SORAW441

DSC Config for W10 1903 ('College') Edited

Aug 24th, 2019
669
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. # This SOFTWARE PRODUCT is provided by THE PROVIDER "as is" and "with all faults."
  2. # THE PROVIDER makes no representations or warranties of any kind concerning the safety,
  3. # suitability, inaccuracies, typographical errors, or other harmful components
  4. # of this SOFTWARE PRODUCT. There are inherent dangers in the use of any software, and you are
  5. # solely responsible for determining whether this SOFTWARE PRODUCT is compatible with your equipment
  6. # and other software installed on your equipment. You are also solely responsible for the protection
  7. # of your equipment and backup of your data, and THE PROVIDER will not be liable for any damages you
  8. # may suffer in connection with using, modifying, or distributing this SOFTWARE PRODUCT.
  9. #
  10. #
  11. # Author: DDallmann (Alias Timecard, TC!)
  12. # https://github.com/djdallmann
  13. # https://play.esea.net/users/26101
  14. # steamcommunity.com/id/tcard
  15.  
  16. Configuration GamingMinimal {
  17.  
  18.     # Import the module that contains the resources we're using.
  19.     Import-DscResource -ModuleName PsDesiredStateConfiguration
  20. # CHANGE the RESULT OF '$myusername" TO YOUR C:\Users\xxxx user folder for your PC.
  21. # I also deleted the power scheme change, mouse pointer speed (not forced 6/11) and the wlansvc is set to auto/enable so if you have wifi it doesn't break while using this.
  22. # Some windows UWP or store apps will NOT work, and you may NOT be able to login to Microsoft account till this script = deactivated.
  23. # This is actually pretty a top-notch script i am using on my W10 1903 Pro x64 AMD PC, but again - YOU HAVE BEEN WARNED.
  24. # Enjoy less-bloated gaming!
  25.  
  26.     $myusername = "Michalt"
  27.     $mysid = (New-Object System.Security.Principal.NTAccount($myusername)).Translate([System.Security.Principal.SecurityIdentifier]).value
  28.  
  29.     # The Node statement specifies which targets this configuration will be applied to.
  30.     Node 'localhost' {
  31.  
  32.         ###########################
  33.         # USER SETTINGS/PREFERENCES
  34.         ###########################
  35.         # Privacy Settings
  36.         # https://privacyamp.com/knowledge-base/windows-10-privacy-settings/
  37.         Registry ShowAllIconsTaskbar {
  38.             Ensure = "Present"
  39.             Key = "HKEY_USERS\${mysid}\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer"
  40.             ValueName   = "EnableAutoTray"
  41.             ValueData   = "0"
  42.             ValueType = "Dword"
  43.         }
  44.         Registry VisualEffects {
  45.             Ensure = "Present"
  46.             Key = "HKEY_USERS\${mysid}\Software\Microsoft\Windows\CurrentVersion\Explorer\VisualEffects"
  47.             ValueName   = "VisualFXSetting"
  48.             ValueData   = "2"
  49.             ValueType = "Dword"
  50.         }
  51.         #Disable Enhanced Pointer Precision set 6/11
  52.         #Registry MouseSpeed {
  53.         #    Ensure = "Present"
  54.         #    Key = "HKEY_USERS\${mysid}\Control Panel\Mouse"
  55.         #    ValueName   = "MouseSpeed"
  56.         #    ValueData   = "0"
  57.         #    ValueType = "String"
  58.         #}
  59.         Registry MouseThreshold1 {
  60.             Ensure = "Present"
  61.             Key = "HKEY_USERS\${mysid}\Control Panel\Mouse"
  62.             ValueName   = "MouseThreshold1"
  63.             ValueData   = "0"
  64.             ValueType = "String"
  65.         }
  66.         Registry MouseThreshold2 {
  67.             Ensure = "Present"
  68.             Key = "HKEY_USERS\${mysid}\Control Panel\Mouse"
  69.             ValueName   = "MouseThreshold2"
  70.             ValueData   = "0"
  71.             ValueType = "String"
  72.         }
  73.         Registry MouseSensitivity {
  74.             Ensure = "Present"
  75.             Key = "HKEY_USERS\${mysid}\Control Panel\Mouse"
  76.             ValueName   = "MouseSensitivity"
  77.             ValueData   = "10"
  78.             ValueType = "String"
  79.         }
  80.         Registry DisableScrollInactiveWindow {
  81.             Ensure = "Present"
  82.             Key = "HKEY_USERS\${mysid}\Control Panel\Desktop"
  83.             ValueName   = "MouseWheelRouting"
  84.             ValueData   = "0"
  85.             ValueType = "Dword"
  86.         }
  87.         #Disable Touch Feedback
  88.         Registry DisableMouseTouchFeedback1 {
  89.             Ensure = "Present"
  90.             Key = "HKEY_USERS\${mysid}\Control Panel\Cursors"
  91.             ValueName   = "ContactVisualization"
  92.             ValueData   = "0"
  93.             ValueType = "Dword"
  94.         }
  95.         Registry DisableMouseTouchFeedback2 {
  96.             Ensure = "Present"
  97.             Key = "HKEY_USERS\${mysid}\Control Panel\Cursors"
  98.             ValueName   = "GestureVisualization"
  99.             ValueData   = "0"
  100.             ValueType = "Dword"
  101.         }
  102.         #Disable Sticky Keys Shortcut
  103.         Registry DisableStickyKeysShort {
  104.             Ensure = "Present"
  105.             Key = "HKEY_USERS\${mysid}\Control Panel\Accessibility\StickyKeys"
  106.             ValueName   = "Flags"
  107.             ValueData   = "506"
  108.             ValueType = "String"
  109.         }
  110.         #Disable Toggle Keys Shortcut
  111.         Registry DisableToggleKeysShort {
  112.             Ensure = "Present"
  113.             Key = "HKEY_USERS\${mysid}\Control Panel\Accessibility\ToggleKeys"
  114.             ValueName   = "Flags"
  115.             ValueData   = "58"
  116.             ValueType = "String"
  117.         }
  118.         #Disable Filter Keys Shortcut
  119.         Registry DisableFilterKeys1 {
  120.             Ensure = "Present"
  121.             Key = "HKEY_USERS\${mysid}\Control Panel\Accessibility\Keyboard Response"
  122.             ValueName   = "Flags"
  123.             ValueData   = "122"
  124.             ValueType = "String"
  125.         }
  126.         Registry DisableFilterKeys2 {
  127.             Ensure = "Present"
  128.             Key = "HKEY_USERS\${mysid}\Control Panel\Accessibility\Keyboard Response"
  129.             ValueName   = "DelayBeforeAcceptance"
  130.             ValueData   = "0"
  131.             ValueType = "String"
  132.         }
  133.         Registry DisableFilterKeys3 {
  134.             Ensure = "Present"
