Windows Recall is a feature introduced in recent Windows 11 builds that periodically takes snapshots of your screen and indexes their content.
It’s designed to help you quickly search and retrieve information you’ve seen before — like an extended visual history of your activity.
- Takes regular screen captures while you use your PC.
- Uses local AI models to analyze and tag snapshot content.
- Allows you to search by text or visual elements you’ve seen previously.
- Stores snapshots locally (by default) in an indexed database.
- Captures everything visible on the screen at the time — including sensitive data.
- Snapshots may include emails, passwords, messages, financial data, and more.
- Even though data is local, any account with access to your PC could potentially view it.
- Certain apps or content can be excluded via policy, but Recall is on by default on supported devices.
- Security: Prevent accidental capture of sensitive data.
- Compliance: Reduce risk of storing regulated information without controls.
- Performance: Avoid background capture and indexing overhead.
- User preference: Some users simply don’t want a persistent visual history of their activity.
Interactive PowerShell “text UI” + BAT launcher to disable Windows Recall for one device or across all users.
Includes automation, rollback, logs, verification, and more.
This tool gives you an easy, menu-driven way to turn off Windows Recall and related snapshotting features.
It’s safe for non-technical users and powerful enough for IT admins.
- Interactive Menu with plain-English options
- One-Click Express Mode to apply all recommended changes
- Full Rollback to restore defaults (optionally re-enable Recall feature)
- Logging, Verification, and GPO diagnostics
- Scheduled Enforcer to reapply settings at startup
- Optional Desktop Shortcut for quick launches
/ (repo root)
├─ Recall_HardOff_TUI.ps1 # Main interactive PowerShell script
├─ Launch_Recall_Helper.bat # Simple launcher for non-technical users
└─ README.md # This file
When you run the BAT (as Admin), you’ll see:
- Apply recommended hard-off now
Sets policies to disable Recall and related features for machine + current user. - Stamp settings for ALL existing users (HKU)
Writes per-user settings into all loaded user hives. - Disable/Remove the 'Recall' optional feature
Removes feature payload from Windows (where supported). - Show current status
Displays policy values and feature state. - Open log folder
Opens%ProgramData%\RecallHardOffin Explorer. - Create/Remove Scheduled Enforcer (toggle)
Scheduled Task that reapplies settings at every startup. - Express mode (1→2→3 pipeline)
Runs Apply → Stamp all users → Remove feature in one go. - Rollback/Uninstall
Removes policy entries from HKLM/HKCU/HKU.
Option to re-enable the Recall feature. - GPO diagnostics
Runsgpupdateand opens a local Group Policy Result HTML report. - Create Desktop Shortcut to launcher
Shortcut to the BAT for easy access. - Reboot this device
Prompts and restarts Windows. - Exit
Shows status and log path before quitting.
Registry Keys (policy-backed)
| Hive/Path | Name | Type | Value |
|---|---|---|---|
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsAI |
AllowRecallEnablement |
DWORD | 0 |
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsAI |
DisableAIDataAnalysis |
DWORD | 1 |
HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsAI |
DisableClickToDo |
DWORD | 1 |
HKCU\SOFTWARE\Policies\Microsoft\Windows\WindowsAI |
DisableAIDataAnalysis |
DWORD | 1 |
HKCU\SOFTWARE\Policies\Microsoft\Windows\WindowsAI |
DisableClickToDo |
DWORD | 1 |
HKU\<SID>\Software\Policies\Microsoft\Windows\WindowsAI (stamp) |
DisableAIDataAnalysis |
DWORD | 1 |
HKU\<SID>\Software\Policies\Microsoft\Windows\WindowsAI (stamp) |
DisableClickToDo |
DWORD | 1 |
Optional Feature
Disable-WindowsOptionalFeature -Online -FeatureName "Recall" -Remove -NoRestart
- Windows 11 (builds with Recall present)
- Admin rights (for HKLM writes and feature removal)
- PowerShell 5.1 or 7+
- Execution Policy: The BAT runs with
-ExecutionPolicy Bypassfor session only.
- Right-click
Launch_Recall_Helper.bat→ Run as administrator.
(The script will self-elevate if you forget, but it’s smoother to run as admin.) - Pick [1] Apply recommended hard-off now.
- If the PC has multiple user accounts, also pick [2] Stamp settings for ALL existing users.
- Pick [3] Disable/Remove the 'Recall' optional feature (optional but recommended).
- Reboot (choose [11] Reboot this device in the menu or restart manually).
Run all key steps at once with no menu:
.\Recall_HardOff_TUI.ps1 -Express -SilentRestore defaults and optionally re-enable Recall feature:
.\Recall_HardOff_TUI.ps1 -Rollback -ReEnableFeatureNormal (menu): run Launch_Recall_Helper.bat as Administrator → pick options.
Express (no clicks):
# as admin
.\Recall_HardOff_TUI.ps1 -Express -SilentRollback (and re-enable feature):
.\Recall_HardOff_TUI.ps1 -Rollback -ReEnableFeatureIf you don’t see the menu
- Make sure you’re not running with flags like
-Silent,-NoGUI, or-Express. - Launch via the BAT, or run:
pwsh -NoProfile -ExecutionPolicy Bypass -File .\Recall_HardOff_TUI.ps1
- Run as Administrator (it will self-elevate, but UAC cancellations will bounce you).
- Saved in:
%ProgramData%\RecallHardOff\RecallHardOff_YYYYMMDD_HHMMSS.log - Menu option [5] Open log folder opens this location in Explorer.
Run in elevated PowerShell:
Get-ItemProperty 'HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsAI'
Get-ItemProperty 'HKCU:\SOFTWARE\Policies\Microsoft\Windows\WindowsAI'
Get-WindowsOptionalFeature -Online -FeatureName RecallExpected results after hard-off:
AllowRecallEnablement=0(HKLM)DisableAIDataAnalysis=1(HKLM + HKCU)DisableClickToDo=1(HKLM + HKCU)- Optional Feature state =
Disabled(if removed)
Tip: The script already performs this check via menu option [4] “Show current status.”
- Intune: Package as Win32 app and run with
-Express -Silentfor enforcement. - GPO: The registry values match official ADMX policies:
- Allow Recall to be enabled → Disabled
- Turn off saving snapshots for Recall → Enabled
- Disable Click to Do → Enabled
If a domain Group Policy sets these same keys differently, the GPO wins.
Use the [9] GPO diagnostics menu option to check active GPOs.
The [8] Rollback/Uninstall menu option will:
- Remove HKLM, HKCU, and HKU values
- Optionally re-enable Recall feature
- Show new status
Manual rollback example:
Remove-ItemProperty 'HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsAI' -Name AllowRecallEnablement
Remove-ItemProperty 'HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsAI' -Name DisableAIDataAnalysis
Remove-ItemProperty 'HKLM:\SOFTWARE\Policies\Microsoft\Windows\WindowsAI' -Name DisableClickToDo
# Repeat for HKCU and HKU as needed
Enable-WindowsOptionalFeature -Online -FeatureName "Recall" -All -NoRestartThanks to the Windows admin community for feedback and testing ideas that shaped v2’s features.