• Welcome to TechPowerUp Forums, Guest! Please check out our forum guidelines for info related to our community.

Windows 11 Tweaks for GPU Benchmark

Mussels

Freshwater Moderator
Staff member
Joined
Oct 6, 2004
Messages
58,413 (8.16/day)
Location
Oystralia
System Name Rainbow Sparkles (Power efficient, <350W gaming load)
Processor Ryzen R7 5800x3D (Undervolted, 4.45GHz all core)
Motherboard Asus x570-F (BIOS Modded)
Cooling Alphacool Apex UV - Alphacool Eisblock XPX Aurora + EK Quantum ARGB 3090 w/ active backplate
Memory 2x32GB DDR4 3600 Corsair Vengeance RGB @3866 C18-22-22-22-42 TRFC704 (1.4V Hynix MJR - SoC 1.15V)
Video Card(s) Galax RTX 3090 SG 24GB: Underclocked to 1700Mhz 0.750v (375W down to 250W))
Storage 2TB WD SN850 NVME + 1TB Sasmsung 970 Pro NVME + 1TB Intel 6000P NVME USB 3.2
Display(s) Phillips 32 32M1N5800A (4k144), LG 32" (4K60) | Gigabyte G32QC (2k165) | Phillips 328m6fjrmb (2K144)
Case Fractal Design R6
Audio Device(s) Logitech G560 | Corsair Void pro RGB |Blue Yeti mic
Power Supply Fractal Ion+ 2 860W (Platinum) (This thing is God-tier. Silent and TINY)
Mouse Logitech G Pro wireless + Steelseries Prisma XL
Keyboard Razer Huntsman TE ( Sexy white keycaps)
VR HMD Oculus Rift S + Quest 2
Software Windows 11 pro x64 (Yes, it's genuinely a good OS) OpenRGB - ditch the branded bloatware!
Benchmark Scores Nyooom.
Works for me, but had to manually disable tamper protection. Probably inevitable since that's the intention of the feature.
 

W1zzard

Administrator
Staff member
Joined
May 14, 2004
Messages
27,078 (3.71/day)
Processor Ryzen 7 5700X
Memory 48 GB
Video Card(s) RTX 4080
Storage 2x HDD RAID 1, 3x M.2 NVMe
Display(s) 30" 2560x1600 + 19" 1280x1024
Software Windows 10 64-bit
Works for me, but had to manually disable tamper protection. Probably inevitable since that's the intention of the feature.
Correct, that's why I added the check and the messagebox, so you can go to settings and disable Tamper.
 
Joined
Aug 3, 2016
Messages
152 (0.05/day)
System Name Ryzen 3 Build
Processor Ryzen 5 5600x
Motherboard Gigabyte Aorus Elite b550
Memory GSkill Ripjaws V (2x16GB)
Video Card(s) MSI GeForce RTX 3080 Trio 10GB
Storage SSD (250GB) + SSD (500GB) + HDD (1TB)
Case Phanteks Enthoo Pro PH-ES614P
Power Supply EVGA SuperNova 750W 80+ Gold
Software Windows 10 64Bit
Anyone have some useful additions for 23H2?

Here's mine:
Code:
rem Disable Window Copilot
reg add HKCU\Software\Policies\Microsoft\Windows\WindowsCopilot /v TurnOffWindowsCopilot /t REG_DWORD /d 1 /f
 

W1zzard

Administrator
Staff member
Joined
May 14, 2004
Messages
27,078 (3.71/day)
Processor Ryzen 7 5700X
Memory 48 GB
Video Card(s) RTX 4080
Storage 2x HDD RAID 1, 3x M.2 NVMe
Display(s) 30" 2560x1600 + 19" 1280x1024
Software Windows 10 64-bit
I started setting up 23H2 for the VGA test system, so far no issues with my scripts in 1st post.

I need to add a tweak to undo the extra spacing in file explorer, also Copilot as @Halo3Addict mentioned (I'm in EU, so none of that yet here)

Anything else that annoys you in 23H2?

Will also look if all the junk can be unpinned from Start now, previously Microsoft disabled that ability for scripts
 
Joined
Jul 9, 2020
Messages
94 (0.07/day)
Location
RU
@W1zzard Hey, i still on 22H2 (build 22621.2715) and after fresh drivers (v546.17) install (via NVCleanstall, recommended except HDMI Audio) i spotted that few system EXE always on GPU (i used NVIDIA-SMI command):

1. dwm.exe;
2. explorer.exe;
3. StartMenuExperienceHost;
4. LockApp.exe (suspended); \my user profile is password protected
5. SearchHost.exe (suspended);
6. ShellExperienceHost.exe (suspended).

Are there any way to restrict dwm.exe and explorer.exe to be on GPU? Or it's the way it is?

P.S. I also added them in "System=>Display=>Graphics" and set as "Energy efficient", but look's like it not help to drop idle power. I was able to get 24W (exact from you review of EVGA RTX 3080 Ti FTW3), but only on fresh installed driver. After some time OR benchmark runs (like Port Royal) it's eather stuck in a bit higher voltage - 0,768mV with ~11W on 8-pin #1 or maybe it's just board bug.

P.P.S. RGB is disabled. ;) Was turned On, then all switches turn off and brightness set to 0. Hardware monitoring also was disabled (all parameters was uncheck).
 

