Windows Server 2016 Optimisation Script (from http://www.jgspiers.com/windows-server-2016-optimisation-script/)

WS2016Optimisations.ps1

<#
# TO EXECUTE USE
# Set-ExecutionPolicy AllSigned; iex ((New-Object System.Net.WebClient).DownloadString('https://gist.githubusercontent.com/gblmarquez/e57c873e491d22cc265a9186da95f9e6/raw/f3f8e1a214595a22f28a52c0dbf4c680378943cd/WS2016Optimisations.ps1'))
####################################################################
#    File Name     : WS2016Optimisations.ps1                       #
#    Author        : George Spiers with thanks to Keith Campbell   #
#                    for assistance.                               #
#    Email         : george@jgspiers.com                           #
#    Twitter       : @JGSpiers                                     #
#    Website       : www.jgspiers.com                              #
#    Date Created  : 15.03.2017                                    #
#    Tested on     : Windows Server 2016 build 14393.0             # 
#    Description   : This script disables services, removes        #
#                    scheduled tasks and imports registry          #
#                    values to optimise system                     #
#                    performance on Windows Server 2016            #
#                    running in a Citrix SBC environment.          #                                                               
#    Warning       : This script makes changes to the system       #
#                    registry and other configurational change     #
#                    and as such a full backup of the machine or   #
#                    snapshot if running in a virtual environment  # 
#                    is strongly recommended. Carry out full       #
#                    testing before introducing image to           #
#                    production.                                   #
#    Note          : You should review ALL optimisations this      #
#                    script makes and determine if they fit in to  #
#                    your environment. Not every optimisation      # 
#                    suits all environments. For example, this     #
#                    script disables key Hyper-V services for use  #
#                    in non-Hyper-V environments. If you use       #
#                    Hyper-V, you must enable these services.      #
#    Instructions  : To avoid failure, run PowerShell as an        #
#                    administrator.                                #
#    Change Log    : 15.04.17 - Added registry key to change power #
#                               plan from Balanced to High Perform #
#                               ance.                              #
                     
#                  : 01.06.17 - Added CDPUserSvc_498c4,            #
                                
#                               Contact_Data_498c4,                #
                                
#                               Link-Layer Topology Discovery      #
                                
#                               Mapper, Network Connection Broker, #
                                
#                               Program Compatibility Assistant Se #
                                
#                               rvice, Windows Insider Service to  #
                                
#                               service disable list.              #
                    
#                  : 27.06.17 - Removed line that disabled         #
                                 
#                               Application Readiness service.     #
                                 
#                               Disabling this service caused      #
                                 
#                               an issue with Windows Updates.     #

#                  : 10.07.17 - Changed Disk I/O Timeout vaue from #
                                
#                               65 seconds to 200 seconds. HKLM\   #
                                
#                               SYSTEM\CurrentControlSet\Services\ #
                           
#                               Disk - TimeoutValue.               #
###################################################################
#>



# Set Command Descriptive Text in Cyan

$CommandDesc = " -ForegroundColor Cyan"



function CMDColour($text){

    invoke-expression ("Write-Host " + $text + $CommandDesc)

}



$cmdList =  

	@("", "The following section contains commands that remove Active Setup Registry entries. These optimisations are aimed at reducing logon times.", "sectioncomplete"),

     ("Deleting StubPath - Themes Setup.","'HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}' /v StubPath /f", "delete"),

     ("Deleting StubPath - WinMail.", "'HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}' /v StubPath /f", "delete"),

     ("Deleting StubPath x64 - WinMail.", "'HKLM\SOFTWARE\WOW6432Node\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}' /v StubPath /f", "delete"),

     ("Deleting StubPath - Windows Media Player.", "'HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}' /v StubPath /f", "delete"),

     ("Deleting StubPath x64 - Windows Media Player.", "'HKLM\SOFTWARE\WOW6432Node\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}' /v StubPath /f", "delete"),

     ("Deleting StubPath - Windows Desktop Update.", "'HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4340}' /v StubPath /f", "delete"),

     ("Deleting StubPath - Web Platform Customizations.", "'HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}' /v StubPath /f", "delete"),

     ("Deleting StubPath - DotNetFrameworks.", "'HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}' /v StubPath /f", "delete"),

     ("Deleting StubPath x64 - DotNetFrameworks.", "'HKLM\SOFTWARE\WOW6432Node\Microsoft\Active Setup\Installed Components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}' /v StubPath /f", "delete"),

     ("Deleting StubPath - Windows Media Player.", "'HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}' /v StubPath /f", "delete"),

     ("Deleting StubPath x64 - Windows Media Player.", "'HKLM\SOFTWARE\WOW6432Node\Microsoft\Active Setup\Installed Components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}' /v StubPath /f", "delete"),

     ("Deleting StubPath - IE ESC for Admins.", "'HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{A509B1A7-37EF-4b3f-8CFC-4F3A74704073}' /v StubPath /f", "delete"),

