Connected User Experiences and Telemetry
This service manages the event-driven collection and transmission of Windows diagnostic and usage data.
since 0.9.8.11
Purpose
Identifier: DiagTrack
Setup Foundry sets this service's startup type to Disabled.
This service manages the event-driven collection and transmission of Windows diagnostic and usage data. It also downloads configuration settings that control diagnostic data collection.
Diagnostic data can include information about the device and operating-system configuration, installed apps and drivers, reliability and performance, and the use of Windows features. The component can also manage diagnostic logs. Crash reports and memory dumps, however, are handled separately by Windows Error Reporting.
Notes
Additional effects
These include certain compatibility, driver, and update reports in Microsoft Intune.
Starting with Windows 10 build 1809, Microsoft Defender for Endpoint no longer has a direct dependency on DiagTrack; EDR cyber evidence can still be uploaded while the service is not running. Microsoft nevertheless identifies the diagnostic data service as a component to check when devices do not report correctly. Older Windows releases and other telemetry-dependent components can have additional dependencies.
Privacy and security
While the service is running, the component sends the diagnostic events and logs permitted by the configured diagnostic data settings to Microsoft's data management service over encrypted connections. Depending on the selected level, this data can include device identifiers, hardware and configuration characteristics, app and driver information, performance and reliability measurements, and details about the use of Windows features.
Disabling the service prevents DiagTrack from performing this collection and transmission or downloading collection configuration from Microsoft. It does not stop every Windows or Microsoft application connection or data transfer. Windows Error Reporting, Microsoft Edge on newer releases, and other applications and connected services have separate data paths and privacy controls.
Effects of the change
The service cannot start at system startup or when requested by Windows or an application. Diagnostic events and diagnostic logs managed by DiagTrack therefore are not collected and transmitted through the service in the normal way. Settings that permit required or optional Windows diagnostic data cannot produce their intended effect through this component.
On a typical unmanaged PC, the change often produces no immediate visible error. Windows no longer receives updated collection configuration through this service, however, and Microsoft receives no data through this channel for analyzing reliability, compatibility, and update problems. Tailored experiences can provide fewer or no tips and recommendations derived from this diagnostic data.
In managed environments, diagnostic, compatibility, driver, or update reports can remain incomplete. Software that specifically relies on the service cannot use it to transport telemetry. Disabling the service is therefore not equivalent to selecting a supported diagnostic data level and can interfere with management or analytics features.
Notes
Microsoft documents DiagTrack as an automatically started Windows service. Its capabilities and dependencies vary by Windows release; in particular, behavior documented for older Windows 10 versions does not necessarily apply unchanged to current Windows 11 systems.
Microsoft documentation
Microsoft Learn: Configure Windows diagnostic data in your organization
Microsoft Learn: Security guidelines for system services in Windows Server
Microsoft Learn: Troubleshoot Microsoft Defender for Endpoint onboarding issues