API tools faq
paste
Advertisement
St1cky

Ultimate_Tweak_07-09-2019.bat

St1cky
Sep 7th, 2019
1,687
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
Batch 30.68 KB | None | 0 0
raw download clone embed print report
  1. @Echo off
  2. color 0a
  3. mode con:cols=200 lines=50
  4. DATE /T
  5. Echo. ; Created by St1cky, 07.09.2019
  6. Echo.
  7. Echo. ; ___________________________
  8. Echo. ;   !!! Tweaking Registry !!!
  9. Echo. ; ___________________________
  10. Echo. ; (  RUN AS ADMINISTRATOR! )
  11. Echo.
  12. Echo.
  13. Echo. ; Do not distribute on the internet without giving me Credit for my work, it took some time to create this list and find working registry tweaks.
  14. Echo. ; All tweaks come from "GPEDIT.MSC".
  15. Echo.
  16. Echo. ; Check the Settings if you want to remove some Settings. Example: Windows Update.
  17. Echo. ; This Batch File Disables a lot!
  18. Echo. ; Tested on Windows 1903 ( 10.0.18362.327 ) without any Issues.
  19. Echo. ; No Gaming Tweaks added yet or Debloating.
  20. Echo.
  21.  
  22. pause.
  23.  
  24. Echo. ; _________________________
  25. Echo. ; Policy Settings
  26. Echo. ; -------------------------
  27.  
  28. Echo. #Turn off Aero Shake window minimizing mouse gesture
  29. REG ADD "HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Explorer" /v "NoWindowMinimizingShortcuts" /t REG_DWORD /d 00000001 /f
  30.  
  31. Echo. #Allow BITS Peercaching
  32. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\BITS" /v "EnablePeercaching" /t REG_DWORD /d 00000000 /f
  33.  
  34. Echo. #Turn on BranchCache
  35. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\PeerDist\Service" /v "Enable" /t REG_DWORD /d 00000000 /f
  36.  
  37. Echo. #Set BranchCache Distributed Cache mode
  38. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\PeerDist\CooperativeCaching" /v "Enable" /t REG_DWORD /d 00000000 /f
  39.  
  40. Echo. #Set BranchCache Hosted Cache mode
  41. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\PeerDist\HostedCache\Connection" /v "Location" /t REG_DWORD /d 00000000 /f
  42.  
  43. Echo. #Turn off multicast name resolution ***NEEDS TESTING*** ( DEFAULT = 1 )
  44. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\DNSClient" /v "EnableMulticast" /t REG_DWORD /d 00000000 /f
  45.  
  46. Echo. #Turn off smart multi-homed name resolution ***NEEDS TESTING*** ( DEFAULT = 0 )
  47. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\DNSClient" /v "DisableSmartNameResolution" /t REG_DWORD /d 00000001 /f
  48.  
  49. Echo. #Enable Hotspot Authentication ( DEFAULT = 1 )
  50. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\HotspotAuthentication" /v "Enabled" /t REG_DWORD /d 00000000 /f
  51.  
  52. Echo. #Turn on Mapper I/O (LLTDIO) driver and Turn on Responder (RSPNDR) driver ***NEEDS TESTING*** ( DEFAULT = 1 )
  53. REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" /v "AllowLLTDIOOnDomain" /t REG_DWORD /d 00000000 /f
  54. REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" /v "AllowLLTDIOOnPublicNet" /t REG_DWORD /d 00000000 /f
  55. REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" /v "AllowRspndrOnDomain" /t REG_DWORD /d 00000000 /f
  56. REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" /v "AllowRspndrOnPublicNet" /t REG_DWORD /d 00000000 /f
  57. REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" /v "EnableLLTDIO" /t REG_DWORD /d 00000000 /f
  58. REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" /v "EnableRspndr" /t REG_DWORD /d 00000000 /f
  59. REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" /v "ProhibitLLTDIOOnPrivateNet" /t REG_DWORD /d 00000000 /f
  60. REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LLTD" /v "ProhibitRspndrOnPrivateNet" /t REG_DWORD /d 00000000 /f
  61.  
