Skip to content
Announcement: We are currently not adding any applications to WinUtil and any apps that will be added through a PR will be declined by the maintainer.

# Disable Intel MM (vPro LMS)

Last Updated: 2024-08-07

Info

The Development Documentation is auto generated for every compilation of WinUtil, meaning a part of it will always stay up-to-date. Developers do have the ability to add custom content, which won't be updated automatically.

## Description

Intel LMS service is always listening on all ports and could be a huge security risk. There is no need to run LMS on home machines and even in the Enterprise there are better solutions.

Preview Code

    {
      "Content": "Disable Intel MM (vPro LMS)",
      "Description": "Intel LMS service is always listening on all ports and could be a huge security risk. There is no need to run LMS on home machines and even in the Enterprise there are better solutions.",
      "category": "z__Advanced Tweaks - CAUTION",
      "panel": "1",
      "Order": "a026_",
      "InvokeScript": [
        "
            Write-Host \"Kill LMS\"
            $serviceName = \"LMS\"
            Write-Host \"Stopping and disabling service: $serviceName\"
            Stop-Service -Name $serviceName -Force -ErrorAction SilentlyContinue;
            Set-Service -Name $serviceName -StartupType Disabled -ErrorAction SilentlyContinue;

            Write-Host \"Removing service: $serviceName\";
            sc.exe delete $serviceName;

            Write-Host \"Removing LMS driver packages\";
            $lmsDriverPackages = Get-ChildItem -Path \"C:\\Windows\\System32\\DriverStore\\FileRepository\" -Recurse -Filter \"lms.inf*\";
            foreach ($package in $lmsDriverPackages) {
                Write-Host \"Removing driver package: $($package.Name)\";
                pnputil /delete-driver $($package.Name) /uninstall /force;
            }
            if ($lmsDriverPackages.Count -eq 0) {
                Write-Host \"No LMS driver packages found in the driver store.\";
            } else {
                Write-Host \"All found LMS driver packages have been removed.\";
            }

            Write-Host \"Searching and deleting LMS executable files\";
            $programFilesDirs = @(\"C:\\Program Files\", \"C:\\Program Files (x86)\");
            $lmsFiles = @();
            foreach ($dir in $programFilesDirs) {
                $lmsFiles += Get-ChildItem -Path $dir -Recurse -Filter \"LMS.exe\" -ErrorAction SilentlyContinue;
            }
            foreach ($file in $lmsFiles) {
                Write-Host \"Taking ownership of file: $($file.FullName)\";
                & icacls $($file.FullName) /grant Administrators:F /T /C /Q;
                & takeown /F $($file.FullName) /A /R /D Y;
                Write-Host \"Deleting file: $($file.FullName)\";
                Remove-Item $($file.FullName) -Force -ErrorAction SilentlyContinue;
            }
            if ($lmsFiles.Count -eq 0) {
                Write-Host \"No LMS.exe files found in Program Files directories.\";
            } else {
                Write-Host \"All found LMS.exe files have been deleted.\";
            }
            Write-Host 'Intel LMS vPro service has been disabled, removed, and blocked.';
           "
      ],
      "UndoScript": [
        "
          Write-Host \"LMS vPro needs to be redownloaded from intel.com\"

          "
      ],
      "link": "https://christitustech.github.io/winutil/dev/tweaks/z--Advanced-Tweaks---CAUTION/DisableLMS1"
    }

## Invoke Script

            Write-Host "Kill LMS"
            $serviceName = "LMS"
            Write-Host "Stopping and disabling service: $serviceName"
            Stop-Service -Name $serviceName -Force -ErrorAction SilentlyContinue;
            Set-Service -Name $serviceName -StartupType Disabled -ErrorAction SilentlyContinue;

            Write-Host "Removing service: $serviceName";
            sc.exe delete $serviceName;

            Write-Host "Removing LMS driver packages";
            $lmsDriverPackages = Get-ChildItem -Path "C:\Windows\System32\DriverStore\FileRepository" -Recurse -Filter "lms.inf*";
            foreach ($package in $lmsDriverPackages) {
                Write-Host "Removing driver package: $($package.Name)";
                pnputil /delete-driver $($package.Name) /uninstall /force;
            }
            if ($lmsDriverPackages.Count -eq 0) {
                Write-Host "No LMS driver packages found in the driver store.";
            } else {
                Write-Host "All found LMS driver packages have been removed.";
            }

            Write-Host "Searching and deleting LMS executable files";
            $programFilesDirs = @("C:\Program Files", "C:\Program Files (x86)");
            $lmsFiles = @();
            foreach ($dir in $programFilesDirs) {
                $lmsFiles += Get-ChildItem -Path $dir -Recurse -Filter "LMS.exe" -ErrorAction SilentlyContinue;
            }
            foreach ($file in $lmsFiles) {
                Write-Host "Taking ownership of file: $($file.FullName)";
                & icacls $($file.FullName) /grant Administrators:F /T /C /Q;
                & takeown /F $($file.FullName) /A /R /D Y;
                Write-Host "Deleting file: $($file.FullName)";
                Remove-Item $($file.FullName) -Force -ErrorAction SilentlyContinue;
            }
            if ($lmsFiles.Count -eq 0) {
                Write-Host "No LMS.exe files found in Program Files directories.";
            } else {
                Write-Host "All found LMS.exe files have been deleted.";
            }
            Write-Host 'Intel LMS vPro service has been disabled, removed, and blocked.';

## Undo Script

          Write-Host "LMS vPro needs to be redownloaded from intel.com"

View the JSON file

August 7, 2024