API tools faq
paste
djamollive

Windows 10 Tweaks

djamollive
Aug 28th, 2016
142
0
Never
Add comment
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
Winbatch 65.21 KB | None | 0 0
raw download clone embed print report
  1. rem USE AT OWN RISK AS IS WITHOUT WARRANTY OF ANY KIND !!!!!
  2.  
  3. rem Sections
  4.  
  5. rem Basic recommendations
  6. rem Software recommendations
  7.  
  8. rem Remove various startup entries and policies
  9. rem Restore essential startup entries
  10.  
  11. rem Windows Basics
  12. rem Windows Defender
  13. rem Windows Desktop
  14. rem Windows Drivers
  15. rem Windows Error Reporting
  16. rem Windows Explorer
  17. rem Windows Logging
  18. rem Windows Network
  19. rem Windows Notifications
  20. rem Windows Optimizations
  21. rem Windows Policies
  22. rem Windows Privacy
  23. rem Windows Scheduled Tasks
  24. rem Windows Services
  25. rem Windows Shell
  26. rem Windows Updates
  27. rem Windows Waypoint
  28.  
  29. rem ========================= Basic recommendations =========================
  30.  
  31. rem Link your Microsoft Account to Windows 10 Activation Digital License (You need login just once, then you can log out and use the local account)
  32. rem www.tenforums.com/tutorials/55398-microsoft-account-link-digital-license-windows-10-pc.html
  33.  
  34. rem Network Connection - all adapters
  35. rem Delete all network protocols, but IPv4
  36. rem Uncheck IPv6
  37.  
  38. rem Registry
  39. rem You need to take ownership of the registry key beforehand - youtube.com/watch?v=M1l5ifYKefg
  40. rem "HKCR\CLSID\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}\ShellFolder"
  41. rem "HKLM\Software\Microsoft\Windows NT\CurrentVersion\NetworkList\DefaultMediaCost"
  42.  
  43. rem Sync Center
  44. rem Take ownership and remove to prevent it from running at every startup - youtube.com/watch?v=TQPjQ5n459s
  45. rem C:\Windows\System32\mobsync.exe
  46.  
  47. rem Windows Cortana/Search - Take ownership and remove (to get rid of SearchUI.exe) - youtube.com/watch?v=TQPjQ5n459s
  48. rem C:/Windows/SystemApps/Microsoft.Windows.Cortana_cw5n1h2txyewy
  49.  
  50. rem Windows Powershell - Take ownership and remove - youtube.com/watch?v=TQPjQ5n459s
  51. rem threatpost.com/fileless-powerware-ransomware-found-on-healthcare-network/116998
  52. rem www.invincea.com/2016/06/hash-factory-new-cerber-ransomware-morphs-every-15-seconds
  53. rem news.softpedia.com/news/windows-event-viewer-abused-to-bypass-uac-on-windows-7-and-windows-10-507318.shtml
  54. rem C:\Program Files (x86)\WindowsPowerShell
  55. rem C:\Program Files\WindowsPowerShell
  56. rem C:\Windows\System32\WindowsPowerShell
  57. rem C:\Windows\SysWOW64\WindowsPowerShell
  58.  
  59. rem Windows Troubleshooting and Support
  60. rem Disable Windows Defender - pastebin.com/kYCVzZPz
  61. rem Disable Windows Updates - pastebin.com/geZW3v9s
  62. rem Enable Windows Defender - pastebin.com/0NxF7kCd
  63. rem Perform Windows Updates - pastebin.com/gLnJVKGt
  64. rem Windows Cleanup - pastebin.com/5Q4t1Us9
  65. rem Windows Network Fix - pastebin.com/sypxG1ew
  66. rem Windows Repair - pastebin.com/bwCnbKYN
  67. rem Windows TenForums - www.tenforums.com
  68. rem Windows Tweaks Light - pastebin.com/M2JGdYcn
  69. rem Windows Update Fix - pastebin.com/yEdEZkJ5
  70.  
  71. rem ========================= Software recommendations =========================
  72.  
  73. rem Recommended free cleanup software
  74. rem CCleaner - www.piriform.com/ccleaner/builds
  75. rem Wise Care - www.wisecleaner.com/wise-care-365.html
  76. rem Wise Program Uninstaller - www.wisecleaner.com/wise-program-uninstaller.html
  77.  
  78. rem Recommended free security cleanup software
  79. rem Dr.Web CureIt! - free.drweb.com/download+cureit+free
  80. rem Emsisoft Emergency Kit - www.emsisoft.com/en/software/eek
  81. rem Guide - malwaretips.com/blogs/malware-removal-guide-for-windows
  82. rem Help - www.bleepingcomputer.com/forums/t/182397/am-i-infected-what-do-i-do-how-do-i-get-help-who-is-helping-me
  83.  
  84. rem Recommended free security software
  85. rem Avast Free Antivirus - www.avast.com/free-antivirus-download
  86. rem Bitdefender Antivirus Free Edition - www.bitdefender.com/solutions/free.html?target=1
  87.  
  88. rem Recommended free software replacement for Windows 10 apps
  89. rem Browser / Yandex.Browser - browser.yandex.com
  90. rem Computer Management / www.nirsoft.net/utils/index.html
  91. rem File Archiver / 7-zip - www.7-zip.org
  92. rem Disc Space Manager / TreeSize Free - www.jam-software.com/treesize_free
  93. rem Driver Updates / Driver Easy - www.drivereasy.com
  94. rem Hardware Information / HWiNFO - www.hwinfo.com/download.php
  95. rem Image Viewer / XnView - www.xnview.com/en/xnview/#downloads
  96. rem Media Player / VLC - www.videolan.org/vlc
  97. rem Network Optimization / TCP Optimizer - www.speedguide.net/downloads.php / www.tenforums.com/network-sharing/2806-slow-network-throughput-windows-10-a.html#post553305
  98. rem Network Settings / NetSetMan - www.netsetman.com/en/freeware
  99. rem Office Suite / OpenOffice - www.openoffice.org/download/index.html
  100. rem Password Manager (Offline) / KeePass - keepass.info/download.html
  101. rem PDF Viewer / PDF xChange Editor - www.tracker-software.com/product/pdf-xchange-editor
  102. rem Remote Support / TeamViewer - www.teamviewer.com/en/download/windows
  103. rem Startup Manager / Autoruns - technet.microsoft.com/en-us/sysinternals/bb963902.aspx
  104. rem Task Manager / Process Hacker - processhacker.sourceforge.net
  105. rem Video Thumbnail Previews / K-Lite Basic Codec Pack - www.codecguide.com/download_kl.htm
  106. rem Windows Updates / Windows Update MiniTool - forums.mydigitallife.info/threads/64939-Windows-Update-MiniTool
  107.  
  108. rem ========================= Remove various startup entries and policies =========================
  109.  
  110. rd ""%SystemDrive%\AMD"" /s /q
  111. del ""%SystemDrive%\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\*"" /s /f /q
  112. del ""%USERPROFILE%\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\*"" /s /f /q
  113.  
  114. reg delete "HKCU\Software\Microsoft\Command Processor" /v "AutoRun" /f
  115. reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies" /f
  116. reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /f
  117. reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce" /f
  118. reg delete "HKCU\Software\Policies" /f
  119. reg delete "HKLM\Software\Microsoft\Command Processor" /v "AutoRun" /f
  120. reg delete "HKLM\Software\Microsoft\Policies" /f
  121. reg delete "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects" /f
  122. reg delete "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved" /f
  123. reg delete "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies" /f
  124. reg delete "HKLM\Software\Microsoft\Windows\CurrentVersion\Run" /f
  125. reg delete "HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce" /f
  126. reg delete "HKLM\Software\Microsoft\Windows\CurrentVersion\WindowsStore\WindowsUpdate" /f
  127. reg delete "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Terminal Server" /f
  128. reg delete "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows" /v "AppInit_DLLs" /f
  129. reg delete "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" /v "Shell" /f
  130. reg delete "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" /v "Userinit" /f
  131. reg delete "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" /v "VMApplet" /f
  132. reg delete "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\AlternateShells" /f
  133. reg delete "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell" /f
  134. reg delete "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Taskman" /f
  135. reg delete "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit" /f
  136. reg delete "HKLM\Software\Policies" /f
  137. reg delete "HKLM\Software\WOW6432Node\Microsoft\Policies" /f
  138. reg delete "HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects" /f
  139. reg delete "HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run" /f
  140. reg delete "HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce" /f
  141. reg delete "HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Policies" /f
  142. reg delete "HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\WindowsStore\WindowsUpdate" /f
  143. reg delete "HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Windows" /v "AppInit_DLLs" /f
  144. reg delete "HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon" /v "Shell" /f
  145. reg delete "HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon" /v "Userinit" /f
  146. reg delete "HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon" /v "VMApplet" /f
  147. reg delete "HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\AlternateShells" /f
  148. reg delete "HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell" /f
  149. reg delete "HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\Taskman" /f
  150. reg delete "HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit" /f
  151. reg delete "HKLM\Software\WOW6432Node\Policies" /f
  152. reg delete "HKLM\System\CurrentControlSet\Control\Keyboard Layout" /v "Scancode Map" /f
  153. reg delete "HKLM\System\CurrentControlSet\Control\SafeBoot" /v "AlternateShell" /f
  154. reg delete "HKLM\System\CurrentControlSet\Control\Session Manager" /v "BootExecute" /f
  155. reg delete "HKLM\System\CurrentControlSet\Control\Session Manager" /v "Execute" /f
  156. reg delete "HKLM\System\CurrentControlSet\Control\Session Manager" /v "SETUPEXECUTE" /f
  157. reg delete "HKLM\System\CurrentControlSet\Control\Terminal Server\Wds\rdpwd" /v "StartupPrograms" /f
  158.  
