Disable compatibility adjustment data sharing ("SdbinstMergeDbTask")
- Windows onlyThis script improves your privacy on Windows
- Single actionThis page belongs to a script, containing basic changes to achieve a task.
- Impact: Medium
System Functionality / Data Loss Risk: Moderate
This action improves privacy with minimal impact when you run the recommended script.
This action improves privacy with some impact when you run the recommended script. - Batch (batchfile)These changes use Windows system commands to update your settings.
- Administrator rights requiredThis script requires privilege access to do the system changes
- Fully reversible
You can fully restore this action (revert back to the original behavior) using this website.
The restore/revert methods provided here can help you fix issues.
Overview
This script disables the "SdbinstMergeDbTask" scheduled task.
The 'SdbinstMergeDbTask' task merges pending shim application compatibility databases, as described in Task Scheduler (Windows 11 22H2), facilitating the running of older software on newer Windows versions.
According to Task Scheduler (Windows 11 22H2), the task utilizes the sdbinst.exe
tool 1 2 3.
This tool is known as the "Application Compatibility Database Installer" 4.
It is part of the Application Compatibility Toolkit (ACT) 4 5.
It allows the deployment of SDB files (Windows Shim Database 6 7) to the computer 4 5.
Before any compatibility fixes or messages are applied 5, this tool is used to make sure applications run correctly, a process called application shimming 8.
This task is associated with the collection of telemetry data 1 2 3. Telemetry data is information that software providers, such as Microsoft, gather about software usage. By disabling this task, the amount of telemetry data that Microsoft collects is reduced, which boosts user privacy.
Additionally, there have been instances where malicious actors exploited this Windows feature to covertly gain unauthorized access and execute code within genuine Windows processes 2 9 10 11. Disabling this task provides an added layer of security against such threats.
Standard administrator rights are insufficient to turn off this task 12.
Attempts to do so result in an ERROR: Access is denied
message.
To overcome this, the script escalates its privileges ensuring the task is correctly disabled.
Overview of default task statuses
\Microsoft\Windows\Application Experience\SdbinstMergeDbTask
:
OS Version | Default status |
---|---|
Windows 10 22H2 | 🟡 N/A (missing) |
Windows 11 22H2 | 🟢 Ready |
Windows 11 23H2 | 🟢 Ready |
This script is only recommended if you understand its implications.
Some non-critical or features may no longer function correctly after running this script.
This script can be fully reversed to restore changes if something goes wrong.
Sources
- [Rule Tuning] Potential Application Shimming via Sdbinst (Windows) · Issue #2354 · elastic/detection-rules. github.com. (2023).
Original: https://github.com/elastic/detection-rules/issues/2354
Archived: https://web.archive.org/web/20231005111407/https://github.com/elastic/detection-rules/issues/2354 - Potential Application Shimming via Sdbinst. Elastic Security Solution [8.10]. Elastic. (2023).
Original: https://www.elastic.co/guide/en/security/current/potential-application-shimming-via-sdbinst.html
Archived: https://web.archive.org/web/20231005111515/https://www.elastic.co/guide/en/security/current/potential-application-shimming-via-sdbinst.html - FarBar log/HijackThis log - Virus, Trojan, Spyware, and Malware Removal Help. bleepingcomputer.com. (2023).
Original: https://www.bleepingcomputer.com/forums/t/785832/farbar-loghijackthis-log
Archived: https://web.archive.org/web/20231005111850/https://www.bleepingcomputer.com/forums/t/785832/farbar-loghijackthis-log/ - Planning and Testing for Application Deployment (Word Document). microsoft.com. (2023).
Original: https://download.microsoft.com/download/4/a/2/4a28d2bb-2916-43a6-9c88-a819d3bfa70f/05_CHAPTER_3_Planning_and_Testing_for_Application_Deployment.doc
Archived: https://web.archive.org/web/20231005111905/https://download.microsoft.com/download/4/a/2/4a28d2bb-2916-43a6-9c88-a819d3bfa70f/05_CHAPTER_3_Planning_and_Testing_for_Application_Deployment.doc - Using the Sdbinst.exe Command-Line Tool (Windows 10) - Windows Deployment. Microsoft Learn. (2023).
Original: https://learn.microsoft.com/en-us/windows/deployment/planning/using-the-sdbinstexe-command-line-tool
Archived: https://web.archive.org/web/20231005111314/https://learn.microsoft.com/en-us/windows/deployment/planning/using-the-sdbinstexe-command-line-tool - Supported Formats. microfocus.com. (2023).
