none
For security, how to uninstall "PeopleExperienceHost" app in Windows 10 LTSC 2019 RRS feed

  • Question

  • For security reasons I need to uninstall "PeopleExperienceHost" app in Windows 10 LTSC 2019.  Not hide the icon, nor disable rather Uninstall it.

    We have tried the normal approach and remove the package but we get an error when we run "Get-AppxPackage *people* |Remove-AppxPackage".

    We looked into "Programs" in the Control Panel and it is not listed in the "Turn Windows Features on or off."

    And I do not see anywhere in Local Security Policy, but that would just disable an not remove.

    We could possibly block it like we do with many other Microsoft Apps using AppLocker, but again it does not remove it.

    The same if you would block it on the windows firewall, we set all the Microsoft preconfigured rules to Deny. But still this does not remove the app. 

    Or we can write a zero file by taking ownership, but that is not preferred.

    TAKEOWN /f "C:\Windows\SysWOW64\PeopleAPIs.dll"
    Del "C:\Windows\SysWOW64\PeopleAPIs.dll"
    TYPE NUL > "C:\Windows\SysWOW64\PeopleAPIs.dll"
    ICACLS "C:\Windows\SysWOW64\PeopleAPIs.dll" /inheritance:d
    ICACLS "C:\Windows\SysWOW64\PeopleAPIs.dll" /grant %username%:F
    ICACLS "C:\Windows\SysWOW64\PeopleAPIs.dll" /deny *S-1-15-2-1:F
    ICACLS "C:\Windows\SysWOW64\PeopleAPIs.dll" /deny SYSTEM:F
    ICACLS "C:\Windows\SysWOW64\PeopleAPIs.dll" /deny "NT SERVICE\TrustedInstaller":F

    How do you completely uninstall the app?

    Any ideas?


    • Edited by -MW Friday, December 14, 2018 3:52 PM
    Friday, December 14, 2018 3:51 PM

Answers

  • Hello,

    We decided to use WAW (windows against windows).  So far it works fine, still in testing phase.  Let me know if your test show any issues.

    ===

    Kill process, close icon and run on admin prompt:

    ===

    TAKEOWN /f "C:\Windows\SystemApps\Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy" /r /d y

    RMDIR "C:\Windows\SystemApps\Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy" /s

    MKDIR "C:\Windows\SystemApps\Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy"

    ICACLS "C:\Windows\SystemApps\Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy" /inheritance:d

    ICACLS "C:\Windows\SystemApps\Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy" /grant %Username%:F /T /C /inheritance:r /Q

    ICACLS "C:\Windows\SystemApps\Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy" /deny *S-1-15-2-1:F /T /C /inheritance:r /Q

    ICACLS "C:\Windows\SystemApps\Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy" /deny SYSTEM:F /T /C /inheritance:r /Q

    ICACLS "C:\Windows\SystemApps\Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy" /deny "NT SERVICE\TrustedInstaller":F /T /C /inheritance:r /Q




    • Edited by -MW Wednesday, December 19, 2018 9:09 PM
    • Marked as answer by -MW Thursday, December 20, 2018 1:13 PM
    Wednesday, December 19, 2018 9:04 PM

All replies

  • Hi,

    Thanks for posting your query.

    After my test, I afraid that we cannot completely uninstall it. People app is part of the operating system components, I get the same result. 

    Here is some information for your reference: 

    A third-party tool: https://www.exedb.com/en/peopleexperiencehost.exe/1071688

    Registry setting: 

    https://www.reddit.com/r/sysadmin/comments/77e7p4/windows_10_1709_how_do_you_remove_the_people/

    Note: These are third-party links and we do not have any guarantees on this website. This is just for your convenience. And Microsoft does not make any guarantees about the content.

    Best regards,

    Yilia 


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Monday, December 17, 2018 4:12 AM
    Moderator
  • Hello,

    We decided to use WAW (windows against windows).  So far it works fine, still in testing phase.  Let me know if your test show any issues.

    ===

    Kill process, close icon and run on admin prompt:

    ===

    TAKEOWN /f "C:\Windows\SystemApps\Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy" /r /d y

    RMDIR "C:\Windows\SystemApps\Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy" /s

    MKDIR "C:\Windows\SystemApps\Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy"

    ICACLS "C:\Windows\SystemApps\Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy" /inheritance:d

    ICACLS "C:\Windows\SystemApps\Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy" /grant %Username%:F /T /C /inheritance:r /Q

    ICACLS "C:\Windows\SystemApps\Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy" /deny *S-1-15-2-1:F /T /C /inheritance:r /Q

    ICACLS "C:\Windows\SystemApps\Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy" /deny SYSTEM:F /T /C /inheritance:r /Q

    ICACLS "C:\Windows\SystemApps\Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy" /deny "NT SERVICE\TrustedInstaller":F /T /C /inheritance:r /Q




    • Edited by -MW Wednesday, December 19, 2018 9:09 PM
    • Marked as answer by -MW Thursday, December 20, 2018 1:13 PM
    Wednesday, December 19, 2018 9:04 PM
  • Hi MW,

    Thanks for your reply and sharing.

    I'm glad to hear that you find a way to remove it.

    If there is anything else we can do for you, please feel free to post in the forum.

    Best Regards,
    Yilia 


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Thursday, December 20, 2018 5:35 AM
    Moderator
  • If you rename the SystemApps thing, be aware that if an update comes along for the offending garbage, it will re-appear.

    This bit me for a kiosk image. I ended up re-running my knobbler.ps1 after updates too.


    =^x^=

    Tuesday, February 5, 2019 8:48 AM
  • By taking ownership (TAKEOWN /f ) and denying access (ICACLS with /deny)the system will not be able to write into the folder and update.

     
    Tuesday, February 12, 2019 7:56 PM