How to disable Microsofts new Anti-Piracy Program Update

Martin Brinkmann
Apr 27, 2006
Updated • May 4, 2013
Windows
|
36

It seems that the method that I previously published to disable Microsoft's anti-piracy process in Windows is not working well anymore. If you rename the files windows will try and install the update again. Therefore,  one has to find another way to disable this: what we do is disable the execute bit on wgalogon.dll. That way, winlogon can't call it's notification package during boot, and since WgaLogon is responsible for running and maintaining WgaTray.exe, it means the end of system tray popups as well. (source)

  • In Windows Explorer, go to Tools > Folder Options. Then, go to View > Advanced Settings and uncheck "Use simple file sharing". Hit OK. Now, let's change the permissions for WgaLogon:
  • In the Address bar, type (without quotes) "%WinDir%\system32" and hit enter.
  • Scroll down to WgaLogon.dll, right click on it, pick Properties. Go to Security.
  • Hit the Advanced button, uncheck the Inherit box at the bottom, hit the Copy button, then hit OK. Now we have a local copy of the ACL which we can modify.
  • Go through each listed user/group and remove the "Read & Execute" permission for that file, leaving the "Read" permission as-is.
  • Hit OK to apply the permission changes and close the file properties dialog. Restart the machine. You can now turn "Use simple file sharing" back on, if you want.

Update: It needs to be noted that it is likely that this method is no longer working, especially not on newer versions of the Windows operating system that Microsoft has released more recently. While there are surely ways to circumvent activation, or verification checks, it is nothing that you can do directly by manipulating files in the operating system, or making modifications to it.

What you can do however is use the rearm command to extend the trial period of the operating system. The trial period is the interval in days in which you can use the operating system without having to enter a product key. This should work on most versions of Windows:

  • Open an elevated command prompt (by clicking on start, entering cmd, right-clicking the cmd.exe result and selecting to run it as an administrator.
  • Use the following command to rearm the system: slmgr /rearm
  • Restart the system. The count gets reset to 0 days so that you have another 30 days of use before you need to activate the system.
  • You can run the command three times in total so that you can get up to 120 days of use before you need to activate the operating system.
Advertisement

Tutorials & Tips


Previous Post: «
Next Post: «

Comments

  1. Dst83 said on June 19, 2016 at 4:14 am
    Reply

    I have an interesting problem…if i upgrade to win 10 pro 1511 10586. yes my PC will do this upgrade and i have done it to have a look at the new GUI..but anyway when i do upgrade to this version it takes away my activation..so i stop it now from upgrading..im having no problems as such.. but am wondering your thoughts on this matter as all as i can find is people talking about how they cant upgrade to this version.Everybody seems in such a hurry to get this version…I have had it…it functions fine..but i couldn’t activate it legally or otherwise.

  2. Dee said on October 18, 2006 at 12:14 am
    Reply

    so with having some permissions off would anything be different? other then the anit-priacy program turned off?.. like any secruity issues that was disabled because of this ?

    it works btw.
    thanks

  3. Martin said on September 18, 2006 at 11:42 pm
    Reply

    Bebe yes, Explorer is not Internet Explorer. Open a Folder, there you find the Tools menu and everything else.

  4. BB said on September 18, 2006 at 9:15 pm
    Reply

    Thanks, worked well. Can I turn Updates back on?

  5. Bebe said on September 17, 2006 at 9:15 pm
    Reply

    When I open Explorer and I go to Tools… there is no “Folder Options” only “Internet Options”. If I go there and go to the “Advanced” tab, there is no “Use simple file sharing” box to uncheck. Any ideas why and what one can do in this situation?

  6. JD said on September 2, 2006 at 10:20 pm
    Reply

    I don’t have “Use simple file sharingâ€? as a folder option under view. Any thoughts?

  7. walter said on August 30, 2006 at 4:42 pm
    Reply

    Thanks a lot!! it works only with NTFS filesystem. Not with FAT32 since there´s no security tab.
    (funciona solo en NTFS, no con FAT32 ya que no hay solapa de seguridad)

  8. GPig said on August 17, 2006 at 8:52 am
    Reply

    just download Autoruns from sysinternals … http://www.sysinternals.com/Utilities/autoruns.html
    run it and go to the WinLogin tab and clear the tick box next to ‘Wgalogon’ – it couldn’t be easier.

  9. Slayer0420 said on August 15, 2006 at 1:45 am
    Reply

    Spybot search and destroy detects it as a startup item (system.ini) .
    You can just remove the check to disable it @ start up.
    Deleteing it doesn’t work it just comes back .

  10. BAF said on August 6, 2006 at 3:00 pm
    Reply

    Bruce: if they are 24/7 servers, why do you reboot them?

  11. aresdamian said on August 2, 2006 at 9:19 pm
    Reply

    thanks, This worked great! Thanks so much.

  12. Eugene said on June 14, 2006 at 5:47 am
    Reply

    Thanks. It works great.