Attachments

  • EVGA_RTX_3080_Ti_FTW3_Ultra_Gaming_Low_Power.jpg
    EVGA_RTX_3080_Ti_FTW3_Ultra_Gaming_Low_Power.jpg
    174.6 KB · Views: 65
  • NVIDIA-SMI.jpg
    NVIDIA-SMI.jpg
    105.2 KB · Views: 62
Joined
Feb 20, 2020
Messages
9,340 (6.05/day)
Location
Louisiana
System Name Ghetto Rigs z490|x99|Acer 17 Nitro 7840hs/ 5600c40-2x16/ 4060/ 1tb acer stock m.2/ 4tb sn850x
Processor 10900k w/Optimus Foundation | 5930k w/Black Noctua D15
Motherboard z490 Maximus XII Apex | x99 Sabertooth
Cooling oCool D5 res-combo/280 GTX/ Optimus Foundation/ gpu water block | Blk D15
Memory Trident-Z Royal 4000c16 2x16gb | Trident-Z 3200c14 4x8gb
Video Card(s) Titan Xp-water | evga 980ti gaming-w/ air
Storage 970evo+500gb & sn850x 4tb | 860 pro 256gb | Acer m.2 1tb/ sn850x 4tb| Many2.5" sata's ssd 3.5hdd's
Display(s) 1-AOC G2460PG 24"G-Sync 144Hz/ 2nd 1-ASUS VG248QE 24"/ 3rd LG 43" series
Case D450 | Cherry Entertainment center on Test bench
Audio Device(s) Built in Realtek x2 with 2-Insignia 2.0 sound bars & 1-LG sound bar
Power Supply EVGA 1000P2 with APC AX1500 | 850P2 with CyberPower-GX1325U
Mouse Redragon 901 Perdition x3
Keyboard G710+x3
Software Win-7 pro x3 and win-10 & 11pro x3
Benchmark Scores Are in the benchmark section
I started setting up 23H2 for the VGA test system, so far no issues with my scripts in 1st post.

I need to add a tweak to undo the extra spacing in file explorer, also Copilot as @Halo3Addict mentioned (I'm in EU, so none of that yet here)

Anything else that annoys you in 23H2?

Will also look if all the junk can be unpinned from Start now, previously Microsoft disabled that ability for scripts
Hi,
Post one doesn't say anything about 23h2 on it
Only says updated for 22h2

If you did update it for 23h2
Your windows update script is failed for myself
Ran it again last night and shut down a little while after

On startup looked good update service was still showing disabled but looked 8 1/2 hours later and the update service still showed disabled "thought I was still good" but setting page shows checked for updates 7 hours ago lol
That means 1-1/2 hours after startup windows checked for updates :banghead:

Before you say you haven't had any issues keep in mind I wish I had the EU version because the US one sux :slap:
 

W1zzard

Administrator
Staff member
Joined
May 14, 2004
Messages
27,078 (3.71/day)
Processor Ryzen 7 5700X
Memory 48 GB
Video Card(s) RTX 4080
Storage 2x HDD RAID 1, 3x M.2 NVMe
Display(s) 30" 2560x1600 + 19" 1280x1024
Software Windows 10 64-bit
used on 23H2 on several installations without problems
 
Joined
Feb 20, 2020
Messages
9,340 (6.05/day)
Location
Louisiana
System Name Ghetto Rigs z490|x99|Acer 17 Nitro 7840hs/ 5600c40-2x16/ 4060/ 1tb acer stock m.2/ 4tb sn850x
Processor 10900k w/Optimus Foundation | 5930k w/Black Noctua D15
Motherboard z490 Maximus XII Apex | x99 Sabertooth
Cooling oCool D5 res-combo/280 GTX/ Optimus Foundation/ gpu water block | Blk D15
Memory Trident-Z Royal 4000c16 2x16gb | Trident-Z 3200c14 4x8gb
Video Card(s) Titan Xp-water | evga 980ti gaming-w/ air
Storage 970evo+500gb & sn850x 4tb | 860 pro 256gb | Acer m.2 1tb/ sn850x 4tb| Many2.5" sata's ssd 3.5hdd's
Display(s) 1-AOC G2460PG 24"G-Sync 144Hz/ 2nd 1-ASUS VG248QE 24"/ 3rd LG 43" series
Case D450 | Cherry Entertainment center on Test bench
Audio Device(s) Built in Realtek x2 with 2-Insignia 2.0 sound bars & 1-LG sound bar
Power Supply EVGA 1000P2 with APC AX1500 | 850P2 with CyberPower-GX1325U
Mouse Redragon 901 Perdition x3
Keyboard G710+x3
Software Win-7 pro x3 and win-10 & 11pro x3
Benchmark Scores Are in the benchmark section
I knew you'd say that lol
UE version rocks :rockout:
US not.

@lexluthermiester
Had some thoughts on the services clouding the script though.
 

W1zzard

Administrator
Staff member
Joined
May 14, 2004
Messages
27,078 (3.71/day)
Processor Ryzen 7 5700X
Memory 48 GB
Video Card(s) RTX 4080
Storage 2x HDD RAID 1, 3x M.2 NVMe
Display(s) 30" 2560x1600 + 19" 1280x1024
Software Windows 10 64-bit
I'm using US Windows of course

So your issue is specifically with the update service reenabling itself? Everything else works fine? Any error output in the update disable script? you do have internet, so it can download what it needs?
 
