Created
June 15, 2018 21:26
-
-
Save jsEveryDay/548e3cfd51d02077df90428caa9bf218 to your computer and use it in GitHub Desktop.
Win 10 edits
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| rem Or even better, create a system image! | |
| rem http://www.aomeitech.com/ab/standard.html | |
| rem https://www.macrium.com/reflectfree | |
| rem Things, that will get broken, that will get noticed ASAP or after restart, like Start or WiFi for sure! | |
| rem Disabling network services (Dhcp/NlaSvc/netprofm/nsi/RmSvc) will prevent you from managing network settings! | |
| rem Windows Defender Firewall is set to block all inbound/outbound except allowed apps, which have to be added first! | |
| rem Terminating "ShellExperienceHost.exe" will restart it and Start's functionality | |
| rem You can create a task, which runs after logon with one minute delay. | |
| rem taskkill /f /im ShellExperienceHost.exe | |
| rem "ValidateAdminCodeSignatures" will prevent exe without a digital signature to run as admin: "A referral was returned from the server." | |
| rem reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "ValidateAdminCodeSignatures" /t REG_DWORD /d "0" /f | |
| rem ________________________________________________________________________________________ | |
| rem Basic informations | |
| rem Software recommendations | |
| rem Remove various folders, startup entries and policies | |
| rem Restore essential startup entries | |
| rem Software Setup | |
| rem Windows Setup plus Manual Config | |
| rem Windows Drivers | |
| rem Windows Defender Security Center | |
| rem Windows Logging | |
| rem Windows Error Reporting | |
| rem Windows Explorer | |
| rem Windows OneDrive | |
| rem Windows Optimizations | |
| rem Windows Policies | |
| rem Windows Scheduled Tasks | |
| rem Windows Services | |
| rem Windows Settings | |
| rem Windows Shell | |
| rem Windows Store | |
| rem Windows Waypoint | |
| rem ================================= Basic informations =================================== | |
| rem SeDebugPrivilege/SeTcbPrivilege - https://youtu.be/hZKLEw-Our4 - Self-elevation to System (even on SUA) used by ransomware (NotPetya/WannaCry) | |
| rem https://docs.microsoft.com/en-us/windows/device-security/security-policy-settings/act-as-part-of-the-operating-system | |
| rem https://docs.microsoft.com/en-us/windows/deployment/update/waas-overview | |
| rem https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-configuration-service-provider | |
| rem https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-security-baselines | |
| rem Adblock Detection - http://www.detectadblock.com / https://blockads.fivefilters.org | |
| rem Browser Leaks - https://browserleaks.com / CanvasFingerprint / WebRTC | |
| rem Browser Tracking Test - https://panopticlick.eff.org | |
| rem Privacy Info - https://github.com/CHEF-KOCH/Online-Privacy-Test-Resource-List/tree/f4f9176ae8ea44c0f77ece204ee4435e892c0a29 | |
| rem Privacy Tools - https://www.ghacks.net/2015/08/14/comparison-of-windows-10-privacy-tools | |
| rem Privacy Tools - https://www.privacytools.io | |
| rem Private Uncensored Search - https://duckduckgo.com (Startpage is censored now) | |
| rem SSL/TLS Test - https://www.ssllabs.com/ssltest | |
| rem AV Comparison | |
| rem http://www.av-comparatives.org/av-vendors | |
| rem https://fatsecurity.com/tools/test-results-calculator | |
| rem https://www.av-comparatives.org/comparatives-reviews | |
| rem https://www.av-test.org/en/antivirus/home-windows/windows-10 | |
| rem https://www.mrg-effitas.com/recent-projects/our-projects | |
| rem AVs/SSL Filtering - https://blog.adguard.com/en/everything-about-https-filtering | |
| rem http://news.softpedia.com/news/microsoft-releases-silent-fix-for-windows-defender-remote-code-execution-flaw-516095.shtml | |
| rem http://cybellum.com/doubleagent-taking-full-control-antivirus | |
| rem http://blog.emsisoft.com/2015/01/17/has-the-antivirus-industry-gone-mad | |
| rem http://www.makeuseof.com/tag/antivirus-tracking-youd-surprised-sends | |
| rem https://www.av-test.org/en/news/news-single-view/data-protection-or-virus-protection | |
| rem DNS Benchmark / Namebench - https://code.google.com/archive/p/namebench/downloads | |
| rem DNS Hijack / https://sockpuppet.org/blog/2015/01/15/against-dnssec / https://recdnsfp.github.io | |
| rem DNS Encryption (setup DNS server as 127.0.0.1) - https://simplednscrypt.org | |
| rem DNS Fix / DNS-Lock - http://www.sordum.org/9432/dns-lock-v1-3 | |
| rem DNS List - https://wiki.ipfire.org/dns/public-servers | |
| rem DNS Privacy/Tests - http://dnscrypt.me | |
| rem Family Filtering (adult/proxy/search) | |
| rem CleanBrowsing - https://cleanbrowsing.org/ip-address | |
| rem K9 Web Protection - http://www1.k9webprotection.com/getk9/download-software | |
| rem NortonDNS - https://dns.norton.com | |
| rem OpenDNS - https://www.opendns.com/setupguide/#familyshield | |
| rem UltraDNS - https://www.security.neustar/dns-services/recursive-dns | |
| rem VPN Comparison | |
| rem https://arstechnica.com/tech-policy/2017/03/senate-votes-to-let-isps-sell-your-web-browsing-history-to-advertisers | |
| rem https://thatoneprivacysite.net/simple-vpn-comparison-chart | |
| rem https://vpntesting.info | |
| rem Windows Repair Toolbox - https://windows-repair-toolbox.com | |
| rem Windows 10 Drivers - http://www.catalog.update.microsoft.com | |
| rem Windows 10 Forums - https://www.tenforums.com/general-support/58375-newly-added-tutorials.html | |
| rem Windows 10 Policies - https://getadmx.com/?Category=Windows_10_2016 | |
| rem Windows 10 Support - https://technet.microsoft.com/en-us/windows/support-windows-10.aspx | |
| rem Windows ISO | |
| rem http://genuineisoverifier.weebly.com | |
| rem https://tb.rg-adguard.net | |
| rem http://mdluup.ct8.pl | |
| rem https://www.heidoc.net/joomla/technology-science/microsoft/67-microsoft-windows-and-office-iso-download-tool | |
| rem Check ISO Windows versions and build version | |
| rem dism /Get-WimInfo /WimFile:F:\sources\install.wim | |
| rem dism /Get-WimInfo /WimFile:F:\sources\install.wim /index:1 | |
| rem dism /Get-WimInfo /WimFile:F:\sources\install.esd /index:1 | |
| rem https://www.tenforums.com/tutorials/3109-shell-commands-list-windows-10-a.html | |
| rem https://www.tenforums.com/tutorials/3123-clsid-key-guid-shortcuts-list-windows-10-a.html | |
| rem https://www.tenforums.com/tutorials/3234-environment-variables-windows-10-a.html | |
| rem https://www.tenforums.com/tutorials/77458-rundll32-commands-list-windows-10-a.html | |
| rem https://www.tenforums.com/tutorials/78108-app-commands-list-windows-10-a.html | |
| rem =============================== Software recommendations =============================== | |
| rem Anti-malware software | |
| rem Bitdefender Antivirus Free Edition (RO) - https://www.bitdefender.com/solutions/free.html - uncheck Send Anonomous usage reports | |
| rem Bitdefender Antivirus Free Edition - Once you login to your account - Settings - Account Info - uncheck Display notifications with special offers | |
| rem FortiClient (US) - https://forticlient.com/downloads / Antivirus - Settings - Enable exploit prevention | |
| rem FortiClient - Malware protection - Settings - Antivirus - Enable All / AntiExploit - Enable | |
| rem FortiClient Silent - Malware protection - Settings - Antivirus - Scheduled Type - Select Quick Scan - Disable Scheduled Scan | |
| rem FortiClient Silent - Settings - System - Automatically download and install updates / Antivirus - Disable - Alert when viruses are detected | |
| rem FortiClient Performance - Settings - Logging - Disable all / Antivirus - Disable FortiGuard Analytics / Advanced - Disable proxy (Disables Web Filtering) | |
| rem Anti-malware software (Cloud only) | |
| rem Panda (ES) (it has to be updated manually to the latest version) - https://www.pandasecurity.com/usa/homeusers/solutions/free-antivirus - Uncheck Install Panda Safe Web | |
| rem Panda Performance - Settings - General - Disable Panda news / Antivirus - Block files for 10 seconds/Disable show warning/Process Monitor - Disable both | |
| rem Anti-exe software (Application Whitelisting) | |
| rem SecureAPlus Freemium (SG) - https://www.secureaplus.com/download - https://www.secureaplus.com/download/free-extension | |
| rem VoodooShield (US) - https://voodooshield.com | |
| rem Browser Extensions useful against | |
| rem Adult Content (Chrome/Firefox) - http://www.cloudacl.com/antiporn | |
| rem Cookie Warnings - https://www.i-dont-care-about-cookies.eu | |
| rem Coinhive, Malware and Popups (Chrome/Firefox/Opera) - https://poperblocker.com | |
| rem Malware, Phishing, Adult (Chrome/Firefox/Opera) - http://www1.k9webprotection.com/get-k9-web-protection-free | |
| rem Phishing (Chrome/Firefox/Opera) - https://toolbar.netcraft.com | |
| rem Punycode Domains (Chrome/Firefox/Opera) - https://github.com/AykutCevik/IDN-Safe | |
| rem Tracking (Chrome/Firefox/Opera) - https://www.eff.org/privacybadger | |
| rem (Install Chrome Extensions in Opera) - https://addons.opera.com/en/extensions/details/install-chrome-extensions | |
| rem Cleanup software | |
| rem Driver Easy - https://www.drivereasy.com | |
| rem Driver Store Explorer - https://github.com/lostindark/DriverStoreExplorer | |
| rem Geek Uninstaller - https://geekuninstaller.com | |
| rem Wise Disk Cleaner - http://www.wisecleaner.com/wise-disk-cleaner.html | |
| rem Wise Registry Cleaner - http://www.wisecleaner.com/wise-registry-cleaner.html | |
| rem Firewall software | |
| rem FortKnox Firewall (SK) - http://fortknox-firewall.com | |
| rem Free Firewall (DE) - http://www.evorim.com/en/free-firewall | |
| rem Zone Alarm Firewall (IL) - http://www.zonealarm.com/software/free-firewall | |
| rem Firewall software using Windows Firewall | |
| rem Glasswire (US) - https://www.glasswire.com | |
| rem Windows 10 Firewall Control (US) - http://www.sphinx-soft.com/Vista/order.html | |
| rem Sandbox software | |
| rem 360 Total Security Essential (CN) - https://www.360totalsecurity.com/en/features/360-total-security-essential | |
| rem Shade Sandbox (US) - http://www.shadesandbox.com | |
| rem Sandboxie (US) - https://www.sandboxie.com | |
| rem Security cleanup software (portable ondemand scanners) | |
| rem SmartService - https://www.bleepingcomputer.com/virus-removal/remove-the-requested-resource-is-in-use-error | |
| rem Dr.Web CureIt (RU) - https://free.drweb.com/download+cureit+free | |
| rem Emsisoft Emergency Kit (NZ) - https://www.emsisoft.com/en/software/eek | |
| rem Kaspersky Virus Removal Tool (RU) - https://www.kaspersky.com/downloads/thank-you/free-virus-removal-tool | |
| rem RKill (BleepingComputer) - https://www.bleepingcomputer.com/download/rkill/ | |
| rem Software | |
| rem Application Updates / Patch My PC - https://patchmypc.net | |
| rem Bandwidth Meter / NetTraffic - https://www.venea.net/web/downloads | |
| rem Bootable USB / Universal USB Installer - https://www.pendrivelinux.com/universal-usb-installer-easy-as-1-2-3 | |
| rem Bootloader / EasyBCD - http://www.softpedia.com/get/System/OS-Enhancements/EasyBCD.shtml | |
| rem Browser / Yandex.Browser - https://browser.yandex.com/security | |
| rem Calc / Old Calculator - http://winaero.com/download.php?view.1795 | |
| rem Compact/Compress Files / Compact GUI - https://github.com/ImminentFate/CompactGUI | |
| rem Computer Management / NirLauncher - http://launcher.nirsoft.net | |
| rem CPU Info / CPU-Z - http://www.cpuid.com/softwares/cpu-z.html | |
| rem CPU Test / Prime95 - https://www.mersenne.org/download | |
| rem Data Recovery / DMDE Free Edition - http://dmde.com/download.html - http://www.techradar.com/how-to/computing/how-to-recover-lost-or-deleted-files-1307921/2 | |
| rem Directx 9.0 Runtimes / DirectX Redistributable June 2010 - http://www.softpedia.com/get/System/OS-Enhancements/DirectX-9.0c-Redistributable.shtml | |
| rem Disc to MKV / MakeMKV Beta - http://www.makemkv.com/download / Key - https://www.makemkv.com/forum2/viewtopic.php?f=5&t=1053 | |
| rem Disk Info / CrystalDiskInfo - https://crystalmark.info/download/index-e.html | |
| rem Disk Management / MiniTool Partition Wizard Free Edition - https://www.partitionwizard.com/free-partition-manager.html | |
| rem Disk Scan / HDDScan - http://hddscan.com | |
| rem Disk Space Usage / WizTree - https://antibody-software.com/web/software/software/wiztree-finds-the-files-and-folders-using-the-most-disk-space-on-your-hard-drive | |
| rem Disk Speed Test / CCSIO Benchmark - https://ccsiobench.com | |
| rem Disk Surface Test / Macrorit Disk Scanner - http://macrorit.com/disk-surface-test/disk-surface-test.html | |
| rem Driver Updates / Driver Easy - https://www.drivereasy.com | |
| rem eMail Client / POP Peeper - http://www.esumsoft.com/products/pop-peeper | |
| rem File Archiver / 7-zip - http://www.7-zip.org | |
| rem GPU Info / GPU-Z - https://www.techpowerup.com/gpuz | |
| rem GPU Test / Furmark - http://www.ozone3d.net/benchmarks/fur | |
| rem Hardware Information / HWiNFO - https://www.hwinfo.com/download.php | |
| rem Hardware Monitor / HWMonitor - http://www.cpuid.com/softwares/hwmonitor.html | |
| rem Image Viewer / XnView - http://www.xnview.com/en/xnview/#downloads | |
| rem Media Player / K-Lite Codec Pack Standard - http://www.codecguide.com/features_standard.htm | |
| rem Network Optimization / TCP Optimizer - http://www.speedguide.net/downloads.php | |
| rem Network Settings / NetSetMan - http://www.netsetman.com/en/freeware | |
| rem Office Suite / WPS Office - https://www.wps.com/office-free | |
| rem Online Radio / RadioSure - http://www.radiosure.com/downloadz/downloadz-select | |
| rem Paint / Classic Paint - https://winaero.com/blog/download-classic-paint-windows-10 | |
| rem Partition Manager / MiniTool Partition Wizard - https://www.partitionwizard.com/free-partition-manager.html | |
| rem Password Manager (Offline) / KeePass Professional Edition - http://keepass.info/download.html | |
| rem PDF Viewer / PDF xChange Editor - https://www.tracker-software.com/product/pdf-xchange-editor | |
| rem Performance / LatencyMon - http://www.resplendence.com/latencymon | |
| rem Performance / Process Lasso - https://bitsum.com | |
| rem Permissions / Reset permissions/Take Ownership - http://lallouslab.net/2013/08/26/resetting-ntfs-files-permission-in-windows-graphical-utility/ | |
| rem Process Monitor / Process Monitor - https://technet.microsoft.com/en-us/sysinternals/processmonitor.aspx | |
| rem RAM Free / Mem Reduct - https://www.henrypp.org/product/memreduct | |
| rem RAM Disk / AMD Radeon RAMDisk (4GB) - http://www.radeonramdisk.com/software_downloads.php | |
| rem RAM Disk / ImDisk Toolkit (Unlimited/Unsigned) - https://sourceforge.net/projects/imdisk-toolkit | |
| rem RAM Test / Memtest (run one process per each 2GB) - http://hcidesign.com/memtest | |
| rem Remote Support / TeamViewer - https://www.teamviewer.com/en/download/windows | |
| rem Remove Locked File/Folder / LockHunter - http://lockhunter.com | |
| rem Search / Everything - https://www.voidtools.com | |
| rem SSD Settings / Tweak-SSD - http://www.totalidea.com/products/tweak-ssd/index.php | |
| rem Startup Manager / Autoruns - https://technet.microsoft.com/en-us/sysinternals/bb963902.aspx | |
| rem System Imaging/Restore / AOMEI Backupper Standard - http://www.aomeitech.com/ab/standard.html | |
| rem System Restore / RollBack Home Edition - http://horizondatasys.com/rollback-rx-time-machine/rollback-rx-home/ | |
| rem Task Manager / Process Hacker - https://wj32.org/processhacker/nightly.php | |
| rem Undervolting / ThrottleStop - https://www.techpowerup.com/download/techpowerup-throttlestop | |
| rem Video Thumbnail Previews / K-Lite Basic Codec Pack - http://www.codecguide.com/download_kl.htm | |
| rem Visual C++ / AIO Repack - https://forums.mydigitallife.net/threads/repack-visual-c-redistributable-runtimes.76588 | |
| rem Visual C++ / Latest Visual C++ Downloads - https://support.microsoft.com/en-au/help/2977003/the-latest-supported-visual-c-downloads | |
| rem Wallpaper - Live / Wallpaper Engine - http://store.steampowered.com/app/431960 | |
| rem Windows Explorer Tabs / Clover - http://en.ejie.me | |
| rem Windows Tweaks / Ultimate Windows Tweaker - http://www.thewindowsclub.com/ultimate-windows-tweaker-4-windows-10 | |
| rem Windows Tweaks / Winaero Tweaker - http://winaero.com/comment.php?comment.news.1836 | |
| rem Windows Updates Email Alerts / Microsoft Technical Security Notifications - https://technet.microsoft.com/en-us/security/dd252948 | |
| rem ============= Remove various files, folders, startup entries and policies ============== | |
| rem Take ownership of Desktop | |
| takeown /s %computername% /u %username% /f "%SystemDrive%\Users\Public\Desktop" /r /d y | |
| icacls "%SystemDrive%\Users\Public\Desktop" /grant:r %username%:(OI)(CI)F /t /l /q /c | |
| takeown /s %computername% /u %username% /f "%USERPROFILE%\Desktop" /r /d y | |
| icacls "%USERPROFILE%\Desktop" /grant:r %username%:(OI)(CI)F /t /l /q /c | |
| rem Remove user account | |
| net user defaultuser0 /delete | |
| rem Prevent files from being run/altered/recreated | |
| rem takeown /f "%WINDIR%\System32\sethc.exe" /a | |
| rem icacls "%WINDIR%\System32\sethc.exe" /remove "Administrators" "Authenticated Users" "Users" "System" | |
| rem takeown /f "%WINDIR%\SysWOW64\sethc.exe" /a | |
| rem icacls "%WINDIR%\SysWOW64\sethc.exe" /remove "Administrators" "Authenticated Users" "Users" "System" | |
| rem takeown /f "%WINDIR%\System32\utilman.exe" /a | |
| rem icacls "%WINDIR%\System32\utilman.exe" /remove "Administrators" "Authenticated Users" "Users" "System" | |
| rem takeown /f "%WINDIR%\SysWOW64\utilman.exe" /a | |
| rem icacls "%WINDIR%\SysWOW64\utilman.exe" /remove "Administrators" "Authenticated Users" "Users" "System" | |
| rem Remove random files/folders | |
| del "%AppData%\Microsoft\Windows\Recent\*" /s /q | |
| del "%WINDIR%\System32\sru\*" /s /q | |
| rd "%SystemDrive%\AMD" /s /q | |
| rd "%SystemDrive%\PerfLogs" /s /q | |
| rd "%SystemDrive%\Recovery" /s /q | |
| rd "%ProgramData%\Microsoft\Diagnosis" /s /q | |
| rd "%ProgramData%\Microsoft\Search" /s /q | |
| rd "%ProgramData%\Microsoft\Windows Security Health" /s /q | |
| rd "%AppData%\ArtifexMundi\SparkPromo" /s /q | |
| rd "%LocalAppData%\Microsoft\Windows\INetCache" /s /q | |
| rd "%LocalAppData%\Microsoft\Windows\WebCache" /s /q | |
| rd "%LocalAppData%\Packages\Microsoft.Windows.Cortana_cw5n1h2txyewy\AppData\Indexed DB" /s /q | |
| rd "C:\Users\Mikai\3D Objects" /s /q | |
| rd "C:\Users\Mikai\Favorites" /s /q | |
| rd "C:\Users\Mikai\Links" /s /q | |
| rd "C:\Users\Mikai\Music" /s /q | |
| rd "C:\Users\Mikai\Searches" /s /q | |
| rem Remove/Rebuild Font Cache | |
| icacls "%WinDir%\ServiceProfiles\LocalService" /grant:r Administrators:(OI)(CI)F /t /l /q /c | |
| del "%WinDir%\ServiceProfiles\LocalService\AppData\Local\FontCache\*FontCache*" /a /f /q | |
| del "%WinDir%\System32\FNTCACHE.DAT" /a /f /q | |
| rem Remove Windows Powershell (to restore run "sfc /scannow") | |
| rem http://www.malwaretech.com/2017/02/lets-unpack-dridex-loader.html | |
| rem https://blog.netspi.com/15-ways-to-bypass-the-powershell-execution-policy | |
| rem https://www.mrg-effitas.com/current-state-of-malicious-powershell-script-blocking | |
| rem https://enigma0x3.net/2016/08/15/fileless-uac-bypass-using-eventvwr-exe-and-registry-hijacking | |
| takeown /f "%ProgramFiles%\WindowsPowerShell" /a /r /d y | |
| icacls "%ProgramFiles%\WindowsPowerShell" /inheritance:r /grant:r Administrators:(OI)(CI)F /t /l /q /c | |
| rd "%ProgramFiles%\WindowsPowerShell" /s /q | |
| takeown /f "%ProgramFiles(x86)%\WindowsPowerShell" /a /r /d y | |
| icacls "%ProgramFiles(x86)%\WindowsPowerShell" /inheritance:r /grant:r Administrators:(OI)(CI)F /t /l /q /c | |
| rd "%ProgramFiles(x86)%\WindowsPowerShell" /s /q | |
| takeown /f "%WinDir%\System32\WindowsPowerShell" /a /r /d y | |
| icacls "%WinDir%\System32\WindowsPowerShell" /inheritance:r /grant:r Administrators:(OI)(CI)F /t /l /q /c | |
| rd "%WinDir%\System32\WindowsPowerShell" /s /q | |
| takeown /f "%WinDir%\SysWOW64\WindowsPowerShell" /a /r /d y | |
| icacls "%WinDir%\SysWOW64\WindowsPowerShell" /inheritance:r /grant:r Administrators:(OI)(CI)F /t /l /q /c | |
| rd "%WinDir%\SysWOW64\WindowsPowerShell" /s /q | |
| rem Remove Startup Folders | |
| takeown /f "%ProgramData%\Microsoft\Windows\Start Menu\Programs\Startup" /a /r /d y | |
| icacls "%ProgramData%\Microsoft\Windows\Start Menu\Programs\Startup" /inheritance:r /grant:r Administrators:(OI)(CI)F /t /l /q /c | |
| del "%ProgramData%\Microsoft\Windows\Start Menu\Programs\Startup\*" /s /f /q | |
| del "%AppData%\Microsoft\Windows\Start Menu\Programs\Startup\*" /s /f /q | |
| rem Remove random reg keys (Startup/Privacy/Policies/Malware related) | |
| reg delete "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU" /f | |
| reg delete "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags" /f | |
| reg delete "HKCU\Software\Classes\Wow6432Node\Local Settings\Software\Microsoft\Windows\Shell\Bags" /f | |
| reg delete "HKCU\Software\Classes\Wow6432Node\Local Settings\Software\Microsoft\Windows\Shell\BagMRU" /f | |
| reg delete "HKCU\Software\Microsoft\Command Processor" /v "AutoRun" /f | |
| reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\AdvertisingInfo" /f | |
| reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\RunMRU" /f | |
| reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved" /f | |
| reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\TypedPaths" /f | |
| reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies" /f | |
| reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /f | |
| reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce" /f | |
