- Joined
- May 14, 2004
- Messages
- 27,475 (3.71/day)
Processor | Ryzen 7 5700X |
---|---|
Memory | 48 GB |
Video Card(s) | RTX 4080 |
Storage | 2x HDD RAID 1, 3x M.2 NVMe |
Display(s) | 30" 2560x1600 + 19" 1280x1024 |
Software | Windows 10 64-bit |
Updated for Windows 10 21H2 Update
- Install without Internet, so you can create an offline user
- name the user "TPU" (the user will be deleted at the end of the scripts and you're using "Administrator")
- Install VGA driver, from USB, still without network, so Windows Update won't install a graphics driver automatically. Protip: use NVCleanstall
- Run Windows Update, update everything
- No need to update Windows Store apps
- Disable Defender "Tamper protection" via Settings App
- Run the below in admin-rights cmd shell.
Run after installation
Download and install Firefox silently, make it default browser and adjust settings to remove telemetry and other junk
User-specific (run after logging in as Administrator)
Permanently disable Windows Update
Please note, once disabled, you can only restore MANUAL updates, the (default) automatic behavior is gone
Restore Windows Update (manual updates only)
- Install without Internet, so you can create an offline user
- name the user "TPU" (the user will be deleted at the end of the scripts and you're using "Administrator")
- Install VGA driver, from USB, still without network, so Windows Update won't install a graphics driver automatically. Protip: use NVCleanstall
- Run Windows Update, update everything
- No need to update Windows Store apps
- Disable Defender "Tamper protection" via Settings App
- Run the below in admin-rights cmd shell.
Run after installation
Code:
rem Turn off Windows Startup Recovery Screen
bcdedit /set {current} bootstatuspolicy ignoreallfailures
bcdedit /set {default} recoveryenabled no
rem Create new pagefile. (2nd line indented because wmic will eat a character when pasting)
wmic pagefileset delete
wmic pagefileset create name=C:\pagefile.sys
wmic pagefileset set InitialSize=16384,MaximumSize=16384
rem Enable Administrator account
net user Administrator /active:yes
rem Make sure time and date are correct
w32tm /resync /rediscover
rem Disable Error Reporting
reg add "HKLM\Software\Microsoft\Windows\Windows Error Reporting" /v Disabled /t REG_DWORD /d 1 /f
rem Disable automatic TCG/Opal disk locking on supported SSD drives with PSID
reg add HKLM\Software\Policies\Microsoft\Windows\EnhancedStorageDevices /v TCGSecurityActivationDisabled /t REG_DWORD /d 1 /f
rem Control Panel shows Large Icons
reg add HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v ForceClassicControlPanel /t REG_DWORD /d 1 /f
rem Disable UAC
reg add HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System /v ConsentPromptBehaviorAdmin /t REG_DWORD /d 0 /f
reg add HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System /v PromptOnSecureDesktop /t REG_DWORD /d 0 /f
rem Disable discovery of LAN devices like printers
reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\NcdAutoSetup\Private /f /v AutoSetup /t REG_DWORD /d 0
rem Delete all printers discovered so far
powershell "Get-WMIObject Win32_Printer | where{$_.Network -eq 'true'} | foreach{$_.delete()}"
rem Set Ethernet connection to private
powershell Set-NetConnectionProfile -InterfaceAlias Ethernet* -NetworkCategory private
rem Disable Warnings due to Firewall / Defender being disabled
reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings\Windows.SystemToast.SecurityAndMaintenance /v Enabled /t REG_DWORD /d 0 /f
reg add "HKLM\Software\Microsoft\Windows Defender Security Center\Notifications" /v DisableNotifications /t REG_DWORD /d 1 /f
rem Disable Windows Firewall for private network
netsh advfirewall set private state off
rem Disable Windows Defender. For this to work you have to manually disable "Tamper protection"