Joined
Feb 20, 2020
Messages
9,340 (6.05/day)
Location
Louisiana
System Name Ghetto Rigs z490|x99|Acer 17 Nitro 7840hs/ 5600c40-2x16/ 4060/ 1tb acer stock m.2/ 4tb sn850x
Processor 10900k w/Optimus Foundation | 5930k w/Black Noctua D15
Motherboard z490 Maximus XII Apex | x99 Sabertooth
Cooling oCool D5 res-combo/280 GTX/ Optimus Foundation/ gpu water block | Blk D15
Memory Trident-Z Royal 4000c16 2x16gb | Trident-Z 3200c14 4x8gb
Video Card(s) Titan Xp-water | evga 980ti gaming-w/ air
Storage 970evo+500gb & sn850x 4tb | 860 pro 256gb | Acer m.2 1tb/ sn850x 4tb| Many2.5" sata's ssd 3.5hdd's
Display(s) 1-AOC G2460PG 24"G-Sync 144Hz/ 2nd 1-ASUS VG248QE 24"/ 3rd LG 43" series
Case D450 | Cherry Entertainment center on Test bench
Audio Device(s) Built in Realtek x2 with 2-Insignia 2.0 sound bars & 1-LG sound bar
Power Supply EVGA 1000P2 with APC AX1500 | 850P2 with CyberPower-GX1325U
Mouse Redragon 901 Perdition x3
Keyboard G710+x3
Software Win-7 pro x3 and win-10 & 11pro x3
Benchmark Scores Are in the benchmark section
Hi,
No errors
Just redid it and this is new it ask if I wanted to make a copy no/yes/all ?
I did all and enter ?

Yes update checks for updates service stays at either disabled or manual.
 
Joined
Feb 20, 2020
Messages
9,340 (6.05/day)
Location
Louisiana
System Name Ghetto Rigs z490|x99|Acer 17 Nitro 7840hs/ 5600c40-2x16/ 4060/ 1tb acer stock m.2/ 4tb sn850x
Processor 10900k w/Optimus Foundation | 5930k w/Black Noctua D15
Motherboard z490 Maximus XII Apex | x99 Sabertooth
Cooling oCool D5 res-combo/280 GTX/ Optimus Foundation/ gpu water block | Blk D15
Memory Trident-Z Royal 4000c16 2x16gb | Trident-Z 3200c14 4x8gb
Video Card(s) Titan Xp-water | evga 980ti gaming-w/ air
Storage 970evo+500gb & sn850x 4tb | 860 pro 256gb | Acer m.2 1tb/ sn850x 4tb| Many2.5" sata's ssd 3.5hdd's
Display(s) 1-AOC G2460PG 24"G-Sync 144Hz/ 2nd 1-ASUS VG248QE 24"/ 3rd LG 43" series
Case D450 | Cherry Entertainment center on Test bench
Audio Device(s) Built in Realtek x2 with 2-Insignia 2.0 sound bars & 1-LG sound bar
Power Supply EVGA 1000P2 with APC AX1500 | 850P2 with CyberPower-GX1325U
Mouse Redragon 901 Perdition x3
Keyboard G710+x3
Software Win-7 pro x3 and win-10 & 11pro x3
Benchmark Scores Are in the benchmark section
Code:
C:\Users\masqww-z490\Desktop>rem Stop and delete Windows Update Medic Service (it re-enables Windows Update)

C:\Users\masqww-z490\Desktop>net stop WaasMedicSvc
The WaaSMedicSvc service is stopping.
The WaaSMedicSvc service was stopped successfully.


C:\Users\masqww-z490\Desktop>takeown /f %SYSTEMROOT%\System32\WaaSMedicSvc.dll

SUCCESS: The file (or folder): "C:\WINDOWS\System32\WaaSMedicSvc.dll" now owned by user "MASQWW-Z490\masqww-z490".

C:\Users\masqww-z490\Desktop>cacls %SYSTEMROOT%\System32\WaaSMedicSvc.dll /e /p "Administrator":f
processed file: C:\WINDOWS\System32\WaaSMedicSvc.dll

C:\Users\masqww-z490\Desktop>del %SYSTEMROOT%\System32\WaaSMedicSvc.dll
C:\WINDOWS\System32\WaaSMedicSvc.dll
Access is denied.

C:\Users\masqww-z490\Desktop>
C:\Users\masqww-z490\Desktop>rem Stop and disable Update Orchestrator Service

C:\Users\masqww-z490\Desktop>net stop UsoSvc
The Update Orchestrator Service service is stopping.
The Update Orchestrator Service service was stopped successfully.


C:\Users\masqww-z490\Desktop>takeown /f %SYSTEMROOT%\System32\usosvc.dll

SUCCESS: The file (or folder): "C:\WINDOWS\System32\usosvc.dll" now owned by user "MASQWW-Z490\masqww-z490".