Original: https://www.microfocus.com/documentation/idol/IDOL_23_2/KeyviewViewingSDK_23.2_Documentation/Guides/html/Content/kv_formats/_KV_FMT__AllDetected.htm
Archived: https://web.archive.org/web/20231005111428/https://www.microfocus.com/documentation/idol/IDOL_23_2/KeyviewViewingSDK_23.2_Documentation/Guides/html/Content/kv_formats/_KV_FMT__AllDetected.htm - Windows Shim Database (SDB) Parser. tzworks.com. (2023).
Original: https://tzworks.com/prototype_page.php
Archived: https://web.archive.org/web/20230927174609/https://tzworks.com/prototype_page.php?proto_id=33 - Process Injection and Persistence using Application Shimming. Andrea Fortuna. andreafortuna.org. (2023).
Original: https://andreafortuna.org/2018/11/12/process-injection-and-persistence-using-application-shimming
Archived: https://web.archive.org/web/20231005111828/https://andreafortuna.org/2018/11/12/process-injection-and-persistence-using-application-shimming/ - Potential Shim Database Persistence via Sdbinst.EXE. Detection.FYI. (2023).
Original: https://detection.fyi/sigmahq/sigma/windows/process_creation/proc_creation_win_sdbinst_shim_persistence
Archived: https://web.archive.org/web/20231005112020/https://detection.fyi/sigmahq/sigma/windows/process_creation/proc_creation_win_sdbinst_shim_persistence/ - Suspicious Shim Database Installation via Sdbinst.EXE. Detection.FYI. (2023).
Original: https://detection.fyi/sigmahq/sigma/windows/process_creation/proc_creation_win_sdbinst_susp_extension
Archived: https://web.archive.org/web/20231005112110/https://detection.fyi/sigmahq/sigma/windows/process_creation/proc_creation_win_sdbinst_susp_extension/ - SDB UAC Bypass. jpcertcc.github.io. (2023).
Original: https://jpcertcc.github.io/ToolAnalysisResultSheet/details/SDB-UAC-Bypass.htm
Archived: https://web.archive.org/web/20231005112255/https://jpcertcc.github.io/ToolAnalysisResultSheet/details/SDB-UAC-Bypass.htm - Will Windows 11 force me to sign in to a Microsoft Account? - Privacy and Security / Get Advice - Techlore Discussions. discuss.techlore.tech. (2023).
Original: https://discuss.techlore.tech/t/will-windows-11-force-me-to-sign-in-to-a-microsoft-account/1869/9
Archived: https://web.archive.org/web/20231005111150/https://discuss.techlore.tech/t/will-windows-11-force-me-to-sign-in-to-a-microsoft-account/1869/9
Apply Now
Choose one of three ways to apply:
Download script
Download and run the script directly- No app needed
- Offline usage
- Easy-to-apply
- Free
- Open-source
Help
How to apply or restore "Disable compatibility adjustment data sharing (SdbinstMergeDbTask)" using script
- ≈ 2 min to complete
- Tools: Web Browser
- Difficulty: Simple
- ≈ 5 instructions
- 1
Download
Download the script file by clicking on thebutton above.
Use button above to restore changes. - 2
Keep the file
If warned by your browser, keep the file. - 3
Open
Open the downloaded file. - 4
Exit
Once it's done, press any key to exit the window. - 5
Restart
Restart your computer for all changes to take effect.
Apply with privacy.sexy
Guided, automated application with safety checks- Recommended for most users
- Includes safety checks
- Free
- Open-source
- Popular
- Offline/Online usage
Help
How to apply or restore "Disable compatibility adjustment data sharing (SdbinstMergeDbTask)" using privacy.sexy
- ≈ 3 min to complete
- Tools: privacy.sexy
- Difficulty: Simple
- ≈ 4 instructions
- 2
Choose script
- Search for the script name: Disable compatibility adjustment data sharing (SdbinstMergeDbTask)
- Check the script by clicking on the checkbox.
- 3
Run
Click on ▶️ Run button at the bottom of the page.This button only appears on desktop version (recommended). On browser, use 💾 Save button.
- Apply
- Revert
:: Disable scheduled task(s): `\Microsoft\Windows\Application Experience\SdbinstMergeDbTask`
PowerShell -ExecutionPolicy Unrestricted -Command "$taskPathPattern='\Microsoft\Windows\Application Experience\'; $taskNamePattern='SdbinstMergeDbTask'; Write-Output "^""Disabling tasks matching pattern `"^""$taskNamePattern`"^""."^""; $tasks = @(Get-ScheduledTask -TaskPath $taskPathPattern -TaskName $taskNamePattern -ErrorAction Ignore); if (-Not $tasks) { Write-Output "^""Skipping, no tasks matching pattern `"^""$taskNamePattern`"^"" found, no action needed."^""; exit 0; }; $operationFailed = $false; foreach ($task in $tasks) { $taskName = $task.TaskName; if ($task.State -eq [Microsoft.PowerShell.Cmdletization.GeneratedTypes.ScheduledTask.StateEnum]::Disabled) { Write-Output "^""Skipping, task `"^""$taskName`"^"" is already disabled, no action needed."^""; continue; }; $taskFullPath = "^""$($task.TaskPath)$($task.TaskName)"^""; $adminSid = New-Object System.Security.Principal.SecurityIdentifier 'S-1-5-32-544'; $adminAccount = $adminSid.Translate([System.Security.Principal.NTAccount]); $taskFilePath="^""$($env:SYSTEMROOT)\System32\Tasks$($task.TaskPath)$($task.TaskName)"^""; $accessGranted = $false; try { $originalAcl= Get-Acl -Path $taskFilePath -ErrorAction Stop; $modifiedAcl= Get-Acl -Path $taskFilePath -ErrorAction Stop; $modifiedAcl.SetOwner($adminAccount); $taskFileAccessRule = New-Object System.Security.AccessControl.FileSystemAccessRule( $adminAccount, [System.Security.AccessControl.FileSystemRights]::FullControl, [System.Security.AccessControl.AccessControlType]::Allow ); $modifiedAcl.SetAccessRule($taskFileAccessRule); Set-Acl -Path $taskFilePath -AclObject $modifiedAcl -ErrorAction Stop; Write-Host "^""Successfully granted permissions for `"^""$taskFullPath`"^"" ."^""; $accessGranted = $true; } catch { Write-Warning "^""Failed to grant access to `"^""$taskFullPath`"^"": $($_.Exception.Message)"^""; }; try { $task | Disable-ScheduledTask -ErrorAction Stop | Out-Null; Write-Output "^""Successfully disabled task `"^""$taskName`"^""."^""; } catch { Write-Error "^""Failed to disable task `"^""$taskName`"^"": $($_.Exception.Message)"^""; $operationFailed = $true; }; if ($accessGranted) { try { Set-Acl -Path $taskFilePath -AclObject $originalAcl -ErrorAction Stop; Write-Host "^""Successfully restored permissions for `"^""$taskFullPath`"^"" ."^""; } catch { Write-Warning "^""Failed to restore access on `"^""$taskFilePath`"^"": $($_.Exception.Message)"^""; }; }; }; if ($operationFailed) { Write-Output 'Failed to disable some tasks. Check error messages above.'; exit 1; }"
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
Help
How to apply or restore "Disable compatibility adjustment data sharing (SdbinstMergeDbTask)" using commands
- ≈ 2 min to complete
- Tools: Command Prompt
- Difficulty: Medium
- ≈ 3 instructions
- 1
Open Command Prompt
Open Command Prompt as Administrator. - 2
Copy code
Copy the code: - 3
Paste & run
Paste the commands into Command Prompt and press Enter to run.Some changes require a system restart to take effect
Similar Guides
Wider Goal
Guides below includes this guide to achieve a wider goal.See other more general settings that includes this one as one of its actions.
These plans combine multiple privacy settings, including this one, for stronger protection.
- Disable background application compatibility checks (Application Experience scheduled tasks)
- Disable Application Experience data collection
- Disable OS data collection
This category focuses on disabling scheduled tasks related to Application Experience. These tasks aim to improve user experience by identifying compatibility issue...
Application Experience comprises services and tasks that help applications, including older ones, run smoothly. These components collect and send telemetry data to...
Disable OS data collection — to reduce data exposure leveraging important data privacy safeguard on Windows. What follows is, this guidance provides instructions t...
Same Goal
Other guides in Disable background application compatibility checks (Application Experience scheduled tasks)See settings that are in the same category as this guide.
Using other actions in the same category may help you achieve your goal better.
About the Creators
These people have authored this documentation and written its scripts:
Reviewed By
This guide has undergone comprehensive auditing and peer review:Expert review by undergroundwires
- Verified technical accuracy and editorial standards
- Assessed system impact and user privacy risks
Public review by large community
- Privacy enthusiasts and professionals peer-reviewed
- Millions of end-users tested across different environments
History
We continually monitor our guides, their impact and all other privacy options. We update our guides when new information becomes available. On every update, we publicly store who made the change, what has been changed, why the change was made and when the change was made.