Answered by:
Is WGA running in Vista collecting information?

Question
-
Is WGA running by default in Vista? I just purchased a new laptop with Vista pre-installed and I don't recall at any point being asked for permission by Microsoft to collect the following information from the laptop: computer make and model, version information for the operating system and software using Genuine Advantage, region and language setting, a unique number assigned to my computer by the tools (Globally Unique Identifier or GUID), product Key (hashed) and Product ID, BIOS name, revision number, and revision date, hard drive volume serial number (hashed), IP address.
I would prefer this information not be collected, especially without my explicit permission. It is a collection of information that can be used to uniquely identify my laptop and therefore is personally identifiable information. How can I prevent WGA (Microsoft) from simply collecting this information? I don't mind if WGA checks for piracy, I simply don't want it to send my unique data to Microsoft. I would like to preserve some privacy from corporations.
Monday, February 5, 2007 8:05 AM
Answers
-
One more piece of information for you - the definitive statement on privacy is contained in the License Agreement that covers your use of Windows. You can click here to find the agreement: http://www.microsoft.com/about/legal/useterms/default.aspx.
To summarize:
1. The information collected is listed in the license agreement and Privacy Statement (http://www.microsoft.com/genuine/downloads/PrivacyInfo.aspx?displaylang=en)
2. Whether or not you can be identified by the information that is collected, Microsoft does make this blanket statement: "The tools do not collect your name, address, e-mail address, or any other information that Microsoft will use to identify you or contact you."
So the net is, Windows Vista does have the ability to validate whether it is being run as a genuine copy, to do that, certain information is collected, but Microsoft promises not to use that information to identify you or contact you.
Thank you,
David
Monday, February 5, 2007 6:06 PM
All replies
-
Windows Genuine Advantage (WGA) program - FAQ: http://www.microsoft.com/genuine/downloads/FAQ.aspx?displaylang=enMonday, February 5, 2007 2:32 PMModerator
-
Unfortunately that FAQ does not explain if WGA is pre-installed in Vista and sending my unique information to Microsoft nor does it explain how I prevent it from doing so, if that is the case.
If I have to use some creative interpretation of that FAQ, am I to assume that if a user utilizes Windows Readyboost, Aero or Defender then WGA will be installed and will therefore send my unique information to Microsoft, otherwise if a user avoids using those three features, WGA will not be installed and will not send my unique information to Microsoft?
If the case is (how can I possibly know? it never informs me) that WGA is running all the time under Vista and is sending my personally identifiable information to Microsoft without my express permission, then I would like to know because I would like to return my laptop ASAP.
Reading that FAQ sheet appears to imply that I would have to opt-in to WGA, and since I did not, do I assume it is not active?
It is really not clear, and very suspicious for this very reason. Is it possible to get a clear and precise answer?
Monday, February 5, 2007 3:11 PM -
WGA is not preinstalled in Windows Vista. The WGA file is installed only if you directly visit the Windows Update web site or when attempting to download a Windows feature or file from a Microsoft web site that requires a check of the validity of the Windows license.
See the following: http://www.microsoft.com/smallbusiness/genuine-windows/privacy-statement.mspx
Monday, February 5, 2007 3:29 PMModerator -
Mark Rilph,
Since you mentioned that you may end up having to return the laptop, that indicates to me that you purchased Vista pre-installed on a new computer.
In such case, one of the first things you were presented with upon starting the computer would have been the End User Licensing Agreement for Vista from MS, and the Purchase and/or End User and/or Warranty Agreement for the computer from the Computer Manufacturer.
If you did not click OK to those agreements and need further information whether or not to agree to them, your best option is to seek professional legal counsel as appropriate to your specific governmental locality. These agreements are binding contracts and as with any other contract that is not clear to you, you should not agree unless you are sure.
Most manufacturers and/or retailers have a return policy. As a rule these policies are time dependent, so please do not get into a situation where you are waiting for information that may never come and let your return period expire. Maybe it would be best to return the laptop, then research the answers to your questions and then if the answers are satisfactory, go ahad with your purchase plans.
Monday, February 5, 2007 3:37 PM -
One more piece of information for you - the definitive statement on privacy is contained in the License Agreement that covers your use of Windows. You can click here to find the agreement: http://www.microsoft.com/about/legal/useterms/default.aspx.
To summarize:
1. The information collected is listed in the license agreement and Privacy Statement (http://www.microsoft.com/genuine/downloads/PrivacyInfo.aspx?displaylang=en)
2. Whether or not you can be identified by the information that is collected, Microsoft does make this blanket statement: "The tools do not collect your name, address, e-mail address, or any other information that Microsoft will use to identify you or contact you."
So the net is, Windows Vista does have the ability to validate whether it is being run as a genuine copy, to do that, certain information is collected, but Microsoft promises not to use that information to identify you or contact you.