  13. Bruce said on May 29, 2006 at 3:38 pm
    Reply

    THANKS!

    On my LEGIT DELL OEM copy of XP at work, this newest update was forcing my system
    to connect to the internet on every boot up, I guess for some kind of authentication
    process.

    Since I have several automated PC’s, that re-boot automaticly, the “PROXY
    AUTHENTICATION” (we need to have a valid user id and password to connect to the
    internet, I cannot automate this process) would sit there until I pressed the
    OK button.

    Since these PC’s are application servers, running 24/7 and I schedule daily
    re-boots on some of them, this new authentication was very annoying.

    The above posted process seemed to work very nicely for me!

    Thanks!

  14. Tom said on May 27, 2006 at 12:36 am
    Reply

    Fantastic! Works like a dream…Thank you so much!!!!Now just turn

    of automatic update! SLICK!

  15. Martin said on May 24, 2006 at 5:29 pm
    Reply

    did you do exactly as the article told you to do ?

  16. Cici said on May 24, 2006 at 5:04 pm
    Reply

    hi, but when i right click and get into the ‘properties’of Wgalogon.dll,
    there is no ‘security’, so i don’t know what to do now, only saw ‘General’,
    ‘version’, and ‘Digital signature’. pls help me. it is rather annoying,
    because everytime i try to shut down my PC, the WGA.exe always keep running
    and can’t be stopped. thnx a lot!

  17. RM said on May 23, 2006 at 8:06 am
    Reply

    I found number ways to disable that pesky Update from MS but your method
    worked (crossing fingers) and hopefully will continue to:). I was a iditot
    and should have known when MS has a Eula for a Download to Read it or hire
    a lawyer hehe. Thx alot. Was terrifed I would mess up and system would not
    boot. Regards. RM.

  18. spider said on May 11, 2006 at 4:18 am
    Reply

    Tried almost everything, looking for hacks all night. So far this one only worked. Thnxs.

  19. slackware said on May 10, 2006 at 12:24 am
    Reply

    thank god for linux

  20. silviu said on May 9, 2006 at 7:42 am
    Reply

    only works for ntfs there is no security tab for fat32

  21. keren said on May 7, 2006 at 11:48 am
    Reply

    hello,
    thankyou thankyou thankyou it works great!!!!!
    it annoyed me soo much and now it’s gone!!!!!!!

  22. Dorey said on May 7, 2006 at 6:48 am
    Reply

    Awesome it worked!if I can do it, anyone can

  23. Kujo said on May 5, 2006 at 11:46 pm
    Reply

    Worked like a charm! Thanks.

  24. Emann said on May 5, 2006 at 11:10 pm
    Reply

    Thank you oh great one…. we are not worthy…

  25. pililatus said on May 5, 2006 at 8:13 pm
    Reply

    Gracias son unos genios

  26. Colin said on May 5, 2006 at 9:33 am
    Reply

    Brilliant! Very clear for an old fart like me to follow and it worked! i’ll be back!

  27. Ragnar Danneskjold said on May 3, 2006 at 2:11 pm
    Reply

    This worked great! Thanks so much.

  28. Anne said on May 2, 2006 at 1:17 am
    Reply

    …and rape your dog

  29. Jones said on May 2, 2006 at 1:15 am
    Reply

    its only a start..MS is goona kill your family next

  30. Bill Gates said on May 2, 2006 at 1:12 am
    Reply

    thank God for Mac

  31. yee wei said on May 1, 2006 at 4:34 am
    Reply

    hello,im from malaysia.Im almost done to disable Microsofts new Anti-Piracy
    .but what do u mean by “leaving the “Readâ€? permission as-is.” ???

  32. Martin said on April 28, 2006 at 7:58 am
    Reply

    This tool has nothing to do with the checks that are made when you download patches. At least that´s what I think.

    I think it is an independent tool thats sole purpose is to verify the key of the windows installation.

  33. Lobo Schmidt said on April 28, 2006 at 4:32 am
    Reply

    Oh, now I understood, thanks Martin.

    But now comes this doubth (sorry about the spell):

    How can I install the lastest version of Internet Explorer (not that I want to use it more than my Opera or my Firefox) and bypass it’s windows certificate test?

  34. Martin said on April 27, 2006 at 10:56 pm
    Reply

    Lobo you only have that file if you download the latest patch as far as i know..

  35. Lobo Schmidt said on April 27, 2006 at 7:12 pm
    Reply

    Still couldn’t find the “WgaLogon.dll”. I must be under some virus or something like that.

    Maybe it’s time to format my system again. I’ve been experimenting some strange situations.

    Anyway, thanks for posting this up. I’ll try it again latter.

Leave a Reply

Check the box to consent to your data being stored in line with the guidelines set out in our privacy policy

We love comments and welcome thoughtful and civilized discussion. Rudeness and personal attacks will not be tolerated. Please stay on-topic.
Please note that your comment may not appear immediately after you post it.