  62. Echo. #Turn off Microsoft Peer-to-Peer Networking Services ***NEEDS TESTING*** ( DEFAULT = 1 )
  63. REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Peernet" /v "Disabled" /t REG_DWORD /d 00000001 /f
  64.  
  65. Echo. #Network Connectivity Status Indicator - Specify passive polling ***NEEDS TESTING*** ( DEFAULT = 0 )
  66. REM NCSI polls various measurements throughout the network stack on a frequent interval to determine if network connectivity has been lost.
  67. REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\NetworkConnectivityStatusIndicator" /v "DisablePassivePolling" /t REG_DWORD /d 00000001 /f
  68.  
  69. Echo. #Allow or Disallow use of the Offline Files feature ***NEEDS TESTING*** ( DEFAULT = 1 )
  70. REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\NetCache" /v "Enabled" /t REG_DWORD /d 00000000 /f
  71.  
  72. Echo. #QoS Packet Scheduler - Set timer resolution ***NEEDS TESTING*** ( DEFAULT = 10ms 10 (DEC) )
  73. REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Psched" /v "TimerResolution" /t REG_DWORD /d 00000001 /f
  74.  
  75. Echo. #QoS Packet Scheduler - Limit reservable bandwidth ***NEEDS TESTING*** ( DEFAULT = 80% 80 (DEC) )
  76. REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Psched" /v "NonBestEffortLimit" /t REG_DWORD /d 00000000 /f
  77.  
  78. Echo. #TCPIP Settings - 6to4 State ( Default = Enabled )
  79. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\TCPIP\v6Transition" /v "6to4_State" /t REG_SZ /d "Disabled" /f
  80.  
  81. Echo. #TCPIP Settings - ISATAP State ( Default = Enabled )
  82. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\TCPIP\v6Transition" /v "ISATAP_State" /t REG_SZ /d "Disabled" /f
  83.  
  84. Echo. #TCPIP Settings - Set Teredo State ( Default = Enabled )
  85. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\TCPIP\v6Transition" /v "Teredo_State" /t REG_SZ /d "Disabled" /f
  86.  
  87. Echo. #TCPIP Settings - Set Window Scaling Heuristics State ( Default = Disabled )
  88. REG ADD "HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters" /v "EnableWsd" /t REG_DWORD /d 00000000 /f
  89.  
  90. Echo. Minimize the number of simultaneous connections to the Internet or a Windows Domain
  91. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WcmSvc\GroupPolicy" /v "fMinimizeConnections" /t REG_DWORD /d 00000000 /f
  92.  
  93. Echo. Allow Windows to automatically connect to suggested open hotspots, to networks shared by contacts.
  94. REG ADD "HKEY_LOCAL_MACHINE\Software\Microsoft\wcmsvc\wifinetworkmanager\config" /v "AutoConnectAllowedOEM" /t REG_DWORD /d 00000000 /f
  95.  
  96. Echo. Configure how often a DFS client discovers domain controllers. ( Default = 15min)
  97. REG ADD "HKEY_LOCAL_MACHINE\Software\Software\Policies\Microsoft\System\DFSClient" /v "DfsDcNameDelay" /t REG_DWORD /d 00000360 /f
  98. REM Note: The minimum value you can select is 15 minutes. If you try to set this setting to a value less than 15 minutes, the default value of 15 minutes is applied.
  99.  
  100. Echo. Shared Folders - Allow DFS roots to be published
  101. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\SharedFolders" /v "PublishDfsRoots" /t REG_DWORD /d 00000000 /f
  102. REM Note: The default is to allow shared folders to be published when this setting is not configured.
  103.  
  104. Echo. Shared Folders - Allow shared folders to be published
  105. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\SharedFolders" /v "PublishSharedFolders" /t REG_DWORD /d 00000000 /f
  106. REM Note: The default is to allow shared folders to be published when this setting is not configured.
  107.  
  108. Echo. System - Microsoft Customer Experience Improvement Program (CEIP)
  109. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\AppV\CEIP" /v "CEIPEnable" /t REG_DWORD /d 00000000 /f
  110. REM Note: The program collects information about computer hardware and how you use Microsoft Application Virtualization without interrupting you
  111.  
  112. Echo. Enable App-V Client
  113. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\AppV\Client" /v "Enabled" /t REG_DWORD /d 00000000 /f
  114. REM Note: The program collects information about computer hardware and how you use Microsoft Application Virtualization without interrupting you
  115.  
  116. Echo. Disable Device Guard ***NEEDS TESTING*** ( Default = Enabled )
  117. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeviceGuard" /v "ConfigCIPolicyFilePath" /t REG_DWORD /d 00000000 /f
  118. REM Note: This policy setting lets you deploy a Code Integrity Policy to a machine to control what is allowed to run on that machine.
  119.  
  120. Echo. Turn On Virtualization Based Security ***NEEDS TESTING*** ( Default = Enabled )
  121. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeviceGuard" /v "EnableVirtualizationBasedSecurity" /t REG_DWORD /d 00000000 /f
  122. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DeviceGuard" /v "HVCIMATRequired" /t REG_DWORD /d 00000000 /f
  123.  
  124. Echo. Enable Device Health Attestation Monitoring and Reporting ***NEEDS TESTING*** ( Default = Enabled )
  125. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\DeviceHealthAttestationService" /v "EnableDeviceHealthAttestationService" /t REG_DWORD /d 00000000 /f
  126.  
  127. Echo. Device Installation - Do not send a Windows error report when a generic driver is installed on a device ( Default = Enabled )
  128. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\DeviceHealthAttestationService" /v "DisableSendGenericDriverNotFoundToWER" /t REG_DWORD /d 00000000 /f
  129.  
  130. Echo. Device Installation - Prioritize all digitally signed drivers equally during the driver ranking and selection process ***NEEDS TESTING*** ( Default = Enabled )
  131. REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Settings" /v "AllSigningEqual" /t REG_DWORD /d 00000000 /f
  132.  
  133. Echo. Device Installation - Minimize Driver Reports to WER [Background]  ( Default = 0 )
  134. REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Settings" /v "DisableSendRequestAdditionalSoftwareToWER" /t REG_DWORD /d 00000001 /f
  135.  
  136. Echo. Device Installation Restrictions - Allow administrators to override Device Installation Restriction policies ( Default = 0 )
  137. REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions" /v "AllowAdminInstall" /t REG_DWORD /d 00000001 /f
  138.  
  139. Echo. Disk NV Cache - Turn off boot and resume optimizations ( Default = 1 )
  140. REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\NvCache" /v "OptimizeBootAndResume" /t REG_DWORD /d 00000000 /f
  141. REM This policy setting turns off the boot and resume optimizations for the hybrid hard disks in the system.
  142.  
  143. Echo. Disk NV Cache - Turn off cache power mode *reduce stuttering*  ( Default = 1 )
  144. REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\NvCache" /v "EnablePowerModeState" /t REG_DWORD /d 00000000 /f
  145. REM Note: This policy setting is applicable only if the NV cache feature is on.
  146.  
  147. Echo. Disk NV Cache - Turn off solid state mode *reduce stuttering*  ( Default = 1 )
  148. REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\NvCache" /v "EnableSolidStateMode" /t REG_DWORD /d 00000000 /f
  149. REM Note: Note: This policy setting is applicable only if the NV cache feature is on.
  150.  
  151. Echo. Enable disk quotas ( Default = 0 )
  152. REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DiskQuota" /v "Enable" /t REG_DWORD /d 00000000 /f
  153. REM Note: If this policy setting is not configured, disk quota management is turned off by default, but administrators can turn it on.
  154.  
  155. REM Echo. Display - Configure Per-Process System DPI settings( Default = 0 = Disabled )  ***NEEDS TESTING***
  156. REM REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Control Panel\Desktop" /v "EnablePerProcessSystemDPI" /t REG_DWORD /d 00000001 /f
  157. REM Note: Per Process System DPI will not work for all applications as some older desktop applications will always be blurry on high DPI displays.
  158. REM In some cases, you may see some odd behavior in some desktop applications. If that happens, Per Process System DPI should be disabled.
  159. REM Enabling this setting lets you specify the system-wide default for desktop applications as well as per-application overrides.
  160. REM ***If you disable or do not configure this setting, Per Process System DPI will not apply to any processes on the system.***
  161. REM Supported OnAt least Windows Server, Windows 10 Version 1803
  162.  
  163. Echo. Distributed COM - Allow local activation security check exemptions ( Default = 1 )
  164. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\DCOM\AppCompat" /v "AllowLocalActivationSecurityCheckExemptionList" /t REG_DWORD /d 00000000 /f
  165. REM Note: If you disable this policy setting, DCOM will not look in the locally configured DCOM activation security check exemption list.
  166.  
  167. Echo. Disable ELAM (=Early Launch Antimalware) (SECURITY RISK for Infected Systems - All Drivers will be loaded )
  168. bcdedit /set disableelamdrivers yes
  169. REM Echo. Early Launch Antimalware - Boot-Start Driver Initialization Policy ( Default = 1 ) ( 7=ALL )
  170. REM REG ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Policies\EarlyLaunch" /v "DriverLoadPolicy" /t REG_DWORD /d 00000007 /f
  171. REM Note: If you disable or do not configure this policy setting, the boot start drivers determined to be Good, Unknown or Bad but Boot Critical are initialized and the initialization of drivers determined to be Bad is skipped.
  172.  
  173. Echo. Filesystem
  174. REG ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\FileSystem" /v "DisableDeleteNotification" /t REG_DWORD /d 00000001 /f
  175. REG ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\FileSystem" /v "LongPathsEnabled" /t REG_DWORD /d 00000001 /f
  176. REM GREAT! Why is it disabled anyway? -> Only for Windows 10 - LongPaths!
  177. REM Enabling Win32 long paths will allow manifested win32 applications and Windows Store applications to access paths beyond the normal 260 character limit per node on file systems that support it.
  178. REM Enabling this setting will cause the long paths to be accessible within the process.
  179.  
  180. Echo. Phone-PC linking on this device ( Win1803 )
  181. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" /v "EnableMmx" /t REG_DWORD /d 00000000 /f
  182. REM If you disable this policy setting, the Windows device is not allowed to be linked to Phones, will remove itself from the device list of any linked Phones, and cannot participate in Continue on PC experiences.
  183. REM If you do not configure this policy setting, the default behavior depends on the Windows edition. Changes to this policy take effect on reboot.
  184.  
  185. Echo. Configure Direct Access connections as a fast network connection ( Default = 1 )
  186. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" /v "SlowLinkDefaultForDirectAccess" /t REG_DWORD /d 00000000 /f
  187. REM If you disable this setting or do not configure it, Group Policy will evaluate the network connection as a slow link and process only those client side extensions configured to process over a slow link.
  188.  
  189. Echo. Specify startup policy processing wait time ( Default = 30ms )
  190. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" /v "GpNetworkStartTimeoutPolicyValue" /t REG_DWORD /d 00000001 /f
  191. REM If you disable this setting or do not configure it, Group Policy will evaluate the network connection as a slow link and process only those client side extensions configured to process over a slow link.
  192.  
  193. Echo. GPO Logging - Turn off Resultant Set of Policy logging ( Default Enabled )
  194. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" /v "RSoPLogging" /t REG_DWORD /d 00000000 /f
  195. REM If you disable or do not configure this setting, RSoP logging is turned on. By default, RSoP logging is always on.
  196.  
  197. Echo. Internet Communication settings - Turn off access to the Store
  198. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Explorer" /v "NoUseStoreOpenWith" /t REG_DWORD /d 00000001 /f
  199. REM If you disable or do not configure this policy setting, the user is allowed to use the Store service and the Store item is available in the Open With dialog.
  200.  
  201. Echo. Turn off handwriting personalization data sharing and more
  202. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\TabletPC" /v "PreventHandwritingDataSharing" /t REG_DWORD /d 00000001 /f
  203. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\TabletPC" /v "PreventHandwritingErrorReports" /t REG_DWORD /d 00000001 /f
  204. REM If you do not configure this policy, Tablet PC users can choose whether or not they want to share their writing samples from the handwriting recognition personalization tool with Microsoft.
  205.  
  206. Echo. Turn off Help and Support Center "Did you know?" content
  207. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\PCHealth\HelpSvc" /v "Headlines" /t REG_DWORD /d 00000000 /f
  208. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\PCHealth\HelpSvc" /v "MicrosoftKBSearch" /t REG_DWORD /d 00000000 /f
  209.  
  210. Echo. Turn off Automatic Root Certificates Update
  211. REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SystemCertificates\AuthRoot" /v "DisableRootAutoUpdate" /t REG_DWORD /d 00000000 /f
  212.  
  213. Echo. Turn off Help Experience Improvement Program
  214. REG ADD "HKEY_CURRENT_USER\Software\Policies\Microsoft\Assistance\Client\1.0" /v "NoImplicitFeedback" /t REG_DWORD /d 00000001 /f
  215. REG ADD "HKEY_CURRENT_USER\Software\Policies\Microsoft\Assistance\Client\1.0" /v "NoExplicitFeedback" /t REG_DWORD /d 00000001 /f
  216.  
  217. Echo. Turn off Search Companion content file updates
  218. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SearchCompanion" /v "DisableContentFileUpdates" /t REG_DWORD /d 00000001 /f
  219.  
  220. Echo. Turn off the Windows Messenger Customer Experience Improvement Program
  221. REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Messenger\Client" /v "CEIP" /t REG_DWORD /d 00000001 /f
  222.  
  223. Echo. Turn off Windows Customer Experience Improvement Program
  224. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\SQMClient\Windows" /v "CEIPEnable" /t REG_DWORD /d 00000001 /f
  225.  
  226. Echo. Turn off Windows Error Reporting
  227. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\PCHealth\ErrorReporting" /v "DoReport" /t REG_DWORD /d 00000000 /f
  228.  
  229. Echo. Turn off Kernel DMA Protection
  230. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Kernel DMA Protection" /v "DeviceEnumerationPolicy" /t REG_DWORD /d 00000002 /f
  231.  
  232. Echo. OS Policies
  233. Echo. AllowClipboardHistory
  234. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" /v "AllowClipboardHistory" /t REG_DWORD /d 00000000 /f
  235.  
  236. Echo. AllowCrossDeviceClipboard
  237. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" /v "AllowCrossDeviceClipboard" /t REG_DWORD /d 00000000 /f
  238.  
  239. Echo. Allow publishing of User Activities
  240. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" /v "PublishUserActivities" /t REG_DWORD /d 00000000 /f
  241.  
  242. Echo. Allow upload of User Activities
  243. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" /v "UploadUserActivities" /t REG_DWORD /d 00000000 /f
  244.  
  245. Echo. Enables Activity Feed
  246. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" /v "EnableActivityFeed" /t REG_DWORD /d 00000000 /f
  247.  
  248. Echo. Turn off Power Throttling ***NEEDS TESTING***
  249. REG ADD "HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Power\PowerThrottling" /v "PowerThrottlingOff" /t REG_DWORD /d 00000001 /f
  250.  
  251. Echo. Configure Solicited Remote Assistance
  252. REG ADD "HKEY_LOCAL_MACHINE\Software\policies\Microsoft\Windows NT\Terminal Services" /v "fAllowToGetHelp" /t REG_DWORD /d 00000000 /f
  253. REG ADD "HKEY_LOCAL_MACHINE\Software\policies\Microsoft\Windows NT\Terminal Services" /v "fAllowFullControl" /t REG_DWORD /d 00000000 /f
  254.  
  255. Echo. Require use of fast startup
  256. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" /v "HiberbootEnabled" /t REG_DWORD /d 00000000 /f
  257.  
  258. Echo. Allow downloading updates to the Disk Failure Prediction Model ***NEEDS TESTING***
  259. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\StorageHealth" /v "AllowDiskHealthModelUpdates" /t REG_DWORD /d 00000000 /f
  260. REM Allows downloading new updates to ML Model parameters for predicting storage disk failure.
  261.  
  262. Echo. Allow Storage Sense ***NEEDS TESTING***
  263. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\StorageSense" /v "AllowStorageSenseGlobal" /t REG_DWORD /d 00000000 /f
  264. REM By default, Storage Sense is turned off until the user runs into low disk space or the user enables it manually. Users can configure this setting in Storage settings.
  265.  
  266. Echo. Configure Scheduled Maintenance Behavior
  267. REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\ScheduledDiagnostics" /v "EnabledExecutionLevel" /t REG_DWORD /d 00000000 /f
  268. REM If you disable this policy setting, Windows will not be able to detect, troubleshoot or resolve problems on a scheduled basis.
  269.  
  270. Echo. Configure the level of TPM owner authorization information available to the operating system
  271. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\TPM" /v "ValueOSManagedAuthLevel" /t REG_DWORD /d 00000000 /f
  272. REM If you disable this policy setting, Windows will not be able to detect, troubleshoot or resolve problems on a scheduled basis.
  273.  
  274. Echo. Enable Persistent Time Stamp
  275. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows NT\Reliability" /v "TimeStampInterval" /t REG_DWORD /d 00000000 /f
  276. REM If you disable this policy setting, the Persistent System Timestamp is turned off and the timing of unexpected shutdowns is not recorded.
  277. REM If you do not configure this policy setting, the Persistent System Timestamp is refreshed according the default, which is every 60 seconds beginning with Windows Server 2003.
  278. REM Note: This feature might interfere with power configuration settings that turn off hard disks after a period of inactivity. These power settings may be accessed in the Power Options Control Panel.
  279.  
  280. Echo. Turn off Federation Service
  281. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\ADFS" /v "DisallowFederationService" /t REG_DWORD /d 00000001 /f
  282. REM If you enable this policy setting, installation of a Federation Service fails. If a Federation Service has already been installed, all requests made to it fail.
  283.  
  284. Echo. #Turn off Application Telemetry
  285. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppCompat" /v "AITEnable" /t REG_DWORD /d 00000001 /f
  286. REM If the customer Experience Improvement program is turned off, Application Telemetry will be turned off regardless of how this policy is set.
  287. Echo. #Turn off Inventory Collector
  288. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppCompat" /v "DisableInventory" /t REG_DWORD /d 00000001 /f
  289.  
  290. Echo. #Turn off Steps Recorder
  291. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppCompat" /v "DisableUAR" /t REG_DWORD /d 00000001 /f
  292.  
  293. Echo. #Turn off SwitchBack Compatibility Engine ***NEEDS TESTING***
  294. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\AppCompat" /v "SbEnable" /t REG_DWORD /d 00000000 /f
  295. REM The policy controls the state of the Switchback compatibility engine in the system.
  296. REM Switchback is a mechanism that provides generic compatibility mitigations to older applications by providing older behavior to old applications and new behavior to new applications.
  297. REM Switchback is on by default.
  298. REM If you enable this policy setting, Switchback will be turned off. Turning Switchback off may degrade the compatibility of older applications. This option is useful for server administrators who require performance and are aware of compatibility of the applications they are using.
  299. REM If you disable or do not configure this policy setting, the Switchback will be turned on.
  300. REM Please reboot the system after changing the setting to ensure that your system accurately reflects those changes.
  301.  
  302. Echo. #Allow the use of biometrics
  303. REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Biometrics" /v "Enabled" /t REG_DWORD /d 00000000 /f
  304.  
  305. Echo. #Cloud Content - OFF
  306. REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CloudContent" /v "IncludeEnterpriseSpotlight" /t REG_DWORD /d 00000002 /f
  307. REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CloudContent" /v "DisableSoftLanding" /t REG_DWORD /d 00000001 /f
  308. REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CloudContent" /v "DisableThirdPartySuggestions" /t REG_DWORD /d 00000001 /f
  309. REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CloudContent" /v "DisableTailoredExperiencesWithDiagnosticData" /t REG_DWORD /d 00000001 /f
  310. REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CloudContent" /v "DisableWindowsSpotlightFeatures" /t REG_DWORD /d 00000001 /f
  311. REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CloudContent" /v "DisableWindowsConsumerFeatures" /t REG_DWORD /d 00000001 /f
  312. REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CloudContent" /v "DisableWindowsSpotlightWindowsWelcomeExperience" /t REG_DWORD /d 00000001 /f
  313. REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CloudContent" /v "DisableWindowsSpotlightOnActionCenter" /t REG_DWORD /d 00000001 /f
  314. REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CloudContent" /v "DisableWindowsSpotlightOnSettings" /t REG_DWORD /d 00000001 /f
  315.  
  316. Echo. #Data Collection and Preview Builds
  317. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DataCollection" /v "AllowCommercialDataPipeline" /t REG_DWORD /d 00000000 /f
  318. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DataCollection" /v "AllowDeviceNameInTelemetry" /t REG_DWORD /d 00000000 /f
  319. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DataCollection" /v "AllowTelemetry" /t REG_DWORD /d 00000000 /f
  320. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DataCollection" /v "MicrosoftEdgeDataOptIn" /t REG_DWORD /d 00000000 /f
  321. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DataCollection" /v "DoNotShowFeedbackNotifications" /t REG_DWORD /d 00000000 /f
  322. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DataCollection" /v "LimitEnhancedDiagnosticDataWindowsAnalytics" /t REG_DWORD /d 00000000 /f
  323.  
  324. Echo. #DWM
  325. REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DWM" /v "DisallowComposition" /t REG_DWORD /d 00000001 /f
  326. REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DWM" /v "DisallowFlip3d" /t REG_DWORD /d 00000001 /f
  327. REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DWM" /v "AllowCommercialDataPipeline" /t REG_DWORD /d 00000000 /f
  328.  
  329. Echo. #Do not allow Digital Locker to run
  330. REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Digital Locker" /v "DoNotRunDigitalLocker" /t REG_DWORD /d 00000001 /f
  331.  
  332. Echo. #Turn off location
  333. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\LocationAndSensors" /v "DisableLocation" /t REG_DWORD /d 00000001 /f
  334.  
  335. Echo. #Turn off Automatic Download and Update of Map Data
  336. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Maps" /v "AutoDownloadAndUpdateMapData" /t REG_DWORD /d 00000000 /f
  337.  
  338. Echo. #Disable MDM Enrollment
  339. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CurrentVersion\MDM" /v "DisableRegistration" /t REG_DWORD /d 00000001 /f
  340.  
  341. Echo. #Allow Message Service Cloud Sync
  342. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Messaging" /v "AllowMessageSync" /t REG_DWORD /d 00000000 /f
  343.  
  344. Echo. #Allow companion device for secondary authentication
  345. REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SecondaryAuthenticationFactor" /v "AllowSecondaryAuthenticationDevice" /t REG_DWORD /d 00000000 /f
  346.  
  347. Echo. #Enable UEV
  348. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\UEV\Agent" /v "RegisterInboxTemplates" /t REG_DWORD /d 00000000 /f
  349.  
  350. Echo. #Use User Experience Virtualization (UE-V)
  351. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\UEV\Agent\Configuration" /v "SyncEnabled" /t REG_DWORD /d 00000000 /f
  352.  
  353. Echo. #Allow Automatic Update of Speech Data
  354. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Speech" /v "AllowSpeechModelUpdate" /t REG_DWORD /d 00000000 /f
  355.  
  356. Echo. #Turn off Automatic Download and Install of updates
  357. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\WindowsStore" /v "AutoDownload" /t REG_DWORD /d 00000000 /f
  358.  
  359. Echo. #Turn off Automatic Download and Install of updates
  360. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate" /v "DisableOSUpgrade" /t REG_DWORD /d 00000000 /f
  361.  
  362. Echo. #Windows Defender
  363. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender" /v "DisableAntiSpyware" /t REG_DWORD /d 00000001 /f
  364. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender" /v "DisableRoutinelyTakingAction" /t REG_DWORD /d 00000001 /f
  365. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\System" /v "EnableSmartScreen" /t REG_DWORD /d 00000000 /f
  366. REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting" /v "AutoApproveOSDumps" /t REG_DWORD /d 00000000 /f
  367. REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting" /v "Disabled" /t REG_DWORD /d 00000001 /f
  368. REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting" /v "DontSendAdditionalData" /t REG_DWORD /d 00000001 /f
  369. REM ***DISABLES LOGGING***
  370. REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting" /v "LoggingDisabled" /t REG_DWORD /d 00000001 /f
  371.  
  372. Echo. #Enables or disables Windows Game Recording and Broadcasting
  373. REG ADD "HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\GameDVR" /v "AllowGameDVR" /t REG_DWORD /d 00000000 /f
  374.  
  375. Echo. #Turn off Windows Mobility Center
  376. REG ADD "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\MobilityCenter" /v "NoMobilityCenter" /t REG_DWORD /d 00000001 /f
  377.  
  378. Echo. #Configure Automatic Updates - Disabled
  379. REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" /v "NoAutoUpdate" /t REG_DWORD /d 00000001 /f
  380.  
  381. Echo. #Do not include drivers with Windows Updates - Enabled
  382. REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" /v "ExcludeWUDriversInQualityUpdate" /t REG_DWORD /d 00000001 /f
  383.  
  384. Echo. #Do not connect to any Windows Update Internet locations - Enabled
  385. REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" /v "DoNotConnectToWindowsUpdateInternetLocations" /t REG_DWORD /d 00000001 /f
  386.  
  387. Echo. #Specify intranet Microsoft update service location - Enabled
  388. REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" /v "UseWUServer" /t REG_DWORD /d 00000001 /f
  389. REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" /v "UpdateServiceUrlAlternate" /t REG_SZ /d "http://disableupdateserver.com" /f
  390. REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" /v "WUServer" /t REG_SZ /d "http://disableupdateserver.com" /f
  391. REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" /v "WUStatusServer" /t REG_SZ /d "http://disableupdateserver.com" /f
  392.  
  393. Echo. #Automatic Updates immediate installation - Disabled
  394. REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" /v "AutoInstallMinorUpdates" /t REG_DWORD /d 00000000 /f
  395.  
  396. Echo. #Turn on recommended updates via Automatic Updates - Disabled
  397. REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" /v "IncludeRecommendedUpdates" /t REG_DWORD /d 00000000 /f
  398.  
  399. Echo. ";-----------------------------------------------------------100%|"
  400. Echo. ";                    Tweaking Completed                         |"
  401. Echo. ";           Please Restart the System to take Effect!           |"
  402. Echo. ";---------------------------------------------------------------|"
  403. pause.
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement
Public Pastes
Advertisement
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!