     ("Deleting StubPath - IE ESC for Users.", "'HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{A509B1A8-37EF-4b3f-8CFC-4F3A74704073}' /v StubPath /f", "delete"),

     ("", "The following section contains commands that add or modify various Registry entries to the system. These optimisations are aimed at improving system performance. Many of these optimisations are the same ones you get when running the PVS 7.11 Target Device Optimization Tool with the exception of HKCU optimizations. Optimizations made by importing HKCU registry entries should be created via Group Policy or Citrix WEM.", "sectioncomplete"),

	 ("Modifying DisablePagingExecutive DWORD from 0x0 to 0x1 - Keep drivers and kernel on physical memory.", "'HKLM\System\CurrentControlSet\Control\Session Manager\Memory Management' /v DisablePagingExecutive /t REG_DWORD /d 0x1 /f", "add"),

     ("Modifying EventLog DWORD from 0x3 to 0x1 - Log print job error notifications in Event Viewer.", "'HKLM\SYSTEM\CurrentControlSet\Control\Print\Providers' /v EventLog /t REG_DWORD /d 0x1 /f", "add"),

     ("Adding DisableTaskOffload DWORD - Disable Task Offloading.", "'HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters' /v DisableTaskOffload /t REG_DWORD /d 0x1 /f", "add"),

     ("Adding HideSCAHealth DWORD - Hide Action Center Icon.", "'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer' /v HideSCAHealth /t REG_DWORD /d 0x1 /f", "add"),

     ("Adding NoRemoteRecursiveEvents DWORD - Turn off change notify events for file and folder changes.", "'HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Policies\Explorer' /v NoRemoteRecursiveEvents /t REG_DWORD /d 0x1 /f", "add"),

     ("Adding SendAlert DWORD - Do not send Administrative alert during system crash.", "'HKLM\SYSTEM\CurrentControlSet\Control\CrashControl' /v SendAlert /t REG_DWORD /d 0x0 /f", "add"),

     ("Modifying CrashDumpEnabled DWORD from 0x7 to 0x0 - Disable crash dump creation.", "'HKLM\SYSTEM\CurrentControlSet\Control\CrashControl' /v CrashDumpEnabled /t REG_DWORD /d 0x0 /f", "add"),

     ("Modifying LogEvent DWORD from 0x1 to 0x0 - Disable system crash logging to Event Log.", "'HKLM\SYSTEM\CurrentControlSet\Control\CrashControl' /v LogEvent /t REG_DWORD /d 0x0 /f", "add"),

     ("Modifying ErrorMode DWORD from 0x0 to 0x2 - Hide hard error messages.", "'HKLM\SYSTEM\CurrentControlSet\Control\Windows' /v ErrorMode /t REG_DWORD /d 0x2 /f", "add"),

     ("Adding ShowTray DWORD - Hide VMware Tools tray icon.", "'HKLM\SOFTWARE\VMware, Inc.\VMware Tools' /v ShowTray /t REG_DWORD /d 0x0 /f", "add"),

     ("Modifying Application REG_EXPAND_SZ from default location to D:\ - Move Application Event Log from default location to D:\.", "'HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Application' /v File /t REG_EXPAND_SZ /d 'D:\Event Logs\Application.evtx' /f", "add"),

     ("Modifying Security REG_EXPAND_SZ from default location to D:\ - Move Security Event Log from default location to D:\.", "'HKLM\SYSTEM\CurrentControlSet\Services\EventLog\Security' /v File /t REG_EXPAND_SZ /d 'D:\Event Logs\Security.evtx' /f", "add"),

     ("Modifying System REG_EXPAND_SZ from default location to D:\ - Move System Event Log from default location to D:\.", "'HKLM\SYSTEM\CurrentControlSet\Services\EventLog\System' /v File /t REG_EXPAND_SZ /d 'D:\Event Logs\System.evtx' /f", "add"),

     ("Adding ServicesPipeTimeout DWORD - Increase services startup timeout from 30 to 45 seconds.", "'HKLM\SYSTEM\CurrentControlSet\Control' /v ServicesPipeTimeout /t REG_DWORD /d 0xafc8 /f", "add"),

     ("Adding DisableFirstRunCustomize DWORD - Disable Internet Explorer first-run customise wizard.", "'HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer\Main' /v DisableFirstRunCustomize /t REG_DWORD /d 0x1 /f", "add"),

     ("Adding AllowTelemetry DWORD - Disable telemetry.", "'HKLM\SOFTWARE\Policies\Microsoft\Windows\DataCollection' /v AllowTelemetry /t REG_DWORD /d 0x0 /f", "add"),

	 ("Adding Enabled DWORD - Disable offline files.", "'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\NetCache' /v Enabled /t REG_DWORD /d 0x0 /f", "add"),