  159. rem ========================= Restore essential startup entries =========================
  160.  
  161. rem Run bcdedit command to check for the current status / Yes = True / No = False
  162. bcdedit /deletevalue {current} safeboot
  163. bcdedit /deletevalue {default} safeboot
  164. bcdedit /set {default} advancedoptions false
  165. bcdedit /set {default} bootems no
  166. bcdedit /set {default} bootstatuspolicy DisplayAllFailures
  167. bcdedit /set {default} recoveryenabled no
  168. bcdedit /set {bootmgr} displaybootmenu no
  169. bcdedit /set {current} bootems no
  170. bcdedit /set {current} advancedoptions false
  171. bcdedit /set {current} bootstatuspolicy DisplayAllFailures
  172. bcdedit /set {current} recoveryenabled no
  173.  
  174. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Run" /v "EvtMgr6" /t REG_SZ /d "C:\Program Files\Logitech\SetPointP\SetPoint.exe /launchGaming" /f
  175. reg add "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" /v "Shell" /t REG_SZ /d "explorer.exe" /f
  176. reg add "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" /v "Userinit" /t REG_SZ /d "C:\Windows\System32\userinit.exe," /f
  177. reg add "HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon" /v "Shell" /t REG_SZ /d "explorer.exe" /f
  178. reg add "HKLM\System\CurrentControlSet\Control\Session Manager" /v "BootExecute" /t REG_MULTI_SZ /d "autocheck autochk *" /f
  179. reg add "HKLM\System\CurrentControlSet\Control\Session Manager" /v "SETUPEXECUTE" /t REG_MULTI_SZ /d "" /f
  180.  
  181. rem ========================= Windows Basics =========================
  182.  
  183. rem 5 - 5 secs / Time to display list of operating systems
  184. bcdedit /timeout 5
  185.  
  186. rem Delete Windows Sounds (Permanently)
  187. reg delete "HKCU\AppEvents\Schemes\Apps" /f
  188.  
  189. rem Set Formats to Metric
  190. reg add "HKCU\Control Panel\International" /v "iDigits" /t REG_SZ /d "2" /f
  191. reg add "HKCU\Control Panel\International" /v "iLZero" /t REG_SZ /d "1" /f
  192. reg add "HKCU\Control Panel\International" /v "iMeasure" /t REG_SZ /d "0" /f
  193. reg add "HKCU\Control Panel\International" /v "iNegNumber" /t REG_SZ /d "1" /f
  194. reg add "HKCU\Control Panel\International" /v "iPaperSize" /t REG_SZ /d "1" /f
  195. reg add "HKCU\Control Panel\International" /v "iTLZero" /t REG_SZ /d "1" /f
  196. reg add "HKCU\Control Panel\International" /v "sDecimal" /t REG_SZ /d "," /f
  197. reg add "HKCU\Control Panel\International" /v "sNativeDigits" /t REG_SZ /d "0123456789" /f
  198. reg add "HKCU\Control Panel\International" /v "sNegativeSign" /t REG_SZ /d "-" /f
  199. reg add "HKCU\Control Panel\International" /v "sPositiveSign" /t REG_SZ /d "" /f
  200. reg add "HKCU\Control Panel\International" /v "NumShape" /t REG_SZ /d "1" /f
  201.  
  202. rem 244 - Set Location to United States (for the best Windows and Store experience) / 143 - Slovakia
  203. reg add "HKCU\Control Panel\International\Geo" /v "Nation" /t REG_SZ /d "143" /f
  204.  
  205. rem Set Time to 24h / Monday
  206. reg add "HKCU\Control Panel\International" /v "iCalendarType" /t REG_SZ /d "1" /f
  207. reg add "HKCU\Control Panel\International" /v "iDate" /t REG_SZ /d "1" /f
  208. reg add "HKCU\Control Panel\International" /v "iFirstDayOfWeek" /t REG_SZ /d "0" /f
  209. reg add "HKCU\Control Panel\International" /v "iFirstWeekOfYear" /t REG_SZ /d "0" /f
  210. reg add "HKCU\Control Panel\International" /v "iTime" /t REG_SZ /d "1" /f
  211. reg add "HKCU\Control Panel\International" /v "iTimePrefix" /t REG_SZ /d "0" /f
  212. reg add "HKCU\Control Panel\International" /v "sDate" /t REG_SZ /d "-" /f
  213. reg add "HKCU\Control Panel\International" /v "sList" /t REG_SZ /d "," /f
  214. reg add "HKCU\Control Panel\International" /v "sLongDate" /t REG_SZ /d "d MMMM, yyyy" /f
  215. reg add "HKCU\Control Panel\International" /v "sMonDecimalSep" /t REG_SZ /d "." /f
  216. reg add "HKCU\Control Panel\International" /v "sMonGrouping" /t REG_SZ /d "3;0" /f
  217. reg add "HKCU\Control Panel\International" /v "sMonThousandSep" /t REG_SZ /d "," /f
  218. reg add "HKCU\Control Panel\International" /v "sShortDate" /t REG_SZ /d "dd-MMM-yy" /f
  219. reg add "HKCU\Control Panel\International" /v "sTime" /t REG_SZ /d ":" /f
  220. reg add "HKCU\Control Panel\International" /v "sTimeFormat" /t REG_SZ /d "HH:mm:ss" /f
  221. reg add "HKCU\Control Panel\International" /v "sShortTime" /t REG_SZ /d "HH:mm" /f
  222. reg add "HKCU\Control Panel\International" /v "sYearMonth" /t REG_SZ /d "MMMM yyyy" /f
  223.  
  224. rem Set Time Zone
  225. tzutil /s "Central Europe Standard Time"
  226.  
  227. rem When windows detects communicarions activity / 0 - Mute all other sounds / 1 - Reduce all other by 80% / 2 - Reduce all other by 50% / 3 - Do nothing
  228. reg add "HKCU\Software\Microsoft\Multimedia\Audio" /v "UserDuckingPreference" /t REG_DWORD /d "3" /f
  229.  
  230. rem 1 - Enable Automatic Restart on System Failure
  231. reg add "HKLM\System\CurrentControlSet\Control\CrashControl" /v "AutoReboot" /t REG_DWORD /d "1" /f
  232.  
  233. rem System Info
  234. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\OEMInformation" /v "Logo" /t REG_SZ /d "D:\Software\Temp\Pics\Mikai.bmp" /f
  235. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\OEMInformation" /v "Manufacturer" /t REG_SZ /d "TairikuOkami" /f
  236. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\OEMInformation" /v "SupportHours" /t REG_SZ /d "None" /f
  237. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\OEMInformation" /v "SupportPhone" /t REG_SZ /d "None" /f
  238. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\OEMInformation" /v "SupportURL" /t REG_SZ /d "www.facebook.com/tairikuokami" /f
  239.  
  240. rem Enable System restore and Set the size
  241. reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore" /v "DisableSR" /f
  242. reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore" /v "DisableConfig" /f
  243. reg add "HKLM\Software\Microsoft\Windows NT\CurrentVersion\SPP\Clients" /v " {09F7EDC5-294E-4180-AF6A-FB0E6A0E9513}" /t REG_MULTI_SZ /d "1" /f
  244. schtasks /Change /TN "Microsoft\Windows\SystemRestore\SR" /Enable
  245. vssadmin Resize ShadowStorage /For=C: /On=C: /Maxsize=5GB
  246.  
  247. rem Replace default Task Manager with Process Hacker (must be installed prior to use)
  248. reg add "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe" /v "Debugger" /t REG_SZ /d "\"C:\Program Files\Process Hacker 2\ProcessHacker.exe\"" /f
  249. reg add "HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\taskmgr.exe" /v "Debugger" /t REG_SZ /d "\"C:\Program Files\Process Hacker 2\ProcessHacker.exe\"" /f
  250.  
  251. rem Computer Name - Z50-75 (Computer name should not be longer than 15 characters)
  252. reg add "HKLM\System\CurrentControlSet\Control\ComputerName\ActiveComputerName" /v "ComputerName" /t REG_SZ /d "Z50-75" /f
  253. reg add "HKLM\System\CurrentControlSet\Control\ComputerName\ComputerName" /v "ComputerName" /t REG_SZ /d "Z50-75" /f
  254. reg add "HKLM\System\CurrentControlSet\Services\Tcpip\Parameters" /v "Hostname" /t REG_SZ /d "Z50-75" /f
  255. reg add "HKLM\System\CurrentControlSet\Services\Tcpip\Parameters" /v "NV Hostname" /t REG_SZ /d "Z50-75" /f
  256.  
  257. rem 5 - 5 secs / Delay Chkdsk startup time at OS Boot
  258. reg add "HKLM\System\CurrentControlSet\Control\Session Manager" /v "AutoChkTimeout" /t REG_DWORD /d "5" /f
  259.  
  260. rem ========================= Windows Defender =========================
  261.  
  262. rem 1 - Disable Real-time protection
  263. reg add "HKLM\Software\Policies\Microsoft\Windows Defender" /v "DisableAntiSpyware" /t REG_DWORD /d "1" /f
  264.  
  265. rem Disable WD Services
  266. reg add "HKLM\System\CurrentControlSet\Services\Sense" /v "Start" /t REG_DWORD /d "4" /f
  267. reg add "HKLM\System\CurrentControlSet\Services\WdFilter" /v "Start" /t REG_DWORD /d "4" /f
  268. reg add "HKLM\System\CurrentControlSet\Services\WdNisSvc" /v "Start" /t REG_DWORD /d "4" /f
  269. reg add "HKLM\System\CurrentControlSet\Services\WinDefend" /v "Start" /t REG_DWORD /d "4" /f
  270.  
  271. rem ========================= Windows Desktop =========================
  272.  
  273. rem 3 - Automatically Pick a Color from your Background
  274. reg add "HKCU\Control Panel\Desktop" /v "AutoColorization" /t REG_SZ /d "1" /f
  275.  
  276. rem 0 - No screen saver is selected / 1 - A screen saver is selected
  277. reg add "HKCU\Control Panel\Desktop" /v "ScreenSaveActive" /t REG_SZ /d "1" /f
  278.  
  279. rem Specifies whether the screen saver is password-protected / 0 - No / 1 - Yes
  280. reg add "HKCU\Control Panel\Desktop" /v "ScreenSaverIsSecure" /t REG_SZ /d "0" /f
  281.  
  282. rem Specifies in seconds how long the System remains idle before the screen saver starts
  283. reg add "HKCU\Control Panel\Desktop" /v "ScreenSaveTimeOut" /t REG_SZ /d "250" /f
  284.  
  285. rem Specifies in milliseconds how long the System waits for user processes to end after the user clicks the End Task command button in Task Manager
  286. reg add "HKCU\Control Panel\Desktop" /v "SCRNSAVE.EXE" /t REG_SZ /d "C:\Windows\System32\Mystify.scr" /f
  287.  
  288. rem Wallpaper Location
  289. reg add "HKCU\Control Panel\Desktop" /v "Wallpaper" /t REG_SZ /d "D:\Software\Temp\Pics\Wallpaper.jpg" /f
  290.  
  291. rem 0 - Center the bitmap on the desktop / 2 - Stretch the bitmap vertically and horizontally to fit the desktop / 10 - Fill / 6 - Fit / 2 - Stretch / 0 - Tile/Center
  292. reg add "HKCU\Control Panel\Desktop" /v "WallpaperStyle" /t REG_SZ /d "2" /f
  293.  
  294. rem 0 - Disable Game DVR and Game Bar / Disable the message "Press Win + G to open Game bar" / "Press Win + G to record a clip"
  295. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\GameDVR" /v "AppCaptureEnabled" /t REG_DWORD /d "0" /f
  296. reg add "HKCU\System\GameConfigStore" /v "GameDVR_Enabled" /t REG_DWORD /d "0" /f
  297. reg add "HKLM\Software\Policies\Microsoft\Windows\GameDVR" /v "AllowgameDVR" /t REG_DWORD /d "0" /f
  298.  
  299. rem 0 - Always show all icons and notifications on the taskbar / 1 - Hide Inactive Icons
  300. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer" /v "EnableAutoTray" /t REG_DWORD /d "0" /f
  301.  
  302. rem Combine taskbar buttons / 0 - Alwayshide labels / 1 - When taskbar is full / 2 - Never
  303. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "TaskbarGlomLevel" /t REG_DWORD /d "2" /f
  304.  
  305. rem Hide Control Panel
  306. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel" /v "{5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0}" /t REG_DWORD /d "1" /f
  307.  
  308. rem Hide Network
  309. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel" /v "{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}" /t REG_DWORD /d "1" /f
  310.  
  311. rem Hide Recycle Bin
  312. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel" /v "{645FF040-5081-101B-9F08-00AA002F954E}" /t REG_DWORD /d "1" /f
  313.  
  314. rem Hide This PC
  315. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel" /v "{20D04FE0-3AEA-1069-A2D8-08002B30309D}" /t REG_DWORD /d "1" /f
  316.  
  317. rem Hide User's Files
  318. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel" /v "{59031a47-3f72-44a7-89c5-5595fe6b30ee}" /t REG_DWORD /d "1" /f
  319.  
  320. rem 0 - Disable / 1 - Enable (Default)
  321. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableCursorSuppression" /t REG_DWORD /d "0" /f
  322.  
  323. rem 0 - Disable Bing Search
  324. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Search" /v "BingSearchEnabled" /t REG_DWORD /d "0" /f
  325.  
  326. rem 0 - Disable Cortana in Taskbar search
  327. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Search" /v "CortanaEnabled" /t REG_DWORD /d "0" /f
  328.  
  329. rem 0 - Hide Taskbar search / 1 - Show search icon / 2 - Show search box
  330. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Search" /v "SearchboxTaskbarMode" /t REG_DWORD /d "0" /f
  331.  
  332. rem 1 - Disable/Hide Action Center System Tray Icon in Taskbar
  333. reg add "HKCU\Software\Policies\Microsoft\Windows\Explorer" /v "DisableNotificationCenter" /t REG_DWORD /d "1" /f
  334.  
  335. rem 1 - Disable/HideAction Network System Tray Icon in Taskbar
  336. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v "HideSCANetwork" /t REG_DWORD /d "1" /f
  337.  
  338. rem 1 - Disable/HideAction Power System Tray Icon in Taskbar
  339. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v "HideSCAPower" /t REG_DWORD /d "1" /f
  340.  
  341. rem 1 - Disable/Hide Volume System Tray Icon in Taskbar
  342. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v "HideSCAVolume" /t REG_DWORD /d "1" /f
  343.  
  344. rem 1 - Show color on Start, taskbar, and action center
  345. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize" /v "ColorPrevalence" /t REG_DWORD /d "1" /f
  346.  
  347. rem 1 - Show color on title bar
  348. reg add "HKCU\Software\Microsoft\Windows\DWM" /v "ColorPrevalence" /t REG_DWORD /d "1" /f
  349.  
  350. rem Disable Cortana
  351. reg add "HKLM\Software\Policies\Microsoft\Windows\Windows Search" /v "AllowCortana" /t REG_DWORD /d "0" /f
  352.  
  353. rem ========================= Windows Drivers =========================
  354.  
  355. rem Specifies how the System responds when a user tries to install device driver files that are not digitally signed / 00 - Ignore / 01 - Warn / 02 - Block
  356. reg add "HKLM\Software\Microsoft\Driver Signing" /v "Policy" /t REG_BINARY /d "01" /f
  357.  
  358. rem 1 - Prevent device metadata retrieval from the Internet/ Do not automatically download manufacturers’ apps and custom icons available for your devices
  359. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Device Metadata" /v "PreventDeviceMetadataFromNetwork" /t REG_DWORD /d "1" /f
  360. schtasks /Change /TN "Microsoft\Windows\Device Setup\Metadata Refresh" /Disable
  361.  
  362. rem Do you want Windows to download driver Software / 0 - Never / 1 - Allways / 2 - Install driver Software, if it is not found on my computer
  363. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\DriverSearching" /v "SearchOrderConfig" /t REG_DWORD /d "0" /f
  364.  
  365. rem ========================= Windows Error Reporting =========================
  366.  
  367. rem 1 - Disable Windows Error Reporting (WER)
  368. reg add "HKCU\Software\Microsoft\Windows\Windows Error Reporting" /v "Disabled" /t REG_DWORD /d "1" /f
  369. reg add "HKLM\Software\Microsoft\Windows\Windows Error Reporting" /v "Disabled" /t REG_DWORD /d "1" /f
  370.  
  371. rem 1 - Disable WER sending second-level data
  372. reg add "HKCU\Software\Microsoft\Windows\Windows Error Reporting" /v "DontSendAdditionalData" /t REG_DWORD /d "1" /f
  373. reg add "HKLM\Software\Microsoft\Windows\Windows Error Reporting" /v "DontSendAdditionalData" /t REG_DWORD /d "1" /f
  374.  
  375. rem 1 - Disable WER crash dialogs, popups
  376. reg add "HKCU\Software\Microsoft\Windows\Windows Error Reporting" /v "DontShowUI" /t REG_DWORD /d "1" /f
  377. reg add "HKLM\Software\Microsoft\Windows\Windows Error Reporting" /v "DontShowUI" /t REG_DWORD /d "1" /f
  378.  
  379. rem 1 - Disable WER logging
  380. reg add "HKCU\Software\Microsoft\Windows\Windows Error Reporting" /v "LoggingDisabled" /t REG_DWORD /d "1" /f
  381. reg add "HKLM\Software\Microsoft\Windows\Windows Error Reporting" /v "LoggingDisabled" /t REG_DWORD /d "1" /f
  382.  
  383. rem ========================= Windows Explorer =========================
  384.  
  385. rem Remove Network from Navigation Panel
  386. rem You need to take ownership of the registry key beforehand - youtube.com/watch?v=M1l5ifYKefg
  387. reg add "HKCR\CLSID\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}\ShellFolder" /v "Attributes" /t REG_DWORD /d "2962489444" /f
  388.  
  389. rem Remove Send To from Context Menu
  390. reg delete "HKCR\AllFilesystemObjects\shellex\ContextMenuHandlers\SendTo" /f
  391.  
  392. rem 0 - Remove OneDrive from Windows Explorer
  393. reg "HKCU\Software\Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}" /v "System.IsPinnedToNameSpaceTree" /t REG_DWORD /d "0" /f
  394.  
  395. rem Folder Views remember Apply to Folders
  396. reg add "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\AllFolders\Shell" /v "FolderType" /t REG_SZ /d "NotSpecified" /f
  397.  
  398. rem 0 - All of the components of Windows Explorer run a single process / 1 - All instances of Windows Explorer run in one process and the Desktop and Taskbar run in a separate process
  399. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer" /v "DesktopProcess" /t REG_DWORD /d "1" /f
  400.  
  401. rem 2 - Underline icon titles consistent with my browser / 3 - Underline icon titles only when I point at them
  402. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer" /v "IconUnderline" /t REG_DWORD /d "2" /f
  403.  
  404. rem 1 - Disable Previous Versions Tab
  405. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer" /v "NoPreviousVersionsPage" /t REG_DWORD /d "1" /f
  406. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer" /v "NoPreviousVersionsPage" /t REG_DWORD /d "1" /f
  407.  
  408. rem Single-click to open an item
  409. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer" /v "ShellState" /t REG_BINARY /d "2400000017a8000000000000000000000000000001000000130000000000000073000000" /f
  410.  
  411. rem 0 - Do not show Frequent folders in Quick Access
  412. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer" /v "ShowFrequent" /t REG_DWORD /d "0" /f
  413.  
  414. rem 0 - Do not show Recent folders in Quick Access
  415. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer" /v "ShowRecent" /t REG_DWORD /d "0" /f
  416.  
  417. rem 1 - Navigation Panel Expand to Current Folder
  418. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "NavPaneExpandToCurrentFolder" /t REG_DWORD /d "0" /f
  419.  
  420. rem 0 - Do not hide extensions for known file types
  421. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "HideFileExt" /t REG_DWORD /d "0" /f
  422.  
  423. rem 1 - Show Hidden Folders and Files
  424. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "Hidden" /t REG_DWORD /d "1" /f
  425.  
  426. rem 2 - Open File Explorer to Quick access / 1 - Open File Explorer to This PC
  427. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "LaunchTo" /t REG_DWORD /d "2" /f
  428.  
  429. rem 0 - Do not use Sharing Wizard
  430. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "SharingWizardOn" /t REG_DWORD /d "0" /f
  431.  
  432. rem 1 - Launch folder windows in a separate process
  433. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "SeparateProcess" /t REG_DWORD /d "1" /f
  434.  
  435. rem 1 - Show protected operating System files
  436. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "ShowSuperHidden" /t REG_DWORD /d "1" /f
  437.  
  438. rem 0 - Hide Task View button
  439. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "ShowTaskViewButton" /t REG_DWORD /d "0" /f
  440.  
  441. rem Remove Desktop folder from This PC
  442. reg delete "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}" /f
  443. reg delete "HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}" /f
  444.  
  445. rem Remove Documents folder from This PC
  446. reg delete "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{d3162b92-9365-467a-956b-92703aca08af}" /f
  447. reg delete "HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{d3162b92-9365-467a-956b-92703aca08af}" /f
  448.  
  449. rem Remove Downloads folder from This PC
  450. reg delete "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{088e3905-0323-4b02-9826-5d99428e115f}" /f
  451. reg delete "HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{088e3905-0323-4b02-9826-5d99428e115f}" /f
  452.  
  453. rem Remove Music folder from This PC on
  454. reg delete "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{3dfdf296-dbec-4fb4-81d1-6a3438bcf4de}" /f
  455. reg delete "HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{3dfdf296-dbec-4fb4-81d1-6a3438bcf4de}" /f
  456.  
  457. rem Remove Pictures folder from This PC
  458. reg delete "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{24ad3ad4-a569-4530-98e1-ab02f9417aa8}" /f
  459. reg delete "HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{24ad3ad4-a569-4530-98e1-ab02f9417aa8}" /f
  460.  
  461. rem Remove Videos folder from This PC
  462. reg delete "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{f86fa3ab-70d2-4fc7-9c99-fcbf05467f3a}" /f
  463. reg delete "HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{f86fa3ab-70d2-4fc7-9c99-fcbf05467f3a}" /f
  464.  
  465. rem ========================= Windows Logging =========================
  466.  
  467. rem DiagLog required by Diagnostic Policy Service
  468. rem EventLog-Application required by Windows
  469. rem EventLog-System required by Windows
  470. rem msdn.microsoft.com/en-us/library/windows/desktop/aa363687(v=vs.85).aspx
  471.  
  472. reg add "HKLM\System\CurrentControlSet\Control\WMI\Autologger\Audio" /v "Start" /t REG_DWORD /d "0" /f
  473. reg add "HKLM\System\CurrentControlSet\Control\WMI\Autologger\AutoLogger-Diagtrack-Listener" /v "Start" /t REG_DWORD /d "0" /f
  474. reg add "HKLM\System\CurrentControlSet\Control\WMI\Autologger\DefenderApiLogger" /v "Start" /t REG_DWORD /d "0" /f
  475. reg add "HKLM\System\CurrentControlSet\Control\WMI\Autologger\DefenderAuditLogger" /v "Start" /t REG_DWORD /d "0" /f
  476. reg add "HKLM\System\CurrentControlSet\Control\WMI\Autologger\MpWppTracing-07202016-140038-00000003-ffffffff" /v "Start" /t REG_DWORD /d "0" /f
  477. reg add "HKLM\System\CurrentControlSet\Control\WMI\Autologger\ReadyBoot" /v "Start" /t REG_DWORD /d "0" /f
  478. reg add "HKLM\System\CurrentControlSet\Control\WMI\Autologger\SQMLogger" /v "Start" /t REG_DWORD /d "0" /f
  479. reg add "HKLM\System\CurrentControlSet\Control\WMI\Autologger\WiFiSession" /v "Start" /t REG_DWORD /d "0" /f
  480.  
  481. rem ========================= Windows Network =========================
  482.  
  483. rem Windows wmic command line command
  484. rem www.computerhope.com/wmic.htm
  485.  
  486. rem To get adapter's index number use command:
  487. wmic nicconfig get caption,index,TcpipNetbiosOptions
  488.  
  489. rem Disable IPv6
  490. netsh int ipv6 isatap set state disabled
  491. netsh int teredo set state disabled
  492. netsh interface ipv6 6to4 set state state=disabled undoonstop=disabled
  493. reg add "HKLM\System\CurrentControlSet\Services\Tcpip6\Parameters" /v "DisabledComponents" /t REG_DWORD /d "255" /f
  494.  
  495. rem 0 - Disable LMHOSTS Lookup on all adapters / 1 - Enable
  496. reg add "HKLM\System\CurrentControlSet\Services\NetBT\Parameters" /v "EnableLMHOSTS" /t REG_DWORD /d "0" /f
  497.  
  498. rem 2 - Disable NetBIOS over TCP/IP on all adapters / 1 - Enable / 0 - Default
  499. wmic nicconfig where TcpipNetbiosOptions=0 call SetTcpipNetbios 2
  500. wmic nicconfig where TcpipNetbiosOptions=1 call SetTcpipNetbios 2
  501.  
  502. rem Setup DNS Servers on DHCP Enabled Network (DNS.WATCH/Location-DE/DNSSEC)
  503. wmic nicconfig where DHCPEnabled=TRUE call SetDNSServerSearchOrder ("84.200.70.40","84.200.69.80")
  504.  
  505. rem Setup IP, Gateway and DNS Servers based on the MAC address (To Enable DHCP: wmic nicconfig where macaddress="28:E3:47:18:70:3D" call enabledhcp)
  506. wmic nicconfig where macaddress="68:F7:28:0F:B6:D5" call EnableStatic ("10.10.10.20"), ("255.255.255.0")
  507. wmic nicconfig where macaddress="68:F7:28:0F:B6:D5" call SetDNSServerSearchOrder ("84.200.70.40","84.200.69.80")
  508. wmic nicconfig where macaddress="68:F7:28:0F:B6:D5" call SetGateways ("10.10.10.10")
  509.  
  510. rem Disable Windows Firewall / AllProfiles / CurrentProfile / DomainProfile / PrivateProfile / PublicProfile
  511. rem technet.microsoft.com/en-us/library/cc771920(v=ws.10).aspx
  512. netsh advfirewall set allprofiles state off
  513.  
  514. rem ========================= Windows Notifications =========================
  515.  
  516. rem 1 - Show me tips about Windows / Can cause high disc usage via a process System and compressed memory
  517. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SoftLandingEnabled" /t REG_DWORD /d "0" /f
  518.  
  519. rem 0 - Turn on Quiet Hours in Action Center / Disable/Hide the message: Turn on Windows Security Center service
  520. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings" /v "NOC_GLOBAL_SETTING_TOASTS_ENABLED" /t REG_DWORD /d "0" /f
  521.  
  522. rem Do not show app Notifications
  523. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\PushNotifications" /v "ToastEnabled" /t REG_DWORD /d "0" /f
  524. reg add "HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\PushNotifications" /v "NoToastApplicationNotification" /t REG_DWORD /d "1" /f
  525.  
  526. rem 1 - Do not show alarms, reminders and incoming VOIP calls on the lock
  527. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings" /v "NOC_GLOBAL_SETTING_ALLOW_CRITICAL_TOASTS_ABOVE_LOCK" /t REG_DWORD /d "0" /f
  528.  
  529. rem 1 - Do not show notifications on the lock screen
  530. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings" /v "NOC_GLOBAL_SETTING_ALLOW_TOASTS_ABOVE_LOCK" /t REG_DWORD /d "0" /f
  531.  
  532. rem 1 - Hide notifications while presenting
  533. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings" /v "NOC_GLOBAL_SETTING_SUPRESS_TOASTS_WHILE_DUPLICATING" /t REG_DWORD /d "0" /f
  534.  
  535. rem 1808 - Disable the warning The Publisher could not be verified
  536. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Associations" /v "DefaultFileTypeRisk" /t REG_DWORD /d "1808" /f
  537.  
  538. rem Disable Security warning to unblock the downloaded file
  539. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments" /v "SaveZoneInformation" /t REG_DWORD /d "1" /f
  540.  
  541. rem 1 - Display confirmation dialog when deleting files
  542. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v "ConfirmFileDelete" /t REG_DWORD /d "1" /f
  543.  
  544. rem ========================= Windows Optimizations =========================
  545.  
  546. rem channel9.msdn.com/Blogs/Seth-Juarez/Memory-Compression-in-Windows-10-RTM
  547. rem blogs.technet.microsoft.com/markrussinovich/2008/07/21/pushing-the-limits-of-windows-physical-memory
  548.  
  549. rem Determines whether user processes end automatically when the user either logs off or shuts down / 1 - Processes end automatically
  550. reg add "HKCU\Control Panel\Desktop" /v "AutoEndTasks" /t REG_SZ /d "1" /f
  551.  
  552. rem When the time is set too low, apps like Settings will crash, system icons like Volume and Power will disappear
  553. rem www.tenforums.com/drivers-hardware/21217-volume-icon-not-appearing-taskbar.html#post578321
  554. rem Specifies in milliseconds how long the System waits for user processes to end after the user clicks the End Task command button in Task Manager
  555. reg add "HKCU\Control Panel\Desktop" /v "HungAppTimeout" /t REG_SZ /d "5000" /f
  556.  
  557. rem Determines how long the System waits for user processes to end after the user attempts to log off or to shut down
  558. reg add "HKCU\Control Panel\Desktop" /v "WaitToKillAppTimeout" /t REG_SZ /d "10000" /f
  559.  
  560. rem Determines in milliseconds how long the System waits for services to stop after notifying the service that the System is shutting down
  561. reg add "HKLM\System\CurrentControlSet\Control" /v "WaitToKillServiceTimeout" /t REG_SZ /d "10000" /f
  562.  
  563. rem Determines in milliseconds the interval from the time the cursor is pointed at a menu until the menu items are displayed
  564. reg add "HKCU\Control Panel\Desktop" /v "MenuShowDelay" /t REG_SZ /d "0" /f
  565.  
  566. rem  Mouse Hover Time in milliseconds before Pop-up Display
  567. reg add "HKCU\Control Panel\Mouse" /v "MouseHoverTime" /t REG_SZ /d "0" /f
  568.  
  569. rem How long in milliseconds you want to have for a startup delay time for desktop apps that run at startup to load
  570. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Serialize" /v "StartupDelayInMSec" /t REG_DWORD /d "0" /f
  571.  
  572. rem n - Disable Background disk defragmentation / y - EnableHow long in milliseconds you want to have for a startup delay time for desktop apps that run at startup to load
  573. reg add "HKLM\Software\Microsoft\Dfrg\BootOptimizeFunction" /v "Enable" /t REG_SZ /d "n" /f
  574.  
  575. rem 0 - Disable Background auto-layout / Disable Optimize Hard Disk when idle
  576. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\OptimalLayout" /v "EnableAutoLayout" /t REG_DWORD /d "0" /f
  577.  
  578. rem 1 - Disable Automatic Maintenance
  579. reg add "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\Maintenance" /v "MaintenanceDisabled" /t REG_DWORD /d "1" /f
  580.  
  581. rem 1 - NTFS does not create short file names
  582. reg add "HKLM\System\CurrentControlSet\Control\FileSystem" /v "NtfsDisable8dot3NameCreation" /t REG_DWORD /d "1" /f
  583.  
  584. rem 1 - Disable the Encrypting File System (EFS)
  585. reg add "HKLM\System\CurrentControlSet\Control\FileSystem" /v "NtfsDisableEncryption" /t REG_DWORD /d "1" /f
  586.  
  587. rem 1 - When listing directories, NTFS does not update the last-access timestamp, and it does not record time stamp updates in the NTFS log
  588. reg add "HKLM\System\CurrentControlSet\Control\FileSystem" /v "NtfsDisableLastAccessUpdate" /t REG_DWORD /d "1" /f
  589.  
  590. rem 0 - Establishes a standard size file-system cache of approximately 8 MB / 1 - Establishes a large system cache working set that can expand to physical memory, minus 4 MB, if needed
  591. rem technet.microsoft.com/en-us/library/cc784562(v=ws.10).aspx
  592. reg add "HKLM\System\CurrentControlSet\Control\Session Manager\Memory Management" /v "LargeSystemCache" /t REG_DWORD /d "0" /f
  593.  
  594. rem 0 - Drivers and the kernel can be paged to disk as needed / 1 - Drivers and the kernel must remain in physical memory
  595. reg add "HKLM\System\CurrentControlSet\Control\Session Manager\Memory Management\PrefetchParameters" /v "DisablePagingExecutive" /t REG_DWORD /d "1" /f
  596.  
  597. rem 0 - Disable Prefetch / 1 - Enable Prefetch when the application starts / 2 - Enable Prefetch when the device starts up / 3 - Enable Prefetch when the application or device starts up
  598. reg add "HKLM\System\CurrentControlSet\Control\Session Manager\Memory Management\PrefetchParameters" /v "EnablePrefetcher" /t REG_DWORD /d "0" /f
  599.  
  600. rem 0 - Disable SuperFetch / 1 - Enable SuperFetch when the application starts up / 2 - Enable SuperFetch when the device starts up / 3 - Enable SuperFetch when the application or device starts up
  601. reg add "HKLM\System\CurrentControlSet\Control\Session Manager\Memory Management\PrefetchParameters" /v "EnableSuperfetch" /t REG_DWORD /d "0" /f
  602.  
  603. rem 0 - Disable It / 1 - Default
  604. reg add "HKLM\System\CurrentControlSet\Control\Session Manager\Memory Management\PrefetchParameters" /v "SfTracingState" /t REG_DWORD /d "0" /f
  605.  
  606. rem 0 - Disable Fast Startup for a Full Shutdown / 1 - Enable Fast Startup (Hybrid Boot) for a Hybrid Shutdown
  607. reg add "HKLM\System\CurrentControlSet\Control\Session Manager\Power" /v "HiberbootEnabled" /t REG_DWORD /d "0" /f
  608.  
  609. rem Disable Hibernation / Disable Fast Startup (Hybrid Boot)
  610. powercfg -h off
  611.  
  612. rem ========================= Windows Policies =========================
  613.  
  614. rem 0 - Disable Microsoft Windows Just-In-Time (JIT) script debugging
  615. reg add "HKCU\Software\Microsoft\Windows Script\Settings" /v "JITDebug" /t REG_DWORD /d "0" /f
  616. reg add "HKU\.Default\Microsoft\Windows Script\Settings" /v "JITDebug" /t REG_DWORD /d "0" /f
  617.  
  618. rem Disable Active Desktop
  619. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v "ForceActiveDesktopOn" /t REG_DWORD /d "0" /f
  620. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v "NoActiveDesktop" /t REG_DWORD /d "1" /f
  621. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v "NoActiveDesktopChanges" /t REG_DWORD /d "1" /f
  622.  
  623. rem Off - Disable Windows SmartScreen / On - Enable Windows SmartScreen
  624. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer" /v "SmartScreenEnabled" /t REG_SZ /d "Off" /f
  625.  
  626. rem 0xFF - Disable AutoRun on all kinds of drives for the current and for all users / 0x95 - Enable on all drivers
  627. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v "NoDriveTypeAutorun" /t REG_DWORD /d "0xFF" /f
  628. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v "NoDriveTypeAutorun" /t REG_DWORD /d "0xFF" /f
  629.  
  630. rem 0 - Elevate without prompting / 1 - Prompt for credentials on the secure desktop / 2 - Prompt for consent on the secure desktop / 3 - Prompt for credentials / 4 - Prompt for consent / 5 (Default) - Prompt for consent for non-Windows binaries
  631. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "ConsentPromptBehaviorAdmin" /t REG_DWORD /d "1" /f
  632.  
  633. rem 0 - Automatically deny elevation requests / 1 - Prompt for credentials on the secure desktop / 3 (Default) - Prompt for credentials
  634. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "ConsentPromptBehaviorUser" /t REG_DWORD /d "1" /f
  635.  
  636. rem 2 - Default
  637. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "DSCAutomationHostEnabled" /t REG_DWORD /d "2" /f
  638.  
  639. rem Detect application installations and prompt for elevation / 1 - Enabled (default for home) / 0 - Disabled (default for enterprise)
  640. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableInstallerDetection" /t REG_DWORD /d "1" /f
  641.  
  642. rem Run all administrators in Admin Approval Mode / 0 - Disabled (UAC) / 1 - Enabled (UAC)
  643. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableLUA" /t REG_DWORD /d "1" /f
  644.  
  645. rem Only elevate UIAccess applications that are installed in secure locations / 0 - Disabled / 1 (Default) - Enabled
  646. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableSecureUIAPaths" /t REG_DWORD /d "1" /f
  647.  
  648. rem Allow UIAccess applications to prompt for elevation without using the secure desktop / 0 (Default) = Disabled / 1 - Enabled
  649. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableUIADesktopToggle" /t REG_DWORD /d "0" /f
  650.  
  651. rem 0 - Disabled / 1 - Enabled (Default)
  652. rem technet.microsoft.com/en-us/itpro/windows/keep-secure/deploy-device-guard-enable-virtualization-based-security
  653. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableVirtualization" /t REG_DWORD /d "0" /f
  654.  
  655. rem Admin Approval Mode for the built-in Administrator account / 0 (Default) - Disabled / 1 - Enabled
  656. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "FilterAdministratorToken" /t REG_DWORD /d "1" /f
  657.  
  658. rem 0 - Disable Administrative Shares
  659. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "LocalAccountTokenFilterPolicy" /t REG_DWORD /d "0" /f
  660.  
  661. rem Allow UIAccess applications to prompt for elevation without using the secure desktop / 0 (Default) - Disabled / 1 - Enabled
  662. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "PromptOnSecureDesktop" /t REG_DWORD /d "1" /f
  663.  
  664. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\Audit" /v "ProcessCreationIncludeCmdLine_Enabled" /t REG_DWORD /d "1" /f
  665.  
  666. rem 0 - Disable Windows Script Host (WSH) for the current user
  667. reg add "HKCU\Software\Microsoft\Windows Script Host\Settings" /v "Enabled" /t REG_DWORD /d "0" /f
  668.  
  669. rem 0 - Disable Windows Script Host (WSH) for all users (prevents majority of malware from working, especially when removing PowerShell as well, Disable ExecutionPolicy can be easily bypassed)
  670. rem Locky ransomware using VBscript (Visual Basic Script) - blog.avast.com/a-closer-look-at-the-locky-ransomware
  671. reg add "HKLM\Software\Microsoft\Windows Script Host\Settings" /v "Enabled" /t REG_DWORD /d "0" /f
  672.  
  673. rem No-one will be a member of the built-in group, although it will still be visible in the Object Picker / 1 - all users logging on to a session on the server will be made a member of the TERMINAL SERVER USER group
  674. reg add "HKLM\System\CurrentControlSet\Control\Terminal Server" /v "TSUserEnabled" /t REG_DWORD /d "0" /f
  675.  
  676. rem ========================= Windows Privacy =========================
  677.  
  678. rem Additional disabled privacy features are disabled in sections: Windows Logging / Windows Scheduled Tasks / Windows Services
  679. rem technet.microsoft.com/en-us/library/mt577208(v=vs.85).aspx
  680.  
  681. rem Feedback Frequency (Windows should ask for my feedback) / 0 - Never / 1 - Automatically
  682. reg add "HKCU\Software\Microsoft\Siuf\Rules" /v "NumberOfSIUFInPeriod" /t REG_DWORD /d "0" /f
  683.  
  684. rem 0 - Disable WiFi Sense (shares your WiFi network login with other people)
  685. reg add "HKLM\Software\Microsoft\PolicyManager\default\WiFi\AllowAutoConnectToWiFiSenseHotspots" /v "value" /t REG_DWORD /d "0" /f
  686. reg add "HKLM\Software\Microsoft\PolicyManager\default\WiFi\AllowWiFiHotSpotReporting" /v "value" /t REG_DWORD /d "0" /f
  687.  
  688. rem Diagnostic and usage data / 0 - Never / 1 - Basic / 2 - Enhanced / 3 - Full
  689. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\DataCollection" /v "AllowTelemetry" /t REG_DWORD /d "0" /f
  690. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Application-Experience/Program-Telemetry" /v "Enabled" /t REG_DWORD /d "0" /f
  691. reg add "HKLM\Software\Policies\Microsoft\Windows\DataCollection" /v "AllowTelemetry" /t REG_DWORD /d "0" /f
  692.  
  693. rem 0 - Disable Customer Experience Improvement (CEIP/SQM - Software Quality Management)
  694. reg add "HKLM\Software\Policies\Microsoft\SQMClient\Windows" /v "CEIPEnable" /t REG_DWORD /d "0" /f
  695.  
  696. rem 0 - Disable Application Impact Telemetry (AIT)
  697. reg add "HKLM\Software\Policies\Microsoft\Windows\AppCompat" /v "AITEnable" /t REG_DWORD /d "0" /f
  698.  
  699. rem 1 - Disable AD customization
  700. reg add "HKLM\Software\Policies\Microsoft\Windows\AdvertisingInfo" /v "DisabledByGroupPolicy" /t REG_DWORD /d "1" /f
  701.  
  702. rem 1 - Disable Steps Recorder (Steps Recorder keeps a record of steps taken by the user, the data includes user actions such as keyboard input and mouse input user interface data and screen shots)
  703. reg add "HKLM\Software\Policies\Microsoft\Windows\AppCompat" /v "DisableUAR" /t REG_DWORD /d "1" /f
  704.  
  705. rem 0 - Disable sending files to encrypted drives
  706. reg add "HKLM\Software\Policies\Microsoft\Windows\EnhancedStorageDevices" /v "TCGSecurityActivationDisabled" /t REG_DWORD /d "0" /f
  707.  
  708. rem 1 - Disable sync files to one drive
  709. reg add "HKLM\Software\Policies\Microsoft\Windows\OneDrive" /v "DisableFileSyncNGSC" /t REG_DWORD /d "1" /f
  710.  
  711. rem 2 - Disable sending settings to cloud
  712. reg add "HKLM\Software\Policies\Microsoft\Windows\SettingSync" /v "DisableSettingSync" /t REG_DWORD /d "2" /f
  713.  
  714. rem 1 - Disable synchronizing files to cloud
  715. reg add "HKLM\Software\Policies\Microsoft\Windows\SettingSync" /v "DisableSettingSyncUserOverride" /t REG_DWORD /d "1" /f
  716.  
  717. rem 0 - Disable Steps Recorder
  718. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Application-Experience/Steps-Recorder" /v "Enabled" /t REG_DWORD /d "0" /f
  719.  
  720. rem ========================= Windows Scheduled Tasks =========================
  721.  
  722. rem news.softpedia.com/news/windows-10-disk-cleanup-utility-abused-to-bypass-uac-506614.shtml
  723.  
  724. rem Disable Background Synchronization (permanently, it can not be disabled)
  725. schtasks /DELETE /TN "Microsoft\Windows\SettingSync\BackgroundUploadTask" /F
  726.  
  727. schtasks /Change /TN "Adobe Flash Player PPAPI Notifier" /Disable
  728. schtasks /Change /TN "Adobe Flash Player Updater" /Disable
  729. schtasks /Change /TN "AMD Updater" /Disable
  730. schtasks /Change /TN "Driver Easy Scheduled Scan" /Disable
  731.  
  732. schtasks /Change /TN "Microsoft\XblGameSave\XblGameSaveTask" /Disable
  733. schtasks /Change /TN "Microsoft\XblGameSave\XblGameSaveTaskLogon" /Disable
  734.  
  735. schtasks /Change /TN "Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319" /Disable
  736. schtasks /Change /TN "Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 64" /Disable
  737. schtasks /Change /TN "Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 64 Critical" /Disable
  738. schtasks /Change /TN "Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 Critical" /Disable
  739. schtasks /Change /TN "Microsoft\Windows\AppID\SmartScreenSpecific" /Disable
  740. schtasks /Change /TN "Microsoft\Windows\ApplicationData\CleanupTemporaryState" /Disable
  741. schtasks /Change /TN "Microsoft\Windows\ApplicationData\DsSvcCleanup" /Disable
  742. schtasks /Change /TN "Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser" /Disable
  743. schtasks /Change /TN "Microsoft\Windows\Application Experience\ProgramDataUpdater" /Disable
  744. schtasks /Change /TN "Microsoft\Windows\Application Experience\StartupAppTask" /Disable
  745. schtasks /Change /TN "Microsoft\Windows\Autochk\Proxy" /Disable
  746. schtasks /Change /TN "Microsoft\Windows\CloudExperienceHost\CreateObjectTask" /Disable
  747. schtasks /Change /TN "Microsoft\Windows\Customer Experience Improvement Program\Consolidator" /Disable
  748. schtasks /Change /TN "Microsoft\Windows\Customer Experience Improvement Program\KernelCeipTask" /Disable
  749. schtasks /Change /TN "Microsoft\Windows\Customer Experience Improvement Program\UsbCeip" /Disable
  750. schtasks /Change /TN "Microsoft\Windows\Defrag\ScheduledDefrag" /Disable
  751. schtasks /Change /TN "Microsoft\Windows\Diagnosis\Scheduled" /Disable
  752. schtasks /Change /TN "Microsoft\Windows\DiskCleanup\SilentCleanup" /Disable
  753. schtasks /Change /TN "Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector" /Disable
  754. schtasks /Change /TN "Microsoft\Windows\DiskFootprint\Diagnostics" /Disable
  755. schtasks /Change /TN "Microsoft\Windows\DiskFootprint\StorageSense" /Disable
  756. schtasks /Change /TN "Microsoft\Windows\ErrorDetails\EnableErrorDetailsUpdate" /Disable
  757. schtasks /Change /TN "Microsoft\Windows\Feedback\Siuf\DmClient" /Disable
  758. schtasks /Change /TN "Microsoft\Windows\Feedback\Siuf\DmClientOnScenarioDownload" /Disable
  759. schtasks /Change /TN "Microsoft\Windows\File Classification Infrastructure\Property Definition Sync" /Disable
  760. schtasks /Change /TN "Microsoft\Windows\FileHistory\File History (maintenance mode)" /Disable
  761. schtasks /Change /TN "Microsoft\Windows\Management\Provisioning\Logon" /Disable
  762. schtasks /Change /TN "Microsoft\Windows\Maintenance\WinSAT" /Disable
  763. schtasks /Change /TN "Microsoft\Windows\Maps\MapsToastTask" /Disable
  764. schtasks /Change /TN "Microsoft\Windows\Maps\MapsUpdateTask" /Disable
  765. schtasks /Change /TN "Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser" /Disable
  766. schtasks /Change /TN "Microsoft\Windows\Multimedia\SystemSoundsService" /Disable
  767. schtasks /Change /TN "Microsoft\Windows\NlaSvc\WiFiTask" /Disable
  768. schtasks /Change /TN "Microsoft\Windows\NetCfg\BindingWorkItemQueueHandler" /Disable
  769. schtasks /Change /TN "Microsoft\Windows\NetTrace\GatherNetworkInfo" /Disable
  770. schtasks /Change /TN "Microsoft\Windows\Offline Files\Background Synchronization" /Disable
  771. schtasks /Change /TN "Microsoft\Windows\Offline Files\Logon Synchronization" /Disable
  772. schtasks /Change /TN "Microsoft\Windows\PI\Sqm-Tasks" /Disable
  773. schtasks /Change /TN "Microsoft\Windows\Power Efficiency Diagnostics\AnalyzeSystem" /Disable
  774. schtasks /Change /TN "Microsoft\Windows\Ras\MobilityManager" /Disable
  775. schtasks /Change /TN "Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask" /Disable
  776. schtasks /Change /TN "Microsoft\Windows\RetailDemo\CleanupOfflineContent" /Disable
  777. schtasks /Change /TN "Microsoft\Windows\Servicing\StartComponentCleanup" /Disable
  778. schtasks /Change /TN "Microsoft\Windows\SettingSync\BackupTask" /Disable
  779. schtasks /Change /TN "Microsoft\Windows\SettingSync\NetworkStateChangeTask" /Disable
  780. schtasks /Change /TN "Microsoft\Windows\Setup\SetupCleanupTask" /Disable
  781. schtasks /Change /TN "Microsoft\Windows\Shell\FamilySafetyMonitor" /Disable
  782. schtasks /Change /TN "Microsoft\Windows\Shell\FamilySafetyRefresh" /Disable
  783. schtasks /Change /TN "Microsoft\Windows\Shell\IndexerAutomaticMaintenance" /Disable
  784. schtasks /Change /TN "Microsoft\Windows\SpacePort\SpaceAgentTask" /Disable
  785. schtasks /Change /TN "Microsoft\Windows\SpacePort\SpaceManagerTask" /Disable
  786. schtasks /Change /TN "Microsoft\Windows\Speech\SpeechModelDownloadTask" /Disable
  787. schtasks /Change /TN "Microsoft\Windows\TextServicesFramework\MsCtfMonitor" /Disable
  788. schtasks /Change /TN "Microsoft\Windows\TPM\Tpm-HASCertRetr" /Disable
  789. schtasks /Change /TN "Microsoft\Windows\TPM\Tpm-Maintenance" /Disable
  790. schtasks /Change /TN "Microsoft\Windows\User Profile Service\HiveUploadTask" /Disable
  791. schtasks /Change /TN "Microsoft\Windows\WCM\WiFiTask" /Disable
  792. schtasks /Change /TN "Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance" /Disable
  793. schtasks /Change /TN "Microsoft\Windows\Windows Defender\Windows Defender Cleanup" /Disable
  794. schtasks /Change /TN "Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan" /Disable
  795. schtasks /Change /TN "Microsoft\Windows\Windows Defender\Windows Defender Verification" /Disable
  796. schtasks /Change /TN "Microsoft\Windows\Windows Error Reporting\QueueReporting" /Disable
  797. schtasks /Change /TN "Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange" /Disable
  798. schtasks /Change /TN "Microsoft\Windows\Windows Media Sharing\UpdateLibrary" /Disable
  799. schtasks /Change /TN "Microsoft\Windows\Wininet\CacheTask" /Disable
  800. schtasks /Change /TN "Microsoft\Windows\Work Folders\Work Folders Logon Synchronization" /Disable
  801. schtasks /Change /TN "Microsoft\Windows\Work Folders\Work Folders Maintenance Work" /Disable
  802. schtasks /Change /TN "Microsoft\Windows\Workplace Join\Automatic-Device-Join" /Disable
  803.  
  804. rem ========================= Windows Services =========================
  805.  
  806. rem servicedefaults.com/10
  807. rem Security Accounts Manager has to be disabled Manually via services.msc
  808.  
  809. rem Application Information / required by UAC
  810. rem Background Intelligent Transfer Service / required by Windows Updates / depends on Network List Service
  811. rem Credential Manager / required to store credentials (check User Accounts - Credential Manager)
  812. rem COM+ Event System / required by Windows
  813. rem Connected User Experiences and Telemetry / required by Windows Insider and some Windows Store apps like Weather (enable Location in Privacy Settings, it enables Geolocation service)
  814. rem Delivery Optimization / required by Windows Updates
  815. rem Diagnostic Policy Service / might be required to login to Microsoft Account (to find out, there is a working network) and by Windows Diagnostic (Troubleshooting)
  816. rem DHCP Client / required by Windows Updates
  817. rem Distributed Link Tracking Client / required to open shortcuts and System apps (Windows cannot access the specified device, path, or file. You may not have the appropriate permission to access the item.)
  818. rem Geolocation Service / required by some Windows Store apps, it can not be enabled when Connected User Experiences and Telemetry is disabled
  819. rem Microsoft Account Sign-in Assistant / required to login to Microsoft Account
  820. rem Network Connections / required to manage network connections
  821. rem Network Connection Broker / required to change Network Settings
  822. rem Network List Service / required to change Network Settings
  823. rem Network Store Interface Service / required by Windows Store, Updates and some apps like HitmanPro, without it Windows assumes, there is no internet connection
  824. rem One Drive / required by Windows Mail
  825. rem Print Spooler / required by printers
  826. rem Windows Biometric Service / required by biometric devices like a fingerprint reader
  827. rem Windows Connection Manager / required by WiFi and Data Usage
  828. rem Windows Driver Foundation - User-mode Driver Framework / required by some drivers like USB devices
  829. rem Windows Firewall (Base Filtering Engine) / required by Windows Store Apps (0x80073d0a) and Windows Update (0x80240022)
  830. rem Windows Image Acquisition (WIA) / required by scanners
  831.  
  832. rem Isolate a service in its own scvhost.exe
  833. rem answers.microsoft.com/en-us/windows/forum/windows_10-networking/november-update-1511-wifi-issue-wifi-keeps/999a92ab-fa69-4f8a-a9dc-27dfa7385a5e?auth=1
  834. sc config storsvc type= own
  835.  
  836. rem ACP User Service
  837. sc config amdacpusrsvc start= disabled
  838.  
  839. rem AdaptiveSleepService
  840. sc config AdaptiveSleepService start= disabled
  841.  
  842. rem Adobe Flash Player Update Service
  843. sc config AdobeFlashPlayerUpdateSvc start= disabled
  844.  
  845. rem AMD External Events Utility
  846. sc config "AMD External Events Utility" start= disabled
  847.  
  848. rem Application Layer Gateway Service
  849. sc config ALG start= disabled
  850.  
  851. rem Background Intelligent Transfer Service / It will change itself to Automatic regularly, disable Network List Service and it will disable BITS as well
  852. rem www.secureworks.com/blog/malware-lingers-with-bits
  853. sc config BITS start= demand
  854.  
  855. rem Base Filtering Engine
  856. sc config BFE start= disabled
  857.  
  858. rem BitLocker Drive Encryption Service
  859. sc config BDESVC start= disabled
  860.  
  861. rem CDPUserSvc
  862. sc config CDPUserSvc start= disabled
  863.  
  864. rem CNG Key Isolation
  865. sc config KeyIso start= disabled
  866.  
  867. rem Connected User Experiences and Telemetry
  868. sc config DiagTrack start= disabled
  869.  
  870. rem Conexant Audio Message Service
  871. sc config CxAudMsg start= disabled
  872.  
  873. rem Conexant SmartAudio service
  874. sc config SAService start= disabled
  875.  
  876. rem Contact Data
  877. reg add "HKLM\System\CurrentControlSet\Services\PimIndexMaintenanceSvc" /v "Start" /t REG_DWORD /d "4" /f
  878.  
  879. rem Credential Manager
  880. sc config VaultSvc start= disabled
  881.  
  882. rem Delivery Optimization
  883. sc config DoSvc start= demand
  884.  
  885. rem DHCP Client
  886. sc config Dhcp start= disabled
  887.  
  888. rem Diagnostic Policy Service
  889. sc config DPS start= disabled
  890.  
  891. rem Distributed Link Tracking Client
  892. sc config TrkWks start= demand
  893.  
  894. rem Distributed Transaction Coordinator
  895. sc config MSDTC start= disabled
  896.  
  897. rem dmwappushsvc
  898. sc config dmwappushservice start= disabled
  899.  
  900. rem DNS Client (Required by the internet connection, unless you set up DNS servers manually in IPv4/6's properties)
  901. sc config Dnscache start= disabled
  902.  
  903. rem Encrypting File System (EFS)
  904. sc config EFS start= disabled
  905.  
  906. rem Function Discovery Provider Host
  907. sc config fdPHost start= disabled
  908.  
  909. rem Function Discovery Resource Publication
  910. sc config FDResPub start= disabled
  911.  
  912. rem HomeGroup Provider
  913. sc config HomeGroupProvider start= disabled
  914.  
  915. rem IKE and AuthIP IPsec Keying Modules
  916. sc config IKEEXT start= disabled
  917.  
  918. rem IP Helper
  919. sc config iphlpsvc start= disabled
  920.  
  921. rem IPsec Policy Agent
  922. sc config PolicyAgent start= disabled
  923.  
  924. rem Network List Service
  925. sc config netprofm start= disabled
  926.  
  927. rem Network Location Awareness
  928. sc config NlaSvc start= disabled
  929.  
  930. rem Network Store Interface Service (Required by the internet connection, unless you set up IP/DNS manually in IPv4/6's properties)
  931. sc config nsi start= disabled
  932.  
  933. rem Offline Files
  934. sc config CscService start= disabled
  935.  
  936. rem One Drive Service
  937. sc config OneSyncSvc start= disabled
  938.  
  939. rem Print Spooler
  940. sc config Spooler start= disabled
  941.  
  942. rem Program Compatibility Assistant Service
  943. sc config PcaSvc start= disabled
  944.  
  945. rem Remote Desktop Services
  946. sc config TermService start= disabled
  947.  
  948. rem Retail Demo
  949. sc config RetailDemo start=disabled
  950.  
  951. rem Secure Socket Tunneling Protocol Service
  952. sc config SstpSvc start= disabled
  953.  
  954. rem Security Center
  955. sc config wscsvc start= disabled
  956.  
  957. rem Server
  958. sc config LanmanServer start= disabled
  959.  
  960. rem Shell Hardware Detection
  961. sc config ShellHWDetection start= disabled
  962.  
  963. rem Smart Card
  964. sc config SCardSvr start= disabled
  965.  
  966. rem SSDP Discovery
  967. sc config SSDPSRV start= disabled
  968.  
  969. rem Superfetch
  970. sc config SysMain start= disabled
  971.  
  972. rem TCP/IP NetBIOS Helper (Required by some internet connections like aDSL)
  973. sc config lmhosts start= disabled
  974.  
  975. rem TeamViewer
  976. sc config TeamViewer start= disabled
  977.  
  978. rem Update service
  979. sc config "Update service" start= disabled
  980.  
  981. rem User Data Access
  982. reg add "HKLM\System\CurrentControlSet\Services\UserDataSvc" /v "Start" /t REG_DWORD /d "4" /f
  983.  
  984. rem User Data Storage
  985. reg add "HKLM\System\CurrentControlSet\Services\UnistoreSvc" /v "Start" /t REG_DWORD /d "4" /f
  986.  
  987. rem WebClient
  988. sc config WebClient start= disabled
  989.  
  990. rem Windows Biometric Service
  991. sc config WbioSrvc start= disabled
  992.  
  993. rem Windows Connect Now - Config Registrar (Required by WPS WiFi connection)
  994. sc config wcncsvc start= disabled
  995.  
  996. rem Windows Connection Manager (Required by WiFi Connection)
  997. sc config Wcmsvc start= disabled
  998.  
  999. rem Windows Error Reporting Service
  1000. sc config WerSvc start= disabled
  1001.  
  1002. rem Windows Firewall
  1003. sc config MpsSvc start= disabled
  1004.  
  1005. rem Windows Font Cache Service
  1006. sc config FontCache start= disabled
  1007.  
  1008. rem Windows Network Data Usage Monitoring Driver service (Kernel mode driver)
  1009. sc config ndu start= disabled
  1010.  
  1011. rem Windows Image Acquisition (WIA)
  1012. sc config stisvc start= disabled
  1013.  
  1014. rem Windows Push Notifications System Service
  1015. sc config WpnService start= disabled
  1016.  
  1017. rem Windows Remote Management (WS-Management)
  1018. sc config WinRM start= disabled
  1019.  
  1020. rem Windows Search
  1021. sc config WSearch start= disabled
  1022.  
  1023. rem Windows Update
  1024. sc config wuauserv start= demand
  1025.  
  1026. rem WinHTTP Web Proxy Auto-Discovery Service
  1027. sc config WinHttpAutoProxySvc start= disabled
  1028.  
  1029. rem Wise Boot Assistant
  1030. sc config WiseBootAssistant start= disabled
  1031.  
  1032. rem WMPNetworkSVC helps windows media player to share its library with network
  1033. sc config WMPNetworkSvc start= disabled
  1034.  
  1035. rem Workstation
  1036. sc config LanmanWorkstation start= disabled
  1037.  
  1038. rem ========================= Windows Shell =========================
  1039.  
  1040. rem www.tenforums.com/tutorials/3123-clsid-key-guid-shortcuts-list-windows-10-a.html
  1041.  
  1042. rem Add “Take Ownership” Option in Files and Folders Context Menu in Windows (Disabled, replace rem with reg)
  1043. reg add "HKCR\*\shell\runas" /ve /t REG_SZ /d "Take ownership" /f
  1044. reg add "HKCR\*\shell\runas" /v "HasLUAShield" /t REG_SZ /d "" /f
  1045. reg add "HKCR\*\shell\runas" /v "NoWorkingDirectory" /t REG_SZ /d "" /f
  1046. reg add "HKCR\*\shell\runas\command" /ve /t REG_SZ /d "cmd.exe /c takeown /f \"%%1\" && icacls \"%%1\" /grant administrators:F" /f
  1047. reg add "HKCR\*\shell\runas\command" /v "IsolatedCommand" /t REG_SZ /d "cmd.exe /c takeown /f \"%%1\" && icacls \"%%1\" /grant administrators:F" /f
  1048. reg add "HKCR\Directory\shell\runas" /ve /t REG_SZ /d "Take ownership" /f
  1049. reg add "HKCR\Directory\shell\runas" /v "HasLUAShield" /t REG_SZ /d "" /f
  1050. reg add "HKCR\Directory\shell\runas" /v "NoWorkingDirectory" /t REG_SZ /d "" /f
  1051. reg add "HKCR\Directory\shell\runas\command" /ve /t REG_SZ /d "cmd.exe /c takeown /f \"%%1\" /r /d y && icacls \"%%1\" /grant administrators:F /t" /f
  1052. reg add "HKCR\Directory\shell\runas\command" /v "IsolatedCommand" /t REG_SZ /d "cmd.exe /c takeown /f \"%%1\" /r /d y && icacls \"%%1\" /grant administrators:F /t" /f
  1053.  
  1054. rem ========================= Windows Updates =========================
  1055.  
  1056. rem technet.microsoft.com/en-us/library/dd939844(v=ws.10).aspx
  1057. rem support.microsoft.com/en-us/help/12387/windows-10-update-history
  1058.  
  1059. rem Use Windows Update MiniTool to check/download/install/hide updates
  1060. rem forums.mydigitallife.info/threads/64939-Windows-Update-MiniTool
  1061.  
  1062. rem Disable Windows Store Automatic App Updates
  1063. schtasks /Change /TN "Microsoft\Windows\WindowsUpdate\Automatic App Update" /Disable
  1064. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\WindowsStore\WindowsUpdate" /v "AutoDownload" /t REG_DWORD /d "2" /f
  1065.  
  1066. rem 1 = Disable Automatic Updates / Remove - Enable Automatic Updates (Manual checking for updates triggers automatic download of updates and ignores AUOptions)
  1067. reg add "HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU" /v "NoAutoUpdate" /t REG_DWORD /d "1" /f
  1068.  
  1069. rem Choose how updates are delivered / 0 - Get Updates from MS / 1 - get updates from MS and from/to PCs on my local network / 2 - get updates from MS and from/to PCs on my local network and PCs on the internet
  1070. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\DeliveryOptimization\Config" /v "DODownloadMode" /t REG_DWORD /d "0" /f
  1071.  
  1072. rem 0 - Default / 1 - Defer upgrades, new Windows features won’t be downloaded or installed for several months. Deferring upgrades doesn’t affect security updates.
  1073. reg add "HKLM\Software\Microsoft\WindowsUpdate\UX\Settings" /v "DeferUpgrade" /t REG_DWORD /d "0" /f
  1074.  
  1075. rem Active Hours - Windows Updates will not automatically restart your device during active hours
  1076. reg add "HKLM\Software\Microsoft\WindowsUpdate\UX\Settings" /v "ActiveHoursEnd" /t REG_DWORD /d "0" /f
  1077. reg add "HKLM\Software\Microsoft\WindowsUpdate\UX\Settings" /v "ActiveHoursStart" /t REG_DWORD /d "12" /f
  1078.  
  1079. rem 1 - Disable Malicious Software Removal Tool offered via Windows Updates (MRT)
  1080. reg add "HKLM\Software\Policies\Microsoft\MRT" /v DontOfferThroughWUAU /t REG_DWORD /d "1" /f
  1081.  
  1082. rem 1 - Disable driver updates in Windows Update (Better to be shown and then hidden than just completely ignored)
  1083. reg add "HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate" /v "ExcludeWUDriversInQualityUpdate" /t REG_DWORD /d "1" /f
  1084.  
  1085. rem 1 - Restart notification allows user to initiate the restart or postpone restart. This notification does not have a countdown timer. The user must initiate the system restart.
  1086. reg add "HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU" /v "AlwaysAutoRebootAtScheduledTime" /t REG_DWORD /d "0" /f
  1087. reg add "HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU" /v "NoAutoRebootWithLoggedOnUsers" /t REG_DWORD /d "1" /f
  1088.  
  1089. sc config wuauserv start= demand
  1090. schtasks /DELETE /TN "Microsoft\Windows\UpdateOrchestrator\Schedule Scan" /f
  1091. schtasks /Change /TN "Microsoft\Windows\UpdateOrchestrator\Reboot" /Disable
  1092. schtasks /Change /TN "Microsoft\Windows\UpdateOrchestrator\Refresh Settings" /Disable
  1093. schtasks /Change /TN "Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_Display" /Disable
  1094. schtasks /Change /TN "Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_ReadyToReboot" /Disable
  1095. schtasks /DELETE /TN "Microsoft\Windows\WindowsUpdate\Scheduled Start" /f
  1096. schtasks /Change /TN "Microsoft\Windows\WindowsUpdate\sih" /Disable
  1097. schtasks /Change /TN "Microsoft\Windows\WindowsUpdate\sihboot" /Disable
  1098.  
  1099. rem ========================= Windows Waypoint =========================
  1100.  
  1101. fsutil usn deletejournal /d /n c:
  1102.  
  1103. rem Close Edge process
  1104. taskkill /f /im dllhost.exe
  1105.  
  1106. rem Run CCleaner and shutdown
  1107. start "" "C:\Program Files\CCleaner\CCleaner64.exe" /AUTO /SHUTDOWN
  1108.  
  1109. rem Is that all? Is that ALL? Yes, that is all. That is all.
  1110. rem youtu.be/MTjs5eo4BfI?t=1m47s
  1111. rem postimg.org/image/d5l04totl
Add Comment
Please, Sign In to add comment
Public Pastes
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy.  OK, I Understand
Not a member of Pastebin yet?
Sign Up, it unlocks many cool features!