Thank you,
David
Monday, February 5, 2007 6:06 PM -
David Lazar wrote: One more piece of information for you - the definitive statement on privacy is contained in the License Agreement that covers your use of Windows. You can click here to find the agreement: http://www.microsoft.com/about/legal/useterms/default.aspx.
>snip<
David,
I assumed that Mark has an OEM license for Vista because his mention of returning the laptop leads me to believe that he bough a new laptop with Vista preinstalled on it.
AFAIK there is no easily findable copy of the OEM license posted on microsoft.com
Monday, February 5, 2007 7:18 PM -
Thank you for your answers. Yes, it is a new laptop that was pre-installed with Vista, and yes I did read the entire OEM's EULA and it never mentionned anything about WGA or Microsoft's data collection process as it is (loosely) outlined in the WGA privacy statement. I will consider your answers, although it would be nice to see something MS official on the matter, however this laptop is quite unstable anyhow, I suspect immature drivers (or Vista), so I will most likely return it anyhow.
David, as far as personally identifiable information goes, I believe that as it is (loosely, i.e.: information such as...) defined in the WGA privacy statement, Microsoft collects forensic data able to uniquely identify every single PC in the world. Since it's our own personal PCs/laptops, and they follow us around, it is as personal as it gets. You may argue that our own DNA does not contain personal information, like our name, address, etc., however how disturbing would you find it if governments and major corporations were all allowed to keep a sample of your DNA on file? And they would ask to check your DNA whenever you did business with them... just to make sure you're not a criminal? WGA is worse than this because Microsoft could, in effect, easily track every unique PC in the world whenever they connect to the internet, something that could not be easily done with your DNA. And Microsoft wants us to register our product keys by supplying our name and contact information?!... you'd have to be crazy to believe there is no way they can link this information.
But of course I'm wrong: Microsoft should be able to continually monitor our PCs to make sure we don't do anything wrong, the RIAA and MCAA should be able to have programs monitoring your PC to make sure you don't have any unlicensed (or simply copies of your) media, so should every software manufacturer have the right to monitor your PC. It just makes sense. The goverment should also be allowed to have programs monitoring your PC to ensure you're not a terrorist, or that you don't have any documents that dissagree with the powers that be, or, god forbid, tasteless art. Microsoft is very much like the goverment, it represents the people, works for the people, respects them and would never cross any questionnable boundaries for the sake of it's share holders. It's very simple, just trust Microsoft.
Monday, February 5, 2007 10:29 PM -
I tried Windows Update in Vista and it did not mention WGA or that Microsoft would be collecting information from my laptop PC. So there is misinformation somewhere.
Carey Frisch wrote: WGA is not preinstalled in Windows Vista. The WGA file is installed only if you directly visit the Windows Update web site[...] Wednesday, February 7, 2007 4:36 PM -
Thursday, February 8, 2007 6:24 AMModerator
-
David Lazar wrote: One more piece of information for you - the definitive statement on privacy is contained in the License Agreement that covers your use of Windows. You can click here to find the agreement: http://www.microsoft.com/about/legal/useterms/default.aspx.
To summarize:
1. The information collected is listed in the license agreement and Privacy Statement (http://www.microsoft.com/genuine/downloads/PrivacyInfo.aspx?displaylang=en)
2. Whether or not you can be identified by the information that is collected, Microsoft does make this blanket statement: "The tools do not collect your name, address, e-mail address, or any other information that Microsoft will use to identify you or contact you."
So the net is, Windows Vista does have the ability to validate whether it is being run as a genuine copy, to do that, certain information is collected, but Microsoft promises not to use that information to identify you or contact you.
Thank you,
David
My worry with this is that the IP address that the info is collected from is also logged, and that CAN be used to identify the user. Misuse of this information is a breach of UK data protection laws (unless so ordered by a high court judge). The EULA does address this matter, however, how many people ACUALLY read the EULA??? Windows runs on around 90% of the worlds PCs and I bet only a fraction of those users have read the agreement. Therefore I believe that NO data should be collected automatically, instead there should be a popup message listing the info that is collected on the first visit to a Microsoft website (or auto update) with the option to accept or decline the process at that stage. Therefore, giving the end user a fully informed decision on whether or not to proceed. After all the end user is the one who has paid for the software licence and should be entitled to the decision whether or not to share the hardware info of their PC.
Thursday, February 22, 2007 10:27 PM -
Yes, this is not right, I agree. I suggest Vista should warn the user every time any information will be sent to Microsoft and allow the user to view the information that will be sent. The user can then choose to continue or cancel. I and everyone I have asked are not aware of this data collection happening in Vista (not even clear if it is!?), which means it is not clearly disclosed.
Can someone from Microsoft please post a proper answer to the questions in this thread clarifying if and what is the deal with WGA in Vista?!
Thursday, March 8, 2007 3:47 AM -
-
Monday, April 2, 2007 2:57 AMModerator