C:\Users\masqww-z490\Desktop>cacls %SYSTEMROOT%\System32\usosvc.dll /e /p "Administrator":f
processed file: C:\WINDOWS\System32\usosvc.dll

C:\Users\masqww-z490\Desktop>ren %SYSTEMROOT%\System32\usosvc.dll usosvc.dll.disabled
Access is denied.

C:\Users\masqww-z490\Desktop>
C:\Users\masqww-z490\Desktop>rem Stop and disable Windows Update Service

C:\Users\masqww-z490\Desktop>net stop wuauserv
The Windows Update service is not started.

More help is available by typing NET HELPMSG 3521.


C:\Users\masqww-z490\Desktop>takeown /f %SYSTEMROOT%\System32\wuaueng.dll

SUCCESS: The file (or folder): "C:\WINDOWS\System32\wuaueng.dll" now owned by user "MASQWW-Z490\masqww-z490".

C:\Users\masqww-z490\Desktop>cacls %SYSTEMROOT%\System32\wuaueng.dll /e /p "Administrator":f
processed file: C:\WINDOWS\System32\wuaueng.dll

C:\Users\masqww-z490\Desktop>ren %SYSTEMROOT%\System32\wuaueng.dll wuaueng.dll.disabled
Access is denied.

C:\Users\masqww-z490\Desktop>takeown /f %SYSTEMROOT%\System32\wuauserv.dll
ERROR: The system cannot find the file specified.

C:\Users\masqww-z490\Desktop>cacls %SYSTEMROOT%\System32\wuauserv.dll /e /p "Administrator":f
The system cannot find the file specified.

C:\Users\masqww-z490\Desktop>ren %SYSTEMROOT%\System32\wuauserv.dll wuauserv.dll.disabled
The system cannot find the file specified.

C:\Users\masqww-z490\Desktop>
C:\Users\masqww-z490\Desktop>rem Remove scheduled tasks

C:\Users\masqww-z490\Desktop>PowerShell "(New-Object System.Net.WebClient).DownloadFile('https://www.poweradmin.com/paexec/paexec.exe','%TEMP%\paexec.exe');

C:\Users\masqww-z490\Desktop>for /f "delims=" %f in ('dir /b %WINDIR%\System32\Tasks\Microsoft\Windows\WaaSMedic') do %TEMP%\paexec -i -s schtasks /delete /f /tn "Microsoft\Windows\WaaSMedic\%f"

C:\Users\masqww-z490\Desktop>C:\Users\MASQWW~1\AppData\Local\Temp\paexec -i -s schtasks /delete /f /tn "Microsoft\Windows\WaaSMedic\WaaSMedic"

PAExec v1.29 - Execute Programs Remotely
Copyright (c) 2012-2021 Power Admin LLC
www.poweradmin.com/PAExec


Connecting to {local server}...
Failed to impersonate [] - continuing anyway. The handle is invalid. [Err=0x6, 6]
Starting PAExec service on {local server}...

schtasks returned 1

PAExec returning exit code 1


C:\Users\masqww-z490\Desktop>rmdir %WINDIR%\System32\Tasks\Microsoft\Windows\WaaSMedic
The directory name is invalid.

C:\Users\masqww-z490\Desktop>copy NUL %WINDIR%\System32\Tasks\Microsoft\Windows\WaaSMedic
Overwrite C:\WINDOWS\System32\Tasks\Microsoft\Windows\WaaSMedic? (Yes/No/All):

Forgot I could do this.

Looks like lots of errors :eek:

@W1zzard
Here is the terminal as admin with cmd :/
Finally found out how to do it there lol ctrl+shift highlight freaking ms :kookoo:
Code:
Microsoft Windows [Version 10.0.22631.2861]
(c) Microsoft Corporation. All rights reserved.

C:\Users\masqww-z490\Desktop>rem Stop and delete Windows Update Medic Service (it re-enables Windows Update)

C:\Users\masqww-z490\Desktop>net stop WaasMedicSvc
The WaaSMedicSvc service is stopping.
The WaaSMedicSvc service was stopped successfully.


C:\Users\masqww-z490\Desktop>takeown /f %SYSTEMROOT%\System32\WaaSMedicSvc.dll

SUCCESS: The file (or folder): "C:\WINDOWS\System32\WaaSMedicSvc.dll" now owned by user "MASQWW-Z490\masqww-z490".

C:\Users\masqww-z490\Desktop>cacls %SYSTEMROOT%\System32\WaaSMedicSvc.dll /e /p "Administrator":f
processed file: C:\WINDOWS\System32\WaaSMedicSvc.dll

C:\Users\masqww-z490\Desktop>del %SYSTEMROOT%\System32\WaaSMedicSvc.dll
C:\WINDOWS\System32\WaaSMedicSvc.dll
Access is denied.

C:\Users\masqww-z490\Desktop>
C:\Users\masqww-z490\Desktop>rem Stop and disable Update Orchestrator Service

C:\Users\masqww-z490\Desktop>net stop UsoSvc
The Update Orchestrator Service service is stopping.
The Update Orchestrator Service service was stopped successfully.


C:\Users\masqww-z490\Desktop>takeown /f %SYSTEMROOT%\System32\usosvc.dll

SUCCESS: The file (or folder): "C:\WINDOWS\System32\usosvc.dll" now owned by user "MASQWW-Z490\masqww-z490".

C:\Users\masqww-z490\Desktop>cacls %SYSTEMROOT%\System32\usosvc.dll /e /p "Administrator":f
processed file: C:\WINDOWS\System32\usosvc.dll

C:\Users\masqww-z490\Desktop>ren %SYSTEMROOT%\System32\usosvc.dll usosvc.dll.disabled
Access is denied.

C:\Users\masqww-z490\Desktop>
C:\Users\masqww-z490\Desktop>rem Stop and disable Windows Update Service

C:\Users\masqww-z490\Desktop>net stop wuauserv
The Windows Update service is not started.

More help is available by typing NET HELPMSG 3521.


C:\Users\masqww-z490\Desktop>takeown /f %SYSTEMROOT%\System32\wuaueng.dll

SUCCESS: The file (or folder): "C:\WINDOWS\System32\wuaueng.dll" now owned by user "MASQWW-Z490\masqww-z490".

C:\Users\masqww-z490\Desktop>cacls %SYSTEMROOT%\System32\wuaueng.dll /e /p "Administrator":f
processed file: C:\WINDOWS\System32\wuaueng.dll

C:\Users\masqww-z490\Desktop>ren %SYSTEMROOT%\System32\wuaueng.dll wuaueng.dll.disabled
Access is denied.

C:\Users\masqww-z490\Desktop>takeown /f %SYSTEMROOT%\System32\wuauserv.dll
ERROR: The system cannot find the file specified.

C:\Users\masqww-z490\Desktop>cacls %SYSTEMROOT%\System32\wuauserv.dll /e /p "Administrator":f
The system cannot find the file specified.

C:\Users\masqww-z490\Desktop>ren %SYSTEMROOT%\System32\wuauserv.dll wuauserv.dll.disabled
The system cannot find the file specified.

C:\Users\masqww-z490\Desktop>
C:\Users\masqww-z490\Desktop>rem Remove scheduled tasks

C:\Users\masqww-z490\Desktop>PowerShell "(New-Object System.Net.WebClient).DownloadFile('https://www.poweradmin.com/paexec/paexec.exe','%TEMP%\paexec.exe');

C:\Users\masqww-z490\Desktop>for /f "delims=" %f in ('dir /b %WINDIR%\System32\Tasks\Microsoft\Windows\WaaSMedic') do %TEMP%\paexec -i -s schtasks /delete /f /tn "Microsoft\Windows\WaaSMedic\%f"

C:\Users\masqww-z490\Desktop>C:\Users\MASQWW~1\AppData\Local\Temp\paexec -i -s schtasks /delete /f /tn "Microsoft\Windows\WaaSMedic\WaaSMedic"

PAExec v1.29 - Execute Programs Remotely
Copyright (c) 2012-2021 Power Admin LLC
www.poweradmin.com/PAExec


Connecting to {local server}...
Failed to impersonate [] - continuing anyway. The handle is invalid. [Err=0x6, 6]
Starting PAExec service on {local server}...

schtasks returned 1

PAExec returning exit code 1


C:\Users\masqww-z490\Desktop>rmdir %WINDIR%\System32\Tasks\Microsoft\Windows\WaaSMedic
The directory name is invalid.

C:\Users\masqww-z490\Desktop>copy NUL %WINDIR%\System32\Tasks\Microsoft\Windows\WaaSMedic
Overwrite C:\WINDOWS\System32\Tasks\Microsoft\Windows\WaaSMedic? (Yes/No/All): No
        0 file(s) copied.

C:\Users\masqww-z490\Desktop>

C:\Users\masqww-z490\Desktop>
 

W1zzard

Administrator
Staff member
Joined
May 14, 2004
Messages
27,078 (3.71/day)
Processor Ryzen 7 5700X
Memory 48 GB
Video Card(s) RTX 4080
Storage 2x HDD RAID 1, 3x M.2 NVMe
Display(s) 30" 2560x1600 + 19" 1280x1024
Software Windows 10 64-bit
Run it from an admin cmd shell
 
Joined
Feb 20, 2020
Messages
9,340 (6.05/day)
Location
Louisiana
System Name Ghetto Rigs z490|x99|Acer 17 Nitro 7840hs/ 5600c40-2x16/ 4060/ 1tb acer stock m.2/ 4tb sn850x
Processor 10900k w/Optimus Foundation | 5930k w/Black Noctua D15
Motherboard z490 Maximus XII Apex | x99 Sabertooth
Cooling oCool D5 res-combo/280 GTX/ Optimus Foundation/ gpu water block | Blk D15
Memory Trident-Z Royal 4000c16 2x16gb | Trident-Z 3200c14 4x8gb
Video Card(s) Titan Xp-water | evga 980ti gaming-w/ air
Storage 970evo+500gb & sn850x 4tb | 860 pro 256gb | Acer m.2 1tb/ sn850x 4tb| Many2.5" sata's ssd 3.5hdd's
Display(s) 1-AOC G2460PG 24"G-Sync 144Hz/ 2nd 1-ASUS VG248QE 24"/ 3rd LG 43" series
Case D450 | Cherry Entertainment center on Test bench
Audio Device(s) Built in Realtek x2 with 2-Insignia 2.0 sound bars & 1-LG sound bar
Power Supply EVGA 1000P2 with APC AX1500 | 850P2 with CyberPower-GX1325U
Mouse Redragon 901 Perdition x3
Keyboard G710+x3
Software Win-7 pro x3 and win-10 & 11pro x3
Benchmark Scores Are in the benchmark section
Both times were run as admin
cmd as admin
Terminal as admin cmd

Code:
Microsoft Windows [Version 10.0.22631.2861]
(c) Microsoft Corporation. All rights reserved.

C:\Users\masqww-z490>rem Stop and delete Windows Update Medic Service (it re-enables Windows Update)

C:\Users\masqww-z490>net stop WaasMedicSvc
The WaaSMedicSvc service is stopping.
The WaaSMedicSvc service was stopped successfully.


C:\Users\masqww-z490>takeown /f %SYSTEMROOT%\System32\WaaSMedicSvc.dll

SUCCESS: The file (or folder): "C:\WINDOWS\System32\WaaSMedicSvc.dll" now owned by user "MASQWW-Z490\masqww-z490".

C:\Users\masqww-z490>cacls %SYSTEMROOT%\System32\WaaSMedicSvc.dll /e /p "Administrator":f
processed file: C:\WINDOWS\System32\WaaSMedicSvc.dll

C:\Users\masqww-z490>del %SYSTEMROOT%\System32\WaaSMedicSvc.dll
C:\WINDOWS\System32\WaaSMedicSvc.dll
Access is denied.

C:\Users\masqww-z490>
C:\Users\masqww-z490>rem Stop and disable Update Orchestrator Service

C:\Users\masqww-z490>net stop UsoSvc
The Update Orchestrator Service service is stopping.
The Update Orchestrator Service service was stopped successfully.


C:\Users\masqww-z490>takeown /f %SYSTEMROOT%\System32\usosvc.dll

SUCCESS: The file (or folder): "C:\WINDOWS\System32\usosvc.dll" now owned by user "MASQWW-Z490\masqww-z490".

C:\Users\masqww-z490>cacls %SYSTEMROOT%\System32\usosvc.dll /e /p "Administrator":f
processed file: C:\WINDOWS\System32\usosvc.dll

C:\Users\masqww-z490>ren %SYSTEMROOT%\System32\usosvc.dll usosvc.dll.disabled
Access is denied.

C:\Users\masqww-z490>
C:\Users\masqww-z490>rem Stop and disable Windows Update Service

C:\Users\masqww-z490>net stop wuauserv
The Windows Update service is not started.

More help is available by typing NET HELPMSG 3521.


C:\Users\masqww-z490>takeown /f %SYSTEMROOT%\System32\wuaueng.dll

SUCCESS: The file (or folder): "C:\WINDOWS\System32\wuaueng.dll" now owned by user "MASQWW-Z490\masqww-z490".

C:\Users\masqww-z490>cacls %SYSTEMROOT%\System32\wuaueng.dll /e /p "Administrator":f
processed file: C:\WINDOWS\System32\wuaueng.dll

C:\Users\masqww-z490>ren %SYSTEMROOT%\System32\wuaueng.dll wuaueng.dll.disabled
Access is denied.

C:\Users\masqww-z490>takeown /f %SYSTEMROOT%\System32\wuauserv.dll
ERROR: The system cannot find the file specified.

C:\Users\masqww-z490>cacls %SYSTEMROOT%\System32\wuauserv.dll /e /p "Administrator":f
The system cannot find the file specified.

C:\Users\masqww-z490>ren %SYSTEMROOT%\System32\wuauserv.dll wuauserv.dll.disabled
The system cannot find the file specified.

C:\Users\masqww-z490>
C:\Users\masqww-z490>rem Remove scheduled tasks

C:\Users\masqww-z490>PowerShell "(New-Object System.Net.WebClient).DownloadFile('https://www.poweradmin.com/paexec/paexec.exe','%TEMP%\paexec.exe');

C:\Users\masqww-z490>for /f "delims=" %f in ('dir /b %WINDIR%\System32\Tasks\Microsoft\Windows\WaaSMedic') do %TEMP%\paexec -i -s schtasks /delete /f /tn "Microsoft\Windows\WaaSMedic\%f"

C:\Users\masqww-z490>C:\Users\MASQWW~1\AppData\Local\Temp\paexec -i -s schtasks /delete /f /tn "Microsoft\Windows\WaaSMedic\WaaSMedic"

PAExec v1.29 - Execute Programs Remotely
Copyright (c) 2012-2021 Power Admin LLC
www.poweradmin.com/PAExec


Connecting to {local server}...
Failed to impersonate [] - continuing anyway. The handle is invalid. [Err=0x6, 6]
Starting PAExec service on {local server}...

schtasks returned 1

PAExec returning exit code 1


C:\Users\masqww-z490>rmdir %WINDIR%\System32\Tasks\Microsoft\Windows\WaaSMedic
The directory name is invalid.

C:\Users\masqww-z490>copy NUL %WINDIR%\System32\Tasks\Microsoft\Windows\WaaSMedic
Overwrite C:\WINDOWS\System32\Tasks\Microsoft\Windows\WaaSMedic? (Yes/No/All): No
        0 file(s) copied.

C:\Users\masqww-z490>
1704401222577.png


1704401326363.png


You have a special way to run as admin ?
I've tried winkey+s and type cmd and open cmd as admin
I've used winX + a
Plus I have both added to context menu to run either cmd as admin or terminal as admin for either power shell or cmd
Which last is what I usually use.
1704402659029.png
 

W1zzard

Administrator
Staff member
Joined
May 14, 2004
Messages
27,078 (3.71/day)
Processor Ryzen 7 5700X
Memory 48 GB
Video Card(s) RTX 4080
Storage 2x HDD RAID 1, 3x M.2 NVMe
Display(s) 30" 2560x1600 + 19" 1280x1024
Software Windows 10 64-bit
My scripts enable the admin user and delete the tpu user that gets created during initial installation. You chose to skip that step and kept a masqww user

Looks like it doesn’t have the right perms when you’re not logged in as „administrator“ this should be fixable somehow because takeown will let you reset the permissions on the files

the way my method works is by removing the service dll files, so they cannot start anymore. Your output shows that this stage is failing
 
Joined
Feb 20, 2020
Messages
9,340 (6.05/day)
Location
Louisiana
System Name Ghetto Rigs z490|x99|Acer 17 Nitro 7840hs/ 5600c40-2x16/ 4060/ 1tb acer stock m.2/ 4tb sn850x
Processor 10900k w/Optimus Foundation | 5930k w/Black Noctua D15
Motherboard z490 Maximus XII Apex | x99 Sabertooth
Cooling oCool D5 res-combo/280 GTX/ Optimus Foundation/ gpu water block | Blk D15
Memory Trident-Z Royal 4000c16 2x16gb | Trident-Z 3200c14 4x8gb
Video Card(s) Titan Xp-water | evga 980ti gaming-w/ air
Storage 970evo+500gb & sn850x 4tb | 860 pro 256gb | Acer m.2 1tb/ sn850x 4tb| Many2.5" sata's ssd 3.5hdd's
Display(s) 1-AOC G2460PG 24"G-Sync 144Hz/ 2nd 1-ASUS VG248QE 24"/ 3rd LG 43" series
Case D450 | Cherry Entertainment center on Test bench
Audio Device(s) Built in Realtek x2 with 2-Insignia 2.0 sound bars & 1-LG sound bar
Power Supply EVGA 1000P2 with APC AX1500 | 850P2 with CyberPower-GX1325U
Mouse Redragon 901 Perdition x3
Keyboard G710+x3
Software Win-7 pro x3 and win-10 & 11pro x3
Benchmark Scores Are in the benchmark section
Okay you're referring to the hidden admin user account
Yeah that one I don't mess with

I used to add a password to it but not on this system.
 
Joined
Feb 20, 2020
Messages
9,340 (6.05/day)
Location
Louisiana
System Name Ghetto Rigs z490|x99|Acer 17 Nitro 7840hs/ 5600c40-2x16/ 4060/ 1tb acer stock m.2/ 4tb sn850x
Processor 10900k w/Optimus Foundation | 5930k w/Black Noctua D15
Motherboard z490 Maximus XII Apex | x99 Sabertooth
Cooling oCool D5 res-combo/280 GTX/ Optimus Foundation/ gpu water block | Blk D15
Memory Trident-Z Royal 4000c16 2x16gb | Trident-Z 3200c14 4x8gb
Video Card(s) Titan Xp-water | evga 980ti gaming-w/ air
Storage 970evo+500gb & sn850x 4tb | 860 pro 256gb | Acer m.2 1tb/ sn850x 4tb| Many2.5" sata's ssd 3.5hdd's
Display(s) 1-AOC G2460PG 24"G-Sync 144Hz/ 2nd 1-ASUS VG248QE 24"/ 3rd LG 43" series
Case D450 | Cherry Entertainment center on Test bench
Audio Device(s) Built in Realtek x2 with 2-Insignia 2.0 sound bars & 1-LG sound bar
Power Supply EVGA 1000P2 with APC AX1500 | 850P2 with CyberPower-GX1325U
Mouse Redragon 901 Perdition x3
Keyboard G710+x3
Software Win-7 pro x3 and win-10 & 11pro x3
Benchmark Scores Are in the benchmark section
Hi,
Yeah some stuff isn't applicable to my use case
TPU account/ time zone/ network changes stuff/ remote desktop without password this one is your use case and darn dangerous for mine and best disabled completely lol
My network is vastly different sadly so public is way more secure for a completely insecure network I'm on although I do have a password big brother is watching atm
If I want secure I use my cell network or proton vpn.

I can enable the hidden admin account/ add a password... and do stuff from there but removing the tpu acc will still fail.
Would that work out ?

Yeah brink has a tutorial add a password .... I'll end up doing this to complete the updates ordeal and what ever else pops up later hehe
Thanks for the time W1zzard :cool:
Enable or Disable Built-in Administrator Account in Windows 11 Tutorial | Windows 11 Forum
 
Joined
Mar 10, 2019
Messages
9 (0.00/day)
Dear @W1zzard Thank you so much for this. I have been using it over a year. Just recently formatted again for Timespy CPU score bug

I have a question

Does this cancer completely gone after your >>>rem Disable Windows Defender. For this to work you have to manually disable "Tamper protection"
So disabling defender via your method gets rid of this in attached photo.