| reg delete "HKCU\Software\Microsoft\Windows\Shell\Bags" /f | |
| reg delete "HKCU\Software\Microsoft\Windows\Shell\BagMRU" /f | |
| reg delete "HKCU\Software\Microsoft\Windows\ShellNoRoam\Bags" /f | |
| reg delete "HKCU\Software\Microsoft\Windows\ShellNoRoam\BagMRU" /f | |
| reg delete "HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows" /v "Load" /f | |
| reg delete "HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" /v "Shell" /f | |
| reg delete "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell" /f | |
| reg delete "HKCU\Software\Policies" /f | |
| reg delete "HKLM\Software\Microsoft\Command Processor" /v "AutoRun" /f | |
| reg delete "HKLM\Software\Microsoft\Policies" /f | |
| reg delete "HKLM\Software\Microsoft\Tracing" /f | |
| reg delete "HKLM\Software\Microsoft\Windows\CurrentVersion\AppModelUnlock" /f | |
| reg delete "HKLM\Software\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-Lxss-base-Package~31bf3856ad364e35~amd64~~10.0.17134.1" /f | |
| reg delete "HKLM\Software\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages\Microsoft-Windows-Lxss-base-Package~31bf3856ad364e35~amd64~en-US~10.0.17134.1" /f | |
| reg delete "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects" /f | |
| reg delete "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks" /f | |
| reg delete "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved" /f | |
| reg delete "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies" /f | |
| reg delete "HKLM\Software\Microsoft\Windows\CurrentVersion\Run" /f | |
| reg delete "HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce" /f | |
| reg delete "HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnceEx" /f | |
| reg delete "HKLM\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad" /f | |
| reg delete "HKLM\Software\Microsoft\Windows\CurrentVersion\WindowsStore\WindowsUpdate" /f | |
| reg delete "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options" /f | |
| reg delete "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Terminal Server" /f | |
| reg delete "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows" /v "AppInit_DLLs" /f | |
| reg delete "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" /v "Shell" /f | |
| reg delete "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" /v "Userinit" /f | |
| reg delete "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" /v "VMApplet" /f | |
| reg delete "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\AlternateShells" /f | |
| reg delete "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell" /f | |
| reg delete "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Taskman" /f | |
| reg delete "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit" /f | |
| reg delete "HKLM\Software\Policies" /f | |
| reg delete "HKLM\Software\WOW6432Node\Microsoft\Policies" /f | |
| reg delete "HKLM\Software\WOW6432Node\Microsoft\Tracing" /f | |
| reg delete "HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects" /f | |
| reg delete "HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run" /f | |
| reg delete "HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce" /f | |
| reg delete "HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnceEx" /f | |
| reg delete "HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Policies" /f | |
| reg delete "HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\WindowsStore\WindowsUpdate" /f | |
| reg delete "HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options" /f | |
| reg delete "HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Windows" /v "AppInit_DLLs" /f | |
| reg delete "HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon" /v "Shell" /f | |
| reg delete "HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon" /v "Userinit" /f | |
| reg delete "HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon" /v "VMApplet" /f | |
| reg delete "HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\AlternateShells" /f | |
| reg delete "HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell" /f | |
| reg delete "HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\Taskman" /f | |
| reg delete "HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit" /f | |
| reg delete "HKLM\Software\WOW6432Node\Policies" /f | |
| reg delete "HKLM\System\CurrentControlSet\Control\Keyboard Layout" /v "Scancode Map" /f | |
| reg delete "HKLM\System\CurrentControlSet\Control\SafeBoot" /v "AlternateShell" /f | |
| reg delete "HKLM\System\CurrentControlSet\Control\Session Manager" /v "BootExecute" /f | |
| reg delete "HKLM\System\CurrentControlSet\Control\Session Manager" /v "Execute" /f | |
| reg delete "HKLM\System\CurrentControlSet\Control\Session Manager" /v "SETUPEXECUTE" /f | |
| reg delete "HKLM\System\CurrentControlSet\Control\Terminal Server\Wds\rdpwd" /v "StartupPrograms" /f | |
| rem =========================== Restore essential startup entries ========================== | |
| rem Run bcdedit command to check for the current status / Yes = True / No = False | |
| rem https://msdn.microsoft.com/en-us/library/windows/hardware/ff542202(v=vs.85).aspx | |
| bcdedit /deletevalue {current} safeboot | |
| bcdedit /deletevalue {current} safebootalternateshell | |
| bcdedit /deletevalue {current} removememory | |
| bcdedit /deletevalue {current} truncatememory | |
| bcdedit /deletevalue {default} safeboot | |
| bcdedit /deletevalue {default} safebootalternateshell | |
| bcdedit /deletevalue {default} removememory | |
| bcdedit /deletevalue {default} truncatememory | |
| bcdedit /set {bootmgr} displaybootmenu no | |
| bcdedit /set {current} advancedoptions false | |
| bcdedit /set {current} bootems no | |
| bcdedit /set {current} bootmenupolicy legacy | |
| bcdedit /set {current} bootstatuspolicy IgnoreAllFailures | |
| bcdedit /set {current} recoveryenabled no | |
| bcdedit /set {default} advancedoptions false | |
| bcdedit /set {default} bootems no | |
| bcdedit /set {default} bootmenupolicy legacy | |
| bcdedit /set {default} bootstatuspolicy IgnoreAllFailures | |
| bcdedit /set {default} recoveryenabled no | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "7 Taskbar Tweaker" /t REG_SZ /d "\"%AppData%\7+ Taskbar Tweaker\7+ Taskbar Tweaker.exe\" -hidewnd" /f | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "POP Peeper" /t REG_SZ /d "\"%ProgramFiles% (x86)\POP Peeper\poppeeper.exe\" -min" /f | |
| reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Run" /v "EvtMgr6" /t REG_SZ /d "%ProgramFiles%\Logitech\SetPointP\SetPoint.exe" /f | |
| reg add "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" /v "Shell" /t REG_SZ /d "explorer.exe" /f | |
| reg add "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" /v "Userinit" /t REG_SZ /d "C:\Windows\System32\userinit.exe," /f | |
| reg add "HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon" /v "Shell" /t REG_SZ /d "explorer.exe" /f | |
| reg add "HKLM\System\CurrentControlSet\Control\Session Manager" /v "BootExecute" /t REG_MULTI_SZ /d "autocheck autochk *" /f | |
| reg add "HKLM\System\CurrentControlSet\Control\Session Manager" /v "SETUPEXECUTE" /t REG_MULTI_SZ /d "" /f | |
| rem Run exe as service | |
| rem sc.exe create POC binPath= "D:\Software\POC.exe" | |
| rem =================================== Software Setup ===================================== | |
| rem 7-zip | |
| reg add "HKCU\Software\7-Zip\Compression" /v "Archiver" /t "REG_SZ" /d "7z" /f | |
| reg add "HKCU\Software\7-Zip\Compression" /v "Level" /t "REG_DWORD" /d "9" /f | |
| reg add "HKCU\Software\7-Zip\Compression\Options\7z" /v "Level" /t "REG_DWORD" /d "9" /f | |
| reg add "HKCU\Software\7-Zip\Options" /v "CascadedMenu" /t "REG_DWORD" /d "1" /f | |
| reg add "HKCU\Software\7-Zip\Options" /v "ContextMenu" /t "REG_DWORD" /d "262" /f | |
| rem 7+ Taskbar Tweaker | |
| reg add "HKCU\Software\7 Taskbar Tweaker" /v "hidetray" /t "REG_DWORD" /d "1" /f | |
| reg add "HKCU\Software\7 Taskbar Tweaker" /v "updcheck" /t "REG_DWORD" /d "0" /f | |
| reg add "HKCU\Software\7 Taskbar Tweaker" /v "updcheckauto" /t "REG_DWORD" /d "0" /f | |
| reg add "HKCU\Software\7 Taskbar Tweaker\OptionsEx" /v "w10_large_icons" /t "REG_DWORD" /d "1" /f | |
| rem Logitech Setpoint | |
| taskkill /im LogiAppBroker.exe /f | |
| taskkill /im LogitechUpdate.exe /f | |
| taskkill /im LULnchr.exe /f | |
| del "%ProgramFiles%\Logitech\SetPointP\LogiAppBroker.exe" /s /f /q | |
| del "%ProgramFiles%\Logitech\SetPointP\msvcp110.dll" /s /f /q | |
| rd "%ProgramFiles%\Common Files\LogiShrd\sp6\LU1" /s /q | |
| rd "%ProgramFiles%\Common Files\LogiShrd\Unifying\LU" /s /q | |
| rem MPC-HC | |
| reg add "HKCU\Software\MPC-HC\MPC-HC\Settings" /v "EnableSubtitles" /t "REG_DWORD" /d "0" /f | |
| reg add "HKCU\Software\MPC-HC\MPC-HC\Settings" /v "HideCaptionMenu" /t "REG_DWORD" /d "3" /f | |
| reg add "HKCU\Software\MPC-HC\MPC-HC\Settings" /v "HideNavigation" /t "REG_DWORD" /d "1" /f | |
| reg add "HKCU\Software\MPC-HC\MPC-HC\Settings" /v "KeepAspectRatio" /t "REG_DWORD" /d "1" /f | |
| reg add "HKCU\Software\MPC-HC\MPC-HC\Settings" /v "KeepHistory" /t "REG_DWORD" /d "0" /f | |
| reg add "HKCU\Software\MPC-HC\MPC-HC\Settings" /v "LimitWindowProportions" /t "REG_DWORD" /d "1" /f | |
| reg add "HKCU\Software\MPC-HC\MPC-HC\Settings" /v "OnTop" /t "REG_DWORD" /d "1" /f | |
| reg add "HKCU\Software\MPC-HC\MPC-HC\Settings" /v "SnapToDesktopEdges" /t "REG_DWORD" /d "1" /f | |
| reg add "HKCU\Software\MPC-HC\MPC-HC\Settings" /v "TrayIcon" /t "REG_DWORD" /d "1" /f | |
| reg add "HKCU\Software\MPC-HC\MPC-HC\Settings" /v "ShowOSD" /t "REG_DWORD" /d "1" /f | |
| rem WPS Office Free (To block ADs, just block WPS in the firewall) | |
| del "%LocalAppData%\Kingsoft\WPS Office\10.2.0.6051\office6\wpscenter.exe" /s /f /q | |
| del "%LocalAppData%\Kingsoft\WPS Office\10.2.0.6051\office6\wpscloudlaunch.exe" /s /f /q | |
| taskkill /im wpscloudsvr.exe /f | |
| takeown /f "%LocalAppData%\Kingsoft\WPS Office\10.2.0.6051\office6\wpscloudsvr.exe" /a | |
| del "%LocalAppData%\Kingsoft\WPS Office\10.2.0.6051\office6\wpscloudsvr.exe" /s /f /q | |
| takeown /f "%LocalAppData%\Kingsoft\WPS Office\10.2.0.6051\office6\wpscloudlaunch.exe" /a | |
| del "%LocalAppData%\Kingsoft\WPS Office\10.2.0.6051\office6\wpscloudlaunch.exe" /s /f /q | |
| taskkill /im updateself.exe /f | |
| taskkill /im wpsupdate.exe /f | |
| rd "%LocalAppData%\Kingsoft\WPS Office\10.2.0.6051\wtoolex" /s /q | |
| schtasks /DELETE /TN "WpsExternal_Mikai_20180505183522" /f | |
| schtasks /DELETE /TN "WpsKtpcntrQingTask_Mikai" /f | |
| schtasks /DELETE /TN "WpsUpdateTask_Mikai" /f | |
| rem XnView | |
| reg add "HKCU\Software\XnView" /v "UseRegistry" /t "REG_DWORD" /d "1" /f | |
| reg add "HKCU\Software\XnView\Browser" /v "ShowToolTips" /t "REG_DWORD" /d "0" /f | |
| reg add "HKCU\Software\XnView\Browser" /v "StartupDirectory" /t "REG_SZ" /d "%UserProfile%\Desktop" /f | |
| reg add "HKCU\Software\XnView\Browser" /v "StartupIn" /t "REG_DWORD" /d "2" /f | |
| reg add "HKCU\Software\XnView\Capture" /v "Delay" /t "REG_DWORD" /d "2" /f | |
| reg add "HKCU\Software\XnView\Capture" /v "Directory" /t "REG_SZ" /d "%UserProfile%\Desktop" /f | |
| reg add "HKCU\Software\XnView\Capture" /v "HotKey" /t "REG_DWORD" /d "9" /f | |
| reg add "HKCU\Software\XnView\Capture" /v "IncludeCursor" /t "REG_DWORD" /d "0" /f | |
| reg add "HKCU\Software\XnView\Capture" /v "Method" /t "REG_DWORD" /d "0" /f | |
| reg add "HKCU\Software\XnView\Capture" /v "Multiple" /t "REG_DWORD" /d "1" /f | |
| reg add "HKCU\Software\XnView\Capture" /v "SaveIntoFile" /t "REG_DWORD" /d "1" /f | |
| reg add "HKCU\Software\XnView\Start" /v "MaximizeXnviewAtStartup" /t "REG_DWORD" /d "1" /f | |
| reg add "HKCU\Software\XnView\Start" /v "OnlyOneInstance" /t "REG_DWORD" /d "1" /f | |
| reg add "HKCU\Software\XnView\Start" /v "PathSave" /t "REG_SZ" /d "%UserProfile%\Desktop" /f | |
| reg add "HKCU\Software\XnView\Start" /v "SavePosition" /t "REG_DWORD" /d "0" /f | |
| reg add "HKCU\Software\XnView\Start" /v "ShowSaveDlg" /t "REG_DWORD" /d "0" /f | |
| rem =========================== Windows Setup plus Manual Config =========================== | |
| rem Windows Setup 1 (Basics plus Manual Config) - https://pastebin.com/CKQed9ZX | |
| rem Windows Setup 2 (Install drivers/software from folders) - https://pastebin.com/Lxe09qsU | |
| rem Disable Windows Defender (run twice to disable services) - https://pastebin.com/kYCVzZPz | |
| rem ==================================== Windows Drivers =================================== | |
| rem It is not possible to uninstall network adapters since 1803 | |
| rem https://social.technet.microsoft.com/Forums/en-US/38e53f34-a607-4368-9d9b-7acba1d32b80/cannot-uninstall-protocols-such-as-client-for-microsoft-networks | |
| rem Link-Layer Discovery Protocol Driver / Default - 2 | |
| reg add "HKLM\System\CurrentControlSet\Services\MsLldp" /v "Start" /t REG_DWORD /d "4" /f | |
| rem Link-Layer Topology Discovery Responder / Default - 2 | |
| reg add "HKLM\System\CurrentControlSet\Services\rspndr" /v "Start" /t REG_DWORD /d "4" /f | |
| rem Link-Layer Topology Discovery Mapper I/O Driver / Default - 2 | |
| reg add "HKLM\System\CurrentControlSet\Services\lltdio" /v "Start" /t REG_DWORD /d "4" /f | |
| rem Microsoft Virtual Network Adapter Enumerator / Default - 3 | |
| reg add "HKLM\System\CurrentControlSet\Services\NdisVirtualBus" /v "Start" /t REG_DWORD /d "4" /f | |
| rem QoS for storage I/O traffic / Default - 2 | |
| reg add "HKLM\System\CurrentControlSet\Services\storqosflt" /v "Start" /t REG_DWORD /d "4" /f | |
| rem QoS Multimeda Class Scheduler / Default - 2 | |
| reg add "HKLM\System\CurrentControlSet\Services\MMCSS" /v "Start" /t REG_DWORD /d "4" /f | |
| rem QoS Packet Scheduler / Default - 1 | |
| reg add "HKLM\System\CurrentControlSet\Services\Psched" /v "Start" /t REG_DWORD /d "4" /f | |
| rem Named pipe service trigger provider / Default - 1 | |
| rem https://msdn.microsoft.com/en-us/library/windows/desktop/aa365590(v=vs.85).aspx | |
| reg add "HKLM\System\CurrentControlSet\Services\npsvctrig" /v "Start" /t REG_DWORD /d "4" /f | |
| rem NetBIOS Interface / Default - 1 | |
| reg add "HKLM\System\CurrentControlSet\Services\NetBIOS" /v "Start" /t REG_DWORD /d "4" /f | |
| rem NetBIOS over TCP/IP / Default - 1 | |
| reg add "HKLM\System\CurrentControlSet\Services\NetBT" /v "Start" /t REG_DWORD /d "4" /f | |
| rem Remote Desktop Device Redirector Bus Driver / Default - 3 | |
| reg add "HKLM\System\CurrentControlSet\Services\rdpbus" /v "Start" /t REG_DWORD /d "4" /f | |
| rem The framework for network mini-redirectors / Default - 1 | |
| rem https://docs.microsoft.com/en-us/windows-hardware/drivers/ifs/the-redirected-drive-buffering-subsystem | |
| reg add "HKLM\System\CurrentControlSet\Services\rdbss" /v "Start" /t REG_DWORD /d "4" /f | |
| rem =========================== Windows Defender Security Center =========================== | |
| rem ________________________________________________________________________________________ | |
| rem https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0290 | |
| rem Windows Defender Security Center service | |
| reg add "HKLM\System\CurrentControlSet\Services\SecurityHealthService" /v "Start" /t REG_DWORD /d "4" /f | |
| rem =========================== Windows Defender Security Centre =========================== | |
| rem -------------------------------- App & browser control --------------------------------- | |
| rem Off - Disable Windows SmartScreen / On - Enable Windows SmartScreen | |
| reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer" /v "SmartScreenEnabled" /t REG_SZ /d "Off" /f | |
| rem 0 - Disable SmartScreen Filter in Microsoft Edge / 1 - Enable | |
| reg add "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\PhishingFilter" /v "EnabledV9" /t REG_DWORD /d "0" /f | |
| rem 0 - Disable Windows SmartScreen for Windows Store Apps / 1 - Enable | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\AppHost" /v "EnableWebContentEvaluation" /t "REG_DWORD" /d "0" /f | |
| rem ________________________________________________________________________________________ | |
| rem Remove Smartscreen (to restore run "sfc /scannow") | |
| takeown /f "%WinDir%\System32\smartscreen.exe" /a | |
| icacls "%WinDir%\System32\smartscreen.exe" /grant:r Administrators:F /c | |
| taskkill /im smartscreen.exe /f | |
| del "%WinDir%\System32\smartscreen.exe" /s /f /q | |
| rem =========================== Windows Defender Security Center =========================== | |
| rem ----------------------------- Device performance & health ------------------------------ | |
| rem ________________________________________________________________________________________ | |
| rem Specifies how the System responds when a user tries to install device driver files that are not digitally signed / 00 - Ignore / 01 - Warn / 02 - Block | |
| reg add "HKLM\Software\Microsoft\Driver Signing" /v "Policy" /t REG_BINARY /d "01" /f | |
| rem Prevent device metadata retrieval from the Internet / Do not automatically download manufacturers’ apps and custom icons available for your devices | |
| reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Device Metadata" /v "PreventDeviceMetadataFromNetwork" /t REG_DWORD /d "1" /f | |
| sc config DsmSvc start= disabled | |
| rem Do you want Windows to download driver Software / 0 - Never / 1 - Allways / 2 - Install driver Software, if it is not found on my computer | |
| reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\DriverSearching" /v "SearchOrderConfig" /t REG_DWORD /d "0" /f | |
| rem Specify search order for device driver source locations | |
| reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\DriverSearching" /v "DontSearchWindowsUpdate" /t REG_DWORD /d "1" /f | |
| reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\DriverSearching" /v "DriverUpdateWizardWuSearchEnabled" /t REG_DWORD /d "0" /f | |
| rem 1 - Disable driver updates in Windows Update | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate" /v "ExcludeWUDriversInQualityUpdate" /t REG_DWORD /d "1" /f | |
| rem Avoid the driver signing enforcement for EV cert / SHA256 Microsoft Windows signed drivers which is further enforced via Secure Boot | |
| rem reg add "HKLM\System\ControlSet001\Control\CI\Policy" /v "UpgradedSystem" /t REG_DWORD /d "1" /f | |
| rem =========================== Windows Defender Security Center =========================== | |
| rem ------------------------------------ Family Options ------------------------------------ | |
| rem ________________________________________________________________________________________ | |
| schtasks /Change /TN "Microsoft\Windows\Shell\FamilySafetyMonitor" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\Shell\FamilySafetyRefreshTask" /Disable | |
| rem =========================== Windows Defender Security Center =========================== | |
| rem ---------------------------- Firewall & network protection ----------------------------- | |
| rem Enable Windows Firewall / AllProfiles / CurrentProfile / DomainProfile / PrivateProfile / PublicProfile | |
| rem https://technet.microsoft.com/en-us/library/cc771920(v=ws.10).aspx | |
| netsh advfirewall set allprofiles state on | |
| rem Block all inbound network traffic and all outbound except allowed apps | |
| netsh advfirewall set DomainProfile firewallpolicy blockinboundalways,blockoutbound | |
| netsh advfirewall set PrivateProfile firewallpolicy blockinboundalways,blockoutbound | |
| netsh advfirewall set PublicProfile firewallpolicy blockinboundalways,blockoutbound | |
| rem Remove All Windows Firewall Rules | |
| netsh advfirewall firewall delete rule name=all | |
| rem reg delete "HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules" /f | |
| rem Windows Firewall Rules | |
| netsh advfirewall firewall add rule name="COD MW2 DNS" dir=out action=allow protocol=UDP remoteip=156.154.70.2,156.154.71.2 remoteport=53 program="E:\Steam\steamapps\common\Call of Duty Modern Warfare 2\iw4sp.exe" | |
| netsh advfirewall firewall add rule name="COD MW2 TCP" dir=out action=allow protocol=TCP remoteport=27015 program="E:\Steam\steamapps\common\Call of Duty Modern Warfare 2\iw4sp.exe" | |
| netsh advfirewall firewall add rule name="COD MW2 UDP" dir=out action=allow protocol=UDP remoteport=1025-65535 program="E:\Steam\steamapps\common\Call of Duty Modern Warfare 2\iw4sp.exe" | |
| netsh advfirewall firewall add rule name="COD MW3 DNS" dir=out action=allow protocol=UDP remoteip=156.154.70.2,156.154.71.2 remoteport=53 program="E:\Steam\steamapps\common\Call of Duty Modern Warfare 3\iw5sp.exe" | |
| netsh advfirewall firewall add rule name="COD MW3 TCP" dir=out action=allow protocol=TCP remoteport=3074 program="E:\Steam\steamapps\common\Call of Duty Modern Warfare 3\iw5sp.exe" | |
| netsh advfirewall firewall add rule name="COD MW3 UDP" dir=out action=allow protocol=UDP remoteport=1025-65535 program="E:\Steam\steamapps\common\Call of Duty Modern Warfare 3\iw5sp.exe" | |
| netsh advfirewall firewall add rule name="Discord DNS" dir=out action=allow protocol=UDP remoteip=156.154.70.2,156.154.71.2 remoteport=53 program="%LocalAppData%\Discord\app-0.0.301\Discord.exe" | |
| netsh advfirewall firewall add rule name="Discord TCP" dir=out action=allow protocol=TCP remoteip=104.16.0.0-104.31.255.255 remoteport=443 program="%LocalAppData%\Discord\app-0.0.301\Discord.exe" | |
| rem netsh advfirewall firewall add rule name="Discord UDP Loop" dir=out action=allow protocol=UDP remoteip=0.0.0.0 remoteport=1025-65535 program="%LocalAppData%\Discord\app-0.0.301\Discord.exe" | |
| netsh advfirewall firewall add rule name="Discord Update DNS" dir=out action=allow protocol=UDP remoteip=156.154.70.2,156.154.71.2 remoteport=53 program="%LocalAppData%\Discord\Update.exe" | |
