i.imgur.com\/xvSyGga.jpg\" width=\"642\" height=\"448\"><\/a>  <\/p>\n<p>You can open the entry by double-clicking it and then click on the<em> Delete<\/em> button on the <em>Trigger<\/em> tab to cancel the task. Or you can select <em>Edit<\/em> and uncheck the <em>Enabled<\/em> checkbox in the <em>Edit Triggers<\/em> dialog box.  <\/p>\n<p><img decoding=\"async\" title=\"Task deaktivieren\" alt=\"Task deaktivieren\" src=\"https:\/\/i.imgur.com\/u6nK5Fi.jpg\">  <\/p>\n<p>Then at least the task is no longer executed.  <\/p>\n<h3>Deactivate service<\/h3>\n<p>Blog reader Christoph W. suggests stopping and deactivating the Diagnostic Tracking Service in question.  <\/p>\n<blockquote>\n<p>It is better to disable telemetry. Several steps are necessary:  <\/p>\n<p>1) Stop and deactivate the Diagnostic Tracking Service under the services.  <\/p>\n<p>2) Check in the registry whether it was successful. So check, if the entry<br \/>HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\DiagTrack <br \/>contains an entry \"Start\".  <\/p>\n<p>Meaning of the values: 2 (automatic), 3 (manual) and 4 (deactivated)  <\/p>\n<p>3)&nbsp; Start editor for local group policies with gpedit.msc as admin.  <\/p>\n<p>Activate the entry \"Deactivate application telemetry\" under Administrative Templates &gt; Windows Components &gt; Application Compatibility.  <\/p>\n<p>Under Administrative Templates &gt; Windows Components &gt; Ease of Use Program: Disable Both Entries<\/p>\n<\/blockquote>\n<p>At askwoody.com there is <a href=\"https:\/\/www.heise.de\/forum\/heise-online\/News-Kommentare\/Windows-10-Upgrades-fuer-Home-sofort-fuer-Pro-nach-vier-Monaten\/Meine-Methode-die-Telemetrydatenerfassung-auszuhebeln\/thread-3966917\/#posting_22727396\">this post<\/a>, that deals also with this telemetry topic. Also the <a href=\"https:\/\/geeksadvice.com\/fix-microsoft-compatibility-telemetry-high-cpu-usage\/\">article here<\/a> discusses several workaround to deactivate telementry. It's also possible, to use Software Restriction Policies to block <em>CompatTelRunner.exe<\/em>.  <\/p>\n<p><strong>Similar articles:<\/strong><br \/><a href=\"https:\/\/borncity.com\/win\/2019\/09\/11\/patchday-updates-for-windows-7-8-1-server-sept-10-2019\/\">Patchday: Updates for Windows 7\/8.1\/Server (Sept. 10, 2019)<\/a><br \/><a href=\"https:\/\/borncity.com\/win\/2019\/07\/11\/windows-7-update-kb4507456-security-only-with-telemetry\/\">Windows 7 Update KB4507456 (security only) with Telemetry<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>[German]Microsoft has released a security-only update as of September 10, 2019. The Security-only update comes again with telemetry on board. Here is a review of what is known so far.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[22,2],"tags":[2096,195,17],"class_list":["post-11173","post","type-post","status-publish","format-standard","hentry","category-update","category-windows","tag-kb4516033","tag-update","tag-windows-7"],"_links":{"self":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/11173","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/comments?post=11173"}],"version-history":[{"count":0,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/posts\/11173\/revisions"}],"wp:attachment":[{"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/media?parent=11173"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/categories?post=11173"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/borncity.com\/win\/wp-json\/wp\/v2\/tags?post=11173"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}