powershell "if ((Get-ItemProperty -Path 'HKLM:SOFTWARE\Microsoft\Windows Defender\Features').TamperProtection -eq 4) { exit 0; } ; Write-Output 'Windows Defender can not be disabled, Tamper Protection is still active' '' 'Disable Tamper Protection manually, then press OK' | msg /w *"
reg add "HKLM\Software\Policies\Microsoft\Windows Defender\Spynet" /v SpyNetReporting /t REG_DWORD /d 0 /f
reg add "HKLM\Software\Policies\Microsoft\Windows Defender\Spynet" /v SubmitSamplesConsent /t REG_DWORD /d 2 /f
reg add "HKLM\Software\Policies\Microsoft\Windows Defender" /v DisableAntiSpyware /t REG_DWORD /d 1 /f
reg add "HKLM\Software\Policies\Microsoft\Windows Defender\Real-Time Protection" /v DisableRealtimeMonitoring /t REG_DWORD /d 1 /f
reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer" /v SmartScreenEnabled /t REG_SZ /d "Off" /f
reg add "HKLM\Software\Policies\Microsoft\Windows Defender" /v DisableRoutinelyTakingAction /t REG_DWORD /d 1 /f
reg delete HKLM\Software\Microsoft\Windows\CurrentVersion\Run /v SecurityHealth /f
rem Block Windows PC Health Check installation
reg add HKLM\SOFTWARE\Microsoft\PCHC /f /v PreviousUninstall /t REG_DWORD /d 1
rem Uninstall Windows PC Health Check
wmic product where name='Windows PC Health Check' call uninstall
rem Disable update to Windows 11
reg add HKLM\SOFTWARE\Microsoft\WindowsUpdate\UX\Settings /f /v SvOfferDeclined /t REG_QWORD /d 1
reg add HKLM\SOFTWARE\Microsoft\WindowsUpdate\UX\Settings /f /v SvDismissedState /t REG_DWORD /d 1
reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate /f /v DisableOSUpgrade /t REG_DWORD /d 1
reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate /f /v ProductVersion /t REG_DWORD /d 10
rem Disable "Consumer Features" (aka downloading apps from the internet automatically)
reg add HKLM\Software\Policies\Microsoft\Windows\CloudContent /v DisableWindowsConsumerFeatures /t REG_DWORD /d 1 /f
rem Disable the "how to use Windows" contextual popups
reg add HKLM\Software\Policies\Microsoft\Windows\CloudContent /v DisableSoftLanding /t REG_DWORD /d 1 /f
rem Disable Lock Screen
reg add HKLM\Software\Policies\Microsoft\Windows\Personalization /v NoLockScreen /t REG_DWORD /d 1 /f
rem Remove Logon Wallpaper
reg add HKLM\Software\Policies\Microsoft\Windows\System /v DisableLogonBackgroundImage /t REG_DWORD /d 1 /f
rem Remove Meet Now icon
reg add HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v HideSCAMeetNow /t REG_DWORD /d 1 /f
rem Disable One Drive
reg add HKLM\Software\Policies\Microsoft\Windows\OneDrive /v DisableFileSyncNGSC /t REG_DWORD /d 1 /f
start /wait %SystemRoot%\SysWOW64\OneDriveSetup.exe /uninstall
rd "%PROGRAMDATA%\Microsoft OneDrive" /Q /S
reg delete "HKEY_USERS\S-1-5-19\Software\Microsoft\Windows\CurrentVersion\Run" /v OneDriveSetup /f
reg delete "HKEY_USERS\S-1-5-20\Software\Microsoft\Windows\CurrentVersion\Run" /v OneDriveSetup /f
reg load HKLM\DEFAULT c:\users\default\ntuser.dat
reg delete HKLM\DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run /v OneDriveSetup /f
reg unload HKLM\DEFAULT
rem Disable Hibernate
powercfg -h off
rem Turn off sleep mode
powercfg.exe -x -standby-timeout-ac 0
rem Set 4 hours screen blank timeout
powercfg.exe -x -monitor-timeout-ac 240
rem Disable System Restore and delete restore points
powershell disable-computerrestore c:
vssadmin delete shadows /all /quiet
rem Set Timezone
tzutil /s "W. Europe Standard Time"
rem Disable reboot on Bluescreen, and no dump
reg add HKLM\SYSTEM\CurrentControlSet\Control\CrashControl /v CrashDumpEnabled /t REG_DWORD /d 0 /f
reg add HKLM\SYSTEM\CurrentControlSet\Control\CrashControl /v LogEvent /t REG_DWORD /d 0 /f
reg add HKLM\SYSTEM\CurrentControlSet\Control\CrashControl /v SendAlert /t REG_DWORD /d 0 /f
reg add HKLM\SYSTEM\CurrentControlSet\Control\CrashControl /v AutoReboot /t REG_DWORD /d 0 /f
rem Don't allow Remote Assistance