| netsh advfirewall firewall add rule name="Discord Update TCP" dir=out action=allow protocol=TCP remoteip=104.16.0.0-104.31.255.255 remoteport=443 program="%LocalAppData%\Discord\Update.exe" | |
| rem netsh advfirewall firewall add rule name="Discord Update TCP Loop" dir=out action=allow protocol=TCP remoteip=0.0.0.0 remoteport=1025-65535 program="%LocalAppData%\Discord\Update.exe" | |
| netsh advfirewall firewall add rule name="DriverEasy DNS" dir=out action=allow protocol=UDP remoteip=156.154.70.2,156.154.71.2 remoteport=53 program="%ProgramFiles%\Easeware\DriverEasy\DriverEasy.exe" | |
| netsh advfirewall firewall add rule name="DriverEasy TCP" dir=out action=allow protocol=TCP remoteip=169.53.0.193,172.217.11.14 remoteport=80,443 program="%ProgramFiles%\Easeware\DriverEasy\DriverEasy.exe" | |
| netsh advfirewall firewall add rule name="ETS2 DNS" dir=out action=allow protocol=UDP remoteip=156.154.70.2,156.154.71.2 remoteport=53 program="E:\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe" | |
| netsh advfirewall firewall add rule name="ETS2 TCP" dir=out action=allow protocol=TCP remoteport=80,443 program="E:\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe" | |
| netsh advfirewall firewall add rule name="ETS2 UDP" dir=out action=allow protocol=UDP remoteport=1025-65535 program="E:\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe" | |
| rem netsh advfirewall firewall add rule name="ETS2 Logit TCP" dir=out action=allow protocol=TCP remoteip=5.104.108.21 remoteport=5689 program="E:\Steam\steamapps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe" | |
| netsh advfirewall firewall add rule name="ETS2 MP DNS" dir=out action=allow protocol=UDP remoteip=156.154.70.2,156.154.71.2 remoteport=53 program="E:\TruckersMP Launcher\Launcher.exe" | |
| netsh advfirewall firewall add rule name="ETS2 MP TCP" dir=out action=allow protocol=TCP remoteip=104.16.0.0-104.31.255.255 remoteport=80 program="E:\TruckersMP Launcher\Launcher.exe" | |
| netsh advfirewall firewall add rule name="ETS2 MP UDP" dir=out action=allow protocol=UDP remoteip=0.0.0.0 remoteport=1025-65535 program="E:\TruckersMP Launcher\Launcher.exe" | |
| netsh advfirewall firewall add rule name="IP Info DNS" dir=out action=allow protocol=UDP remoteip=156.154.70.2,156.154.71.2 remoteport=53 program="E:\Software\Temp\Soft\Windows Repair Toolbox\Downloads\NirLauncher\NirSoft\ipnetinfo.exe" | |
| netsh advfirewall firewall add rule name="IP Info TCP" dir=out action=allow protocol=TCP remoteip=193.0.6.135 remoteport=43 program="E:\Software\Temp\Soft\Windows Repair Toolbox\Downloads\NirLauncher\NirSoft\ipnetinfo.exe" | |
| netsh advfirewall firewall add rule name="K9WP DNS" dir=out action=allow protocol=UDP remoteip=156.154.70.2,156.154.71.2 remoteport=53 program="%ProgramFiles%\Blue Coat K9 Web Protection\k9filter.exe" | |
| netsh advfirewall firewall add rule name="K9WP Loop" dir=out action=allow protocol=TCP remoteip=127.0.0.1 remoteport=1025-65535 program="%ProgramFiles%\Blue Coat K9 Web Protection\k9filter.exe" | |
| netsh advfirewall firewall add rule name="K9WP TCP" dir=out action=allow protocol=TCP remoteip=46.235.158.203 remoteport=80 program="%ProgramFiles%\Blue Coat K9 Web Protection\k9filter.exe" | |
| netsh advfirewall firewall add rule name="PatchMyPC DNS" dir=out action=allow protocol=UDP remoteip=156.154.70.2,156.154.71.2 remoteport=53 program="E:\Software\Temp\Soft\Windows Repair Toolbox\Downloads\PatchMyPc\PatchMyPC.exe" | |
| netsh advfirewall firewall add rule name="PatchMyPC TCP" dir=out action=allow protocol=TCP remoteport=80,443 program="E:\Software\Temp\Soft\Windows Repair Toolbox\Downloads\PatchMyPc\PatchMyPC.exe" | |
| netsh advfirewall firewall add rule name="POP Peeper DNS" dir=out action=allow protocol=UDP remoteip=156.154.70.2,156.154.71.2 remoteport=53 program="%ProgramFiles(x86)%\POP Peeper\POPPeeper.exe" | |
| netsh advfirewall firewall add rule name="POP Peeper IMAP" dir=out action=allow protocol=TCP remoteip=94.100.176.0-94.100.183.255,217.69.136.0-217.69.141.255 remoteport=143,587 program="%ProgramFiles(x86)%\POP Peeper\POPPeeper.exe" | |
| netsh advfirewall firewall add rule name="RadioSure DNS" dir=out action=allow protocol=UDP remoteip=156.154.70.2,156.154.71.2 remoteport=53 program="%LocalAppData%\RadioSure\RadioSure.exe" | |
| netsh advfirewall firewall add rule name="RadioSure TCP" dir=out action=allow protocol=TCP remoteport=80,1025-65535 program="%LocalAppData%\RadioSure\RadioSure.exe" | |
| rem netsh advfirewall firewall add rule name="Svchost DNS" dir=out action=allow protocol=UDP remoteip=156.154.70.2,156.154.71.2 remoteport=53 program="%WINDIR%\System32\svchost.exe" | |
| rem netsh advfirewall firewall add rule name="Svchost TCP" dir=out action=allow protocol=TCP remoteport=80,443 program="%WINDIR%\System32\svchost.exe" | |
| netsh advfirewall firewall add rule name="Steam DNS" dir=out action=allow protocol=UDP remoteip=156.154.70.2,156.154.71.2 remoteport=53 program="E:\Steam\Steam.exe" | |
| netsh advfirewall firewall add rule name="Steam TCP" dir=out action=allow protocol=TCP remoteport=80,443,27015-27030,27050 program="E:\Steam\Steam.exe" | |
| netsh advfirewall firewall add rule name="Steam UDP" dir=out action=allow protocol=UDP remoteport=1025-65535 program="E:\Steam\Steam.exe" | |
| netsh advfirewall firewall add rule name="Steam Web DNS" dir=out action=allow protocol=UDP remoteip=156.154.70.2,156.154.71.2 remoteport=53 program="E:\Steam\bin\cef\cef.win7\steamwebhelper.exe" | |
| netsh advfirewall firewall add rule name="Steam Web TCP" dir=out action=allow protocol=TCP remoteport=80,443 program="E:\Steam\bin\cef\cef.win7\steamwebhelper.exe" | |
| netsh advfirewall firewall add rule name="TeamViewer DNS" dir=out action=allow protocol=UDP remoteip=156.154.70.2,156.154.71.2 remoteport=53 program="%ProgramFiles(x86)%\TeamViewer\TeamViewer.exe" | |
| netsh advfirewall firewall add rule name="TeamViewer UDP" dir=out action=allow protocol=UDP remoteport=5938 program="%ProgramFiles(x86)%\TeamViewer\TeamViewer.exe" | |
| netsh advfirewall firewall add rule name="TeamViewer TCP" dir=out action=allow protocol=TCP remoteport=80,443,5938 program="%ProgramFiles(x86)%\TeamViewer\TeamViewer.exe" | |
| netsh advfirewall firewall add rule name="Update Time DNS" dir=out action=allow protocol=UDP remoteip=156.154.70.2,156.154.71.2 remoteport=53 program="E:\Software\Temp\Soft\Windows Repair Toolbox\Downloads\Custom Tools\Added Custom Tools\UpdateTime.exe" | |
| netsh advfirewall firewall add rule name="Update Time UDP" dir=out action=allow protocol=UDP remoteip=85.236.36.0-85.236.36.127 remoteport=123 program="E:\Software\Temp\Soft\Windows Repair Toolbox\Downloads\Custom Tools\Added Custom Tools\UpdateTime.exe" | |
| netsh advfirewall firewall add rule name="WRT DNS" dir=out action=allow protocol=UDP remoteip=156.154.70.2,156.154.71.2 remoteport=53 program="E:\Software\Temp\Soft\Windows Repair Toolbox\Windows_Repair_Toolbox.exe" | |
| netsh advfirewall firewall add rule name="WRT TCP" dir=out action=allow protocol=TCP remoteport=80,443 program="E:\Software\Temp\Soft\Windows Repair Toolbox\Windows_Repair_Toolbox.exe" | |
| netsh advfirewall firewall add rule name="Yandex DNS" dir=out action=allow protocol=UDP remoteip=156.154.70.2,156.154.71.2 remoteport=53 program="Z:\Yandex\YandexBrowser\Application\browser.exe" | |
| netsh advfirewall firewall add rule name="Yandex DNSS" dir=out action=allow protocol=UDP remoteip=45.76.35.212 remoteport=443 program="Z:\Yandex\YandexBrowser\Application\browser.exe" | |
| netsh advfirewall firewall add rule name="Yandex Sync" dir=out action=allow protocol=TCP remoteip=213.180.193.0-213.180.193.255 remoteport=443,5222 program="Z:\Yandex\YandexBrowser\Application\browser.exe" | |
| netsh advfirewall firewall add rule name="Yandex TCP" dir=out action=allow protocol=TCP remoteport=80,443 program="Z:\Yandex\YandexBrowser\Application\browser.exe" | |
| rem =========================== Windows Defender Security Center =========================== | |
| rem ------------------------------ Virus & threat protection ------------------------------- | |
| rem ________________________________________________________________________________________ | |
| rem https://technet.microsoft.com/en-us/itpro/powershell/windows/defender/set-mppreference | |
| reg delete "HKLM\Software\Policies\Microsoft\Windows Defender" /f | |
| reg add "HKLM\Software\Policies\Microsoft\Windows Defender\Real-Time Protection" /v "DisableBehaviorMonitoring" /t REG_DWORD /d "1" /f | |
| reg add "HKLM\Software\Policies\Microsoft\Windows Defender\Real-Time Protection" /v "DisableIOAVProtection" /t REG_DWORD /d "1" /f | |
| reg add "HKLM\Software\Policies\Microsoft\Windows Defender\Real-Time Protection" /v "DisableOnAccessProtection" /t REG_DWORD /d "1" /f | |
| reg add "HKLM\Software\Policies\Microsoft\Windows Defender\Real-Time Protection" /v "DisableRealtimeMonitoring" /t REG_DWORD /d "1" /f | |
| reg add "HKLM\Software\Policies\Microsoft\Windows Defender\Real-Time Protection" /v "DisableScanOnRealtimeEnable" /t REG_DWORD /d "1" /f | |
| reg add "HKLM\Software\Policies\Microsoft\Windows Defender\Reporting" /v "DisableEnhancedNotifications" /t REG_DWORD /d "1" /f | |
| reg add "HKLM\Software\Policies\Microsoft\Windows Defender\SpyNet" /v "DisableBlockAtFirstSeen" /t REG_DWORD /d "1" /f | |
| reg add "HKLM\Software\Policies\Microsoft\Windows Defender\SpyNet" /v "SpynetReporting" /t REG_DWORD /d "0" /f | |
| reg add "HKLM\Software\Policies\Microsoft\Windows Defender\SpyNet" /v "SubmitSamplesConsent" /t REG_DWORD /d "0" /f | |
| rem Disable WD services | |
| reg add "HKLM\System\CurrentControlSet\Services\WdBoot" /v "Start" /t REG_DWORD /d "4" /f | |
| reg add "HKLM\System\CurrentControlSet\Services\WdFilter" /v "Start" /t REG_DWORD /d "4" /f | |
| reg add "HKLM\System\CurrentControlSet\Services\WdNisDrv" /v "Start" /t REG_DWORD /d "4" /f | |
| reg add "HKLM\System\CurrentControlSet\Services\WdNisSvc" /v "Start" /t REG_DWORD /d "4" /f | |
| reg add "HKLM\System\CurrentControlSet\Services\WinDefend" /v "Start" /t REG_DWORD /d "4" /f | |
| rem Disable Logging | |
| reg add "HKLM\System\CurrentControlSet\Control\WMI\Autologger\DefenderApiLogger" /v "Start" /t REG_DWORD /d "0" /f | |
| reg add "HKLM\System\CurrentControlSet\Control\WMI\Autologger\DefenderAuditLogger" /v "Start" /t REG_DWORD /d "0" /f | |
| rem Disable Tasks | |
| schtasks /Change /TN "Microsoft\Windows\ExploitGuard\ExploitGuard MDM policy Refresh" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\Windows Defender\Windows Defender Cleanup" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\Windows Defender\Windows Defender Verification" /Disable | |
| rem Remove context menu | |
| reg delete "HKCR\*\shellex\ContextMenuHandlers\EPP" /f | |
| reg delete "HKCR\Directory\shellex\ContextMenuHandlers\EPP" /f | |
| reg delete "HKCR\Drive\shellex\ContextMenuHandlers\EPP" /f | |
| rem =========================== Windows Defender Security Center =========================== | |
| rem ------------------------------ Virus & threat protection ------------------------------- | |
| rem .......................... Virus & threat protection settings .......................... | |
| rem 1 - Disable Real-time protection | |
| reg add "HKLM\Software\Policies\Microsoft\Windows Defender" /v "DisableAntiSpyware" /t REG_DWORD /d "1" /f | |
| reg add "HKLM\Software\Policies\Microsoft\Windows Defender" /v "DisableAntiVirus" /t REG_DWORD /d "1" /f | |
| rem =================================== Windows Logging ==================================== | |
| rem https://blogs.technet.microsoft.com/askperf/2009/10/04/windows-7-windows-server-2008-r2-unified-background-process-manager-ubpm | |
| rem https://msdn.microsoft.com/en-us/library/windows/desktop/aa363687(v=vs.85).aspx | |
| rem https://technet.microsoft.com/en-us/library/cc722404(v=ws.11).aspx | |
| rem DiagLog is required by Diagnostic Policy Service (Troubleshooting) | |
| rem EventLog-System/EventLog-Application are required by Windows Events Log Service | |
| rem perfmon | |
| reg add "HKLM\System\CurrentControlSet\Control\WMI\Autologger\AppModel" /v "Start" /t REG_DWORD /d "0" /f | |
| reg add "HKLM\System\CurrentControlSet\Control\WMI\Autologger\AutoLogger-Diagtrack-Listener" /v "Start" /t REG_DWORD /d "0" /f | |
| reg add "HKLM\System\CurrentControlSet\Control\WMI\Autologger\Circular Kernel Context Logger" /v "Start" /t REG_DWORD /d "0" /f | |
| reg add "HKLM\System\CurrentControlSet\Control\WMI\Autologger\CShellCircular" /v "Start" /t REG_DWORD /d "0" /f | |
| reg add "HKLM\System\CurrentControlSet\Control\WMI\Autologger\CloudExperienceHostOobe" /v "Start" /t REG_DWORD /d "0" /f | |
| reg add "HKLM\System\CurrentControlSet\Control\WMI\Autologger\EventLog-Application" /v "Start" /t REG_DWORD /d "0" /f | |
| reg add "HKLM\System\CurrentControlSet\Control\WMI\Autologger\EventLog-Security" /v "Start" /t REG_DWORD /d "1" /f | |
| reg add "HKLM\System\CurrentControlSet\Control\WMI\Autologger\EventLog-System" /v "Start" /t REG_DWORD /d "0" /f | |
| reg add "HKLM\System\CurrentControlSet\Control\WMI\Autologger\DiagLog" /v "Start" /t REG_DWORD /d "0" /f | |
| reg add "HKLM\System\CurrentControlSet\Control\WMI\Autologger\FaceRecoTel" /v "Start" /t REG_DWORD /d "0" /f | |
| reg add "HKLM\System\CurrentControlSet\Control\WMI\Autologger\FaceUnlock" /v "Start" /t REG_DWORD /d "0" /f | |
| reg add "HKLM\System\CurrentControlSet\Control\WMI\Autologger\LwtNetLog" /v "Start" /t REG_DWORD /d "0" /f | |
| reg add "HKLM\System\CurrentControlSet\Control\WMI\Autologger\NetCore" /v "Start" /t REG_DWORD /d "0" /f | |
| reg add "HKLM\System\CurrentControlSet\Control\WMI\Autologger\NtfsLog" /v "Start" /t REG_DWORD /d "0" /f | |
| reg add "HKLM\System\CurrentControlSet\Control\WMI\Autologger\ReadyBoot" /v "Start" /t REG_DWORD /d "0" /f | |
| reg add "HKLM\System\CurrentControlSet\Control\WMI\Autologger\TileStore" /v "Start" /t REG_DWORD /d "0" /f | |
| reg add "HKLM\System\CurrentControlSet\Control\WMI\Autologger\Tpm" /v "Start" /t REG_DWORD /d "0" /f | |
| reg add "HKLM\System\CurrentControlSet\Control\WMI\Autologger\WdiContextLog" /v "Start" /t REG_DWORD /d "0" /f | |
| reg add "HKLM\System\CurrentControlSet\Control\WMI\Autologger\WiFiDriverIHVSession" /v "Start" /t REG_DWORD /d "0" /f | |
| reg add "HKLM\System\CurrentControlSet\Control\WMI\Autologger\WiFiSession" /v "Start" /t REG_DWORD /d "0" /f | |
| rem ================================ Windows Error Reporting =============================== | |
| rem https://msdn.microsoft.com/en-us/library/windows/desktop/bb513638(v=vs.85).aspx | |
| rem Disable Microsoft Support Diagnostic Tool MSDT | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\ScriptedDiagnosticsProvider\Policy" /v "DisableQueryRemoteServer" /t REG_DWORD /d "1" /f | |
| rem Disable System Debugger (Dr. Watson) | |
| reg add "HKLM\Software\Microsoft\Windows NT\CurrentVersion\AeDebug" /v "Auto" /t REG_SZ /d "0" /f | |
| rem 1 - Disable Windows Error Reporting (WER) | |
| reg add "HKLM\Software\Microsoft\PCHealth\ErrorReporting" /v "DoReport" /t REG_DWORD /d "0" /f | |
| reg add "HKCU\Software\Microsoft\Windows\Windows Error Reporting" /v "Disabled" /t REG_DWORD /d "1" /f | |
| reg add "HKLM\Software\Microsoft\Windows\Windows Error Reporting" /v "Disabled" /t REG_DWORD /d "1" /f | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\Windows Error Reporting" /v "Disabled" /t REG_DWORD /d "1" /f | |
| rem 1 - Disable WER sending second-level data | |
| reg add "HKCU\Software\Microsoft\Windows\Windows Error Reporting" /v "DontSendAdditionalData" /t REG_DWORD /d "1" /f | |
| reg add "HKLM\Software\Microsoft\Windows\Windows Error Reporting" /v "DontSendAdditionalData" /t REG_DWORD /d "1" /f | |
| rem 1 - Disable WER crash dialogs, popups | |
| reg add "HKLM\Software\Microsoft\PCHealth\ErrorReporting" /v "ShowUI" /t REG_DWORD /d "0" /f | |
| reg add "HKCU\Software\Microsoft\Windows\Windows Error Reporting" /v "DontShowUI" /t REG_DWORD /d "1" /f | |
| reg add "HKLM\Software\Microsoft\Windows\Windows Error Reporting" /v "DontShowUI" /t REG_DWORD /d "1" /f | |
| rem 1 - Disable WER logging | |
| reg add "HKCU\Software\Microsoft\Windows\Windows Error Reporting" /v "LoggingDisabled" /t REG_DWORD /d "1" /f | |
| reg add "HKLM\Software\Microsoft\Windows\Windows Error Reporting" /v "LoggingDisabled" /t REG_DWORD /d "1" /f | |
| schtasks /Change /TN "Microsoft\Windows\ErrorDetails\EnableErrorDetailsUpdate" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\Windows Error Reporting\QueueReporting" /Disable | |
| rem Windows Error Reporting Service | |
| sc config WerSvc start= disabled | |
| rem Remove Windows Errror Reporting (to restore run "sfc /scannow") | |
| takeown /f "%WinDir%\System32\WerFault.exe" /a | |
| icacls "%WinDir%\System32\WerFault.exe" /grant:r Administrators:F /c | |
| taskkill /im WerFault.exe /f | |
| del "%WinDir%\System32\WerFault.exe" /s /f /q | |
| rem =================================== Windows Explorer =================================== | |
| rem --------------------------------------- Options ---------------------------------------- | |
| rem ....................................... General ........................................ | |
| rem 2 - Open File Explorer to Quick access / 1 - Open File Explorer to This PC / 3 - Open File Explorer to Downloads | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "LaunchTo" /t REG_DWORD /d "3" /f | |
| rem Single-click to open an item (point to select) | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer" /v "ShellState" /t REG_BINARY /d "2400000017a8000000000000000000000000000001000000130000000000000073000000" /f | |
| rem 2 - Underline icon titles consistent with my browser / 3 - Underline icon titles only when I point at them | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer" /v "IconUnderline" /t REG_DWORD /d "2" /f | |
| rem 1 - Show recently used folders in Quick Access | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer" /v "ShowRecent" /t REG_DWORD /d "0" /f | |
| rem 1 - Show frequently folders in Quick Access | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer" /v "ShowFrequent" /t REG_DWORD /d "0" /f | |
| rem =================================== Windows Explorer =================================== | |
| rem --------------------------------------- Options ---------------------------------------- | |
| rem ........................................ View ......................................... | |
| rem View - Options - View - Apply to Folders - OK - Close Explorer ASAP | |
| reg delete "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags" /f | |
| reg add "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\AllFolders\Shell" /v "FolderType" /t REG_SZ /d "NotSpecified" /f | |
| rem ________________________________________________________________________________________ | |
| rem Remove Network from Navigation Panel | |
| rem Take Ownership of the Registry key - https://www.youtube.com/watch?v=M1l5ifYKefg | |
| reg add "HKCR\CLSID\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}\ShellFolder" /v "Attributes" /t REG_DWORD /d "2962489444" /f | |
| rem 1 - Hide Quick access from This PC / 0 - Show | |
| reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer" /v "HubMode" /t REG_DWORD /d "1" /f | |
| rem Show/Hide - 3D Objects from This PC | |
| reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{31C0DD25-9439-4F12-BF41-7FF4EDA38722}\PropertyBag" /v "ThisPCPolicy" /t REG_SZ /d "Hide" /f | |
| reg add "HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{31C0DD25-9439-4F12-BF41-7FF4EDA38722}\PropertyBag" /v "ThisPCPolicy" /t REG_SZ /d "Hide" /f | |
| rem Show/Hide - Desktop from This PC | |
| reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\PropertyBag" /v "ThisPCPolicy" /t REG_SZ /d "Show" /f | |
| reg add "HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\PropertyBag" /v "ThisPCPolicy" /t REG_SZ /d "Show" /f | |
| rem Show/Hide - Documents from This PC | |
| reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{f42ee2d3-909f-4907-8871-4c22fc0bf756}\PropertyBag" /v "ThisPCPolicy" /t REG_SZ /d "Hide" /f | |
| reg add "HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{f42ee2d3-909f-4907-8871-4c22fc0bf756}\PropertyBag" /v "ThisPCPolicy" /t REG_SZ /d "Hide" /f | |
| rem Show/Hide - Downloads from This PC | |
| reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7d83ee9b-2244-4e70-b1f5-5393042af1e4}\PropertyBag" /v "ThisPCPolicy" /t REG_SZ /d "Show" /f | |
| reg add "HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7d83ee9b-2244-4e70-b1f5-5393042af1e4}\PropertyBag" /v "ThisPCPolicy" /t REG_SZ /d "Show" /f | |
| rem Show/Hide - Movies from This PC | |
| reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{35286a68-3c57-41a1-bbb1-0eae73d76c95}\PropertyBag" /v "ThisPCPolicy" /t REG_SZ /d "Show" /f | |
| reg add "HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{35286a68-3c57-41a1-bbb1-0eae73d76c95}\PropertyBag" /v "ThisPCPolicy" /t REG_SZ /d "Show" /f | |
| rem Show/Hide - Music from This PC | |
| reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{a0c69a99-21c8-4671-8703-7934162fcf1d}\PropertyBag" /v "ThisPCPolicy" /t REG_SZ /d "Hide" /f | |
| reg add "HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{a0c69a99-21c8-4671-8703-7934162fcf1d}\PropertyBag" /v "ThisPCPolicy" /t REG_SZ /d "Hide" /f | |
| rem Show/Hide - Pictures from This PC | |
| reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0ddd015d-b06c-45d5-8c4c-f59713854639}\PropertyBag" /v "ThisPCPolicy" /t REG_SZ /d "Show" /f | |
| reg add "HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0ddd015d-b06c-45d5-8c4c-f59713854639}\PropertyBag" /v "ThisPCPolicy" /t REG_SZ /d "Show" /f | |