Thanks in advance :) ( I have a seperate AV btw )
 

Attachments

  • b1c.png
    b1c.png
    116.5 KB · Views: 44

W1zzard

Administrator
Staff member
Joined
May 14, 2004
Messages
27,078 (3.71/day)
Processor Ryzen 7 5700X
Memory 48 GB
Video Card(s) RTX 4080
Storage 2x HDD RAID 1, 3x M.2 NVMe
Display(s) 30" 2560x1600 + 19" 1280x1024
Software Windows 10 64-bit
Not sure I fully understand your question, but if I remember correctly, the Defender service will still run. Will look into this more next time I do some installs
 
Joined
Mar 10, 2019
Messages
9 (0.00/day)
Not sure I fully understand your question, but if I remember correctly, the Defender service will still run. Will look into this more next time I do some installs
Apologies if I am not understood clearly.
The reg you wrote down ( photo attached ) will not stop the Antimalware Service Executable then.

Do you have any clear and easy REG ( or any ) method to completely disable / stop this service then ?
 

Attachments

  • a1.png
    a1.png
    225.1 KB · Views: 25
Joined
Nov 18, 2010
Messages
7,146 (1.45/day)
Location
Rīga, Latvia
System Name HELLSTAR
Processor AMD RYZEN 9 5950X
Motherboard ASUS Strix X570-E
Cooling 2x 360 + 280 rads. 3x Gentle Typhoons, 3x Phanteks T30, 2x TT T140 . EK-Quantum Momentum Monoblock.
Memory 4x8GB G.SKILL Trident Z RGB F4-4133C19D-16GTZR 14-16-12-30-44
Video Card(s) Sapphire Pulse RX 7900XTX + under waterblock through Kryosheet
Storage Optane 900P[W11] + WD BLACK SN850X 4TB + 750 EVO 500GB + 1TB 980PRO[FEDORA]
Display(s) Philips PHL BDM3270 + Acer XV242Y
Case Lian Li O11 Dynamic EVO
Audio Device(s) Sound Blaster ZxR
Power Supply Fractal Design Newton R3 1000W
Mouse Razer Basilisk
Keyboard Razer BlackWidow V3 - Yellow Switch
Software FEDORA 40
Apologies if I am not understood clearly.
The reg you wrote down ( photo attached ) will not stop the Antimalware Service Executable then.

Do you have any clear and easy REG ( or any ) method to completely disable / stop this service then ?

Imho after some latest patches the windows defender service doesn't die again. It depends what you call completely disable.

There are some tools around with public code in it like Defender Control. You will gather more info in forums.mydigitallife.net, not here.
 
Joined
Mar 10, 2019
Messages
9 (0.00/day)
Imho after some latest patches the windows defender service doesn't die again. It depends what you call completely disable.

There are some tools around with public code in it like Defender Control. You will gather more info in forums.mydigitallife.net, not here.
IKR.

That doesnt anything mean to me tho. I trust W1zzard and I asked him if there any he can provide.


It isnt a big deal but I would like to have it stopped temporarily when I am benching for 3D Mark
 
Joined
Jul 5, 2013
Messages
25,595 (6.45/day)
Do you have any clear and easy REG ( or any ) method to completely disable / stop this service then ?
The only way to stop it entirely is to change the folder names of all the Windows Defender folders by booting the PC with a WinPE boot drive with the "System" user enabled. Of course you'll then have the Security service complaining about Defender not running...

It depends what you call completely disable.
My definition is: Completely unable to execute. On my personal systems this is done by deleting the Windows Defender binaries from the system and replacing with something else.
 
Last edited:
Joined
Aug 15, 2016
Messages
486 (0.17/day)
Processor Intel i7 4770k
Motherboard ASUS Sabertooth Z87
Cooling BeQuiet! Shadow Rock 3
Memory Patriot Viper 3 RedD 16 GB @ 1866 MHz
Video Card(s) XFX RX 480 GTR 8GB
Storage 1x SSD Samsung EVO 250 GB 1x HDD Seagate Barracuda 3 TB 1x HDD Seagate Barracuda 4 TB
Display(s) AOC Q27G2U QHD, Dell S2415H FHD
Case Cooler Master HAF XM
Audio Device(s) Magnat LZR 980, Razer BlackShark V2, Altec Lansing 251
Power Supply Corsair AX860
Mouse Razer DeathAdder V2
Keyboard Razer Huntsman Tournament Edition
Software Windows 10 Pro x64
I would recommend running the code from a .bat file, just copy the whole code in an empty .txt file and rename it to .bat
Easier way to copy, view and edit the current code, just don't forget to run the batch file as admin.
Maybe even include a batch file(s) in the OP instead of having the code displayed? A menu with multiple programs would be nice:
Code:
@echo off
:menu
cls
echo.
echo  (1) Do this
echo  (2) Do that
echo  (3) Do that other thing
set /p option=  Enter a number:
if %option%==1 goto operation1
if %option%==2 goto operation2
if %option%==3 (goto operation3) else (goto menu)

:operation1
echo  Operation 1 successfully completed, going back to menu.
pause
goto menu

:operation2
echo  Operation 2 successfully completed, going back to menu.
pause
goto menu

:operation3
echo  Operation 3 successfully completed, going back to menu.
pause
goto menu
 
Top