{
  "Schema": 1,
  "Services": [
    {
      "Id": "connected-telemetry",
      "Name": "DiagTrack",
      "Instances": false,
      "SetUserServiceFlags": false,
      "Standard": "Keep",
      "Strict": "Disabled",
      "Impact": "Stops the Connected User Experiences and Telemetry service. Required service traffic and application telemetry remain separate.",
      "Source": "https://learn.microsoft.com/en-us/windows/privacy/manage-windows-11-endpoints"
    },
    {
      "Id": "wap-push-routing",
      "Name": "dmwappushservice",
      "Instances": false,
      "SetUserServiceFlags": false,
      "Standard": "Keep",
      "Strict": "Disabled",
      "Impact": "Stops WAP push message routing used by device-management scenarios. Managed devices are rejected by ms-private before mutation.",
      "Source": "https://learn.microsoft.com/en-us/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services"
    },
    {
      "Id": "connected-devices-platform",
      "Name": "CDPSvc",
      "Instances": false,
      "SetUserServiceFlags": false,
      "Standard": "Keep",
      "Strict": "Disabled",
      "Impact": "Breaks cross-device and connected-device experiences. This is evidence of a stopped local component, not proof that every GDID-like identifier is suppressed.",
      "Source": "https://learn.microsoft.com/en-us/windows/application-management/per-user-services-in-windows"
    },
    {
      "Id": "connected-devices-user",
      "Name": "CDPUserSvc",
      "Instances": true,
      "SetUserServiceFlags": true,
      "Standard": "Keep",
      "Strict": "Disabled",
      "Impact": "Prevents future per-user CDP instances and stops current instances. Nearby Sharing, Phone Link, Miracast/DLNA/DIAL and related device experiences can stop working.",
      "Source": "https://learn.microsoft.com/en-us/windows/application-management/per-user-services-in-windows"
    },
    {
      "Id": "cloud-sync-user",
      "Name": "OneSyncSvc",
      "Instances": true,
      "SetUserServiceFlags": true,
      "Standard": "Keep",
      "Strict": "Disabled",
      "Impact": "Disables the per-user host for mail, contacts, calendar and other synchronized user data.",
      "Source": "https://learn.microsoft.com/en-us/windows/application-management/per-user-services-in-windows"
    },
    {
      "Id": "cloud-backup-user",
      "Name": "CloudBackupRestoreSvc",
      "Instances": true,
      "SetUserServiceFlags": true,
      "Standard": "Keep",
      "Strict": "Disabled",
      "Impact": "Disables Windows cloud backup and restore monitoring for user application and setting state.",
      "Source": "https://learn.microsoft.com/en-us/windows/application-management/per-user-services-in-windows"
    },
    {
      "Id": "location-service",
      "Name": "lfsvc",
      "Instances": false,
      "SetUserServiceFlags": false,
      "Standard": "Keep",
      "Strict": "Disabled",
      "Impact": "Disables Windows geolocation service in addition to policy. IP-based location and application-specific collection remain possible.",
      "Source": "https://learn.microsoft.com/en-us/windows/privacy/manage-windows-11-endpoints"
    },
    {
      "Id": "windows-error-reporting",
      "Name": "WerSvc",
      "Instances": false,
      "SetUserServiceFlags": false,
      "Standard": "Keep",
      "Strict": "Disabled",
      "Impact": "Stops Windows Error Reporting service. Crash diagnosis and automatic solution lookup are reduced.",
      "Source": "https://learn.microsoft.com/en-us/windows/win32/wer/wer-settings"
    }
  ],
  "ProtectedServices": [
    "wuauserv", "UsoSvc", "BITS", "CryptSvc", "WinDefend", "WdNisSvc", "SecurityHealthService",
    "mpssvc", "BFE", "EventLog", "wlidsvc", "LicenseManager", "ClipSVC", "WpnService", "WpnUserService"
  ]
}