| rem Remove Desktop folder from This PC | |
| rem reg delete "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}" /f | |
| rem reg delete "HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}" /f | |
| rem Remove Documents folder from This PC | |
| rem reg delete "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{d3162b92-9365-467a-956b-92703aca08af}" /f | |
| rem reg delete "HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{d3162b92-9365-467a-956b-92703aca08af}" /f | |
| rem Remove Downloads folder from This PC | |
| rem reg delete "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{088e3905-0323-4b02-9826-5d99428e115f}" /f | |
| rem reg delete "HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{088e3905-0323-4b02-9826-5d99428e115f}" /f | |
| rem Remove Movies folder from This PC | |
| rem reg delete "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{f86fa3ab-70d2-4fc7-9c99-fcbf05467f3a}" /f | |
| rem reg delete "HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{f86fa3ab-70d2-4fc7-9c99-fcbf05467f3a}" /f | |
| rem Remove Music folder from This PC on | |
| rem reg delete "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{3dfdf296-dbec-4fb4-81d1-6a3438bcf4de}" /f | |
| rem reg delete "HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{3dfdf296-dbec-4fb4-81d1-6a3438bcf4de}" /f | |
| rem Remove Pictures folder from This PC | |
| rem reg delete "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{24ad3ad4-a569-4530-98e1-ab02f9417aa8}" /f | |
| rem reg delete "HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{24ad3ad4-a569-4530-98e1-ab02f9417aa8}" /f | |
| rem =================================== Windows Explorer =================================== | |
| rem --------------------------------------- Options ---------------------------------------- | |
| rem .................................. Advanced Settings ................................... | |
| rem 1 - Show hidden files, folders and drives | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "Hidden" /t REG_DWORD /d "1" /f | |
| rem 0 - Show extensions for known file types | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "HideFileExt" /t REG_DWORD /d "0" /f | |
| rem 0 - Hide protected operating system files | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "ShowSuperHidden" /t REG_DWORD /d "1" /f | |
| rem 1 - Launch folder windows in a separate process | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "SeparateProcess" /t REG_DWORD /d "1" /f | |
| rem 1 - Show Sync Provider Notifications in Windows Explorer (ADs) | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "ShowSyncProviderNotifications" /t REG_DWORD /d "0" /f | |
| rem 1 - Use Sharing Wizard | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "SharingWizardOn" /t REG_DWORD /d "0" /f | |
| rem Navigation pane - 1 - Expand to open folder | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "NavPaneExpandToCurrentFolder" /t REG_DWORD /d "0" /f | |
| rem ________________________________________________________________________________________ | |
| rem 0 - All of the components of Windows Explorer run a single process / 1 - All instances of Windows Explorer run in one process and the Desktop and Taskbar run in a separate process | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer" /v "DesktopProcess" /t REG_DWORD /d "1" /f | |
| rem Yes - Use Inline AutoComplete in File Explorer and Run Dialog / No | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete" /v "Append Completion" /t REG_SZ /d "No" /f | |
| rem 0 - Do this for all current items checkbox / 1 - Disabled | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\OperationStatusManager" /v "ConfirmationCheckBoxDoForAll" /t REG_DWORD /d "0" /f | |
| rem 1 - Always show more details in copy dialog | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\OperationStatusManager" /v "EnthusiastMode" /t REG_DWORD /d "0" /f | |
| rem 1 - Display confirmation dialog when deleting files | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v "ConfirmFileDelete" /t REG_DWORD /d "1" /f | |
| rem 1075839525 - Auto arrange icons and Align icons to grid on Desktop / 1075839520 / 1075839521 / 1075839524 | |
| reg add "HKCU\Software\Microsoft\Windows\Shell\Bags\1\Desktop" /v "FFlags" /t REG_DWORD /d "1075839525" /f | |
| rem 1 - Disable Look for an app in the Store (How do you want to open this file) | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\Explorer" /v "NoUseStoreOpenWith" /t REG_DWORD /d "1" /f | |
| rem ================================== Windows OneDrive ==================================== | |
| rem Remove OneDrive | |
| taskkill /F /IM onedrive.exe | |
| rem "%SYSTEMROOT%\System32\OneDriveSetup.exe" /uninstall | |
| rem "%SYSTEMROOT%\SysWOW64\OneDriveSetup.exe" /uninstall | |
| rd "%LOCALAPPDATA%\Microsoft\OneDrive" /Q /S | |
| rd "%PROGRAMDATA%\Microsoft OneDrive" /Q /S | |
| rd "%USERPROFILE%\OneDrive" /Q /S | |
| rem 0 - Remove from Windows Explorer | |
| reg add "HKCR\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}" /v "System.IsPinnedToNameSpaceTree" /t REG_DWORD /d "0" /f | |
| reg add "HKCR\Wow6432Node\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}" /v "System.IsPinnedToNameSpaceTree" /t REG_DWORD /d "0" /f | |
| reg add "HKCU\Software\Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}" /v "System.IsPinnedToNameSpaceTree" /t REG_DWORD /d "0" /f | |
| reg add "HKCU\Software\Classes\Wow6432Node\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}" /v "System.IsPinnedToNameSpaceTree" /t REG_DWORD /d "0" /f | |
| rem Hide One Drive Icon on Desktop | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel" /v "{018D5C66-4533-4307-9B53-224DE2ED1FE6}" /t REG_DWORD /d "1" /f | |
| rem 1 - Disable sync files to One Drive | |
| reg add "HKCU\Software\Microsoft\OneDrive" /v "DisablePersonalSync" /t REG_DWORD /d "1" /f | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\OneDrive" /v "DisableFileSync" /t REG_DWORD /d "1" /f | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\OneDrive" /v "DisableFileSyncNGSC" /t REG_DWORD /d "1" /f | |
| reg add "HKLM\Software\Wow6432Node\Policies\Microsoft\Windows\Onedrive" /v "DisableFileSyncNGSC" /t REG_DWORD /d "1" /f | |
| rem 1 - Disable saving Libraries to OneDrive | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\OneDrive" /v "DisableLibrariesDefaultSaveToOneDrive" /t REG_DWORD /d "1" /f | |
| reg add "HKLM\Software\Wow6432Node\Policies\Microsoft\Windows\Onedrive" /v "DisableLibrariesDefaultSaveToOneDrive" /t REG_DWORD /d "1" /f | |
| rem 1 - Disable Sync over metered network | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\OneDrive" /v "DisableMeteredNetworkFileSync" /t REG_DWORD /d "1" /f | |
| reg add "HKLM\Software\Wow6432Node\Policies\Microsoft\Windows\Onedrive" /v "DisableMeteredNetworkFileSync" /t REG_DWORD /d "1" /f | |
| rem Remove Startup entry | |
| reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "OneDrive" /f | |
| rem Disable Service | |
| sc config OneSyncSvc start= disabled | |
| sc config OneSyncSvc_Session1 start= disabled | |
| rem Disable Task | |
| schtasks /Change /TN "OneDrive Standalone Update Task v2" /Disable | |
| rem ================================ Windows Optimizations ================================= | |
| rem https://msdn.microsoft.com/en-us/library/ee377058(v=bts.10).aspx | |
| rem https://channel9.msdn.com/Blogs/Seth-Juarez/Memory-Compression-in-Windows-10-RTM | |
| rem https://blogs.technet.microsoft.com/markrussinovich/2008/07/21/pushing-the-limits-of-windows-physical-memory | |
| rem Determines whether user processes end automatically when the user either logs off or shuts down / 1 - Processes end automatically | |
| reg add "HKCU\Control Panel\Desktop" /v "AutoEndTasks" /t REG_SZ /d "0" /f | |
| rem Specifies the number of times the taskbar button flashes to notify the user that the system has activated a background window | |
| rem If the time elapsed since the last user input exceeds the value of the ForegroundLockTimeout entry, the window will automatically be brought to the foreground | |
| reg add "HKCU\Control Panel\Desktop" /v "ForegroundFlashCount" /t REG_SZ /d "0" /f | |
| rem ForegroundLockTimeout specifies the time in milliseconds, following user input, during which the system keeps applications from moving into the foreground / 0 - Disabled / 200000 - Default | |
| reg add "HKCU\Control Panel\Desktop" /v "ForegroundLockTimeout" /t REG_DWORD /d "0" /f | |
| rem Specifies in milliseconds how long the System waits for user processes to end after the user clicks the End Task command button in Task Manager | |
| reg add "HKCU\Control Panel\Desktop" /v "HungAppTimeout" /t REG_SZ /d "5000" /f | |
| rem Determines how long the System waits for user processes to end after the user attempts to log off or to shut down | |
| reg add "HKCU\Control Panel\Desktop" /v "WaitToKillAppTimeout" /t REG_SZ /d "5000" /f | |
| rem Determines in milliseconds how long the System waits for services to stop after notifying the service that the System is shutting down | |
| reg add "HKLM\System\CurrentControlSet\Control" /v "WaitToKillServiceTimeout" /t REG_SZ /d "5000" /f | |
| rem Determines in milliseconds the interval from the time the cursor is pointed at a menu until the menu items are displayed | |
| reg add "HKCU\Control Panel\Desktop" /v "MenuShowDelay" /t REG_SZ /d "0" /f | |
| rem Mouse Hover Time in milliseconds before Pop-up Display | |
| reg add "HKCU\Control Panel\Mouse" /v "MouseHoverTime" /t REG_SZ /d "0" /f | |
| rem How long in milliseconds you want to have for a startup delay time for desktop apps that run at startup to load | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Serialize" /v "StartupDelayInMSec" /t REG_DWORD /d "0" /f | |
| rem n - Disable Background disk defragmentation / y - EnableHow long in milliseconds you want to have for a startup delay time for desktop apps that run at startup to load | |
| reg add "HKLM\Software\Microsoft\Dfrg\BootOptimizeFunction" /v "Enable" /t REG_SZ /d "n" /f | |
| rem 0 - Disable Background auto-layout / Disable Optimize Hard Disk when idle | |
| reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\OptimalLayout" /v "EnableAutoLayout" /t REG_DWORD /d "0" /f | |
| rem Disable Automatic Maintenance / Scheduled System Maintenance | |
| reg add "HKLM\Software\Microsoft\Windows\ScheduledDiagnostics" /v "EnabledExecution" /t REG_DWORD /d "0" /f | |
| reg add "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\Maintenance" /v "MaintenanceDisabled" /t REG_DWORD /d "1" /f | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\ScheduledDiagnostics" /v "EnabledExecution" /t REG_DWORD /d "0" /f | |
| rem 0 - Enables 8dot3 name creation for all volumes on the system / 1 - Disables 8dot3 name creation for all volumes on the system / 2 - Sets 8dot3 name creation on a per volume basis / 3 - Disables 8dot3 name creation for all volumes except the system volume | |
| rem fsutil 8dot3name scan c:\ | |
| fsutil behavior set disable8dot3 1 | |
| rem 1 - Disable the Encrypting File System (EFS) | |
| fsutil behavior set disableencryption 1 | |
| rem 1 - When listing directories, NTFS does not update the last-access timestamp, and it does not record time stamp updates in the NTFS log | |
| fsutil behavior set disablelastaccess 1 | |
| rem 5 - 5 secs / Delay Chkdsk startup time at OS Boot | |
| reg add "HKLM\System\CurrentControlSet\Control\Session Manager" /v "AutoChkTimeout" /t REG_DWORD /d "5" /f | |
| rem 0 - Establishes a standard size file-system cache of approximately 8 MB / 1 - Establishes a large system cache working set that can expand to physical memory, minus 4 MB, if needed | |
| reg add "HKLM\System\CurrentControlSet\Control\Session Manager\Memory Management" /v "LargeSystemCache" /t REG_DWORD /d "1" /f | |
| rem 0 - Drivers and the kernel can be paged to disk as needed / 1 - Drivers and the kernel must remain in physical memory | |
| reg add "HKLM\System\CurrentControlSet\Control\Session Manager\Memory Management" /v "DisablePagingExecutive" /t REG_DWORD /d "1" /f | |
| rem 0 - Disable Prefetch / 1 - Enable Prefetch when the application starts / 2 - Enable Prefetch when the device starts up / 3 - Enable Prefetch when the application or device starts up | |
| reg add "HKLM\System\CurrentControlSet\Control\Session Manager\Memory Management\PrefetchParameters" /v "EnablePrefetcher" /t REG_DWORD /d "0" /f | |
| rem 0 - Disable SuperFetch / 1 - Enable SuperFetch when the application starts up / 2 - Enable SuperFetch when the device starts up / 3 - Enable SuperFetch when the application or device starts up | |
| reg add "HKLM\System\CurrentControlSet\Control\Session Manager\Memory Management\PrefetchParameters" /v "EnableSuperfetch" /t REG_DWORD /d "0" /f | |
| rem 0 - Disable It / 1 - Default | |
| reg add "HKLM\System\CurrentControlSet\Control\Session Manager\Memory Management\PrefetchParameters" /v "SfTracingState" /t REG_DWORD /d "0" /f | |
| rem 0 - Disable Fast Startup for a Full Shutdown / 1 - Enable Fast Startup (Hybrid Boot) for a Hybrid Shutdown | |
| reg add "HKLM\System\CurrentControlSet\Control\Session Manager\Power" /v "HiberbootEnabled" /t REG_DWORD /d "0" /f | |
| rem Disable Hibernation / Disable Fast Startup (Hybrid Boot) | |
| powercfg -h off | |
| rem =================================== Windows Policies =================================== | |
| rem https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-security-baselines | |
| rem https://docs.microsoft.com/en-us/windows/client-management/mdm/policy-configuration-service-provider | |
| rem 1808 - Disable the warning The Publisher could not be verified | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Associations" /v "DefaultFileTypeRisk" /t REG_DWORD /d "1808" /f | |
| rem Disable Security warning to unblock the downloaded file | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments" /v "SaveZoneInformation" /t REG_DWORD /d "1" /f | |
| rem 1 - Don't run specified exe | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v "DisallowRun" /t REG_DWORD /d "1" /f | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun" /v "1" /t REG_SZ /d "bash.exe" /f | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun" /v "2" /t REG_SZ /d "mshta.exe" /f | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun" /v "3" /t REG_SZ /d "msra.exe" /f | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun" /v "4" /t REG_SZ /d "powershell_ise.exe" /f | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun" /v "5" /t REG_SZ /d "powershell.exe" /f | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun" /v "6" /t REG_SZ /d "psexec.exe" /f | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun" /v "7" /t REG_SZ /d "nc.exe" /f | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun" /v "8" /t REG_SZ /d "nc64.exe" /f | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun" /v "9" /t REG_SZ /d "bitsadmin.exe" /f | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun" /v "10" /t REG_SZ /d "cipher.exe" /f | |
| rem N - Disable Distributed Component Object Model (DCOM) support in Windows / Y - Enable | |
| reg add "HKLM\Software\Microsoft\Ole" /v "EnableDCOM" /t REG_SZ /d "N" /f | |
| rem 0 - Disable Microsoft Windows Just-In-Time (JIT) script debugging | |
| reg add "HKCU\Software\Microsoft\Windows Script\Settings" /v "JITDebug" /t REG_DWORD /d "0" /f | |
| reg add "HKU\.Default\Microsoft\Windows Script\Settings" /v "JITDebug" /t REG_DWORD /d "0" /f | |
| rem 1 - When the system detects that the user is downloading an external program that runs as part of the Windows user interface, the system searches for a digital certificate or requests that the user approve the action | |
| reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v "EnforceShellExtensionSecurity" /t REG_DWORD /d "1" /f | |
| rem Disable Active Desktop | |
| reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop" /v "NoAddingComponents" /t REG_DWORD /d "1" /f | |
| reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop" /v "NoComponents" /t REG_DWORD /d "1" /f | |
| reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v "ForceActiveDesktopOn" /t REG_DWORD /d "0" /f | |
| reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v "NoActiveDesktop" /t REG_DWORD /d "1" /f | |
| reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v "NoActiveDesktopChanges" /t REG_DWORD /d "1" /f | |
| reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v "NoDesktop" /t REG_DWORD /d "0" /f | |
| rem Enables or disables the retrieval of online tips and help for the Settings app | |
| reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v "AllowOnlineTips" /t REG_DWORD /d "0" /f | |
| rem 1 - Disable recent documents history | |
| reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v "NoRecentDocsHistory" /t REG_DWORD /d "1" /f | |
| rem 1 - Do not add shares from recently opened documents to the My Network Places folder | |
| reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v "Norecentdocsnethood" /t REG_DWORD /d "1" /f | |
| rem 0 - Disable configuring the machine at boot-up / 1 - Enable configuring the machine at boot-up / 2 - Enable configuring the machine only if DSC is in pending or current state (Default) | |
| reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "DSCAutomationHostEnabled" /t REG_DWORD /d "0" /f | |
| rem 0 - Disable / 1 - Enable (Default) | |
| reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableCursorSuppression" /t REG_DWORD /d "0" /f | |
| rem 0 - Disable Administrative Shares | |
| reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "LocalAccountTokenFilterPolicy" /t REG_DWORD /d "0" /f | |
| reg add "HKLM\System\CurrentControlSet\Services\LanmanServer\Parameters" /v "AutoShareWks" /t REG_DWORD /d "0" /f | |
| rem Determines how many user account entries Windows saves in the logon cache on the local computer. | |
| reg add "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" /v "CachedLogonsCount" /t REG_DWORD /d "0" /f | |
| rem 0 - Disable Windows Script Host (WSH) for the current user | |
| reg add "HKCU\Software\Microsoft\Windows Script Host\Settings" /v "Enabled" /t REG_DWORD /d "0" /f | |
| rem Locky ransomware using VBscript (Visual Basic Script) - https://blog.avast.com/a-closer-look-at-the-locky-ransomware | |
| rem 0 - Disable Windows Script Host (WSH) for all users (prevents majority of malware from working, especially when removing PowerShell as well, Disable ExecutionPolicy can be easily bypassed) | |
| reg add "HKLM\Software\Microsoft\Windows Script Host\Settings" /v "Enabled" /t REG_DWORD /d "0" /f | |
| rem Prevent Microsoft Edge from starting and loading the Start and New Tab page at Windows startup and each time Microsoft Edge is closed | |
| reg add "HKCU\Software\Policies\Microsoft\MicrosoftEdge\TabPreloader" /v "PreventTabPreloading" /t REG_DWORD /d "1" /f | |
| reg add "HKLM\Software\Policies\Microsoft\MicrosoftEdge\TabPreloader" /v "PreventTabPreloading" /t REG_DWORD /d "1" /f | |
| rem 0 - Disable Customer Experience Improvement (CEIP/SQM - Software Quality Management) | |
| reg add "HKLM\Software\Policies\Microsoft\Internet Explorer\SQM" /v "DisableCustomerImprovementProgram" /t REG_DWORD /d "1" /f | |
| reg add "HKLM\Software\Policies\Microsoft\Messenger\Client" /v "CEIP" /t REG_DWORD /d "2" /f | |
| reg add "HKLM\Software\Policies\Microsoft\SQMClient\Windows" /v "CEIPEnable" /t REG_DWORD /d "0" /f | |
| rem 0 - Disable Application Impact Telemetry (AIT) | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\AppCompat" /v "AITEnable" /t REG_DWORD /d "0" /f | |
| rem 0 - Disable Inventory Collector | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\AppCompat" /v "DisableInventory" /t REG_DWORD /d "1" /f | |
| rem 0 - Disable Disable Program Compatibility Assistant | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\AppCompat" /v "DisablePCA" /t REG_DWORD /d "1" /f | |
| rem 1 - Disable Steps Recorder (Steps Recorder keeps a record of steps taken by the user, the data includes user actions such as keyboard input and mouse input user interface data and screen shots) | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\AppCompat" /v "DisableUAR" /t REG_DWORD /d "1" /f | |
| reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Application-Experience/Steps-Recorder" /v "Enabled" /t REG_DWORD /d "0" /f | |
| rem 0 - Disable sending files to encrypted drives | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\EnhancedStorageDevices" /v "TCGSecurityActivationDisabled" /t REG_DWORD /d "0" /f | |
| rem Disable PerfTrack (tracking of responsiveness events) | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\WDI\{9c5a40da-b965-4fc3-8781-88dd50a6299d}" /v "ScenarioExecutionEnabled" /t REG_DWORD /d "0" /f | |
| rem 1000000000000 - Block untrusted fonts and log events / 2000000000000 - Do not block untrusted fonts / 3000000000000 - Log events without blocking untrusted fonts | |
| reg add "HKLM\Software\Policies\Microsoft\Windows NT\MitigationOptions" /v "MitigationOptions_FontBocking" /t REG_SZ /d "1000000000000" /f | |
| rem 1 - Enable Shutdown Event Tracker / 0 - Disable (Default) | |
| reg add "HKLM\Software\Policies\Microsoft\Windows NT\Reliability" /v "ShutdownReasonOn" /t REG_DWORD /d "0" /f | |
| reg add "HKLM\Software\Policies\Microsoft\Windows NT\Reliability" /v "ShutdownReasonUI" /t REG_DWORD /d "0" /f | |
| rem Digest Security Provider is disabled by default, but malware can enable it to recover the plain text passwords from the system’s memory | |
| reg add "HKLM\System\CurrentControlSet\Control\SecurityProviders\WDigest" /v "UseLogonCredential" /t REG_DWORD /d "0" /f | |