reg add "HKLM\System\CurrentControlSet\Control\Remote Assistance" /v fAllowToGetHelp /t REG_DWORD /d 0 /f
rem Enable Remote Desktop
reg add "HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server" /v fDenyTSConnections /t REG_DWORD /d 0 /f
rem Allow Remote Desktop without password
reg add HKLM\SYSTEM\CurrentControlSet\Control\Lsa /v LimitBlankPasswordUse /t REG_DWORD /d 0 /f
rem Remove icons from This PC
reg add HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\PropertyBag /v ThisPCPolicy /t REG_SZ /d Hide /f
reg add HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\PropertyBag /v ThisPCPolicy /t REG_SZ /d Hide /f
reg add HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{f42ee2d3-909f-4907-8871-4c22fc0bf756}\PropertyBag /v ThisPCPolicy /t REG_SZ /d Hide /f
reg add HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{f42ee2d3-909f-4907-8871-4c22fc0bf756}\PropertyBag /v ThisPCPolicy /t REG_SZ /d Hide /f
reg add HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7d83ee9b-2244-4e70-b1f5-5393042af1e4}\PropertyBag /v ThisPCPolicy /t REG_SZ /d Hide /f
reg add HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{7d83ee9b-2244-4e70-b1f5-5393042af1e4}\PropertyBag /v ThisPCPolicy /t REG_SZ /d Hide /f
reg add HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{a0c69a99-21c8-4671-8703-7934162fcf1d}\PropertyBag /v ThisPCPolicy /t REG_SZ /d Hide /f
reg add HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{a0c69a99-21c8-4671-8703-7934162fcf1d}\PropertyBag /v ThisPCPolicy /t REG_SZ /d Hide /f
reg add HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0ddd015d-b06c-45d5-8c4c-f59713854639}\PropertyBag /v ThisPCPolicy /t REG_SZ /d Hide /f
reg add HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{0ddd015d-b06c-45d5-8c4c-f59713854639}\PropertyBag /v ThisPCPolicy /t REG_SZ /d Hide /f
reg add HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{35286a68-3c57-41a1-bbb1-0eae73d76c95}\PropertyBag /v ThisPCPolicy /t REG_SZ /d Hide /f
reg add HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{35286a68-3c57-41a1-bbb1-0eae73d76c95}\PropertyBag /v ThisPCPolicy /t REG_SZ /d Hide /f
rem Remove 3D Objects from Explorer
reg delete HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{0DB7E03F-FC29-4DC6-9020-FF41B59E513A} /f
reg delete HKLM\Software\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{0DB7E03F-FC29-4DC6-9020-FF41B59E513A} /f
rem Remove all Pinned Items from Start Menu (for new users only)
echo ^<LayoutModificationTemplate xmlns:defaultlayout="http://schemas.microsoft.com/Start/2014/FullDefaultLayout" xmlns:start="http://schemas.microsoft.com/Start/2014/StartLayout" Version="1" xmlns="http://schemas.microsoft.com/Start/2014/LayoutModification"^>^<LayoutOptions StartTileGroupCellWidth="6" /^>^<DefaultLayoutOverride^>^<StartLayoutCollection^>^<defaultlayout:StartLayout GroupCellWidth="6"^>^</defaultlayout:StartLayout^>^</StartLayoutCollection^>^</DefaultLayoutOverride^>^</LayoutModificationTemplate^> > C:\Users\Default\AppData\Local\Microsoft\Windows\Shell\LayoutModification.xml
rem Disable Edge Browser preload on startup. We'll never use it anyway, saves memory and startup time
reg add HKLM\Software\Policies\Microsoft\MicrosoftEdge\Main /v AllowPrelaunch /t REG_DWORD /d 0 /f
rem Disable Edge Browser (Chromium) first run experience
reg add HKLM\SOFTWARE\Policies\Microsoft\Edge /v HideFirstRunExperience /t REG_DWORD /d 1 /f
rem Do not start Edge on first-login after user created
reg load HKLM\DEFAULT c:\users\default\ntuser.dat
reg add HKLM\DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager /v SubscribedContent-310093Enabled /t REG_DWORD /d 0 /f
reg unload HKLM\DEFAULT
rem Disable Look for App in Store prompt when opening unknown file type
reg add HKLM\Software\Policies\Microsoft\Windows\Explorer /v NoUseStoreOpenWith /t REG_DWORD /d 1 /f