  135.             Key = "HKEY_USERS\${mysid}\Control Panel\Accessibility\Keyboard Response"
  136.             ValueName   = "AutoRepeatDelay"
  137.             ValueData   = "0"
  138.             ValueType = "String"
  139.         }
  140.         Registry DisableFilterKeys4 {
  141.             Ensure = "Present"
  142.             Key = "HKEY_USERS\${mysid}\Control Panel\Accessibility\Keyboard Response"
  143.             ValueName   = "AutoRepeatRate"
  144.             ValueData   = "0"
  145.             ValueType = "String"
  146.         }
  147.         Registry DisableFilterKeys5 {
  148.             Ensure = "Present"
  149.             Key = "HKEY_USERS\${mysid}\Control Panel\Accessibility\Keyboard Response"
  150.             ValueName   = "BounceTime"
  151.             ValueData   = "0"
  152.             ValueType = "String"
  153.         }
  154.         Registry DisableOnlineSpeechPrivacyandRecognition {
  155.             Ensure = "Present"
  156.             Key = "HKEY_USERS\${mysid}\Software\Microsoft\Speech_OneCore\Settings\OnlineSpeechPrivacy"
  157.             ValueName   = "HasAccepted"
  158.             ValueData   = "0"
  159.             ValueType = "Dword"
  160.         }
  161.         Registry DisableCortanaTaskbar {
  162.             Ensure = "Present"
  163.             Key = "HKEY_USERS\${mysid}\SOFTWARE\Microsoft\Windows\CurrentVersion\Search"
  164.             ValueName   = "CortanaEnabled"
  165.             ValueData   = "0"
  166.             ValueType = "Dword"
  167.         }
  168.         Registry DoNotGiveCortanaConsent {
  169.             Ensure = "Present"
  170.             Key = "HKEY_USERS\${mysid}\SOFTWARE\Microsoft\Windows\CurrentVersion\Search"
  171.             ValueName   = "CortanaConsent"
  172.             ValueData   = "0"
  173.             ValueType = "Dword"
  174.         }
  175.         Registry DisableAdvertisingInfo {
  176.             Ensure = "Present"
  177.             Key = "HKEY_USERS\${mysid}\Software\Microsoft\Windows\CurrentVersion\AdvertisingInfo"
  178.             ValueName   = "Enabled"
  179.             ValueData   = "0"
  180.             ValueType = "Dword"
  181.         }
  182.         Registry DisableInfoByLanguageList {
  183.             Ensure = "Present"
  184.             Key = "HKEY_USERS\${mysid}\Control Panel\International\User Profile"
  185.             ValueName   = "HttpAcceptLanguageOptOut"
  186.             ValueData   = "1"
  187.             ValueType = "Dword"
  188.         }
  189.         Registry DisableAppLaunchTracking {
  190.             Ensure = "Present"
  191.             Key = "HKEY_USERS\${mysid}\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced"
  192.             ValueName   = "Start_TrackProgs"
  193.             ValueData   = "0"
  194.             ValueType = "Dword"
  195.         }
  196.         Registry DisableSuggestedContent1 {
  197.             Ensure = "Present"
  198.             Key = "HKEY_USERS\${mysid}\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager"
  199.             ValueName   = "SubscribedContent-338393Enabled"
  200.             ValueData   = "0"
  201.             ValueType = "Dword"
  202.         }
  203.         Registry DisableSuggestedContent2 {
  204.             Ensure = "Present"
  205.             Key = "HKEY_USERS\${mysid}\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager"
  206.             ValueName   = "SubscribedContent-338394Enabled"
  207.             ValueData   = "0"
  208.             ValueType = "Dword"
  209.         }
  210.         Registry DisableSuggestedContent3 {
  211.             Ensure = "Present"
  212.             Key = "HKEY_USERS\${mysid}\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager"
  213.             ValueName   = "SubscribedContent-338396Enabled"
  214.             ValueData   = "0"
  215.             ValueType = "Dword"
  216.         }
  217.         Registry DisableInkingandPersonalization1 {
  218.             Ensure = "Present"
  219.             Key = "HKEY_USERS\${mysid}\Software\Microsoft\Personalization\Settings"
  220.             ValueName   = "AcceptedPrivacyPolicy"
  221.             ValueData   = "0"
  222.             ValueType = "Dword"
  223.         }
  224.         Registry DisableInkingandPersonalization2 {
  225.             Ensure = "Present"
  226.             Key = "HKEY_USERS\${mysid}\Software\Microsoft\Windows\CurrentVersion\SettingSync\Groups\Language"
  227.             ValueName   = "Enabled"
  228.             ValueData   = "0"
  229.             ValueType = "Dword"
  230.         }
  231.         Registry DisableInkingandPersonalization3 {
  232.             Ensure = "Present"
  233.             Key = "HKEY_USERS\${mysid}\Software\Microsoft\InputPersonalization"
  234.             ValueName   = "RestrictImplicitTextCollection"
  235.             ValueData   = "1"
  236.             ValueType = "Dword"
  237.         }
  238.         Registry DisableInkingandPersonalization4 {
  239.             Ensure = "Present"
  240.             Key = "HKEY_USERS\${mysid}\Software\Microsoft\InputPersonalization"
  241.             ValueName   = "RestrictImplicitInkCollection"
  242.             ValueData   = "1"
  243.             ValueType = "Dword"
  244.         }
  245.         Registry DisableInkingandPersonalization5 {
  246.             Ensure = "Present"
  247.             Key = "HKEY_USERS\${mysid}\Software\Microsoft\InputPersonalization\TrainedDataStore"
  248.             ValueName   = "HarvestContacts"
  249.             ValueData   = "0"
  250.             ValueType = "Dword"
  251.         }
  252.         Registry DiagnosticsBasicUser1 {
  253.             Ensure = "Present"
  254.             Key = "HKEY_USERS\${mysid}\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack"
  255.             ValueName   = "ShowedToastAtLevel"
  256.             ValueData   = "1"
  257.             ValueType = "Dword"
  258.         }
  259.         Registry DisableTailoredExperiences {
  260.             Ensure = "Present"
  261.             Key = "HKEY_USERS\${mysid}\Software\Microsoft\Windows\CurrentVersion\Privacy"
  262.             ValueName   = "TailoredExperiencesWithDiagnosticDataEnabled"
  263.             ValueData   = "0"
  264.             ValueType = "Dword"
  265.         }
  266.         Registry DisableFeedbackFrequency {
  267.             Ensure = "Present"
  268.             Key = "HKEY_USERS\${mysid}\Software\Microsoft\Siuf\Rules"
  269.             ValueName   = "NumberOfSIUFInPeriod"
  270.             ValueData   = "0"
  271.             ValueType = "Dword"
  272.         }
  273.         Registry DisableAppsUsingCamera {
  274.             Ensure = "Present"
  275.             Key = "HKEY_USERS\${mysid}\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\webcam"
  276.             ValueName   = "Value"
  277.             ValueData   = "Deny"
  278.             ValueType = "String"
  279.         }
  280.         Registry DisableAppBluetoothAccess {
  281.             Ensure = "Present"
  282.             Key = "HKEY_USERS\${mysid}\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\radios"
  283.             ValueName   = "Value"
  284.             ValueData   = "Deny"
  285.             ValueType = "String"
  286.         }
  287.         Registry DisableCommUnpairedDevices {
  288.             Ensure = "Present"
  289.             Key = "HKEY_USERS\${mysid}\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\bluetoothSync"
  290.             ValueName   = "Value"
  291.             ValueData   = "Deny"
  292.             ValueType = "String"
  293.         }
  294.         Registry DisableBackgroundApps1 {
  295.             Ensure = "Present"
  296.             Key = "HKEY_USERS\${mysid}\Software\Microsoft\Windows\CurrentVersion\Search"
  297.             ValueName   = "BackgroundAppGlobalToggle"
  298.             ValueData   = "0"
  299.             ValueType = "Dword"
  300.         }
  301.         Registry DisableBackgroundApps2 {
  302.             Ensure = "Present"
  303.             Key = "HKEY_USERS\${mysid}\Software\Microsoft\Windows\CurrentVersion\BackgroundAccessApplications"
  304.             ValueName   = "GlobalUserDisabled"
  305.             ValueData   = "1"
  306.             ValueType = "Dword"
  307.         }
  308.         Registry ShowFileExtensions {
  309.             Ensure = "Present"
  310.             Key = "HKEY_USERS\${mysid}\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced"
  311.             ValueName   = "HideFileExt"
  312.             ValueData   = "0"
  313.             ValueType = "Dword"
  314.         }
  315.         Registry DisableNarrator1 {
  316.             Ensure = "Present"
  317.             Key = "HKEY_USERS\${mysid}\Software\Microsoft\Windows NT\CurrentVersion\AccessibilityTemp"
  318.             ValueName   = "narrator"
  319.             ValueData   = "0"
  320.             ValueType = "Dword"
  321.         }
  322.         Registry DisableNarrator2 {
  323.             Ensure = "Present"
  324.             Key = "HKEY_USERS\${mysid}\Software\Microsoft\Narrator\NoRoam"
  325.             ValueName   = "RunningState"
  326.             ValueData   = "0"
  327.             ValueType = "Dword"
  328.         }
  329.         Registry DisableAutoCorrect {
  330.             Ensure = "Present"
  331.             Key = "HKEY_USERS\${mysid}\Software\Microsoft\TabletTip\1.7"
  332.             ValueName   = "EnableAutocorrection"
  333.             ValueData   = "0"
  334.             ValueType = "Dword"
  335.         }
  336.         Registry DisableSpellChecking {
  337.             Ensure = "Present"
  338.             Key = "HKEY_USERS\${mysid}\Software\Microsoft\TabletTip\1.7"
  339.             ValueName   = "EnableSpellchecking"
  340.             ValueData   = "0"
  341.             ValueType = "Dword"
  342.         }
  343.         Registry DisableTypePrediction {
  344.             Ensure = "Present"
  345.             Key = "HKEY_USERS\${mysid}\Software\Microsoft\TabletTip\1.7"
  346.             ValueName   = "EnableTextPrediction"
  347.             ValueData   = "0"
  348.             ValueType = "Dword"
  349.         }
  350.         Registry DisableSpaceInsertPrediction {
  351.             Ensure = "Present"
  352.             Key = "HKEY_USERS\${mysid}\Software\Microsoft\TabletTip\1.7"
  353.             ValueName   = "EnablePredictionSpaceInsertion"
  354.             ValueData   = "0"
  355.             ValueType = "Dword"
  356.         }
  357.         Registry DisableDoubleTapSpace {
  358.             Ensure = "Present"
  359.             Key = "HKEY_USERS\${mysid}\Software\Microsoft\TabletTip\1.7"
  360.             ValueName   = "EnableDoubleTapSpace"
  361.             ValueData   = "0"
  362.             ValueType = "Dword"
  363.         }
  364.         Registry DisableTypingInsights1 {
  365.             Ensure = "Present"
  366.             Key = "HKEY_USERS\${mysid}\Software\Microsoft\Input\Settings"
  367.             ValueName   = "InsightsEnabled"
  368.             ValueData   = "0"
  369.             ValueType = "Dword"
  370.         }
  371.         Registry DisableTypingInsights2 {
  372.             Ensure = "Present"
  373.             Key = "HKEY_USERS\${mysid}\Software\Microsoft\Input\Settings"
  374.             ValueName   = "Insights"
  375.             ValueData   = "01000000071de8c131cc8360a3d6d9c1330a686b165aba2e235f5a5c"
  376.             ValueType = "Binary"
  377.         }
  378.         Registry DisableSwiftKeySuggestionsLangEnglishUS {
  379.             Ensure = "Present"
  380.             Key = "HKEY_USERS\${mysid}\Software\Microsoft\TabletTip\1.7"
  381.             ValueName   = "EnableInkingWithTouch"
  382.             ValueData   = "0"
  383.             ValueType = "Dword"
  384.         }
  385.         Registry DisablePenandInk {
  386.             Ensure = "Present"
  387.             Key = "HKEY_USERS\${mysid}\Software\Microsoft\Windows\CurrentVersion\PenWorkspace"
  388.             ValueName   = "PenWorkspaceAppSuggestionsEnabled"
  389.             ValueData   = "0"
  390.             ValueType = "Dword"
  391.         }
  392.         Registry DisableAutoPlay {
  393.             Ensure = "Present"
  394.             Key = "HKEY_USERS\${mysid}\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers"
  395.             ValueName   = "DisableAutoplay"
  396.             ValueData   = "1"
  397.             ValueType = "Dword"
  398.         }
  399.         Registry DisableGameBar {
  400.             Ensure = "Present"
  401.             Key = "HKEY_USERS\${mysid}\System\GameConfigStore"
  402.             ValueName   = "GameDVR_Enabled"
  403.             ValueData   = "0"
  404.             ValueType = "Dword"
  405.         }
  406.         Registry DisableGameBarControllerShortcut {
  407.             Ensure = "Present"
  408.             Key = "HKEY_USERS\${mysid}\Software\Microsoft\GameBar"
  409.             ValueName   = "UseNexusForGameBarEnabled"
  410.             ValueData   = "0"
  411.             ValueType = "Dword"
  412.         }
  413.         Registry DisableGamingAudioCaptures {
  414.             Ensure = "Present"
  415.             Key = "HKEY_USERS\${mysid}\Software\Microsoft\Windows\CurrentVersion\GameDVR"
  416.             ValueName   = "AudioCaptureEnabled"
  417.             ValueData   = "0"
  418.             ValueType = "Dword"
  419.         }
  420.         Registry DisableGamingHistoricalCaptures {
  421.             Ensure = "Present"
  422.             Key = "HKEY_USERS\${mysid}\Software\Microsoft\Windows\CurrentVersion\GameDVR"
  423.             ValueName   = "HistoricalCaptureEnabled"
  424.             ValueData   = "0"
  425.             ValueType = "Dword"
  426.         }
  427.         Registry DisableGamingCursorCaptures {
  428.             Ensure = "Present"
  429.             Key = "HKEY_USERS\${mysid}\Software\Microsoft\Windows\CurrentVersion\GameDVR"
  430.             ValueName   = "CursorCaptureEnabled"
  431.             ValueData   = "0"
  432.             ValueType = "Dword"
  433.         }
  434.         Registry DisableGamingBroadcasting1 {
  435.             Ensure = "Present"
  436.             Key = "HKEY_USERS\${mysid}\Software\Microsoft\Windows\CurrentVersion\AppBroadcast\GlobalSettings"
  437.             ValueName   = "AudioCaptureEnabled"
  438.             ValueData   = "0"
  439.             ValueType = "Dword"
  440.         }
  441.         Registry DisableGamingBroadcasting2 {
  442.             Ensure = "Present"
  443.             Key = "HKEY_USERS\${mysid}\Software\Microsoft\Windows\CurrentVersion\AppBroadcast\GlobalSettings"
  444.             ValueName   = "MicrophoneCaptureEnabledByDefault"
  445.             ValueData   = "0"
  446.             ValueType = "Dword"
  447.         }
  448.         Registry DisableGamingBroadcasting3 {
  449.             Ensure = "Present"
  450.             Key = "HKEY_USERS\${mysid}\Software\Microsoft\Windows\CurrentVersion\AppBroadcast\GlobalSettings"
  451.             ValueName   = "CursorCaptureEnabled"
  452.             ValueData   = "0"
  453.             ValueType = "Dword"
  454.         }
  455.         Registry DisableGamingBroadcasting4 {
  456.             Ensure = "Present"
  457.             Key = "HKEY_USERS\${mysid}\Software\Microsoft\Windows\CurrentVersion\AppBroadcast\GlobalSettings"
  458.             ValueName   = "CameraCaptureEnabledByDefault"
  459.             ValueData   = "0"
  460.             ValueType = "Dword"
  461.         }
  462.         Registry DisableGamingMode {
  463.             Ensure = "Present"
  464.             Key = "HKEY_USERS\${mysid}\Software\Microsoft\GameBar"
  465.             ValueName   = "AutoGameModeEnabled"
  466.             ValueData   = "0"
  467.             ValueType = "Dword"
  468.         }
  469.         Registry DisableSigninOptionReopenApps {
  470.             Ensure = "Present"
  471.             Key = "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\UserARSO\${mysid}"
  472.             ValueName   = "OptOut"
  473.             ValueData   = "1"
  474.             ValueType = "Dword"
  475.         }
  476.         Registry DisableLoginBackgroundImageonLockScreen {
  477.             Ensure = "Present"
  478.             Key = "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SystemProtectedUserData\${mysid}\AnyoneRead\LockScreen\"
  479.             ValueName   = "HideLogonBackgroundImage"
  480.             ValueData   = "1"
  481.             ValueType = "Dword"
  482.         }
  483.         Registry DisableOneDriveStartUp {
  484.             Ensure = "Present"
  485.             Key = "HKEY_USERS\${mysid}\Software\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run"
  486.             ValueName   = "OneDrive"
  487.             ValueData   = "0100000004077640378fd401"
  488.             ValueType = "Binary"
  489.         }
  490.         Registry DisablePersonalizationTransparencyEffect {
  491.             Ensure = "Present"
  492.             Key = "HKEY_USERS\${mysid}\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize"
  493.             ValueName   = "EnableTransparency"
  494.             ValueData   = "0"
  495.             ValueType = "Dword"
  496.         }
  497.         Registry DisableShowPeopleOnTaskbar {
  498.             Ensure = "Present"
  499.             Key = "HKEY_USERS\${mysid}\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\People"
  500.             ValueName   = "PeopleBand"
  501.             ValueData   = "0"
  502.             ValueType = "Dword"
  503.         }
  504.         Registry DisableAutoDetectProxy {
  505.             Ensure = "Present"
  506.             Key = "HKEY_USERS\${mysid}\Software\Microsoft\Windows\CurrentVersion\Internet Settings"
  507.             ValueName   = "ProxyEnable"
  508.             ValueData   = "0"
  509.             ValueType = "Dword"
  510.         }
  511.         Registry DisableShareAcrossDevices1 {
  512.             Ensure = "Present"
  513.             Key = "HKEY_USERS\${mysid}\Software\Microsoft\Windows\CurrentVersion\CDP"
  514.             ValueName   = "RomeSdkChannelUserAuthzPolicy"
  515.             ValueData   = "0"
  516.             ValueType = "Dword"
  517.         }
  518.         Registry DisableShareAcrossDevices2 {
  519.             Ensure = "Present"
  520.             Key = "HKEY_USERS\${mysid}\Software\Microsoft\Windows\CurrentVersion\CDP"
  521.             ValueName   = "CdpSessionUserAuthzPolicy"
  522.             ValueData   = "0"
  523.             ValueType = "Dword"
  524.         }
  525.         Registry DisableLockScreenNotifications1 {
  526.             Ensure = "Present"
  527.             Key = "HKEY_USERS\${mysid}\Software\Microsoft\Windows\CurrentVersion\PushNotifications"
  528.             ValueName   = "LockScreenToastEnabled"
  529.             ValueData   = "0"
  530.             ValueType = "Dword"
  531.         }
  532.         Registry DisableLockScreenNotifications2 {
  533.             Ensure = "Present"
  534.             Key = "HKEY_USERS\${mysid}\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings"
  535.             ValueName   = "NOC_GLOBAL_SETTING_ALLOW_TOASTS_ABOVE_LOCK"
  536.             ValueData   = "0"
  537.             ValueType = "Dword"
  538.         }
  539.         Registry DisableLockScreenNotifications3 {
  540.             Ensure = "Present"
  541.             Key = "HKEY_USERS\${mysid}\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings"
  542.             ValueName   = "NOC_GLOBAL_SETTING_ALLOW_CRITICAL_TOASTS_ABOVE_LOCK"
  543.             ValueData   = "0"
  544.             ValueType = "Dword"
  545.         }
  546.         Registry DisableToastNotifications {
  547.             Ensure = "Present"
  548.             Key = "HKEY_USERS\${mysid}\Software\Microsoft\Windows\CurrentVersion\PushNotifications"
  549.             ValueName   = "ToastEnabled"
  550.             ValueData   = "0"
  551.             ValueType = "Dword"
  552.         }
  553.         Registry EnforceDesktopModeNotTablet1 {
  554.             Ensure = "Present"
  555.             Key = "HKEY_USERS\${mysid}\Software\Microsoft\Windows\CurrentVersion\ImmersiveShell"
  556.             ValueName   = "SignInMode"
  557.             ValueData   = "1"
  558.             ValueType = "Dword"
  559.         }
  560.         Registry EnforceDesktopModeNotTablet2 {
  561.             Ensure = "Present"
  562.             Key = "HKEY_USERS\${mysid}\Software\Microsoft\Windows\CurrentVersion\ImmersiveShell"
  563.             ValueName   = "ConvertibleSlateModePromptPreference"
  564.             ValueData   = "0"
  565.             ValueType = "Dword"
  566.         }
  567.         Registry DisableMultitaskingSnap {
  568.             Ensure = "Present"
  569.             Key = "HKEY_USERS\${mysid}\Control Panel\Desktop"
  570.             ValueName   = "WindowArrangementActive"
  571.             ValueData   = "0"
  572.             ValueType = "String"
  573.         }
  574.  
  575.         ###########################
  576.         # SYSTEM/MACHINE SETTINGS
  577.         ###########################
  578.         # Disable Services
  579.         # https://docs.microsoft.com/en-us/windows-server/security/windows-services/security-guidelines-for-disabling-system-services-in-windows-server
  580.         # Privacy Settings
  581.         # https://privacyamp.com/knowledge-base/windows-10-privacy-settings/
  582.         Service SvcAllJoyn {
  583.             Name   = "AJRouter"
  584.             State = 'Stopped'
  585.             StartupType = 'Disabled'
  586.         }
  587.         Service SvcAppLayerGateway {
  588.             Name   = "ALG"
  589.             State = 'Stopped'
  590.             StartupType = 'Disabled'
  591.         }
  592.         Service SvcAppMgmtGrpPolicy {
  593.             Name   = "AppMgmt"
  594.             State = 'Stopped'
  595.             StartupType = 'Disabled'
  596.         }
  597.         Service SvcBluetoothAudioGateway {
  598.             Name   = "BTAGService"
  599.             State = 'Stopped'
  600.             StartupType = 'Disabled'
  601.         }
  602.         Service SvcBluetoothSupportService {
  603.             Name   = "bthserv"
  604.             State = 'Stopped'
  605.             StartupType = 'Disabled'
  606.         }
  607.         Service SvcBranchCache {
  608.             Name   = "PeerDistSvc"
  609.             State = 'Stopped'
  610.             StartupType = 'Disabled'
  611.         }
  612.         Service SvcCertPropagation {
  613.             Name   = "CertPropSvc"
  614.             State = 'Stopped'
  615.             StartupType = 'Disabled'
  616.         }
  617.         Service SvcDiagTrack {
  618.             Name   = "DiagTrack"
  619.             State = 'Stopped'
  620.             StartupType = 'Disabled'
  621.         }
  622.         Service SvcDownloadedMapsMgr {
  623.             Name   = "MapsBroker"
  624.             State = 'Stopped'
  625.             StartupType = 'Disabled'
  626.         }
  627.         Service SvcGeoLocation {
  628.             Name   = "lfsvc"
  629.             State = 'Stopped'
  630.             StartupType = 'Disabled'
  631.         }
  632.         Service SvcHVHost {
  633.             Name   = "HvHost"
  634.             State = 'Stopped'
  635.             StartupType = 'Disabled'
  636.         }
  637.         Service SvcHVDataExch {
  638.             Name   = "vmickvpexchange"
  639.             State = 'Stopped'
  640.             StartupType = 'Disabled'
  641.         }
  642.         Service SvcHVGuestInterface {
  643.             Name   = "vmicguestinterface"
  644.             State = 'Stopped'
  645.             StartupType = 'Disabled'
  646.         }
  647.         Service SvcHVGuestShutdown {
  648.             Name   = "vmicshutdown"
  649.             State = 'Stopped'
  650.             StartupType = 'Disabled'
  651.         }
  652.         Service SvcHVHeartBeat {
  653.             Name   = "vmicheartbeat"
  654.             State = 'Stopped'
  655.             StartupType = 'Disabled'
  656.         }
  657.         Service SvcHVPowershell {
  658.             Name   = "vmicvmsession"
  659.             State = 'Stopped'
  660.             StartupType = 'Disabled'
  661.         }
  662.         Service SvcHVRDP {
  663.             Name   = "vmicrdv"
  664.             State = 'Stopped'
  665.             StartupType = 'Disabled'
  666.         }
  667.         Service SvcHVTime {
  668.             Name   = "vmictimesync"
  669.             State = 'Stopped'
  670.             StartupType = 'Disabled'
  671.         }
  672.         Service SvcHVVolumeShadow {
  673.             Name   = "vmicvss"
  674.             State = 'Stopped'
  675.             StartupType = 'Disabled'
  676.         }
  677.         Service SvcInfrared {
  678.             Name   = "irmon"
  679.             State = 'Stopped'
  680.             StartupType = 'Disabled'
  681.         }
  682.         Service SvcInternetConnSharing {
  683.             Name   = "SharedAccess"
  684.             State = 'Stopped'
  685.             StartupType = 'Disabled'
  686.         }
  687.         Service SvcIPHelperipv6 {
  688.             Name   = "iphlpsvc"
  689.             State = 'Stopped'
  690.             StartupType = 'Disabled'
  691.         }
  692.         Service SvcIPTranslateipv6 {
  693.             Name   = "IpxlatCfgSvc"
  694.             State = 'Stopped'
  695.             StartupType = 'Disabled'
  696.         }
  697.         Service SvcMsAccountSignIn {
  698.             Name   = "wlidsvc"
  699.             State = 'Stopped'
  700.             StartupType = 'Disabled'
  701.         }
  702.         Service SvcAppvclient {
  703.             Name   = "AppVClient"
  704.             State = 'Stopped'
  705.             StartupType = 'Disabled'
  706.         }
  707.         Service SvcSMSRouter {
  708.             Name   = "SmsRouter"
  709.             State = 'Stopped'
  710.             StartupType = 'Disabled'
  711.         }
  712.         Service SvcNaturalAuth {
  713.             Name   = "NaturalAuthentication"
  714.             State = 'Stopped'
  715.             StartupType = 'Disabled'
  716.         }
  717.         Service SvcNetlogon {
  718.             Name   = "Netlogon"
  719.             State = 'Stopped'
  720.             StartupType = 'Disabled'
  721.         }
  722.         Service SvcNetDvcAutoSetup {
  723.             Name   = "NcdAutoSetup"
  724.             State = 'Stopped'
  725.             StartupType = 'Disabled'
  726.         }
  727.         Service SvcParentalControls {
  728.             Name   = "WpcMonSvc"
  729.             State = 'Stopped'
  730.             StartupType = 'Disabled'
  731.         }
  732.         Service SvcNFC {
  733.             Name   = "SEMgrSvc"
  734.             State = 'Stopped'
  735.             StartupType = 'Disabled'
  736.         }
  737.         Service SvcPhoneService {
  738.             Name   = "PhoneSvc"
  739.             State = 'Stopped'
  740.             StartupType = 'Disabled'
  741.         }
  742.         Service SvcPrintSpooler {
  743.             Name   = "Spooler"
  744.             State = 'Stopped'
  745.             StartupType = 'Disabled'
  746.         }
  747.         Service SvcProgramCompat {
  748.             Name   = "PcaSvc"
  749.             State = 'Stopped'
  750.             StartupType = 'Disabled'
  751.         }
  752.         Service SvcRPCLocator {
  753.             Name   = "RpcLocator"
  754.             State = 'Stopped'
  755.             StartupType = 'Disabled'
  756.         }
  757.         Service SvcRemoteRegistry {
  758.             Name   = "RemoteRegistry"
  759.             State = 'Stopped'
  760.             StartupType = 'Disabled'
  761.         }
  762.         Service SvcRetailDemo {
  763.             Name   = "RetailDemo"
  764.             State = 'Stopped'
  765.             StartupType = 'Disabled'
  766.         }
  767.         Service SvcSensorDataService {
  768.             Name   = "SensorDataService"
  769.             State = 'Stopped'
  770.             StartupType = 'Disabled'
  771.         }
  772.         Service SvcSensorMon {
  773.             Name   = "SensrSvc"
  774.             State = 'Stopped'
  775.             StartupType = 'Disabled'
  776.         }
  777.         Service SvcSensorServ {
  778.             Name   = "SensorService"
  779.             State = 'Stopped'
  780.             StartupType = 'Disabled'
  781.         }
  782.         Service SvcSmartCard {
  783.             Name   = "SCardSvr"
  784.             State = 'Stopped'
  785.             StartupType = 'Disabled'
  786.         }
  787.         Service SvcSmartCardDevEnum {
  788.             Name   = "ScDeviceEnum"
  789.             State = 'Stopped'
  790.             StartupType = 'Disabled'
  791.         }
  792.         Service SvcSmartCardRemove {
  793.             Name   = "SCPolicySvc"
  794.             State = 'Stopped'
  795.             StartupType = 'Disabled'
  796.         }
  797.         Service SvcSnmptrap {
  798.             Name   = "SNMPTRAP"
  799.             State = 'Stopped'
  800.             StartupType = 'Disabled'
  801.         }
  802.         Service SvcSSDP {
  803.             Name   = "SSDPSRV"
  804.             State = 'Stopped'
  805.             StartupType = 'Disabled'
  806.         }
  807.         Service SvcWebClient {
  808.             Name   = "WebClient"
  809.             State = 'Stopped'
  810.             StartupType = 'Disabled'
  811.         }
  812.         Service SvcWifiDirect {
  813.             Name   = "WFDSConMgrSvc"
  814.             State = 'Stopped'
  815.             StartupType = 'Disabled'
  816.         }
  817.         Service SvcWinCameraFrameServ {
  818.             Name   = "FrameServer"
  819.             State = 'Stopped'
  820.             StartupType = 'Disabled'
  821.         }
  822.         Service SvcWinConnectNow {
  823.             Name   = "wcncsvc"
  824.             State = 'Stopped'
  825.             StartupType = 'Disabled'
  826.         }
  827.         Service SvcWinImageAcquisition {
  828.             Name   = "stisvc"
  829.             State = 'Stopped'
  830.             StartupType = 'Disabled'
  831.         }
  832.         Service SvcMobileHotspot {
  833.             Name   = "icssvc"
  834.             State = 'Stopped'
  835.             StartupType = 'Disabled'
  836.         }
  837.         Service SvcWinPerception {
  838.             Name   = "spectrum"
  839.             State = 'Stopped'
  840.             StartupType = 'Disabled'
  841.         }
  842.         Service SvcWinPerceptionSim {
  843.             Name   = "perceptionsimulation"
  844.             State = 'Stopped'
  845.             StartupType = 'Disabled'
  846.         }
  847.         Service SvcWinPush {
  848.             Name   = "WpnService"
  849.             State = 'Stopped'
  850.             StartupType = 'Disabled'
  851.         }
  852.         Service SvcWlanautoconfig {
  853.             Name   = "WlanSvc"
  854.             State = 'Running'
  855.             StartupType = 'Automatic'
  856.         }
  857.         Service SvcWWANAuto {
  858.             Name   = "WwanSvc"
  859.             State = 'Stopped'
  860.             StartupType = 'Disabled'
  861.         }
  862.         Service SvcXboxAccessory {
  863.             Name   = "XboxGipSvc"
  864.             State = 'Stopped'
  865.             StartupType = 'Disabled'
  866.         }
  867.         Service SvcXboxliveauth {
  868.             Name   = "XblAuthManager"
  869.             State = 'Stopped'
  870.             StartupType = 'Disabled'
  871.         }
  872.         Service SvcXboxgamesave {
  873.             Name   = "XblGameSave"
  874.             State = 'Stopped'
  875.             StartupType = 'Disabled'
  876.         }
  877.         Service SvcXboxnetwork {
  878.             Name   = "XboxNetApiSvc"
  879.             State = 'Stopped'
  880.             StartupType = 'Disabled'
  881.         }
  882.         #FileSharing/Comms
  883.         Service SvcWorkstation {
  884.             Name   = "LanmanWorkstation"
  885.             State = 'Stopped'
  886.             StartupType = 'Disabled'
  887.         }
  888.         Service SvcServer {
  889.             Name   = "LanmanServer"
  890.             State = 'Stopped'
  891.             StartupType = 'Disabled'
  892.         }
  893.         Service SvcNetBios {
  894.             Name   = "lmhosts"
  895.             State = 'Stopped'
  896.             StartupType = 'Disabled'
  897.         }
  898.         Service SvcTouchKeyboardandHandwriting {
  899.             Name   = "TabletInputService"
  900.             State = 'Stopped'
  901.             StartupType = 'Disabled'
  902.         }
  903.         Service SvcWindowsRemoteManagement {
  904.             Name   = "WinRM"
  905.             State = 'Running'
  906.             StartupType = 'Automatic'
  907.         }
  908.         Registry DisableCortanaSearch {
  909.             Ensure = "Present"
  910.             Key = "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search"
  911.             ValueName   = "AllowCortana"
  912.             ValueData   = "0"
  913.             ValueType = "Dword"
  914.         }
  915.         Registry DiagnosticsBasic1 {
  916.             Ensure = "Present"
  917.             Key = "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\DataCollection"
  918.             ValueName   = "AllowTelemetry"
  919.             ValueData   = "1"
  920.             ValueType = "Dword"
  921.         }
  922.         Registry DiagnosticsBasic2 {
  923.             Ensure = "Present"
  924.             Key = "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\DataCollection"
  925.             ValueName   = "MaxTelemetryAllowed"
  926.             ValueData   = "1"
  927.             ValueType = "Dword"
  928.         }
  929.         Registry DiagnosticsBasic3 {
  930.             Ensure = "Present"
  931.             Key = "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack"
  932.             ValueName   = "UploadPermissionReceived"
  933.             ValueData   = "1"
  934.             ValueType = "Dword"
  935.         }
  936.         Registry DiagnosticsBasic4 {
  937.             Ensure = "Present"
  938.             Key = "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack"
  939.             ValueName   = "DiagTrackAuthorization"
  940.             ValueData   = "775"
  941.             ValueType = "Dword"
  942.         }
  943.         Registry DiagnosticsBasic5 {
  944.             Ensure = "Present"
  945.             Key = "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack"
  946.             ValueName   = "DiagTrackStatus"
  947.             ValueData   = "2"
  948.             ValueType = "Dword"
  949.         }
  950.         Registry DiagnosticsBasic6 {
  951.             Ensure = "Present"
  952.             Key = "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\TraceManager"
  953.             ValueName   = "miniTraceSlotEnabled"
  954.             ValueData   = "0"
  955.             ValueType = "Dword"
  956.         }
  957.         Registry DiagnosticsBasic7 {
  958.             Ensure = "Present"
  959.             Key = "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\TraceManager"
  960.             ValueName   = "miniTraceSlotContentPermitted"
  961.             ValueData   = "1"
  962.             ValueType = "Dword"
  963.         }
  964.         Registry DisableActivityPublishing {
  965.             Ensure = "Present"
  966.             Key = "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System"
  967.             ValueName   = "PublishUserActivities"
  968.             ValueData   = "0"
  969.             ValueType = "Dword"
  970.         }
  971.         Registry DisableActivityUpload {
  972.             Ensure = "Present"
  973.             Key = "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System"
  974.             ValueName   = "UploadUserActivities"
  975.             ValueData   = "0"
  976.             ValueType = "Dword"
  977.         }
  978.         Registry DisableAppMicroPhoneAccess {
  979.             Ensure = "Present"
  980.             Key = "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\microphone"
  981.             ValueName   = "Value"
  982.             ValueData   = "Deny"
  983.             ValueType = "String"
  984.         }
  985.         Registry DisableAppNotificationsAccess {
  986.             Ensure = "Present"
  987.             Key = "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\userNotificationListener"
  988.             ValueName   = "Value"
  989.             ValueData   = "Deny"
  990.             ValueType = "String"
  991.         }
  992.         Registry DisableAppAccountInfoAccess {
  993.             Ensure = "Present"
  994.             Key = "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\userAccountInformation"
  995.             ValueName   = "Value"
  996.             ValueData   = "Deny"
  997.             ValueType = "String"
  998.         }
  999.         Registry DisableAppContactInfoAccess {
  1000.             Ensure = "Present"
  1001.             Key = "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\contacts"
  1002.             ValueName   = "Value"
  1003.             ValueData   = "Deny"
  1004.             ValueType = "String"
  1005.         }
  1006.         Registry DisableAppCalendarAccess {
  1007.             Ensure = "Present"
  1008.             Key = "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\appointments"
  1009.             ValueName   = "Value"
  1010.             ValueData   = "Deny"
  1011.             ValueType = "String"
  1012.         }
  1013.         Registry DisableAppCallHist {
  1014.             Ensure = "Present"
  1015.             Key = "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\phoneCallHistory"
  1016.             ValueName   = "Value"
  1017.             ValueData   = "Deny"
  1018.             ValueType = "String"
  1019.         }
  1020.         Registry DisableAppEmailsAccess {
  1021.             Ensure = "Present"
  1022.             Key = "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\email"
  1023.             ValueName   = "Value"
  1024.             ValueData   = "Deny"
  1025.             ValueType = "String"
  1026.         }
  1027.         Registry DisableAppTaskAccess {
  1028.             Ensure = "Present"
  1029.             Key = "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\userDataTasks"
  1030.             ValueName   = "Value"
  1031.             ValueData   = "Deny"
  1032.             ValueType = "String"
  1033.         }
  1034.         Registry DisableAppMessagingAccess {
  1035.             Ensure = "Present"
  1036.             Key = "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\chat"
  1037.             ValueName   = "Value"
  1038.             ValueData   = "Deny"
  1039.             ValueType = "String"
  1040.         }
  1041.         Registry DisableAppRadioAccess {
  1042.             Ensure = "Present"
  1043.             Key = "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\radios"
  1044.             ValueName   = "Value"
  1045.             ValueData   = "Deny"
  1046.             ValueType = "String"
  1047.         }
  1048.         Registry DisableAppDiagAccess {
  1049.             Ensure = "Present"
  1050.             Key = "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\appDiagnostics"
  1051.             ValueName   = "Value"
  1052.             ValueData   = "Deny"
  1053.             ValueType = "String"
  1054.         }
  1055.         Registry DisableAppDocumentAccess {
  1056.             Ensure = "Present"
  1057.             Key = "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\documentsLibrary"
  1058.             ValueName   = "Value"
  1059.             ValueData   = "Deny"
  1060.             ValueType = "String"
  1061.         }
  1062.         Registry DisableAppPicutresAccess {
  1063.             Ensure = "Present"
  1064.             Key = "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\picturesLibrary"
  1065.             ValueName   = "Value"
  1066.             ValueData   = "Deny"
  1067.             ValueType = "String"
  1068.         }
  1069.         Registry DisableAppVideoAccess {
  1070.             Ensure = "Present"
  1071.             Key = "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\videosLibrary"
  1072.             ValueName   = "Value"
  1073.             ValueData   = "Deny"
  1074.             ValueType = "String"
  1075.         }
  1076.         Registry DisableAppFileSystemAccess {
  1077.             Ensure = "Present"
  1078.             Key = "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\broadFileSystemAccess"
  1079.             ValueName   = "Value"
  1080.             ValueData   = "Allow"
  1081.             ValueType = "String"
  1082.         }
  1083.         Registry DisableDeliveryOptDownloadOtherPCs1 {
  1084.             Ensure = "Present"
  1085.             Key = "HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\DeliveryOptimization\Settings"
  1086.             ValueName   = "DownloadMode"
  1087.             ValueData   = "0"
  1088.             ValueType = "Dword"
  1089.         }
  1090.         Registry DisableDeliveryOptDownloadOtherPCs2 {
  1091.             Ensure = "Present"
  1092.             Key = "HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\DeliveryOptimization\Settings"
  1093.             ValueName   = "DownloadModeProvider"
  1094.             ValueData   = "8"
  1095.             ValueType = "Dword"
  1096.         }
  1097.         Registry DisableFindMyDevice {
  1098.             Ensure = "Present"
  1099.             Key = "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Settings\FindMyDevice"
  1100.             ValueName   = "LocationSyncEnabled"
  1101.             ValueData   = "0"
  1102.             ValueType = "Dword"
  1103.         }
  1104.         Registry DisableRemoteAssistance {
  1105.             Ensure = "Present"
  1106.             Key = "HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Remote Assistance"
  1107.             ValueName   = "fAllowToGetHelp"
  1108.             ValueData   = "0"
  1109.             ValueType = "Dword"
  1110.         }
  1111.         Registry DisableCloudSearch {
  1112.             Ensure = "Present"
  1113.             Key = "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search"
  1114.             ValueName   = "AllowCloudSearch"
  1115.             ValueData   = "0"
  1116.             ValueType = "Dword"
  1117.         }
  1118.         Registry DisableFastBoot {
  1119.             Ensure = "Present"
  1120.             Key = "HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Session Manager\Power"
  1121.             ValueName   = "HiberbootEnabled"
  1122.             ValueData   = "0"
  1123.             ValueType = "Dword"
  1124.         }
  1125.         Registry DisableShowSleep {
  1126.             Ensure = "Present"
  1127.             Key = "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FlyoutMenuSettings"
  1128.             ValueName   = "ShowSleepOption"
  1129.             ValueData   = "0"
  1130.             ValueType = "Dword"
  1131.         }
  1132.         Registry DisableShowHibernate {
  1133.             Ensure = "Present"
  1134.             Key = "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FlyoutMenuSettings"
  1135.             ValueName   = "ShowHibernateOption"
  1136.             ValueData   = "0"
  1137.             ValueType = "Dword"
  1138.         }
  1139.         Registry DisableUSBSelectiveSuspend {
  1140.             Ensure = "Present"
  1141.             Key = "HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Power\User\PowerSchemes\8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c\2a737441-1930-4402-8d77-b2bebba308a3\48e6b7a6-50f5-4782-a5d4-53bb8f07e226"
  1142.             ValueName   = "ACSettingIndex"
  1143.             ValueData   = "0"
  1144.             ValueType = "Dword"
  1145.         }
  1146.         Registry DisableDefenderAutomaticSampleSubmit {
  1147.             Ensure = "Present"
  1148.             Key = "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Spynet"
  1149.             ValueName   = "SubmitSamplesConsent"
  1150.             ValueData   = "0"
  1151.             ValueType = "Dword"
  1152.         }
  1153.         Registry DisableGameDVR {
  1154.             Ensure = "Present"
  1155.             Key = "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\GameDVR"
  1156.             ValueName   = "AllowgameDVR"
  1157.             ValueData   = "0"
  1158.             ValueType = "Dword"
  1159.         }
  1160.         #WindowsOptionalFeature PrinttoPDF {
  1161.         #    Name = "Printing-PrintToPDFServices-Features"
  1162.         #    Ensure = "Disable"
  1163.         #}
  1164.         #WindowsOptionalFeature WorkFolders {
  1165.         #    Name = "WorkFolders-Client"
  1166.         #    Ensure = "Disable"
  1167.         #}
  1168.         #WindowsOptionalFeature XPS {
  1169.         #    Name = "Printing-XPSServices-Features"
  1170.         #    Ensure = "Disable"
  1171.         #}
  1172.         #WindowsOptionalFeature PrintFeatures {
  1173.         #    Name = "Printing-Foundation-Features"
  1174.         #    Ensure = "Disable"
  1175.         #}
  1176.         #WindowsOptionalFeature WindowsMediaPlayer {
  1177.         #    Name = "WindowsMediaPlayer"
  1178.         #    Ensure = "Disable"
  1179.         #}
  1180.         #WindowsOptionalFeature InternetExplorer {
  1181.         #    Name = "Internet-Explorer-Optional-amd64"
  1182.         #    Ensure = "Disable"
  1183.         #}
  1184.  
  1185.     }
  1186. }
  1187. GamingMinimal
RAW Paste Data

Adblocker detected! Please consider disabling it...

We've detected AdBlock Plus or some other adblocking software preventing Pastebin.com from fully loading.

We don't have any obnoxious sound, or popup ads, we actively block these annoying types of ads!

Please add Pastebin.com to your ad blocker whitelist or disable your adblocking software.

×