| rem No-one will be a member of the built-in group, although it will still be visible in the Object Picker / 1 - all users logging on to a session on the server will be made a member of the TERMINAL SERVER USER group | |
| reg add "HKLM\System\CurrentControlSet\Control\Terminal Server" /v "TSUserEnabled" /t REG_DWORD /d "0" /f | |
| rem =================================== Windows Policies =================================== | |
| rem --------------------------------- User Account Control --------------------------------- | |
| rem https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/dd835564(v=ws.10) | |
| rem Reason to set UAC to Always Notify - https://technet.microsoft.com/en-us/library/2009.07.uac.aspx#id0560031 | |
| rem 0 - Elevate without prompting / 1 - Prompt for credentials on the secure desktop / 2 - Prompt for consent on the secure desktop / 3 - Prompt for credentials / 4 - Prompt for consent / 5 (Default) - Prompt for consent for non-Windows binaries | |
| reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "ConsentPromptBehaviorAdmin" /t REG_DWORD /d "1" /f | |
| rem 0 - Automatically deny elevation requests / 1 - Prompt for credentials on the secure desktop / 3 (Default) - Prompt for credentials | |
| reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "ConsentPromptBehaviorUser" /t REG_DWORD /d "0" /f | |
| rem 2 (Default) | |
| reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableFullTrustStartupTasks" /t REG_DWORD /d "0" /f | |
| rem Detect application installations and prompt for elevation / 1 - Enabled (default for home) / 0 - Disabled (default for enterprise) | |
| reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableInstallerDetection" /t REG_DWORD /d "1" /f | |
| rem Run all administrators in Admin Approval Mode / 0 - Disabled (UAC) / 1 - Enabled (UAC) | |
| reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableLUA" /t REG_DWORD /d "1" /f | |
| rem Only elevate UIAccess applications that are installed in secure locations / 0 - Disabled / 1 (Default) - Enabled | |
| reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableSecureUIAPaths" /t REG_DWORD /d "1" /f | |
| rem 0 (Default) = Disabled / 1 - Enabled | |
| reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableUwpStartupTasks" /t REG_DWORD /d "0" /f | |
| rem Allow UIAccess applications to prompt for elevation without using the secure desktop / 0 (Default) = Disabled / 1 - Enabled | |
| reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableUIADesktopToggle" /t REG_DWORD /d "0" /f | |
| rem https://technet.microsoft.com/en-us/itpro/windows/keep-secure/deploy-device-guard-enable-virtualization-based-security | |
| rem 0 - Disabled / 1 - Enabled (Default) | |
| reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableVirtualization" /t REG_DWORD /d "0" /f | |
| rem Admin Approval Mode for the built-in Administrator account / 0 (Default) - Disabled / 1 - Enabled | |
| reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "FilterAdministratorToken" /t REG_DWORD /d "1" /f | |
| rem Allow UIAccess applications to prompt for elevation without using the secure desktop / 0 (Default) - Disabled / 1 - Enabled | |
| reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "PromptOnSecureDesktop" /t REG_DWORD /d "1" /f | |
| rem Enforce cryptographic signatures on any interactive application that requests elevation of privilege / 0 (Default) - Disabled / 1 - Enabled | |
| reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "ValidateAdminCodeSignatures" /t REG_DWORD /d "1" /f | |
| rem 1 - Enable command-line auditing | |
| reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\Audit" /v "ProcessCreationIncludeCmdLine_Enabled" /t REG_DWORD /d "1" /f | |
| rem =============================== Windows Scheduled Tasks ================================ | |
| rem https://enigma0x3.net/2016/07/22/bypassing-uac-on-windows-10-using-disk-cleanup | |
| rem schtasks /Change /TN "Microsoft\Windows\TextServicesFramework\MsCtfMonitor" /Enable | |
| rem schtasks /Run /TN "Microsoft\Windows\TextServicesFramework\MsCtfMonitor" | |
| rem schtasks /Change /TN "Microsoft\Office\OfficeBackgroundTaskHandlerRegistration" /Disable | |
| rem schtasks /End /TN "Microsoft\Office\OfficeBackgroundTaskHandlerRegistration" | |
| rem Disable Background Synchronization (permanently, it can not be disabled) | |
| rem schtasks /DELETE /TN "Microsoft\Windows\SettingSync\BackgroundUploadTask" /f | |
| schtasks /DELETE /TN "Adobe Flash Player PPAPI Notifier" /f | |
| schtasks /DELETE /TN "Driver Easy Scheduled Scan" /f | |
| schtasks /DELETE /TN "GPU Tweak II" /f | |
| schtasks /DELETE /TN "klcp_update" /f | |
| schtasks /DELETE /TN "StartDVR" /f | |
| schtasks /DELETE /TN "StartCN" /f | |
| schtasks /DELETE /TN "TrackerAutoUpdate" /f | |
| schtasks /DELETE /TN "Yandex Browser system update" /f | |
| schtasks /DELETE /TN "Yandex Browser update" /f | |
| schtasks /Change /TN "CreateExplorerShellUnelevatedTask" /Enable | |
| schtasks /Change /TN "Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 64" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 64 Critical" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 Critical" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\ApplicationData\CleanupTemporaryState" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\ApplicationData\DsSvcCleanup" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\Application Experience\ProgramDataUpdater" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\Application Experience\StartupAppTask" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\Autochk\Proxy" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\BrokerInfrastructure\BgTaskRegistrationMaintenanceTask" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\CloudExperienceHost\CreateObjectTask" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\Customer Experience Improvement Program\Consolidator" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\Customer Experience Improvement Program\KernelCeipTask" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\Customer Experience Improvement Program\UsbCeip" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\Device Information\Device" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\Defrag\ScheduledDefrag" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\Diagnosis\Scheduled" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\DiskCleanup\SilentCleanup" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\DiskFootprint\Diagnostics" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\DiskFootprint\StorageSense" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\DUSM\dusmtask" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\EnterpriseMgmt\MDMMaintenenceTask" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\Feedback\Siuf\DmClient" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\Feedback\Siuf\DmClientOnScenarioDownload" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\FileHistory\File History (maintenance mode)" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\HelloFace\FODCleanupTask" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\LanguageComponentsInstaller\Installation" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\LanguageComponentsInstaller\ReconcileLanguageResources" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\LanguageComponentsInstaller\Uninstallation" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\Location\Notifications" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\Location\WindowsActionDialog" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\Management\Provisioning\Cellular" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\Management\Provisioning\Logon" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\Maintenance\WinSAT" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\Maps\MapsToastTask" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\Maps\MapsUpdateTask" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\Multimedia\SystemSoundsService" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\NlaSvc\WiFiTask" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\NetTrace\GatherNetworkInfo" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\PI\Sqm-Tasks" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\Power Efficiency Diagnostics\AnalyzeSystem" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\Printing\EduPrintProv" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\PushToInstall\Registration" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\Ras\MobilityManager" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\RecoveryEnvironment\VerifyWinRE" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\RetailDemo\CleanupOfflineContent" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\Servicing\StartComponentCleanup" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\SettingSync\BackgroundUploadTask" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\SettingSync\BackupTask" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\SettingSync\NetworkStateChangeTask" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\Setup\SetupCleanupTask" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\SpacePort\SpaceAgentTask" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\SpacePort\SpaceManagerTask" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\Speech\HeadsetButtonPress" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\Speech\SpeechModelDownloadTask" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\Storage Tiers Management\Storage Tiers Management Initialization" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\Sysmain\ResPriStaticDbSync" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\Sysmain\WsSwapAssessmentTask" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\Time Synchronization\ForceSynchronizeTime" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\Time Synchronization\SynchronizeTime" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\Time Zone\SynchronizeTimeZone" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\TPM\Tpm-HASCertRetr" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\TPM\Tpm-Maintenance" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\UPnP\UPnPHostConfig" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\USB\Usb-Notifications" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\User Profile Service\HiveUploadTask" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\WCM\WiFiTask" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\Windows Media Sharing\UpdateLibrary" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\Work Folders\Work Folders Logon Synchronization" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\Work Folders\Work Folders Maintenance Work" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\Workplace Join\Automatic-Device-Join" /Disable | |
| schtasks /Change /TN "Microsoft\Windows\WwanSvc\NotificationTask" /Disable | |
| rem ================================== Windows Services ==================================== | |
| rem Security Accounts Manager has to be disabled Manually via services.msc | |
| rem Disabling Windows Update will do nothing, but if you disable a service, it is dependent on, it will fail to start or check for updates, obviously | |
| rem Application Information / required by UAC | |
| rem AppX Deployment Service (AppXSVC) / required by Store | |
| rem Background Intelligent Transfer Service / required by Windows Updates / depends on Network List Service (starts even when disabled) | |
| rem Base Filtering Engine / required by Windows Defender Firewall | |
| rem CNG Key Isolation / required to login to Windows Insider / Switch to Local Account / Set up PIN / Basically everything Credentials related | |
| rem Credential Manager / required to store credentials (check User Accounts - Credential Manager) / required by apps like Windows Mail to store passwords / An administrator has blocked you from running this app. | |
| rem Delivery Optimization / required by Windows Updates | |
| rem Diagnostic Policy Service / required by Windows Diagnostic (Troubleshooting) | |
| rem DHCP Client / required by Windows Updates (0x80240022) | |
| rem Distributed Link Tracking Client / sometimes required to open shortcuts and System apps - "Windows cannot access the specified device, path, or file. You may not have the appropriate permission to access the item" | |
| rem Geolocation Service / required by some Windows Store apps, it can not be enabled when Connected User Experiences and Telemetry is disabled | |
| rem Microsoft Account Sign-in Assistant / required to login to Microsoft Account | |
| rem Network Connections / required to manage Network Connections | |
| rem Network Connection Broker / required and to change Network Settings | |
| rem Network List Service / required by Windows Update and to change Network Settings | |
| rem Network Location Awareness / required by Windows Update and Windows Defender Firewall | |
| rem Network Store Interface Service / disabling disables Windows Firewall and can cause BSOD - Critical Service Failed | |
| rem Print Spooler / required by printers | |
| rem Radio Management Service / required to display WiFi networks | |
| rem Web Account Manager / required to login to Microsoft Account/Store | |
| rem Windows Biometric Service / required by biometric devices like a fingerprint reader | |
| rem Windows Connection Manager / required by WiFi and Data Usage and Windows Update (starts even when disabled) | |
| rem Windows Defender Firewall (Base Filtering Engine/Network Location Awareness) / required by Windows Update and Store Apps (0x80073d0a) | |
| rem Windows Driver Foundation - User-mode Driver Framework / required by some drivers like USB devices | |
| rem Windows Image Acquisition (WIA) / required by scanners | |
| rem Windows Management Instrumentation / required by wmic commands / disabled to prevent fileless malware | |
| rem Adobe Flash Player Update Service | |
| sc config AdobeFlashPlayerUpdateSvc start= disabled | |
| rem AdaptiveSleepService | |
| sc config AdaptiveSleepService start= disabled | |
| rem AMD External Events Utility | |
| sc config "AMD External Events Utility" start= disabled | |
| rem ASUS HM Com Service | |
| sc config ALG start= disabled | |
| rem ASUS Com Service | |
| sc config asComSvc start= disabled | |
| rem Application Layer Gateway Service | |
| sc config asHmComSvc start= disabled | |
| rem AppX Deployment Service (AppXSVC) | |
| reg add "HKLM\System\CurrentControlSet\Services\AppXSvc" /v "Start" /t REG_DWORD /d "4" /f | |
| rem Background Intelligent Transfer Service | |
| rem https://www.secureworks.com/blog/malware-lingers-with-bits | |
| sc config BITS start= demand | |
| rem Base Filtering Engine | |
| reg add "HKLM\System\CurrentControlSet\Services\BFE" /v "Start" /t REG_DWORD /d "2" /f | |
| rem Beep | |
| sc config Beep start= disabled | |
| rem BitLocker Drive Encryption Service | |
| sc config BDESVC start= disabled | |
| rem Capability Access Manager Service | |
| sc config camsvc start= disabled | |
| rem CDPUserSvc | |
| sc config CDPUserSvc start= disabled | |
| rem Certificate Propagation | |
| sc config CertPropSvc start= disabled | |
| rem CNG Key Isolation | |
| sc config KeyIso start= disabled | |
| rem COM+ Event System | |
| sc config EventSystem start= disabled | |
| rem Connected User Experiences and Telemetry | |
| sc config DiagTrack start= disabled | |
| rem Contact Data | |
| reg add "HKLM\System\CurrentControlSet\Services\PimIndexMaintenanceSvc" /v "Start" /t REG_DWORD /d "4" /f | |
| rem Credential Manager | |
| sc config VaultSvc start= disabled | |
| rem Cryptographic Services | |
| sc config VaultSvc start= demand | |
| rem Data Usage | |
| sc config DusmSvc start= disabled | |
| rem Delivery Optimization | |
| sc config DoSvc start= disabled | |
| rem DHCP Client | |
| sc config Dhcp start= auto | |
| rem Diagnostic Policy Service | |
| sc config DPS start= disabled | |
| rem Diagnostic Hub (Privacy/Telemetry) | |
| sc config diagnosticshub.standardcollector.service start= disabled | |
| rem Distributed Link Tracking Client | |
| sc config TrkWks start= demand | |
| rem Distributed Transaction Coordinator | |
| sc config MSDTC start= disabled | |
| rem dmwappushsvc | |
| sc config dmwappushservice start= disabled | |
| rem DNS Client (Required by the internet connection, unless you set up DNS servers manually in IPv4/6's properties) | |
| reg add "HKLM\System\CurrentControlSet\Services\Dnscache" /v "Start" /t REG_DWORD /d "4" /f | |
| rem Encrypting File System (EFS) | |
| sc config EFS start= disabled | |
| rem Function Discovery Provider Host | |
| sc config fdPHost start= disabled | |
| rem Function Discovery Resource Publication | |
| sc config FDResPub start= disabled | |
| rem Geolocation Service | |
| sc config lfsvc start= disabled | |
| rem HomeGroup Provider | |
| sc config HomeGroupProvider start= disabled | |
| rem IKE and AuthIP IPsec Keying Modules | |
| sc config IKEEXT start= disabled | |
| rem IP Helper | |
| sc config iphlpsvc start= disabled | |
| rem IPsec Policy Agent | |
| sc config PolicyAgent start= disabled | |
| rem Network Connections | |
| sc config Netman start= demand | |
| rem Network List Service | |
| sc config netprofm start= disabled | |
| rem Network Location Awareness | |
| sc config NlaSvc start= auto | |
| rem Network Store Interface Service | |
| sc config nsi start= auto | |
| rem Offline Files | |
| sc config CscService start= disabled | |
| rem Optimize drives | |
| sc config defragsvc start= disabled | |
| rem Portable Device Enumerator Service | |
| sc config WPDBusEnum start= disabled | |
| rem Print Spooler | |
| sc config Spooler start= disabled | |
| rem Program Compatibility Assistant Service | |
| sc config PcaSvc start= disabled | |
| rem Radio Management Service | |
| sc config RmSvc start= disabled | |
| rem Remote Access Connection Manager | |
| sc config RasMan start= disabled | |
| rem Remote Desktop Services | |
| sc config TermService start= disabled | |
| rem Retail Demo | |
| sc config RetailDemo start=disabled | |
| rem Secure Socket Tunneling Protocol Service | |
| sc config SstpSvc start= disabled | |
| rem Security Centre | |
| reg add "HKLM\System\CurrentControlSet\Services\wscsvc" /v "Start" /t REG_DWORD /d "4" /f | |
| rem Server | |
| sc config LanmanServer start= disabled | |
| rem Shell Hardware Detection | |
| sc config ShellHWDetection start= disabled | |
| rem Smart Card | |
| sc config SCardSvr start= disabled | |
| rem Storage Service | |
| sc config StorSvc start= disabled | |
| rem SSDP Discovery | |
| sc config SSDPSRV start= disabled | |
| rem Superfetch | |
| sc config SysMain start= disabled | |
| rem System Guard Runtime Monitor Broker | |
| reg add "HKLM\System\CurrentControlSet\Services\SgrmBroker" /v "Start" /t REG_DWORD /d "4" /f | |
| rem TCP/IP NetBIOS Helper (Required by some internet connections like aDSL) | |
| sc config lmhosts start= disabled | |
| rem TeamViewer | |
| sc config TeamViewer start= disabled | |
| rem Themes | |
| sc config Themes start= disabled | |
| rem Tile Data model server | |
| reg add "HKLM\System\CurrentControlSet\Services\tiledatamodelsvc" /v "Start" /t REG_DWORD /d "4" /f | |
| rem Touch Keyboard and Handwriting Panel Service (keeps ctfmon.exe running) | |
| sc config TabletInputService start= disabled | |
| rem User Data Access | |
| reg add "HKLM\System\CurrentControlSet\Services\UserDataSvc" /v "Start" /t REG_DWORD /d "4" /f | |
| rem User Data Storage | |
| reg add "HKLM\System\CurrentControlSet\Services\UnistoreSvc" /v "Start" /t REG_DWORD /d "4" /f | |
| rem Web Account Manager | |
| sc config TokenBroker start= disabled | |
| rem WebClient | |
| sc config WebClient start= disabled | |
| rem Windows Biometric Service | |
| sc config WbioSrvc start= disabled | |
| rem Windows Connect Now - Config Registrar (Required by WPS WiFi connection) | |
| sc config wcncsvc start= disabled | |
| rem Windows Connection Manager | |
| sc config Wcmsvc start= disabled | |
| rem Windows Defender Firewall | |
| reg add "HKLM\System\CurrentControlSet\Services\MpsSvc" /v "Start" /t REG_DWORD /d "2" /f | |
| rem Windows Font Cache Service | |
| sc config FontCache start= disabled | |
| rem Windows Management Instrumentation | |
| rem https://gbhackers.com/fileless-malware-wmi-eternalblue | |
| sc config Winmgmt start= disabled | |
| rem Windows Network Data Usage Monitoring Driver service (Kernel mode driver) | |
| sc config ndu start= disabled | |
| rem Windows Image Acquisition (WIA) | |
| sc config stisvc start= disabled | |
| rem Windows Insider Service | |
| sc config wisvc start= disabled | |
| rem Windows Push Notifications System Service | |
| reg add "HKLM\System\CurrentControlSet\Services\WpnUserService" /v "Start" /t REG_DWORD /d "4" /f | |
| sc config WpnService start= disabled | |
| rem Windows PushToInstall Service | |
| sc config PushToInstall start= disabled | |
| rem Windows Remote Management (WS-Management) | |
| sc config WinRM start= disabled | |
| rem Windows Search | |
| sc config WSearch start= disabled | |
| rem Windows Time | |
| sc config W32Time start= disabled | |
| rem Windows Update | |
| sc config wuauserv start= disabled | |
| rem WinHTTP Web Proxy Auto-Discovery Service | |
| reg add "HKLM\System\CurrentControlSet\Services\WinHttpAutoProxySvc" /v "Start" /t REG_DWORD /d "4" /f | |
| rem WMPNetworkSVC helps windows media player to share its library with network | |
| sc config WMPNetworkSvc start= disabled | |
| rem Workstation | |
| sc config LanmanWorkstation start= disabled | |
| rem WPS Office Cloud Service | |