     ("Adding Enable REG_SZ - Disable Defrag.", "'HKLM\SOFTWARE\Microsoft\Dfrg\BootOptimizeFunction' /v Enable /t REG_SZ /d N /f", "add"),

     ("Changing NtfsDisableLastAccessUpdate DWORD to 0x1 - Disable last access timestamp.", "'HKLM\SYSTEM\CurrentControlSet\FileSystem' /v NtfsDisableLastAccessUpdate /t REG_DWORD /d 0x1 /f", "add"),

     ("Changing MaxSize DWORD from 0x01400000 to 0x00010000 - Reduce Application Event Log size to 64KB.", "'HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Application' /v MaxSize /t REG_DWORD /d 0x10000 /f", "add"),

     ("Changing MaxSize DWORD from 0x0140000 to 0x00010000 - Reduce Security Event Log size to 64KB.", "'HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Security' /v MaxSize /t REG_DWORD /d 0x10000 /f", "add"),

     ("Changing MaxSize DWORD from 0x0140000 to 0x00010000 - Reduce Security Event Log size to 64KB.", "'HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\Security' /v MaxSize /t REG_DWORD /d 0x10000 /f", "add"),

     ("Changing MaxSize DWORD from 0x0140000 to 0x00010000 - Reduce System Event Log size to 64KB.", "'HKLM\SYSTEM\CurrentControlSet\Services\Eventlog\System' /v MaxSize /t REG_DWORD /d 0x10000 /f", "add"),

     ("Changing ClearPageFileAtShutdown DWORD to 0x0 - Disable clear Page File at shutdown.", "'HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management' /v NtfsDisableLastAccessUpdate /t REG_DWORD /d 0x0 /f", "add"),

     ("Creating NoAutoUpdate DWORD - Disable Windows Autoupdate.", "'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update' /v NoAutoUpdate /t REG_DWORD /d 0x1 /f", "add"),

     ("Creating AUOptions DWORD - Disable Windows Autoupdate.", "'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update' /v AUOptions /t REG_DWORD /d 0x1 /f", "add"),

     ("Creating ScheduleInstallDay DWORD - Disable Windows Autoupdate.", "'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update' /v ScheduleInstallDay /t REG_DWORD /d 0x0 /f", "add"),

     ("Creating ScheduleInstallTime DWORD - Disable Windows Autoupdate.", "'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update' /v ScheduleInstallTime /t REG_DWORD /d 0x3 /f", "add"),

     ("Creating EnableAutoLayout DWORD - Disable Background Layout Service.", "'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OptimalLayout' /v EnableAutoLayout /t REG_DWORD /d 0x0 /f", "add"),

     ("Creating DumpFileSize DWORD - Reduce DedicatedDumpFile DumpFileSize to 2 MB.", "'HKLM\SYSTEM\CurrentControlSet\Control\CrashControl' /v DumpFileSize /t REG_DWORD /d 0x2 /f", "add"),

     ("Creating IgnorePagefileSize DWORD - Reduce DedicatedDumpFile DumpFileSize to 2 MB.", "'HKLM\SYSTEM\CurrentControlSet\Control\CrashControl' /v IgnorePagefileSize /t REG_DWORD /d 0x1 /f", "add"),

     ("Creating Paths DWORD - Reduce IE Temp File.", "'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths' /v Paths /t REG_DWORD /d 0x4 /f", "add"),

     ("Creating CacheLimit DWORD - Reduce IE Temp File.", "'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path1' /v CacheLimit /t REG_DWORD /d 0x100 /f", "add"),

     ("Creating CacheLimit DWORD - Reduce IE Temp File.", "'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path2' /v CacheLimit /t REG_DWORD /d 0x100 /f", "add"),

     ("Creating CacheLimit DWORD - Reduce IE Temp File.", "'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path3' /v CacheLimit /t REG_DWORD /d 0x100 /f", "add"),

     ("Creating CacheLimit DWORD - Reduce IE Temp File.", "'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Cache\Paths\path4' /v CacheLimit /t REG_DWORD /d 0x100 /f", "add"),

     ("Adding DisableLogonBackgroundImage DWORD - Disable Logon Background Image.", "'HKLM\SOFTWARE\Policies\Microsoft\Windows\System' /v DisableLogonBackgroundImage /t REG_DWORD /d 0x1 /f", "add"),
     
     ("Changing DisablePasswordChange DWORD from 0x0 to 0x1 - Disable Machine Account Password Changes.", "'HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters' /v DisablePasswordChange /t REG_DWORD /d 0x1 /f", "add"),

     ("Changing PreferredPlan REG_SZ from 381b4222-f694-41f0-9685-ff5bb260df2e to 8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c - Changing Power Plan to High Performance.", "'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ControlPanel\NameSpace\{025A5937-A6BE-4686-A844-36FE4BEC8B6D}' /v PreferredPlan /t REG_SZ /d 8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c /f", "add"),

