Commands to run on a new Mac

setup.sh

# Disable creating '.ds_store' on USB volumes
defaults write com.apple.desktopservices DSDontWriteUSBStores -bool true

# Disable creating '.ds_store' on network volumes
defaults write com.apple.desktopservices DSDontWriteNetworkStores -bool true

# Destroy vault keys on standby
sudo pmset destroyfvkeyonstandby 1

# Disable guest account
sudo /usr/bin/defaults write /Library/Preferences/com.apple.loginwindow GuestEnabled -bool NO
sudo /usr/bin/defaults write /Library/Preferences/SystemConfiguration/com.apple.smb.server AllowGuestAccess -bool NO
sudo /usr/bin/defaults write /Library/Preferences/com.apple.AppleFileServer guestAccess -bool NO

# Power off memory during standy
sudo pmset hibernatemode 25

# Save to Disk by Default, not iCloud
defaults write NSGlobalDomain NSDocumentSaveNewDocumentsToCloud -bool false