rem Disable Windows Program Compatibility Assistant
reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\AppCompat /v DisablePCA /t REG_DWORD /d 1 /f
rem Disable Inventory collecting data and sending the info to Microsoft
reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\AppCompat /v DisableInventory /t REG_DWORD /d 1 /f
rem Disable Application Telemetry
reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\AppCompat /v AITEnable /t REG_DWORD /d 0 /f
rem Disable Shared Experiences
reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\System /v EnableCdp /t REG_DWORD /d 0 /f
rem Disable News and interests panel in taskbar
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Feeds" /v EnableFeeds /t REG_DWORD /d 0 /f
rem Disable Shutdown Menu options "Lock" and "Sleep"
reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\FlyoutMenuSettings" /v ShowSleepOption /t REG_DWORD /d 0 /f
reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\FlyoutMenuSettings" /v ShowLockOption /t REG_DWORD /d 0 /f
rem Make sure junk apps like Candy Crush don't get installed when we login first time with our Administrator account
reg load HKLM\DEFAULT c:\users\default\ntuser.dat
reg add HKLM\DEFAULT\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager /v PreInstalledAppsEnabled /t REG_DWORD /d 0 /f
reg add HKLM\DEFAULT\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager /v OemPreInstalledAppsEnabled /t REG_DWORD /d 0 /f
reg unload HKLM\DEFAULT
rem Remove useless Windows components
dism /online /norestart /disable-feature /featurename:Printing-PrintToPDFServices-Features
dism /online /norestart /disable-feature /featurename:Printing-XPSServices-Features
dism /online /norestart /disable-feature /featurename:WorkFolders-Client
dism /online /norestart /disable-feature /featurename:Printing-Foundation-Features
dism /online /norestart /disable-feature /featurename:Printing-Foundation-InternetPrinting-Client
dism /online /norestart /disable-feature /featurename:MSRDC-Infrastructure
dism /online /norestart /disable-feature /featurename:SmbDirect
dism /online /norestart /disable-feature /featurename:MediaPlayback
dism /online /norestart /disable-feature /featurename:WCF-TCP-PortSharing45
dism /online /norestart /disable-feature /featurename:WCF-Services45
dism /online /norestart /disable-feature /featurename:WindowsMediaPlayer
rem Install .NET 3.5 Framework, some older apps and games need this, and you can't install it on demand once Windows Update is disabled
dism /online /norestart /enable-feature /featurename:NetFx3 /all
rem Remove useless optional features
dism /online /norestart /Remove-Capability /CapabilityName:App.Support.QuickAssist~~~~0.0.1.0
dism /online /norestart /Remove-Capability /CapabilityName:MathRecognizer~~~~0.0.1.0
dism /online /norestart /Remove-Capability /CapabilityName:OpenSSH.Client~~~~0.0.1.0
dism /online /norestart /Remove-Capability /CapabilityName:Media.WindowsMediaPlayer~~~~0.0.12.0
dism /online /norestart /Remove-Capability /CapabilityName:Browser.InternetExplorer~~~~0.0.11.0
dism /online /norestart /Remove-Capability /CapabilityName:Language.Handwriting~~~en-US~0.0.1.0
dism /online /norestart /Remove-Capability /CapabilityName:Print.Management.Console~~~~0.0.1.0
dism /online /norestart /Remove-Capability /CapabilityName:Print.Fax.Scan~~~~0.0.1.0
dism /online /norestart /Remove-Capability /CapabilityName:Hello.Face.18967~~~~0.0.1.0
dism /online /norestart /Remove-Capability /CapabilityName:Microsoft.Windows.WordPad~~~~0.0.1.0
dism /online /norestart /Remove-Capability /CapabilityName:App.StepsRecorder~~~~0.0.1.0
dism /online /norestart /Remove-Capability /CapabilityName:DirectX.Configuration.Database~~~~0.0.1.0
dism /online /norestart /Remove-Capability /CapabilityName:Language.Speech~~~en-US~0.0.1.0