     ("Changing TimeoutValue DWORD from 0x41 to 0xC8 - Increase Disk I/O Timeout to 200 seconds .", "'HKLM\SYSTEM\CurrentControlSet\Services\Disk' /v TimeoutValue /t REG_DWORD /d 0xC8 /f", "add"),

     ("", "The following section contains commands that disable services. These optimisations are aimed at reducing system footprint and improving performance.", "sectioncomplete"),

	 ("Disabling service AJRouter - AllJoyn Router Service.", "AJRouter -StartupType Disabled", "set-service"),

     ("Disabling service ALG - Application Layer Gateway Service.", "ALG -StartupType Disabled", "set-service"),

     ("Disabling service AppMgmt - Application Management.", "AppMgmt -StartupType Disabled", "set-service"),

     ("Disabling service bthserv - Bluetooth Support Service.", "bthserv -StartupType Disabled", "set-service"),

     ("Disabling service CDPUserSvc_498c4 - CDPUserSvc_498c4.", "CDPUserSvc_498c4 -StartupType Disabled", "set-service"),

     ("Disabling service PimIndexMaintenanceSvc_498c4 - Contact_Data_498c4.", "PimIndexMaintenanceSvc_498c4 -StartupType Disabled", "set-service"),

     ("Disabling service DcpSvc - DataCollectionPublishingService.", "DcpSvc -StartupType Disabled", "set-service"),

     ("Disabling service DPS - Diagnostic Policy Service.", "DPS -StartupType Disabled", "set-service"),

     ("Disabling service WdiServiceHost - Diagnostic Service Host.", "WdiServiceHost -StartupType Disabled", "set-service"),

     ("Disabling service WdiSystemHost - Diagnostic System Host.", "WdiSystemHost -StartupType Disabled", "set-service"),

     ("Disabling service DiagTrack - Connected User Experiences and Telemetry [Diagnostics Tracking Service].", "DiagTrack -StartupType Disabled", "set-service"),

     ("Disabling service dmwappushservice - dmwappushsvc.", "dmwappushservice -StartupType Disabled", "set-service"),

     ("Disabling service MapsBroker - Downloaded Maps Manager.", "MapsBroker -StartupType Disabled", "set-service"),

     ("Disabling service EFS - Encrypting File System [EFS].", "EFS -StartupType Disabled", "set-service"),

     ("Disabling service Eaphost - Extensible Authentication Protocol.", "Eaphost -StartupType Disabled", "set-service"),

     ("Disabling service FDResPub - Function Discovery Resource Publication.", "FDResPub -StartupType Disabled", "set-service"),

     ("Disabling service lfsvc - Geolocation Service.", "lfsvc -StartupType Disabled", "set-service"),

     ("Disabling service HvHost - HV Host Service.", "HvHost -StartupType Disabled", "set-service"),

     ("Disabling service vmickvpexchange - Hyper-V Data Exchange Service.", "vmickvpexchange -StartupType Disabled", "set-service"),

     ("Disabling service vmicguestinterface - Hyper-V Guest Service Interface.", "vmicguestinterface -StartupType Disabled", "set-service"),

     ("Disabling service vmicshutdown - Hyper-V Guest Shutdown Interface.", "vmicshutdown -StartupType Disabled", "set-service"),

     ("Disabling service vmicheartbeat - Hyper-V Heartbeat Service.", "vmicheartbeat -StartupType Disabled", "set-service"),

     ("Disabling service vmicvmsession - Hyper-V PowerShell Direct Service.", "vmicvmsession -StartupType Disabled", "set-service"),

     ("Disabling service vmicrdv - Hyper-V Remote Desktop Virtualization Service.", "vmicrdv -StartupType Disabled", "set-service"),

     ("Disabling service vmictimesync - Hyper-V Time Synchronization Service.", "vmictimesync -StartupType Disabled", "set-service"),

     ("Disabling service vmicvss - Hyper-V Volume Shadow Copy Requestor.", "vmicvss -StartupType Disabled", "set-service"),

     ("Disabling service UI0Detect - Interactive Services Detection.", "UI0Detect -StartupType Disabled", "set-service"),

     ("Disabling service SharedAccess - Internet Connection Sharing [ICS].", "SharedAccess -StartupType Disabled", "set-service"),

     ("Disabling service iphlpsvc - IP Helper.", "iphlpsvc -StartupType Disabled", "set-service"),

     ("Disabling service ltdsvc - Link-Layer Topology Discovery Mapper.", "ltdsvc -StartupType Disabled", "set-service"),

     ("Disabling service diagnosticshub.standardcollector.service - Microsoft [R] Diagnostics Hub Standard Collector Service.", "diagnosticshub.standardcollector.service -StartupType Disabled", "set-service"),

     ("Disabling service wlidsvc - Microsoft Account Sign-in Assistant.", "wlidsvc -StartupType Disabled", "set-service"),

