Skip to content

Documentation.md

Latest commit

 

History

History
88 lines (63 loc) · 6 KB

Documentation.md

File metadata and controls

88 lines (63 loc) · 6 KB
Raw

Remove Windows AI Documentation

Note

Many other scripts claim to disable/remove ai however these scripts either contain ai generated code which commonly hallucinates fake registry keys, values, and paths OR do not cover 100% of the ai features in windows

OS Support

  • The script is created for any version of Windows 10 and Windows 11, Latest Stable Builds
  • For best results use a Pro, Enterprise, Server, or Education version. I can not guarentee 100% removal on Home versions

Code Review

  • Given that Microsoft REALLY do not want users removing all AI features the script uses some advanced techniques in PowerShell

Important

This script is NOT vibe coded and was written entirely by me over the course of multiple years starting in 2024

Run-Trusted Function

  • This function leverages an exploit allowing code execution under the TrustedInstaller.exe service also known as Windows Module Installer
    • Various PowerShell commands will be ran hidden from the user allowing the script to remove items and packages that are locked via System Privileges

Registry Keys

  • The script applies every registry key regarding AI including undocumented and widely unknown ones found by reverse engeneering. Group policy keys will also be applied to the corresponding pol file to reflect changes in gpedit.msc.

Disable AI in Edge

  • The script applies all AI related policies and edits Edge's local state file that contains experimental flags to completely disable copilot mode.

Disable Gaming Copilot

  • (removed by microsoft in newest builds) The script edits xbox gaming overlay's json settings file to disable/hide gaming copilot.

Disable AI Voice Effects for Mic

  • This will properly disable the AI voice effect feature for any mic.

Disable AI in UWP Apps

  • UWP store apps commonly use a settings.dat file that can be loaded into registry to modify internal settings, this is done for multiple apps such as Photos and Snipping Tool to disable hidden AI features.

Prevent Reinstall of AI Packages

  • This option will install a custom Windows Update package to make Windows think that there is already a newer version of the AI package installed.
  • Method from Atlas and Revi OS as they make use of these

Disable Copilot In IntegratedServicesRegionPolicySet

  • This JSON file contains rules for deciding weither or not certain apps and settings are enabled based on your region
    • This is mainly used for the EEA [European Economic Area]
  • The script finds all policies related to Copilot and sets the default state to disabled

Appx Package Removal

  • While the main Copilot package can be removed without any special tricks (Remove-AppxPackage) most AI packages are marked as Non-Removeable therefore, the script needs to use multiple exploits to remove these
  • The script creates a sub script in %TEMP% to be ran under the above mentioned function Run-Trusted

    • Exploits Performed

      • End of Life: one way to trick Windows into thinking a locked package can be removed is to add its Package Family Name to HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\EndOfLife\USERSID
        • To avoid Windows Update from failing these registry entries are removed once the package is confirmed uninstalled
      • Deprovisioning: this adds the Package Family Name to HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned this will prevent the package from being reinstalled by Windows Update
      • Set-NonRemovableAppsPolicy: this dism command will attempt to remove the Non-Removeable property mentioned above and needs to have system privileges to work
      • Removing Inbox Apps: some packages are marked as InboxApps this prevents the user from removing them however, when the package is removed from the HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\InboxApplications via Run-Trusted Windows will no longer recognize it as an Inbox App

Recall Optional Feature

  • On most systems recall will be installed via an optional feature, the script will disable and remove this resulting in the State of: DisabledWithPayloadRemoved

Hidden AI CBS Packages

  • Windows CBS [Component-Based Servicing] contains windows packages where some can be visible and removable via get-windowspackage and remove-windowspackage respectfully
    • Most packages are not visible to the dism command by default so a few tricks are needed to enable this and allow for removal
  • The script will search for packages containing various AI keywords in HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages
    • To enable visualzation and allow for removal the Visibility key needs to be set to 1 and the subkeys Owners and Updates need to be removed

Removing AI Files and Folders

  • The script will forcibly remove the Appx package install locations, remove Machine Learning Dlls, and hidden Copilot installers.
  • Additionally, various other reg keys and files are removed to ensure a proper cleanup of AI features

Disable Rewrite In Notepad

  • Applies the disable rewrite group policy.

Remove Recall Scheduled Task

  • This will create another sub script in %TEMP% in order to run with system privileges
    • The script will agressively remove Recall's scheduled tasks by removing the files as well as the registry entries

Install Classic Apps

  • This will allow you to replace/install the classic version of notepad, paint, photo viewer, and photos legacy (uwp store app)
    • Mspaint and Snipping Tool files found in the repo are extracted from Windows Server 2025 ISO as the desktop experience edition of server uses these classic apps

Disable Defender AI

  • Windows defender now contains AI agent protection, to disable this feature and the process that always runs the script uses defender powershell cmdlets and IFEO debugger exploit.