On the spyware part it can be all turned off. They give the Group Policy tools to do it to 'Enterprise Customers' but it is all there in the settings/registry and tools like this will flip it all off for you quickly and easily. https://www.oo-software.com/en/shutup10