New sneaky Windows driver UCPD stops non-Microsoft software from setting defaults | Free Download

Microsoft has built-in the motive force userChoice Safety Driver, quick UCPD, into Home windows 10 and Home windows 11 techniques not too long ago. This driver has only one goal: to dam entry to UserChoice Registry keys.

These Registry keys outline the default packages on the system. There are keys for the default net browser, PDF Viewer, or picture editor. Keys exist for file extensions and protocols as nicely.

Microsoft launched a brand new convoluted manner of adjusting default apps and file extension associations in Home windows 11 for customers. You possibly can try our information on setting default apps on Home windows 11 right here.

Up till not too long ago, packages might make adjustments to the UserChoice Registry keys to vary default parameters. An online browser might set itself because the default program for all supported file varieties. Supplied that the consumer wished this, it make issues quite a bit simpler because of the automated manner of adjusting defaults.

Specialised packages, reminiscent of SetUserFTA or Sophia Script, included the performance as nicely. They made it simpler for residence customers and directors to vary defaults on Home windows machines.

Discover out if UCPD is put in

UCDP Windows Filter Driver

You’re in all probability questioning if the filter driver is put in and operating in your Home windows system. Right here is how one can decide that:

  • Open Begin, sort cmd and choose Command Immediate from the outcomes.
  • Kind sc question UCPD.

How UCPD works

Gunnar Haslinger revealed an evaluation on his weblog. The filter driver blocks entry to sure UserChoice Registry keys by returning entry denied.

Microsoft nonetheless permits entry, however just for processes that cross the next verification:

  1. Is the method signed by Microsoft?
  2. Is the method on the deny listing?

In different phrases: any third-party program that tries to make adjustments to default apps, file extension handline or protocols on Home windows is blocked from doing so.

The deny listing consists of Home windows instruments, more likely to stop third-party builders from utilizing them as a workaround. Instruments like regedit.exe, reg.exe, or powershell.exe are on the deny listing.

Are you able to cease UCPD?

It takes two steps to place an finish to UCPD.

  1. Set the startup sort of UserChoice Safety Driver to disabled.
  2. Deactivate the UCPD Velocity process within the Process Scheduler.

Step 1: Change the startup sort of UCPD to disabled

Disable UCDP

It’s mandatory to dam the filter driver from beginning with Home windows. Right here is how that’s performed:

  1. Open Begin, sort cmd, and choose run as administrator.
  2. Execute the next command: sc config UCPD begin= disabled

Step 2: Deactivate UCPD Velocity within the Process Scheduler

UCDP Velocity Task

The UCPD Velocity process has a single goal: guarantee that the filter driver runs. It does so after every consumer signal. If its validation fails, it’ll reset the startup sort of the UCD service to system begin to guarantee that it begins with the system. It’ll moreover begin the service to verify the filter runs on the gadget.

Whereas beginning is feasible at any time, disabling just isn’t. Disabling works provided that the startup sort is ready to disabled and the system is restarted.

The duty checks the worth of FeatureV2 in HKLMSYSTEMCurrentControlSetServicesUCPD as nicely. If not set to the worth 2, it’ll set the worth to it.

Right here is the way you disable the duty:

  1. Open Begin.
  2. Kind Process Scheduler.
  3. Choose “Run as administrator” from the listing of choices.
  4. Use the sidebar to go to Process Scheduler Library > Microsoft > Home windows > AppxDeploymentClient.
  5. Proper-click on the duty and choose “disable”.

You may additionally run this from an elevated command immediate: schtasks.exe /change /Disable /TN “MicrosoftWindowsAppxDeploymentClientUCPD velocity”

A restart of the system is required to finish the method.

Closing Phrases

Microsoft didn’t introduced the brand new filter driver on any of its websites or blogs to the most effective of my information. It’s subsequently unclear why it was launched.

If you take a look at the filters performance, you’ll discover that it blocks third-party packages from making adjustments to the defaults. Microsoft’s filter makes no distinction right here; professional packages reminiscent of net browsers are blocked, even when the consumer desires the adjustments to the defaults to be made.

Equally, specialised packages, such because the aforementioned SetUserFTA are additionally blocked. These are often run by customers and directors to make “wished” adjustments to the system.

Clearly, Microsoft is decreasing consumer alternative and skills with the brand new filter driver. Even whether it is designed to guard towards sure forms of malicious software program, it has the aspect impact of eradicating choices from customers. It’s also clear that Microsoft is the benefactor right here, as it’s now tougher to vary defaults on Home windows machines.

There will probably be workarounds and sure a cat and mouse recreation between Microsoft including workarounds to the deny listing and builders discovering new methods to make the adjustments.

We requested Microsoft for touch upon the matter, however haven’t heard again but.

Thanks for studying..



Supply:Ghacks

Leave a Comment

Your email address will not be published. Required fields are marked *

Scroll to Top