     ("Disabling service MSiSCSI - Microsoft iSCSI Initiator Service.", "MSiSCSI -StartupType Disabled", "set-service"),

     ("Disabling service smphost - Microsoft Storage Spaces SMP.", "smphost -StartupType Disabled", "set-service"),

     ("Disabling service NcbService - Network Connection Broker.", "NcbService -StartupType Disabled", "set-service"),

     ("Disabling service NcaSvc - Network Connectivity Assistant.", "NcaSvc -StartupType Disabled", "set-service"),

     ("Disabling service defragsvc - Optimize drives.", "defragsvc -StartupType Disabled", "set-service"),

     ("Disabling service wercplsupport - Problem Reports and Solutions Control Panel.", "wercplsupport -StartupType Disabled", "set-service"),

     ("Disabling service PcaSvc - Program Compatibility Assistant Service.", "PcaSvc -StartupType Disabled", "set-service"),

     ("Disabling service QWAVE - Quality Windows Audio Video Experience.", "QWAVE -StartupType Disabled", "set-service"),

     ("Disabling service RmSvc - Radio Management Service.", "RmSvc -StartupType Disabled", "set-service"),

     ("Disabling service RasMan - Remote Access Connection Manager.", "RasMan -StartupType Disabled", "set-service"),

     ("Disabling service SstpSvc - Secure Socket Tunneling Protocol Service.", "SstpSvc -StartupType Disabled", "set-service"),

     ("Disabling service SensorDataService - Sensor Data Service.", "SensorDataService -StartupType Disabled", "set-service"),

     ("Disabling service SensrSvc - Sensor Monitoring Service.", "SensrSvc -StartupType Disabled", "set-service"),

     ("Disabling service SensorService - Sensor Service.", "SensorService -StartupType Disabled", "set-service"),

     ("Disabling service SNMPTRAP - SNMP Trap.", "SNMPTRAP -StartupType Disabled", "set-service"),

     ("Disabling service sacsvr - Special Administration Console Helper.", "sacsvr -StartupType Disabled", "set-service"),

     ("Disabling service svsvc - Spot Verifier.", "svsvc -StartupType Disabled", "set-service"),

     ("Disabling service SSDPSRV - SSDP Discovery.", "SSDPSRV -StartupType Disabled", "set-service"),

     ("Disabling service TieringEngineService - Storage Tiers Management.", "TieringEngineService -StartupType Disabled", "set-service"),

     ("Disabling service SysMain - Superfetch.", "SysMain -StartupType Disabled", "set-service"),

     ("Disabling service TapiSrv - Telephony.", "TapiSrv -StartupType Disabled", "set-service"),

     ("Disabling service UALSVC - User Access Logging Service.", "UALSVC -StartupType Disabled", "set-service"),

     ("Disabling service WerSvc - Windows Error Reporting Service.", "WerSvc -StartupType Disabled", "set-service"),

     ("Disabling service wisvc - Windows Insider Service.", "wisvc -StartupType Disabled", "set-service"),

     ("Disabling service icssvc - Windows Mobile Hotspot Service.", "icssvc -StartupType Disabled", "set-service"),

     ("Disabling service wuauserv - Windows Update.", "wuauserv -StartupType Disabled", "set-service"),

     ("Disabling service dot3svc - Wired AutoConfig.", "dot3svc -StartupType Disabled", "set-service"),

     ("Disabling service XblAuthManager - Xbox Live Auth Manager.", "XblAuthManager -StartupType Disabled", "set-service"),

     ("Disabling service XblGameSave - Xbox Live Game Save.", "XblGameSave -StartupType Disabled", "set-service"),

     ("", "The following section contains commands that delete Scheduled Tasks. These optimisations are aimed at reducing system footprint and improving performance.", "sectioncomplete"),

	 ("Disabling Scheduled Task - Policy Template Management [Manual].", "-TaskName 'AD RMS Rights Policy Template Management (Manual)' -TaskPath '\Microsoft\Windows\Active Directory Rights Management Services Client'", "Disable-ScheduledTask"),

	 ("Disabling Scheduled Task - EDP Policy Manager.", "-TaskName 'EDP Policy Manager' -TaskPath '\Microsoft\Windows\AppID'", "Disable-ScheduledTask"),

     ("Disabling Scheduled Task - SmartScreenSpecific.", "-TaskName 'SmartScreenSpecific' -TaskPath '\Microsoft\Windows\AppID'", "Disable-ScheduledTask"),

     ("Disabling Scheduled Task - Microsoft Compatibility Appraiser.", "-TaskName 'Microsoft Compatibility Appraiser' -TaskPath '\Microsoft\Windows\Application Experience'", "Disable-ScheduledTask"),

     ("Disabling Scheduled Task - ProgramDataUpdater.", "-TaskName 'ProgramDataUpdater' -TaskPath '\Microsoft\Windows\Application Experience'", "Disable-ScheduledTask"),

     ("Disabling Scheduled Task - StartupAppTask.", "-TaskName 'StartupAppTask' -TaskPath '\Microsoft\Windows\Application Experience'", "Disable-ScheduledTask"),

     ("Disabling Scheduled Task - CleanupTemporaryState.", "-TaskName 'CleanupTemporaryState' -TaskPath '\Microsoft\Windows\ApplicationData'", "Disable-ScheduledTask"),

     ("Disabling Scheduled Task - DsSvcCleanup.", "-TaskName 'DsSvcCleanup' -TaskPath '\Microsoft\Windows\ApplicationData'", "Disable-ScheduledTask"),

     ("Disabling Scheduled Task - Proxy.", "-TaskName 'Proxy' -TaskPath '\Microsoft\Windows\Autochk'", "Disable-ScheduledTask"),

     ("Disabling Scheduled Task - UninstallDeviceTask.", "-TaskName 'UninstallDeviceTask' -TaskPath '\Microsoft\Windows\Bluetooth'", "Disable-ScheduledTask"),

     ("Disabling Scheduled Task - AikCertEnrollTask.", "-TaskName 'AikCertEnrollTask' -TaskPath '\Microsoft\Windows\CertificateServicesClient'", "Disable-ScheduledTask"),

     ("Disabling Scheduled Task - CryptoPolicyTask.", "-TaskName 'CryptoPolicyTask' -TaskPath '\Microsoft\Windows\CertificateServicesClient'", "Disable-ScheduledTask"),

     ("Disabling Scheduled Task - KeyPreGenTask.", "-TaskName 'KeyPreGenTask' -TaskPath '\Microsoft\Windows\CertificateServicesClient'", "Disable-ScheduledTask"),

     ("Disabling Scheduled Task - ProactiveScan.", "-TaskName 'ProactiveScan' -TaskPath '\Microsoft\Windows\Chkdsk'", "Disable-ScheduledTask"),

     ("Disabling Scheduled Task - CreateObjectTask.", "-TaskName 'CreateObjectTask' -TaskPath '\Microsoft\Windows\CloudExperienceHost'", "Disable-ScheduledTask"),

     ("Disabling Scheduled Task - Consolidator.", "-TaskName 'Consolidator' -TaskPath '\Microsoft\Windows\Customer Experience Improvement Program'", "Disable-ScheduledTask"),

     ("Disabling Scheduled Task - KernelCeipTask.", "-TaskName 'KernelCeipTask' -TaskPath '\Microsoft\Windows\Customer Experience Improvement Program'", "Disable-ScheduledTask"),

     ("Disabling Scheduled Task - UsbCeipr.", "-TaskName 'UsbCeip' -TaskPath '\Microsoft\Windows\Customer Experience Improvement Program'", "Disable-ScheduledTask"),

     ("Disabling Scheduled Task - Data Integrity Scan.", "-TaskName 'Data Integrity Scan' -TaskPath '\Microsoft\Windows\Data Integrity Scan'", "Disable-ScheduledTask"),

     ("Disabling Scheduled Task - Data Integrity Scan for Crash Recovery.", "-TaskName 'Data Integrity Scan for Crash Recovery' -TaskPath '\Microsoft\Windows\Data Integrity Scan'", "Disable-ScheduledTask"),

     ("Disabling Scheduled Task - ScheduledDefrag.", "-TaskName 'ScheduledDefrag' -TaskPath '\Microsoft\Windows\Defrag'", "Disable-ScheduledTask"),

     ("Disabling Scheduled Task - Device.", "-TaskName 'Device' -TaskPath '\Microsoft\Windows\Device Information'", "Disable-ScheduledTask"),

     ("Disabling Scheduled Task - Scheduled.", "-TaskName 'Scheduled' -TaskPath '\Microsoft\Windows\Diagnosis'", "Disable-ScheduledTask"),

     ("Disabling Scheduled Task - SilentCleanup.", "-TaskName 'SilentCleanup' -TaskPath '\Microsoft\Windows\DiskCleanup'", "Disable-ScheduledTask"),

     ("Disabling Scheduled Task - Microsoft-Windows-DiskDiagnosticDataCollector.", "-TaskName 'Microsoft-Windows-DiskDiagnosticDataCollector' -TaskPath '\Microsoft\Windows\DiskDiagnostic'", "Disable-ScheduledTask"),

     ("Disabling Scheduled Task - Notifications.", "-TaskName 'Notifications' -TaskPath '\Microsoft\Windows\Location'", "Disable-ScheduledTask"),

     ("Disabling Scheduled Task - WindowsActionDialog.", "-TaskName 'WindowsActionDialog' -TaskPath '\Microsoft\Windows\Location'", "Disable-ScheduledTask"),

     ("Disabling Scheduled Task - WinSAT.", "-TaskName 'WinSAT' -TaskPath '\Microsoft\Windows\Maintenance'", "Disable-ScheduledTask"),