| sc config wpscloudsvr start= disabled | |
| rem Yandex.Browser Update Service | |
| sc config YandexBrowserService start= disabled | |
| rem Yandex Protect Service | |
| sc config ycssrv start= disabled | |
| rem =================================== Windows Settings =================================== | |
| rem -------------------------------------- Accounts ---------------------------------------- | |
| rem ................................. Sync your settings ................................... | |
| rem 1 - Disable sync settings | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\SettingSync" /v "DisableSettingSyncUserOverride" /t REG_DWORD /d "1" /f | |
| rem 2 - Disable sync / 1 - Enable | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\SettingSync" /v "DisableSettingSync" /t REG_DWORD /d "2" /f | |
| rem Individual sync settings | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\SettingSync\Groups\Accessibility" /v "Enabled" /t REG_DWORD /d "0" /f | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\SettingSync\Groups\AppSync" /v "Enabled" /t REG_DWORD /d "0" /f | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\SettingSync\Groups\BrowserSettings" /v "Enabled" /t REG_DWORD /d "0" /f | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\SettingSync\Groups\Credentials" /v "Enabled" /t REG_DWORD /d "0" /f | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\SettingSync\Groups\DesktopTheme" /v "Enabled" /t REG_DWORD /d "0" /f | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\SettingSync\Groups\Language" /v "Enabled" /t REG_DWORD /d "0" /f | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\SettingSync\Groups\PackageState" /v "Enabled" /t REG_DWORD /d "0" /f | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\SettingSync\Groups\Personalization" /v "Enabled" /t REG_DWORD /d "0" /f | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\SettingSync\Groups\StartLayout" /v "Enabled" /t REG_DWORD /d "0" /f | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\SettingSync\Groups\Windows" /v "Enabled" /t REG_DWORD /d "0" /f | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\SettingSync" /v "DisableAppSyncSettingSync" /t REG_DWORD /d "2" /f | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\SettingSync" /v "DisableAppSyncSettingSyncUserOverride" /t REG_DWORD /d "1" /f | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\SettingSync" /v "DisableApplicationSettingSync" /t REG_DWORD /d "2" /f | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\SettingSync" /v "DisableApplicationSettingSyncUserOverride" /t REG_DWORD /d "1" /f | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\SettingSync" /v "DisableCredentialsSettingSync" /t REG_DWORD /d "2" /f | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\SettingSync" /v "DisableCredentialsSettingSyncUserOverride" /t REG_DWORD /d "1" /f | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\SettingSync" /v "DisableDesktopThemeSettingSync" /t REG_DWORD /d "2" /f | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\SettingSync" /v "DisableDesktopThemeSettingSyncUserOverride" /t REG_DWORD /d "1" /f | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\SettingSync" /v "DisablePersonalizationSettingSync" /t REG_DWORD /d "2" /f | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\SettingSync" /v "DisablePersonalizationSettingSyncUserOverride" /t REG_DWORD /d "1" /f | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\SettingSync" /v "DisableStartLayoutSettingSync" /t REG_DWORD /d "2" /f | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\SettingSync" /v "DisableStartLayoutSettingSyncUserOverride" /t REG_DWORD /d "1" /f | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\SettingSync" /v "DisableSyncOnPaidNetwork" /t REG_DWORD /d 1 /f | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\SettingSync" /v "DisableWebBrowserSettingSync" /t REG_DWORD /d "2" /f | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\SettingSync" /v "DisableWebBrowserSettingSyncUserOverride" /t REG_DWORD /d "1" /f | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\SettingSync" /v "DisableWindowsSettingSync" /t REG_DWORD /d "2" /f | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\SettingSync" /v "DisableWindowsSettingSyncUserOverride" /t REG_DWORD /d "1" /f | |
| rem =================================== Windows Settings =================================== | |
| rem ---------------------------------------- Apps ------------------------------------------ | |
| rem ................................... Apps & features .................................... | |
| rem Choode where you can get apps from - Anywhere / PreferStore / StoreOnly | |
| reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer" /v "AicEnabled" /t REG_SZ /d "Anywhere" /f | |
| rem =================================== Windows Settings =================================== | |
| rem ---------------------------------------- Apps ------------------------------------------ | |
| rem ................................... Apps & features .................................... | |
| rem . . . . . . . . . . . . . . . . Programs and Features . . . . . . . . . . . . . . . . . | |
| rem Dism /Online /Get-Features | |
| rem Windows Basics | |
| rem =================================== Windows Settings =================================== | |
| rem --------------------------------------- Devices ---------------------------------------- | |
| rem ....................................... Autoplay ....................................... | |
| rem 0 - Use Autoplay for all media and devices | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers" /v "DisableAutoplay" /t REG_DWORD /d "1" /f | |
| rem ________________________________________________________________________________________ | |
| rem Disable AutoPlay and AutoRun | |
| reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v "NoAutorun" /t REG_DWORD /d "1" /f | |
| reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v "NoDriveTypeAutoRun" /t REG_DWORD /d "255" /f | |
| rem =================================== Windows Settings =================================== | |
| rem --------------------------------------- Devices ---------------------------------------- | |
| rem ........................................ Mouse ......................................... | |
| rem . . . . . . . . . . . . . . . . Additional mouse options . . . . . . . . . . . . . . . . | |
| rem 1/6/10 - Enhance pointer precision (Mouse Acceleration) | |
| reg add "HKCU\Control Panel\Mouse" /v "MouseSpeed" /t REG_SZ /d "0" /f | |
| reg add "HKCU\Control Panel\Mouse" /v "MouseThreshold1" /t REG_SZ /d "0" /f | |
| reg add "HKCU\Control Panel\Mouse" /v "MouseThreshold2" /t REG_SZ /d "0" /f | |
| rem ________________________________________________________________________________________ | |
| reg add "HKCU\Control Panel\Mouse" /v "MouseTrails" /t REG_SZ /d "0" /f | |
| rem =================================== Windows Settings =================================== | |
| rem --------------------------------------- Devices ---------------.------------------------- | |
| rem ....................................... Typing ........................................ | |
| rem Autocorrect misspelled words (Privacy) | |
| reg add "HKCU\Software\Microsoft\TabletTip\1.7" /v "EnableAutocorrection" /t REG_DWORD /d "0" /f | |
| rem Highlight misspelled words (Privacy) | |
| reg add "HKCU\Software\Microsoft\TabletTip\1.7" /v "EnableSpellchecking" /t REG_DWORD /d "0" /f | |
| rem Show text suggestions as I type on the software keyboard (Privacy) | |
| reg add "HKCU\Software\Microsoft\TabletTip\1.7" /v "EnableTextPrediction" /t REG_DWORD /d "0" /f | |
| rem Add a space after I choose a text suggestion (Privacy) | |
| reg add "HKCU\Software\Microsoft\TabletTip\1.7" /v "EnablePredictionSpaceInsertion" /t REG_DWORD /d "0" /f | |
| rem Add a period after I double-tap the Spacebar (Privacy) | |
| reg add "HKCU\Software\Microsoft\TabletTip\1.7" /v "EnableDoubleTapSpace" /t REG_DWORD /d "0" /f | |
| rem =================================== Windows Settings =================================== | |
| rem --------------------------------------- Devices ---------------.------------------------- | |
| rem .................................. Pen & Windows Ink .................................... | |
| rem Show recommended app suggestions (Privacy) | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\PenWorkspace" /v "PenWorkspaceAppSuggestionsEnabled" /t REG_DWORD /d "0" /f | |
| rem =================================== Windows Settings =================================== | |
| rem ------------------------------------ Easy of Access ------------------------------------ | |
| rem ....................................... Keyboard ....................................... | |
| rem Sticky Keys / 26 - Disable All / 511 - Default | |
| reg add "HKCU\Control Panel\Accessibility\StickyKeys" /v "Flags" /t REG_SZ /d "26" /f | |
| rem Toggle Keys / 58 - Disable All / 63 - Default | |
| reg add "HKCU\Control Panel\Accessibility\ToggleKeys" /v "Flags" /t REG_SZ /d "58" /f | |
| rem =================================== Windows Settings =================================== | |
| rem ------------------------------------ Easy of Access ------------------------------------ | |
| rem ........................................ Mouse ........................................ | |
| rem Mouse Keys / 254 - Disable / 255 - Default | |
| reg add "HKCU\Control Panel\Accessibility\MouseKeys" /v "Flags" /t REG_SZ /d "254" /f | |
| rem =================================== Windows Settings =================================== | |
| rem ---------------------------------------- Gaming ---------------------------------------- | |
| rem ....................................... Game bar ....................................... | |
| rem 1 - Record game clips, screenshots, and broadcast using Game bar / Disable the message "Press Win + G to open Game bar" | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\GameDVR" /v "AppCaptureEnabled" /t REG_DWORD /d "0" /f | |
| rem 1 - Open Game bar using this button on a controller | |
| reg add "HKCU\Software\Microsoft\GameBar" /v "UseNexusForGameBarEnabled" /t REG_DWORD /d "0" /f | |
| rem =================================== Windows Settings =================================== | |
| rem ---------------------------------------- Gaming ---------------------------------------- | |
| rem ....................................... Game DVR ....................................... | |
| rem ________________________________________________________________________________________ | |
| rem 1 - Show tips when I start a game (ADs) | |
| reg add "HKCU\Software\Microsoft\GameBar" /v "ShowStartupPanel" /t REG_DWORD /d "0" /f | |
| rem 0 - Disable Fullscreen Optimizations for Current User / 0 - Enabled / 2 - Disabled | |
| reg add "HKCU\System\GameConfigStore" /v "GameDVR_FSEBehavior" /t REG_DWORD /d "2" /f | |
| reg add "HKCU\System\GameConfigStore" /v "GameDVR_HonorUserFSEBehaviorMode" /t REG_DWORD /d "2" /f | |
| rem 0 - Disable Game DVR / "Press Win + G to record a clip" | |
| reg add "HKCU\System\GameConfigStore" /v "GameDVR_Enabled" /t REG_DWORD /d "0" /f | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\GameDVR" /v "AllowgameDVR" /t REG_DWORD /d "0" /f | |
| reg add "HKLM\System\CurrentControlSet\Services\BcastDVRUserService" /v "Start" /t REG_DWORD /d "4" /f | |
| reg add "HKLM\System\CurrentControlSet\Services\xbgm" /v "Start" /t REG_DWORD /d "4" /f | |
| sc config XblAuthManager start= disabled | |
| sc config XblGameSave start= disabled | |
| sc config XboxGipSvc start= disabled | |
| sc config XboxNetApiSvc start= disabled | |
| schtasks /Change /TN "Microsoft\XblGameSave\XblGameSaveTask" /Disable | |
| rem Remove Game Bar Presence (to restore run "sfc /scannow") | |
| takeown /f "%WinDir%\System32\GameBarPresenceWriter.exe" /a | |
| icacls "%WinDir%\System32\GameBarPresenceWriter.exe" /grant:r Administrators:F /c | |
| taskkill /im GameBarPresenceWriter.exe /f | |
| del "%WinDir%\System32\GameBarPresenceWriter.exe" /s /f /q | |
| reg add "HKCU\Software\Microsoft\GameBar" /v "UseNexusForGameBarEnabled" /t REG_DWORD /d "0" /f | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\GameDVR" /v "AppCaptureEnabled" /t REG_DWORD /d "0" /f | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\GameDVR" /v "AudioCaptureEnabled" /t REG_DWORD /d "0" /f | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\GameDVR" /v "CursorCaptureEnabled" /t REG_DWORD /d "0" /f | |
| rem =================================== Windows Settings =================================== | |
| rem ---------------------------------------- Gaming ---------------------------------------- | |
| rem ....................................... Game Mode ...................................... | |
| rem 0 - Disable support for Game Mode | |
| reg add "HKCU\Software\Microsoft\GameBar" /v "AutoGameModeEnabled" /t REG_DWORD /d "0" /f | |
| rem 1 - Use Game Mode | |
| reg add "HKCU\Software\Microsoft\GameBar" /v "AllowAutoGameMode" /t REG_DWORD /d "0" /f | |
| rem =================================== Windows Settings =================================== | |
| rem ---------------------------------- Network & Internet ---------------------------------- | |
| rem ................................ Change adapter options ................................ | |
| rem Windows wmic command line command | |
| rem http://www.computerhope.com/wmic.htm | |
| rem To get adapter's index number use | |
| rem wmic nicconfig get caption,index,TcpipNetbiosOptions | |
| rem Disable IPv6 | |
| netsh int ipv6 isatap set state disabled | |
| netsh int teredo set state disabled | |
| netsh interface ipv6 6to4 set state state=disabled undoonstop=disabled | |
| reg add "HKLM\System\CurrentControlSet\Services\Tcpip6\Parameters" /v "DisabledComponents" /t REG_DWORD /d "255" /f | |
| rem Setup DNS Servers on DHCP Enabled Network (CloudflareDNS) | |
| wmic nicconfig where DHCPEnabled=TRUE call SetDNSServerSearchOrder ("1.1.1.1") | |
| rem Setup IP, Gateway and DNS Servers based on the MAC address (To Enable DHCP: wmic nicconfig where macaddress="28:E3:47:18:70:3D" call enabledhcp) | |
| wmic nicconfig where macaddress="D0:17:C2:D0:30:DC" call EnableStatic ("10.10.10.12"), ("255.255.255.248") | |
| wmic nicconfig where macaddress="D0:17:C2:D0:30:DC" call SetDNSServerSearchOrder ("156.154.71.2,156.154.70.2") | |
| wmic nicconfig where macaddress="D0:17:C2:D0:30:DC" call SetGateways ("10.10.10.10") | |
| rem 0 - Disable LMHOSTS Lookup on all adapters / 1 - Enable | |
| reg add "HKLM\System\CurrentControlSet\Services\NetBT\Parameters" /v "EnableLMHOSTS" /t REG_DWORD /d "0" /f | |
| rem 2 - Disable NetBIOS over TCP/IP on all adapters / 1 - Enable / 0 - Default | |
| wmic nicconfig where TcpipNetbiosOptions=0 call SetTcpipNetbios 2 | |
| wmic nicconfig where TcpipNetbiosOptions=1 call SetTcpipNetbios 2 | |
| rem ________________________________________________________________________________________ | |
| rem https://msdn.microsoft.com/en-us/library/windows/desktop/aa383928(v=vs.85).aspx | |
| rem https://www.codeproject.com/articles/1158641/windows-continuous-disk-write-plus-webcachev-dat-p | |
| rem Disable WinInetCacheServer (WinINet Caching/V01.log/WebCacheV01.dat) | |
| rem %LocalAppData%\Microsoft\Windows\WebCache | |
| rem Take Ownership of the Registry key - https://www.youtube.com/watch?v=M1l5ifYKefg | |
| reg delete "HKCR\AppID\{3eb3c877-1f16-487c-9050-104dbcd66683}" /f | |
| reg delete "HKCR\CLSID\{0358b920-0ac7-461f-98f4-58e32cd89148}" /v "AppID" /f | |
| reg delete "HKCR\Wow6432Node\AppID\{3eb3c877-1f16-487c-9050-104dbcd66683}" /f | |
| reg delete "HKCR\Wow6432Node\CLSID\{0358b920-0ac7-461f-98f4-58e32cd89148}" /v "AppID" /f | |
| reg delete "HKLM\SOFTWARE\Wow6432Node\Classes\AppID\{3eb3c877-1f16-487c-9050-104dbcd66683}" /f | |
| reg delete "HKLM\SOFTWARE\Wow6432Node\Classes\CLSID\{0358b920-0ac7-461f-98f4-58e32cd89148}" /v "AppID" /f | |
| schtasks /Change /TN "Microsoft\Windows\Wininet\CacheTask" /Disable | |
| rem 0 - Disable WiFi Sense (shares your WiFi network login with other people) | |
| reg add "HKLM\Software\Microsoft\PolicyManager\default\WiFi\AllowAutoConnectToWiFiSenseHotspots" /v "value" /t REG_DWORD /d "0" /f | |
| reg add "HKLM\Software\Microsoft\PolicyManager\default\WiFi\AllowWiFiHotSpotReporting" /v "value" /t REG_DWORD /d "0" /f | |
| reg add "HKLM\Software\Microsoft\WcmSvc\wifinetworkmanager\config" /v "AutoConnectAllowedOEM" /t REG_DWORD /d "0" /f | |
| rem =================================== Windows Settings =================================== | |
| rem ----------------------------------- Personalization ------------------------------------ | |
| rem ..................................... Background ....................................... | |
| rem Choose your picture (Black/Dark recommended) | |
| reg add "HKCU\Control Panel\Desktop" /v "Wallpaper" /t REG_SZ /d "E:\Software\Temp\Pics\Wallpaper.jpg" /f | |
| rem Choose a fit / 10 - Fill / 6 - Fit / 2 - Stretch / 0 - Tile/Center | |
| reg add "HKCU\Control Panel\Desktop" /v "WallpaperStyle" /t REG_SZ /d "2" /f | |
| rem ________________________________________________________________________________________ | |
| rem 60-100% Wallpaper's image quality / 85 - Default | |
| reg add "HKCU\Control Panel\Desktop" /v "JPEGImportQuality" /t REG_DWORD /d "100" /f | |
| rem =================================== Windows Settings =================================== | |
| rem ----------------------------------- Personalization ------------------------------------ | |
| rem ....................................... Colors ......................................... | |
| rem 1 - Automatically pick an accent color from my background | |
| reg add "HKCU\Control Panel\Desktop" /v "AutoColorization" /t REG_SZ /d "0" /f | |
| rem 1 - Transparency Effects | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize" /v "EnableTransparency" /t REG_DWORD /d "0" /f | |
| rem 1 - Show accent color on the following surfaces - Start, taskbar, and action center | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize" /v "ColorPrevalence" /t REG_DWORD /d "1" /f | |
| rem 1 - Show accent color on the following surfaces - Title bars | |
| reg add "HKCU\Software\Microsoft\Windows\DWM" /v "ColorPrevalence" /t REG_DWORD /d "1" /f | |
| rem =================================== Windows Settings =================================== | |
| rem ----------------------------------- Personalization ------------------------------------ | |
| rem ..................................... Lock screen ...................................... | |
| rem 1 - Get fun facts, tips, tricks, and more on your lock screen (ADs) / Windows Spotlight | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "RotatingLockScreenEnabled" /t REG_DWORD /d "0" /f | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "RotatingLockScreenOverlayEnabled" /t REG_DWORD /d "0" /f | |
| rem ________________________________________________________________________________________ | |
| rem 1 - Disable LockScreen | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\Personalization" /v "NoLockScreen" /t REG_DWORD /d "1" /f | |
| rem 1 - Disable Sign-in Screen Background Image | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\System" /v "DisableLogonBackgroundImage" /t REG_DWORD /d "1" /f | |
| rem 1 - Disable Windows spotlight (provides features such as different background images and text on the lock screen, suggested apps) | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableWindowsConsumerFeatures" /t REG_DWORD /d "1" /f | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableWindowsSpotlightFeatures" /t REG_DWORD /d "1" /f | |
| rem =================================== Windows Settings =================================== | |
| rem ----------------------------------- Personalization ------------------------------------ | |
| rem ..................................... Lock screen ...................................... | |
| rem . . . . . . . . . . . . . . . . . Screen saver settings . . . . . . . . . . . . . . . . | |
| rem 0 - No screen saver is selected / 1 - A screen saver is selected | |
| reg add "HKCU\Control Panel\Desktop" /v "ScreenSaveActive" /t REG_SZ /d "1" /f | |
| rem Specifies whether the screen saver is password-protected / 0 - No / 1 - Yes | |
| reg add "HKCU\Control Panel\Desktop" /v "ScreenSaverIsSecure" /t REG_SZ /d "0" /f | |
| rem Specifies in seconds how long the System remains idle before the screen saver starts | |
| reg add "HKCU\Control Panel\Desktop" /v "ScreenSaveTimeOut" /t REG_SZ /d "250" /f | |
| rem Screensaver - Mystify.scr | |
| reg add "HKCU\Control Panel\Desktop" /v "SCRNSAVE.EXE" /t REG_SZ /d "C:\Windows\System32\Mystify.scr" /f | |
| rem =================================== Windows Settings =================================== | |
| rem ----------------------------------- Personalization ------------------------------------ | |
| rem ........................................ Start ......................................... | |
| rem 1 - Show suggestions occasionally in Start (ADs) | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-338388Enabled" /t REG_DWORD /d "0" /f | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SystemPaneSuggestionsEnabled" /t REG_DWORD /d "0" /f | |
| rem 1 - Show recently opened items in Jump Lists on Start or the taskbar | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "Start_TrackDocs" /t REG_DWORD /d "0" /f | |
| rem =================================== Windows Settings =================================== | |
| rem ----------------------------------- Personalization ------------------------------------ | |