rem Do not remove OCR or Windows will show "Something happened, and we couldn't install a feature" a few hours after cleanup
rem dism /online /norestart /Remove-Capability /CapabilityName:Language.OCR~~~en-US~0.0.1.0
rem Remove all apps except for Store
powershell "Get-AppXPackage | Where Name -NotLike "*WindowsStore*" | Remove-AppXPackage"
powershell "sleep 5"
powershell "Get-AppXProvisionedPackage -online | Where DisplayName -NotLike "*WindowsStore*" | Remove-AppxProvisionedPackage –online"
rem Set Computer name
powershell "Rename-Computer -NewName VGATEST"
rem Finished
Download and install Firefox silently, make it default browser and adjust settings to remove telemetry and other junk
Code:
PowerShell "(New-Object System.Net.WebClient).DownloadFile('https://download.mozilla.org/?product=firefox-latest&os=win64&lang=en-US','%TEMP%\ff.exe'); Start-Process %TEMP%\ff.exe /s -NoNewWindow -Wait; Remove-Item %TEMP%\ff.exe"
echo pref("general.config.filename", "firefox.cfg"); > "C:\Program Files\Mozilla Firefox\defaults\pref\autoconfig.js"
echo pref("general.config.obscure_value", 0); >> "C:\Program Files\Mozilla Firefox\defaults\pref\autoconfig.js"
echo lockPref("browser.startup.homepage_override.mstone", "ignore"); > "C:\Program Files\Mozilla Firefox\firefox.cfg"
echo lockPref("browser.messaging-system.whatsNewPanel.enabled", false); >> "C:\Program Files\Mozilla Firefox\firefox.cfg"
echo lockPref("datareporting.healthreport.uploadEnabled", false); >> "C:\Program Files\Mozilla Firefox\firefox.cfg"
echo lockPref("app.shield.optoutstudies.enabled", false); >> "C:\Program Files\Mozilla Firefox\firefox.cfg"
echo lockPref("extensions.pocket.enabled", false); >> "C:\Program Files\Mozilla Firefox\firefox.cfg"
echo lockPref("browser.toolbars.bookmarks.visibility", "never"); >> "C:\Program Files\Mozilla Firefox\firefox.cfg"
rem Looks complicated, but this seems to be the only thing that works, let me know if you know an alternative
Powershell "Start-Process -FilePath 'C:\Program Files\Mozilla Firefox\firefox.exe' -ArgumentList '-setDefaultBrowser' ; Start-Sleep -s 3 ; Start-Process -FilePath 'C:\Program Files\Mozilla Firefox\firefox.exe' -ArgumentList '-setDefaultBrowser' ; Start-Sleep -s 3 ; taskkill /im firefox.exe ; taskkill /im firefox.exe ; taskkill /f /im systemsettings.exe"
User-specific (run after logging in as Administrator)
Code:
rem Install AnyDesk
rem PowerShell "(New-Object System.Net.WebClient).DownloadFile('https://download.anydesk.com/AnyDesk-CM.exe', '%TEMP%\ad.exe')" && start /wait %TEMP%\ad.exe --remove-first --install "%ProgramFiles%\AnyDesk" --start-with-win --update-manually --create-shortcuts --create-desktop-icon && del %TEMP%\ad.exe
rem Delete TPU user and user profile
net user TPU /delete
powershell "Get-WmiObject Win32_UserProfile | where {$_.localpath -like '*TPU'} | Remove-WmiObject"
rem Disable Windows Game DVR and Game Bar
reg add HKCU\Software\Microsoft\Windows\CurrentVersion\GameDVR /v AppCaptureEnabled /t REG_DWORD /d 0 /f
reg add HKCU\Software\Microsoft\Windows\CurrentVersion\GameDVR /v GameDVR_Enabled /t REG_DWORD /d 0 /f
rem Disable Game Mode
reg add HKCU\Software\Microsoft\GameBar /v AutoGameModeEnabled /t REG_DWORD /d 0 /f
reg add HKCU\System\GameConfigStore /v GameDVR_FSEBehavior /t REG_DWORD /d 2 /f
rem Disable "Fix apps that are blurry" popup
reg add "HKCU\Control Panel\Desktop" /v IgnorePerProcessSystemDPIToast /t REG_DWORD /d 1 /f
rem Hide Search Box from Task Bar
reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Search /v SearchboxTaskbarMode /t REG_DWORD /d 0 /f
rem Disable Web Search Results
reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Search /v BingSearchEnabled /t REG_DWORD /d 0 /f
reg add HKCU\Software\Policies\Microsoft\Windows\Explorer /v DisableSearchBoxSuggestions /t REG_DWORD /d 1 /f
rem Block Search from using Location
reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Search /v AllowSearchToUseLocation /t REG_DWORD /d 0 /f
rem Disable Cortana
reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Search /v CortanaConsent /t REG_DWORD /d 0 /f
rem Hide People button from Task Bar
reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\People /v PeopleBand /t REG_DWORD /d 0 /f
rem Hide Cortana button
reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced /v ShowCortanaButton /t REG_DWORD /d 0 /f
rem Hide Task View button
reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced /v ShowTaskViewButton /t REG_DWORD /d 0 /f
rem Disable "Let's finish setting up your device" nag screen
reg add HKCU\Software\Microsoft\Windows\CurrentVersion\UserProfileEngagement /v ScoobeSystemSettingEnabled /t REG_DWORD /d 0 /f
rem Windows Explorer Start on This PC instead of Quick Access
reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced /v LaunchTo /t REG_DWORD /d 1 /f
rem Disable frequent/recent items in Explorer Quick Access
reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer /v ShowFrequent /t REG_DWORD /d 0 /f
reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer /v ShowRecent /t REG_DWORD /d 0 /f
rem Disable Windows Feedback
reg add HKCU\SOFTWARE\Microsoft\Siuf\Rules /v NumberOfSIUFInPeriod /t REG_DWORD /d 0 /f
rem Show My Computer on Desktop
reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel /v "{20D04FE0-3AEA-1069-A2D8-08002B30309D}" /t REG_DWORD /d 0 /f
rem Disable Recycle Bin
reg add HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v NoRecycleFiles /t REG_DWORD /d 1 /f
reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer /v ConfirmFileDelete /t REG_DWORD /d 1 /f
rem Don't show Recycle Bin on Desktop
reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\ClassicStartMenu /v "{645FF040-5081-101B-9F08-00AA002F954E}" /t REG_DWORD /d 1 /f
reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel /v "{645FF040-5081-101B-9F08-00AA002F954E}" /t REG_DWORD /d 1 /f
rem Set 24 hour time format
reg add "HKCU\Control Panel\International" /v iFirstDayOfWeek /t REG_SZ /d "0" /f
reg add "HKCU\Control Panel\International" /v sShortDate /t REG_SZ /d "yyyy-MM-dd" /f
reg add "HKCU\Control Panel\International" /v sShortTime /t REG_SZ /d "HH:mm" /f
reg add "HKCU\Control Panel\International" /v sTimeFormat /t REG_SZ /d "HH:mm:ss" /f
rem Turn off Sticky Key when Shift is pressed 5 times
reg add "HKCU\Control Panel\Accessibility\StickyKeys" /v Flags /t REG_SZ /d "506" /f
rem Show file extensions in Explorer
reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced /v HideFileExt /t REG_DWORD /d 0 /f
rem Show Hidden Files in Explorer
reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced /v Hidden /t REG_DWORD /d 1 /f
reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced /v ShowSuperHidden /t REG_DWORD /d 1 /f
rem Setup taskbar
reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced /v TaskbarGlomming /t REG_DWORD /d 0 /f
reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced /v TaskbarGlomLevel /t REG_DWORD /d 2 /f
reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced /v TaskbarSmallIcons /t REG_DWORD /d 1 /f
reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced /v ShowTaskViewButton /t REG_DWORD /d 0 /f
rem Disable Windows 10 App Suggestions in Start
reg add HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager /v SubscribedContent-338388Enabled /t REG_DWORD /d 0 /f
rem Always show more details in file copy dialog
reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\OperationStatusManager /v EnthusiastMode /t REG_DWORD /d 1 /f
rem Set "Do this for all current items" checkbox by default
reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\OperationStatusManager /v ConfirmationCheckBoxDoForAll /t REG_DWORD /d 1 /f
rem Expand left side tree of current folder on Explorer open
reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced /v NavPaneExpandToCurrentFolder /t REG_DWORD /d 1 /f
rem Disable "Let Windows manage my default printer"
reg add HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows /f /v LegacyDefaultPrinterMode /t REG_DWORD /d 1
rem Turn off Wallpaper
reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Wallpapers /v BackgroundType /t REG_DWORD /d 1 /f
reg add "HKCU\Control Panel\Desktop" /v Wallpaper /t REG_SZ /d "" /f
reg add "HKCU\Control Panel\Desktop" /v LastUpdated /t REG_DWORD /d 0xffffffff /f
reg add "HKCU\Control Panel\Colors" /v Background /t REG_SZ /d "45 125 154" /f
rem Remove 10 second startup delay for application restore
reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Serialize /v StartupDelayInMSec /t REG_DWORD /d 0 /f
rem Unpin everything from Taskbar
powershell "(New-Object -Com Shell.Application).NameSpace('shell:::{4234d49b-0245-4df3-b780-3893943456e1}').Items()| foreach { ($_).Verbs() | ?{$_.Name.Replace('&', '') -match 'Unpin from taskbar'} | %{$_.DoIt()} }"
rem Remove secondary en-US keyboard that gets added when keyboard is set to DE with US region
reg delete "HKCU\Control Panel\International\User Profile\en-US" /v "0409:00000409" /f
reg delete "HKCU\Control Panel\International\User Profile System Backup\en-US" /v "0409:00000409" /f
reg delete "HKCU\Keyboard Layout\Preload" /v "2" /f
reg delete "HKCU\Keyboard Layout\Substitutes" /v "d0010409" /f
rem Remove desktop.ini files from Desktop
del /a C:\Users\Public\Desktop\desktop.ini
del /a C:\Users\Administrator\Desktop\desktop.ini
rem Remove Edge from Desktop
del "C:\Users\Administrator\Desktop\Microsoft Edge.lnk"
Permanently disable Windows Update
Please note, once disabled, you can only restore MANUAL updates, the (default) automatic behavior is gone
Code:
rem Stop and delete Windows Update Medic Service (it re-enables Windows Update)
net stop WaasMedicSvc
takeown /f %SYSTEMROOT%\System32\WaaSMedicSvc.dll
cacls %SYSTEMROOT%\System32\WaaSMedicSvc.dll /e /p "Administrator":f
del %SYSTEMROOT%\System32\WaaSMedicSvc.dll
rem Stop and disable Update Orchestrator Service
net stop UsoSvc
takeown /f %SYSTEMROOT%\System32\usosvc.dll
cacls %SYSTEMROOT%\System32\usosvc.dll /e /p "Administrator":f
ren %SYSTEMROOT%\System32\usosvc.dll usosvc.dll.disabled
rem Stop and disable Windows Update Service
net stop wuauserv
takeown /f %SYSTEMROOT%\System32\wuaueng.dll
cacls %SYSTEMROOT%\System32\wuaueng.dll /e /p "Administrator":f
ren %SYSTEMROOT%\System32\wuaueng.dll wuaueng.dll.disabled
rem Remove scheduled tasks
PowerShell "(New-Object System.Net.WebClient).DownloadFile('https://www.poweradmin.com/paexec/paexec.exe','%TEMP%\paexec.exe');
for /f "delims=" %f in ('dir /b %WINDIR%\System32\Tasks\Microsoft\Windows\WaaSMedic') do %TEMP%\paexec -i -s schtasks /delete /f /tn "Microsoft\Windows\WaaSMedic\%f"
rmdir %WINDIR%\System32\Tasks\Microsoft\Windows\WaaSMedic
copy NUL %WINDIR%\System32\Tasks\Microsoft\Windows\WaaSMedic
for /f "delims=" %f in ('dir /b %WINDIR%\System32\Tasks\Microsoft\Windows\UpdateOrchestrator') do %TEMP%\paexec -i -s schtasks /delete /f /tn "Microsoft\Windows\UpdateOrchestrator\%f"
rmdir %WINDIR%\System32\Tasks\Microsoft\Windows\UpdateOrchestrator
copy NUL %WINDIR%\System32\Tasks\Microsoft\Windows\UpdateOrchestrator
for /f "delims=" %f in ('dir /b %WINDIR%\System32\Tasks\Microsoft\Windows\WindowsUpdate') do %TEMP%\paexec -i -s schtasks /delete /f /tn "Microsoft\Windows\WindowsUpdate\%f"
rmdir %WINDIR%\System32\Tasks\Microsoft\Windows\WindowsUpdate
copy NUL %WINDIR%\System32\Tasks\Microsoft\Windows\WindowsUpdate
del %TEMP%\paexec.exe
Restore Windows Update (manual updates only)
Code:
net stop wuauserv
ren %SYSTEMROOT%\System32\wuaueng.dll.disabled wuaueng.dll
net stop UsoSvc
ren %SYSTEMROOT%\System32\usosvc.dll.disabled usosvc.dll
Last edited: