Share via


For security, how to uninstall "PeopleExperienceHost" app in Windows 10 LTSC 2019

Question

Friday, December 14, 2018 3:51 PM | 1 vote

For security reasons I need to uninstall "PeopleExperienceHost" app in Windows 10 LTSC 2019.  Not hide the icon, nor disable rather Uninstall it.

We have tried the normal approach and remove the package but we get an error when we run "Get-AppxPackage *people* |Remove-AppxPackage".

We looked into "Programs" in the Control Panel and it is not listed in the "Turn Windows Features on or off."

And I do not see anywhere in Local Security Policy, but that would just disable an not remove.

We could possibly block it like we do with many other Microsoft Apps using AppLocker, but again it does not remove it.

The same if you would block it on the windows firewall, we set all the Microsoft preconfigured rules to Deny. But still this does not remove the app. 

Or we can write a zero file by taking ownership, but that is not preferred.

TAKEOWN /f "C:\Windows\SysWOW64\PeopleAPIs.dll"
Del "C:\Windows\SysWOW64\PeopleAPIs.dll"
TYPE NUL > "C:\Windows\SysWOW64\PeopleAPIs.dll"
ICACLS "C:\Windows\SysWOW64\PeopleAPIs.dll" /inheritance:d
ICACLS "C:\Windows\SysWOW64\PeopleAPIs.dll" /grant %username%:F
ICACLS "C:\Windows\SysWOW64\PeopleAPIs.dll" /deny *S-1-15-2-1:F
ICACLS "C:\Windows\SysWOW64\PeopleAPIs.dll" /deny SYSTEM:F
ICACLS "C:\Windows\SysWOW64\PeopleAPIs.dll" /deny "NT SERVICE\TrustedInstaller":F

How do you completely uninstall the app?

Any ideas?

All replies (5)

Wednesday, December 19, 2018 9:04 PM âś…Answered

Hello,

We decided to use WAW (windows against windows).  So far it works fine, still in testing phase.  Let me know if your test show any issues.

===

Kill process, close icon and run on admin prompt:

===

TAKEOWN /f "C:\Windows\SystemApps\Microsoft.Windows.PeopleExperienceHost_cw5n1h4txyewy" /r /d y

RMDIR "C:\Windows\SystemApps\Microsoft.Windows.PeopleExperienceHost_cw5n1h4txyewy" /s

MKDIR "C:\Windows\SystemApps\Microsoft.Windows.PeopleExperienceHost_cw5n1h4txyewy"

ICACLS "C:\Windows\SystemApps\Microsoft.Windows.PeopleExperienceHost_cw5n1h4txyewy" /inheritance:d

ICACLS "C:\Windows\SystemApps\Microsoft.Windows.PeopleExperienceHost_cw5n1h4txyewy" /grant %Username%:F /T /C /inheritance:r /Q

ICACLS "C:\Windows\SystemApps\Microsoft.Windows.PeopleExperienceHost_cw5n1h4txyewy" /deny *S-1-15-2-1:F /T /C /inheritance:r /Q

ICACLS "C:\Windows\SystemApps\Microsoft.Windows.PeopleExperienceHost_cw5n1h4txyewy" /deny SYSTEM:F /T /C /inheritance:r /Q

ICACLS "C:\Windows\SystemApps\Microsoft.Windows.PeopleExperienceHost_cw5n1h4txyewy" /deny "NT SERVICE\TrustedInstaller":F /T /C /inheritance:r /Q


Monday, December 17, 2018 4:12 AM | 1 vote

Hi,

Thanks for posting your query.

After my test, I afraid that we cannot completely uninstall it. People app is part of the operating system components, I get the same result. 

Here is some information for your reference: 

A third-party tool: https://www.exedb.com/en/peopleexperiencehost.exe/1071688

Registry setting: 

https://www.reddit.com/r/sysadmin/comments/77e7p4/windows_10_1709_how_do_you_remove_the_people/

Note: These are third-party links and we do not have any guarantees on this website. This is just for your convenience. And Microsoft does not make any guarantees about the content.

Best regards,

Yilia 

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].


Thursday, December 20, 2018 5:35 AM

Hi MW,

Thanks for your reply and sharing.

I'm glad to hear that you find a way to remove it.

If there is anything else we can do for you, please feel free to post in the forum.

Best Regards,
Yilia 

Please remember to mark the replies as answers if they help.
If you have feedback for TechNet Subscriber Support, contact [email protected].


Tuesday, February 5, 2019 8:48 AM | 1 vote

If you rename the SystemApps thing, be aware that if an update comes along for the offending garbage, it will re-appear.

This bit me for a kiosk image. I ended up re-running my knobbler.ps1 after updates too.

=^x^=


Tuesday, February 12, 2019 7:56 PM

By taking ownership (TAKEOWN /f ) and denying access (ICACLS with /deny)the system will not be able to write into the folder and update.