Instructions to disable the Intel AMT privacy notification popup

Lori Welch left a comment on one of my blog posts - "I am curious why every time I login to the pc, I get a box that pops up notifying me of the AMT. I find this particularly annoying for end users, and is there no way to disable the notice?"

First, let us understand why the Intel AMT privacy notification popup? In the spirit of transparency and user privacy, Intel provides a notification mechanism for system manufacturers to disclose the presence and state (on or off) of Intel AMT.

I posted this question to our developer discussion forum where couple of Intel engineers expressed some solutions like the one from Ylian Saint-Hilaire"Personally, I run "msconfig" and remove all Intel AMT auto-run applications and services except for the LMS service which is useful for accessing Intel AMT (The Intel AMT HECI driver). At this point, I do it so fast each time I setup a new computer, I don't even notice I am doing it anymore.

And, I was also told by Jia-Shing Wang that "In the not-so-distant future, end-users will be given a check box to disable the message box from showing at log-on time"

But, I somehow felt that we should have some other way for the end user to be able to disable the popup purely from a usability perspective.  After talking to some experts internally these are the instructions I was given to disable the Intel AMT privacy notification. Big thanks to Jerome Estebanfor helping me find these instructions.

Disable.reg has [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "atchk"=""
This will prevent the privacy icon application from ever running again.

If you want to keep the app running, but, minimized to get rid of the "popup", then

[HKLM\SOFTWARE\Intel\Network_Services\atchk] "MinimizePrivacyIconAtStart"=dword:00000001

This can also be done by altering the oementry.reg file which contains this entry. The atchk (privacy icon) app gets installed when you install the SOL/LMS driver software.

The disable.reg and oementry.reg files should be shipped on the OEM driver CDs.

I really hope these instructions help the users who would like to disable the AMT privacy notice - until the time we make it simpler for the end-users to do the same more easily.
For more complete information about compiler optimizations, see our Optimization Notice.

19 comments

Top
Shmuel Gershon (Intel)'s picture

Daniel, thanks for your comments!
The version with the checkbox mentioned by Ajay in the post was already released with AMT2.5.

Anyway, it would be great to be able to receive more feedback from end-users.
I can be contacted at shmuel.gershon at intel's domain, it would be nice to have a direct conversation with users.
Thanks!

anonymous's picture

Here is another thank you to everyone who posted a solution to this annoyance.

This was my first encounter with Intel AMT and I have to say it wasn't a favorable one. All I wanted to do was get this system ready to create a deployment image for the rest of our systems. So I install Windows and the drivers. Lo and behold without installing any extra software I have this irritating dialog box & an extra icon in my System Tray. So I follow the link in the dialog box "for more information click here". It only leads to a webpage with a sales pitch for the New Intel Technology. No where did I find any link to usable information about the technology or how to remove the dialog box or System Tray icon. So just to get this system the way I wanted I had to search for a solution. Before I found this blog I was very close to uninstalling AMT never to return. The dialog box and icon in the System Tray were very easy to eliminate after finding this blog, but the bad taste left in a persons mouth doesn't go away that easily.

I would suggest a much more thorough Q&A process before a technology is implemented. I'm sure Intel doesn't want something as simple as an "annoying dialog box" to be what customers remember, rather than the technology itself. By the way, "Intel AMT +annoying dialog box" is what I searched for, so AMT is already known for this "annoying dialog box".

Ajay Mungara (Intel)'s picture

Thanks Ron for your very helpful comment. I will make sure this information is included in our Frequently Asked Questions. Thanks.

bullarded's picture

I would like to thank all of you but especially "Ron" who pointed me to the simplest solution right there in the Program Files area. As another end-user, I just want to point out that the fact that Lenovo is supplying this enhancement absent any explanation does not help its implementation by me or my wife as we upgraded our 7 year old desktop. But all is well and the welcome screen is gone and I set my Intel ME password appropriately thanks to the internet/Google so all is well in the world and thanks!

Jed

anonymous's picture

Hi:

The postings here and the "readme.txt" file in my C:\Program Files\Intel\AMT\ folder were very helpful in dealing with this annoyance. I'm just a regular joe-schmoe end user, so I thought it might be helpful if I restated a couple of things in more layman's language so folks like me have a better understanding of what's involved.

What we're talking about here is enabling/disabling or changing the default behavior of the AMT status application, not the AMT service itself. By default, when it's run, the status application loads the AMT Status icon into the tray and makes that annoying popup dialog appear.

My guess is that most folks just want to stop that popup from appearing every time they start their computers. If this is the case, then all they need to do is go to their Start menu, click on "Run..." and type in "regedit". This opens the registry editor. Follow the directory tree to:
HKEY_LOCAL_MACHINE\SOFTWARE\Intel\Network_Services\atchk\. In that folder, they should see an entry named "MinimizePrivacyIconAtStartUp". If they double-click this, a dialog should pop up to edit the "dword" value. In the "Value data:" box, they should type "1" in place of the "0" there (leave base as hexidecimal) and click "OK". When they re-start their computers, the status application should still run, putting the status icon in the tray, but without the popup dialog appearing. That way, if they want to check the status, they can do so from the icon in the tray (right click - Show Status).

If you don't want the status program to run at all (no popup and no icon in the tray), then go to C:\Program Files\Intel\AMT. There you should find a file named "disable.reg" ".reg" files can automatically change entries in the registry for you. These are good to use as they minimize syntax errors. If you double-click on "disable.reg", a dialog will pop up asking if you're sure you want to add the information to the registry. Selecting Yes will disable the AMT status program from running at startup. The AMT service itself will still be enabled. Even though you may have disabled the status app from running at startup, you can always run it anytime by going to the Start menu, clicking on Run and browsing to obtain "C:\Program Files\Intel\AMT\atchk.exe" in the "Open:" box. Alternately, you can use Windows Explorer or My Computer to go directly to "C:\Program Files\Intel\AMT\" and double-click on the "atchk.exe" file.

If you've disabled the AMT status app at startup and want to re-enable it, go to C:\Program Files\Intel\AMT. There you should find a file named "enable.reg". Double-click on it and select YES when the dialog pops up asking if you're sure you want to add the information to the registry. As an aside, when I tried to re-enable this app, it didn't work. I found I had to actually edit the "enable.reg" file because it contained an incorrect path. If this is the case for you, right click on the enable.reg file and choose Edit. I had to change this:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\
CurrentVersion\Run]"atchk"="\"C:\\Program Files\\Intel\\AMT Status\\atchk.exe\""

to this:

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\
CurrentVersion\Run]"atchk"="\"C:\\Program Files\\Intel\\AMT\\atchk.exe\""

This was because the directory in which "atchk.exe" resided on my computer was named simply "AMT" and not "AMT Status". When I made this correction and then double-clicked the newly edited "enable.reg" file to update the registry, the app opened once again on startup as expected.

I hope this was helpful to those like me who are less inclined to fool around with the registry and such. Thanks.

Regards,
Ron.

anonymous's picture

I'm trying to get this to go through as a silent install, and although the overall LMS "setup.exe -s" switch is working, the atchk.exe status popup keeps infuriating me.

I have edited oementry.reg to say "MinimizePrivacyIconAtStart"=dword:00000001

I have also edited enable.reg to match disable.reg which made no difference to the install.

Finally I copied the [HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "atchk"="" from disable.reg into oementry.reg in an attempt to blank out the Run entry (which didn't work either, it was still set to run at startup).

None of these attempts are giving me a silent install. Any input would be greatly appreciated.

anonymous's picture

Thanks. I was able to benefit from the collaborative effort of all the aforementioned. I'm imaging a rather large amount of PCs and I most certainly did not want that pop-up appearing. Thanks again.

Ajay Mungara (Intel)'s picture

Ylian,
Thanks for your comment. I totally agree with you that the "disable popup opiton" needs to made available soon. Based on what I am hearing internally, I think it should happen pretty soon.

Ylian S. (Intel)'s picture

Excellent post Ajay, and not just saying that because you quoted me. I also think that with this pop-up, people may not install the HECI driver at all and so, limiting the potential benefits of having Intel AMT. Let hope we get this new update soon.

Pages

Add a Comment

Have a technical question? Visit our forums. Have site or software product issues? Contact support.