     ("Disabling Scheduled Task - MapsToastTask.", "-TaskName 'MapsToastTask' -TaskPath '\Microsoft\Windows\Maps'", "Disable-ScheduledTask"),

     ("Disabling Scheduled Task - MNO Metadata Parser.", "-TaskName 'MNO Metadata Parser' -TaskPath '\Microsoft\Windows\Mobile Broadband Accounts'", "Disable-ScheduledTask"),

     ("Disabling Scheduled Task - LPRemove.", "-TaskName 'LPRemove' -TaskPath '\Microsoft\Windows\MUI'", "Disable-ScheduledTask"),

     ("Disabling Scheduled Task - GatherNetworkInfo.", "-TaskName 'GatherNetworkInfo' -TaskPath '\Microsoft\Windows\NetTrace'", "Disable-ScheduledTask"),

     ("Disabling Scheduled Task - Secure-Boot-Update.", "-TaskName 'Secure-Boot-Update' -TaskPath '\Microsoft\Windows\PI'", "Disable-ScheduledTask"),

     ("Disabling Scheduled Task - Sqm-Tasks.", "-TaskName 'Sqm-Tasks' -TaskPath '\Microsoft\Windows\PI'", "Disable-ScheduledTask"),

     ("Disabling Scheduled Task - AnalyzeSystem.", "-TaskName 'AnalyzeSystem' -TaskPath '\Microsoft\Windows\Power Efficiency Diagnostics'", "Disable-ScheduledTask"),

     ("Disabling Scheduled Task - MobilityManager.", "-TaskName 'MobilityManager' -TaskPath '\Microsoft\Windows\Ras'", "Disable-ScheduledTask"),

     ("Disabling Scheduled Task - VerifyWinRE.", "-TaskName 'VerifyWinRE' -TaskPath '\Microsoft\Windows\RecoveryEnvironment'", "Disable-ScheduledTask"),

     ("Disabling Scheduled Task - RegIdleBackup.", "-TaskName 'RegIdleBackup' -TaskPath '\Microsoft\Windows\Registry'", "Disable-ScheduledTask"),

     ("Disabling Scheduled Task - CleanupOldPerfLogs.", "-TaskName 'CleanupOldPerfLogs' -TaskPath '\Microsoft\Windows\Server Manager'", "Disable-ScheduledTask"),

     ("Disabling Scheduled Task - StartComponentCleanup.", "-TaskName 'StartComponentCleanup' -TaskPath '\Microsoft\Windows\Servicing'", "Disable-ScheduledTask"),

     ("Disabling Scheduled Task - IndexerAutomaticMaintenance.", "-TaskName 'IndexerAutomaticMaintenance' -TaskPath '\Microsoft\Windows\Shell'", "Disable-ScheduledTask"),

     ("Disabling Scheduled Task - Configuration.", "-TaskName 'Configuration' -TaskPath '\Microsoft\Windows\Software Inventory Logging'", "Disable-ScheduledTask"),

     ("Disabling Scheduled Task - SpaceAgentTask.", "-TaskName 'SpaceAgentTask' -TaskPath '\Microsoft\Windows\SpacePort'", "Disable-ScheduledTask"),

     ("Disabling Scheduled Task - SpaceManagerTask.", "-TaskName 'SpaceManagerTask' -TaskPath '\Microsoft\Windows\SpacePort'", "Disable-ScheduledTask"),

     ("Disabling Scheduled Task - SpeechModelDownloadTask.", "-TaskName 'SpeechModelDownloadTask' -TaskPath '\Microsoft\Windows\Speech'", "Disable-ScheduledTask"),

     ("Disabling Scheduled Task - Storage Tiers Management Initialization.", "-TaskName 'Storage Tiers Management Initialization' -TaskPath '\Microsoft\Windows\Storage Tiers Management'", "Disable-ScheduledTask"),

     ("Disabling Scheduled Task - Tpm-HASCertRetr.", "-TaskName 'Tpm-HASCertRetr' -TaskPath '\Microsoft\Windows\TPM'", "Disable-ScheduledTask"),

     ("Disabling Scheduled Task - Tpm-Maintenance.", "-TaskName 'Tpm-Maintenance' -TaskPath '\Microsoft\Windows\TPM'", "Disable-ScheduledTask"),

     ("Disabling Scheduled Task - Schedule Scan.", "-TaskName 'Schedule Scan' -TaskPath '\Microsoft\Windows\UpdateOrchestrator'", "Disable-ScheduledTask"),

     ("Disabling Scheduled Task - ResolutionHost.", "-TaskName 'ResolutionHost' -TaskPath '\Microsoft\Windows\WDI'", "Disable-ScheduledTask"),

     ("Disabling Scheduled Task - QueueReporting.", "-TaskName 'QueueReporting' -TaskPath '\Microsoft\Windows\Windows Error Reporting'", "Disable-ScheduledTask"),

     ("Disabling Scheduled Task - Automatic App Update.", "-TaskName 'Automatic App Update' -TaskPath '\Microsoft\Windows\WindowsUpdate'", "Disable-ScheduledTask"),

     ("Disabling Scheduled Task - Scheduled Start.", "-TaskName 'Scheduled Start' -TaskPath '\Microsoft\Windows\WindowsUpdate'", "Disable-ScheduledTask"),

     ("Disabling Scheduled Task - sih.", "-TaskName 'sih' -TaskPath '\Microsoft\Windows\WindowsUpdate'", "Disable-ScheduledTask"),

     ("Disabling Scheduled Task - sihboot.", "-TaskName 'sihboot' -TaskPath '\Microsoft\Windows\WindowsUpdate'", "Disable-ScheduledTask"),

     ("Disabling Scheduled Task - XblGameSaveTask.", "-TaskName 'XblGameSaveTask' -TaskPath '\Microsoft\XblGameSave'", "Disable-ScheduledTask"),

     ("Disabling Scheduled Task - XblGameSaveTaskLogon.", "-TaskName 'XblGameSaveTaskLogon' -TaskPath '\Microsoft\XblGameSave'", "Disable-ScheduledTask"),

     ("", "The following section contains a command that removes the Windows Defender feature. This action also removes Scheduled Tasks and services relating to Windows Defender. This optimisation is based on the assumption that another antivirus will be used to replace Windows Defender.", "sectioncomplete"),

	 ("Removing WindowsFeature Windows-Defender-Features", "Windows-Defender-Features", "Remove-WindowsFeature");



# Pause for 2 Seconds between Commands

$Pausefor2Secs = "Start-Sleep 2"



# Pause for 5 Seconds between Descriptions

$Pausefor5Secs = "Start-Sleep 5"



Foreach ($cmd in $cmdList) {



	# Print description of change

	CMDColour $cmd[0]



	#Identify type of change

	switch($cmd[2]) {

	

        "sectioncomplete"

            {

                Write-Host $cmd[1] -ForeGroundColor Green

                Invoke-Expression $Pausefor5Secs

            }		



        "delete" # The following "reg delete" section will run commands that remove Active Setup Registry entries. These optimisations are aimed at reducing logon times.

			{

				Write-Host "reg delete" $cmd[1]

				Invoke-Expression ("reg delete " + $cmd[1])



                Invoke-Expression $Pausefor2Secs

			}

			

		"add" # The following section contains commands that add various Registry entries to the system. These optimisations are aimed at improving system performance. Many of these optimisations are the same ones you get when running the PVS 7.11 Target Device Optimization Tool with the exception of HKCU optimizations. Optimizations made by importing HKCU registry entries should be created via Group Policy or Citrix WEM.

              # Optimisations that the Target Device Optimization Tool makes but are left out in this script:

              # - Disable Indexing Service - Redundant, replaced by Windows Search. Windows Search not installed by default on WS2016.

              # - Disable Windows SuperFetch service - This service is set to be disabled already further down this script.

              # - Disable Windows Search - Windows Search is not installed by default on WS2016.

			{

				Write-Host "reg add" $cmd[1]

				Invoke-Expression ("reg add " + $cmd[1])



                Invoke-Expression $Pausefor2Secs

			}

	

		"set-service" # The following "Set-Service" section will run commands that disable services. These optimisations are aimed at reducing system footprint and improving performance.

			{

				Write-Host "Set-Service" $cmd[1]

				Invoke-Expression ("Set-Service " + $cmd[1])



                Invoke-Expression $Pausefor2Secs

			}

	

		"Disable-ScheduledTask" #The following "Disable ScheduledTask" section will run commands that Scheduled Tasks. These optimisations are aimed at reducing system footprint and improving performance.

			{

				Write-Host "Disable-ScheduledTask" $cmd[1]

				Invoke-Expression ("Disable-ScheduledTask " + $cmd[1])



                Invoke-Expression $Pausefor2Secs

			}

			

		"Remove-WindowsFeature" # The following "Remote-WindowsFeature" section will run a command that removes the Windows Defender feature. This action also removes Scheduled Tasks and services relating to Windows Defender. This optimisation is based on the assumption that another antivirus will be used to replace Windows Defender.

			                    # Windows Scheduled Tasks removed after removal of Windows Defender:

                                # - Windows Defender Cache Maintenance

                                # - Windows Defender Cleanup

                                # - Windows Defender Scheduled Scan

                                # - Windows Defender Verification

                                # Windows services removed after removal of Windows Defender:

                                # - Windows Defender Network Inspection Service

                                # - Windws Defender Service

            {

				Write-Host "Remove-WindowsFeature" $cmd[1]

				Invoke-Expression ("Remove-WindowsFeature " + $cmd[1])

			}

			

	} # End of Switch

} # End of Foreach



	

Write-Host "All optimisations complete. Please restart your system." -ForegroundColor Green