| rem ....................................... Taskbar ........................................ | |
| rem Lock the taskbar | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "TaskbarSizeMove" /t REG_DWORD /d "0" /f | |
| rem Replace Command Prompt with Windows Powershell in the menu when I right-click the start button or press Windows key+X | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "DontUsePowerShellOnWinX" /t REG_DWORD /d "1" /f | |
| rem Combine taskbar buttons / 0 - Always hide labels / 1 - When taskbar is full / 2 - Never | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "TaskbarGlomLevel" /t REG_DWORD /d "0" /f | |
| rem 1 - Show contacts on the taskbar | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\People" /v "PeopleBand" /t REG_DWORD /d "0" /f | |
| rem ________________________________________________________________________________________ | |
| rem 0 - Turn on Quiet Hours in Action Center / Disable/Hide the message: Turn on Windows Security Center service | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings" /v "NOC_GLOBAL_SETTING_TOASTS_ENABLED" /t REG_DWORD /d "0" /f | |
| rem 0 - Hide Task View button | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "ShowTaskViewButton" /t REG_DWORD /d "0" /f | |
| rem 0 - Disable Cortana in Taskbar search | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Search" /v "BingSearchEnabled" /t REG_DWORD /d "0" /f | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Search" /v "CortanaEnabled" /t REG_DWORD /d "0" /f | |
| rem 0 - Hide Taskbar search / 1 - Show search icon / 2 - Show search box | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Search" /v "SearchboxTaskbarMode" /t REG_DWORD /d "0" /f | |
| rem =================================== Windows Settings =================================== | |
| rem ----------------------------------- Personalization ------------------------------------ | |
| rem ....................................... Taskbar ........................................ | |
| rem . . . . . . . . . . . . . Select which icons appear on the taskbar . . . . . . . . . . . | |
| rem 0 - Always show all icons in the notification area / 1 - Hide Inactive Icons | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer" /v "EnableAutoTray" /t REG_DWORD /d "0" /f | |
| rem =================================== Windows Settings =================================== | |
| rem ----------------------------------- Personalization ------------------------------------ | |
| rem ....................................... Taskbar ........................................ | |
| rem . . . . . . . . . . . . . . . . . Turn on system icons . . . . . . . . . . . . . . . . . | |
| rem 1 - Hide Action Center System Tray Icon in Taskbar | |
| reg add "HKCU\Software\Policies\Microsoft\Windows\Explorer" /v "DisableNotificationCenter" /t REG_DWORD /d "1" /f | |
| rem 1 - Hide Action Network System Tray Icon in Taskbar | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v "HideSCANetwork" /t REG_DWORD /d "1" /f | |
| rem 1 - Hide Action Power System Tray Icon in Taskbar | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v "HideSCAPower" /t REG_DWORD /d "0" /f | |
| rem 1 - Hide Volume System Tray Icon in Taskbar | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v "HideSCAVolume" /t REG_DWORD /d "1" /f | |
| rem =================================== Windows Settings =================================== | |
| rem ----------------------------------- Personalization ------------------------------------ | |
| rem ....................................... Themes ......................................... | |
| rem . . . . . . . . . . . . . . . . . Desktop Icon Settings . . . . . . . . . . . . . . . . | |
| rem Hide Control Panel | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel" /v "{5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0}" /t REG_DWORD /d "1" /f | |
| rem Hide Network | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel" /v "{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}" /t REG_DWORD /d "1" /f | |
| rem Hide Recycle Bin | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel" /v "{645FF040-5081-101B-9F08-00AA002F954E}" /t REG_DWORD /d "1" /f | |
| rem Hide Quick access | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel" /v "{679f85cb-0220-4080-b29b-5540cc05aab6}" /t REG_DWORD /d "1" /f | |
| rem Hide This PC | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel" /v "{20D04FE0-3AEA-1069-A2D8-08002B30309D}" /t REG_DWORD /d "1" /f | |
| rem Hide User's Files | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel" /v "{59031a47-3f72-44a7-89c5-5595fe6b30ee}" /t REG_DWORD /d "1" /f | |
| rem =================================== Windows Settings =================================== | |
| rem ----------------------------------- Personalization ------------------------------------ | |
| rem ....................................... Themes ......................................... | |
| rem . . . . . . . . . . . . . . . . . . . . Sounds . . . . . . . . . . . . . . . . . . . . . | |
| rem Delete Windows Default Sounds (Permanently) | |
| reg delete "HKCU\AppEvents\Schemes\Apps" /f | |
| rem When windows detects communicarions activity / 0 - Mute all other sounds / 1 - Reduce all other by 80% / 2 - Reduce all other by 50% / 3 - Do nothing | |
| reg add "HKCU\Software\Microsoft\Multimedia\Audio" /v "UserDuckingPreference" /t REG_DWORD /d "3" /f | |
| rem =================================== Windows Settings =================================== | |
| rem ---------------------------------------- Privacy --------------------------------------- | |
| rem https://technet.microsoft.com/itpro/windows/manage/manage-connections-from-windows-operating-system-components-to-microsoft-services | |
| rem https://msdn.microsoft.com/en-us/windows/hardware/commercialize/customize/mdm/new-in-windows-mdm-enrollment-management#whatsnew10 | |
| rem https://msdn.microsoft.com/en-us/windows/hardware/commercialize/customize/mdm/policy-configuration-service-provider | |
| rem ________________________________________________________________________________________ | |
| rem Disable Cortana | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Search" /v "AllowCortana" /t REG_DWORD /d "0" /f | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Search" /v "CortanaCapabilities" /t REG_SZ /d "" /f | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Search" /v "CortanaConsent" /t REG_DWORD /d "0" /f | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Search" /v "DeviceHistoryEnabled" /t REG_DWORD /d "0" /f | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Search" /v "IsAssignedAccess" /t REG_DWORD /d "0" /f | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Search" /v "IsWindowsHelloActive" /t REG_DWORD /d "0" /f | |
| reg add "HKLM\Software\Microsoft\PolicyManager\default\Experience\AllowCortana" /v "value" /t REG_DWORD /d "0" /f | |
| reg add "HKLM\Software\Policies\Microsoft\SearchCompanion" /v "DisableContentFileUpdates" /t REG_DWORD /d "1" /f | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\Windows Search" /v "AllowCloudSearch" /t REG_DWORD /d "0" /f | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\Windows Search" /v "AllowCortana" /t REG_DWORD /d "0" /f | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\Windows Search" /v "AllowCortanaAboveLock" /t REG_DWORD /d "0" /f | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\Windows Search" /v "AllowSearchToUseLocation" /t REG_DWORD /d "0" /f | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\Windows Search" /v "DisableWebSearch" /t REG_DWORD /d "1" /f | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\Windows Search" /v "DoNotUseWebResults" /t REG_DWORD /d "1" /f | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\Windows Search" /v "ConnectedSearchPrivacy" /t REG_DWORD /d "3" /f | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\Windows Search" /v "ConnectedSearchUseWeb" /t REG_DWORD /d "0" /f | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\Windows Search" /v "ConnectedSearchUseWebOverMeteredConnections" /t REG_DWORD /d "0" /f | |
| rem 1 - Let Cortana respond to "Hey Cortana" | |
| reg add "HKCU\Software\Microsoft\Speech_OneCore\Preferences" /v "VoiceActivationOn" /t REG_DWORD /d "0" /f | |
| rem 1- Let Cortana listen for my commands when I press Windows key + C | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Search" /v "VoiceShortcut" /t REG_DWORD /d "0" /f | |
| rem 1 - Use Cortana even when my device is locked | |
| reg add "HKCU\Software\Microsoft\Speech_OneCore\Preferences" /v "VoiceActivationEnableAboveLockscreen" /t REG_DWORD /d "0" /f | |
| rem Remove Cortana (SearchUI.exe) | |
| takeown /f "%WinDir%\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy" /a /r /d y | |
| icacls "%WinDir%\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy" /inheritance:r /grant:r Administrators:(OI)(CI)F /t /l /q /c | |
| taskkill /im SearchUI.exe /f | |
| rd "%WinDir%\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy" /s /q | |
| rem Disable keyboard input/monitoring in apps like Calc, Edge, Search, Start, Store | |
| schtasks /Change /TN "Microsoft\Windows\TextServicesFramework\MsCtfMonitor" /Disable | |
| rem =================================== Windows Settings =================================== | |
| rem ---------------------------------------- Privacy --------------------------------------- | |
| rem ...................................... Account info .................................... | |
| rem Let apps access my name, picture, and other account info / 0 - Default / 1 - Enabled / 2 - Disabled | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\AppPrivacy" /v "LetAppsAccessAccountInfo" /t REG_DWORD /d "2" /f | |
| rem =================================== Windows Settings =================================== | |
| rem ---------------------------------------- Privacy --------------------------------------- | |
| rem .................................... Background apps .................................. | |
| rem Let apps run in the background / 1 - Enabled / 0 - Disabled | |
| rem reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Search" /v "BackgroundAppGlobalToggle" /t REG_DWORD /d "0" /f | |
| rem Let apps run in the background / 0 - Default / 1 - Enabled / 2 - Disabled | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\AppPrivacy" /v "LetAppsRunInBackground" /t REG_DWORD /d "2" /f | |
| rem =================================== Windows Settings =================================== | |
| rem ---------------------------------------- Privacy --------------------------------------- | |
| rem ....................................... Calendar ....................................... | |
| rem Let Windows apps access contacts / 0 - Default / 1 - Enabled / 2 - Disabled | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\AppPrivacy" /v "LetAppsAccessCalendar" /t REG_DWORD /d "2" /f | |
| rem =================================== Windows Settings =================================== | |
| rem ---------------------------------------- Privacy --------------------------------------- | |
| rem ..................................... Call history ..................................... | |
| rem Let apps access my call history / 0 - Default / 1 - Enabled / 2 - Disabled | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\AppPrivacy" /v "LetAppsAccessCallHistory" /t REG_DWORD /d "2" /f | |
| rem =================================== Windows Settings =================================== | |
| rem ---------------------------------------- Privacy --------------------------------------- | |
| rem ........................................ Camera ........................................ | |
| rem Let apps use my camera / 0 - Default / 1 - Enabled / 2 - Disabled | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\AppPrivacy" /v "LetAppsAccessCamera" /t REG_DWORD /d "2" /f | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\AppPrivacy" /v "LetAppsAccessCamera_ForceAllowTheseApps" /t REG_MULTI_SZ /d "" /f | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\AppPrivacy" /v "LetAppsAccessCamera_ForceDenyTheseApps" /t REG_MULTI_SZ /d "" /f | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\AppPrivacy" /v "LetAppsAccessCamera_UserInControlOfTheseApps" /t REG_MULTI_SZ /d "" /f | |
| rem =================================== Windows Settings =================================== | |
| rem ---------------------------------------- Privacy --------------------------------------- | |
| rem ....................................... Contacts ....................................... | |
| rem Let Windows apps access contacts / 0 - Default / 1 - Enabled / 2 - Disabled | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\AppPrivacy" /v "LetAppsAccessContacts" /t REG_DWORD /d "2" /f | |
| rem =================================== Windows Settings =================================== | |
| rem ---------------------------------------- Privacy --------------------------------------- | |
| rem ......................................... Email ........................................ | |
| rem Let apps access and send email / 0 - Default / 1 - Enabled / 2 - Disabled | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\AppPrivacy" /v "LetAppsAccessEmail" /t REG_DWORD /d "2" /f | |
| rem =================================== Windows Settings =================================== | |
| rem ---------------------------------------- Privacy --------------------------------------- | |
| rem ................................. Feedback & diagnostics ............................... | |
| rem Diagnostic and usage data - Select how much data you send to Microsoft / 0 - Security (Not aplicable on Home/Pro, it resets to Basic) / 1 - Basic / 2 - Enhanced (Hidden) / 3 - Full | |
| reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\DataCollection" /v "AllowTelemetry" /t REG_DWORD /d "0" /f | |
| reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Application-Experience/Program-Telemetry" /v "Enabled" /t REG_DWORD /d "0" /f | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\DataCollection" /v "AllowTelemetry" /t REG_DWORD /d "0" /f | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\DataCollection" /v "DoNotShowFeedbackNotifications" /t REG_DWORD /d "1" /f | |
| rem 1 - Let Microsoft provide more tailored experiences with relevant tips and recommendations by using your diagnostic data | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Privacy" /v "TailoredExperiencesWithDiagnosticDataEnabled" /t REG_DWORD /d "0" /f | |
| rem Feedback Frequency - Windows should ask for my feedback: 0 - Never / Removed - Automatically | |
| reg add "HKCU\Software\Microsoft\Siuf\Rules" /v "NumberOfSIUFInPeriod" /t REG_DWORD /d "0" /f | |
| reg add "HKCU\Software\Microsoft\Siuf\Rules" /v "PeriodInNanoSeconds" /t REG_DWORD /d "0" /f | |
| rem =================================== Windows Settings =================================== | |
| rem ---------------------------------------- Privacy --------------------------------------- | |
| rem ........................................ General ...................................... | |
| rem Let apps use advertising ID to make ads more interesting to you based on your app usage | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\AdvertisingInfo" /v "Enabled" /t REG_DWORD /d "0" /f | |
| reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\AdvertisingInfo" /v "Enabled" /t REG_DWORD /d "0" /f | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\AdvertisingInfo" /v "DisabledByGroupPolicy" /t REG_DWORD /d "1" /f | |
| rem 0 - Let websites provide locally relevant content by accessing my language list (let browsers access your local language) | |
| reg add "HKCU\Control Panel\International\User Profile" /v "HttpAcceptLanguageOptOut" /t REG_DWORD /d "1" /f | |
| rem 1 - Let Windows track app launches to improve Start and search results (Remember commands typed in Run) / 0 - Disable and Disable "Show most used apps" | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "Start_TrackProgs" /t REG_DWORD /d "1" /f | |
| rem 1 - Show me suggested content in the Settings app | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-338393Enabled" /t REG_DWORD /d "0" /f | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-353694Enabled" /t REG_DWORD /d "0" /f | |
| rem =================================== Windows Settings =================================== | |
| rem ---------------------------------------- Privacy --------------------------------------- | |
| rem ....................................... Location ....................................... | |
| rem 1 - Location for this device is Off | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\LocationAndSensors" /v "DisableLocation" /t REG_DWORD /d "1" /f | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\LocationAndSensors" /v "DisableLocationScripting" /t REG_DWORD /d "1" /f | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\LocationAndSensors" /v "DisableSensors" /t REG_DWORD /d "1" /f | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\LocationAndSensors" /v "DisableWindowsLocationProvider" /t REG_DWORD /d "1" /f | |
| rem 0 - Turned off and the employee can't turn it back on / 1 - Turned on, but lets the employee choose whether to use it. (default) / 2 - Turned on and the employee can't turn it off. | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\AppPrivacy" /v "LetAppsAccessLocation" /t REG_DWORD /d "0" /f | |
| rem =================================== Windows Settings =================================== | |
| rem ---------------------------------------- Privacy --------------------------------------- | |
| rem ....................................... Messaging ...................................... | |
| rem Let apps read or send messages (text or MMS) / 0 - Default / 1 - Enabled / 2 - Disabled | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\AppPrivacy" /v "LetAppsAccessMessaging" /t REG_DWORD /d "2" /f | |
| rem =================================== Windows Settings =================================== | |
| rem ---------------------------------------- Privacy --------------------------------------- | |
| rem ...................................... Microphone ...................................... | |
| rem Let apps use my microphone / 0 - Default / 1 - Enabled / 2 - Disabled | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\AppPrivacy" /v "LetAppsAccessMicrophone" /t REG_DWORD /d "2" /f | |
| rem =================================== Windows Settings =================================== | |
| rem ---------------------------------------- Privacy --------------------------------------- | |
| rem ..................................... Notifications .................................... | |
| rem Let apps access my notifications / 0 - Default / 1 - Enabled / 2 - Disabled | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\AppPrivacy" /v "LetAppsAccessNotifications" /t REG_DWORD /d "2" /f | |
| rem =================================== Windows Settings =================================== | |
| rem ---------------------------------------- Privacy --------------------------------------- | |
| rem ..................................... Other devices .................................... | |
| rem Let apps automatically share and sync info with wireless devices that don't explicitly pair with your PC, tablet, or phone / 0 - Default / 1 - Enabled / 2 - Disabled | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\AppPrivacy" /v "LetAppsSyncWithDevices" /t REG_DWORD /d "2" /f | |
| reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" /v "LetAppsAccessTrustedDevices" /t REG_DWORD /d "2" /f | |
| rem =================================== Windows Settings =================================== | |
| rem ---------------------------------------- Privacy --------------------------------------- | |
| rem ............................... Speech, inking, & typing ............................... | |
| rem ________________________________________________________________________________________ | |
| reg add "HKLM\Software\Microsoft\Input" /v "InputServiceEnabled" /t REG_DWORD /d "0" /f | |
| reg add "HKLM\Software\Microsoft\Input" /v "InputServiceEnabledForCCI" /t REG_DWORD /d "0" /f | |
| reg add "HKCU\Software\Microsoft\Input\TIPC" /v "Enabled" /t REG_DWORD /d "0" /f | |
| reg add "HKCU\Software\Microsoft\InputPersonalization" /v "RestrictImplicitInkCollection" /t REG_DWORD /d "1" /f | |
| reg add "HKCU\Software\Microsoft\InputPersonalization" /v "RestrictImplicitTextCollection" /t REG_DWORD /d "1" /f | |
| reg add "HKCU\Software\Microsoft\InputPersonalization\TrainedDataStore" /v "HarvestContacts" /t REG_DWORD /d "0" /f | |
| reg add "HKCU\Software\Microsoft\Personalization\Settings" /v "AcceptedPrivacyPolicy" /t REG_DWORD /d "0" /f | |
| reg add "HKLM\Software\Policies\Microsoft\InputPersonalization" /v "AllowInputPersonalization" /t REG_DWORD /d "0" /f | |
| reg add "HKLM\Software\Policies\Microsoft\InputPersonalization" /v "RestrictImplicitInkCollection" /t REG_DWORD /d "1" /f | |
| reg add "HKLM\Software\Policies\Microsoft\InputPersonalization" /v "RestrictImplicitTextCollection" /t REG_DWORD /d "1" /f | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\HandwritingErrorReports" /v "PreventHandwritingErrorReports" /t REG_DWORD /d "1" /f | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\TabletPC" /v "PreventHandwritingDataSharing" /t REG_DWORD /d "1" /f | |
| rem =================================== Windows Settings =================================== | |
| rem ---------------------------------------- Privacy --------------------------------------- | |
| rem ........................................ Radios ........................................ | |
| rem Let apps control radios / 0 - Default / 1 - Enabled / 2 - Disabled | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\AppPrivacy" /v "LetAppsAccessRadios" /t REG_DWORD /d "2" /f | |
| rem =================================== Windows Settings =================================== | |
| rem ---------------------------------------- Privacy --------------------------------------- | |
| rem ......................................... Tasks ........................................ | |
| rem Let apps access tasks / 0 - Default / 1 - Enabled / 2 - Disabled | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\AppPrivacy" /v "LetAppsAccessTasks" /t REG_DWORD /d "2" /f | |
| rem =================================== Windows Settings =================================== | |
| rem --------------------------------------- System ----------------------------------------- | |
| rem ........................................ About ......................................... | |
| rem PC Name: LianLiPC-7NB (Computer name should not be longer than 15 characters, no spaces either) | |
| reg add "HKLM\System\CurrentControlSet\Control\ComputerName\ActiveComputerName" /v "ComputerName" /t REG_SZ /d "LianLiPC-7NB" /f | |
| reg add "HKLM\System\CurrentControlSet\Control\ComputerName\ComputerName" /v "ComputerName" /t REG_SZ /d "LianLiPC-7NB" /f | |
| reg add "HKLM\System\CurrentControlSet\Services\Tcpip\Parameters" /v "Hostname" /t REG_SZ /d "LianLiPC-7NB" /f | |
| reg add "HKLM\System\CurrentControlSet\Services\Tcpip\Parameters" /v "NV Hostname" /t REG_SZ /d "LianLiPC-7NB" /f | |
| rem Support | |
| reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\OEMInformation" /v "Manufacturer" /t REG_SZ /d "TairikuOkami" /f | |
| reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\OEMInformation" /v "Model" /t REG_SZ /d "ASUS STRIX RX460 O4G GAMING" /f | |
| reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\OEMInformation" /v "SupportHours" /t REG_SZ /d "Within 24-48 hours" /f | |
| reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\OEMInformation" /v "SupportPhone" /t REG_SZ /d "tairikuokami@zoho.eu" /f | |
| reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\OEMInformation" /v "SupportURL" /t REG_SZ /d "https://steamcommunity.com/id/tairikuokami" /f | |
| rem Computer Description | |
| reg add "HKLM\System\CurrentControlSet\services\LanmanServer\Parameters" /v "srvcomment" /t REG_SZ /d "50/50 MBps" /f | |
| rem =================================== Windows Settings =================================== | |
| rem --------------------------------------- System ----------------------------------------- | |
| rem ........................................ About ......................................... | |
| rem . . . . . . . . . . . . . . . . . . . System info . . . . . . . . . . . . . . . . . . . | |
| rem System info | |
| reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\OEMInformation" /v "Logo" /t REG_SZ /d "D:\Software\Temp\Pics\Mikai.bmp" /f | |
| reg add "HKLM\Software\Microsoft\Windows NT\CurrentVersion" /v "RegisteredOrganization" /t REG_SZ /d "(-_-)" /f | |
| reg add "HKLM\Software\Microsoft\Windows NT\CurrentVersion" /v "RegisteredOwner" /t REG_SZ /d "Brony" /f | |
| rem Remote Settings - Disable Remote Assistance | |
| reg add "HKLM\System\CurrentControlSet\Control\Remote Assistance" /v "fAllowToGetHelp" /t REG_DWORD /d "0" /f | |
| reg add "HKLM\System\CurrentControlSet\Control\Remote Assistance" /v "fAllowFullControl" /t REG_DWORD /d "0" /f | |
| rem System Protection - Enable System restore and Set the size | |
| rem reg delete "HKLM\Software\Policies\Microsoft\Windows NT\SystemRestore" /v "DisableSR" /f | |
| rem reg delete "HKLM\Software\Policies\Microsoft\Windows NT\SystemRestore" /v "DisableConfig" /f | |
| rem reg add "HKLM\Software\Microsoft\Windows NT\CurrentVersion\SPP\Clients" /v " {09F7EDC5-294E-4180-AF6A-FB0E6A0E9513}" /t REG_MULTI_SZ /d "1" /f | |
| rem schtasks /Change /TN "Microsoft\Windows\SystemRestore\SR" /Enable | |
| rem vssadmin Resize ShadowStorage /For=C: /On=C: /Maxsize=5GB | |
| rem sc config wbengine start= demand | |
| rem sc config swprv start= demand | |
| rem sc config vds start= demand | |
| rem sc config VSS start= demand | |
| rem System Protection - Disable System restore and Set the size | |
| reg add "HKLM\Software\Policies\Microsoft\Windows NT\SystemRestore" /v "DisableSR" /t REG_DWORD /d "1" /f | |
| schtasks /Change /TN "Microsoft\Windows\SystemRestore\SR" /Disable | |
| vssadmin Resize ShadowStorage /For=C: /On=C: /Maxsize=320MB | |
| rem Advanced system settings - Performance - Advanced - Processor Scheduling | |
| rem 0 - Foreground and background applications equally responsive / 1 - Foreground application more responsive than background / 2 - Best foreground application response time (Default) | |
| rem 38 - Adjust for best performance of Programs / 24 - Adjust for best performance of Background Services | |
| reg add "HKLM\System\CurrentControlSet\Control\PriorityControl" /v "Win32PrioritySeparation " /t REG_DWORD /d "38" /f | |
| rem Advanced system settings - Performance - Advanced - Virtual memory | |
| rem Disable pagefile | |
| wmic computersystem where name="%computername%" set AutomaticManagedPagefile=False | |
| wmic pagefileset where name="%SystemDrive%\\pagefile.sys" set InitialSize=0,MaximumSize=0 | |
| wmic pagefileset where name="%SystemDrive%\\pagefile.sys" delete | |
| rem Advanced system settings - Startup and Recovery | |
| rem 5 - 5 secs / Time to display list of operating systems | |
| bcdedit /timeout 5 | |
| rem Advanced system settings - Startup and Recovery | |
| rem 1 - Automatically Restart (on System Failure) | |
| reg add "HKLM\System\CurrentControlSet\Control\CrashControl" /v "AutoReboot" /t REG_DWORD /d "0" /f | |
| rem ________________________________________________________________________________________ | |
| rem Disable Remote Assistance | |
| sc config RemoteRegistry start= disabled | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\WinRM\Service\WinRS" /v "AllowRemoteShellAccess" /t REG_DWORD /d "0" /f | |
| reg add "HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services" /v "fAllowToGetHelp" /t REG_DWORD /d "0" /f | |
| reg add "HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services" /v "fAllowUnsolicited" /t REG_DWORD /d "0" /f | |
| reg add "HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services" /v "fAllowUnsolicitedFullControl" /t REG_DWORD /d "0" /f | |
| reg add "HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services" /v "fDenyTSConnections" /t REG_DWORD /d "1" /f | |
| reg add "HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services" /v "TSAppCompat" /t REG_DWORD /d "0" /f | |
| reg add "HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services" /v "TSEnabled" /t REG_DWORD /d "0" /f | |
| reg add "HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services" /v "TSUserEnabled" /t REG_DWORD /d "0" /f | |
| rem =================================== Windows Settings =================================== | |
| rem --------------------------------------- System ----------------------------------------- | |
| rem ............................... Notifications & actions ................................ | |
| rem 1 - Get tips, tricks, and suggestions as you use Windows (ADs) | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-338389Enabled" /t REG_DWORD /d "0" /f | |
| rem 0 - Get notifications from apps and other senders | |
| reg add "HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\PushNotifications" /v "NoToastApplicationNotification" /t REG_DWORD /d "1" /f | |
| rem Show me the Windows welcome experience after updates and occasionally when I sign in to highlight what's new and suggested (ADs) | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-310093Enabled" /t REG_DWORD /d "0" /f | |
| rem =================================== Windows Settings =================================== | |
| rem --------------------------------------- System ----------------------------------------- | |
| rem .................................... Power & sleep ..................................... | |
| rem . . . . . . . . . . . . . . . . Additional power settings . . . . . . . . . . . . . . . | |
| rem Change plan settings - Change adavnced power settings - Hard disk - Turn off hard disk (on battery) after | |
| rem 0 - Never / 4294967295 - max value in seconds | |
| reg add "HKLM\Software\Policies\Microsoft\Power\PowerSettings\E69653CA-CF7F-4F05-AA73-CB833FA90AD4" /v "DCSettingIndex" /t REG_DWORD /d "0" /f | |
| rem Change plan settings - Change adavnced power settings - Hard disk - Turn off hard disk (plugged in) after | |
| rem 0 - Never / 4294967295 - max value in seconds | |
| reg add "HKLM\Software\Policies\Microsoft\Power\PowerSettings\6738E2C4-E8A5-4A42-B16A-E040E769756E" /v "ACSettingIndex" /t REG_DWORD /d "0" /f | |
| rem =================================== Windows Settings =================================== | |
| rem ----------------------------------- Time & language ------------------------------------- | |
| rem ..................................... Date & time ....................................... | |
| rem Time Zone - Central Europe Standard Time | |
| tzutil /s "Central Europe Standard Time" | |
| rem =================================== Windows Settings =================================== | |
| rem ----------------------------------- Time & language ------------------------------------- | |
| rem ..................................... Date & time ....................................... | |
| rem . . . . . . . . . . . . Additional date, time, & regional settings . . . . . . . . . . . | |
| rem Set Formats to Metric | |
| reg add "HKCU\Control Panel\International" /v "iDigits" /t REG_SZ /d "2" /f | |
| reg add "HKCU\Control Panel\International" /v "iLZero" /t REG_SZ /d "1" /f | |
| reg add "HKCU\Control Panel\International" /v "iMeasure" /t REG_SZ /d "0" /f | |
| reg add "HKCU\Control Panel\International" /v "iNegNumber" /t REG_SZ /d "1" /f | |
| reg add "HKCU\Control Panel\International" /v "iPaperSize" /t REG_SZ /d "1" /f | |
| reg add "HKCU\Control Panel\International" /v "iTLZero" /t REG_SZ /d "1" /f | |
| reg add "HKCU\Control Panel\International" /v "sDecimal" /t REG_SZ /d "," /f | |
| reg add "HKCU\Control Panel\International" /v "sNativeDigits" /t REG_SZ /d "0123456789" /f | |
| reg add "HKCU\Control Panel\International" /v "sNegativeSign" /t REG_SZ /d "-" /f | |
| reg add "HKCU\Control Panel\International" /v "sPositiveSign" /t REG_SZ /d "" /f | |
| reg add "HKCU\Control Panel\International" /v "NumShape" /t REG_SZ /d "1" /f | |
| rem Set Time to 24h / Monday | |
| reg add "HKCU\Control Panel\International" /v "iCalendarType" /t REG_SZ /d "1" /f | |
| reg add "HKCU\Control Panel\International" /v "iDate" /t REG_SZ /d "1" /f | |
| reg add "HKCU\Control Panel\International" /v "iFirstDayOfWeek" /t REG_SZ /d "0" /f | |
| reg add "HKCU\Control Panel\International" /v "iFirstWeekOfYear" /t REG_SZ /d "0" /f | |
| reg add "HKCU\Control Panel\International" /v "iTime" /t REG_SZ /d "1" /f | |
| reg add "HKCU\Control Panel\International" /v "iTimePrefix" /t REG_SZ /d "0" /f | |
| reg add "HKCU\Control Panel\International" /v "sDate" /t REG_SZ /d "-" /f | |
| reg add "HKCU\Control Panel\International" /v "sList" /t REG_SZ /d "," /f | |
| reg add "HKCU\Control Panel\International" /v "sLongDate" /t REG_SZ /d "d MMMM, yyyy" /f | |
| reg add "HKCU\Control Panel\International" /v "sMonDecimalSep" /t REG_SZ /d "." /f | |
| reg add "HKCU\Control Panel\International" /v "sMonGrouping" /t REG_SZ /d "3;0" /f | |
| reg add "HKCU\Control Panel\International" /v "sMonThousandSep" /t REG_SZ /d "," /f | |
| reg add "HKCU\Control Panel\International" /v "sShortDate" /t REG_SZ /d "dd-MMM-yy" /f | |
| reg add "HKCU\Control Panel\International" /v "sTime" /t REG_SZ /d ":" /f | |
| reg add "HKCU\Control Panel\International" /v "sTimeFormat" /t REG_SZ /d "HH:mm:ss" /f | |
| reg add "HKCU\Control Panel\International" /v "sShortTime" /t REG_SZ /d "HH:mm" /f | |
| reg add "HKCU\Control Panel\International" /v "sYearMonth" /t REG_SZ /d "MMMM yyyy" /f | |
| rem 244 - Set Location to United States / 143 - Slovakia | |
| reg add "HKCU\Control Panel\International\Geo" /v "Nation" /t REG_SZ /d "143" /f | |
| rem =================================== Windows Settings =================================== | |
| rem ----------------------------------- Update & security ---------------------------------- | |
| rem ........................................ Backup ....................................... | |
| rem ________________________________________________________________________________________ | |
| rem 1 - Disable File History (Creating previous versions of files/Windows Backup) | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\FileHistory" /v "Disabled" /t REG_DWORD /d "1" /f | |
| rem =================================== Windows Settings =================================== | |
| rem ----------------------------------- Update & security ---------------------------------- | |
| rem .................................... Windows update .................................... | |
| rem Change active hours (18 hours) 6am to 0am - Windows Updates will not automatically restart your device during active hours | |
| reg add "HKLM\Software\Microsoft\WindowsUpdate\UX\Settings" /v "ActiveHoursStart" /t REG_DWORD /d "6" /f | |
| reg add "HKLM\Software\Microsoft\WindowsUpdate\UX\Settings" /v "ActiveHoursEnd" /t REG_DWORD /d "0" /f | |
| rem Restart options - 1 - We'll show a reminder when we're going to restart. | |
| reg add "HKLM\Software\Microsoft\WindowsUpdate\UX\Settings" /v "RestartNotificationsAllowed" /t REG_DWORD /d "0" /f | |
| rem ________________________________________________________________________________________ | |
| rem https://support.microsoft.com/en-us/help/4043454 | |
| rem http://www.novirusthanks.org/products/win-update-stop | |
| rem Remove Windows Flash (could be exploited within Windows/Office) | |
| rem regsvr32 /u /s "%SystemRoot%\System32\Macromed\Flash\FlashUtil_ActiveX.dll" | |
| takeown /f "%SystemRoot%\System32\Macromed\Flash\FlashUtil_ActiveX.exe" /a | |
| del "%SystemRoot%\System32\Macromed\Flash\FlashUtil_ActiveX.exe" | |
| takeown /f "%SystemRoot%\System32\Macromed\Flash\FlashUtil_ActiveX.dll" /a | |
| icacls "%SystemRoot%\System32\Macromed\Flash\FlashUtil_ActiveX.dll" /grant:r Administrators:F /c | |
| del "%SystemRoot%\System32\Macromed\Flash\FlashUtil_ActiveX.dll" | |
| takeown /f "%SystemRoot%\SysWow64\Macromed\Flash\FlashUtil_ActiveX.exe" /a | |
| del "%SystemRoot%\SysWow64\Macromed\Flash\FlashUtil_ActiveX.exe" | |
| takeown /f "%SystemRoot%\SysWow64\Macromed\Flash\FlashUtil_ActiveX.dll" /a | |
| icacls "%SystemRoot%\SysWow64\Macromed\Flash\FlashUtil_ActiveX.dll" /grant:r Administrators:F /c | |
| del "%SystemRoot%\SysWow64\Macromed\Flash\FlashUtil_ActiveX.dll" | |
| rem Disable auto-checking for updates | |
| takeown /f "%WINDIR%\System32\UsoClient.exe" /a | |
| icacls "%WINDIR%\System32\UsoClient.exe" /inheritance:r /remove "Administrators" "Authenticated Users" "Users" "System" | |
| rem To Restore (when there is update/upgrade updating exe, otherwise it will fail) | |
| rem icacls "%WINDIR%\System32\UsoClient.exe" /reset | |
| rem 1 - Disable Malicious Software Removal Tool offered via Windows Updates (MRT) | |
| reg add "HKLM\Software\Policies\Microsoft\MRT" /v DontOfferThroughWUAU /t REG_DWORD /d "1" /f | |
| rem =================================== Windows Settings =================================== | |
| rem ----------------------------------- Update & security ---------------------------------- | |
| rem .................................... Windows update .................................... | |
| rem . . . . . . . . . . . . . . . . . . Advanced options . . . . . . . . . . . . . . . . . . | |
| rem Choose how updates are delivered / 0 - Turns off Delivery Optimization / 1 - Gets or sends updates and apps to PCs on the same NAT only / 2 - Gets or sends updates and apps to PCs on the same local network domain / 3 - Gets or sends updates and apps to PCs on the Internet / 99 - Simple download mode with no peering / 100 - Use BITS instead of Windows Update Delivery Optimization | |
| reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\DeliveryOptimization\Config" /v "DODownloadMode" /t REG_DWORD /d "0" /f | |
| reg add "HKLM\Software\Policies\Microsoft\Windows\DeliveryOptimization" /v "DODownloadMode" /t REG_DWORD /d "0" /f | |
| rem ==================================== Windows Shell ===================================== | |
| rem Add Reset permissions to Shell/Manually Reset permissions/Take Ownership | |
| rem http://lallouslab.net/2013/08/26/resetting-ntfs-files-permission-in-windows-graphical-utility | |
| rem Take Ownership | |
| rem Files/Folders - https://www.youtube.com/watch?v=x7gjZMvQHu4 | |
| rem Registry - https://www.youtube.com/watch?v=M1l5ifYKefg | |
| rem https://ss64.com/nt/icacls.html | |
| rem https://technet.microsoft.com/en-us/library/cc753024%28v=ws.11%29.aspx | |
| rem https://technet.microsoft.com/en-us/library/cc753525(v=ws.11).aspx | |
| rem Add "Take Ownership" Option in Files and Folders Context Menu in Windows | |
| reg add "HKCR\*\shell\runas" /ve /t REG_SZ /d "Take ownership" /f | |
| reg add "HKCR\*\shell\runas" /v "HasLUAShield" /t REG_SZ /d "" /f | |
| reg add "HKCR\*\shell\runas" /v "NoWorkingDirectory" /t REG_SZ /d "" /f | |
| reg add "HKCR\*\shell\runas\command" /ve /t REG_SZ /d "cmd.exe /c takeown /f \"%%1\" && icacls \"%%1\" /grant administrators:F" /f | |
| reg add "HKCR\*\shell\runas\command" /v "IsolatedCommand" /t REG_SZ /d "cmd.exe /c takeown /f \"%%1\" && icacls \"%%1\" /grant administrators:F" /f | |
| reg add "HKCR\Directory\shell\runas" /ve /t REG_SZ /d "Take ownership" /f | |
| reg add "HKCR\Directory\shell\runas" /v "HasLUAShield" /t REG_SZ /d "" /f | |
| reg add "HKCR\Directory\shell\runas" /v "NoWorkingDirectory" /t REG_SZ /d "" /f | |
| reg add "HKCR\Directory\shell\runas\command" /ve /t REG_SZ /d "cmd.exe /c takeown /f \"%%1\" /r /d y && icacls \"%%1\" /grant administrators:F /t" /f | |
| reg add "HKCR\Directory\shell\runas\command" /v "IsolatedCommand" /t REG_SZ /d "cmd.exe /c takeown /f \"%%1\" /r /d y && icacls \"%%1\" /grant administrators:F /t" /f | |
| rem Remove Send To from Context Menu | |
| reg delete "HKCR\AllFilesystemObjects\shellex\ContextMenuHandlers\SendTo" /f | |
| rem Remove Share from Context Menu | |
| reg delete "HKLM\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\ModernSharing" /f | |
| reg delete "HKLM\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\Sharing" /f | |
| reg delete "HKLM\SOFTWARE\Classes\Drive\shellex\ContextMenuHandlers\Sharing" /f | |
| reg delete "HKLM\SOFTWARE\Classes\Drive\shellex\PropertySheetHandlers\Sharing" /f | |
| reg delete "HKLM\SOFTWARE\Classes\Directory\background\shellex\ContextMenuHandlers\Sharing" /f | |
| reg delete "HKLM\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\Sharing" /f | |
| reg delete "HKLM\SOFTWARE\Classes\Directory\shellex\CopyHookHandlers\Sharing" /f | |
| reg delete "HKLM\SOFTWARE\Classes\Directory\shellex\PropertySheetHandlers\Sharing" /f | |
| rem ==================================== Windows Store ===================================== | |
| rem -------------------------------------- Settings ---------------------------------------- | |
| rem Update apps automatically / 2 - Off / 4 - On | |
| reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\WindowsStore\WindowsUpdate" /v "AutoDownload" /t REG_DWORD /d "2" /f | |
| schtasks /Change /TN "Microsoft\Windows\WindowsUpdate\Automatic App Update" /Disable | |
| rem ________________________________________________________________________________________ | |
| rem Disable Auto-install subscribed/suggested apps (games like Candy Crush Soda Saga/Minecraft) | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "ContentDeliveryAllowed" /t REG_DWORD /d "0" /f | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "OemPreInstalledAppsEnabled" /t REG_DWORD /d "0" /f | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "PreInstalledAppsEnabled" /t REG_DWORD /d "0" /f | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "PreInstalledAppsEverEnabled" /t REG_DWORD /d "0" /f | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SilentInstalledAppsEnabled" /t REG_DWORD /d "0" /f | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SoftLandingEnabled" /t REG_DWORD /d "0" /f | |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContentEnabled" /t REG_DWORD /d "0" /f | |
| reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Subscriptions" /f | |
| reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\SuggestedApps" /f | |
| rem ==================================== Windows Waypoint ================================== | |
| fsutil usn deletejournal /d /n c: | |
| rem Close Edge process | |
| taskkill /f /im dllhost.exe | |
| rem Run Wise Disk Cleaner | |
| start "" /wait "%ProgramFiles(x86)%\Wise\Wise Disk Cleaner\WiseDiskCleaner.exe" -a | |
| rem Run Wise Registry Cleaner | |
| start "" /wait "%ProgramFiles(x86)%\Wise\Wise Registry Cleaner\WiseRegCleaner.exe" -a -all | |
| rem https://www.tenforums.com/general-support/95776-restart-fall-creators-update-reopens-apps-before.html#post1175516 | |
| rem https://www.tenforums.com/tutorials/49963-use-sign-info-auto-finish-after-update-restart-windows-10-a.html | |
| shutdown /s /f /t 0 |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment