SHARE
TWEET

Windows Tweaks Light

TairikuOkami Apr 6th, 2016 (edited) 9,165 Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. rem USE AT OWN RISK AS IS WITHOUT WARRANTY OF ANY KIND !!!!!
  2.  
  3. rem Windows Tweaks Light (to keep most of the stuff working, like Notification Center, Store, Windows Firewall & Updates)
  4.  
  5. rem Before making any changes, it is preferable to create a registry backup
  6. rem https://support.microsoft.com/en-us/help/322756/how-to-back-up-and-restore-the-registry-in-windows
  7. rem http://www.tweaking.com/content/page/registry_backup.html
  8.  
  9. rem Or even better, create a system image
  10. rem http://www.aomeitech.com/ab/standard.html
  11. rem https://www.macrium.com/reflectfree
  12.  
  13. rem "ValidateAdminCodeSignatures" will prevent exe without a digital signature to run as admin: "A referral was returned from the server."
  14. rem reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "ValidateAdminCodeSignatures" /t REG_DWORD /d "0" /f
  15.  
  16.  
  17. rem ________________________________________________________________________________________
  18.  
  19.  
  20. rem Remove various folders, startup entries and policies
  21. rem Restore essential startup entries
  22.  
  23. rem Software Setup
  24. rem Windows Setup plus Manual Config
  25.  
  26. rem Windows Defender Security Center
  27. rem Windows Logging
  28. rem Windows Error Reporting
  29. rem Windows Explorer
  30. rem Windows OneDrive
  31. rem Windows Optimizations
  32. rem Windows Policies
  33. rem Windows Scheduled Tasks
  34. rem Windows Services
  35. rem Windows Settings
  36. rem Windows Shell
  37. rem Windows Store
  38.  
  39.  
  40. rem ============= Remove various files, folders, startup entries and policies ==============
  41.  
  42.  
  43. rem Remove user account
  44. net user defaultuser0 /delete
  45.  
  46. rem Remove randomly generated files/folders by installers
  47. rd "%SystemDrive%\AMD" /s /q
  48. rd "%SystemDrive%\drivers" /s /q
  49.  
  50. rem Remove Windows Powershell (to restore run "sfc /scannow")
  51. takeown /f "%ProgramFiles%\WindowsPowerShell" /a /r /d y
  52. icacls "%ProgramFiles%\WindowsPowerShell" /inheritance:r /grant:r Administrators:(OI)(CI)F /t /l /q /c
  53. rd "%ProgramFiles%\WindowsPowerShell" /s /q
  54. takeown /f "%ProgramFiles(x86)%\WindowsPowerShell" /a /r /d y
  55. icacls "%ProgramFiles(x86)%\WindowsPowerShell" /inheritance:r /grant:r Administrators:(OI)(CI)F /t /l /q /c
  56. rd "%ProgramFiles(x86)%\WindowsPowerShell" /s /q
  57. takeown /f "%WinDir%\System32\WindowsPowerShell" /a /r /d y
  58. icacls "%WinDir%\System32\WindowsPowerShell" /inheritance:r /grant:r Administrators:(OI)(CI)F /t /l /q /c
  59. rd "%WinDir%\System32\WindowsPowerShell" /s /q
  60. takeown /f "%WinDir%\SysWOW64\WindowsPowerShell" /a /r /d y
  61. icacls "%WinDir%\SysWOW64\WindowsPowerShell" /inheritance:r /grant:r Administrators:(OI)(CI)F /t /l /q /c
  62. rd "%WinDir%\SysWOW64\WindowsPowerShell" /s /q
  63.  
  64. rem Remove Startup Folders
  65. takeown /f "%ProgramData%\Microsoft\Windows\Start Menu\Programs\Startup" /a /r /d y
  66. icacls "%ProgramData%\Microsoft\Windows\Start Menu\Programs\Startup" /inheritance:r /grant:r Administrators:(OI)(CI)F /t /l /q /c
  67. del "%ProgramData%\Microsoft\Windows\Start Menu\Programs\Startup\*" /s /f /q
  68. del "%AppData%\Microsoft\Windows\Start Menu\Programs\Startup\*" /s /f /q
  69.  
  70. reg delete "HKCU\Software\Microsoft\Command Processor" /v "AutoRun" /f
  71. reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\AdvertisingInfo" /f
  72. reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved" /f
  73. reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\PackagedAppXDebug" /f
  74. reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies" /f
  75. reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /f
  76. reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce" /f
  77. reg delete "HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows" /v "Load" /f
  78. reg delete "HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" /v "Shell" /f
  79. reg delete "HKCU\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell" /f
  80. reg delete "HKCU\Software\Policies" /f
  81. reg delete "HKLM\Software\Microsoft\Command Processor" /v "AutoRun" /f
  82. reg delete "HKLM\Software\Microsoft\Policies" /f
  83. reg delete "HKLM\Software\Microsoft\Tracing" /f
  84. reg delete "HKLM\Software\Microsoft\Windows\CurrentVersion\AppModelUnlock" /f
  85. reg delete "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects" /f
  86. reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks" /f
  87. reg delete "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved" /f
  88. reg delete "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies" /f
  89. reg delete "HKLM\Software\Microsoft\Windows\CurrentVersion\Run" /f
  90. reg delete "HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnce" /f
  91. reg delete "HKLM\Software\Microsoft\Windows\CurrentVersion\RunOnceEx" /f
  92. reg delete "HKLM\Software\Microsoft\Windows\CurrentVersion\ShellServiceObjectDelayLoad" /f
  93. reg delete "HKLM\Software\Microsoft\Windows\CurrentVersion\WindowsStore\WindowsUpdate" /f
  94. reg delete "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Image File Execution Options" /f
  95. reg delete "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Terminal Server" /f
  96. reg delete "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Windows" /v "AppInit_DLLs" /f
  97. reg delete "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" /v "Shell" /f
  98. reg delete "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" /v "Userinit" /f
  99. reg delete "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" /v "VMApplet" /f
  100. reg delete "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\AlternateShells" /f
  101. reg delete "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell" /f
  102. reg delete "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Taskman" /f
  103. reg delete "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit" /f
  104. reg delete "HKLM\Software\Policies" /f
  105. reg delete "HKLM\Software\WOW6432Node\Microsoft\Policies" /f
  106. reg delete "HKLM\Software\WOW6432Node\Microsoft\Tracing" /f
  107. reg delete "HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects" /f
  108. reg delete "HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Run" /f
  109. reg delete "HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnce" /f
  110. reg delete "HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\RunOnceEx" /f
  111. reg delete "HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Policies" /f
  112. reg delete "HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\WindowsStore\WindowsUpdate" /f
  113. reg delete "HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Image File Execution Options" /f
  114. reg delete "HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Windows" /v "AppInit_DLLs" /f
  115. reg delete "HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon" /v "Shell" /f
  116. reg delete "HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon" /v "Userinit" /f
  117. reg delete "HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon" /v "VMApplet" /f
  118. reg delete "HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\AlternateShells" /f
  119. reg delete "HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\Shell" /f
  120. reg delete "HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\Taskman" /f
  121. reg delete "HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon\Userinit" /f
  122. reg delete "HKLM\Software\WOW6432Node\Policies" /f
  123. reg delete "HKLM\System\CurrentControlSet\Control\Keyboard Layout" /v "Scancode Map" /f
  124. reg delete "HKLM\System\CurrentControlSet\Control\SafeBoot" /v "AlternateShell" /f
  125. reg delete "HKLM\System\CurrentControlSet\Control\SecurePipeServers\winreg" /f
  126. reg delete "HKLM\System\CurrentControlSet\Control\Session Manager" /v "BootExecute" /f
  127. reg delete "HKLM\System\CurrentControlSet\Control\Session Manager" /v "Execute" /f
  128. reg delete "HKLM\System\CurrentControlSet\Control\Session Manager" /v "SETUPEXECUTE" /f
  129. reg delete "HKLM\System\CurrentControlSet\Control\Terminal Server\Wds\rdpwd" /v "StartupPrograms" /f
  130.  
  131.  
  132. rem =========================== Restore essential startup entries ==========================
  133.  
  134.  
  135. rem Run bcdedit command to check for the current status / Yes = True / No = False
  136. rem https://msdn.microsoft.com/en-us/library/windows/hardware/ff542202(v=vs.85).aspx
  137. bcdedit /deletevalue {current} safeboot
  138. bcdedit /deletevalue {current} safebootalternateshell
  139. bcdedit /deletevalue {current} removememory
  140. bcdedit /deletevalue {current} truncatememory
  141. bcdedit /deletevalue {default} safeboot
  142. bcdedit /deletevalue {default} safebootalternateshell
  143. bcdedit /deletevalue {default} removememory
  144. bcdedit /deletevalue {default} truncatememory
  145. bcdedit /set {bootmgr} displaybootmenu no
  146. bcdedit /set {current} advancedoptions false
  147. bcdedit /set {current} bootems no
  148. bcdedit /set {current} bootmenupolicy legacy
  149. bcdedit /set {current} bootstatuspolicy IgnoreAllFailures
  150. bcdedit /set {current} recoveryenabled no
  151. bcdedit /set {default} advancedoptions false
  152. bcdedit /set {default} bootems no
  153. bcdedit /set {default} bootmenupolicy legacy
  154. bcdedit /set {default} bootstatuspolicy IgnoreAllFailures
  155. bcdedit /set {default} recoveryenabled no
  156.  
  157. reg add "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" /v "Shell" /t REG_SZ /d "explorer.exe" /f
  158. reg add "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" /v "Userinit" /t REG_SZ /d "C:\Windows\System32\userinit.exe," /f
  159. reg add "HKLM\Software\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Winlogon" /v "Shell" /t REG_SZ /d "explorer.exe" /f
  160. reg add "HKLM\System\CurrentControlSet\Control\Session Manager" /v "BootExecute" /t REG_MULTI_SZ /d "autocheck autochk *" /f
  161. reg add "HKLM\System\CurrentControlSet\Control\Session Manager" /v "SETUPEXECUTE" /t REG_MULTI_SZ /d "" /f
  162.  
  163.  
  164. rem =================================== Software Setup =====================================
  165.  
  166.  
  167. rem 7-zip
  168. reg add "HKCU\Software\7-Zip\Compression" /v "Archiver" /t "REG_SZ" /d "7z" /f
  169. reg add "HKCU\Software\7-Zip\Compression" /v "Level" /t "REG_DWORD" /d "9" /f
  170. reg add "HKCU\Software\7-Zip\Compression\Options\7z" /v "Level" /t "REG_DWORD" /d "9" /f
  171. reg add "HKCU\Software\7-Zip\Options" /v "CascadedMenu" /t "REG_DWORD" /d "1" /f
  172. reg add "HKCU\Software\7-Zip\Options" /v "ContextMenu" /t "REG_DWORD" /d "262" /f
  173.  
  174. rem XnView
  175. reg add "HKCU\Software\XnView" /v "UseRegistry" /t "REG_DWORD" /d "1" /f
  176. reg add "HKCU\Software\XnView\Browser" /v "ShowToolTips" /t "REG_DWORD" /d "0" /f
  177. reg add "HKCU\Software\XnView\Browser" /v "StartupDirectory" /t "REG_SZ" /d "%UserProfile%\Desktop" /f
  178. reg add "HKCU\Software\XnView\Capture" /v "Delay" /t "REG_DWORD" /d "2" /f
  179. reg add "HKCU\Software\XnView\Capture" /v "Directory" /t "REG_SZ" /d "%UserProfile%\Desktop" /f
  180. reg add "HKCU\Software\XnView\Capture" /v "HotKey" /t "REG_DWORD" /d "9" /f
  181. reg add "HKCU\Software\XnView\Capture" /v "IncludeCursor" /t "REG_DWORD" /d "0" /f
  182. reg add "HKCU\Software\XnView\Capture" /v "Method" /t "REG_DWORD" /d "0" /f
  183. reg add "HKCU\Software\XnView\Capture" /v "Multiple" /t "REG_DWORD" /d "1" /f
  184. reg add "HKCU\Software\XnView\Capture" /v "SaveIntoFile" /t "REG_DWORD" /d "1" /f
  185. reg add "HKCU\Software\XnView\Start" /v "MaximizeXnviewAtStartup" /t "REG_DWORD" /d "1" /f
  186. reg add "HKCU\Software\XnView\Start" /v "OnlyOneInstance" /t "REG_DWORD" /d "1" /f
  187. reg add "HKCU\Software\XnView\Start" /v "PathSave" /t "REG_SZ" /d "%UserProfile%\Desktop" /f
  188. reg add "HKCU\Software\XnView\Start" /v "ShowSaveDlg" /t "REG_DWORD" /d "0" /f
  189.  
  190.  
  191. rem =========================== Windows Setup plus Manual Config ===========================
  192.  
  193.  
  194. rem Windows Setup 1 (Basics plus Manual Config) - https://pastebin.com/CKQed9ZX
  195. rem Windows Setup 2 (Install drivers/software from folders) - https://pastebin.com/Lxe09qsU
  196. rem Disable Windows Defender (run twice to disable services) - https://pastebin.com/kYCVzZPz
  197.  
  198.  
  199. rem =========================== Windows Defender Security Center ===========================
  200.  
  201.  
  202. rem ________________________________________________________________________________________
  203. rem Windows Defender Security Center services
  204. reg add "HKLM\System\CurrentControlSet\Services\SecurityHealthService" /v "Start" /t REG_DWORD /d "2" /f
  205.  
  206.  
  207. rem =========================== Windows Defender Security Center ===========================
  208. rem -------------------------------- App & browser control ---------------------------------
  209.  
  210. rem Off - Disable Windows SmartScreen / On - Enable Windows SmartScreen
  211. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer" /v "SmartScreenEnabled" /t REG_SZ /d "On" /f
  212.  
  213. rem 0 - Disable SmartScreen Filter in Microsoft Edge / 1 - Enable
  214. reg add "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\PhishingFilter" /v "EnabledV9" /t REG_DWORD /d "1" /f
  215.  
  216. rem 0 - Disable Windows SmartScreen for Windows Store Apps / 1 - Enable
  217. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\AppHost" /v "EnableWebContentEvaluation" /t "REG_DWORD" /d "1" /f
  218.  
  219. rem ________________________________________________________________________________________
  220. schtasks /Change /TN "Microsoft\Windows\AppID\SmartScreenSpecific" /Enable
  221.  
  222.  
  223. rem =========================== Windows Defender Security Center ===========================
  224. rem ----------------------------- Device performance & health ------------------------------
  225.  
  226. rem ________________________________________________________________________________________
  227. rem Specifies how the System responds when a user tries to install device driver files that are not digitally signed / 00 - Ignore / 01 - Warn / 02 - Block
  228. reg add "HKLM\Software\Microsoft\Driver Signing" /v "Policy" /t REG_BINARY /d "01" /f
  229.  
  230. rem 1 - Prevent device metadata retrieval from the Internet / Do not automatically download manufacturers’ apps and custom icons available for your devices
  231. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Device Metadata" /v "PreventDeviceMetadataFromNetwork" /t REG_DWORD /d "0" /f
  232. schtasks /Change /TN "Microsoft\Windows\Device Setup\Metadata Refresh" /Enable
  233.  
  234. rem Do you want Windows to download driver Software / 0 - Never / 1 - Allways / 2 - Install driver Software, if it is not found on my computer
  235. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\DriverSearching" /v "SearchOrderConfig" /t REG_DWORD /d "1" /f
  236.  
  237. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\DriverSearching" /v "DontSearchWindowsUpdate" /t REG_DWORD /d "0" /f
  238.  
  239. rem 1 - Disable driver updates in Windows Update (Better to be shown and then hidden than just completely ignored)
  240. reg add "HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate" /v "ExcludeWUDriversInQualityUpdate" /t REG_DWORD /d "1" /f
  241.  
  242. rem Avoid the driver signing enforcement for EV cert / SHA256 Microsoft Windows signed drivers which is further enforced via Secure Boot
  243. rem reg add "HKLM\System\ControlSet001\Control\CI\Policy" /v "UpgradedSystem" /t REG_DWORD /d "1" /f
  244.  
  245.  
  246. rem =========================== Windows Defender Security Center ===========================
  247. rem ---------------------------- Firewall & network protection -----------------------------
  248.  
  249. rem Enable Windows Firewall / AllProfiles / CurrentProfile / DomainProfile / PrivateProfile / PublicProfile
  250. rem https://technet.microsoft.com/en-us/library/cc771920(v=ws.10).aspx
  251. netsh advfirewall set allprofiles state on
  252.  
  253. rem Block all inbound network traffic and all outbound
  254. netsh advfirewall set DomainProfile firewallpolicy blockinboundalways,blockoutbound
  255. netsh advfirewall set PrivateProfile firewallpolicy blockinboundalways,blockoutbound
  256. netsh advfirewall set PublicProfile firewallpolicy blockinboundalways,allowoutbound
  257.  
  258.  
  259. rem =================================== Windows Logging ====================================
  260.  
  261.  
  262. rem https://msdn.microsoft.com/en-us/library/windows/desktop/aa363687(v=vs.85).aspx
  263. rem DiagLog required by Diagnostic Policy Service
  264. rem perfmon
  265.  
  266. reg add "HKLM\System\CurrentControlSet\Control\WMI\Autologger\ReadyBoot" /v "Start" /t REG_DWORD /d "0" /f
  267.  
  268.  
  269. rem ================================ Windows Error Reporting ===============================
  270.  
  271.  
  272. rem https://msdn.microsoft.com/en-us/library/windows/desktop/bb513638(v=vs.85).aspx
  273.  
  274. rem 1 - Disable Windows Error Reporting (WER)
  275. reg add "HKLM\Software\Microsoft\PCHealth\ErrorReporting" /v "DoReport" /t REG_DWORD /d "0" /f
  276. reg add "HKCU\Software\Microsoft\Windows\Windows Error Reporting" /v "Disabled" /t REG_DWORD /d "1" /f
  277. reg add "HKLM\Software\Microsoft\Windows\Windows Error Reporting" /v "Disabled" /t REG_DWORD /d "1" /f
  278. reg add "HKLM\Software\Policies\Microsoft\Windows\Windows Error Reporting" /v "Disabled" /t REG_DWORD /d "1" /f
  279.  
  280. rem 1 - Disable WER sending second-level data
  281. reg add "HKCU\Software\Microsoft\Windows\Windows Error Reporting" /v "DontSendAdditionalData" /t REG_DWORD /d "1" /f
  282. reg add "HKLM\Software\Microsoft\Windows\Windows Error Reporting" /v "DontSendAdditionalData" /t REG_DWORD /d "1" /f
  283.  
  284. rem 1 - Disable WER crash dialogs, popups
  285. reg add "HKLM\Software\Microsoft\PCHealth\ErrorReporting" /v "ShowUI" /t REG_DWORD /d "0" /f
  286. reg add "HKCU\Software\Microsoft\Windows\Windows Error Reporting" /v "DontShowUI" /t REG_DWORD /d "1" /f
  287. reg add "HKLM\Software\Microsoft\Windows\Windows Error Reporting" /v "DontShowUI" /t REG_DWORD /d "1" /f
  288.  
  289. rem 1 - Disable WER logging
  290. reg add "HKCU\Software\Microsoft\Windows\Windows Error Reporting" /v "LoggingDisabled" /t REG_DWORD /d "1" /f
  291. reg add "HKLM\Software\Microsoft\Windows\Windows Error Reporting" /v "LoggingDisabled" /t REG_DWORD /d "1" /f
  292.  
  293. rem Disable System Debugger (Dr. Watson)
  294. reg add "HKLM\Software\Microsoft\Windows NT\CurrentVersion\AeDebug" /v "Auto" /t REG_SZ /d "0" /f
  295.  
  296. schtasks /Change /TN "Microsoft\Windows\ErrorDetails\EnableErrorDetailsUpdate" /Disable
  297. schtasks /Change /TN "Microsoft\Windows\Windows Error Reporting\QueueReporting" /Disable
  298.  
  299. rem Windows Error Reporting Service
  300. sc config WerSvc start= disabled
  301.  
  302.  
  303. rem =================================== Windows Explorer ===================================
  304. rem --------------------------------------- Options ----------------------------------------
  305. rem ....................................... General ........................................
  306.  
  307. rem 2 - Open File Explorer to Quick access / 1 - Open File Explorer to This PC / 3 - Open File Explorer to Downloads
  308. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "LaunchTo" /t REG_DWORD /d "1" /f
  309.  
  310. rem Single-click to open an item (point to select)
  311. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer" /v "ShellState" /t REG_BINARY /d "2400000017a8000000000000000000000000000001000000130000000000000073000000" /f
  312.  
  313. rem 2 - Underline icon titles consistent with my browser / 3 - Underline icon titles only when I point at them
  314. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer" /v "IconUnderline" /t REG_DWORD /d "2" /f
  315.  
  316.  
  317. rem =================================== Windows Explorer ===================================
  318. rem --------------------------------------- Options ----------------------------------------
  319. rem ........................................ View .........................................
  320.  
  321. rem Folder Views remember Apply to Folders (Still the desired View has to be selected manually, then click Apply to Folders, then close Explorer ASAP)
  322. reg delete "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags" /f
  323. reg add "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\AllFolders\Shell" /v "FolderType" /t REG_SZ /d "NotSpecified" /f
  324.  
  325.  
  326. rem =================================== Windows Explorer ===================================
  327. rem --------------------------------------- Options ----------------------------------------
  328. rem .................................. Advanced Settings ...................................
  329.  
  330. rem 1 - Show hidden files, folders and drives
  331. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "Hidden" /t REG_DWORD /d "1" /f
  332.  
  333. rem 0 - Show extensions for known file types
  334. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "HideFileExt" /t REG_DWORD /d "0" /f
  335.  
  336. rem 0 - Hide protected operating system files
  337. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "ShowSuperHidden" /t REG_DWORD /d "1" /f
  338.  
  339. rem 1 - Launch folder windows in a separate process
  340. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "SeparateProcess" /t REG_DWORD /d "1" /f
  341.  
  342. rem 1 - Show Sync Provider Notifications in Windows Explorer (ADs)
  343. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "ShowSyncProviderNotifications" /t REG_DWORD /d "0" /f
  344.  
  345. rem 1 - Use Sharing Wizard
  346. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "SharingWizardOn" /t REG_DWORD /d "0" /f
  347.  
  348. rem Navigation pane - 1 - Expand to open folder
  349. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "NavPaneExpandToCurrentFolder" /t REG_DWORD /d "0" /f
  350.  
  351. rem ________________________________________________________________________________________
  352. rem 0 - All of the components of Windows Explorer run a single process / 1 - All instances of Windows Explorer run in one process and the Desktop and Taskbar run in a separate process
  353. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer" /v "DesktopProcess" /t REG_DWORD /d "1" /f
  354.  
  355. rem Yes - Use Inline AutoComplete in File Explorer and Run Dialog / No
  356. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoComplete" /v "Append Completion" /t REG_SZ /d "Yes" /f
  357.  
  358. rem 1 - Display confirmation dialog when deleting files
  359. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v "ConfirmFileDelete" /t REG_DWORD /d "1" /f
  360.  
  361. rem 1 - Disable Look for an app in the Store (How do you want to open this file)
  362. reg add "HKLM\Software\Policies\Microsoft\Windows\Explorer" /v "NoUseStoreOpenWith" /t REG_DWORD /d "1" /f
  363.  
  364.  
  365. rem ================================== Windows OneDrive ====================================
  366.  
  367.  
  368. rem 0 - Remove from Windows Explorer
  369. reg add "HKCR\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}" /v "System.IsPinnedToNameSpaceTree" /t REG_DWORD /d "0" /f
  370. reg add "HKCR\Wow6432Node\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}" /v "System.IsPinnedToNameSpaceTree" /t REG_DWORD /d "0" /f
  371. reg add "HKCU\Software\Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}" /v "System.IsPinnedToNameSpaceTree" /t REG_DWORD /d "0" /f
  372. reg add "HKCU\Software\Classes\Wow6432Node\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}" /v "System.IsPinnedToNameSpaceTree" /t REG_DWORD /d "0" /f
  373.  
  374. rem Hide One Drive Icon on Desktop
  375. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel" /v "{018D5C66-4533-4307-9B53-224DE2ED1FE6}" /t REG_DWORD /d "1" /f
  376.  
  377. rem 1 - Disable sync files to One Drive
  378. reg add "HKCU\Software\Microsoft\OneDrive" /v "DisablePersonalSync" /t REG_DWORD /d "1" /f
  379. reg add "HKLM\Software\Policies\Microsoft\Windows\OneDrive" /v "DisableFileSync" /t REG_DWORD /d "1" /f
  380. reg add "HKLM\Software\Policies\Microsoft\Windows\OneDrive" /v "DisableFileSyncNGSC" /t REG_DWORD /d "1" /f
  381. reg add "HKLM\Software\Wow6432Node\Policies\Microsoft\Windows\Onedrive" /v "DisableFileSyncNGSC" /t REG_DWORD /d "1" /f
  382.  
  383. rem 1 - Disable saving Libraries to OneDrive
  384. reg add "HKLM\Software\Policies\Microsoft\Windows\OneDrive" /v "DisableLibrariesDefaultSaveToOneDrive" /t REG_DWORD /d "0" /f
  385. reg add "HKLM\Software\Wow6432Node\Policies\Microsoft\Windows\Onedrive" /v "DisableLibrariesDefaultSaveToOneDrive" /t REG_DWORD /d "1" /f
  386.  
  387. rem 1 - Disable Sync over metered network
  388. reg add "HKLM\Software\Policies\Microsoft\Windows\OneDrive" /v "DisableMeteredNetworkFileSync" /t REG_DWORD /d "1" /f
  389. reg add "HKLM\Software\Wow6432Node\Policies\Microsoft\Windows\Onedrive" /v "DisableMeteredNetworkFileSync" /t REG_DWORD /d "1" /f
  390.  
  391. rem Remove Startup entry
  392. reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "OneDrive" /f
  393.  
  394. rem Disable Service
  395. sc config OneSyncSvc start= disabled
  396. sc config OneSyncSvc_Session1 start= disabled
  397.  
  398. rem Disable Task
  399. schtasks /Change /TN "OneDrive Standalone Update Task v2" /Disable
  400.  
  401.  
  402. rem ================================ Windows Optimizations =================================
  403.  
  404.  
  405. rem https://blogs.technet.microsoft.com/markrussinovich/2008/07/21/pushing-the-limits-of-windows-physical-memory
  406. rem https://channel9.msdn.com/Blogs/Seth-Juarez/Memory-Compression-in-Windows-10-RTM
  407.  
  408. rem Determines whether user processes end automatically when the user either logs off or shuts down / 1 - Processes end automatically
  409. reg add "HKCU\Control Panel\Desktop" /v "AutoEndTasks" /t REG_SZ /d "1" /f
  410.  
  411. rem Specifies the number of times the taskbar button flashes to notify the user that the system has activated a background window
  412. rem If the time elapsed since the last user input exceeds the value of the ForegroundLockTimeout entry, the window will automatically be brought to the foreground
  413. reg add "HKCU\Control Panel\Desktop" /v "ForegroundFlashCount" /t REG_SZ /d "0" /f
  414.  
  415. rem ForegroundLockTimeout specifies the time in milliseconds, following user input, during which the system keeps applications from moving into the foreground / 0 - Disabled / 200000 - Default
  416. reg add "HKCU\Control Panel\Desktop" /v "ForegroundLockTimeout" /t REG_DWORD /d "0" /f
  417.  
  418. rem Specifies in milliseconds how long the System waits for user processes to end after the user clicks the End Task command button in Task Manager
  419. reg add "HKCU\Control Panel\Desktop" /v "HungAppTimeout" /t REG_SZ /d "25000" /f
  420.  
  421. rem Determines how long the System waits for user processes to end after the user attempts to log off or to shut down
  422. reg add "HKCU\Control Panel\Desktop" /v "WaitToKillAppTimeout" /t REG_SZ /d "25000" /f
  423.  
  424. rem Determines in milliseconds how long the System waits for services to stop after notifying the service that the System is shutting down
  425. reg add "HKLM\System\CurrentControlSet\Control" /v "WaitToKillServiceTimeout" /t REG_SZ /d "25000" /f
  426.  
  427. rem Determines in milliseconds the interval from the time the cursor is pointed at a menu until the menu items are displayed
  428. reg add "HKCU\Control Panel\Desktop" /v "MenuShowDelay" /t REG_SZ /d "0" /f
  429.  
  430. rem  Mouse Hover Time in milliseconds before Pop-up Display
  431. reg add "HKCU\Control Panel\Mouse" /v "MouseHoverTime" /t REG_SZ /d "0" /f
  432.  
  433. rem How long in milliseconds you want to have for a startup delay time for desktop apps that run at startup to load
  434. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Serialize" /v "StartupDelayInMSec" /t REG_DWORD /d "0" /f
  435.  
  436. rem n - Disable Background disk defragmentation / y - EnableHow long in milliseconds you want to have for a startup delay time for desktop apps that run at startup to load
  437. reg add "HKLM\Software\Microsoft\Dfrg\BootOptimizeFunction" /v "Enable" /t REG_SZ /d "n" /f
  438.  
  439. rem 0 - Disable Background auto-layout / Disable Optimize Hard Disk when idle
  440. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\OptimalLayout" /v "EnableAutoLayout" /t REG_DWORD /d "0" /f
  441.  
  442. rem Disable Automatic Maintenance / Scheduled System Maintenance
  443. reg add "HKLM\Software\Microsoft\Windows\ScheduledDiagnostics" /v "EnabledExecution" /t REG_DWORD /d "0" /f
  444. reg add "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Schedule\Maintenance" /v "MaintenanceDisabled" /t REG_DWORD /d "1" /f
  445. reg add "HKLM\Software\Policies\Microsoft\Windows\ScheduledDiagnostics" /v "EnabledExecution" /t REG_DWORD /d "0" /f
  446.  
  447. rem 0 - Enables 8dot3 name creation for all volumes on the system / 1 - Disables 8dot3 name creation for all volumes on the system / 2 - Sets 8dot3 name creation on a per volume basis / 3 - Disables 8dot3 name creation for all volumes except the system volume
  448. rem fsutil 8dot3name scan c:\
  449. fsutil behavior set disable8dot3 1
  450.  
  451. rem 1 - Disable the Encrypting File System (EFS)
  452. fsutil behavior set disableencryption 1
  453.  
  454. rem 1 - When listing directories, NTFS does not update the last-access timestamp, and it does not record time stamp updates in the NTFS log
  455. fsutil behavior set disablelastaccess 1
  456.  
  457. rem 5 - 5 secs / Delay Chkdsk startup time at OS Boot
  458. reg add "HKLM\System\CurrentControlSet\Control\Session Manager" /v "AutoChkTimeout" /t REG_DWORD /d "5" /f
  459.  
  460. rem 0 - Establishes a standard size file-system cache of approximately 8 MB / 1 - Establishes a large system cache working set that can expand to physical memory, minus 4 MB, if needed
  461. reg add "HKLM\System\CurrentControlSet\Control\Session Manager\Memory Management" /v "LargeSystemCache" /t REG_DWORD /d "1" /f
  462.  
  463. rem 0 - Drivers and the kernel can be paged to disk as needed / 1 - Drivers and the kernel must remain in physical memory
  464. reg add "HKLM\System\CurrentControlSet\Control\Session Manager\Memory Management" /v "DisablePagingExecutive" /t REG_DWORD /d "1" /f
  465.  
  466. rem 0 - Disable Prefetch / 1 - Enable Prefetch when the application starts / 2 - Enable Prefetch when the device starts up / 3 - Enable Prefetch when the application or device starts up
  467. reg add "HKLM\System\CurrentControlSet\Control\Session Manager\Memory Management\PrefetchParameters" /v "EnablePrefetcher" /t REG_DWORD /d "0" /f
  468.  
  469. rem 0 - Disable SuperFetch / 1 - Enable SuperFetch when the application starts up / 2 - Enable SuperFetch when the device starts up / 3 - Enable SuperFetch when the application or device starts up
  470. reg add "HKLM\System\CurrentControlSet\Control\Session Manager\Memory Management\PrefetchParameters" /v "EnableSuperfetch" /t REG_DWORD /d "0" /f
  471.  
  472. rem 0 - Disable It / 1 - Default
  473. reg add "HKLM\System\CurrentControlSet\Control\Session Manager\Memory Management\PrefetchParameters" /v "SfTracingState" /t REG_DWORD /d "0" /f
  474.  
  475. rem 0 - Disable Fast Startup for a Full Shutdown / 1 - Enable Fast Startup (Hybrid Boot) for a Hybrid Shutdown
  476. reg add "HKLM\System\CurrentControlSet\Control\Session Manager\Power" /v "HiberbootEnabled" /t REG_DWORD /d "0" /f
  477.  
  478. rem Disable Hibernation / Disable Fast Startup (Hybrid Boot)
  479. powercfg -h off
  480.  
  481.  
  482. rem =================================== Windows Policies ===================================
  483.  
  484.  
  485. rem 1808 - Disable the warning The Publisher could not be verified
  486. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Associations" /v "DefaultFileTypeRisk" /t REG_DWORD /d "1808" /f
  487.  
  488. rem Disable Security warning to unblock the downloaded file
  489. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments" /v "SaveZoneInformation" /t REG_DWORD /d "1" /f
  490.  
  491. rem 1 - Don't run specified exe
  492. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v "DisallowRun" /t REG_DWORD /d "1" /f
  493. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun" /v "1" /t REG_SZ /d "bash.exe" /f
  494. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun" /v "2" /t REG_SZ /d "mshta.exe" /f
  495. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun" /v "3" /t REG_SZ /d "msra.exe" /f
  496. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun" /v "4" /t REG_SZ /d "powershell_ise.exe" /f
  497. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun" /v "5" /t REG_SZ /d "powershell.exe" /f
  498. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun" /v "6" /t REG_SZ /d "psexec.exe" /f
  499. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun" /v "7" /t REG_SZ /d "nc.exe" /f
  500. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun" /v "8" /t REG_SZ /d "nc64.exe" /f
  501. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun" /v "9" /t REG_SZ /d "bitsadmin.exe" /f
  502. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun" /v "10" /t REG_SZ /d "cipher.exe" /f
  503. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun" /v "11" /t REG_SZ /d "scrcons.exe" /f
  504. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun" /v "12" /t REG_SZ /d "wbemtest.exe" /f
  505. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun" /v "13" /t REG_SZ /d "winrm.exe" /f
  506. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun" /v "14" /t REG_SZ /d "winrs.exe" /f
  507. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun" /v "15" /t REG_SZ /d "wecutil.exe" /f
  508. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun" /v "16" /t REG_SZ /d "werfault.exe" /f
  509.  
  510. rem 0 - Disable Microsoft Windows Just-In-Time (JIT) script debugging
  511. reg add "HKCU\Software\Microsoft\Windows Script\Settings" /v "JITDebug" /t REG_DWORD /d "0" /f
  512. reg add "HKU\.Default\Microsoft\Windows Script\Settings" /v "JITDebug" /t REG_DWORD /d "0" /f
  513.  
  514. rem Disable Active Desktop
  515. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "HideIcons" /t REG_DWORD /d "0" /f
  516. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop" /v "NoAddingComponents" /t REG_DWORD /d "1" /f
  517. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\ActiveDesktop" /v "NoComponents" /t REG_DWORD /d "1" /f
  518. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v "ForceActiveDesktopOn" /t REG_DWORD /d "0" /f
  519. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v "NoActiveDesktop" /t REG_DWORD /d "1" /f
  520. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v "NoActiveDesktopChanges" /t REG_DWORD /d "1" /f
  521. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v "NoDesktop" /t REG_DWORD /d "0" /f
  522.  
  523. rem 1 - Disable recent documents history
  524. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v "NoRecentDocsHistory" /t REG_DWORD /d "1" /f
  525.  
  526. rem 1 - Do not add shares from recently opened documents to the My Network Places folder
  527. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v "Norecentdocsnethood" /t REG_DWORD /d "1" /f
  528.  
  529. rem 0 - Disable configuring the machine at boot-up / 1 - Enable configuring the machine at boot-up / 2 - Enable configuring the machine only if DSC is in pending or current state (Default)
  530. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "DSCAutomationHostEnabled" /t REG_DWORD /d "0" /f
  531.  
  532. rem 0 - Disable / 1 - Enable (Default)
  533. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableCursorSuppression" /t REG_DWORD /d "0" /f
  534.  
  535. rem 0 - Disable Administrative Shares
  536. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "LocalAccountTokenFilterPolicy" /t REG_DWORD /d "0" /f
  537. reg add "HKLM\System\CurrentControlSet\Services\LanmanServer\Parameters" /v "AutoShareWks" /t REG_DWORD /d "0" /f
  538.  
  539. rem Determines how many user account entries Windows saves in the logon cache on the local computer.
  540. reg add "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Winlogon" /v "CachedLogonsCount" /t REG_DWORD /d "0" /f
  541.  
  542. rem Locky ransomware using VBscript (Visual Basic Script) - https://blog.avast.com/a-closer-look-at-the-locky-ransomware
  543. rem 0 - Disable Windows Script Host (WSH) (prevents majority of malware from working, especially when removing PowerShell as well, Disable ExecutionPolicy can be easily bypassed)
  544. reg add "HKCU\Software\Microsoft\Windows Script Host\Settings" /v "Enabled" /t REG_DWORD /d "0" /f
  545. reg add "HKLM\Software\Microsoft\Windows Script Host\Settings" /v "Enabled" /t REG_DWORD /d "0" /f
  546. reg add "HKLM\Software\WOW6432Node\Microsoft\Windows Script Host\Settings" /v "Enabled" /t REG_DWORD /d "0" /f
  547.  
  548. rem Prevent Microsoft Edge from starting and loading the Start and New Tab page at Windows startup and each time Microsoft Edge is closed
  549. reg add "HKCU\Software\Policies\Microsoft\MicrosoftEdge" /v "AllowPrelaunch" /t REG_DWORD /d "0" /f
  550. reg add "HKCU\Software\Policies\Microsoft\MicrosoftEdge\Main" /v "AllowPrelaunch" /t REG_DWORD /d "0" /f
  551. reg add "HKCU\Software\Policies\Microsoft\MicrosoftEdge\TabPreloader" /v "PreventTabPreloading" /t REG_DWORD /d "1" /f
  552. reg add "HKLM\Software\Policies\Microsoft\MicrosoftEdge" /v "AllowPrelaunch" /t REG_DWORD /d "0" /f
  553. reg add "HKLM\Software\Policies\Microsoft\MicrosoftEdge\Main" /v "AllowPrelaunch" /t REG_DWORD /d "0" /f
  554. reg add "HKLM\Software\Policies\Microsoft\MicrosoftEdge\TabPreloader" /v "PreventTabPreloading" /t REG_DWORD /d "1" /f
  555.  
  556. rem Disable Customer Experience Improvement (CEIP/SQM - Software Quality Management)
  557. reg add "HKLM\Software\Policies\Microsoft\Internet Explorer\SQM" /v "DisableCustomerImprovementProgram" /t REG_DWORD /d "0" /f
  558. reg add "HKLM\Software\Policies\Microsoft\Messenger\Client" /v "CEIP" /t REG_DWORD /d "2" /f
  559. reg add "HKLM\Software\Policies\Microsoft\SQMClient\Windows" /v "CEIPEnable" /t REG_DWORD /d "0" /f
  560.  
  561. rem 0 - Disable Application Impact Telemetry (AIT)
  562. reg add "HKLM\Software\Policies\Microsoft\Windows\AppCompat" /v "AITEnable" /t REG_DWORD /d "0" /f
  563.  
  564. rem 1 - Disable Steps Recorder (Steps Recorder keeps a record of steps taken by the user, the data includes user actions such as keyboard input and mouse input user interface data and screen shots)
  565. reg add "HKLM\Software\Policies\Microsoft\Windows\AppCompat" /v "DisableUAR" /t REG_DWORD /d "1" /f
  566. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Application-Experience/Steps-Recorder" /v "Enabled" /t REG_DWORD /d "0" /f
  567.  
  568. rem 1 - Specifies that Windows does not automatically encrypt eDrives
  569. reg add "HKLM\Software\Policies\Microsoft\Windows\EnhancedStorageDevices" /v "TCGSecurityActivationDisabled" /t REG_DWORD /d "1" /f
  570.  
  571. rem Disable PerfTrack (tracking of responsiveness events)
  572. reg add "HKLM\Software\Policies\Microsoft\Windows\WDI\{9c5a40da-b965-4fc3-8781-88dd50a6299d}" /v "ScenarioExecutionEnabled" /t REG_DWORD /d "0" /f
  573.  
  574. rem 1000000000000 - Block untrusted fonts and log events / 2000000000000 - Do not block untrusted fonts / 3000000000000 - Log events without blocking untrusted fonts
  575. reg add "HKLM\Software\Policies\Microsoft\Windows NT\MitigationOptions" /v "MitigationOptions_FontBocking" /t REG_SZ /d "1000000000000" /f
  576.  
  577. rem 1 - Enable Shutdown Event Tracker / 0 - Disable (Default)
  578. reg add "HKLM\Software\Policies\Microsoft\Windows NT\Reliability" /v "ShutdownReasonOn" /t REG_DWORD /d "0" /f
  579. reg add "HKLM\Software\Policies\Microsoft\Windows NT\Reliability" /v "ShutdownReasonUI" /t REG_DWORD /d "0" /f
  580.  
  581. rem Digest Security Provider is disabled by default, but malware can enable it to recover the plain text passwords from the system’s memory
  582. reg add "HKLM\System\CurrentControlSet\Control\SecurityProviders\WDigest" /v "UseLogonCredential" /t REG_DWORD /d "0" /f
  583.  
  584. rem The system registry is no longer backed up to the RegBack folder starting in Windows 10 version 1803
  585. reg add "HKLM\System\CurrentControlSet\Control\Session Manager\Configuration Manager" /v "EnablePeriodicBackup" /t REG_DWORD /d "1" /f
  586.  
  587. rem No-one will be a member of the built-in group, although it will still be visible in the Object Picker / 1 - all users logging on to a session on the server will be made a member of the TERMINAL SERVER USER group
  588. reg add "HKLM\System\CurrentControlSet\Control\Terminal Server" /v "TSUserEnabled" /t REG_DWORD /d "0" /f
  589.  
  590.  
  591. rem =================================== Windows Policies ===================================
  592. rem --------------------------------- User Account Control ---------------------------------
  593.  
  594. rem https://technet.microsoft.com/en-us/library/dd835564(v=ws.10).aspx
  595. rem Reason to set UAC to Always Notify - https://technet.microsoft.com/en-us/library/2009.07.uac.aspx#id0560031
  596.  
  597. rem 0 - Elevate without prompting / 1 - Prompt for credentials on the secure desktop / 2 - Prompt for consent on the secure desktop / 3 - Prompt for credentials / 4 - Prompt for consent / 5 (Default) - Prompt for consent for non-Windows binaries
  598. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "ConsentPromptBehaviorAdmin" /t REG_DWORD /d "1" /f
  599.  
  600. rem 0 - Automatically deny elevation requests / 1 - Prompt for credentials on the secure desktop / 3 (Default) - Prompt for credentials
  601. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "ConsentPromptBehaviorUser" /t REG_DWORD /d "0" /f
  602.  
  603. rem Detect application installations and prompt for elevation / 1 - Enabled (default for home) / 0 - Disabled (default for enterprise)
  604. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableInstallerDetection" /t REG_DWORD /d "1" /f
  605.  
  606. rem Run all administrators in Admin Approval Mode / 0 - Disabled (UAC) / 1 - Enabled (UAC)
  607. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableLUA" /t REG_DWORD /d "1" /f
  608.  
  609. rem Only elevate UIAccess applications that are installed in secure locations / 0 - Disabled / 1 (Default) - Enabled
  610. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableSecureUIAPaths" /t REG_DWORD /d "1" /f
  611.  
  612. rem Allow UIAccess applications to prompt for elevation without using the secure desktop / 0 (Default) = Disabled / 1 - Enabled
  613. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableUIADesktopToggle" /t REG_DWORD /d "0" /f
  614.  
  615. rem https://technet.microsoft.com/en-us/itpro/windows/keep-secure/deploy-device-guard-enable-virtualization-based-security
  616. rem 0 - Disabled / 1 - Enabled (Default)
  617. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableVirtualization" /t REG_DWORD /d "0" /f
  618.  
  619. rem Admin Approval Mode for the built-in Administrator account / 0 (Default) - Disabled / 1 - Enabled
  620. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "FilterAdministratorToken" /t REG_DWORD /d "1" /f
  621.  
  622. rem Allow UIAccess applications to prompt for elevation without using the secure desktop / 0 (Default) - Disabled / 1 - Enabled
  623. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "PromptOnSecureDesktop" /t REG_DWORD /d "1" /f
  624.  
  625. rem Enforce cryptographic signatures on any interactive application that requests elevation of privilege / 0 (Default) - Disabled / 1 - Enabled
  626. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "ValidateAdminCodeSignatures" /t REG_DWORD /d "1" /f
  627.  
  628. rem 1 - Enable command-line auditing
  629. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\Audit" /v "ProcessCreationIncludeCmdLine_Enabled" /t REG_DWORD /d "1" /f
  630.  
  631.  
  632. rem =============================== Windows Scheduled Tasks ================================
  633.  
  634.  
  635. rem https://enigma0x3.net/2016/07/22/bypassing-uac-on-windows-10-using-disk-cleanup
  636.  
  637. rem Disable Background Synchronization (permanently, it can not be disabled)
  638. rem schtasks /DELETE /TN "Microsoft\Windows\SettingSync\BackgroundUploadTask" /f
  639.  
  640. schtasks /DELETE /TN "Adobe Flash Player PPAPI Notifier" /f
  641. schtasks /DELETE /TN "Adobe Flash Player Updater" /f
  642. schtasks /DELETE /TN "Driver Easy Scheduled Scan" /f
  643. schtasks /DELETE /TN "klcp_update" /f
  644. schtasks /DELETE /TN "StartDVR" /f
  645. schtasks /DELETE /TN "StartCN" /f
  646. schtasks /DELETE /TN "TrackerAutoUpdate" /f
  647. schtasks /DELETE /TN "TVInstallRestore" /f
  648.  
  649. schtasks /Change /TN "CreateExplorerShellUnelevatedTask" /Enable
  650.  
  651. schtasks /Change /TN "Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319" /Disable
  652. schtasks /Change /TN "Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 64" /Disable
  653. schtasks /Change /TN "Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 64 Critical" /Disable
  654. schtasks /Change /TN "Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 Critical" /Disable
  655. schtasks /Change /TN "Microsoft\Windows\ApplicationData\CleanupTemporaryState" /Disable
  656. schtasks /Change /TN "Microsoft\Windows\ApplicationData\DsSvcCleanup" /Disable
  657. schtasks /Change /TN "Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser" /Disable
  658. schtasks /Change /TN "Microsoft\Windows\Application Experience\ProgramDataUpdater" /Disable
  659. schtasks /Change /TN "Microsoft\Windows\Application Experience\StartupAppTask" /Disable
  660. schtasks /Change /TN "Microsoft\Windows\Autochk\Proxy" /Disable
  661. schtasks /Change /TN "Microsoft\Windows\CloudExperienceHost\CreateObjectTask" /Disable
  662. schtasks /Change /TN "Microsoft\Windows\Customer Experience Improvement Program\Consolidator" /Disable
  663. schtasks /Change /TN "Microsoft\Windows\Customer Experience Improvement Program\KernelCeipTask" /Disable
  664. schtasks /Change /TN "Microsoft\Windows\Customer Experience Improvement Program\UsbCeip" /Disable
  665. schtasks /Change /TN "Microsoft\Windows\Defrag\ScheduledDefrag" /Disable
  666. schtasks /Change /TN "Microsoft\Windows\Diagnosis\Scheduled" /Disable
  667. schtasks /Change /TN "Microsoft\Windows\DiskCleanup\SilentCleanup" /Disable
  668. schtasks /Change /TN "Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector" /Disable
  669. schtasks /Change /TN "Microsoft\Windows\DiskFootprint\Diagnostics" /Disable
  670. schtasks /Change /TN "Microsoft\Windows\DiskFootprint\StorageSense" /Disable
  671. schtasks /Change /TN "Microsoft\Windows\EnterpriseMgmt\MDMMaintenenceTask" /Disable
  672. schtasks /Change /TN "Microsoft\Windows\Feedback\Siuf\DmClient" /Disable
  673. schtasks /Change /TN "Microsoft\Windows\Feedback\Siuf\DmClientOnScenarioDownload" /Disable
  674. schtasks /Change /TN "Microsoft\Windows\File Classification Infrastructure\Property Definition Sync" /Disable
  675. schtasks /Change /TN "Microsoft\Windows\FileHistory\File History (maintenance mode)" /Disable
  676. schtasks /Change /TN "Microsoft\Windows\Management\Provisioning\Logon" /Disable
  677. schtasks /Change /TN "Microsoft\Windows\Maintenance\WinSAT" /Disable
  678. schtasks /Change /TN "Microsoft\Windows\Maps\MapsToastTask" /Disable
  679. schtasks /Change /TN "Microsoft\Windows\Maps\MapsUpdateTask" /Disable
  680. schtasks /Change /TN "Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser" /Disable
  681. schtasks /Change /TN "Microsoft\Windows\Multimedia\SystemSoundsService" /Disable
  682. schtasks /Change /TN "Microsoft\Windows\NlaSvc\WiFiTask" /Disable
  683. schtasks /Change /TN "Microsoft\Windows\NetCfg\BindingWorkItemQueueHandler" /Disable
  684. schtasks /Change /TN "Microsoft\Windows\NetTrace\GatherNetworkInfo" /Disable
  685. schtasks /Change /TN "Microsoft\Windows\Offline Files\Background Synchronization" /Disable
  686. schtasks /Change /TN "Microsoft\Windows\Offline Files\Logon Synchronization" /Disable
  687. schtasks /Change /TN "Microsoft\Windows\PI\Sqm-Tasks" /Disable
  688. schtasks /Change /TN "Microsoft\Windows\Power Efficiency Diagnostics\AnalyzeSystem" /Disable
  689. schtasks /Change /TN "Microsoft\Windows\Ras\MobilityManager" /Disable
  690. schtasks /Change /TN "Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask" /Disable
  691. schtasks /Change /TN "Microsoft\Windows\RetailDemo\CleanupOfflineContent" /Disable
  692. schtasks /Change /TN "Microsoft\Windows\SettingSync\BackupTask" /Disable
  693. schtasks /Change /TN "Microsoft\Windows\SettingSync\NetworkStateChangeTask" /Disable
  694. schtasks /Change /TN "Microsoft\Windows\Setup\SetupCleanupTask" /Disable
  695. schtasks /Change /TN "Microsoft\Windows\Shell\FamilySafetyMonitor" /Disable
  696. schtasks /Change /TN "Microsoft\Windows\Shell\FamilySafetyRefresh" /Disable
  697. schtasks /Change /TN "Microsoft\Windows\Shell\IndexerAutomaticMaintenance" /Disable
  698. schtasks /Change /TN "Microsoft\Windows\SpacePort\SpaceAgentTask" /Disable
  699. schtasks /Change /TN "Microsoft\Windows\SpacePort\SpaceManagerTask" /Disable
  700. schtasks /Change /TN "Microsoft\Windows\Speech\SpeechModelDownloadTask" /Disable
  701. schtasks /Change /TN "Microsoft\Windows\TPM\Tpm-HASCertRetr" /Disable
  702. schtasks /Change /TN "Microsoft\Windows\TPM\Tpm-Maintenance" /Disable
  703. schtasks /Change /TN "Microsoft\Windows\User Profile Service\HiveUploadTask" /Disable
  704. schtasks /Change /TN "Microsoft\Windows\WCM\WiFiTask" /Disable
  705. schtasks /Change /TN "Microsoft\Windows\Windows Filtering Platform\BfeOnServiceStartTypeChange" /Disable
  706. schtasks /Change /TN "Microsoft\Windows\Windows Media Sharing\UpdateLibrary" /Disable
  707. schtasks /Change /TN "Microsoft\Windows\Wininet\CacheTask" /Disable
  708. schtasks /Change /TN "Microsoft\Windows\Work Folders\Work Folders Logon Synchronization" /Disable
  709. schtasks /Change /TN "Microsoft\Windows\Work Folders\Work Folders Maintenance Work" /Disable
  710. schtasks /Change /TN "Microsoft\Windows\Workplace Join\Automatic-Device-Join" /Disable
  711.  
  712.  
  713. rem ================================== Windows Services ====================================
  714.  
  715.  
  716. rem http://servicedefaults.com/10
  717. rem Security Accounts Manager has to be disabled Manually via services.msc
  718.  
  719. rem Application Information / required by UAC
  720. rem Background Intelligent Transfer Service / required by Windows Updates / depends on Network List Service
  721. rem CNG Key Isolation / required to login to Windows Insider / Switch to Local Account / Set up PIN / Basically everything Credentials related
  722. rem Credential Manager / required to store credentials (check User Accounts - Credential Manager) / required by apps like Windows Mail to store passwords
  723. rem Delivery Optimization / required by Windows Updates
  724. rem Diagnostic Policy Service / required by Windows Diagnostic (Troubleshooting)
  725. rem DHCP Client / required by Windows Updates (0x80240022)
  726. rem Distributed Link Tracking Client / required to open shortcuts and System apps (Windows cannot access the specified device, path, or file. You may not have the appropriate permission to access the item.)
  727. rem Geolocation Service / required by some Windows Store apps, it can not be enabled when Connected User Experiences and Telemetry is disabled
  728. rem Microsoft Account Sign-in Assistant / required to login to Microsoft Account
  729. rem Network Connections / required to manage network connections
  730. rem Network Connection Broker / required to change Network Settings
  731. rem Network List Service / required to change Network Settings
  732. rem Network Store Interface Service / required by Windows Store, Updates and some apps like HitmanPro, without it Windows assumes, there is no internet connection
  733. rem Print Spooler / required by printers
  734. rem Windows Biometric Service / required by biometric devices like a fingerprint reader
  735. rem Windows Connection Manager / required by WiFi and Data Usage
  736. rem Windows Driver Foundation - User-mode Driver Framework / required by some drivers like USB devices
  737. rem Windows Firewall (Base Filtering Engine) / required by Windows Store Apps (0x80073d0a)
  738. rem Windows Image Acquisition (WIA) / required by scanners
  739.  
  740. rem ACP User Service
  741. sc config amdacpusrsvc start= disabled
  742.  
  743. rem AdaptiveSleepService
  744. sc config AdaptiveSleepService start= disabled
  745.  
  746. rem AMD External Events Utility
  747. sc config "AMD External Events Utility" start= disabled
  748.  
  749. rem AMD FUEL Service
  750. sc config "AMD FUEL Service" start= disabled
  751.  
  752. rem Application Layer Gateway Service
  753. sc config ALG start= disabled
  754.  
  755. rem AVCTP service
  756. sc config BthAvctpSvc start= disabled
  757.  
  758. rem BitLocker Drive Encryption Service
  759. sc config BDESVC start= disabled
  760.  
  761. rem CDPUserSvc
  762. sc config CDPUserSvc start= disabled
  763.  
  764. rem Clipboard User Service
  765. reg add "HKLM\System\CurrentControlSet\Services\cbdhsvc" /v "Start" /t REG_DWORD /d "4" /f
  766.  
  767. rem Contact Data
  768. reg add "HKLM\System\CurrentControlSet\Services\PimIndexMaintenanceSvc" /v "Start" /t REG_DWORD /d "4" /f
  769.  
  770. rem Credential Manager
  771. sc config VaultSvc start= disabled
  772.  
  773. rem Distributed Transaction Coordinator
  774. sc config MSDTC start= disabled
  775.  
  776. rem DNS Client (Required by the internet connection, unless you set up DNS servers manually in IPv4/6's properties)
  777. reg add "HKLM\System\CurrentControlSet\Services\Dnscache" /v "Start" /t REG_DWORD /d "4" /f
  778.  
  779. rem Encrypting File System (EFS)
  780. sc config EFS start= disabled
  781.  
  782. rem Function Discovery Provider Host
  783. sc config fdPHost start= disabled
  784.  
  785. rem Function Discovery Resource Publication
  786. sc config FDResPub start= disabled
  787.  
  788. rem HomeGroup Provider
  789. sc config HomeGroupProvider start= disabled
  790.  
  791. rem IKE and AuthIP IPsec Keying Modules
  792. sc config IKEEXT start= disabled
  793.  
  794. rem IP Helper
  795. sc config iphlpsvc start= disabled
  796.  
  797. rem IPsec Policy Agent
  798. sc config PolicyAgent start= disabled
  799.  
  800. rem Offline Files
  801. sc config CscService start= disabled
  802.  
  803. rem Print Spooler
  804. sc config Spooler start= disabled
  805.  
  806. rem Program Compatibility Assistant Service
  807. sc config PcaSvc start= disabled
  808.  
  809. rem Remote Access Connection Manager
  810. sc config RasMan start= disabled
  811.  
  812. rem Remote Desktop Services
  813. sc config TermService start= disabled
  814.  
  815. rem Retail Demo
  816. sc config RetailDemo start=disabled
  817.  
  818. rem Secure Socket Tunneling Protocol Service
  819. sc config SstpSvc start= disabled
  820.  
  821. rem Server
  822. sc config LanmanServer start= disabled
  823.  
  824. rem SSDP Discovery
  825. sc config SSDPSRV start= disabled
  826.  
  827. rem Superfetch
  828. sc config SysMain start= disabled
  829.  
  830. rem System Guard Runtime Monitor Broker
  831. reg add "HKLM\System\CurrentControlSet\Services\SgrmBroker" /v "Start" /t REG_DWORD /d "4" /f
  832.  
  833. rem TCP/IP NetBIOS Helper (Required by some internet connections like aDSL)
  834. sc config lmhosts start= disabled
  835.  
  836. rem TeamViewer
  837. sc config TeamViewer start= disabled
  838.  
  839. rem User Data Access
  840. reg add "HKLM\System\CurrentControlSet\Services\UserDataSvc" /v "Start" /t REG_DWORD /d "4" /f
  841.  
  842. rem User Data Storage
  843. reg add "HKLM\System\CurrentControlSet\Services\UnistoreSvc" /v "Start" /t REG_DWORD /d "4" /f
  844.  
  845. rem WebClient
  846. sc config WebClient start= disabled
  847.  
  848. rem Windows Biometric Service
  849. sc config WbioSrvc start= disabled
  850.  
  851. rem Windows Connect Now - Config Registrar (Required by WPS WiFi connection)
  852. sc config wcncsvc start= disabled
  853.  
  854. rem Windows Remote Management (WS-Management)
  855. sc config WinRM start= disabled
  856.  
  857. rem Windows Search
  858. sc config WSearch start= disabled
  859.  
  860. rem Wise Boot Assistant
  861. sc config WiseBootAssistant start= disabled
  862.  
  863. rem WMPNetworkSVC helps windows media player to share its library with network
  864. sc config WMPNetworkSvc start= disabled
  865.  
  866. rem Workstation
  867. sc config LanmanWorkstation start= disabled
  868.  
  869.  
  870. rem =================================== Windows Settings ===================================
  871. rem ---------------------------------------- Apps ------------------------------------------
  872. rem ................................... Apps & features ....................................
  873.  
  874. rem Choode where you can get apps from - Anywhere / PreferStore / StoreOnly / Recommendations
  875. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer" /v "AicEnabled" /t REG_SZ /d "Anywhere" /f
  876.  
  877.  
  878. rem =================================== Windows Settings ===================================
  879. rem --------------------------------------- Devices ----------------------------------------
  880. rem ........................................ Mouse .........................................
  881. rem . . . . . . . . . . . . . . . . Additional mouse options . . . . . . . . . . . . . . . .
  882.  
  883. rem 1/6/10 - Enhance pointer precision (Mouse Acceleration)
  884. reg add "HKCU\Control Panel\Mouse" /v "MouseSpeed" /t REG_SZ /d "0" /f
  885. reg add "HKCU\Control Panel\Mouse" /v "MouseThreshold1" /t REG_SZ /d "0" /f
  886. reg add "HKCU\Control Panel\Mouse" /v "MouseThreshold2" /t REG_SZ /d "0" /f
  887.  
  888. rem ________________________________________________________________________________________
  889. reg add "HKCU\Control Panel\Mouse" /v "MouseTrails" /t REG_SZ /d "0" /f
  890.  
  891.  
  892. rem =================================== Windows Settings ===================================
  893. rem --------------------------------------- Devices ---------------.-------------------------
  894. rem ....................................... Typing ........................................
  895.  
  896. rem Autocorrect misspelled words (Privacy)
  897. reg add "HKCU\Software\Microsoft\TabletTip\1.7" /v "EnableAutocorrection" /t REG_DWORD /d "0" /f
  898.  
  899. rem Highlight misspelled words (Privacy)
  900. reg add "HKCU\Software\Microsoft\TabletTip\1.7" /v "EnableSpellchecking" /t REG_DWORD /d "0" /f
  901.  
  902. rem Show text suggestions as I type on the software keyboard (Privacy)
  903. reg add "HKCU\Software\Microsoft\TabletTip\1.7" /v "EnableTextPrediction" /t REG_DWORD /d "0" /f
  904.  
  905. rem Add a space after I choose a text suggestion (Privacy)
  906. reg add "HKCU\Software\Microsoft\TabletTip\1.7" /v "EnablePredictionSpaceInsertion" /t REG_DWORD /d "0" /f
  907.  
  908. rem Add a period after I double-tap the SPacebar (Privacy)
  909. reg add "HKCU\Software\Microsoft\TabletTip\1.7" /v "EnableDoubleTapSpace" /t REG_DWORD /d "0" /f
  910.  
  911.  
  912. rem =================================== Windows Settings ===================================
  913. rem --------------------------------------- Devices ----------------------------------------
  914. rem ................................... Pen & Windows Ink ..................................
  915.  
  916. rem Show recommended app suggestions (Privacy)
  917. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\PenWorkspace" /v "PenWorkspaceAppSuggestionsEnabled" /t REG_DWORD /d "0" /f
  918.  
  919.  
  920. rem =================================== Windows Settings ===================================
  921. rem ---------------------------------------- Gaming ----------------------------------------
  922. rem ....................................... Game bar .......................................
  923.  
  924. rem 1 - Record game clips, screenshots, and broadcast using Game bar / Disable the message "Press Win + G to open Game bar"
  925. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\GameDVR" /v "AppCaptureEnabled" /t REG_DWORD /d "0" /f
  926.  
  927.  
  928. rem =================================== Windows Settings ===================================
  929. rem ---------------------------------------- Gaming ----------------------------------------
  930. rem ....................................... Game DVR .......................................
  931.  
  932. rem 1 - Record audio when I record a game
  933. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\GameDVR" /v "AudioCaptureEnabled" /t REG_DWORD /d "0" /f
  934.  
  935. rem 1 - Capture mouse cursor in recordings
  936. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\GameDVR" /v "CursorCaptureEnabled" /t REG_DWORD /d "0" /f
  937.  
  938. rem ________________________________________________________________________________________
  939. rem 1 - Show tips when I start a game (ADs)
  940. reg add "HKCU\Software\Microsoft\GameBar" /v "ShowStartupPanel" /t REG_DWORD /d "0" /f
  941.  
  942. rem 0 - Disable Game DVR / "Press Win + G to record a clip"
  943. reg add "HKCU\System\GameConfigStore" /v "GameDVR_Enabled" /t REG_DWORD /d "0" /f
  944. reg add "HKLM\Software\Policies\Microsoft\Windows\GameDVR" /v "AllowgameDVR" /t REG_DWORD /d "0" /f
  945.  
  946.  
  947. rem =================================== Windows Settings ===================================
  948. rem ---------------------------------------- Gaming ----------------------------------------
  949. rem ....................................... Game Mode ......................................
  950.  
  951. rem 0 - Disable support for Game Mode
  952. reg add "HKCU\Software\Microsoft\GameBar" /v "AutoGameModeEnabled" /t REG_DWORD /d "0" /f
  953.  
  954. rem 1 - Use Game Mode
  955. reg add "HKCU\Software\Microsoft\GameBar" /v "AllowAutoGameMode" /t REG_DWORD /d "0" /f
  956.  
  957.  
  958. rem =================================== Windows Settings ===================================
  959. rem ---------------------------------- Network & Internet ----------------------------------
  960. rem ................................ Change adapter options ................................
  961.  
  962. rem Windows wmic command line command
  963. rem http://www.computerhope.com/wmic.htm
  964. rem To get adapter's index number use
  965. rem wmic nicconfig get caption,index,TcpipNetbiosOptions
  966.  
  967. rem Disable IPv6
  968. netsh int ipv6 isatap set state disabled
  969. netsh int teredo set state disabled
  970. netsh interface ipv6 6to4 set state state=disabled undoonstop=disabled
  971. reg add "HKLM\System\CurrentControlSet\Services\Tcpip6\Parameters" /v "DisabledComponents" /t REG_DWORD /d "255" /f
  972.  
  973. rem Setup DNS Servers on DHCP Enabled Network
  974. wmic nicconfig where DHCPEnabled=TRUE call SetDNSServerSearchOrder ("1.1.1.1")
  975.  
  976. rem Setup IP, Gateway and DNS Servers based on the MAC address (To Enable DHCP: wmic nicconfig where macaddress="68:F7:28:0F:B6:D5" call enabledhcp)
  977. wmic nicconfig where macaddress="30:10:B3:A2:2E:31" call EnableStatic ("10.10.10.14"), ("255.255.255.248")
  978. wmic nicconfig where macaddress="D0:17:C2:D0:30:DC" call SetDNSServerSearchOrder ("156.154.70.2,156.154.71.2")
  979. wmic nicconfig where macaddress="30:10:B3:A2:2E:31" call SetGateways ("10.10.10.10")
  980.  
  981. rem 0 - Disable LMHOSTS Lookup on all adapters / 1 - Enable
  982. reg add "HKLM\System\CurrentControlSet\Services\NetBT\Parameters" /v "EnableLMHOSTS" /t REG_DWORD /d "0" /f
  983.  
  984. rem 2 - Disable NetBIOS over TCP/IP on all adapters / 1 - Enable / 0 - Default
  985. wmic nicconfig where TcpipNetbiosOptions=0 call SetTcpipNetbios 2
  986. wmic nicconfig where TcpipNetbiosOptions=1 call SetTcpipNetbios 2
  987.  
  988. rem ________________________________________________________________________________________
  989. rem 0 - Disable WiFi Sense (shares your WiFi network login with other people)
  990. reg add "HKLM\Software\Microsoft\PolicyManager\default\WiFi\AllowAutoConnectToWiFiSenseHotspots" /v "value" /t REG_DWORD /d "0" /f
  991. reg add "HKLM\Software\Microsoft\PolicyManager\default\WiFi\AllowWiFiHotSpotReporting" /v "value" /t REG_DWORD /d "0" /f
  992. reg add "HKLM\Software\Microsoft\WcmSvc\wifinetworkmanager\config" /v "AutoConnectAllowedOEM" /t REG_DWORD /d "0" /f
  993.  
  994. rem 1 - Disable Domain Name Devolution (DNS AutoCorrect) / 0 - Enabled (Default)
  995. reg add "HKLM\System\CurrentControlSet\Services\Tcpip\Parameters" /v "UseDomainNameDevolution" /t REG_DWORD /d "0" /f
  996.  
  997. rem Restrict NTLM: Incoming NTLM traffic - Deny All
  998. reg add "HKLM\System\CurrentControlSet\Control\Lsa\MSV1_0" /v "RestrictReceivingNTLMTraffic" /t REG_DWORD /d "2" /f
  999.  
  1000. rem Restrict NTLM: Outgoing NTLM traffic to remote servers - Deny All
  1001. reg add "HKLM\System\CurrentControlSet\Control\Lsa\MSV1_0" /v "RestrictSendingNTLMTraffic" /t REG_DWORD /d "2" /f
  1002.  
  1003.  
  1004. rem =================================== Windows Settings ===================================
  1005. rem ----------------------------------- Personalization ------------------------------------
  1006. rem ..................................... Background .......................................
  1007.  
  1008. rem Choose a fit: 0 - Center the bitmap on the desktop / 2 - Stretch the bitmap vertically and horizontally to fit the desktop / 10 - Fill / 6 - Fit / 2 - Stretch / 0 - Tile/Center
  1009. reg add "HKCU\Control Panel\Desktop" /v "WallpaperStyle" /t REG_SZ /d "2" /f
  1010.  
  1011. rem ________________________________________________________________________________________
  1012. rem 60-100% Wallpaper's image quality / 85 - Default
  1013. reg add "HKCU\Control Panel\Desktop" /v "JPEGImportQuality" /t REG_DWORD /d "100" /f
  1014.  
  1015.  
  1016. rem =================================== Windows Settings ===================================
  1017. rem ----------------------------------- Personalization ------------------------------------
  1018. rem ....................................... Colors .........................................
  1019.  
  1020. rem 1 - Automatically pick an accent color from my background
  1021. reg add "HKCU\Control Panel\Desktop" /v "AutoColorization" /t REG_SZ /d "1" /f
  1022.  
  1023. rem 1 - Transparency Effects
  1024. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize" /v "EnableTransparency" /t REG_DWORD /d "1" /f
  1025.  
  1026. rem 1 - Show accent color on the following surfaces - Start, taskbar, and action center
  1027. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize" /v "ColorPrevalence" /t REG_DWORD /d "1" /f
  1028.  
  1029. rem 1 - Show accent color on the following surfaces - Title bars
  1030. reg add "HKCU\Software\Microsoft\Windows\DWM" /v "ColorPrevalence" /t REG_DWORD /d "1" /f
  1031.  
  1032.  
  1033. rem =================================== Windows Settings ===================================
  1034. rem ----------------------------------- Personalization ------------------------------------
  1035. rem ..................................... Lock screen ......................................
  1036.  
  1037. rem 1 - Get fun facts, tips, tricks, and more on your lock screen (ADs) / Windows Spotlight
  1038. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "RotatingLockScreenEnabled" /t REG_DWORD /d "0" /f
  1039. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "RotatingLockScreenOverlayEnabled" /t REG_DWORD /d "0" /f
  1040.  
  1041. rem ________________________________________________________________________________________
  1042. rem 1 - Disable LockScreen
  1043. reg add "HKLM\Software\Policies\Microsoft\Windows\Personalization" /v "NoLockScreen" /t REG_DWORD /d "1" /f
  1044.  
  1045.  
  1046. rem =================================== Windows Settings ===================================
  1047. rem ----------------------------------- Personalization ------------------------------------
  1048. rem ..................................... Lock screen ......................................
  1049. rem . . . . . . . . . . . . . . . . . Screen saver settings . . . . . . . . . . . . . . . .
  1050.  
  1051. rem 0 - No screen saver is selected / 1 - A screen saver is selected
  1052. reg add "HKCU\Control Panel\Desktop" /v "ScreenSaveActive" /t REG_SZ /d "1" /f
  1053.  
  1054. rem Specifies whether the screen saver is password-protected / 0 - No / 1 - Yes
  1055. reg add "HKCU\Control Panel\Desktop" /v "ScreenSaverIsSecure" /t REG_SZ /d "0" /f
  1056.  
  1057. rem Specifies in seconds how long the System remains idle before the screen saver starts
  1058. reg add "HKCU\Control Panel\Desktop" /v "ScreenSaveTimeOut" /t REG_SZ /d "250" /f
  1059.  
  1060. rem Screensaver - Mystify.scr
  1061. reg add "HKCU\Control Panel\Desktop" /v "SCRNSAVE.EXE" /t REG_SZ /d "C:\Windows\System32\Mystify.scr" /f
  1062.  
  1063.  
  1064. rem =================================== Windows Settings ===================================
  1065. rem ----------------------------------- Personalization ------------------------------------
  1066. rem ........................................ Start .........................................
  1067.  
  1068. rem 1 - Occasionally show suggestions in Start (ADs)
  1069. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-338388Enabled" /t REG_DWORD /d "0" /f
  1070. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SystemPaneSuggestionsEnabled" /t REG_DWORD /d "0" /f
  1071.  
  1072.  
  1073. rem =================================== Windows Settings ===================================
  1074. rem ----------------------------------- Personalization ------------------------------------
  1075. rem ....................................... Taskbar ........................................
  1076.  
  1077. rem Lock the taskbar
  1078. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "TaskbarSizeMove" /t REG_DWORD /d "0" /f
  1079.  
  1080. rem Replace Command Prompt with Windows Powershell in the menu when I right-click the start button or press Windows key+X
  1081. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "DontUsePowerShellOnWinX" /t REG_DWORD /d "1" /f
  1082.  
  1083. rem Combine taskbar buttons / 0 - Alwayshide labels / 1 - When taskbar is full / 2 - Never
  1084. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "TaskbarGlomLevel" /t REG_DWORD /d "2" /f
  1085.  
  1086. rem 1 - Show contacts on the taskbar
  1087. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\People" /v "PeopleBand" /t REG_DWORD /d "0" /f
  1088.  
  1089. rem ________________________________________________________________________________________
  1090. rem 0 - Hide Task View button
  1091. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "ShowTaskViewButton" /t REG_DWORD /d "0" /f
  1092.  
  1093. rem 0 - Disable Cortana in Taskbar search
  1094. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Search" /v "BingSearchEnabled" /t REG_DWORD /d "0" /f
  1095. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Search" /v "CortanaEnabled" /t REG_DWORD /d "0" /f
  1096.  
  1097. rem 0 - Hide Taskbar search / 1 - Show search icon / 2 - Show search box
  1098. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Search" /v "SearchboxTaskbarMode" /t REG_DWORD /d "0" /f
  1099.  
  1100.  
  1101. rem =================================== Windows Settings ===================================
  1102. rem ----------------------------------- Personalization ------------------------------------
  1103. rem ....................................... Taskbar ........................................
  1104. rem . . . . . . . . . . . . . Select which icons appear on the taskbar . . . . . . . . . . .
  1105.  
  1106. rem 0 - Always show all icons in the notification area / 1 - Hide Inactive Icons
  1107. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer" /v "EnableAutoTray" /t REG_DWORD /d "0" /f
  1108.  
  1109.  
  1110. rem =================================== Windows Settings ===================================
  1111. rem ----------------------------------- Personalization ------------------------------------
  1112. rem ....................................... Themes .........................................
  1113. rem . . . . . . . . . . . . . . . . . Desktop Icon Settings . . . . . . . . . . . . . . . .
  1114.  
  1115. rem Hide Control Panel
  1116. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel" /v "{5399E694-6CE5-4D6C-8FCE-1D8870FDCBA0}" /t REG_DWORD /d "1" /f
  1117.  
  1118. rem Hide Network
  1119. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel" /v "{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}" /t REG_DWORD /d "1" /f
  1120.  
  1121. rem Hide Recycle Bin
  1122. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel" /v "{645FF040-5081-101B-9F08-00AA002F954E}" /t REG_DWORD /d "1" /f
  1123.  
  1124. rem Hide Quick access
  1125. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel" /v "{679f85cb-0220-4080-b29b-5540cc05aab6}" /t REG_DWORD /d "1" /f
  1126.  
  1127. rem Hide This PC
  1128. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel" /v "{20D04FE0-3AEA-1069-A2D8-08002B30309D}" /t REG_DWORD /d "1" /f
  1129.  
  1130. rem Hide User's Files
  1131. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel" /v "{59031a47-3f72-44a7-89c5-5595fe6b30ee}" /t REG_DWORD /d "1" /f
  1132.  
  1133.  
  1134. rem =================================== Windows Settings ===================================
  1135. rem ----------------------------------- Personalization ------------------------------------
  1136. rem ....................................... Themes .........................................
  1137. rem . . . . . . . . . . . . . . . . . . . . Sounds . . . . . . . . . . . . . . . . . . . . .
  1138.  
  1139. rem Delete Windows Default Sounds (Permanently)
  1140. reg delete "HKCU\AppEvents\Schemes\Apps" /f
  1141.  
  1142. rem When windows detects communicarions activity / 0 - Mute all other sounds / 1 - Reduce all other by 80% / 2 - Reduce all other by 50% / 3 - Do nothing
  1143. reg add "HKCU\Software\Microsoft\Multimedia\Audio" /v "UserDuckingPreference" /t REG_DWORD /d "3" /f
  1144.  
  1145.  
  1146. rem =================================== Windows Settings ===================================
  1147. rem ---------------------------------------- Privacy ---------------------------------------
  1148.  
  1149. rem https://technet.microsoft.com/itpro/windows/manage/manage-connections-from-windows-operating-system-components-to-microsoft-services
  1150. rem https://msdn.microsoft.com/en-us/windows/hardware/commercialize/customize/mdm/new-in-windows-mdm-enrollment-management#whatsnew10
  1151. rem https://msdn.microsoft.com/en-us/windows/hardware/commercialize/customize/mdm/policy-configuration-service-provider
  1152. rem https://www.ghacks.net/2015/08/14/comparison-of-windows-10-privacy-tools
  1153.  
  1154. rem ________________________________________________________________________________________
  1155. rem Disable Cortana
  1156. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Search" /v "AllowCortana" /t REG_DWORD /d "0" /f
  1157. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Search" /v "CortanaCapabilities" /t REG_SZ /d "" /f
  1158. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Search" /v "CortanaConsent" /t REG_DWORD /d "0" /f
  1159. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Search" /v "DeviceHistoryEnabled" /t REG_DWORD /d "0" /f
  1160. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Search" /v "IsAssignedAccess" /t REG_DWORD /d "0" /f
  1161. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Search" /v "IsWindowsHelloActive" /t REG_DWORD /d "0" /f
  1162. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Windows Search" /v "CortanaConsent" /t REG_DWORD /d "0" /f
  1163. reg add "HKLM\Software\Microsoft\PolicyManager\default\Experience\AllowCortana" /v "value" /t REG_DWORD /d "0" /f
  1164. reg add "HKLM\Software\Policies\Microsoft\SearchCompanion" /v "DisableContentFileUpdates" /t REG_DWORD /d "1" /f
  1165. reg add "HKLM\Software\Policies\Microsoft\Windows\Windows Search" /v "AllowCortana" /t REG_DWORD /d "0" /f
  1166. reg add "HKLM\Software\Policies\Microsoft\Windows\Windows Search" /v "AllowSearchToUseLocation" /t REG_DWORD /d "0" /f
  1167. reg add "HKLM\Software\Policies\Microsoft\Windows\Windows Search" /v "DisableWebSearch" /t REG_DWORD /d "1" /f
  1168. reg add "HKLM\Software\Policies\Microsoft\Windows\Windows Search" /v "ConnectedSearchPrivacy" /t REG_DWORD /d "3" /f
  1169. reg add "HKLM\Software\Policies\Microsoft\Windows\Windows Search" /v "ConnectedSearchUseWeb" /t REG_DWORD /d "0" /f
  1170. reg add "HKLM\Software\Policies\Microsoft\Windows\Windows Search" /v "ConnectedSearchUseWebOverMeteredConnections" /t REG_DWORD /d "0" /f
  1171.  
  1172.  
  1173. rem =================================== Windows Settings ===================================
  1174. rem ---------------------------------------- Privacy ---------------------------------------
  1175. rem ...................................... Account info ....................................
  1176.  
  1177. rem Let apps access my name, picture, and other account info / 0 - Default / 1 - Enabled / 2 - Disabled
  1178. reg add "HKLM\Software\Policies\Microsoft\Windows\AppPrivacy" /v "LetAppsAccessAccountInfo" /t REG_DWORD /d "2" /f
  1179.  
  1180.  
  1181. rem =================================== Windows Settings ===================================
  1182. rem ---------------------------------------- Privacy ---------------------------------------
  1183. rem ..................................... App diagnostic ...................................
  1184.  
  1185. rem Let apps access diagnostic information / 0 - Default / 1 - Enabled / 2 - Disabled
  1186. reg add "HKLM\Software\Policies\Microsoft\Windows\AppPrivacy" /v "LetAppsGetDiagnosticInfo" /t REG_DWORD /d "2" /f
  1187.  
  1188.  
  1189. rem =================================== Windows Settings ===================================
  1190. rem ---------------------------------------- Privacy ---------------------------------------
  1191. rem ....................................... Calendar .......................................
  1192.  
  1193. rem Let Windows apps access contacts / 0 - Default / 1 - Enabled / 2 - Disabled
  1194. reg add "HKLM\Software\Policies\Microsoft\Windows\AppPrivacy" /v "LetAppsAccessCalendar" /t REG_DWORD /d "2" /f
  1195.  
  1196.  
  1197. rem =================================== Windows Settings ===================================
  1198. rem ---------------------------------------- Privacy ---------------------------------------
  1199. rem ..................................... Call history .....................................
  1200.  
  1201. rem Let apps access my call history / 0 - Default / 1 - Enabled / 2 - Disabled
  1202. reg add "HKLM\Software\Policies\Microsoft\Windows\AppPrivacy" /v "LetAppsAccessCallHistory" /t REG_DWORD /d "2" /f
  1203.  
  1204.  
  1205. rem =================================== Windows Settings ===================================
  1206. rem ---------------------------------------- Privacy ---------------------------------------
  1207. rem ........................................ Camera ........................................
  1208.  
  1209. rem  Let apps use my camera / 0 - Default / 1 - Enabled / 2 - Disabled
  1210. reg add "HKLM\Software\Policies\Microsoft\Windows\AppPrivacy" /v "LetAppsAccessCamera" /t REG_DWORD /d "2" /f
  1211. reg add "HKLM\Software\Policies\Microsoft\Windows\AppPrivacy" /v "LetAppsAccessCamera_ForceAllowTheseApps" /t REG_MULTI_SZ /d "" /f
  1212. reg add "HKLM\Software\Policies\Microsoft\Windows\AppPrivacy" /v "LetAppsAccessCamera_ForceDenyTheseApps" /t REG_MULTI_SZ /d "" /f
  1213. reg add "HKLM\Software\Policies\Microsoft\Windows\AppPrivacy" /v "LetAppsAccessCamera_UserInControlOfTheseApps" /t REG_MULTI_SZ /d "" /f
  1214.  
  1215.  
  1216. rem =================================== Windows Settings ===================================
  1217. rem ---------------------------------------- Privacy ---------------------------------------
  1218. rem ....................................... Contacts .......................................
  1219.  
  1220. rem Let Windows apps access contacts / 0 - Default / 1 - Enabled / 2 - Disabled
  1221. reg add "HKLM\Software\Policies\Microsoft\Windows\AppPrivacy" /v "LetAppsAccessContacts" /t REG_DWORD /d "2" /f
  1222.  
  1223.  
  1224. rem =================================== Windows Settings ===================================
  1225. rem ---------------------------------------- Privacy ---------------------------------------
  1226. rem ......................................... Email ........................................
  1227.  
  1228. rem Let apps access and send email / 0 - Default / 1 - Enabled / 2 - Disabled
  1229. reg add "HKLM\Software\Policies\Microsoft\Windows\AppPrivacy" /v "LetAppsAccessEmail" /t REG_DWORD /d "2" /f
  1230.  
  1231.  
  1232. rem =================================== Windows Settings ===================================
  1233. rem ---------------------------------------- Privacy ---------------------------------------
  1234. rem ................................. Feedback & diagnostics ...............................
  1235.  
  1236. rem Diagnostic and usage data - Select how much data you send to Microsoft / 0 - Security (Not aplicable on Home/Pro, it resets to Basic) / 1 - Basic / 2 - Enhanced (Hidden) / 3 - Full
  1237. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\DataCollection" /v "AllowTelemetry" /t REG_DWORD /d "0" /f
  1238. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\WINEVT\Channels\Microsoft-Windows-Application-Experience/Program-Telemetry" /v "Enabled" /t REG_DWORD /d "0" /f
  1239. reg add "HKLM\Software\Policies\Microsoft\Windows\DataCollection" /v "AllowTelemetry" /t REG_DWORD /d "0" /f
  1240. reg add "HKLM\Software\Policies\Microsoft\Windows\DataCollection" /v "DoNotShowFeedbackNotifications" /t REG_DWORD /d "1" /f
  1241.  
  1242. rem 1 - Let Microsoft provide more tailored experiences with relevant tips and recommendations by using your diagnostic data
  1243. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Privacy" /v "TailoredExperiencesWithDiagnosticDataEnabled" /t REG_DWORD /d "0" /f
  1244.  
  1245. rem Feedback Frequency - Windows should ask for my feedback: 0 - Never / Removed - Automatically
  1246. reg add "HKCU\Software\Microsoft\Siuf\Rules" /v "NumberOfSIUFInPeriod" /t REG_DWORD /d "0" /f
  1247. reg add "HKCU\Software\Microsoft\Siuf\Rules" /v "PeriodInNanoSeconds" /t REG_DWORD /d "0" /f
  1248.  
  1249.  
  1250. rem =================================== Windows Settings ===================================
  1251. rem ---------------------------------------- Privacy ---------------------------------------
  1252. rem ........................................ General ......................................
  1253.  
  1254. rem Let apps use advertising ID to make ads more interesting to you based on your app usage
  1255. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\AdvertisingInfo" /v "Enabled" /t REG_DWORD /d "0" /f
  1256. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\AdvertisingInfo" /v "Enabled" /t REG_DWORD /d "0" /f
  1257. reg add "HKLM\Software\Policies\Microsoft\Windows\AdvertisingInfo" /v "DisabledByGroupPolicy" /t REG_DWORD /d "1" /f
  1258.  
  1259. rem 0 - Let websites provide locally relevant content by accessing my language list (let browsers access your local language)
  1260. reg add "HKCU\Control Panel\International\User Profile" /v "HttpAcceptLanguageOptOut" /t REG_DWORD /d "0" /f
  1261.  
  1262. rem 1 - Let Windows track app launches to improve Start and search results / 0 - Disable and Disable "Show most used apps"
  1263. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "Start_TrackProgs" /t REG_DWORD /d "1" /f
  1264.  
  1265. rem 1 - Show me suggested content in the Settings app
  1266. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-338393Enabled" /t REG_DWORD /d "0" /f
  1267. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-353694Enabled" /t REG_DWORD /d "0" /f
  1268.  
  1269.  
  1270. rem =================================== Windows Settings ===================================
  1271. rem ---------------------------------------- Privacy ---------------------------------------
  1272. rem ....................................... Messaging ......................................
  1273.  
  1274. rem Let apps read or send messages (text or MMS) / 0 - Default / 1 - Enabled / 2 - Disabled
  1275. reg add "HKLM\Software\Policies\Microsoft\Windows\AppPrivacy" /v "LetAppsAccessMessaging" /t REG_DWORD /d "2" /f
  1276.  
  1277.  
  1278. rem =================================== Windows Settings ===================================
  1279. rem ---------------------------------------- Privacy ---------------------------------------
  1280. rem ...................................... Microphone ......................................
  1281.  
  1282. rem Let apps use my microphone / 0 - Default / 1 - Enabled / 2 - Disabled
  1283. reg add "HKLM\Software\Policies\Microsoft\Windows\AppPrivacy" /v "LetAppsAccessMicrophone" /t REG_DWORD /d "2" /f
  1284.  
  1285.  
  1286.  
  1287. rem =================================== Windows Settings ===================================
  1288. rem ---------------------------------------- Privacy ---------------------------------------
  1289. rem ..................................... Other devices ....................................
  1290.  
  1291. rem Let apps automatically share and sync info with wireless devices that don't explicitly pair with your PC, tablet, or phone / 0 - Default / 1 - Enabled / 2 - Disabled
  1292. reg add "HKLM\Software\Policies\Microsoft\Windows\AppPrivacy" /v "LetAppsSyncWithDevices" /t REG_DWORD /d "2" /f
  1293.  
  1294. reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" /v "LetAppsAccessTrustedDevices" /t REG_DWORD /d "2" /f
  1295.  
  1296.  
  1297. rem =================================== Windows Settings ===================================
  1298. rem ---------------------------------------- Privacy ---------------------------------------
  1299. rem ............................... Speech, inking, & typing ...............................
  1300.  
  1301. rem ________________________________________________________________________________________
  1302. reg add "HKCU\Software\Microsoft\Input\TIPC" /v "Enabled" /t REG_DWORD /d "0" /f
  1303. reg add "HKCU\Software\Microsoft\InputPersonalization" /v "RestrictImplicitInkCollection" /t REG_DWORD /d "1" /f
  1304. reg add "HKCU\Software\Microsoft\InputPersonalization" /v "RestrictImplicitTextCollection" /t REG_DWORD /d "1" /f
  1305. reg add "HKCU\Software\Microsoft\InputPersonalization\TrainedDataStore" /v "HarvestContacts" /t REG_DWORD /d "0" /f
  1306. reg add "HKCU\Software\Microsoft\Personalization\Settings" /v "AcceptedPrivacyPolicy" /t REG_DWORD /d "0" /f
  1307. reg add "HKLM\Software\Policies\Microsoft\InputPersonalization" /v "AllowInputPersonalization" /t REG_DWORD /d "0" /f
  1308. reg add "HKLM\Software\Policies\Microsoft\InputPersonalization" /v "RestrictImplicitInkCollection" /t REG_DWORD /d "1" /f
  1309. reg add "HKLM\Software\Policies\Microsoft\InputPersonalization" /v "RestrictImplicitTextCollection" /t REG_DWORD /d "1" /f
  1310. reg add "HKLM\Software\Policies\Microsoft\Windows\HandwritingErrorReports" /v "PreventHandwritingErrorReports" /t REG_DWORD /d "1" /f
  1311. reg add "HKLM\Software\Policies\Microsoft\Windows\TabletPC" /v "PreventHandwritingDataSharing" /t REG_DWORD /d "1" /f
  1312.  
  1313.  
  1314. rem =================================== Windows Settings ===================================
  1315. rem ---------------------------------------- Privacy ---------------------------------------
  1316. rem ........................................ Radios ........................................
  1317.  
  1318. rem Let apps control radios / 0 - Default / 1 - Enabled / 2 - Disabled
  1319. reg add "HKLM\Software\Policies\Microsoft\Windows\AppPrivacy" /v "LetAppsAccessRadios" /t REG_DWORD /d "2" /f
  1320.  
  1321.  
  1322. rem =================================== Windows Settings ===================================
  1323. rem ---------------------------------------- Privacy ---------------------------------------
  1324. rem ......................................... Tasks ........................................
  1325.  
  1326. rem Let apps access tasks / 0 - Default / 1 - Enabled / 2 - Disabled
  1327. reg add "HKLM\Software\Policies\Microsoft\Windows\AppPrivacy" /v "LetAppsAccessTasks" /t REG_DWORD /d "2" /f
  1328.  
  1329.  
  1330. rem =================================== Windows Settings ===================================
  1331. rem --------------------------------------- System -----------------------------------------
  1332. rem ........................................ About .........................................
  1333.  
  1334. rem PC Name: Z50-75 (Computer name should not be longer than 15 characters, no spaces either)
  1335. reg add "HKLM\System\CurrentControlSet\Control\ComputerName\ActiveComputerName" /v "ComputerName" /t REG_SZ /d "Z50-75" /f
  1336. reg add "HKLM\System\CurrentControlSet\Control\ComputerName\ComputerName" /v "ComputerName" /t REG_SZ /d "Z50-75" /f
  1337. reg add "HKLM\System\CurrentControlSet\Services\Tcpip\Parameters" /v "Hostname" /t REG_SZ /d "Z50-75" /f
  1338. reg add "HKLM\System\CurrentControlSet\Services\Tcpip\Parameters" /v "NV Hostname" /t REG_SZ /d "Z50-75" /f
  1339.  
  1340. rem Support
  1341. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\OEMInformation" /v "Manufacturer" /t REG_SZ /d "TairikuOkami" /f
  1342. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\OEMInformation" /v "Model" /t REG_SZ /d "Lenovo IdeaPad Z50-75" /f
  1343. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\OEMInformation" /v "SupportHours" /t REG_SZ /d "Within 24-48 hours" /f
  1344. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\OEMInformation" /v "SupportPhone" /t REG_SZ /d "tairikuokami@zoho.eu" /f
  1345. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\OEMInformation" /v "SupportURL" /t REG_SZ /d "https://steamcommunity.com/id/tairikuokami" /f
  1346.  
  1347. rem Computer Description
  1348. reg add "HKLM\System\CurrentControlSet\services\LanmanServer\Parameters" /v "srvcomment" /t REG_SZ /d "50/50 MBps" /f
  1349.  
  1350.  
  1351. rem =================================== Windows Settings ===================================
  1352. rem --------------------------------------- System -----------------------------------------
  1353. rem ........................................ About .........................................
  1354. rem . . . . . . . . . . . . . . . . . . . System info . . . . . . . . . . . . . . . . . . .
  1355.  
  1356. rem System info
  1357. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\OEMInformation" /v "Logo" /t REG_SZ /d "D:\Software\Temp\Pics\Mikai.bmp" /f
  1358. reg add "HKLM\Software\Microsoft\Windows NT\CurrentVersion" /v "RegisteredOrganization" /t REG_SZ /d "(-_-)" /f
  1359. reg add "HKLM\Software\Microsoft\Windows NT\CurrentVersion" /v "RegisteredOwner" /t REG_SZ /d "Mom" /f
  1360.  
  1361. rem Remote Settings - Disable Remote Assistance
  1362. reg add "HKLM\System\CurrentControlSet\Control\Remote Assistance" /v "fAllowToGetHelp" /t REG_DWORD /d "0" /f
  1363. reg add "HKLM\System\CurrentControlSet\Control\Remote Assistance" /v "fAllowFullControl" /t REG_DWORD /d "0" /f
  1364.  
  1365. rem System Protection - Enable System restore and Set the size
  1366. reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore" /v "DisableSR" /f
  1367. reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore" /v "DisableConfig" /f
  1368. reg add "HKLM\Software\Microsoft\Windows NT\CurrentVersion\SPP\Clients" /v " {09F7EDC5-294E-4180-AF6A-FB0E6A0E9513}" /t REG_MULTI_SZ /d "1" /f
  1369. schtasks /Change /TN "Microsoft\Windows\SystemRestore\SR" /Enable
  1370. vssadmin Resize ShadowStorage /For=C: /On=C: /Maxsize=5GB
  1371. sc config wbengine start= demand
  1372. sc config swprv start= demand
  1373. sc config vds start= demand
  1374. sc config VSS start= demand
  1375.  
  1376. rem Advanced system settings - Performance - Advanced - Processor Scheduling
  1377. rem 0 - Foreground and background applications equally responsive / 1 - Foreground application more responsive than background / 2 - Best foreground application response time (Default)
  1378. rem 26 - Adjust for best performance of Programs / 18 - Adjust for best performance of Background Services
  1379. reg add "HKLM\System\CurrentControlSet\Control\PriorityControl" /v "Win32PrioritySeparation " /t REG_DWORD /d "38" /f
  1380.  
  1381. rem Advanced system settings - Performance - Advanced - Virtual memory
  1382. rem Disable pagefile
  1383. wmic computersystem where name="%computername%" set AutomaticManagedPagefile=False
  1384. wmic pagefileset where name="%SystemDrive%\\pagefile.sys" set InitialSize=0,MaximumSize=0
  1385. wmic pagefileset where name="%SystemDrive%\\pagefile.sys" delete
  1386.  
  1387. rem Advanced system settings - Startup and Recovery
  1388. rem 5 - 5 secs / Time to display list of operating systems
  1389. bcdedit /timeout 5
  1390.  
  1391. rem Advanced system settings - Startup and Recovery
  1392. rem 1 - Automatically Restart (on System Failure)
  1393. reg add "HKLM\System\CurrentControlSet\Control\CrashControl" /v "AutoReboot" /t REG_DWORD /d "0" /f
  1394.  
  1395. rem ________________________________________________________________________________________
  1396. rem Disable Remote Assistance
  1397. sc config RemoteRegistry start= disabled
  1398. reg add "HKLM\Software\Policies\Microsoft\Windows\WinRM\Service\WinRS" /v "AllowRemoteShellAccess" /t REG_DWORD /d "0" /f
  1399. reg add "HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services" /v "fAllowToGetHelp" /t REG_DWORD /d "0" /f
  1400. reg add "HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services" /v "fAllowUnsolicited" /t REG_DWORD /d "0" /f
  1401. reg add "HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services" /v "fAllowUnsolicitedFullControl" /t REG_DWORD /d "0" /f
  1402. reg add "HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services" /v "fDenyTSConnections" /t REG_DWORD /d "1" /f
  1403. reg add "HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services" /v "TSAppCompat" /t REG_DWORD /d "0" /f
  1404. reg add "HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services" /v "TSEnabled" /t REG_DWORD /d "0" /f
  1405. reg add "HKLM\Software\Policies\Microsoft\Windows NT\Terminal Services" /v "TSUserEnabled" /t REG_DWORD /d "0" /f
  1406.  
  1407.  
  1408. rem =================================== Windows Settings ===================================
  1409. rem --------------------------------------- System -----------------------------------------
  1410. rem ..................................... Clipboard ........................................
  1411.  
  1412.  
  1413. rem Save multiple items / 0 - Disable / 1 - Enable
  1414. reg add "HKCU\Software\Microsoft\Clipboard" /v "EnableClipboardHistory " /t REG_DWORD /d "0" /f
  1415.  
  1416. rem Sync across devices / 0 - Disable / 1 - Enable
  1417. reg add "HKLM\Software\Policies\Microsoft\Windows\System" /v "AllowCrossDeviceClipboard " /t REG_DWORD /d "0" /f
  1418.  
  1419. rem ________________________________________________________________________________________
  1420. reg add "HKLM\Software\Policies\Microsoft\Windows\System" /v "AllowClipboardHistory" /t REG_DWORD /d "0" /f
  1421.  
  1422.  
  1423. rem =================================== Windows Settings ===================================
  1424. rem --------------------------------------- System -----------------------------------------
  1425. rem ............................... Notifications & actions ................................
  1426.  
  1427. rem 1 - Get tips, tricks, and suggestions as you use Windows (ADs)
  1428. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SoftLandingEnabled" /t REG_DWORD /d "0" /f
  1429.  
  1430.  
  1431. rem =================================== Windows Settings ===================================
  1432. rem --------------------------------------- System -----------------------------------------
  1433. rem .................................... Power & sleep .....................................
  1434. rem . . . . . . . . . . . . . . . . Additional power settings . . . . . . . . . . . . . . .
  1435.  
  1436. rem Change plan settings - Change adavnced power settings - Hard disk - Turn off hard disk (on battery) after
  1437. rem 0 - Never / 4294967295 - max value in seconds
  1438. reg add "HKLM\Software\Policies\Microsoft\Power\PowerSettings\E69653CA-CF7F-4F05-AA73-CB833FA90AD4" /v "DCSettingIndex" /t REG_DWORD /d "0" /f
  1439.  
  1440. rem Change plan settings - Change adavnced power settings - Hard disk - Turn off hard disk (plugged in) after
  1441. rem 0 - Never / 4294967295 - max value in seconds
  1442. reg add "HKLM\Software\Policies\Microsoft\Power\PowerSettings\6738E2C4-E8A5-4A42-B16A-E040E769756E" /v "ACSettingIndex" /t REG_DWORD /d "0" /f
  1443.  
  1444.  
  1445. rem =================================== Windows Settings ===================================
  1446. rem --------------------------------------- System -----------------------------------------
  1447. rem ................................. Shared Experiences ...................................
  1448.  
  1449. rem Let apps on other devices open apps and message apps on this device, and vice versa / 0 - Disabled
  1450. reg add "HKLM\Software\Policies\Microsoft\Windows\System" /v "EnableCdp" /t REG_DWORD /d "0" /f
  1451. reg add "HKLM\Software\Policies\Microsoft\Windows\System" /v "EnableMmx" /t REG_DWORD /d "0" /f
  1452.  
  1453.  
  1454. rem =================================== Windows Settings ===================================
  1455. rem --------------------------------------- System -----------------------------------------
  1456. rem ....................................... Storage ........................................
  1457.  
  1458. rem ________________________________________________________________________________________
  1459. rem 0 - Disable Reserved Storage (7GB) - works only after upgrading or after a repair upgrade or set offline prior to install
  1460. rem https://forums.mydigitallife.net/threads/reserved-storage-in-windows-10.79347/page-3#post-1519084
  1461. rem fsutil storagereserve query C:
  1462. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\ReserveManager" /v "ShippedWithReserves" /t REG_DWORD /d "0" /f
  1463.  
  1464. reg add "HKLM\Software\Policies\Microsoft\Windows\StorageSense" /v "AllowStorageSenseGlobal" /t REG_DWORD /d "0" /f
  1465. reg add "HKLM\Software\Policies\Microsoft\Windows\StorageSense" /v "AllowStorageSenseTemporaryFilesCleanup" /t REG_DWORD /d "0" /f
  1466. reg add "HKLM\Software\Policies\Microsoft\Windows\StorageSense" /v "ConfigStorageSenseCloudContentDehydrationThreshold" /t REG_DWORD /d "0" /f
  1467. reg add "HKLM\Software\Policies\Microsoft\Windows\StorageSense" /v "ConfigStorageSenseRecycleBinCleanupThreshold" /t REG_DWORD /d "0" /f
  1468. reg add "HKLM\Software\Policies\Microsoft\Windows\StorageSense" /v "ConfigStorageSenseDownloadsCleanupThreshold" /t REG_DWORD /d "0" /f
  1469. reg delete "HKLM\Software\Policies\Microsoft\Windows\StorageSense" /v "ConfigStorageSenseGlobalCadence" /f
  1470.  
  1471.  
  1472. rem =================================== Windows Settings ===================================
  1473. rem ----------------------------------- Time & language -------------------------------------
  1474. rem ..................................... Date & time .......................................
  1475.  
  1476. rem Time Zone - Central Europe Standard Time
  1477. tzutil /s "Central Europe Standard Time"
  1478.  
  1479.  
  1480. rem =================================== Windows Settings ===================================
  1481. rem ----------------------------------- Time & language -------------------------------------
  1482. rem ..................................... Date & time .......................................
  1483. rem . . . . . . . . . . . . Additional date, time, & regional settings . . . . . . . . . . .
  1484.  
  1485. rem Set Formats to Metric
  1486. reg add "HKCU\Control Panel\International" /v "iDigits" /t REG_SZ /d "2" /f
  1487. reg add "HKCU\Control Panel\International" /v "iLZero" /t REG_SZ /d "1" /f
  1488. reg add "HKCU\Control Panel\International" /v "iMeasure" /t REG_SZ /d "0" /f
  1489. reg add "HKCU\Control Panel\International" /v "iNegNumber" /t REG_SZ /d "1" /f
  1490. reg add "HKCU\Control Panel\International" /v "iPaperSize" /t REG_SZ /d "1" /f
  1491. reg add "HKCU\Control Panel\International" /v "iTLZero" /t REG_SZ /d "1" /f
  1492. reg add "HKCU\Control Panel\International" /v "sDecimal" /t REG_SZ /d "," /f
  1493. reg add "HKCU\Control Panel\International" /v "sNativeDigits" /t REG_SZ /d "0123456789" /f
  1494. reg add "HKCU\Control Panel\International" /v "sNegativeSign" /t REG_SZ /d "-" /f
  1495. reg add "HKCU\Control Panel\International" /v "sPositiveSign" /t REG_SZ /d "" /f
  1496. reg add "HKCU\Control Panel\International" /v "NumShape" /t REG_SZ /d "1" /f
  1497.  
  1498. rem Set Time to 24h / Monday
  1499. reg add "HKCU\Control Panel\International" /v "iCalendarType" /t REG_SZ /d "1" /f
  1500. reg add "HKCU\Control Panel\International" /v "iDate" /t REG_SZ /d "1" /f
  1501. reg add "HKCU\Control Panel\International" /v "iFirstDayOfWeek" /t REG_SZ /d "0" /f
  1502. reg add "HKCU\Control Panel\International" /v "iFirstWeekOfYear" /t REG_SZ /d "0" /f
  1503. reg add "HKCU\Control Panel\International" /v "iTime" /t REG_SZ /d "1" /f
  1504. reg add "HKCU\Control Panel\International" /v "iTimePrefix" /t REG_SZ /d "0" /f
  1505. reg add "HKCU\Control Panel\International" /v "sDate" /t REG_SZ /d "-" /f
  1506. reg add "HKCU\Control Panel\International" /v "sList" /t REG_SZ /d "," /f
  1507. reg add "HKCU\Control Panel\International" /v "sLongDate" /t REG_SZ /d "d MMMM, yyyy" /f
  1508. reg add "HKCU\Control Panel\International" /v "sMonDecimalSep" /t REG_SZ /d "." /f
  1509. reg add "HKCU\Control Panel\International" /v "sMonGrouping" /t REG_SZ /d "3;0" /f
  1510. reg add "HKCU\Control Panel\International" /v "sMonThousandSep" /t REG_SZ /d "," /f
  1511. reg add "HKCU\Control Panel\International" /v "sShortDate" /t REG_SZ /d "dd-MMM-yy" /f
  1512. reg add "HKCU\Control Panel\International" /v "sTime" /t REG_SZ /d ":" /f
  1513. reg add "HKCU\Control Panel\International" /v "sTimeFormat" /t REG_SZ /d "HH:mm:ss" /f
  1514. reg add "HKCU\Control Panel\International" /v "sShortTime" /t REG_SZ /d "HH:mm" /f
  1515. reg add "HKCU\Control Panel\International" /v "sYearMonth" /t REG_SZ /d "MMMM yyyy" /f
  1516.  
  1517. rem 244 - Set Location to United States / 143 - Slovakia
  1518. reg add "HKCU\Control Panel\International\Geo" /v "Nation" /t REG_SZ /d "143" /f
  1519.  
  1520.  
  1521. rem =================================== Windows Settings ===================================
  1522. rem ----------------------------------- Update & security ----------------------------------
  1523. rem ........................................ Backup .......................................
  1524.  
  1525. rem ________________________________________________________________________________________
  1526. rem 0 - Disable File History (Creating previous versions of files/Windows Backup)
  1527. reg add "HKLM\Software\Policies\Microsoft\Windows\FileHistory" /v "Disabled" /t REG_DWORD /d "1" /f
  1528.  
  1529.  
  1530. rem =================================== Windows Settings ===================================
  1531. rem ----------------------------------- Update & security ----------------------------------
  1532. rem .................................... Windows update ....................................
  1533.  
  1534. rem Change active hours (18 hours) 6am to 0am - Windows Updates will not automatically restart your device during active hours
  1535. reg add "HKLM\Software\Microsoft\WindowsUpdate\UX\Settings" /v "ActiveHoursStart" /t REG_DWORD /d "6" /f
  1536. reg add "HKLM\Software\Microsoft\WindowsUpdate\UX\Settings" /v "ActiveHoursEnd" /t REG_DWORD /d "0" /f
  1537.  
  1538. rem Restart options - 1 - We'll show a reminder when we're going to restart.
  1539. reg add "HKLM\Software\Microsoft\WindowsUpdate\UX\Settings" /v "RestartNotificationsAllowed" /t REG_DWORD /d "1" /f
  1540.  
  1541. rem ________________________________________________________________________________________
  1542. rem https://support.microsoft.com/en-us/help/4000825/windows-10-windows-server-2016-update-history
  1543. rem Use Windows Update MiniTool to check/download/install/hide updates
  1544. rem https://forums.mydigitallife.info/threads/64939-Windows-Update-MiniTool
  1545.  
  1546. rem 1 - Disable Malicious Software Removal Tool offered via Windows Updates (MRT)
  1547. reg add "HKLM\Software\Policies\Microsoft\MRT" /v DontOfferThroughWUAU /t REG_DWORD /d "1" /f
  1548.  
  1549.  
  1550. rem =================================== Windows Settings ===================================
  1551. rem ----------------------------------- Update & security ----------------------------------
  1552. rem ..................................... Windows update ...................................
  1553. rem . . . . . . . . . . . . . . . . . . Advanced options . . . . . . . . . . . . . . . . . .
  1554.  
  1555. rem Choose how updates are delivered / 0 - Turns off Delivery Optimization / 1 - Gets or sends updates and apps to PCs on the same NAT only / 2 - Gets or sends updates and apps to PCs on the same local network domain / 3 - Gets or sends updates and apps to PCs on the Internet / 99 - Simple download mode with no peering / 100 - Use BITS instead of Windows Update Delivery Optimization
  1556. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\DeliveryOptimization\Config" /v "DODownloadMode" /t REG_DWORD /d "0" /f
  1557. reg add "HKLM\Software\Policies\Microsoft\Windows\DeliveryOptimization" /v "DODownloadMode" /t REG_DWORD /d "0" /f
  1558.  
  1559.  
  1560. rem ==================================== Windows Shell =====================================
  1561.  
  1562.  
  1563. rem https://www.tenforums.com/tutorials/3123-clsid-key-guid-shortcuts-list-windows-10-a.html
  1564. rem Add Reset permissions to Shell/Manually Reset permissions/Take Ownership
  1565. rem http://lallouslab.net/2013/08/26/resetting-ntfs-files-permission-in-windows-graphical-utility
  1566.  
  1567. rem Take Ownership
  1568. rem Files/Folders - https://www.youtube.com/watch?v=x7gjZMvQHu4
  1569. rem Registry - https://www.youtube.com/watch?v=M1l5ifYKefg
  1570. rem https://ss64.com/nt/icacls.html
  1571. rem https://technet.microsoft.com/en-us/library/cc753024%28v=ws.11%29.aspx
  1572. rem https://technet.microsoft.com/en-us/library/cc753525(v=ws.11).aspx
  1573.  
  1574. rem Add "Take Ownership" Option in Files and Folders Context Menu in Windows
  1575. reg add "HKCR\*\shell\runas" /ve /t REG_SZ /d "Take ownership" /f
  1576. reg add "HKCR\*\shell\runas" /v "HasLUAShield" /t REG_SZ /d "" /f
  1577. reg add "HKCR\*\shell\runas" /v "NoWorkingDirectory" /t REG_SZ /d "" /f
  1578. reg add "HKCR\*\shell\runas\command" /ve /t REG_SZ /d "cmd.exe /c takeown /f \"%%1\" && icacls \"%%1\" /grant administrators:F" /f
  1579. reg add "HKCR\*\shell\runas\command" /v "IsolatedCommand" /t REG_SZ /d "cmd.exe /c takeown /f \"%%1\" && icacls \"%%1\" /grant administrators:F" /f
  1580. reg add "HKCR\Directory\shell\runas" /ve /t REG_SZ /d "Take ownership" /f
  1581. reg add "HKCR\Directory\shell\runas" /v "HasLUAShield" /t REG_SZ /d "" /f
  1582. reg add "HKCR\Directory\shell\runas" /v "NoWorkingDirectory" /t REG_SZ /d "" /f
  1583. reg add "HKCR\Directory\shell\runas\command" /ve /t REG_SZ /d "cmd.exe /c takeown /f \"%%1\" /r /d y && icacls \"%%1\" /grant administrators:F /t" /f
  1584. reg add "HKCR\Directory\shell\runas\command" /v "IsolatedCommand" /t REG_SZ /d "cmd.exe /c takeown /f \"%%1\" /r /d y && icacls \"%%1\" /grant administrators:F /t" /f
  1585.  
  1586. rem Remove Send To from Context Menu
  1587. reg delete "HKCR\AllFilesystemObjects\shellex\ContextMenuHandlers\SendTo" /f
  1588.  
  1589.  
  1590. rem ==================================== Windows Store =====================================
  1591. rem -------------------------------------- Settings ----------------------------------------
  1592.  
  1593. rem Update apps automatically / 2 - Off / 4 - On
  1594. reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\WindowsStore\WindowsUpdate" /v "AutoDownload" /t REG_DWORD /d "4" /f
  1595. schtasks /Change /TN "Microsoft\Windows\WindowsUpdate\Automatic App Update" /Enable
  1596.  
  1597. rem ________________________________________________________________________________________
  1598. rem 0 - Disable Windows SmartScreen for Windows Store Apps / 1 - Enable
  1599. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\AppHost" /v "EnableWebContentEvaluation" /t "REG_DWORD" /d "1" /f
  1600.  
  1601. rem 0 - Disable / 1 - Auto-install subscribed/suggested apps (games like Candy Crush Soda Saga/Minecraft)
  1602.  
  1603. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "ContentDeliveryAllowed" /t REG_DWORD /d "0" /f
  1604. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "OemPreInstalledAppsEnabled" /t REG_DWORD /d "0" /f
  1605. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "PreInstalledAppsEnabled" /t REG_DWORD /d "0" /f
  1606. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "PreInstalledAppsEverEnabled" /t REG_DWORD /d "0" /f
  1607. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SilentInstalledAppsEnabled" /t REG_DWORD /d "0" /f
  1608. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SoftLandingEnabled" /t REG_DWORD /d "0" /f
  1609. reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContentEnabled" /t REG_DWORD /d "0" /f
  1610. reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Subscriptions" /f
  1611. reg delete "HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\SuggestedApps" /f
RAW Paste Data
We use cookies for various purposes including analytics. By continuing to use Pastebin, you agree to our use of cookies as described in the Cookies Policy. OK, I Understand
 
Top