diff --git a/CHANGELOG.md b/CHANGELOG.md index cec38ee..c92c04a 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,4 +1,8 @@ # Updates + +## 1/11/2024 +- Released UnattendedWinstall v2.0.0 + ## 3/8/2024 - Added Core version which disables Windows Defender. Specifically, it disables the following services "Sense, WdBoot, WdFilter, WdNisDrv, WdNisSvc, WinDefend" which in turns prevents the MsMpEng.exe process from running. Credit to Christoph Schneegans for explaining. - Combined 64bit, 32bit and ARM64 support into a single `autounattend.xml` file for each version of the file. diff --git a/Core/autounattend.xml b/Core/autounattend.xml deleted file mode 100644 index 1ddd1e8..0000000 --- a/Core/autounattend.xml +++ /dev/null @@ -1,1915 +0,0 @@ - - - - - - - - - - - - 00000-00000-00000-00000-00000 - Always - - true - - - - - 1 - reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassTPMCheck /t REG_DWORD /d 1 /f - - - 2 - reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassSecureBootCheck /t REG_DWORD /d 1 /f - - - 3 - reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassStorageCheck /t REG_DWORD /d 1 /f - - - 4 - reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassCPUCheck /t REG_DWORD /d 1 /f - - - 5 - reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassRAMCheck /t REG_DWORD /d 1 /f - - - 6 - reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassDiskCheck /t REG_DWORD /d 1 /f - - - - 7 - cmd.exe /c del /f /q X:\Sources\ei.cfg - - - 8 - cmd.exe /c echo [Channel] > X:\Sources\ei.cfg - - - 9 - cmd.exe /c echo _Default >> X:\Sources\ei.cfg - - - 10 - cmd.exe /c echo [VL] >> X:\Sources\ei.cfg - - - 11 - cmd.exe /c echo 0 >> X:\Sources\ei.cfg - - - - 12 - cmd.exe /c ">>"X:\disable-defender.cmd" echo @ECHO OFF" - - - 13 - cmd.exe /c ">>"X:\disable-defender.cmd" echo SET file=C:\$Windows.~BT\NewOS\Windows\System32\config\SYSTEM" - - - 14 - cmd.exe /c ">>"X:\disable-defender.cmd" echo FOR /L ^%^%i IN (0) DO (" - - - 15 - cmd.exe /c ">>"X:\disable-defender.cmd" echo CALL :sleep" - - - 16 - cmd.exe /c ">>"X:\disable-defender.cmd" echo IF EXIST ^%file^% (" - - - 17 - cmd.exe /c ">>"X:\disable-defender.cmd" echo CALL :load" - - - 18 - cmd.exe /c ">>"X:\disable-defender.cmd" echo FOR ^%^%s IN (Sense WdBoot WdFilter WdNisDrv WdNisSvc WinDefend) DO reg.exe ADD HKLM\mount\ControlSet001\Services\^%^%s /v Start /t REG_DWORD /d 4 /f" - - - 19 - cmd.exe /c ">>"X:\disable-defender.cmd" echo reg.exe UNLOAD HKLM\mount" - - - 20 - cmd.exe /c ">>"X:\disable-defender.cmd" echo EXIT ) )" - - - 21 - cmd.exe /c ">>"X:\disable-defender.cmd" echo GOTO :eof" - - - 22 - cmd.exe /c ">>"X:\disable-defender.cmd" echo :load" - - - 23 - cmd.exe /c ">>"X:\disable-defender.cmd" echo reg.exe LOAD HKLM\mount ^%file^%" - - - 24 - cmd.exe /c ">>"X:\disable-defender.cmd" echo IF ^%errorlevel^% GTR 0 GOTO load" - - - 25 - cmd.exe /c ">>"X:\disable-defender.cmd" echo GOTO :eof" - - - 26 - cmd.exe /c ">>"X:\disable-defender.cmd" echo :sleep" - - - 27 - cmd.exe /c ">>"X:\disable-defender.cmd" echo ping.exe -n 1 127.0.0.1 ^> NUL" - - - 28 - cmd.exe /c ">>"X:\disable-defender.cmd" echo GOTO :eof" - - - 29 - cmd.exe /c "start /MIN X:\disable-defender.cmd" - - - - - - - 00000-00000-00000-00000-00000 - Always - - true - - - - - 1 - reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassTPMCheck /t REG_DWORD /d 1 /f - - - 2 - reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassSecureBootCheck /t REG_DWORD /d 1 /f - - - 3 - reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassStorageCheck /t REG_DWORD /d 1 /f - - - 4 - reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassCPUCheck /t REG_DWORD /d 1 /f - - - 5 - reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassRAMCheck /t REG_DWORD /d 1 /f - - - 6 - reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassDiskCheck /t REG_DWORD /d 1 /f - - - - 7 - cmd.exe /c del /f /q X:\Sources\ei.cfg - - - 8 - cmd.exe /c echo [Channel] > X:\Sources\ei.cfg - - - 9 - cmd.exe /c echo Retail >> X:\Sources\ei.cfg - - - 10 - cmd.exe /c echo [VL] >> X:\Sources\ei.cfg - - - 11 - cmd.exe /c echo 0 >> X:\Sources\ei.cfg - - - - 12 - cmd.exe /c ">>"X:\disable-defender.cmd" echo @ECHO OFF" - - - 13 - cmd.exe /c ">>"X:\disable-defender.cmd" echo SET file=C:\$Windows.~BT\NewOS\Windows\System32\config\SYSTEM" - - - 14 - cmd.exe /c ">>"X:\disable-defender.cmd" echo FOR /L ^%^%i IN (0) DO (" - - - 15 - cmd.exe /c ">>"X:\disable-defender.cmd" echo CALL :sleep" - - - 16 - cmd.exe /c ">>"X:\disable-defender.cmd" echo IF EXIST ^%file^% (" - - - 17 - cmd.exe /c ">>"X:\disable-defender.cmd" echo CALL :load" - - - 18 - cmd.exe /c ">>"X:\disable-defender.cmd" echo FOR ^%^%s IN (Sense WdBoot WdFilter WdNisDrv WdNisSvc WinDefend) DO reg.exe ADD HKLM\mount\ControlSet001\Services\^%^%s /v Start /t REG_DWORD /d 4 /f" - - - 19 - cmd.exe /c ">>"X:\disable-defender.cmd" echo reg.exe UNLOAD HKLM\mount" - - - 20 - cmd.exe /c ">>"X:\disable-defender.cmd" echo EXIT ) )" - - - 21 - cmd.exe /c ">>"X:\disable-defender.cmd" echo GOTO :eof" - - - 22 - cmd.exe /c ">>"X:\disable-defender.cmd" echo :load" - - - 23 - cmd.exe /c ">>"X:\disable-defender.cmd" echo reg.exe LOAD HKLM\mount ^%file^%" - - - 24 - cmd.exe /c ">>"X:\disable-defender.cmd" echo IF ^%errorlevel^% GTR 0 GOTO load" - - - 25 - cmd.exe /c ">>"X:\disable-defender.cmd" echo GOTO :eof" - - - 26 - cmd.exe /c ">>"X:\disable-defender.cmd" echo :sleep" - - - 27 - cmd.exe /c ">>"X:\disable-defender.cmd" echo ping.exe -n 1 127.0.0.1 ^> NUL" - - - 28 - cmd.exe /c ">>"X:\disable-defender.cmd" echo GOTO :eof" - - - 29 - cmd.exe /c "start /MIN X:\disable-defender.cmd" - - - - - - - 00000-00000-00000-00000-00000 - Always - - true - - - - - 1 - reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassTPMCheck /t REG_DWORD /d 1 /f - - - 2 - reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassSecureBootCheck /t REG_DWORD /d 1 /f - - - 3 - reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassStorageCheck /t REG_DWORD /d 1 /f - - - 4 - reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassCPUCheck /t REG_DWORD /d 1 /f - - - 5 - reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassRAMCheck /t REG_DWORD /d 1 /f - - - 6 - reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassDiskCheck /t REG_DWORD /d 1 /f - - - - 7 - cmd.exe /c del /f /q X:\Sources\ei.cfg - - - 8 - cmd.exe /c echo [Channel] > X:\Sources\ei.cfg - - - 9 - cmd.exe /c echo _Default >> X:\Sources\ei.cfg - - - 10 - cmd.exe /c echo [VL] >> X:\Sources\ei.cfg - - - 11 - cmd.exe /c echo 0 >> X:\Sources\ei.cfg - - - - 12 - cmd.exe /c ">>"X:\disable-defender.cmd" echo @ECHO OFF" - - - 13 - cmd.exe /c ">>"X:\disable-defender.cmd" echo SET file=C:\$Windows.~BT\NewOS\Windows\System32\config\SYSTEM" - - - 14 - cmd.exe /c ">>"X:\disable-defender.cmd" echo FOR /L ^%^%i IN (0) DO (" - - - 15 - cmd.exe /c ">>"X:\disable-defender.cmd" echo CALL :sleep" - - - 16 - cmd.exe /c ">>"X:\disable-defender.cmd" echo IF EXIST ^%file^% (" - - - 17 - cmd.exe /c ">>"X:\disable-defender.cmd" echo CALL :load" - - - 18 - cmd.exe /c ">>"X:\disable-defender.cmd" echo FOR ^%^%s IN (Sense WdBoot WdFilter WdNisDrv WdNisSvc WinDefend) DO reg.exe ADD HKLM\mount\ControlSet001\Services\^%^%s /v Start /t REG_DWORD /d 4 /f" - - - 19 - cmd.exe /c ">>"X:\disable-defender.cmd" echo reg.exe UNLOAD HKLM\mount" - - - 20 - cmd.exe /c ">>"X:\disable-defender.cmd" echo EXIT ) )" - - - 21 - cmd.exe /c ">>"X:\disable-defender.cmd" echo GOTO :eof" - - - 22 - cmd.exe /c ">>"X:\disable-defender.cmd" echo :load" - - - 23 - cmd.exe /c ">>"X:\disable-defender.cmd" echo reg.exe LOAD HKLM\mount ^%file^%" - - - 24 - cmd.exe /c ">>"X:\disable-defender.cmd" echo IF ^%errorlevel^% GTR 0 GOTO load" - - - 25 - cmd.exe /c ">>"X:\disable-defender.cmd" echo GOTO :eof" - - - 26 - cmd.exe /c ">>"X:\disable-defender.cmd" echo :sleep" - - - 27 - cmd.exe /c ">>"X:\disable-defender.cmd" echo ping.exe -n 1 127.0.0.1 ^> NUL" - - - 28 - cmd.exe /c ">>"X:\disable-defender.cmd" echo GOTO :eof" - - - 29 - cmd.exe /c "start /MIN X:\disable-defender.cmd" - - - - - - - - - - 1 - Extracts and Executes Scripts in this XML File - powershell.exe -NoProfile -WindowStyle Hidden -Command "$xml = [xml]::new(); $xml.Load('C:\Windows\Panther\unattend.xml'); $sb = [scriptblock]::Create( $xml.unattend.Extensions.ExtractScript ); Invoke-Command -ScriptBlock $sb -ArgumentList $xml;" - - - 2 - Executes the remove-packages Powershell Script - powershell.exe -NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -Command "Get-Content -LiteralPath 'C:\Windows\Setup\Scripts\remove-packages.ps1' -Raw | Invoke-Expression;" - - - 3 - Run Chris Titus WinUtil Tweaks - powershell.exe -NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -Command "Get-Content -LiteralPath 'C:\Windows\Setup\Scripts\wintweaks.ps1' -Raw | Invoke-Expression;" - - - 4 - Executes the HKLM Registry Entries Script - cmd.exe /c "C:\Windows\Setup\Scripts\localmachine.cmd >>"C:\Windows\Setup\Scripts\localmachine.log" 2>&1" - - - 5 - Adds Items to Right-Click Context Menu - cmd.exe /c "reg.exe import "C:\Windows\Setup\Scripts\contextmenu.reg" >>"C:\Windows\Setup\Scripts\contextmenu.log" 2>&1" - - - 6 - Loads the Default User Registry Hive so Changes Can be Made to It - reg.exe load "HKU\DefaultUser" "C:\Users\Default\NTUSER.DAT" - - - 7 - Registry Entry to Execute the HKCU Registry Entry Script the First Time a New User Logs In - reg.exe add "HKU\DefaultUser\Software\Microsoft\Windows\CurrentVersion\Runonce" /v "currentuser" /t REG_SZ /d "C:\Windows\Setup\Scripts\currentuser.cmd" /f - - - 8 - Unloads the Default User Registry Hive - reg.exe unload "HKU\DefaultUser" - - - 9 - Remove Microsoft Edge - cmd.exe /c "C:\Windows\Setup\Scripts\edgeremoval.bat >>"C:\Windows\Setup\Scripts\edgeremoval.log" 2>&1" - - - - - - - 1 - Extracts and Executes Scripts in this XML File - powershell.exe -NoProfile -WindowStyle Hidden -Command "$xml = [xml]::new(); $xml.Load('C:\Windows\Panther\unattend.xml'); $sb = [scriptblock]::Create( $xml.unattend.Extensions.ExtractScript ); Invoke-Command -ScriptBlock $sb -ArgumentList $xml;" - - - 2 - Executes the remove-packages Powershell Script - powershell.exe -NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -Command "Get-Content -LiteralPath 'C:\Windows\Setup\Scripts\remove-packages.ps1' -Raw | Invoke-Expression;" - - - 3 - Run Chris Titus WinUtil Tweaks - powershell.exe -NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -Command "Get-Content -LiteralPath 'C:\Windows\Setup\Scripts\wintweaks.ps1' -Raw | Invoke-Expression;" - - - 4 - Executes the HKLM Registry Entries Script - cmd.exe /c "C:\Windows\Setup\Scripts\localmachine.cmd >>"C:\Windows\Setup\Scripts\localmachine.log" 2>&1" - - - 5 - Adds Items to Right-Click Context Menu - cmd.exe /c "reg.exe import "C:\Windows\Setup\Scripts\contextmenu.reg" >>"C:\Windows\Setup\Scripts\contextmenu.log" 2>&1" - - - 6 - Loads the Default User Registry Hive so Changes Can be Made to It - reg.exe load "HKU\DefaultUser" "C:\Users\Default\NTUSER.DAT" - - - 7 - Registry Entry to Execute the HKCU Registry Entry Script the First Time a New User Logs In - reg.exe add "HKU\DefaultUser\Software\Microsoft\Windows\CurrentVersion\Runonce" /v "currentuser" /t REG_SZ /d "C:\Windows\Setup\Scripts\currentuser.cmd" /f - - - 8 - Unloads the Default User Registry Hive - reg.exe unload "HKU\DefaultUser" - - - 9 - Remove Microsoft Edge - cmd.exe /c "C:\Windows\Setup\Scripts\edgeremoval.bat >>"C:\Windows\Setup\Scripts\edgeremoval.log" 2>&1" - - - - - - - 1 - Extracts and Executes Scripts in this XML File - powershell.exe -NoProfile -WindowStyle Hidden -Command "$xml = [xml]::new(); $xml.Load('C:\Windows\Panther\unattend.xml'); $sb = [scriptblock]::Create( $xml.unattend.Extensions.ExtractScript ); Invoke-Command -ScriptBlock $sb -ArgumentList $xml;" - - - 2 - Executes the remove-packages Powershell Script - powershell.exe -NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -Command "Get-Content -LiteralPath 'C:\Windows\Setup\Scripts\remove-packages.ps1' -Raw | Invoke-Expression;" - - - 3 - Run Chris Titus WinUtil Tweaks - powershell.exe -NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -Command "Get-Content -LiteralPath 'C:\Windows\Setup\Scripts\wintweaks.ps1' -Raw | Invoke-Expression;" - - - 4 - Executes the HKLM Registry Entries Script - cmd.exe /c "C:\Windows\Setup\Scripts\localmachine.cmd >>"C:\Windows\Setup\Scripts\localmachine.log" 2>&1" - - - 5 - Adds Items to Right-Click Context Menu - cmd.exe /c "reg.exe import "C:\Windows\Setup\Scripts\contextmenu.reg" >>"C:\Windows\Setup\Scripts\contextmenu.log" 2>&1" - - - 6 - Loads the Default User Registry Hive so Changes Can be Made to It - reg.exe load "HKU\DefaultUser" "C:\Users\Default\NTUSER.DAT" - - - 7 - Registry Entry to Execute the HKCU Registry Entry Script the First Time a New User Logs In - reg.exe add "HKU\DefaultUser\Software\Microsoft\Windows\CurrentVersion\Runonce" /v "currentuser" /t REG_SZ /d "C:\Windows\Setup\Scripts\currentuser.cmd" /f - - - 8 - Unloads the Default User Registry Hive - reg.exe unload "HKU\DefaultUser" - - - 9 - Remove Microsoft Edge - cmd.exe /c "C:\Windows\Setup\Scripts\edgeremoval.bat >>"C:\Windows\Setup\Scripts\edgeremoval.log" 2>&1" - - - - - - - - - - true - true - true - true - Work - 3 - - - - - - - true - true - true - true - Work - 3 - - - - - - - true - true - true - true - Work - 3 - - - - - - - -param( - [xml] $Document -); - -$scriptsDir = 'C:\Windows\Setup\Scripts\'; -foreach( $file in $Document.unattend.Extensions.File ) { - $path = [System.Environment]::ExpandEnvironmentVariables( - $file.GetAttribute( 'path' ) - ); - if( $path.StartsWith( $scriptsDir ) ) { - mkdir -Path $scriptsDir -ErrorAction 'SilentlyContinue'; - } - $encoding = switch( [System.IO.Path]::GetExtension( $path ) ) { - { $_ -in '.ps1', '.xml' } { [System.Text.Encoding]::UTF8; } - { $_ -in '.reg', '.vbs', '.js' } { [System.Text.UnicodeEncoding]::new( $false, $true ); } - default { [System.Text.Encoding]::Default; } - }; - [System.IO.File]::WriteAllBytes( $path, ( $encoding.GetPreamble() + $encoding.GetBytes( $file.InnerText.Trim() ) ) ); -} - - - - - - - - - - - - - - - - - - - Sound > More sound settings > Communications" to "Do Nothing" -reg.exe add "HKEY_CURRENT_USER\Software\Microsoft\Multimedia\Audio" /v "UserDuckingPreference" /t REG_DWORD /d 3 /f - -:: Enables User Account Control (Default Value) -reg.exe add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v EnableLUA /t REG_DWORD /d 3 /f - -:: Restart PC to Apply All Changes -shutdown /r -t 1]]> - - - - ''; Microsoft.PowerShell.Management\Set-ItemProperty @args} } -function global:rp_test_path { if (test-path $args[0]) {Microsoft.PowerShell.Management\Remove-ItemProperty @args} } -function global:ni_test_path { if (-not (test-path $args[0])) {Microsoft.PowerShell.Management\New-Item @args} } -function global:ri_test_path { if (test-path $args[0]) {Microsoft.PowerShell.Management\Remove-Item @args} } -foreach ($f in 'sp','rp','ni','ri') {set-alias -Name $f -Value "${f}_test_path" -Scope Local -Option AllScope -force -ea 0} -## helper for edge reinstall - remove bundled OpenWebSearch redirector and edgeupdate policies -function global:prepare_edge { - foreach ($f in 'ni','ri','sp','rp') {set-alias -Name $f -Value "${f}_test_path" -Scope Local -Option AllScope -force -ea 0} - $MS=($env:ProgramFiles,${env:ProgramFiles(x86)})[[Environment]::Is64BitOperatingSystem]+'\Microsoft\Edge\Application\msedge.exe' - ri "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msedge.exe" -recurse -force -ea 0 - ri "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ie_to_edge_stub.exe" -recurse -force -ea 0 - ri 'Registry::HKEY_Users\S-1-5-21*\Software\Classes\microsoft-edge' -recurse -force -ea 0 - ri 'Registry::HKEY_Users\S-1-5-21*\Software\Classes\MSEdgeHTM' -recurse -force -ea 0 - ni "HKLM:\SOFTWARE\Classes\microsoft-edge\shell\open\command" -force -ea 0 >'' - sp "HKLM:\SOFTWARE\Classes\microsoft-edge\shell\open\command" '(Default)' "`"$MS`" --single-argument %%1" -force -ea 0 - ni "HKLM:\SOFTWARE\Classes\MSEdgeHTM\shell\open\command" -force -ea 0 >'' - sp "HKLM:\SOFTWARE\Classes\MSEdgeHTM\shell\open\command" '(Default)' "`"$MS`" --single-argument %%1" -force -ea 0 - foreach ($p in 'HKLM:\SOFTWARE\Policies','HKLM:\SOFTWARE','HKLM:\SOFTWARE\WOW6432Node') { - rp "$p\Microsoft\EdgeUpdate" 'InstallDefault' -force -ea 0 - rp "$p\Microsoft\EdgeUpdate" 'Install{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}' -force -ea 0 - rp "$p\Microsoft\EdgeUpdate" 'Install{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}' -force -ea 0 - } - $edgeupdate='Microsoft\EdgeUpdate\Clients\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}' - $webvupdate='Microsoft\EdgeUpdate\Clients\{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}' - $on_actions='on-os-upgrade','on-logon','on-logon-autolaunch','on-logon-startup-boost' - foreach ($p in 'HKLM:\SOFTWARE','HKLM:\SOFTWARE\Wow6432Node') { foreach ($launch in $on_actions) { - ri "$p\$edgeupdate\Commands\$launch" -force -ea 0; ri "$p\$webvupdate\Commands\$launch" -force -ea 0 - }} -} -## helper for webview reinstall - restore webexperience (widgets) if available -function global:prepare_webview { - $cfg = @{Register=$true; ForceApplicationShutdown=$true; ForceUpdateFromAnyVersion=$true; DisableDevelopmentMode=$true} - dir "$env:ProgramFiles\WindowsApps\MicrosoftWindows.Client.WebExperience*\AppxManifest.xml" -rec -ea 0 | Add-AppxPackage @cfg - dir "$env:SystemRoot\SystemApps\Microsoft.Win32WebViewHost*\AppxManifest.xml" -rec -ea 0 | Add-AppxPackage @cfg - kill -name explorer -ea 0; if ((get-process -name 'explorer' -ea 0) -eq $null) {start explorer} -} - -## 2 enable admin privileges -$D1=[uri].module.gettype('System.Diagnostics.Process')."GetM`ethods"(42) |where {$_.Name -eq 'SetPrivilege'} #`:no-ev-warn -'SeSecurityPrivilege','SeTakeOwnershipPrivilege','SeBackupPrivilege','SeRestorePrivilege'|foreach {$D1.Invoke($null, @("$_",2))} - -## 3 shut edge & webview clone stuff down and gather install paths -$shut = 'explorer','Widgets','widgetservice','msedgewebview2','MicrosoftEdge*','chredge','msedge','edge' -$shut+= 'msteams','msfamily','WebViewHost','Clipchamp' -cd $env:systemdrive; taskkill /im explorer.exe /f 2>&1 >''; foreach ($p in $shut) {kill -name $p -force -ea 0} -prepare_edge -## clear win32 uninstall block -foreach ($hk in 'HKCU:','HKLM:') { foreach ($wow in '','\Wow6432Node') { foreach ($i in $remove_win32) { - rp "$hk\SOFTWARE${wow}\Microsoft\Windows\CurrentVersion\Uninstall\$i" 'NoRemove' -force -ea 0 - ni "$hk\SOFTWARE${wow}\Microsoft\EdgeUpdateDev" -force >'' - sp "$hk\SOFTWARE${wow}\Microsoft\EdgeUpdateDev" 'AllowUninstall' 1 -type Dword -force -}}} -## find all Edge setup.exe and gather BHO paths for OpenWebSearch / MSEdgeRedirect usage -$edges = @(); $bho = @(); 'LocalApplicationData','ProgramFilesX86','ProgramFiles' |foreach { - $folder = [Environment]::GetFolderPath($_); $bho += dir "$folder\Microsoft\Edge*\ie_to_edge_stub.exe" -rec -ea 0 - if ($also_remove_webview -eq 1) {$edges += dir "$folder\Microsoft\Edge*\setup.exe" -rec -ea 0 |where {$_ -like '*EdgeWebView*'}} - $edges += dir "$folder\Microsoft\Edge*\setup.exe" -rec -ea 0 |where {$_ -notlike '*EdgeWebView*'} -} -## use dedicated C:\Scripts path to save OpenWebSearch (due to Sigma rules FUD) -$DIR = "$env:SystemDrive\Scripts"; mkdir $DIR -ea 0 >'' -## export OpenWebSearch innovative redirector - used by MSEdgeRedirect as well -foreach ($b in $bho) { if (test-path $b) { try {copy $b "$DIR\ie_to_edge_stub.exe" -force -ea 0} catch{} } } - -## 4 remove found *Edge* appx packages with unblock tricks -$provisioned = get-appxprovisionedpackage -online; $appxpackage = get-appxpackage -allusers; $eol = @() -$store = 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore' -$users = @('S-1-5-18'); if (test-path $store) {$users += $((dir $store -ea 0 |where {$_ -like '*S-1-5-21*'}).PSChildName)} -foreach ($choice in $remove_appx) { if ('' -eq $choice.Trim()) {continue} - foreach ($appx in $($provisioned |where {$_.PackageName -like "*$choice*"})) { - $next = !1; foreach ($no in $skip) {if ($appx.PackageName -like "*$no*") {$next = !0}} ; if ($next) {continue} - $PackageName = $appx.PackageName; $PackageFamilyName = ($appxpackage |where {$_.Name -eq $appx.DisplayName}).PackageFamilyName - ni "$store\Deprovisioned\$PackageFamilyName" -force >''; $PackageFamilyName - foreach ($sid in $users) {ni "$store\EndOfLife\$sid\$PackageName" -force >''} ; $eol += $PackageName - dism /online /set-nonremovableapppolicy /packagefamily:$PackageFamilyName /nonremovable:0 >'' - remove-appxprovisionedpackage -packagename $PackageName -online -allusers >'' - } - foreach ($appx in $($appxpackage |where {$_.PackageFullName -like "*$choice*"})) { - $next = !1; foreach ($no in $skip) {if ($appx.PackageFullName -like "*$no*") {$next = !0}} ; if ($next) {continue} - $PackageFullName = $appx.PackageFullName; - ni "$store\Deprovisioned\$appx.PackageFamilyName" -force >''; $PackageFullName - foreach ($sid in $users) {ni "$store\EndOfLife\$sid\$PackageFullName" -force >''} ; $eol += $PackageFullName - dism /online /set-nonremovableapppolicy /packagefamily:$PackageFamilyName /nonremovable:0 >'' - remove-appxpackage -package $PackageFullName -allusers >'' - } -} - -## 5 run found *Edge* setup.exe with uninstall args and wait in-between -foreach ($setup in $edges) { if (test-path $setup) { - if ($setup -like '*EdgeWebView*') {$target = "--msedgewebview"} else {$target = "--msedge"} - $removal = "--uninstall $target --system-level --verbose-logging --force-uninstall" - try {write-host $setup $removal; start -wait $setup -args $removal} catch {} - do {sleep 3} while ((get-process -name 'setup','MicrosoftEdge*' -ea 0).Path -like '*\Microsoft\Edge*') -}} - -## 6 extra cleanup -foreach ($PF in $env:ProgramFiles,${env:ProgramFiles(x86)}) { if (test-path "$PF\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe") { - write-host "$PF\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe /uninstall" - start -wait "$PF\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" -args '/uninstall' - do {sleep 3} while ((get-process -name 'setup','MicrosoftEdge*' -ea 0).Path -like '*\Microsoft\Edge*') - if ($also_remove_webview -eq 1) { foreach ($hk in 'HKCU:','HKLM:') { foreach ($wow in '','\Wow6432Node') { - ri "$hk\SOFTWARE${wow}\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft Edge Update" -rec -force -ea 0 }} - ri "$PF\Microsoft\EdgeUpdate" -rec -force -ea 0; Unregister-ScheduledTask -TaskName MicrosoftEdgeUpdate* -Confirm:$false -ea 0 - } -}} -$appdata = $([Environment]::GetFolderPath('ApplicationData')) -ri "$appdata\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Tombstones\Microsoft Edge.lnk" -force -ri "$appdata\Microsoft\Internet Explorer\Quick Launch\Microsoft Edge.lnk" -force - -## undo eol unblock trick to prevent latest cumulative update (LCU) failing -foreach ($sid in $users) { foreach ($PackageName in $eol) {ri "$store\EndOfLife\$sid\$PackageName" -force >''} } - -## set (almost) useless policies to prevent unsolicited reinstalls -foreach ($p in 'HKLM:\SOFTWARE\Policies','HKLM:\SOFTWARE','HKLM:\SOFTWARE\WOW6432Node') { - ni "$p\Microsoft\EdgeUpdate" -force >'' - sp "$p\Microsoft\EdgeUpdate" 'InstallDefault' 0 -type Dword -force - sp "$p\Microsoft\EdgeUpdate" 'Install{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}' 0 -type Dword -force - sp "$p\Microsoft\EdgeUpdate" 'Install{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}' 1 -type Dword -force - sp "$p\Microsoft\EdgeUpdate" 'DoNotUpdateToEdgeWithChromium' 1 -type Dword -force -} -$edgeupdate='Microsoft\EdgeUpdate\Clients\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}' -$webvupdate='Microsoft\EdgeUpdate\Clients\{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}' -$on_actions='on-os-upgrade','on-logon','on-logon-autolaunch','on-logon-startup-boost' -foreach ($p in 'HKLM:\SOFTWARE','HKLM:\SOFTWARE\Wow6432Node') { foreach ($launch in $on_actions) { - ni "$p\$edgeupdate\Commands\$launch" -force >''; sp "$p\$edgeupdate\Commands\$launch" 'CommandLine' 'systray.exe' -force - ni "$p\$webvupdate\Commands\$launch" -force >''; sp "$p\$webvupdate\Commands\$launch" 'CommandLine' 'systray.exe' -force -}} - -## 7 add bundled OpenWebSearch script to redirect microsoft-edge: anti-competitive links to the default browser -$MSEP = ($env:ProgramFiles,${env:ProgramFiles(x86)})[[Environment]::Is64BitOperatingSystem] + '\Microsoft\Edge\Application' -$IFEO = 'HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options' -$MIN = ('--headless','--width 1 --height 1')[([environment]::OSVersion.Version.Build) -gt 25179] -$CMD = "$env:systemroot\system32\conhost.exe $MIN" # AveYo: minimize prompt - see Terminal issue #13914 -ni "HKLM:\SOFTWARE\Classes\microsoft-edge\shell\open\command" -force >'' -sp "HKLM:\SOFTWARE\Classes\microsoft-edge" '(Default)' 'URL:microsoft-edge' -force -sp "HKLM:\SOFTWARE\Classes\microsoft-edge" 'URL Protocol' '' -force -sp "HKLM:\SOFTWARE\Classes\microsoft-edge" 'NoOpenWith' '' -force -sp "HKLM:\SOFTWARE\Classes\microsoft-edge\shell\open\command" '(Default)' "`"$DIR\ie_to_edge_stub.exe`" %1" -force -ni "HKLM:\SOFTWARE\Classes\MSEdgeHTM\shell\open\command" -force >'' -sp "HKLM:\SOFTWARE\Classes\MSEdgeHTM" 'NoOpenWith' '' -force -sp "HKLM:\SOFTWARE\Classes\MSEdgeHTM\shell\open\command" '(Default)' "`"$DIR\ie_to_edge_stub.exe`" %1" -force -ni "$IFEO\ie_to_edge_stub.exe\0" -force >'' -sp "$IFEO\ie_to_edge_stub.exe" 'UseFilter' 1 -type Dword -force -sp "$IFEO\ie_to_edge_stub.exe\0" 'FilterFullPath' "$DIR\ie_to_edge_stub.exe" -force -sp "$IFEO\ie_to_edge_stub.exe\0" 'Debugger' "$CMD $DIR\OpenWebSearch.cmd" -force -ni "$IFEO\msedge.exe\0" -force >'' -sp "$IFEO\msedge.exe" 'UseFilter' 1 -type Dword -force -sp "$IFEO\msedge.exe\0" 'FilterFullPath' "$MSEP\msedge.exe" -force -sp "$IFEO\msedge.exe\0" 'Debugger' "$CMD $DIR\OpenWebSearch.cmd" -force - -$OpenWebSearch = @$ -@title OpenWebSearch Redux & echo off & set ?= open start menu web search, widgets links or help in your chosen browser - by AveYo -for /f %%E in ('"prompt $E$S& for %%e in (1) do rem"') do echo;%%E[2t 2>nul & rem AveYo: minimize prompt -call :reg_var "HKCU\SOFTWARE\Microsoft\Windows\Shell\Associations\UrlAssociations\https\UserChoice" ProgID ProgID -if /i "%ProgID%" equ "MSEdgeHTM" echo;Default browser is set to Edge! Change it or remove OpenWebSearch script. & pause & exit /b -call :reg_var "HKCR\%ProgID%\shell\open\command" "" Browser -set Choice=& for %%. in (%Browser%) do if not defined Choice set "Choice=%%~." -call :reg_var "HKCR\MSEdgeMHT\shell\open\command" "" FallBack -set "Edge=" & for %%. in (%FallBack%) do if not defined Edge set "Edge=%%~." -set "URI=" & set "URL=" & set "NOOP=" & set "PassTrough=%Edge:msedge=edge%" -set "CLI=%CMDCMDLINE:"=``% " -if defined CLI set "CLI=%CLI:*ie_to_edge_stub.exe`` =%" -if defined CLI set "CLI=%CLI:*ie_to_edge_stub.exe =%" -if defined CLI set "CLI=%CLI:*msedge.exe`` =%" -if defined CLI set "CLI=%CLI:*msedge.exe =%" -set "FIX=%CLI:~-1%" -if defined CLI if "%FIX%"==" " set "CLI=%CLI:~0,-1%" -if defined CLI set "RED=%CLI:microsoft-edge=%" -if defined CLI set "URL=%CLI:http=%" -if defined CLI set "ARG=%CLI:``="%" -if "%CLI%" equ "%RED%" (set NOOP=1) else if "%CLI%" equ "%URL%" (set NOOP=1) -if defined NOOP if exist "%PassTrough%" start "" "%PassTrough%" %ARG% -if defined NOOP exit /b -set "URL=%CLI:*microsoft-edge=%" -set "URL=http%URL:*http=%" -set "FIX=%URL:~-2%" -if defined URL if "%FIX%"=="``" set "URL=%URL:~0,-2%" -call :dec_url -start "" "%Choice%" "%URL%" -exit - -:reg_var [USAGE] call :reg_var "HKCU\Volatile Environment" value-or-"" variable [extra options] -set {var}=& set {reg}=reg query "%~1" /v %2 /z /se "," /f /e& if %2=="" set {reg}=reg query "%~1" /ve /z /se "," /f /e -for /f "skip=2 tokens=* delims=" %%V in ('%{reg}% %4 %5 %6 %7 %8 %9 2^>nul') do if not defined {var} set "{var}=%%V" -if not defined {var} (set {reg}=& set "%~3="& exit /b) else if %2=="" set "{var}=%{var}:*) =%"& rem AveYo: v3 -if not defined {var} (set {reg}=& set "%~3="& exit /b) else set {reg}=& set "%~3=%{var}:*) =%"& set {var}=& exit /b - -:dec_url brute url percent decoding by AveYo -set ".=%URL:!=}%"&setlocal enabledelayedexpansion& rem brute url percent decoding -set ".=!.:%%={!" &set ".=!.:{3A=:!" &set ".=!.:{2F=/!" &set ".=!.:{3F=?!" &set ".=!.:{23=#!" &set ".=!.:{5B=[!" &set ".=!.:{5D=]!" -set ".=!.:{40=@!"&set ".=!.:{21=}!" &set ".=!.:{24=$!" &set ".=!.:{26=&!" &set ".=!.:{27='!" &set ".=!.:{28=(!" &set ".=!.:{29=)!" -set ".=!.:{2A=*!"&set ".=!.:{2B=+!" &set ".=!.:{2C=,!" &set ".=!.:{3B=;!" &set ".=!.:{3D==!" &set ".=!.:{25=%%!"&set ".=!.:{20= !" -set ".=!.:{=%%!" &rem set ",=!.:%%=!" & if "!,!" neq "!.!" endlocal& set "URL=%.:}=!%" & call :dec_url -endlocal& set "URL=%.:}=!%" & exit /b -rem done - -$@ -[io.file]::WriteAllText("$DIR\OpenWebSearch.cmd", $OpenWebSearch) - -## 8 done -$done = gp 'Registry::HKEY_Users\S-1-5-21*\Volatile*' Edge_Removal -ea 0; if ($done) {rp $done.PSPath Edge_Removal -force -ea 0} -if ((get-process -name 'explorer' -ea 0) -eq $null) {start explorer} - -## 9 bonus enter into powershell console: firefox / edge / webview to install a browser / reinstall edge or webview after removal -${.} = [char]27; $firefox = "${.}[38;2;255;165;0m firefox"; $edge = "${.}[94m edge${.}[97m"; $webview = "${.}[94mwebview ${.}[97m" -write-host "`n${.}[40;32m EDGE REMOVED! ${.}[97m -GET-ANOTHER-BROWSER? ENTER:$firefox ${.}[97m -REINSTALL? ENTER:$edge / $webview" - -## 0 ask to run script as admin -'@.replace("$@","'@").replace("@$","@'") -force -ea 0; $code='gp ''Registry::HKEY_Users\S-1-5-21*\Volatile*'' Edge_Removal -ea 0' -start powershell -args "-nop -noe -c & {iex(($code)[0].Edge_Removal)}" -verb runas -$_Press_Enter -#::]]> - - - - - - - - - - - - ]]> - - - \ No newline at end of file diff --git a/IoT-LTSC-Like/autounattend.xml b/IoT-LTSC-Like/autounattend.xml deleted file mode 100644 index 0b9c6f6..0000000 --- a/IoT-LTSC-Like/autounattend.xml +++ /dev/null @@ -1,1328 +0,0 @@ - - - - - - - - - - - - 00000-00000-00000-00000-00000 - Always - - true - - - - - 1 - reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassTPMCheck /t REG_DWORD /d 1 /f - - - 2 - reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassSecureBootCheck /t REG_DWORD /d 1 /f - - - 3 - reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassStorageCheck /t REG_DWORD /d 1 /f - - - 4 - reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassCPUCheck /t REG_DWORD /d 1 /f - - - 5 - reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassRAMCheck /t REG_DWORD /d 1 /f - - - 6 - reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassDiskCheck /t REG_DWORD /d 1 /f - - - - 7 - cmd.exe /c del /f /q X:\Sources\ei.cfg - - - 8 - cmd.exe /c echo [Channel] > X:\Sources\ei.cfg - - - 9 - cmd.exe /c echo Retail >> X:\Sources\ei.cfg - - - 10 - cmd.exe /c echo [VL] >> X:\Sources\ei.cfg - - - 11 - cmd.exe /c echo 0 >> X:\Sources\ei.cfg - - - - - - - 00000-00000-00000-00000-00000 - Always - - true - - - - - 1 - reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassTPMCheck /t REG_DWORD /d 1 /f - - - 2 - reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassSecureBootCheck /t REG_DWORD /d 1 /f - - - 3 - reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassStorageCheck /t REG_DWORD /d 1 /f - - - 4 - reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassCPUCheck /t REG_DWORD /d 1 /f - - - 5 - reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassRAMCheck /t REG_DWORD /d 1 /f - - - 6 - reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassDiskCheck /t REG_DWORD /d 1 /f - - - - 7 - cmd.exe /c del /f /q X:\Sources\ei.cfg - - - 8 - cmd.exe /c echo [Channel] > X:\Sources\ei.cfg - - - 9 - cmd.exe /c echo _Default >> X:\Sources\ei.cfg - - - 10 - cmd.exe /c echo [VL] >> X:\Sources\ei.cfg - - - 11 - cmd.exe /c echo 0 >> X:\Sources\ei.cfg - - - - - - - 00000-00000-00000-00000-00000 - Always - - true - - - - - 1 - reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassTPMCheck /t REG_DWORD /d 1 /f - - - 2 - reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassSecureBootCheck /t REG_DWORD /d 1 /f - - - 3 - reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassStorageCheck /t REG_DWORD /d 1 /f - - - 4 - reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassCPUCheck /t REG_DWORD /d 1 /f - - - 5 - reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassRAMCheck /t REG_DWORD /d 1 /f - - - 6 - reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassDiskCheck /t REG_DWORD /d 1 /f - - - - 7 - cmd.exe /c del /f /q X:\Sources\ei.cfg - - - 8 - cmd.exe /c echo [Channel] > X:\Sources\ei.cfg - - - 9 - cmd.exe /c echo _Default >> X:\Sources\ei.cfg - - - 10 - cmd.exe /c echo [VL] >> X:\Sources\ei.cfg - - - 11 - cmd.exe /c echo 0 >> X:\Sources\ei.cfg - - - - - - - - - - 1 - Extracts and Executes Scripts in this XML File - powershell.exe -NoProfile -WindowStyle Hidden -Command "$xml = [xml]::new(); $xml.Load('C:\Windows\Panther\unattend.xml'); $sb = [scriptblock]::Create( $xml.unattend.Extensions.ExtractScript ); Invoke-Command -ScriptBlock $sb -ArgumentList $xml;" - - - 2 - Executes the remove-packages Powershell Script - powershell.exe -NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -Command "Get-Content -LiteralPath 'C:\Windows\Setup\Scripts\remove-packages.ps1' -Raw | Invoke-Expression;" - - - 3 - Run Chris Titus WinUtil Tweaks - powershell.exe -NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -Command "Get-Content -LiteralPath 'C:\Windows\Setup\Scripts\wintweaks.ps1' -Raw | Invoke-Expression;" - - - 4 - Executes the HKLM Registry Entries Script - cmd.exe /c "C:\Windows\Setup\Scripts\localmachine.cmd >>"C:\Windows\Setup\Scripts\localmachine.log" 2>&1" - - - 5 - Adds Items to Right-Click Context Menu - cmd.exe /c "reg.exe import "C:\Windows\Setup\Scripts\contextmenu.reg" >>"C:\Windows\Setup\Scripts\contextmenu.log" 2>&1" - - - 6 - Loads the Default User Registry Hive so Changes Can be Made to It - reg.exe load "HKU\DefaultUser" "C:\Users\Default\NTUSER.DAT" - - - 7 - Registry Entry to Execute the HKCU Registry Entry Script the First Time a New User Logs In - reg.exe add "HKU\DefaultUser\Software\Microsoft\Windows\CurrentVersion\Runonce" /v "currentuser" /t REG_SZ /d "C:\Windows\Setup\Scripts\currentuser.cmd" /f - - - 8 - Unloads the Default User Registry Hive - reg.exe unload "HKU\DefaultUser" - - - - - - - 1 - Extracts and Executes Scripts in this XML File - powershell.exe -NoProfile -WindowStyle Hidden -Command "$xml = [xml]::new(); $xml.Load('C:\Windows\Panther\unattend.xml'); $sb = [scriptblock]::Create( $xml.unattend.Extensions.ExtractScript ); Invoke-Command -ScriptBlock $sb -ArgumentList $xml;" - - - 2 - Executes the remove-packages Powershell Script - powershell.exe -NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -Command "Get-Content -LiteralPath 'C:\Windows\Setup\Scripts\remove-packages.ps1' -Raw | Invoke-Expression;" - - - 3 - Run Chris Titus WinUtil Tweaks - powershell.exe -NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -Command "Get-Content -LiteralPath 'C:\Windows\Setup\Scripts\wintweaks.ps1' -Raw | Invoke-Expression;" - - - 4 - Executes the HKLM Registry Entries Script - cmd.exe /c "C:\Windows\Setup\Scripts\localmachine.cmd >>"C:\Windows\Setup\Scripts\localmachine.log" 2>&1" - - - 5 - Adds Items to Right-Click Context Menu - cmd.exe /c "reg.exe import "C:\Windows\Setup\Scripts\contextmenu.reg" >>"C:\Windows\Setup\Scripts\contextmenu.log" 2>&1" - - - 6 - Loads the Default User Registry Hive so Changes Can be Made to It - reg.exe load "HKU\DefaultUser" "C:\Users\Default\NTUSER.DAT" - - - 7 - Registry Entry to Execute the HKCU Registry Entry Script the First Time a New User Logs In - reg.exe add "HKU\DefaultUser\Software\Microsoft\Windows\CurrentVersion\Runonce" /v "currentuser" /t REG_SZ /d "C:\Windows\Setup\Scripts\currentuser.cmd" /f - - - 8 - Unloads the Default User Registry Hive - reg.exe unload "HKU\DefaultUser" - - - - - - - 1 - Extracts and Executes Scripts in this XML File - powershell.exe -NoProfile -WindowStyle Hidden -Command "$xml = [xml]::new(); $xml.Load('C:\Windows\Panther\unattend.xml'); $sb = [scriptblock]::Create( $xml.unattend.Extensions.ExtractScript ); Invoke-Command -ScriptBlock $sb -ArgumentList $xml;" - - - 2 - Executes the remove-packages Powershell Script - powershell.exe -NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -Command "Get-Content -LiteralPath 'C:\Windows\Setup\Scripts\remove-packages.ps1' -Raw | Invoke-Expression;" - - - 3 - Run Chris Titus WinUtil Tweaks - powershell.exe -NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -Command "Get-Content -LiteralPath 'C:\Windows\Setup\Scripts\wintweaks.ps1' -Raw | Invoke-Expression;" - - - 4 - Executes the HKLM Registry Entries Script - cmd.exe /c "C:\Windows\Setup\Scripts\localmachine.cmd >>"C:\Windows\Setup\Scripts\localmachine.log" 2>&1" - - - 5 - Adds Items to Right-Click Context Menu - cmd.exe /c "reg.exe import "C:\Windows\Setup\Scripts\contextmenu.reg" >>"C:\Windows\Setup\Scripts\contextmenu.log" 2>&1" - - - 6 - Loads the Default User Registry Hive so Changes Can be Made to It - reg.exe load "HKU\DefaultUser" "C:\Users\Default\NTUSER.DAT" - - - 7 - Registry Entry to Execute the HKCU Registry Entry Script the First Time a New User Logs In - reg.exe add "HKU\DefaultUser\Software\Microsoft\Windows\CurrentVersion\Runonce" /v "currentuser" /t REG_SZ /d "C:\Windows\Setup\Scripts\currentuser.cmd" /f - - - 8 - Unloads the Default User Registry Hive - reg.exe unload "HKU\DefaultUser" - - - - - - - - - - true - true - true - true - Work - 3 - - - - - - - true - true - true - true - Work - 3 - - - - - - - true - true - true - true - Work - 3 - - - - - - - -param( - [xml] $Document -); - -$scriptsDir = 'C:\Windows\Setup\Scripts\'; -foreach( $file in $Document.unattend.Extensions.File ) { - $path = [System.Environment]::ExpandEnvironmentVariables( - $file.GetAttribute( 'path' ) - ); - if( $path.StartsWith( $scriptsDir ) ) { - mkdir -Path $scriptsDir -ErrorAction 'SilentlyContinue'; - } - $encoding = switch( [System.IO.Path]::GetExtension( $path ) ) { - { $_ -in '.ps1', '.xml' } { [System.Text.Encoding]::UTF8; } - { $_ -in '.reg', '.vbs', '.js' } { [System.Text.UnicodeEncoding]::new( $false, $true ); } - default { [System.Text.Encoding]::Default; } - }; - [System.IO.File]::WriteAllBytes( $path, ( $encoding.GetPreamble() + $encoding.GetBytes( $file.InnerText.Trim() ) ) ); -} - - - - - - - - - - - - - - - - - - - Sound > More sound settings > Communications" to "Do Nothing" -reg.exe add "HKEY_CURRENT_USER\Software\Microsoft\Multimedia\Audio" /v "UserDuckingPreference" /t REG_DWORD /d 3 /f - -:: Enables User Account Control (Default Value) -reg.exe add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v EnableLUA /t REG_DWORD /d 3 /f - -:: Restart PC to Apply All Changes -shutdown /r -t 1]]> - - - - - - - - - - - - ]]> - - - \ No newline at end of file diff --git a/README.md b/README.md index bd512e3..350fc95 100644 --- a/README.md +++ b/README.md @@ -1,176 +1,232 @@ -# Memory’s Tech Tips’ Unattended Windows Installation +# UnattendedWinstall -## Overview +## Introduction -Microsoft gives you the ability to add [Answer Files](https://learn.microsoft.com/en-us/windows-hardware/manufacture/desktop/update-windows-settings-and-scripts-create-your-own-answer-file-sxs?view=windows-11) (or Unattend files) to Windows Installation Media, which can be used to modify Windows Settings and Packages in the Windows Image (ISO) during the Windows Setup process. +UnattendedWinstall leverages Microsoft's [Answer Files](https://learn.microsoft.com/en-us/windows-hardware/manufacture/desktop/update-windows-settings-and-scripts-create-your-own-answer-file-sxs?view=windows-11) (or Unattend files) to automate and customize Windows installations. It enables modifications to Windows Settings and Packages directly in the Windows ISO during setup. -If you’ve ever used Rufus to create Windows Installation Media, you might have seen options like “Remove Windows 11 Hardware Requirements” and “Disable Privacy Questions”. When you select those options, Rufus creates an answer file with your selected options and includes it on the installation media. +### Why Use an Answer File? -I've created a few of these answer files that I use to automate and streamline my Windows installs, and that’s what I’m sharing with you in this project. - - The answer files work on any edition (Home/Pro) of Windows 10 22H2 and Windows 11 23H2. - - *Windows 11 24H2 will be tested once it's fully released.* +#### Security -My motivation for this project is to get an “IoT-LTSC-Like” or even better experience on the Pro and Home versions of Windows 10 and Windows 11 without having to worry about getting an LTSC License or ISO file. +- Provides transparency by allowing inspection of all changes in the answer file. +- Runs directly on official Windows ISOs from Microsoft, eliminating the need for unofficial sources. +- Utilizes a Microsoft-supported feature designed for streamlined mass deployment of Windows installations. + +#### Automation + +- Enables automated configuration across multiple devices, saving time and effort by eliminating repetitive manual setups. > [!NOTE] -> -> I made these answer files to fit my needs, and they work great for me. They might not work for you, and that's okay. I can't help with every problem you might have. Check out the [Troubleshooting](https://github.com/memstechtips/UnattendedWinstall/blob/main/TROUBLESHOOTING.md) page for fixes to common "issues", or you can [create your own file](https://schneegans.de/windows/unattend-generator/) using these [video instructions.](https://youtu.be/WyLiJl-NQU8) -
-
+> UnattendedWinstall has been tested and optimized for personal use. For those interested in customizing further, [create your own answer file](https://schneegans.de/windows/unattend-generator/) following [this video guide](https://youtu.be/WyLiJl-NQU8). + +### Support the Project + +If UnattendedWinstall has been useful to you, consider supporting the project, it really does help! + +[![Support via PayPal](https://img.shields.io/badge/Support-via%20PayPal-yellow?logo=paypal)](https://paypal.me/memstech) -## Why should I use an Answer File? +### Feedback and Community -### Security: - - You can see all of the changes that will be made to the Windows Image by inspecting the answer file. - - It runs on the Official Windows 10 or 11 ISO downloaded directly from Microsoft, no need to download edited ISO files from Unofficial sources. - - It's not dependent on any third party tools and is an Official Microsoft Feature used to make Mass Windows Deployments easier. -### Automation: - - When installing Windows on multiple computers, there's no need to manually configure settings and run scripts on each machine, which saves a lot of time (and effort). -
+If you have feedback, suggestions, or need help with UnattendedWinstall, please feel free to join the discussion on GitHub or our Discord community: -## What does Memory's UnattendedWinstall answer files do? +[![Join the Discussion](https://img.shields.io/badge/Join-the%20Discussion-blue?logo=github&logoColor=white)](https://github.com/memstechtips/UnattendedWinstall/discussions) +[![Join Discord Community](https://img.shields.io/badge/Join-Discord%20Community-5865F2?logo=discord&logoColor=white)](https://www.discord.gg/zWGANV8QAX) -I've taken the time to add descriptions to almost all of the tweaks and registry entries in the answer files, and you can inspect them right here on GitHub. Alternatively, you can download the answer file and use a code editor like [Cursor](https://www.cursor.com/), [VSCode](https://code.visualstudio.com/) or [Notepad++](https://notepad-plus-plus.org/downloads/) to inspect it and make changes to it if needed. +## Requirements -### In addition to my tweaks, it contains elements and scripts from the following sources: +- Windows 10 or Windows 11 + - *(Tested on Windows 10 22H2 & Windows 11 24H2)* + - *(32-bit, 64-bit and arm64 is supported)* -- Base Answer File generation: +## What Does UnattendedWinstall Do? + +The UnattendedWinstall answer file come with detailed descriptions for nearly all configurations and registry tweaks, which are available for inspection here on GitHub. For customization, download the answer file and open it in editors like [Cursor](https://www.cursor.com/) or [VSCode](https://code.visualstudio.com/). + +### Sources and Contributions + +
+ Click to Show + +- **Base Answer File Generation**: - [Schneegans Unattend Generator](https://schneegans.de/windows/unattend-generator/) -- Windows Tweaks & Optimizations: +- **Tweaks & Optimizations**: - [ChrisTitusTech WinUtil](https://github.com/ChrisTitusTech/winutil) -- Various Tweaks: + - [FR33THY's Ultimate Windows Optimization Guide](https://github.com/FR33THYFR33THY/Ultimate-Windows-Optimization-Guide) +- **Additional Tweaks**: - [Tiny11Builder](https://github.com/ntdevlabs/tiny11builder) - [Ten Forums](https://www.tenforums.com/) - [Eleven Forum](https://www.elevenforum.com/) - [Winaero Tweaker](https://winaerotweaker.com/) -### The Most Notable Tweaks & Registry Entries: - -- Bypasses Windows 11 System Requirements. -- Removes Preinstalled Bloatware Apps. -- Bypasses FORCED Microsoft Account creation during Onboarding Experience. -- Disables Windows Spotlight. -- Disables Xbox GameDVR. -- Customizes Start Menu and Taskbar settings. -- Disables various Windows features like Cortana, Telemetry, and Location Tracking. -- Configures Windows Update to only install security updates and delay other updates for 1 year (max period). -- Disables Windows Error Reporting, Update Delivery Optimization, and Windows Remote Assistance (not RDP). -- Sets various performance and privacy-related registry keys, mostly found in the [ChrisTitusTech WinUtil](https://github.com/ChrisTitusTech/winutil). -- Enables and sets the Ultimate Performance power plan as active. -- Sets numerous Windows services to manual or disabled to optimize performance. -- Enables Dark Mode by default. -- Aligns the Start Button in Windows 11 to the left by default. -- Makes the Taskbar on Windows 10 Small and Transparent. -- Executes PowerShell and batch scripts to apply additional tweaks and remove specific applications like Microsoft Edge *(Standard & Core Only)*, OneDrive, and Teams. -> [!NOTE] -> Due to the removal of Microsoft Edge, I also include a Powershell Script on the Desktop called "LAUNCH-CTT-WINUTIL.ps1"
-> - Make sure you are connected to the internet, then right click on this file and select Run with Powershell.
-> - Accept the UAC prompt and it will launch the Chris Titus Tech Windows Utility and you can use that to install your browser of choice (even Edge) and any other software for that matter. -
+
+ +### Key Features + +- Windows 10/11 Pro is installed by default +- Bypasses Windows 11 system requirements +- Disables Windows Defender services by default + - *prompted to enable after Windows installation* +- Disables User Account Control by default + - *prompted to enable after Windows installation* +- Allows execution of PowerShell scripts by default +- Skips forced Microsoft account creation during Windows setup +- Removes preinstalled bloatware apps except Microsoft Edge, Notepad and Calculator + - Copilot and Recall is Disabled. +- Sets privacy-related registry keys to disable telemetry +- Limits Windows Update to install only security updates for one year +- Optimizes registry with various optimization and customization-related keys + - *See the "Set-RecommendedHKLMRegistry" and "Set-RecommendedHKCURegistry" functions for more information* +- Disables unnecessary scheduled tasks +- Configures Windows services for optimal performance +- Enables the Ultimate Performance power plan + +> [!NOTE] +> Use the `UWScript.ps1` file once Windows is installed to reapply or revert settings in case Windows Update resets some of the settings or if you encounter any issues. +> It can also be used to achieve a similar experience to UnattendedWinstall on an existing Windows installation without reinstalling Windows. +> +> --- +> +> **Before Running the Script** +> +> Ensure you open PowerShell as an administrator. Additionally, set the execution policy to allow script execution by running the following command: +> +> ```powershell +> Set-ExecutionPolicy RemoteSigned +> ``` +> +> Running PowerShell with elevated permissions and enabling script execution will ensure that `UWScript.ps1` can apply the necessary system changes. ## Usage Instructions -### Choose one of the following versions:
-*32bit, 64bit and arm64 is supported on all versions.* -### [**IoT-LTSC-Like**](https://github.com/memstechtips/UnattendedWinstall/blob/main/IoT-LTSC-Like/autounattend.xml) -### *Recommended for most people* - - Includes most of the same Windows Packages as the official IoT-LTSC version of Windows: - - (Windows Security, Edge, Notepad, Snipping Tool, Calculator, Paint, Legacy Windows Media Player) with added Microsoft Store. - - Only Security updates are installed, others are delayed for 1 year (max period) - - Includes better privacy settings and various other tweaks, view [CHANGELOG](https://github.com/memstechtips/UnattendedWinstall/blob/main/CHANGELOG.md) for a full list. -
- -### [**Standard**](https://github.com/memstechtips/UnattendedWinstall/blob/main/Standard/autounattend.xml) -### *This acts as a "Blank Canvas" where you can start from scratch and only install the software you want.* - - ALL Windows Packages are removed except for Windows Security which is ENABLED.
Microsoft Edge and the Microsoft Store are both removed. (Edge might reappear after the latest update on Windows 10.) - - Only Security updates are installed, others are delayed for 1 year (max period) - - Includes better privacy settings and various other tweaks, view [CHANGELOG](https://github.com/memstechtips/UnattendedWinstall/blob/main/CHANGELOG.md) for a full list. -
- -### [**Core**](https://github.com/memstechtips/UnattendedWinstall/blob/main/Core/autounattend.xml) -### *Same as Standard with Windows Defender Disabled.*
- *(I won't release a version that completely removes Windows Security, so please stop asking.)* - - Windows Defender is DISABLED by default by disabling the following services: "Sense, WdBoot, WdFilter, WdNisDrv, WdNisSvc, WinDefend" which in turns prevents the MsMpEng.exe process from running.
Source: [Schneegans](https://schneegans.de/windows/unattend-generator/) - - ALL Windows Packages are removed except for Windows Security which is DISABLED. -
Microsoft Edge and the Microsoft Store are both removed. (Edge might reappear after the latest update on Windows 10.) - - Only Security updates are installed, others are delayed for 1 year (max period) - - Includes better privacy settings and various other tweaks, view [CHANGELOG](https://github.com/memstechtips/UnattendedWinstall/blob/main/CHANGELOG.md) for a full list. -
- - -## **Installing Windows with an Answer File** -In short, you need to include the `autounattend.xml` answer file on your Windows Installation Media so it can be read and executed during the Windows Setup. Here are a few ways to do it: - -> [!NOTE]
-> - The filename included on the root of the Windows Installation Media must be `autounattend.xml` or else it won't execute. -
- -### Method 1: Create a Bootable Windows Installation Media - [Video Tutorial](https://youtu.be/pDEZDD_gEbo) - -1. Download your preferred `autounattend.xml` file and save it on your computer. -2. Create a [Windows 10](https://www.microsoft.com/en-us/software-download/windows10) or [Windows 11](https://www.microsoft.com/en-us/software-download/windows11) Bootable Installation USB drive with [Rufus](https://rufus.ie/en/) or the Media Creation Tool. -> [!IMPORTANT]
-> - Some users have reported issues with the Media Creation Tool when creating the Windows Installation USB. Use it at your own discretion.
-> - When using Rufus, don’t select any of the checkboxes in “Customize Your Windows Experience” as it creates another `autounattend.xml` file that might overwrite settings in the UnattendedWinstall file. -3. Copy the `autounattend.xml` file you downloaded in Step 1 to the root of the Bootable Windows Installation USB you created in Step 2. -4. Boot from the Windows Installation USB, do a clean install of Windows as normal, and the scripts will run automatically. -
- -### Method 2: Create a Custom ISO File - [Video Tutorial](https://youtu.be/pDEZDD_gEbo?si=ChEGghEOLCyLSnp7&t=1117) - -1. Download your preferred `autounattend.xml` file and save it on your computer. -2. Download the [Windows 10](https://www.microsoft.com/en-us/software-download/windows10) or [Windows 11](https://www.microsoft.com/en-us/software-download/windows11) ISO file depending on the version you want. -3. Download and Install [AnyBurn](https://anyburn.com/download.php) - - In AnyBurn, select the “Edit Image File” option. - - Navigate to and select the Official Windows ISO file you downloaded in Step 2. - - Click on “Add” and select the `autounattend.xml` file you downloaded in Step 1 or just click and drag the `autounattend.xml` into the AnyBurn window. - - Click on “Next,” then on “Create Now.” You should be prompted to overwrite the ISO file, click on “Yes.” - - Once the process is complete, close AnyBurn. -4. Use the ISO file to Install Windows on a Virtual Machine OR use a program like [Rufus](https://rufus.ie/en/) or [Ventoy](https://github.com/ventoy/Ventoy) to create a bootable USB flash drive with the edited Windows ISO file. -> [!IMPORTANT]
-> - When using Rufus, don’t select any of the checkboxes in “Customize Your Windows Experience” as it creates another `autounattend.xml` file that might overwrite settings in the UnattendedWinstall file. -5. Boot from the Windows Installation USB, do a clean install of Windows as normal, and the scripts will run automatically. -
- -### Method 3: Use Ventoy Auto Install Plugin - [Video Tutorial](https://youtu.be/4AGZQJTyCOs) - -1. Download your preferred `autounattend.xml` file and save it on your computer. -2. Download the [Windows 10](https://www.microsoft.com/en-us/software-download/windows10) or [Windows 11](https://www.microsoft.com/en-us/software-download/windows11) ISO file, depending on the version you want. -3. Download and install [Ventoy](https://github.com/ventoy/Ventoy) to your desired USB flash drive. -4. Prepare the folder structure: - - In your newly created Ventoy USB disk, create the following folders: `ISO` and `Templates`.
*They should be at the root of the drive.* - - Inside of the `ISO` folder, create a new folder called `Windows`. - - Copy your Windows ISO files in the `ISO\Windows` folder. - - Copy your `autounattend.xml` into the `Templates` folder. -5. Start VentoyPlugson. Depending on your OS, the steps might differ. - - On Windows, run the `VentoyPlugson.exe` file. - - A new browser window should open up with a Ventoy web interface ready to go. - - Select the `Auto Install Plugin` menu from the list. - - Click on the `Add` button. - - Select [parent] to make the whole Windows ISO folder benefit from the plugin. - - In the Directory Path, paste in the absolute path to your `Windows` folder.
example: `F:\ISO\Windows` (Replace `F` with your drive letter.) - - In the Template Path, paste in the absolute path to your `autounattend.xml` file.
example: `F:\Templates\autounattend.xml` (Replace `F` with your drive letter.)
(PSA: If you have more `autounattend.xml` files, you can add them later on!) - - Click on `OK` and you should see a message saying that the configuration has been saved successfully. - - Close the VentoyPlugson browser window and stop the VentoyPlugson application. -6. Boot from the Ventoy USB drive in the computer where you want to install windows. - - After selecting a Windows ISO to boot from, you will be prompted to boot with the `/Templates/autounattend.xml` file. - - Select that option and the `autounattend.xml` will be automatically executed during installation. -
+To use an answer file, include `autounattend.xml` at the root of your Windows Installation Media to be executed during Windows setup. + +> [!NOTE] +> Ensure the answer file is named `autounattend.xml`; otherwise, it won’t be recognized by the installer. + +> [!NOTE] +> You can back up your drivers prior to installation to ensure they’re readily available: +> +>
+> Click to Show Instructions +> +> 1. **Create a folder named `Drivers` on your C: drive.** +> +> 2. **Backup your current Windows drivers to the `C:` drive** by running the following command in Command Prompt as Administrator: +> +> ```bash +> dism /online /export-driver /destination:C:\Drivers +> ``` +> +> 3. **Plug your USB drive/installation media into your computer.** +> +> 4. **Create a folder named `$WinpeDriver$` on your USB drive.** +> +> 5. **Copy the drivers you want to install automatically** from `C:\Drivers` to `D:\$WinpeDriver$` **assuming `D:` is your USB drive.** +> +>
+ +### Method 1: Create a Bootable Windows Installation USB + +- [Video Tutorial](https://youtu.be/pDEZDD_gEbo) + +
+ Click to Show Instructions + + 1. Download the `autounattend.xml` file and save it on your computer. + 2. Create a [Windows 10](https://www.microsoft.com/en-us/software-download/windows10) or [Windows 11](https://www.microsoft.com/en-us/software-download/windows11) Bootable Installation USB drive with [Rufus](https://rufus.ie/en/) or the Media Creation Tool. + + > **Important** + > - Some users have reported issues with the Media Creation Tool when creating the Windows Installation USB. Use it at your own discretion. + > - When using Rufus, don’t select any of the checkboxes in “Customize Your Windows Experience,” as it creates another `autounattend.xml` file that might overwrite settings in the UnattendedWinstall file. + + 3. Copy the `autounattend.xml` file you downloaded in Step 1 to the root of the Bootable Windows Installation USB you created in Step 2. + 4. Boot from the Windows Installation USB, do a clean install of Windows as normal, and the scripts will run automatically. + +
+ +### Method 2: Create a Custom ISO File + +- [Video Tutorial](https://youtu.be/pDEZDD_gEbo?si=ChEGghEOLCyLSnp7&t=1117) + +
+ Click to Show Instructions + + 1. Download the `autounattend.xml` file and save it on your computer. + 2. Download the [Windows 10](https://www.microsoft.com/en-us/software-download/windows10) or [Windows 11](https://www.microsoft.com/en-us/software-download/windows11) ISO file depending on the version you want. + 3. Download and install [AnyBurn](https://anyburn.com/download.php) + - In AnyBurn, select the “Edit Image File” option. + - Navigate to and select the Official Windows ISO file you downloaded in Step 2. + - Click on “Add” and select the `autounattend.xml` file you downloaded in Step 1, or just click and drag the `autounattend.xml` into the AnyBurn window. + - Click on “Next,” then on “Create Now.” You should be prompted to overwrite the ISO file; click on “Yes.” + - Once the process is complete, close AnyBurn. + 4. Use the ISO file to install Windows on a Virtual Machine OR use a program like [Rufus](https://rufus.ie/en/) or [Ventoy](https://github.com/ventoy/Ventoy) to create a bootable USB flash drive with the edited Windows ISO file. + + > **Important** + > + > - When using Rufus, don’t select any of the checkboxes in “Customize Your Windows Experience,” as it creates another `autounattend.xml` file that might overwrite settings in the UnattendedWinstall file. + + 5. Boot from the Windows Installation USB, do a clean install of Windows as normal, and the scripts will run automatically. + +
+ +### Method 3: Use Ventoy Auto Install Plugin + +- [Video Tutorial](https://youtu.be/4AGZQJTyCOs) + +
+ Click to Show Instructions + + 1. Download the `autounattend.xml` file and save it on your computer. + 2. Download the [Windows 10](https://www.microsoft.com/en-us/software-download/windows10) or [Windows 11](https://www.microsoft.com/en-us/software-download/windows11) ISO file, depending on the version you want. + 3. Download and install [Ventoy](https://github.com/ventoy/Ventoy) to your desired USB flash drive. + 4. Prepare the folder structure: + - In your newly created Ventoy USB disk, create the following folders: `ISO` and `Templates`.
*They should be at the root of the drive.* + - Inside of the `ISO` folder, create a new folder called `Windows`. + - Copy your Windows ISO files in the `ISO\Windows` folder. + - Copy your `autounattend.xml` into the `Templates` folder. + 5. Start VentoyPlugson. Depending on your OS, the steps might differ. + - On Windows, run the `VentoyPlugson.exe` file. + - A new browser window should open up with a Ventoy web interface ready to go. + - Select the `Auto Install Plugin` menu from the list. + - Click on the `Add` button. + - Select [parent] to make the whole Windows ISO folder benefit from the plugin. + - In the Directory Path, paste in the absolute path to your `Windows` folder.
example: `F:\ISO\Windows` (Replace `F` with your drive letter.) + - In the Template Path, paste in the absolute path to your `autounattend.xml` file.
example: `F:\Templates\autounattend.xml` (Replace `F` with your drive letter.)
(PSA: If you have more `autounattend.xml` files, you can add them later on!) + - Click on `OK` and you should see a message saying that the configuration has been saved successfully. + - Close the VentoyPlugson browser window and stop the VentoyPlugson application. + 6. Boot from the Ventoy USB drive in the computer where you want to install windows. + - After selecting a Windows ISO to boot from, you will be prompted to boot with the `/Templates/autounattend.xml` file. + - Select that option and the `autounattend.xml` will be automatically executed during installation. + +
## FAQ -### How do I get the same experience on an existing version of Windows? - - Use the [Chris Titus Tech Windows Utility](https://github.com/ChrisTitusTech/winutil) - [Video Tutorial](https://youtu.be/pldFPTnOCGM) +### How can I apply these settings to an existing Windows installation? + +- Run the `UWScript.ps1` file or use the [Chris Titus Tech Windows Utility](https://github.com/ChrisTitusTech/winutil) ([Video](https://youtu.be/pldFPTnOCGM)). + +### Can this answer file be used for an in-place upgrade? + +- No, in-place upgrades do not support answer files. + +### Why is Windows still updating automatically? + +- Feature updates are delayed for a year; however, security and driver updates continue as usual. + +### Why don't I have internet after installing Windows? -### Can I use the answer file with an in-place Upgrade? - - No. +
+ Click to Show Instructions -### Windows is Updating Automatically, I thought it's Disabled? - - Feature updates (bloatware updates) are delayed for a year. Security and Driver updates still function normally. + If you’re unable to connect to the internet after installation, it’s likely because your Wi-Fi or LAN (Ethernet) drivers are missing. Windows sometimes doesn’t include all necessary drivers for network adapters, especially if they’re specific to your device. + To resolve this, follow these steps: -## Conclusion + 1. **Download your network driver** from the manufacturer’s website on another computer with internet access. Look for Wi-Fi or LAN drivers specific to your device model. + 2. **Transfer the driver** to your Windows installation via USB drive. + 3. **Install the driver** on your Windows system and restart if necessary. -I hope these Unattended Windows Answer files helps streamline the Windows installation process as much as it has for me. Feel free to join my [Discord Community](https://www.discord.gg/zWGANV8QAX) or leave Your feedback and suggestions in the [Discussions](https://github.com/memstechtips/UnattendedWinstall/discussions) as they are always welcome! Also, if you find these scripts useful, consider giving this repository a star ⭐ on GitHub and if you want to support the project, consider donating on [PayPal.](https://paypal.me/memstech) + After installation, you should be able to connect to the internet. -Happy installing! +
diff --git a/Standard/autounattend.xml b/Standard/autounattend.xml deleted file mode 100644 index c0aa941..0000000 --- a/Standard/autounattend.xml +++ /dev/null @@ -1,1687 +0,0 @@ - - - - - - - - - - - - 00000-00000-00000-00000-00000 - Always - - true - - - - - 1 - reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassTPMCheck /t REG_DWORD /d 1 /f - - - 2 - reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassSecureBootCheck /t REG_DWORD /d 1 /f - - - 3 - reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassStorageCheck /t REG_DWORD /d 1 /f - - - 4 - reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassCPUCheck /t REG_DWORD /d 1 /f - - - 5 - reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassRAMCheck /t REG_DWORD /d 1 /f - - - 6 - reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassDiskCheck /t REG_DWORD /d 1 /f - - - - 7 - cmd.exe /c del /f /q X:\Sources\ei.cfg - - - 8 - cmd.exe /c echo [Channel] > X:\Sources\ei.cfg - - - 9 - cmd.exe /c echo Retail >> X:\Sources\ei.cfg - - - 10 - cmd.exe /c echo [VL] >> X:\Sources\ei.cfg - - - 11 - cmd.exe /c echo 0 >> X:\Sources\ei.cfg - - - - - - - 00000-00000-00000-00000-00000 - Always - - true - - - - - 1 - reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassTPMCheck /t REG_DWORD /d 1 /f - - - 2 - reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassSecureBootCheck /t REG_DWORD /d 1 /f - - - 3 - reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassStorageCheck /t REG_DWORD /d 1 /f - - - 4 - reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassCPUCheck /t REG_DWORD /d 1 /f - - - 5 - reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassRAMCheck /t REG_DWORD /d 1 /f - - - 6 - reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassDiskCheck /t REG_DWORD /d 1 /f - - - - 7 - cmd.exe /c del /f /q X:\Sources\ei.cfg - - - 8 - cmd.exe /c echo [Channel] > X:\Sources\ei.cfg - - - 9 - cmd.exe /c echo _Default >> X:\Sources\ei.cfg - - - 10 - cmd.exe /c echo [VL] >> X:\Sources\ei.cfg - - - 11 - cmd.exe /c echo 0 >> X:\Sources\ei.cfg - - - - - - - 00000-00000-00000-00000-00000 - Always - - true - - - - - 1 - reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassTPMCheck /t REG_DWORD /d 1 /f - - - 2 - reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassSecureBootCheck /t REG_DWORD /d 1 /f - - - 3 - reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassStorageCheck /t REG_DWORD /d 1 /f - - - 4 - reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassCPUCheck /t REG_DWORD /d 1 /f - - - 5 - reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassRAMCheck /t REG_DWORD /d 1 /f - - - 6 - reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassDiskCheck /t REG_DWORD /d 1 /f - - - - 7 - cmd.exe /c del /f /q X:\Sources\ei.cfg - - - 8 - cmd.exe /c echo [Channel] > X:\Sources\ei.cfg - - - 9 - cmd.exe /c echo _Default >> X:\Sources\ei.cfg - - - 10 - cmd.exe /c echo [VL] >> X:\Sources\ei.cfg - - - 11 - cmd.exe /c echo 0 >> X:\Sources\ei.cfg - - - - - - - - - - 1 - Extracts and Executes Scripts in this XML File - powershell.exe -NoProfile -WindowStyle Hidden -Command "$xml = [xml]::new(); $xml.Load('C:\Windows\Panther\unattend.xml'); $sb = [scriptblock]::Create( $xml.unattend.Extensions.ExtractScript ); Invoke-Command -ScriptBlock $sb -ArgumentList $xml;" - - - 2 - Executes the remove-packages Powershell Script - powershell.exe -NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -Command "Get-Content -LiteralPath 'C:\Windows\Setup\Scripts\remove-packages.ps1' -Raw | Invoke-Expression;" - - - 3 - Run Chris Titus WinUtil Tweaks - powershell.exe -NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -Command "Get-Content -LiteralPath 'C:\Windows\Setup\Scripts\wintweaks.ps1' -Raw | Invoke-Expression;" - - - 4 - Executes the HKLM Registry Entries Script - cmd.exe /c "C:\Windows\Setup\Scripts\localmachine.cmd >>"C:\Windows\Setup\Scripts\localmachine.log" 2>&1" - - - 5 - Adds Items to Right-Click Context Menu - cmd.exe /c "reg.exe import "C:\Windows\Setup\Scripts\contextmenu.reg" >>"C:\Windows\Setup\Scripts\contextmenu.log" 2>&1" - - - 6 - Loads the Default User Registry Hive so Changes Can be Made to It - reg.exe load "HKU\DefaultUser" "C:\Users\Default\NTUSER.DAT" - - - 7 - Registry Entry to Execute the HKCU Registry Entry Script the First Time a New User Logs In - reg.exe add "HKU\DefaultUser\Software\Microsoft\Windows\CurrentVersion\Runonce" /v "currentuser" /t REG_SZ /d "C:\Windows\Setup\Scripts\currentuser.cmd" /f - - - 8 - Unloads the Default User Registry Hive - reg.exe unload "HKU\DefaultUser" - - - 9 - Edge - cmd.exe /c "C:\Windows\Setup\Scripts\edgeremoval.bat >>"C:\Windows\Setup\Scripts\edgeremoval.log" 2>&1" - - - - - - - 1 - Extracts and Executes Scripts in this XML File - powershell.exe -NoProfile -WindowStyle Hidden -Command "$xml = [xml]::new(); $xml.Load('C:\Windows\Panther\unattend.xml'); $sb = [scriptblock]::Create( $xml.unattend.Extensions.ExtractScript ); Invoke-Command -ScriptBlock $sb -ArgumentList $xml;" - - - 2 - Executes the remove-packages Powershell Script - powershell.exe -NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -Command "Get-Content -LiteralPath 'C:\Windows\Setup\Scripts\remove-packages.ps1' -Raw | Invoke-Expression;" - - - 3 - Run Chris Titus WinUtil Tweaks - powershell.exe -NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -Command "Get-Content -LiteralPath 'C:\Windows\Setup\Scripts\wintweaks.ps1' -Raw | Invoke-Expression;" - - - 4 - Executes the HKLM Registry Entries Script - cmd.exe /c "C:\Windows\Setup\Scripts\localmachine.cmd >>"C:\Windows\Setup\Scripts\localmachine.log" 2>&1" - - - 5 - Adds Items to Right-Click Context Menu - cmd.exe /c "reg.exe import "C:\Windows\Setup\Scripts\contextmenu.reg" >>"C:\Windows\Setup\Scripts\contextmenu.log" 2>&1" - - - 6 - Loads the Default User Registry Hive so Changes Can be Made to It - reg.exe load "HKU\DefaultUser" "C:\Users\Default\NTUSER.DAT" - - - 7 - Registry Entry to Execute the HKCU Registry Entry Script the First Time a New User Logs In - reg.exe add "HKU\DefaultUser\Software\Microsoft\Windows\CurrentVersion\Runonce" /v "currentuser" /t REG_SZ /d "C:\Windows\Setup\Scripts\currentuser.cmd" /f - - - 8 - Unloads the Default User Registry Hive - reg.exe unload "HKU\DefaultUser" - - - 9 - Edge - cmd.exe /c "C:\Windows\Setup\Scripts\edgeremoval.bat >>"C:\Windows\Setup\Scripts\edgeremoval.log" 2>&1" - - - - - - - 1 - Extracts and Executes Scripts in this XML File - powershell.exe -NoProfile -WindowStyle Hidden -Command "$xml = [xml]::new(); $xml.Load('C:\Windows\Panther\unattend.xml'); $sb = [scriptblock]::Create( $xml.unattend.Extensions.ExtractScript ); Invoke-Command -ScriptBlock $sb -ArgumentList $xml;" - - - 2 - Executes the remove-packages Powershell Script - powershell.exe -NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -Command "Get-Content -LiteralPath 'C:\Windows\Setup\Scripts\remove-packages.ps1' -Raw | Invoke-Expression;" - - - 3 - Run Chris Titus WinUtil Tweaks - powershell.exe -NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -Command "Get-Content -LiteralPath 'C:\Windows\Setup\Scripts\wintweaks.ps1' -Raw | Invoke-Expression;" - - - 4 - Executes the HKLM Registry Entries Script - cmd.exe /c "C:\Windows\Setup\Scripts\localmachine.cmd >>"C:\Windows\Setup\Scripts\localmachine.log" 2>&1" - - - 5 - Adds Items to Right-Click Context Menu - cmd.exe /c "reg.exe import "C:\Windows\Setup\Scripts\contextmenu.reg" >>"C:\Windows\Setup\Scripts\contextmenu.log" 2>&1" - - - 6 - Loads the Default User Registry Hive so Changes Can be Made to It - reg.exe load "HKU\DefaultUser" "C:\Users\Default\NTUSER.DAT" - - - 7 - Registry Entry to Execute the HKCU Registry Entry Script the First Time a New User Logs In - reg.exe add "HKU\DefaultUser\Software\Microsoft\Windows\CurrentVersion\Runonce" /v "currentuser" /t REG_SZ /d "C:\Windows\Setup\Scripts\currentuser.cmd" /f - - - 8 - Unloads the Default User Registry Hive - reg.exe unload "HKU\DefaultUser" - - - 9 - Edge - cmd.exe /c "C:\Windows\Setup\Scripts\edgeremoval.bat >>"C:\Windows\Setup\Scripts\edgeremoval.log" 2>&1" - - - - - - - - - - true - true - true - true - Work - 3 - - - - - - - true - true - true - true - Work - 3 - - - - - - - true - true - true - true - Work - 3 - - - - - - - -param( - [xml] $Document -); - -$scriptsDir = 'C:\Windows\Setup\Scripts\'; -foreach( $file in $Document.unattend.Extensions.File ) { - $path = [System.Environment]::ExpandEnvironmentVariables( - $file.GetAttribute( 'path' ) - ); - if( $path.StartsWith( $scriptsDir ) ) { - mkdir -Path $scriptsDir -ErrorAction 'SilentlyContinue'; - } - $encoding = switch( [System.IO.Path]::GetExtension( $path ) ) { - { $_ -in '.ps1', '.xml' } { [System.Text.Encoding]::UTF8; } - { $_ -in '.reg', '.vbs', '.js' } { [System.Text.UnicodeEncoding]::new( $false, $true ); } - default { [System.Text.Encoding]::Default; } - }; - [System.IO.File]::WriteAllBytes( $path, ( $encoding.GetPreamble() + $encoding.GetBytes( $file.InnerText.Trim() ) ) ); -} - - - - - - - - - - - - - - - - - - - Sound > More sound settings > Communications" to "Do Nothing" -reg.exe add "HKEY_CURRENT_USER\Software\Microsoft\Multimedia\Audio" /v "UserDuckingPreference" /t REG_DWORD /d 3 /f - -:: Enables User Account Control (Default Value) -reg.exe add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v EnableLUA /t REG_DWORD /d 3 /f - -:: Restart PC to Apply All Changes -shutdown /r -t 1]]> - - - - ''; Microsoft.PowerShell.Management\Set-ItemProperty @args} } -function global:rp_test_path { if (test-path $args[0]) {Microsoft.PowerShell.Management\Remove-ItemProperty @args} } -function global:ni_test_path { if (-not (test-path $args[0])) {Microsoft.PowerShell.Management\New-Item @args} } -function global:ri_test_path { if (test-path $args[0]) {Microsoft.PowerShell.Management\Remove-Item @args} } -foreach ($f in 'sp','rp','ni','ri') {set-alias -Name $f -Value "${f}_test_path" -Scope Local -Option AllScope -force -ea 0} -## helper for edge reinstall - remove bundled OpenWebSearch redirector and edgeupdate policies -function global:prepare_edge { - foreach ($f in 'ni','ri','sp','rp') {set-alias -Name $f -Value "${f}_test_path" -Scope Local -Option AllScope -force -ea 0} - $MS=($env:ProgramFiles,${env:ProgramFiles(x86)})[[Environment]::Is64BitOperatingSystem]+'\Microsoft\Edge\Application\msedge.exe' - ri "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\msedge.exe" -recurse -force -ea 0 - ri "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ie_to_edge_stub.exe" -recurse -force -ea 0 - ri 'Registry::HKEY_Users\S-1-5-21*\Software\Classes\microsoft-edge' -recurse -force -ea 0 - ri 'Registry::HKEY_Users\S-1-5-21*\Software\Classes\MSEdgeHTM' -recurse -force -ea 0 - ni "HKLM:\SOFTWARE\Classes\microsoft-edge\shell\open\command" -force -ea 0 >'' - sp "HKLM:\SOFTWARE\Classes\microsoft-edge\shell\open\command" '(Default)' "`"$MS`" --single-argument %%1" -force -ea 0 - ni "HKLM:\SOFTWARE\Classes\MSEdgeHTM\shell\open\command" -force -ea 0 >'' - sp "HKLM:\SOFTWARE\Classes\MSEdgeHTM\shell\open\command" '(Default)' "`"$MS`" --single-argument %%1" -force -ea 0 - foreach ($p in 'HKLM:\SOFTWARE\Policies','HKLM:\SOFTWARE','HKLM:\SOFTWARE\WOW6432Node') { - rp "$p\Microsoft\EdgeUpdate" 'InstallDefault' -force -ea 0 - rp "$p\Microsoft\EdgeUpdate" 'Install{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}' -force -ea 0 - rp "$p\Microsoft\EdgeUpdate" 'Install{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}' -force -ea 0 - } - $edgeupdate='Microsoft\EdgeUpdate\Clients\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}' - $webvupdate='Microsoft\EdgeUpdate\Clients\{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}' - $on_actions='on-os-upgrade','on-logon','on-logon-autolaunch','on-logon-startup-boost' - foreach ($p in 'HKLM:\SOFTWARE','HKLM:\SOFTWARE\Wow6432Node') { foreach ($launch in $on_actions) { - ri "$p\$edgeupdate\Commands\$launch" -force -ea 0; ri "$p\$webvupdate\Commands\$launch" -force -ea 0 - }} -} -## helper for webview reinstall - restore webexperience (widgets) if available -function global:prepare_webview { - $cfg = @{Register=$true; ForceApplicationShutdown=$true; ForceUpdateFromAnyVersion=$true; DisableDevelopmentMode=$true} - dir "$env:ProgramFiles\WindowsApps\MicrosoftWindows.Client.WebExperience*\AppxManifest.xml" -rec -ea 0 | Add-AppxPackage @cfg - dir "$env:SystemRoot\SystemApps\Microsoft.Win32WebViewHost*\AppxManifest.xml" -rec -ea 0 | Add-AppxPackage @cfg - kill -name explorer -ea 0; if ((get-process -name 'explorer' -ea 0) -eq $null) {start explorer} -} - -## 2 enable admin privileges -$D1=[uri].module.gettype('System.Diagnostics.Process')."GetM`ethods"(42) |where {$_.Name -eq 'SetPrivilege'} #`:no-ev-warn -'SeSecurityPrivilege','SeTakeOwnershipPrivilege','SeBackupPrivilege','SeRestorePrivilege'|foreach {$D1.Invoke($null, @("$_",2))} - -## 3 shut edge & webview clone stuff down and gather install paths -$shut = 'explorer','Widgets','widgetservice','msedgewebview2','MicrosoftEdge*','chredge','msedge','edge' -$shut+= 'msteams','msfamily','WebViewHost','Clipchamp' -cd $env:systemdrive; taskkill /im explorer.exe /f 2>&1 >''; foreach ($p in $shut) {kill -name $p -force -ea 0} -prepare_edge -## clear win32 uninstall block -foreach ($hk in 'HKCU:','HKLM:') { foreach ($wow in '','\Wow6432Node') { foreach ($i in $remove_win32) { - rp "$hk\SOFTWARE${wow}\Microsoft\Windows\CurrentVersion\Uninstall\$i" 'NoRemove' -force -ea 0 - ni "$hk\SOFTWARE${wow}\Microsoft\EdgeUpdateDev" -force >'' - sp "$hk\SOFTWARE${wow}\Microsoft\EdgeUpdateDev" 'AllowUninstall' 1 -type Dword -force -}}} -## find all Edge setup.exe and gather BHO paths for OpenWebSearch / MSEdgeRedirect usage -$edges = @(); $bho = @(); 'LocalApplicationData','ProgramFilesX86','ProgramFiles' |foreach { - $folder = [Environment]::GetFolderPath($_); $bho += dir "$folder\Microsoft\Edge*\ie_to_edge_stub.exe" -rec -ea 0 - if ($also_remove_webview -eq 1) {$edges += dir "$folder\Microsoft\Edge*\setup.exe" -rec -ea 0 |where {$_ -like '*EdgeWebView*'}} - $edges += dir "$folder\Microsoft\Edge*\setup.exe" -rec -ea 0 |where {$_ -notlike '*EdgeWebView*'} -} -## use dedicated C:\Scripts path to save OpenWebSearch (due to Sigma rules FUD) -$DIR = "$env:SystemDrive\Scripts"; mkdir $DIR -ea 0 >'' -## export OpenWebSearch innovative redirector - used by MSEdgeRedirect as well -foreach ($b in $bho) { if (test-path $b) { try {copy $b "$DIR\ie_to_edge_stub.exe" -force -ea 0} catch{} } } - -## 4 remove found *Edge* appx packages with unblock tricks -$provisioned = get-appxprovisionedpackage -online; $appxpackage = get-appxpackage -allusers; $eol = @() -$store = 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore' -$users = @('S-1-5-18'); if (test-path $store) {$users += $((dir $store -ea 0 |where {$_ -like '*S-1-5-21*'}).PSChildName)} -foreach ($choice in $remove_appx) { if ('' -eq $choice.Trim()) {continue} - foreach ($appx in $($provisioned |where {$_.PackageName -like "*$choice*"})) { - $next = !1; foreach ($no in $skip) {if ($appx.PackageName -like "*$no*") {$next = !0}} ; if ($next) {continue} - $PackageName = $appx.PackageName; $PackageFamilyName = ($appxpackage |where {$_.Name -eq $appx.DisplayName}).PackageFamilyName - ni "$store\Deprovisioned\$PackageFamilyName" -force >''; $PackageFamilyName - foreach ($sid in $users) {ni "$store\EndOfLife\$sid\$PackageName" -force >''} ; $eol += $PackageName - dism /online /set-nonremovableapppolicy /packagefamily:$PackageFamilyName /nonremovable:0 >'' - remove-appxprovisionedpackage -packagename $PackageName -online -allusers >'' - } - foreach ($appx in $($appxpackage |where {$_.PackageFullName -like "*$choice*"})) { - $next = !1; foreach ($no in $skip) {if ($appx.PackageFullName -like "*$no*") {$next = !0}} ; if ($next) {continue} - $PackageFullName = $appx.PackageFullName; - ni "$store\Deprovisioned\$appx.PackageFamilyName" -force >''; $PackageFullName - foreach ($sid in $users) {ni "$store\EndOfLife\$sid\$PackageFullName" -force >''} ; $eol += $PackageFullName - dism /online /set-nonremovableapppolicy /packagefamily:$PackageFamilyName /nonremovable:0 >'' - remove-appxpackage -package $PackageFullName -allusers >'' - } -} - -## 5 run found *Edge* setup.exe with uninstall args and wait in-between -foreach ($setup in $edges) { if (test-path $setup) { - if ($setup -like '*EdgeWebView*') {$target = "--msedgewebview"} else {$target = "--msedge"} - $removal = "--uninstall $target --system-level --verbose-logging --force-uninstall" - try {write-host $setup $removal; start -wait $setup -args $removal} catch {} - do {sleep 3} while ((get-process -name 'setup','MicrosoftEdge*' -ea 0).Path -like '*\Microsoft\Edge*') -}} - -## 6 extra cleanup -foreach ($PF in $env:ProgramFiles,${env:ProgramFiles(x86)}) { if (test-path "$PF\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe") { - write-host "$PF\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe /uninstall" - start -wait "$PF\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" -args '/uninstall' - do {sleep 3} while ((get-process -name 'setup','MicrosoftEdge*' -ea 0).Path -like '*\Microsoft\Edge*') - if ($also_remove_webview -eq 1) { foreach ($hk in 'HKCU:','HKLM:') { foreach ($wow in '','\Wow6432Node') { - ri "$hk\SOFTWARE${wow}\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft Edge Update" -rec -force -ea 0 }} - ri "$PF\Microsoft\EdgeUpdate" -rec -force -ea 0; Unregister-ScheduledTask -TaskName MicrosoftEdgeUpdate* -Confirm:$false -ea 0 - } -}} -$appdata = $([Environment]::GetFolderPath('ApplicationData')) -ri "$appdata\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Tombstones\Microsoft Edge.lnk" -force -ri "$appdata\Microsoft\Internet Explorer\Quick Launch\Microsoft Edge.lnk" -force - -## undo eol unblock trick to prevent latest cumulative update (LCU) failing -foreach ($sid in $users) { foreach ($PackageName in $eol) {ri "$store\EndOfLife\$sid\$PackageName" -force >''} } - -## set (almost) useless policies to prevent unsolicited reinstalls -foreach ($p in 'HKLM:\SOFTWARE\Policies','HKLM:\SOFTWARE','HKLM:\SOFTWARE\WOW6432Node') { - ni "$p\Microsoft\EdgeUpdate" -force >'' - sp "$p\Microsoft\EdgeUpdate" 'InstallDefault' 0 -type Dword -force - sp "$p\Microsoft\EdgeUpdate" 'Install{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}' 0 -type Dword -force - sp "$p\Microsoft\EdgeUpdate" 'Install{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}' 1 -type Dword -force - sp "$p\Microsoft\EdgeUpdate" 'DoNotUpdateToEdgeWithChromium' 1 -type Dword -force -} -$edgeupdate='Microsoft\EdgeUpdate\Clients\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}' -$webvupdate='Microsoft\EdgeUpdate\Clients\{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}' -$on_actions='on-os-upgrade','on-logon','on-logon-autolaunch','on-logon-startup-boost' -foreach ($p in 'HKLM:\SOFTWARE','HKLM:\SOFTWARE\Wow6432Node') { foreach ($launch in $on_actions) { - ni "$p\$edgeupdate\Commands\$launch" -force >''; sp "$p\$edgeupdate\Commands\$launch" 'CommandLine' 'systray.exe' -force - ni "$p\$webvupdate\Commands\$launch" -force >''; sp "$p\$webvupdate\Commands\$launch" 'CommandLine' 'systray.exe' -force -}} - -## 7 add bundled OpenWebSearch script to redirect microsoft-edge: anti-competitive links to the default browser -$MSEP = ($env:ProgramFiles,${env:ProgramFiles(x86)})[[Environment]::Is64BitOperatingSystem] + '\Microsoft\Edge\Application' -$IFEO = 'HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options' -$MIN = ('--headless','--width 1 --height 1')[([environment]::OSVersion.Version.Build) -gt 25179] -$CMD = "$env:systemroot\system32\conhost.exe $MIN" # AveYo: minimize prompt - see Terminal issue #13914 -ni "HKLM:\SOFTWARE\Classes\microsoft-edge\shell\open\command" -force >'' -sp "HKLM:\SOFTWARE\Classes\microsoft-edge" '(Default)' 'URL:microsoft-edge' -force -sp "HKLM:\SOFTWARE\Classes\microsoft-edge" 'URL Protocol' '' -force -sp "HKLM:\SOFTWARE\Classes\microsoft-edge" 'NoOpenWith' '' -force -sp "HKLM:\SOFTWARE\Classes\microsoft-edge\shell\open\command" '(Default)' "`"$DIR\ie_to_edge_stub.exe`" %1" -force -ni "HKLM:\SOFTWARE\Classes\MSEdgeHTM\shell\open\command" -force >'' -sp "HKLM:\SOFTWARE\Classes\MSEdgeHTM" 'NoOpenWith' '' -force -sp "HKLM:\SOFTWARE\Classes\MSEdgeHTM\shell\open\command" '(Default)' "`"$DIR\ie_to_edge_stub.exe`" %1" -force -ni "$IFEO\ie_to_edge_stub.exe\0" -force >'' -sp "$IFEO\ie_to_edge_stub.exe" 'UseFilter' 1 -type Dword -force -sp "$IFEO\ie_to_edge_stub.exe\0" 'FilterFullPath' "$DIR\ie_to_edge_stub.exe" -force -sp "$IFEO\ie_to_edge_stub.exe\0" 'Debugger' "$CMD $DIR\OpenWebSearch.cmd" -force -ni "$IFEO\msedge.exe\0" -force >'' -sp "$IFEO\msedge.exe" 'UseFilter' 1 -type Dword -force -sp "$IFEO\msedge.exe\0" 'FilterFullPath' "$MSEP\msedge.exe" -force -sp "$IFEO\msedge.exe\0" 'Debugger' "$CMD $DIR\OpenWebSearch.cmd" -force - -$OpenWebSearch = @$ -@title OpenWebSearch Redux & echo off & set ?= open start menu web search, widgets links or help in your chosen browser - by AveYo -for /f %%E in ('"prompt $E$S& for %%e in (1) do rem"') do echo;%%E[2t 2>nul & rem AveYo: minimize prompt -call :reg_var "HKCU\SOFTWARE\Microsoft\Windows\Shell\Associations\UrlAssociations\https\UserChoice" ProgID ProgID -if /i "%ProgID%" equ "MSEdgeHTM" echo;Default browser is set to Edge! Change it or remove OpenWebSearch script. & pause & exit /b -call :reg_var "HKCR\%ProgID%\shell\open\command" "" Browser -set Choice=& for %%. in (%Browser%) do if not defined Choice set "Choice=%%~." -call :reg_var "HKCR\MSEdgeMHT\shell\open\command" "" FallBack -set "Edge=" & for %%. in (%FallBack%) do if not defined Edge set "Edge=%%~." -set "URI=" & set "URL=" & set "NOOP=" & set "PassTrough=%Edge:msedge=edge%" -set "CLI=%CMDCMDLINE:"=``% " -if defined CLI set "CLI=%CLI:*ie_to_edge_stub.exe`` =%" -if defined CLI set "CLI=%CLI:*ie_to_edge_stub.exe =%" -if defined CLI set "CLI=%CLI:*msedge.exe`` =%" -if defined CLI set "CLI=%CLI:*msedge.exe =%" -set "FIX=%CLI:~-1%" -if defined CLI if "%FIX%"==" " set "CLI=%CLI:~0,-1%" -if defined CLI set "RED=%CLI:microsoft-edge=%" -if defined CLI set "URL=%CLI:http=%" -if defined CLI set "ARG=%CLI:``="%" -if "%CLI%" equ "%RED%" (set NOOP=1) else if "%CLI%" equ "%URL%" (set NOOP=1) -if defined NOOP if exist "%PassTrough%" start "" "%PassTrough%" %ARG% -if defined NOOP exit /b -set "URL=%CLI:*microsoft-edge=%" -set "URL=http%URL:*http=%" -set "FIX=%URL:~-2%" -if defined URL if "%FIX%"=="``" set "URL=%URL:~0,-2%" -call :dec_url -start "" "%Choice%" "%URL%" -exit - -:reg_var [USAGE] call :reg_var "HKCU\Volatile Environment" value-or-"" variable [extra options] -set {var}=& set {reg}=reg query "%~1" /v %2 /z /se "," /f /e& if %2=="" set {reg}=reg query "%~1" /ve /z /se "," /f /e -for /f "skip=2 tokens=* delims=" %%V in ('%{reg}% %4 %5 %6 %7 %8 %9 2^>nul') do if not defined {var} set "{var}=%%V" -if not defined {var} (set {reg}=& set "%~3="& exit /b) else if %2=="" set "{var}=%{var}:*) =%"& rem AveYo: v3 -if not defined {var} (set {reg}=& set "%~3="& exit /b) else set {reg}=& set "%~3=%{var}:*) =%"& set {var}=& exit /b - -:dec_url brute url percent decoding by AveYo -set ".=%URL:!=}%"&setlocal enabledelayedexpansion& rem brute url percent decoding -set ".=!.:%%={!" &set ".=!.:{3A=:!" &set ".=!.:{2F=/!" &set ".=!.:{3F=?!" &set ".=!.:{23=#!" &set ".=!.:{5B=[!" &set ".=!.:{5D=]!" -set ".=!.:{40=@!"&set ".=!.:{21=}!" &set ".=!.:{24=$!" &set ".=!.:{26=&!" &set ".=!.:{27='!" &set ".=!.:{28=(!" &set ".=!.:{29=)!" -set ".=!.:{2A=*!"&set ".=!.:{2B=+!" &set ".=!.:{2C=,!" &set ".=!.:{3B=;!" &set ".=!.:{3D==!" &set ".=!.:{25=%%!"&set ".=!.:{20= !" -set ".=!.:{=%%!" &rem set ",=!.:%%=!" & if "!,!" neq "!.!" endlocal& set "URL=%.:}=!%" & call :dec_url -endlocal& set "URL=%.:}=!%" & exit /b -rem done - -$@ -[io.file]::WriteAllText("$DIR\OpenWebSearch.cmd", $OpenWebSearch) - -## 8 done -$done = gp 'Registry::HKEY_Users\S-1-5-21*\Volatile*' Edge_Removal -ea 0; if ($done) {rp $done.PSPath Edge_Removal -force -ea 0} -if ((get-process -name 'explorer' -ea 0) -eq $null) {start explorer} - -## 9 bonus enter into powershell console: firefox / edge / webview to install a browser / reinstall edge or webview after removal -${.} = [char]27; $firefox = "${.}[38;2;255;165;0m firefox"; $edge = "${.}[94m edge${.}[97m"; $webview = "${.}[94mwebview ${.}[97m" -write-host "`n${.}[40;32m EDGE REMOVED! ${.}[97m -GET-ANOTHER-BROWSER? ENTER:$firefox ${.}[97m -REINSTALL? ENTER:$edge / $webview" - -## 0 ask to run script as admin -'@.replace("$@","'@").replace("@$","@'") -force -ea 0; $code='gp ''Registry::HKEY_Users\S-1-5-21*\Volatile*'' Edge_Removal -ea 0' -start powershell -args "-nop -noe -c & {iex(($code)[0].Edge_Removal)}" -verb runas -$_Press_Enter -#::]]> - - - - - - - - - - - - ]]> - - - \ No newline at end of file diff --git a/TROUBLESHOOTING.md b/TROUBLESHOOTING.md index 9c27e76..b68c671 100644 --- a/TROUBLESHOOTING.md +++ b/TROUBLESHOOTING.md @@ -1,4 +1,5 @@ -# Troubleshooting Guides +# Troubleshooting Guides +*For UnattendedWinstall v1.0.0* ## Adobe Creative Cloud Installer won't Launch diff --git a/UWScript.ps1 b/UWScript.ps1 new file mode 100644 index 0000000..54f7e67 --- /dev/null +++ b/UWScript.ps1 @@ -0,0 +1,2715 @@ +# Check if script is running as Administrator +If (!([Security.Principal.WindowsPrincipal][Security.Principal.WindowsIdentity]::GetCurrent()).IsInRole([Security.Principal.WindowsBuiltInRole]"Administrator")) { + Try { + Start-Process PowerShell.exe -ArgumentList ("-NoProfile -ExecutionPolicy Bypass -File `"{0}`"" -f $PSCommandPath) -Verb RunAs + Exit + } + Catch { + Write-Host "Failed to run as Administrator. Please rerun with elevated privileges." + Exit + } +} + +# Set window title and color scheme +$Host.UI.RawUI.WindowTitle = $myInvocation.MyCommand.Definition + " (Administrator)" +$Host.UI.RawUI.BackgroundColor = "Black" +$Host.PrivateData.ProgressBackgroundColor = "Black" +$Host.PrivateData.ProgressForegroundColor = "White" +Clear-Host + +# Center the PowerShell window +$psWindow = Get-Process -Id $pid | ForEach-Object { $_.MainWindowHandle } +Add-Type @" +using System; +using System.Runtime.InteropServices; +public class WindowCentering { + [DllImport("user32.dll", SetLastError = true)] + public static extern bool GetWindowRect(IntPtr hWnd, out RECT lpRect); + + [DllImport("user32.dll", SetLastError = true)] + public static extern bool MoveWindow(IntPtr hWnd, int X, int Y, int nWidth, int nHeight, bool bRepaint); + + [StructLayout(LayoutKind.Sequential)] + public struct RECT { + public int Left; + public int Top; + public int Right; + public int Bottom; + } + + public static void CenterWindow(IntPtr hWnd) { + RECT rect; + GetWindowRect(hWnd, out rect); + int windowWidth = rect.Right - rect.Left; + int windowHeight = rect.Bottom - rect.Top; + + int screenWidth = GetSystemMetrics(0); + int screenHeight = GetSystemMetrics(1); + + int x = (screenWidth / 2) - (windowWidth / 2); + int y = (screenHeight / 2) - (windowHeight / 2); + + MoveWindow(hWnd, x, y, windowWidth, windowHeight, true); + } + + [DllImport("user32.dll")] + public static extern int GetSystemMetrics(int nIndex); +} +"@ + +[WindowCentering]::CenterWindow($psWindow) + +# START OF MENU FUNCTIONS +$script:loop = $true + +# Header +function Show-Header { + Clear-Host + Write-Host "============================================" -ForegroundColor Cyan + Write-Host " UWScript " -ForegroundColor Yellow + Write-Host "============================================" -ForegroundColor Cyan + Write-Host "" + Write-Host "NO LIABILITY ACCEPTED, PROCEED WITH CAUTION!" -ForegroundColor Black -BackgroundColor Red + Write-Host "" +} + +# Main Menu +function Show-MainMenu { + Show-Header + Write-Host "Main Menu:" -ForegroundColor Yellow + Write-Host "1. Software & Apps" + Write-Host "2. Privacy & Security" + Write-Host "3. Windows Updates" + Write-Host "4. Optimize Registry" + Write-Host "5. Tasks & Services" + Write-Host "6. Power Settings" + Write-Host "0. Exit" + + $choice = Read-Host "Select an option (0-6)" + + switch ($choice) { + "1" { Show-SoftwareMenu } # Call the Software & Apps menu + "2" { Show-PrivacySecurityMenu } # Call the Privacy & Security menu + "3" { Show-WindowsUpdateMenu } # Call the Windows Updates menu + "4" { Show-OptimizeRegistryMenu } # Call the Optimize Registry menu + "5" { Show-TasksServicesMenu } # Call the Tasks & Services menu + "6" { Show-PowerSettingsMenu } # Call the Power Settings menu + "0" { $script:loop = $false } # Exit + default { + Write-Host "Invalid selection. Please try again." -ForegroundColor Red + Start-Sleep -Seconds 1 + } + } +} + +# Reusable Menu Function +function Show-Menu { + param ( + [string]$menuTitle, + [string[]]$options, + [hashtable]$actions, + [string]$instructions = "Select an option", + [switch]$showHeader + ) + + # Display the header if specified + if ($showHeader) { + Show-Header + } + + # Display the menu title + Write-Host "$menuTitle" -ForegroundColor Yellow + + # Display the "Back" option as "0" + Write-Host "0. Main Menu" -ForegroundColor Cyan + + # Display the options starting from 1 + for ($i = 0; $i -lt $options.Length; $i++) { + Write-Host "$($i + 1). $($options[$i])" + } + + Write-Host "" + $choice = Read-Host "$instructions" + + if ($choice -eq "0") { + return # Return to the previous menu or exit current menu + } + elseif ($actions.ContainsKey($choice)) { + # Execute the corresponding action + & $actions[$choice] + } + else { + Write-Host "Invalid choice. Try again." -ForegroundColor Red + Start-Sleep -Seconds 1 + Show-Menu -menuTitle $menuTitle -options $options -actions $actions -showHeader:$showHeader + } +} + + +# 1. Software & Apps Menu +function Show-SoftwareMenu { + Show-Menu -menuTitle "Software & Apps" ` + -options @("Install Software", "Remove Bloatware Apps") ` + -actions @{ + "1" = { Show-AppInstallMenu } + "2" = { Show-AppRemovalMenu } + } ` + -showHeader +} + +# Install Software Menu +function Show-AppInstallMenu { + Show-Menu -menuTitle "Select an app to install" ` + -options @("Microsoft Store", "Browser Menu", "UniGetUI (Software Manager)") ` + -actions @{ + "1" = { Install-Store } + "2" = { Show-BrowserInstallMenu } + "3" = { Install-AppWithWinGet -AppName "MartiCliment.UniGetUI" -FriendlyName "UniGetUI (Software Manager)" } + } ` + -showHeader +} +function Show-BrowserInstallMenu { + Show-Menu -menuTitle "Select a Browser to install" ` + -options @("Thorium Browser", "Mozilla Firefox", "Microsoft Edge", "Google Chrome", "Brave Browser") ` + -actions @{ + "1" = { Install-AppWithWinGet -AppName "Alex313031.Thorium" -FriendlyName "Thorium Browser" } + "2" = { Install-AppWithWinGet -AppName "Mozilla.Firefox" -FriendlyName "Mozilla Firefox" } + "3" = { Install-AppWithWinGet -AppName "Microsoft.Edge" -FriendlyName "Microsoft Edge" } + "4" = { Install-AppWithWinGet -AppName "Google.Chrome" -FriendlyName "Google Chrome" } + "5" = { Install-AppWithWinGet -AppName "Brave.Brave" -FriendlyName "Brave Browser" } + } ` + -showHeader +} + +# Remove Bloatware Apps Menu +function Show-AppRemovalMenu { + Show-Menu -menuTitle "Remove Windows Bloatware Apps" ` + -options @("Remove ALL Windows Apps") ` + -actions @{ + "1" = { Remove-Apps } + } ` + -showHeader +} + +# 2. Privacy & Security Menu +function Show-PrivacySecurityMenu { + Show-Menu -menuTitle "Privacy & Security" ` + -options @("Check Windows Defender Status", "Check User Account Control Status", "Apply Recommended Privacy Settings", "Apply Windows Default Privacy Settings") ` + -actions @{ + "1" = { Get-WindowsDefenderStatus } + "2" = { Get-UACStatus } + "3" = { Set-RecommendedPrivacySettings } + "4" = { Set-DefaultPrivacySettings } + } ` + -showHeader +} + +# 3. Windows Updates Menu +function Show-WindowsUpdateMenu { + Show-Menu -menuTitle "Windows Update Settings" ` + -options @("Set Recommended Update Settings", "Set Default Update Settings") ` + -actions @{ + "1" = { Set-RecommendedUpdateSettings } + "2" = { Set-DefaultUpdateSettings } + } ` + -showHeader +} + +# 4. Optimize Registry Menu +function Show-OptimizeRegistryMenu { + Show-Menu -menuTitle "Optimize Windows Registry" ` + -options @("Set Recommended Registry Settings", "Set Default Registry Settings") ` + -actions @{ + "1" = { Set-RecommendedHKLMRegistry; Set-RecommendedHKCURegistry } + "2" = { Set-DefaultHKLMRegistry; Set-DefaultHKCURegistry } + } ` + -showHeader +} + +# 5. Tasks & Services Menu +function Show-TasksServicesMenu { + Show-Menu -menuTitle "Windows Services & Scheduled Tasks" ` + -options @("Minimal Services", "Default Services", "Disable Scheduled Tasks", "Enable Scheduled Tasks") ` + -actions @{ + "1" = { Set-ServiceStartup } + "2" = { Set-DefaultServices } + "3" = { Disable-ScheduledTasks } + "4" = { Enable-ScheduledTasks } + } ` + -showHeader +} + +# 6. Power Settings Menu +function Show-PowerSettingsMenu { + Show-Menu -menuTitle "Power Settings" ` + -options @("Recommended Power Settings", "Default Power Settings") ` + -actions @{ + "1" = { Set-RecommendedPowerSettings } + "2" = { Set-DefaultPowerSettings } + } ` + -showHeader +} + +# END OF MENU FUNCTIONS + +# Define Unattended Windows Installation Variables & Functions +# Check if the marker file exists to determine if we are in the specialize phase +$markerFilePath = "C:\specialize_marker.txt" +$isSpecializePhase = Test-Path $markerFilePath +# Function to Pause scripts only when not in Specialize Phase +function Wait-IfNotSpecialize { + if (-not $isSpecializePhase) { + Pause + } +} + +# START OF COMMAND & OPERATION FUNCTIONS +# Start of Software & Apps Functions +# Install Software Functions + +# Check for internet connection +function Test-InternetConnection { + Try { + $connection = Test-Connection -ComputerName www.microsoft.com -Count 1 -ErrorAction Stop + if ($connection) { + return $true + } + } + Catch { + return $false + } +} + +# Install the Microsoft Store +function Install-Store { + Clear-Host + # Check for internet connection + if (-not (Test-InternetConnection)) { + Write-Host "No internet connection detected. Please connect to the internet and try again." -BackgroundColor Red + Wait-IfNotSpecialize + return + } + + # If internet connection is available, continue with installation + Show-Header + Write-Host "Installing Microsoft Store . . ." + Try { + wsreset -i -ErrorAction SilentlyContinue + Show-Header + Write-Host "Microsoft Store is being installed silently in the background." -BackgroundColor Green + Write-Host "Please allow a few minutes for it to install and use it to reinstall the necessary apps manually." + } + Catch { + Show-Header + Write-Host "An error occurred while trying to install the Microsoft Store. Please try again later." -BackgroundColor Red + } + Wait-IfNotSpecialize +} + +# Function to check if WinGet is installed, install if necessary, and check for updates +function Test-WinGetStatus { + # Helper function to check if WinGet is installed + function Test-WinGetInstalled { + Try { + winget --version | Out-Null + return $true + } + Catch { + return $false + } + } + + # Helper function to install required dependencies from GitHub + function Install-WinGetDependencies { + Show-Header + Write-Host "Installing required dependencies, please wait . . ." -ForegroundColor Yellow + + # Define the URLs and paths for dependencies + $dependencyUrls = @( + @{Url = "https://github.com/microsoft/microsoft-ui-xaml/releases/download/v2.8.6/Microsoft.UI.Xaml.2.8.x64.appx"; Path = "$env:TEMP\Microsoft.UI.Xaml.2.8.appx" }, + @{Url = "https://aka.ms/Microsoft.VCLibs.x64.14.00.Desktop.appx"; Path = "$env:TEMP\Microsoft.VCLibs.140.00.UWPDesktop.x64.appx" } + ) + + # Download and install each dependency + foreach ($dependency in $dependencyUrls) { + Try { + Start-BitsTransfer -Source $dependency.Url -Destination $dependency.Path -TransferType Download -ErrorAction Stop | Out-Null + Show-Header + Try { + Add-AppxPackage -Path $dependency.Path + Show-Header + } + Catch { + Write-Host "Failed to install $($dependency.Path). Please install it manually from the URL: $($dependency.Url)" -ForegroundColor Red + Wait-IfNotSpecialize + Exit + } + } + Catch { + Write-Host "Failed to download $($dependency.Path). Check your internet connection and try again." -ForegroundColor Red + Wait-IfNotSpecialize + Exit + } + } + } + + # Function to install WinGet from GitHub if not found + function Install-WinGet { + Show-Header + Write-Host "WinGet is not installed. Downloading the latest version from GitHub..." -ForegroundColor Yellow + + # Ensure internet connection is active + if (-not (Test-InternetConnection)) { + Show-Header + Write-Host "No internet connection detected. Please connect to the internet and try again." -ForegroundColor Red + Wait-IfNotSpecialize + Exit + } + + # Install the required dependencies + Show-Header + Install-WinGetDependencies + + # Define GitHub URL for WinGet releases + $wingetDownloadUrl = "https://github.com/microsoft/winget-cli/releases/latest/download/Microsoft.DesktopAppInstaller_8wekyb3d8bbwe.msixbundle" + $wingetInstallerPath = "$env:TEMP\WinGetInstaller.msixbundle" + + Try { + Show-Header + Write-Host "Starting download of WinGet installer using BITS..." + + Start-BitsTransfer -Source $wingetDownloadUrl -Destination $wingetInstallerPath -TransferType Download -ErrorAction Stop | Out-Null + + # Confirm the file was downloaded successfully + if (-not (Test-Path $wingetInstallerPath) -or (Get-Item $wingetInstallerPath).Length -eq 0) { + Show-Header + Write-Host "The download failed or the file is empty. Please try downloading manually from: $wingetDownloadUrl" -ForegroundColor Red + Wait-IfNotSpecialize + Exit + } + + Show-Header + Write-Host "WinGet installer downloaded successfully." + + # Install the downloaded WinGet installer + Try { + Add-AppxPackage -Path $wingetInstallerPath + Show-Header + Write-Host "WinGet installed successfully." -ForegroundColor Green + } + Catch { + Show-Header + Write-Host "Failed to install WinGet. Please install it manually from the GitHub page: https://github.com/microsoft/winget-cli/releases" -ForegroundColor Red + Wait-IfNotSpecialize + Exit + } + } + Catch { + Show-Header + Write-Host "Failed to download the WinGet installer. Check your internet connection and try again." -ForegroundColor Red + Wait-IfNotSpecialize + Exit + } + } + + # Check if WinGet is installed, if not, install it + if (-not (Test-WinGetInstalled)) { + Install-WinGet + } + + # Once installed, check for updates + Show-Header + Write-Host "Checking for WinGet updates..." + Try { + $updateCheck = winget upgrade --id Microsoft.WinGet -e --accept-package-agreements --accept-source-agreements 2>&1 + if ($updateCheck -match "No installed package found" -or $updateCheck -match "No applicable upgrade found") { + Show-Header + Write-Host "WinGet is already up-to-date." -ForegroundColor Green + } + elseif ($updateCheck -match "An applicable upgrade is available") { + # Perform the upgrade if available + Show-Header + Write-Host "An update is available for WinGet. Upgrading now..." + Try { + winget upgrade --id Microsoft.WinGet -e --accept-package-agreements --accept-source-agreements | Out-Null + if ($LASTEXITCODE -eq 0) { + Show-Header + Write-Host "WinGet updated successfully." -ForegroundColor Green + } + else { + Show-Header + Write-Host "Failed to update WinGet. Proceeding with app installation..." -ForegroundColor Yellow + } + } + Catch { + Show-Header + Write-Host "An error occurred while upgrading WinGet. Proceeding with app installation..." -ForegroundColor Yellow + } + } + else { + Show-Header + Write-Host "Could not determine WinGet update status. Proceeding with app installation..." -ForegroundColor Yellow + } + } + Catch { + Show-Header + Write-Host "An error occurred while checking for WinGet updates. Proceeding with app installation..." -ForegroundColor Yellow + } +} + +# Function to install an app using WinGet +function Install-AppWithWinGet { + param ( + [string]$AppName, + [string]$FriendlyName + ) + + Show-Header + + # Check for internet connection + if (-not (Test-InternetConnection)) { + Show-Header + Write-Host "No internet connection detected. Please connect to the internet and try again." -BackgroundColor Red + Wait-IfNotSpecialize + return + } + + # Update WinGet to ensure it's the latest version + Show-Header + Test-WinGetStatus + + # Continue with app installation + Show-Header + Write-Host "Installing $FriendlyName using WinGet . . ." + Try { + # Attempt to install or upgrade the app using WinGet + $installOutput = winget install --id $AppName -e --silent --accept-package-agreements --accept-source-agreements 2>&1 + + if ($installOutput -match "Found an existing package already installed" -and $installOutput -match "No available upgrade found") { + Write-Host "$FriendlyName is already installed and up-to-date." -BackgroundColor Green + } + elseif ($installOutput -match "Successfully installed") { + Show-Header + Write-Host "$FriendlyName installation completed successfully." -BackgroundColor Green + } + elseif ($installOutput -match "No package found") { + Show-Header + Write-Host "Failed to install $FriendlyName using ID '$AppName'. Package not found or check your internet connection." -BackgroundColor Red + } + else { + Show-Header + Write-Host "An issue occurred during the installation of $FriendlyName. Please check the app ID or try again later." -BackgroundColor Red + } + } + Catch { + Show-Header + Write-Host "An unexpected error occurred while installing $FriendlyName." -BackgroundColor Red + } + Wait-IfNotSpecialize +} + +# Remove Bloatware Apps Functions +# Define Packages +$appxPackages = @( + 'Microsoft.Microsoft3DViewer', 'Microsoft.BingSearch', 'Microsoft.WindowsCamera', 'Clipchamp.Clipchamp', + 'Microsoft.WindowsAlarms', 'Microsoft.549981C3F5F10', 'Microsoft.Windows.DevHome', + 'MicrosoftCorporationII.MicrosoftFamily', 'Microsoft.WindowsFeedbackHub', 'Microsoft.GetHelp', + 'microsoft.windowscommunicationsapps', 'Microsoft.WindowsMaps', 'Microsoft.ZuneVideo', + 'Microsoft.BingNews', 'Microsoft.MicrosoftOfficeHub', 'Microsoft.Office.OneNote', + 'Microsoft.OutlookForWindows', 'Microsoft.People', 'Microsoft.Windows.Photos', + 'Microsoft.PowerAutomateDesktop', 'MicrosoftCorporationII.QuickAssist', 'Microsoft.SkypeApp', + 'Microsoft.MicrosoftSolitaireCollection', 'Microsoft.MicrosoftStickyNotes', 'MSTeams', + 'Microsoft.Getstarted', 'Microsoft.Todos', 'Microsoft.WindowsSoundRecorder', 'Microsoft.BingWeather', + 'Microsoft.ZuneMusic', 'Microsoft.WindowsTerminal', 'Microsoft.Xbox.TCUI', 'Microsoft.XboxApp', + 'Microsoft.XboxGameOverlay', 'Microsoft.XboxGamingOverlay', 'Microsoft.XboxIdentityProvider', + 'Microsoft.XboxSpeechToTextOverlay', 'Microsoft.GamingApp', 'Microsoft.YourPhone', 'Microsoft.OneDrive', + 'Microsoft.549981C3F5F10', 'Microsoft.MixedReality.Portal', 'Microsoft.ScreenSketch' + 'Microsoft.Windows.Ai.Copilot.Provider', 'Microsoft.Copilot', 'Microsoft.Copilot_8wekyb3d8bbwe', + 'Microsoft.WindowsMeetNow', 'Microsoft.WindowsStore', 'Microsoft.Paint', 'Microsoft.MSPaint' +) + +# Define Windows Capabilities +$capabilities = @( + 'Browser.InternetExplorer', 'MathRecognizer', 'OpenSSH.Client', + 'Microsoft.Windows.PowerShell.ISE', 'App.Support.QuickAssist', 'App.StepsRecorder', + 'Media.WindowsMediaPlayer', 'Microsoft.Windows.WordPad', 'Microsoft.Windows.MSPaint' +) + +# Apply registry mods to prevent reinstallation and disable features +function Set-AppsRegistry { + $MultilineComment = @" +Windows Registry Editor Version 5.00 + +; --Application and Feature Restrictions-- + +; Disable Windows Copilot system-wide +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsCopilot] +"TurnOffWindowsCopilot"=dword:00000001 + +; Prevents Dev Home Installation +[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsUpdate\Orchestrator\UScheduler_Oobe\DevHomeUpdate] + +; Prevents New Outlook for Windows Installation +[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsUpdate\Orchestrator\UScheduler_Oobe\OutlookUpdate] + +; Prevents Chat Auto Installation +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Communications] +"ConfigureChatAutoInstall"=dword:00000000 + +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Chat] +"ChatIcon"=dword:00000003 + +; Disables Cortana +[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Windows Search] +"AllowCortana"=dword:00000000 + +; Disables OneDrive Automatic Backups of Important Folders (Documents, Pictures etc.) +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\OneDrive] +"KFMBlockOptIn"=dword:00000001 +"@ + Set-Content -Path "$env:TEMP\Windows_Apps.reg" -Value $MultilineComment -Force -ErrorAction SilentlyContinue + Regedit.exe /S "$env:TEMP\Windows_Apps.reg" -Force -ErrorAction SilentlyContinue +} + +# Removes OneDrive during Windows Installation +function Remove-OneDrive { + Remove-Item "C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk" -ErrorAction SilentlyContinue + Remove-Item "C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.exe" -ErrorAction SilentlyContinue + Remove-Item "C:\Windows\System32\OneDriveSetup.exe" -ErrorAction SilentlyContinue + Remove-Item "C:\Windows\SysWOW64\OneDriveSetup.exe" -ErrorAction SilentlyContinue +} + +# Uninstalls OneDrive in existing Windows Installation +function Uninstall-OneDrive { + # stop onedrive running + Stop-Process -Force -Name OneDrive -ErrorAction SilentlyContinue | Out-Null + # uninstall onedrive w10 + cmd /c "C:\Windows\SysWOW64\OneDriveSetup.exe -uninstall >nul 2>&1" + # clean onedrive w10 + Get-ScheduledTask | Where-Object { $_.Taskname -match 'OneDrive' } | Unregister-ScheduledTask -Confirm:$false + # uninstall onedrive w11 + cmd /c "C:\Windows\System32\OneDriveSetup.exe -uninstall >nul 2>&1" +} + +# Disables Recall +function Disable-Recall { + Dism /Online /Disable-Feature /Featurename:Recall /NoRestart | Out-Null +} + +# Remove All Bloatware (UWP) Apps from Windows. +function Remove-Apps { + Show-Header + Write-Host "Are You Sure You Want to Remove ALL Windows Apps? (Y/N)" -ForegroundColor Black -Backgroundcolor Yellow + Write-Host "Includes: OneDrive, Teams, Outlook for Windows and more . . ." -ForegroundColor Black -Backgroundcolor Yellow + Write-Host "(CAUTION! Can't be Undone!)" -BackgroundColor Red + $confirmation = Read-Host "Enter your choice" + + if ($confirmation -eq 'Y' -or $confirmation -eq 'y') { + Show-Header + Write-Host "Removing Pre-installed Apps and Features. Please wait . . ." + # Bloatware Apps + Get-AppxPackage -AllUsers | + Where-Object { $appxPackages -contains $_.Name } | + Remove-AppxPackage -AllUsers -ErrorAction SilentlyContinue | Out-Null + # Legacy Windows Features & Apps + Get-WindowsCapability -Online | + Where-Object { $capabilities -contains ($_.Name -split '~')[0] } | + Remove-WindowsCapability -Online -ErrorAction SilentlyContinue | Out-Null + # Calls specified functions + Show-Header + Set-AppsRegistry + Uninstall-OneDrive + Show-Header + Disable-Recall + Show-Header + Write-Host "Pre-installed Apps and Features removed successfully." -BackgroundColor Green + Wait-IfNotSpecialize + } + else { + Show-MainMenu + } +} +# End of Software & Apps Functions + +# Start of Privacy & Security Functions +# Check if Windows Defender is Enabled or Disabled +function Get-WindowsDefenderStatus { + Clear-Host + $defenderKey = "HKLM:\SYSTEM\CurrentControlSet\Services\Sense" + $defenderStatus = (Get-ItemProperty -Path $defenderKey -Name Start).Start + + if ($defenderStatus -eq 4) { + Show-Header + Write-Host "Windows Defender is permanently disabled." -ForegroundColor Red + Write-Host "Press 1 to enable Windows Defender." + Write-Host "Note: Enabling Defender using this script means it cannot be permanently disabled again without reinstalling Windows with the UnattendedWinstall XML file." + + $choice = Read-Host "Enter your choice (1 to enable, any other key to cancel)" + + if ($choice -eq '1') { + $confirm = Read-Host "Are you sure you want to enable Windows Defender? (y/n)" + if ($confirm -eq 'y') { + Enable-WindowsDefender + } + else { + Show-MainMenu + } + } + else { + Show-MainMenu + } + } + else { + Show-Header + Write-Host "Windows Defender is already enabled. No action is needed." -ForegroundColor Green + Write-Host "Press any key to go back to the main menu." + Read-Host + Show-MainMenu + } +} + + +# Function to Enable Windows Defender +function Enable-WindowsDefender { + $MultilineComment = @" +Windows Registry Editor Version 5.00 + +; Enables Windows Defender to start in Windows Security +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sense] +"Start"=dword:00000003 + +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WdBoot] +"Start"=dword:00000000 + +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WdFilter] +"Start"=dword:00000000 + +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WdNisDrv] +"Start"=dword:00000003 + +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WdNisSvc] +"Start"=dword:00000003 + +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinDefend] +"Start"=dword:00000002 +"@ + Set-Content -Path "$env:TEMP\Enable_Windows_Defender.reg" -Value $MultilineComment -Force + $path = "$env:TEMP\Enable_Windows_Defender.reg" + (Get-Content $path) -replace "\?", "$" | Out-File $path + Regedit.exe /S "$env:TEMP\Enable_Windows_Defender.reg" + Write-Host "Windows Defender has been enabled." -ForegroundColor Green + Write-Host "Press any key to return to the main menu." + Read-Host +} + +# Check if User Account Control is Enabled or Disabled +function Get-UACStatus { + Clear-Host + $uacKey = "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" + + # Get the EnableLUA and ConsentPromptBehaviorAdmin values + $uacStatus = (Get-ItemProperty -Path $uacKey -Name EnableLUA).EnableLUA + $promptBehavior = (Get-ItemProperty -Path $uacKey -Name ConsentPromptBehaviorAdmin).ConsentPromptBehaviorAdmin + + # Determine if UAC is disabled based on both keys + if ($uacStatus -eq 0 -or $promptBehavior -eq 0) { + Show-Header + Write-Host "User Account Control (UAC) is currently disabled." -ForegroundColor Red + Write-Host "1. Enable UAC" + } + else { + Show-Header + Write-Host "User Account Control (UAC) is currently enabled." -ForegroundColor Green + Write-Host "1. Disable UAC" + } + Write-Host "0. Main Menu" + $choice = Read-Host "Select an option" + switch ($choice) { + 1 { + $confirm = Read-Host "Are you sure you want to change UAC status? (y/n)" + if ($confirm -eq 'y') { + if ($uacStatus -eq 0) { + # Enable UAC and set the default prompt behavior + cmd.exe /c reg.exe add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v EnableLUA /t REG_DWORD /d 1 /f 2>&1 | Out-Null + cmd.exe /c reg.exe add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v ConsentPromptBehaviorAdmin /t REG_DWORD /d 2 /f 2>&1 | Out-Null + Write-Host "UAC has been enabled successfully." -ForegroundColor Green + } + else { + # Disable UAC and default prompt behavior + cmd.exe /c reg.exe add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v EnableLUA /t REG_DWORD /d 0 /f 2>&1 | Out-Null + cmd.exe /c reg.exe add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v ConsentPromptBehaviorAdmin /t REG_DWORD /d 0 /f 2>&1 | Out-Null + Write-Host "UAC has been disabled successfully." -ForegroundColor Green + } + Write-Host "Press any key to continue." + Read-Host + Get-UACStatus + } + else { + Get-UACStatus + } + } + 0 { Return } + default { Write-Host "Invalid choice. Try again."; Get-UACStatus } + } +} + + +# Function to Apply the Recommended Privacy Settings +function Set-RecommendedPrivacySettings { + + if (-not $isSpecializePhase) { + Show-Header + Write-Host "Applying Recommended Privacy Settings . . ." + } + + $MultilineComment = @" +Windows Registry Editor Version 5.00 + +; --Privacy and Security Settings-- + +; Disables Activity History +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System] +"EnableActivityFeed"=dword:00000000 +"PublishUserActivities"=dword:00000000 +"UploadUserActivities"=dword:00000000 + +; Disables Location Tracking +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\location] +"Value"="Deny" + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Sensor\Overrides\{BFA794E4-F964-4FDB-90F6-51056BFE4B44}] +"SensorPermissionState"=dword:00000000 + +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lfsvc\Service\Configuration] +"Status"=dword:00000000 + +[HKEY_LOCAL_MACHINE\SYSTEM\Maps] +"AutoUpdateEnabled"=dword:00000000 + +; Disables Telemetry +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\DataCollection] +"AllowTelemetry"=dword:00000000 + +; Disables Telemetry and Feedback Notifications +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection] +"AllowTelemetry"=dword:00000000 +"DoNotShowFeedbackNotifications"=dword:00000001 + +; Disables Windows Ink Workspace +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsInkWorkspace] +"AllowWindowsInkWorkspace"=dword:00000000 + +; Disables the Advertising ID for All Users +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AdvertisingInfo] +"DisabledByGroupPolicy"=dword:00000001 + +; Disable Account Info +[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\userAccountInformation] +"Value"="Deny" +"@ + # Write the registry changes to a file and silently import it using regedit + Set-Content -Path "$env:TEMP\Recommended_Privacy_Settings.reg" -Value $MultilineComment -Force + Start-Process -FilePath "regedit.exe" -ArgumentList "/S `"$env:TEMP\Recommended_Privacy_Settings.reg`"" -NoNewWindow -Wait + + if (-not $isSpecializePhase) { + Show-Header + Write-Host "Recommended Privacy Settings Applied." -ForegroundColor Green + Wait-IfNotSpecialize + } +} + + +# Function to Apply the Default Privacy Settings +function Set-DefaultPrivacySettings { + + Show-Header + Write-Host "Applying Default Privacy Settings . . ." + + $MultilineComment = @" +Windows Registry Editor Version 5.00 + +; --Revert Privacy and Security Settings-- + +; Enables Activity History +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System] +"EnableActivityFeed"=- +"PublishUserActivities"=- +"UploadUserActivities"=- + +; Enables Location Tracking +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\location] +"Value"=- + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Sensor\Overrides\{BFA794E4-F964-4FDB-90F6-51056BFE4B44}] +"SensorPermissionState"=- + +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lfsvc\Service\Configuration] +"Status"=- + +[HKEY_LOCAL_MACHINE\SYSTEM\Maps] +"AutoUpdateEnabled"=dword:00000001 + +; Enables Telemetry to the default level +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\DataCollection] +"AllowTelemetry"=- + +; Enables Telemetry and Feedback Notifications +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection] +"AllowTelemetry"=- +"DoNotShowFeedbackNotifications"=- + +; Enables Windows Ink Workspace +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsInkWorkspace] +"AllowWindowsInkWorkspace"=- + +; Enables the Advertising ID for All Users +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AdvertisingInfo] +"DisabledByGroupPolicy"=- + +; Allow Account info +[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\userAccountInformation] +"Value"="Allow" +"@ + Set-Content -Path "$env:TEMP\Default_Privacy_Settings.reg" -Value $MultilineComment -Force + Regedit.exe /S "$env:TEMP\Default_Privacy_Settings.reg" + Show-Header + Write-Host "Default Privacy Settings Applied." -ForegroundColor Green + Wait-IfNotSpecialize +} + +# End of Privacy and Security Functions + +# Start of Windows Update Functions +function Set-RecommendedUpdateSettings { + + if (-not $isSpecializePhase) { + Show-Header + Write-Host "Applying Recommended Windows Update Settings . . ." + } + + $MultilineComment = @" +Windows Registry Editor Version 5.00 + +; --Windows Update Settings-- + +; Disable Automatic Updates (Only Check for Updates Manually) +; Notify Before Downloading and Installing Updates +; Enable Notifications for Security Updates Only (Do Not Auto-Download) +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU] +"NoAutoUpdate"=dword:00000001 +"AUOptions"=dword:00000002 +"AutoInstallMinorUpdates"=dword:00000000 + +; Prevent Automatic Upgrade from Windows 10 22H2 to Windows 11 (Manual Upgrade Still Allowed) +; Delay Feature and Quality updates for 1 year from install. +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate] +"TargetReleaseVersion"=dword:00000001 +"TargetReleaseVersionInfo"="22H2" +"ProductVersion"="Windows 10" +"DeferFeatureUpdates"=dword:00000001 +"DeferFeatureUpdatesPeriodInDays"=dword:0000016d +"DeferQualityUpdates"=dword:00000001 +"DeferQualityUpdatesPeriodInDays"=dword:0000016d + +; Disables allowing downloads from other PCs (Delivery Optimization) +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization] +"DODownloadMode"=dword:00000000 +"@ + Set-Content -Path "$env:TEMP\Recommended_Windows_Update_Settings.reg" -Value $MultilineComment -Force + # import reg file + Regedit.exe /S "$env:TEMP\Recommended_Windows_Update_Settings.reg" + + if (-not $isSpecializePhase) { + Show-Header + Write-Host "Recommended Windows Update Settings Applied." -ForegroundColor Green + Wait-IfNotSpecialize + } +} + +function Set-DefaultUpdateSettings { + + Show-Header + Write-Host "Applying Default Windows Update Settings . . ." + + $MultilineComment = @" +Windows Registry Editor Version 5.00 + +; --Set Default Windows Update Settings-- + +; Enable Automatic Updates (Default: Automatic Download and Install) +; Set Updates to Default Behavior (Automatic Download and Install) +; Allow Automatic Installation of Minor Updates (Default: Allowed) +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU] +"NoAutoUpdate"=- +"AUOptions"=- +"AutoInstallMinorUpdates"=- + +; --Revert Windows 10 22H2 Auto Upgrade to 11 Block to Default-- +; Allow Feature and Quality updates +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate] +"TargetReleaseVersion"=- +"TargetReleaseVersionInfo"=- +"ProductVersion"=- +"DeferFeatureUpdates"=- +"DeferFeatureUpdatesPeriodInDays"=- +"DeferQualityUpdates"=dword:- +"DeferQualityUpdatesPeriodInDays"=- + +; Reverts Delivery Optimization settings to allow downloads from other PCs +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization] +"DODownloadMode"=- +"@ + Set-Content -Path "$env:TEMP\Default_Windows_Update_Settings.reg" -Value $MultilineComment -Force + Regedit.exe /S "$env:TEMP\Default_Windows_Update_Settings.reg" + + Show-Header + Write-Host "Default Windows Update Settings Applied." -ForegroundColor Green + Wait-IfNotSpecialize +} +# End of Windows Update Functions + +# Start of Registry Optimizations +function Set-RecommendedHKLMRegistry { + # Create Registry Keys + $MultilineComment = @" +Windows Registry Editor Version 5.00 + +; Adds "Take Ownership" to the Right Click Context Menu for All Users + +[-HKEY_CLASSES_ROOT\*\shell\TakeOwnership] +[-HKEY_CLASSES_ROOT\*\shell\runas] + +[HKEY_CLASSES_ROOT\*\shell\TakeOwnership] +@="Take Ownership" +"Extended"=- +"HasLUAShield"="" +"NoWorkingDirectory"="" +"NeverDefault"="" + +[HKEY_CLASSES_ROOT\*\shell\TakeOwnership\command] +@="powershell -windowstyle hidden -command \"Start-Process cmd -ArgumentList '/c takeown /f \\\"%1\\\" && icacls \\\"%1\\\" /grant *S-1-3-4:F /t /c /l & pause' -Verb runAs\"" +"IsolatedCommand"= "powershell -windowstyle hidden -command \"Start-Process cmd -ArgumentList '/c takeown /f \\\"%1\\\" && icacls \\\"%1\\\" /grant *S-1-3-4:F /t /c /l & pause' -Verb runAs\"" + +[HKEY_CLASSES_ROOT\Directory\shell\TakeOwnership] +@="Take Ownership" +"AppliesTo"="NOT (System.ItemPathDisplay:=\"C:\\Users\" OR System.ItemPathDisplay:=\"C:\\ProgramData\" OR System.ItemPathDisplay:=\"C:\\Windows\" OR System.ItemPathDisplay:=\"C:\\Windows\\System32\" OR System.ItemPathDisplay:=\"C:\\Program Files\" OR System.ItemPathDisplay:=\"C:\\Program Files (x86)\")" +"Extended"=- +"HasLUAShield"="" +"NoWorkingDirectory"="" +"Position"="middle" + +[HKEY_CLASSES_ROOT\Directory\shell\TakeOwnership\command] +@="powershell -windowstyle hidden -command \"$Y = ($null | choice).Substring(1,1); Start-Process cmd -ArgumentList ('/c takeown /f \\\"%1\\\" /r /d ' + $Y + ' && icacls \\\"%1\\\" /grant *S-1-3-4:F /t /c /l /q & pause') -Verb runAs\"" +"IsolatedCommand"="powershell -windowstyle hidden -command \"$Y = ($null | choice).Substring(1,1); Start-Process cmd -ArgumentList ('/c takeown /f \\\"%1\\\" /r /d ' + $Y + ' && icacls \\\"%1\\\" /grant *S-1-3-4:F /t /c /l /q & pause') -Verb runAs\"" + +[HKEY_CLASSES_ROOT\Drive\shell\runas] +@="Take Ownership" +"Extended"=- +"HasLUAShield"="" +"NoWorkingDirectory"="" +"Position"="middle" +"AppliesTo"="NOT (System.ItemPathDisplay:=\"C:\\\")" + +[HKEY_CLASSES_ROOT\Drive\shell\runas\command] +@="cmd.exe /c takeown /f \"%1\\\" /r /d y && icacls \"%1\\\" /grant *S-1-3-4:F /t /c & Pause" +"IsolatedCommand"="cmd.exe /c takeown /f \"%1\\\" /r /d y && icacls \"%1\\\" /grant *S-1-3-4:F /t /c & Pause" + +; --Application and Feature Restrictions-- + +; Disable Windows Copilot system-wide +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsCopilot] +"TurnOffWindowsCopilot"=dword:00000001 + +; Prevents Dev Home Installation +[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsUpdate\Orchestrator\UScheduler_Oobe\DevHomeUpdate] + +; Prevents New Outlook for Windows Installation +[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsUpdate\Orchestrator\UScheduler_Oobe\OutlookUpdate] + +; Prevents Chat Auto Installation and Removes Chat Icon +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Communications] +"ConfigureChatAutoInstall"=dword:00000000 + +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Chat] +"ChatIcon"=dword:00000003 + +; Disables Bitlocker Auto Encryption on Windows 11 24H2 and Onwards +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\BitLocker] +"PreventDeviceEncryption"=dword:00000001 + +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\EnhancedStorageDevices] +"TCGSecurityActivationDisabled"=dword:00000001 + +; Disables Cortana +[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Windows Search] +"AllowCortana"=dword:00000000 + +; Set Registry Keys to Disable Wifi-Sense +[HKEY_LOCAL_MACHINE\Software\Microsoft\PolicyManager\default\WiFi\AllowWiFiHotSpotReporting] +"Value"=dword:00000000 + +[HKEY_LOCAL_MACHINE\Software\Microsoft\PolicyManager\default\WiFi\AllowAutoConnectToWiFiSenseHotspots] +"Value"=dword:00000000 + +; Disable Tablet Mode +; Always go to desktop mode on sign-in +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ImmersiveShell] +"TabletMode"=dword:00000000 +"SignInMode"=dword:00000001 + +; Disable Xbox GameDVR +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\GameDVR] +"AllowGameDVR"=dword:00000000 + +; Disables OneDrive Automatic Backups of Important Folders (Documents, Pictures etc.) +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\OneDrive] +"KFMBlockOptIn"=dword:00000001 + +; Disables the "Push To Install" feature in Windows +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\PushToInstall] +"DisablePushToInstall"=dword:00000001 + +; Disables Windows Consumer Features Like App Promotions etc. +; Disables Consumer Account State Content +; Disables Cloud Optimized Content +[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CloudContent] +"DisableWindowsConsumerFeatures"=dword:00000000 +"DisableConsumerAccountStateContent"=dword:00000001 +"DisableCloudOptimizedContent"=dword:00000001 + +; Blocks the "Allow my organization to manage my device" and "No, sign in to this app only" pop-up message +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WorkplaceJoin] +"BlockAADWorkplaceJoin"=dword:00000001 + +; --Start Menu Customization-- +; Removes All Pinned Apps from the Start Menu to Clean it Up +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\current\device\Start] +"ConfigureStartPins"="{ \"pinnedList\": [] }" +"ConfigureStartPins_ProviderSet"=dword:00000001 +"ConfigureStartPins_WinningProvider"="B5292708-1619-419B-9923-E5D9F3925E71" + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\providers\B5292708-1619-419B-9923-E5D9F3925E71\default\Device\Start] +"ConfigureStartPins"="{ \"pinnedList\": [] }" +"ConfigureStartPins_LastWrite"=dword:00000001 + +; --File System Settings-- +; Enable Long File Paths with Up to 32,767 Characters +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\FileSystem] +"LongPathsEnabled"=dword:00000001 + +; --Memory Management-- +; Controls whether the memory page file is cleared at shutdown (0 means it will not be cleared, speeding up shutdown) +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management] +"ClearPageFileAtShutdown"=dword:00000000 + +; --Multimedia and Gaming Performance-- +; Gives Multimedia Applications like Games and Video Editing a Higher Priority +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Multimedia\SystemProfile] +"SystemResponsiveness"=dword:00000000 +"NetworkThrottlingIndex"=dword:0000000a + +; Gives Graphics Cards a Higher Priority for Gaming +; Gives the CPU a Higher Priority for Gaming +; Gives Games a higher priority in the system's scheduling +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Multimedia\SystemProfile\Tasks\Games] +"GPU Priority"=dword:00000008 +"Priority"=dword:00000006 +"Scheduling Category"="High" + +; disable startup sound +[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\BootAnimation] +"DisableStartupSound"=dword:00000001 + +[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\EditionOverrides] +"UserSetting_DisableStartupSound"=dword:00000001 + +; disable device installation settings +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Device Metadata] +"PreventDeviceMetadataFromNetwork"=dword:00000001 + +; NETWORK AND INTERNET +; disable allow other network users to control or disable the shared internet connection +[HKEY_LOCAL_MACHINE\System\ControlSet001\Control\Network\SharedAccessConnection] +"EnableControl"=dword:00000000 + +; SYSTEM AND SECURITY +; adjust for best performance of programs +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\PriorityControl] +"Win32PrioritySeparation"=dword:00000026 + +; disable remote assistance +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Remote Assistance] +"fAllowToGetHelp"=dword:00000000 + +; TROUBLESHOOTING +; disable automatic maintenance +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Maintenance] +"MaintenanceDisabled"=dword:00000001 + +; SECURITY AND MAINTENANCE +; disable report problems +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting] +"Disabled"=dword:00000001 + +; ACCOUNTS +; disable use my sign in info after restart +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] +"DisableAutomaticRestartSignOn"=dword:00000001 + +; APPS +; disable archive apps +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Appx] +"AllowAutomaticAppArchiving"=dword:00000000 + +; PERSONALIZATION +; Hides the Meet Now Button on the Taskbar +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] +"HideSCAMeetNow"=dword:00000001 +"NoStartMenuMFUprogramsList"=- +"NoInstrumentation"=- + +; remove windows widgets from taskbar +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Dsh] +"AllowNewsAndInterests"=dword:00000000 + +; remove news and interests from Taskbar +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Feeds] +"EnableFeeds"=dword:00000000 + +; SYSTEM +; turn on hardware accelerated gpu scheduling +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\GraphicsDrivers] +"HwSchMode"=dword:00000002 + +; disable storage sense +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\StorageSense] +"AllowStorageSenseGlobal"=dword:00000000 + +; --OTHER-- +; Disable update Microsoft Store apps automatically +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsStore] +"AutoDownload"=dword:00000002 + +; EDGE +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge] +"StartupBoostEnabled"=dword:00000000 +"HardwareAccelerationModeEnabled"=dword:00000000 +"BackgroundModeEnabled"=dword:00000000 + +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MicrosoftEdgeElevationService] +"Start"=dword:00000004 + +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\edgeupdate] +"Start"=dword:00000004 + +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\edgeupdatem] +"Start"=dword:00000004 + +; CHROME +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome] +"StartupBoostEnabled"=dword:00000000 +"HardwareAccelerationModeEnabled"=dword:00000000 +"BackgroundModeEnabled"=dword:00000000 +"HighEfficiencyModeEnabled"=dword:00000001 + +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\GoogleChromeElevationService] +"Start"=dword:00000004 + +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gupdate] +"Start"=dword:00000004 + +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gupdatem] +"Start"=dword:00000004 + +; UWP APPS +; disable background apps +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy] +"LetAppsRunInBackground"=dword:00000002 + +; disable widgets +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\NewsAndInterests\AllowNewsAndInterests] +"value"=dword:00000000 + +; NVIDIA +; enable old nvidia sharpening +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nvlddmkm\FTS] +"EnableGR535"=dword:00000000 + +; OTHER +; remove 3d objects +[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{0DB7E03F-FC29-4DC6-9020-FF41B59E513A}] +[-HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{0DB7E03F-FC29-4DC6-9020-FF41B59E513A}] + +; Remove Home Folder +[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace\{f874310e-b6b7-47dc-bc84-b9e6b38f5903}] + +[HKEY_USERS\.DEFAULT\Control Panel\Mouse] +"MouseSpeed"="0" +"MouseThreshold1"="0" +"MouseThreshold2"="0" +"@ + Set-Content -Path "$env:TEMP\Optimize_LocalMachine_Registry.reg" -Value $MultilineComment -Force + # edit reg file + $path = "$env:TEMP\Optimize_LocalMachine_Registry.reg" + (Get-Content $path) -replace "\?", "$" | Out-File $path + # import reg file + Regedit.exe /S "$env:TEMP\Optimize_LocalMachine_Registry.reg" + Show-Header + Write-Host "Recommended Local Machine Registry Settings Applied." -ForegroundColor Green + Wait-IfNotSpecialize +} + +function Set-DefaultHKLMRegistry { + # create reg file + $MultilineComment = @" +Windows Registry Editor Version 5.00 + +; --Revert Application and Feature Restrictions-- + +; Allows Dev Home Installation +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsUpdate\Orchestrator\UScheduler_Oobe\DevHomeUpdate] +@="" + +; Allows New Outlook for Windows Installation +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsUpdate\Orchestrator\UScheduler_Oobe\OutlookUpdate] +@="" + +; Reverts Chat Auto Installation and Restores Chat Icon +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Communications] +"ConfigureChatAutoInstall"=dword:00000001 + +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Chat] +"ChatIcon"=dword:00000001 + +; Enables News and Interests +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Dsh] +"AllowNewsAndInterests"=- + +; Enables BitLocker Auto Encryption on Windows 11 24H2 and Onwards +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\BitLocker] +"PreventDeviceEncryption"=- + +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\EnhancedStorageDevices] +"TCGSecurityActivationDisabled"=- + +; Enables Cortana +[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Windows Search] +"AllowCortana"=- + +; Shows the Meet Now Button on the Taskbar +; Shows Recently Added Apps in Start Menu +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] +"HideSCAMeetNow"=- + +; Re-enables WiFi-Sense +[HKEY_LOCAL_MACHINE\Software\Microsoft\PolicyManager\default\WiFi\AllowWiFiHotSpotReporting] +"Value"=dword:00000001 + +[HKEY_LOCAL_MACHINE\Software\Microsoft\PolicyManager\default\WiFi\AllowAutoConnectToWiFiSenseHotspots] +"Value"=dword:00000001 + +; Enables Tablet Mode +; Default Sign-In Mode +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ImmersiveShell] +"TabletMode"=dword:00000001 +"SignInMode"=dword:00000000 + +; Enables Xbox GameDVR +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\GameDVR] +"AllowGameDVR"=- + +; Enables OneDrive Automatic Backups of Important Folders (Documents, Pictures etc.) +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\OneDrive] +"KFMBlockOptIn"=- + +; Enables "Push To Install" feature in Windows +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\PushToInstall] +"DisablePushToInstall"=- + +; Enables Windows Consumer Features Like App Promotions etc. +; Enables Consumer Account State Content +; Enables Cloud Optimized Content +[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CloudContent] +"DisableWindowsConsumerFeatures"=- +"DisableConsumerAccountStateContent"=- +"DisableCloudOptimizedContent"=- + +; Unblocks "Allow my organization to manage my device" pop-up message +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WorkplaceJoin] +"BlockAADWorkplaceJoin"=- + +; --Revert Start Menu Customization-- + +; Restores Default Pinned Apps to the Start Menu +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\current\device\Start] +"ConfigureStartPins"=- +"ConfigureStartPins_ProviderSet"=- +"ConfigureStartPins_WinningProvider"=- + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\providers\B5292708-1619-419B-9923-E5D9F3925E71\default\Device\Start] +"ConfigureStartPins"=- +"ConfigureStartPins_LastWrite"=- + +; --Revert File System Settings-- + +; Revert Long File Paths to Default (Disabled) +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\FileSystem] +"LongPathsEnabled"=dword:00000000 + +; --Revert Multimedia and Gaming Performance-- + +; Reverts Multimedia Applications' System Responsiveness and Network Throttling Index to Default Values +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Multimedia\SystemProfile] +"SystemResponsiveness"=dword:00000014 +"NetworkThrottlingIndex"=dword:ffffffff + +; --Revert Memory Management-- + +; Reverts Clearing the Page File at Shutdown to Default (Enabled) +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management] +"ClearPageFileAtShutdown"=dword:00000001 + +; --Revert Gaming Performance-- + +; Reverts Graphics Cards Priority for Gaming to Default +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Multimedia\SystemProfile\Tasks\Games] +"GPU Priority"=dword:00000002 ; Default value is 2 + +; Reverts CPU Priority for Gaming to Default +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Multimedia\SystemProfile\Tasks\Games] +"Priority"=dword:00000002 ; Default value is 2 + +; Reverts Games Scheduling Category to Default +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Multimedia\SystemProfile\Tasks\Games] +"Scheduling Category"="Medium" ; Default value is "Medium" + +; Removes "Take Ownership" from Context Menu +[-HKEY_CLASSES_ROOT\*\shell\TakeOwnership] + +[-HKEY_CLASSES_ROOT\*\shell\runas] + +[-HKEY_CLASSES_ROOT\Directory\shell\TakeOwnership] + +[-HKEY_CLASSES_ROOT\Drive\shell\runas] + +; HARDWARE AND SOUND +; lock +[-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\FlyoutMenuSettings] + +; sleep +[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FlyoutMenuSettings] + +; startup sound +[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\BootAnimation] +"DisableStartupSound"=dword:00000000 + +[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\EditionOverrides] +"UserSetting_DisableStartupSound"=dword:00000000 + +; device installation settings +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Device Metadata] +"PreventDeviceMetadataFromNetwork"=dword:00000000 + +; NETWORK AND INTERNET +; allow other network users to control or disable the shared internet connection +[HKEY_LOCAL_MACHINE\System\ControlSet001\Control\Network\SharedAccessConnection] +"EnableControl"=dword:00000001 + +; SYSTEM AND SECURITY +; revert adjust for best performance of programs +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\PriorityControl] +"Win32PrioritySeparation"=dword:00000002 + +; remote assistance +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Remote Assistance] +"fAllowToGetHelp"=dword:00000001 + +; TROUBLESHOOTING +; automatic maintenance +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Maintenance] +"MaintenanceDisabled"=- + +; SECURITY AND MAINTENANCE +; report problems +[-HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting] + +; ACCOUNTS +; use my sign in info after restart +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] +"DisableAutomaticRestartSignOn"=- + +; APPS +; archive apps +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Appx] +"AllowAutomaticAppArchiving"=- + +; PERSONALIZATION + +[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize] + +; don't hide most used list in start menu +; show recently added apps +[-HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Explorer] + +; news and interests +[-HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Feeds] + +; SYSTEM +; hardware accelerated gpu scheduling +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\GraphicsDrivers] +"HwSchMode"=- + +; storage sense +[-HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\StorageSense] + +; --OTHER-- +; Enable update Microsoft Store apps automatically +[-HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsStore] + +; EDGE +[-HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge] + +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MicrosoftEdgeElevationService] +"Start"=dword:00000002 + +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\edgeupdate] +"Start"=dword:00000002 + +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\edgeupdatem] +"Start"=dword:00000002 + +; CHROME +[-HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome] + +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\GoogleChromeElevationService] +"Start"=dword:00000002 + +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gupdate] +"Start"=dword:00000002 + +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gupdatem] +"Start"=dword:00000002 + +; --CAN'T DO NATIVELY-- +; UWP APPS +; background apps +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy] +"LetAppsRunInBackground"=- + +; widgets +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\NewsAndInterests\AllowNewsAndInterests] +"value"=dword:00000001 + +; NVIDIA +; old nvidia sharpening +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nvlddmkm\FTS] +"EnableGR535"=dword:00000001 + +; OTHER +; 3d objects +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{0DB7E03F-FC29-4DC6-9020-FF41B59E513A}] +[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{0DB7E03F-FC29-4DC6-9020-FF41B59E513A}] + +; Restores Home Folder +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace\{f874310e-b6b7-47dc-bc84-b9e6b38f5903}] +@="CLSID_MSGraphHomeFolder" + +[HKEY_USERS\.DEFAULT\Control Panel\Mouse] +"MouseSpeed"="1" +"MouseThreshold1"="6" +"MouseThreshold2"="10" +"@ + Set-Content -Path "$env:TEMP\Restore_LocalMachine_Registry.reg" -Value $MultilineComment -Force + # edit reg file + $path = "$env:TEMP\Restore_LocalMachine_Registry.reg" + (Get-Content $path) -replace "\?", "$" | Out-File $path + # import reg file + Regedit.exe /S "$env:TEMP\Restore_LocalMachine_Registry.reg" + Show-Header + Write-Host "Default Local Machine Registry Settings Applied." -ForegroundColor Green + Wait-IfNotSpecialize +} + + +function Set-RecommendedHKCURegistry { + Clear-Host + Write-Host "Optimizing User Registry . . ." + + # Set Wallpaper (Helper Function for Recommended User Settings) + $defaultWallpaperPath = "C:\Windows\Web\4K\Wallpaper\Windows\img0_3840x2160.jpg" + $darkModeWallpaperPath = "C:\Windows\Web\4K\Wallpaper\Windows\img19_1920x1200.jpg" + + function Set-Wallpaper ($wallpaperPath) { + reg.exe add "HKEY_CURRENT_USER\Control Panel\Desktop" /v Wallpaper /t REG_SZ /d "$wallpaperPath" /f | Out-Null + # Notify the system of the change + rundll32.exe user32.dll, UpdatePerUserSystemParameters + } + + # Check Windows version + $windowsVersion = (Get-ItemProperty "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion").CurrentBuild + + # Apply appropriate wallpaper based on Windows version or existence of dark mode wallpaper + if ($windowsVersion -ge 22000) { + # Assuming Windows 11 starts at build 22000 + if (Test-Path $darkModeWallpaperPath) { + Set-Wallpaper -wallpaperPath $darkModeWallpaperPath + } + } + else { + # Apply default wallpaper for Windows 10 + Set-Wallpaper -wallpaperPath $defaultWallpaperPath + } + + $MultilineComment = @" +Windows Registry Editor Version 5.00 + +; EASE OF ACCESS +; disable narrator +[HKEY_CURRENT_USER\Software\Microsoft\Narrator\NoRoam] +"DuckAudio"=dword:00000000 +"WinEnterLaunchEnabled"=dword:00000000 +"ScriptingEnabled"=dword:00000000 +"OnlineServicesEnabled"=dword:00000000 +"EchoToggleKeys"=dword:00000000 + +; disable narrator settings +[HKEY_CURRENT_USER\Software\Microsoft\Narrator] +"NarratorCursorHighlight"=dword:00000000 +"CoupleNarratorCursorKeyboard"=dword:00000000 +"IntonationPause"=dword:00000000 +"ReadHints"=dword:00000000 +"ErrorNotificationType"=dword:00000000 +"EchoChars"=dword:00000000 +"EchoWords"=dword:00000000 + +[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Narrator\NarratorHome] +"MinimizeType"=dword:00000000 +"AutoStart"=dword:00000000 + +; disable ease of access settings +[HKEY_CURRENT_USER\Software\Microsoft\Ease of Access] +"selfvoice"=dword:00000000 +"selfscan"=dword:00000000 + +[HKEY_CURRENT_USER\Control Panel\Accessibility] +"Sound on Activation"=dword:00000000 +"Warning Sounds"=dword:00000000 + +[HKEY_CURRENT_USER\Control Panel\Accessibility\HighContrast] +"Flags"="4194" + +[HKEY_CURRENT_USER\Control Panel\Accessibility\Keyboard Response] +"Flags"="2" +"AutoRepeatRate"="0" +"AutoRepeatDelay"="0" + +[HKEY_CURRENT_USER\Control Panel\Accessibility\MouseKeys] +"Flags"="130" +"MaximumSpeed"="39" +"TimeToMaximumSpeed"="3000" + +[HKEY_CURRENT_USER\Control Panel\Accessibility\StickyKeys] +"Flags"="2" + +[HKEY_CURRENT_USER\Control Panel\Accessibility\ToggleKeys] +"Flags"="34" + +[HKEY_CURRENT_USER\Control Panel\Accessibility\SoundSentry] +"Flags"="0" +"FSTextEffect"="0" +"TextEffect"="0" +"WindowsEffect"="0" + +[HKEY_CURRENT_USER\Control Panel\Accessibility\SlateLaunch] +"ATapp"="" +"LaunchAT"=dword:00000000 + +; CLOCK AND REGION +; disable notify me when the clock changes +[HKEY_CURRENT_USER\Control Panel\TimeDate] +"DstNotification"=dword:00000000 + +; APPEARANCE AND PERSONALIZATION +; open file explorer to this pc +; show file name extensions +; disable display file size information in folder tips +; disable show pop-up description for folder and desktop items +; disable show preview handlers in preview pane +; disable show status bar +; disable show sync provider notifications +; disable use sharing wizard +; disable animations in the taskbar +; enable show thumbnails instead of icons +; disable show translucent selection rectangle +; disable use drop shadows for icon labels on the desktop +; more pins personalization start +; disable show account-related notifications +; disable show recently opened items in start, jump lists and file explorer +; left taskbar alignment +; remove chat from taskbar +; remove task view from taskbar +; remove copilot from taskbar +; disable show recommendations for tips shortcuts new apps and more +; disable share any window from my taskbar +; disable snap window settings - SnapAssist to JointResize Entries +; alt tab open windows only +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced] +"LaunchTo"=dword:00000001 +"HideFileExt"=dword:00000000 +"FolderContentsInfoTip"=dword:00000000 +"ShowInfoTip"=dword:00000000 +"ShowPreviewHandlers"=dword:00000000 +"ShowStatusBar"=dword:00000000 +"ShowSyncProviderNotifications"=dword:00000000 +"SharingWizardOn"=dword:00000000 +"TaskbarAnimations"=dword:0 +"IconsOnly"=dword:0 +"ListviewAlphaSelect"=dword:0 +"ListviewShadow"=dword:0 +"Start_Layout"=dword:00000001 +"Start_AccountNotifications"=dword:00000000 +"Start_TrackDocs"=dword:00000000 +"TaskbarAl"=dword:00000000 +"TaskbarMn"=dword:00000000 +"ShowTaskViewButton"=dword:00000000 +"ShowCopilotButton"=dword:00000000 +"Start_IrisRecommendations"=dword:00000000 +"TaskbarSn"=dword:00000000 +"SnapAssist"=dword:00000000 +"DITest"=dword:00000000 +"EnableSnapBar"=dword:00000000 +"EnableTaskGroups"=dword:00000000 +"EnableSnapAssistFlyout"=dword:00000000 +"SnapFill"=dword:00000000 +"JointResize"=dword:00000000 +"MultiTaskingAltTabFilter"=dword:00000003 + +; hide frequent folders in quick access +; disable show files from office.com +; show all taskbar icons on Windows 10 +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer] +"ShowFrequent"=dword:00000000 +"ShowCloudFilesInQuickAccess"=dword:00000000 +"EnableAutoTray"=dword:00000000 + +; enable display full path in the title bar +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CabinetState] +"FullPath"=dword:00000001 + +; HARDWARE AND SOUND +; sound communications do nothing +[HKEY_CURRENT_USER\Software\Microsoft\Multimedia\Audio] +"UserDuckingPreference"=dword:00000003 + +; disable enhance pointer precision +; mouse fix (no accel with epp on) +[HKEY_CURRENT_USER\Control Panel\Mouse] +"MouseSpeed"="0" +"MouseThreshold1"="0" +"MouseThreshold2"="0" +"MouseSensitivity"="10" +"SmoothMouseXCurve"=hex:\ + 00,00,00,00,00,00,00,00,\ + C0,CC,0C,00,00,00,00,00,\ + 80,99,19,00,00,00,00,00,\ + 40,66,26,00,00,00,00,00,\ + 00,33,33,00,00,00,00,00 +"SmoothMouseYCurve"=hex:\ + 00,00,00,00,00,00,00,00,\ + 00,00,38,00,00,00,00,00,\ + 00,00,70,00,00,00,00,00,\ + 00,00,A8,00,00,00,00,00,\ + 00,00,E0,00,00,00,00,00 + +; SYSTEM AND SECURITY +; set appearance options to custom +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\VisualEffects] +"VisualFXSetting"=dword:3 + +; disable animate controls and elements inside windows +; disable fade or slide menus into view +; disable fade or slide tooltips into view +; disable fade out menu items after clicking +; disable show shadows under mouse pointer +; disable show shadows under windows +; disable slide open combo boxes +; disable smooth-scroll list boxes +; enable smooth edges of screen fonts +; 100% dpi scaling +; disable fix scaling for apps +; disable menu show delay +[HKEY_CURRENT_USER\Control Panel\Desktop] +"UserPreferencesMask"=hex(2):90,12,03,80,10,00,00,00 +"FontSmoothing"="2" +"LogPixels"=dword:00000060 +"Win8DpiScaling"=dword:00000001 +"EnablePerProcessSystemDPI"=dword:00000000 +"MenuShowDelay"="0" + +; --IMMERSIVE CONTROL PANEL-- +; PRIVACY +; disable show me notification in the settings app +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\SystemSettings\AccountNotifications] +"EnableAccountNotifications"=dword:00000000 + +; disable voice activation +[HKEY_CURRENT_USER\Software\Microsoft\Speech_OneCore\Settings\VoiceActivation\UserPreferenceForAllApps] +"AgentActivationEnabled"=dword:00000000 + +[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Speech_OneCore\Settings\VoiceActivation\UserPreferenceForAllApps] +"AgentActivationLastUsed"=dword:00000000 + +; disable other devices +[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\bluetoothSync] +"Value"="Deny" + +; disable let websites show me locally relevant content by accessing my language list +[HKEY_CURRENT_USER\Control Panel\International\User Profile] +"HttpAcceptLanguageOptOut"=dword:00000001 + +; disable let windows improve start and search results by tracking app launches +[HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\EdgeUI] +"DisableMFUTracking"=dword:00000001 + +; disable personal inking and typing dictionary +[HKEY_CURRENT_USER\Software\Microsoft\InputPersonalization] +"RestrictImplicitInkCollection"=dword:00000001 +"RestrictImplicitTextCollection"=dword:00000001 + +[HKEY_CURRENT_USER\Software\Microsoft\InputPersonalization\TrainedDataStore] +"HarvestContacts"=dword:00000000 + +[HKEY_CURRENT_USER\Software\Microsoft\Personalization\Settings] +"AcceptedPrivacyPolicy"=dword:00000000 + +; feedback frequency never +[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Siuf\Rules] +"NumberOfSIUFInPeriod"=dword:00000000 +"PeriodInNanoSeconds"=- + +; SEARCH +; disable search highlights +; disable search history +; disable safe search +; disable cloud content search for work or school account +; disable cloud content search for microsoft account +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\SearchSettings] +"IsDynamicSearchBoxEnabled"=dword:00000000 +"IsDeviceSearchHistoryEnabled"=dword:00000000 +"SafeSearchMode"=dword:00000000 +"IsAADCloudSearchEnabled"=dword:00000000 +"IsMSACloudSearchEnabled"=dword:00000000 + +; EASE OF ACCESS +; disable magnifier settings +[HKEY_CURRENT_USER\SOFTWARE\Microsoft\ScreenMagnifier] +"FollowCaret"=dword:00000000 +"FollowNarrator"=dword:00000000 +"FollowMouse"=dword:00000000 +"FollowFocus"=dword:00000000 + +; GAMING +; disable game bar +[HKEY_CURRENT_USER\System\GameConfigStore] +"GameDVR_Enabled"=dword:00000000 + +; disable enable open xbox game bar using game controller +; enable game mode +[HKEY_CURRENT_USER\Software\Microsoft\GameBar] +"UseNexusForGameBarEnabled"=dword:00000000 +"AutoGameModeEnabled"=dword:00000001 + +; other settings +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\GameDVR] +"AppCaptureEnabled"=dword:00000000 +"AudioEncodingBitrate"=dword:0001f400 +"AudioCaptureEnabled"=dword:00000000 +"CustomVideoEncodingBitrate"=dword:003d0900 +"CustomVideoEncodingHeight"=dword:000002d0 +"CustomVideoEncodingWidth"=dword:00000500 +"HistoricalBufferLength"=dword:0000001e +"HistoricalBufferLengthUnit"=dword:00000001 +"HistoricalCaptureEnabled"=dword:00000000 +"HistoricalCaptureOnBatteryAllowed"=dword:00000001 +"HistoricalCaptureOnWirelessDisplayAllowed"=dword:00000001 +"MaximumRecordLength"=hex(b):00,D0,88,C3,10,00,00,00 +"VideoEncodingBitrateMode"=dword:00000002 +"VideoEncodingResolutionMode"=dword:00000002 +"VideoEncodingFrameRateMode"=dword:00000000 +"EchoCancellationEnabled"=dword:00000001 +"CursorCaptureEnabled"=dword:00000000 +"VKToggleGameBar"=dword:00000000 +"VKMToggleGameBar"=dword:00000000 +"VKSaveHistoricalVideo"=dword:00000000 +"VKMSaveHistoricalVideo"=dword:00000000 +"VKToggleRecording"=dword:00000000 +"VKMToggleRecording"=dword:00000000 +"VKTakeScreenshot"=dword:00000000 +"VKMTakeScreenshot"=dword:00000000 +"VKToggleRecordingIndicator"=dword:00000000 +"VKMToggleRecordingIndicator"=dword:00000000 +"VKToggleMicrophoneCapture"=dword:00000000 +"VKMToggleMicrophoneCapture"=dword:00000000 +"VKToggleCameraCapture"=dword:00000000 +"VKMToggleCameraCapture"=dword:00000000 +"VKToggleBroadcast"=dword:00000000 +"VKMToggleBroadcast"=dword:00000000 +"MicrophoneCaptureEnabled"=dword:00000000 +"SystemAudioGain"=hex(b):10,27,00,00,00,00,00,00 +"MicrophoneGain"=hex(b):10,27,00,00,00,00,00,00 + +; TIME & LANGUAGE +; disable show the voice typing mic button +; disable typing insights +[HKEY_CURRENT_USER\Software\Microsoft\input\Settings] +"IsVoiceTypingKeyEnabled"=dword:00000000 +"InsightsEnabled"=dword:00000000 + +; disable capitalize the first letter of each sentence +; disable play key sounds as i type +; disable add a period after i double-tap the spacebar +; disable show key background +[HKEY_CURRENT_USER\Software\Microsoft\TabletTip\1.7] +"EnableAutoShiftEngage"=dword:00000000 +"EnableKeyAudioFeedback"=dword:00000000 +"EnableDoubleTapSpace"=dword:00000000 +"IsKeyBackgroundEnabled"=dword:00000000 + +; PERSONALIZATION +; dark theme +[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize] +"AppsUseLightTheme"=dword:00000000 +"SystemUsesLightTheme"=dword:00000000 +"EnableTransparency"=dword:00000001 + +; disable web search in start menu +[HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows\Explorer] +"DisableSearchBoxSuggestions"=dword:00000001 + +; Remove meet now +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] +"NoStartMenuMFUprogramsList"=- +"NoInstrumentation"=- +"HideSCAMeetNow"=dword:00000001 + +; remove search from taskbar +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Search] +"SearchboxTaskbarMode"=dword:00000000 + +; disable use dynamic lighting on my devices +; disable compatible apps in the forground always control lighting +; disable match my windows accent color +[HKEY_CURRENT_USER\Software\Microsoft\Lighting] +"AmbientLightingEnabled"=dword:00000000 +"ControlledByForegroundApp"=dword:00000000 +"UseSystemAccentColor"=dword:00000000 + +; DEVICES +; disable let windows manage my default printer +[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows] +"LegacyDefaultPrinterMode"=dword:00000001 + +; disable write with your fingertip +[HKEY_CURRENT_USER\Software\Microsoft\TabletTip\EmbeddedInkControl] +"EnableInkingWithTouch"=dword:00000000 + +; SYSTEM +[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\DWM] +"UseDpiScaling"=dword:00000000 + +; disable variable refresh rate & enable optimizations for windowed games +[HKEY_CURRENT_USER\Software\Microsoft\DirectX\UserGpuPreferences] +"DirectXUserGlobalSettings"="SwapEffectUpgradeEnable=1;VRROptimizeEnable=0;" + +; disable notifications +; Disable Notifications on Lock Screen +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\PushNotifications] +"ToastEnabled"=dword:00000000 +"LockScreenToastEnabled"=dword:00000000 + +; Disable Allow Notifications to Play Sounds +; Disable Notifications on Lock Screen +; Disable Show Reminders and VoIP Calls Notifications on Lock Screen +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings] +"NOC_GLOBAL_SETTING_ALLOW_NOTIFICATION_SOUND"=dword:00000000 +"NOC_GLOBAL_SETTING_ALLOW_TOASTS_ABOVE_LOCK"=dword:00000000 +"NOC_GLOBAL_SETTING_ALLOW_CRITICAL_TOASTS_ABOVE_LOCK"=dword:00000000 + +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings\Windows.SystemToast.SecurityAndMaintenance] +"Enabled"=dword:00000000 + +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings\windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel] +"Enabled"=dword:00000000 + +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings\Windows.SystemToast.CapabilityAccess] +"Enabled"=dword:00000000 + +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings\Windows.SystemToast.StartupApp] +"Enabled"=dword:00000000 + +[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\UserProfileEngagement] +"ScoobeSystemSettingEnabled"=dword:00000000 + +; disable suggested actions +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\SmartActionPlatform\SmartClipboard] +"Disabled"=dword:00000001 + +; battery options optimize for video quality +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\VideoSettings] +"VideoQualityOnBattery"=dword:00000001 + +; UWP Apps +; disable windows input experience preload +[HKEY_CURRENT_USER\Software\Microsoft\input] +"IsInputAppPreloadEnabled"=dword:00000000 + +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Dsh] +"IsPrelaunchEnabled"=dword:00000000 + +; disable copilot +[HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\WindowsCopilot] +"TurnOffWindowsCopilot"=dword:00000001 + +; DISABLE ADVERTISING & PROMOTIONAL +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager] +"ContentDeliveryAllowed"=dword:00000000 +"FeatureManagementEnabled"=dword:00000000 +"OemPreInstalledAppsEnabled"=dword:00000000 +"PreInstalledAppsEnabled"=dword:00000000 +"PreInstalledAppsEverEnabled"=dword:00000000 +"RotatingLockScreenEnabled"=dword:00000000 +"RotatingLockScreenOverlayEnabled"=dword:00000000 +"SilentInstalledAppsEnabled"=dword:00000000 +"SlideshowEnabled"=dword:00000000 +"SoftLandingEnabled"=dword:00000000 +"SubscribedContent-310093Enabled"=dword:00000000 +"SubscribedContent-314563Enabled"=dword:00000000 +"SubscribedContent-338388Enabled"=dword:00000000 +"SubscribedContent-338389Enabled"=dword:00000000 +"SubscribedContent-338393Enabled"=dword:00000000 +"SubscribedContent-353694Enabled"=dword:00000000 +"SubscribedContent-353696Enabled"=dword:00000000 +"SubscribedContent-353698Enabled"=dword:00000000 +"SubscribedContentEnabled"=dword:00000000 +"SystemPaneSuggestionsEnabled"=dword:00000000 + +; OTHER +; remove gallery +[HKEY_CURRENT_USER\Software\Classes\CLSID\{e88865ea-0e1c-4e20-9aa6-edcd0212c87c}] +"System.IsPinnedToNameSpaceTree"=dword:00000000 + +; restore the classic context menu +[HKEY_CURRENT_USER\Software\Classes\CLSID\{86ca1aa0-34aa-4e8b-a509-50c905bae2a2}\InprocServer32] +@="" + +; removes OneDrive Setup +[-HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] +"OneDriveSetup"=- + +; Hides the Try New Outlook Button +[HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\Options\General] +"HideNewOutlookToggle"=dword:00000000 +"@ + Set-Content -Path "$env:TEMP\Optimize_User_Registry.reg" -Value $MultilineComment -Force + Regedit.exe /S "$env:TEMP\Optimize_User_Registry.reg" + Show-Header + Write-Host "Recommended User Registry Settings Applied." -ForegroundColor Green + Wait-IfNotSpecialize +} + +function Set-DefaultHKCURegistry { + Clear-Host + Write-Host "Restoring User Default Registry Settings . . ." + $MultilineComment = @" +Windows Registry Editor Version 5.00 + +; --LEGACY CONTROL PANEL-- +; EASE OF ACCESS +; narrator +[HKEY_CURRENT_USER\Software\Microsoft\Narrator\NoRoam] +"DuckAudio"=- +"WinEnterLaunchEnabled"=- +"ScriptingEnabled"=- +"OnlineServicesEnabled"=- +"EchoToggleKeys"=- + +; narrator settings +[HKEY_CURRENT_USER\Software\Microsoft\Narrator] +"NarratorCursorHighlight"=- +"CoupleNarratorCursorKeyboard"=- +"IntonationPause"=- +"ReadHints"=- +"ErrorNotificationType"=- +"EchoChars"=- +"EchoWords"=- + +[-HKEY_CURRENT_USER\SOFTWARE\Microsoft\Narrator\NarratorHome] + +; ease of access settings +[-HKEY_CURRENT_USER\Software\Microsoft\Ease of Access] + +[HKEY_CURRENT_USER\Control Panel\Accessibility] +"Sound on Activation"=- +"Warning Sounds"=- + +[HKEY_CURRENT_USER\Control Panel\Accessibility\HighContrast] +"Flags"="126" + +[HKEY_CURRENT_USER\Control Panel\Accessibility\Keyboard Response] +"Flags"="126" +"AutoRepeatRate"="500" +"AutoRepeatDelay"="1000" + +[HKEY_CURRENT_USER\Control Panel\Accessibility\MouseKeys] +"Flags"="62" +"MaximumSpeed"="80" +"TimeToMaximumSpeed"="3000" + +[HKEY_CURRENT_USER\Control Panel\Accessibility\StickyKeys] +"Flags"="510" + +[HKEY_CURRENT_USER\Control Panel\Accessibility\ToggleKeys] +"Flags"="62" + +[HKEY_CURRENT_USER\Control Panel\Accessibility\SoundSentry] +"Flags"="2" +"FSTextEffect"="0" +"TextEffect"="0" +"WindowsEffect"="1" + +[HKEY_CURRENT_USER\Control Panel\Accessibility\SlateLaunch] +"ATapp"="narrator" +"LaunchAT"=dword:00000001 + +; CLOCK AND REGION +; notify me when the clock changes +[-HKEY_CURRENT_USER\Control Panel\TimeDate] + +; APPEARANCE AND PERSONALIZATION +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced] +"LaunchTo"=- +"HideFileExt"=dword:00000001 +"FolderContentsInfoTip"=- +"ShowInfoTip"=dword:00000001 +"ShowPreviewHandlers"=- +"ShowStatusBar"=dword:00000001 +"ShowSyncProviderNotifications"=- +"SharingWizardOn"=- +"TaskbarAnimations"=dword:1 +"IconsOnly"=dword:0 +"ListviewAlphaSelect"=dword:1 +"ListviewShadow"=dword:1 +"Start_Layout"=- +"Start_AccountNotifications"=- +"Start_TrackDocs"=- +"TaskbarAl"=- +"TaskbarMn"=- +"ShowTaskViewButton"=- +"ShowCopilotButton"=- +"Start_IrisRecommendations"=- +"TaskbarSn"=- +"SnapAssist"=- +"DITest"=- +"EnableSnapBar"=- +"EnableTaskGroups"=- +"EnableSnapAssistFlyout"=- +"SnapFill"=- +"JointResize"=- +"MultiTaskingAltTabFilter"=- + +; frequent folders in quick access +; show files from office.com +; don't show all taskbar icons +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer] +"ShowFrequent"=- +"ShowCloudFilesInQuickAccess"=- +"EnableAutoTray"=- + +; display full path in the title bar +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CabinetState] +"FullPath"=dword:00000000 + +; HARDWARE AND SOUND +; sound communications +[HKEY_CURRENT_USER\Software\Microsoft\Multimedia\Audio] +"UserDuckingPreference"=- + +; enhance pointer precision +; mouse (default accel with epp on) +[HKEY_CURRENT_USER\Control Panel\Mouse] +"MouseSpeed"="1" +"MouseThreshold1"="6" +"MouseThreshold2"="10" +"MouseSensitivity"="10" +"SmoothMouseXCurve"=hex:00,00,00,00,00,00,00,00,15,6e,00,00,00,00,00,00,00,40,\ + 01,00,00,00,00,00,29,dc,03,00,00,00,00,00,00,00,28,00,00,00,00,00 +"SmoothMouseYCurve"=hex:00,00,00,00,00,00,00,00,fd,11,01,00,00,00,00,00,00,24,\ + 04,00,00,00,00,00,00,fc,12,00,00,00,00,00,00,c0,bb,01,00,00,00,00 + +; SYSTEM AND SECURITY +; set appearance options +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\VisualEffects] +"VisualFXSetting"=- + +; animate controls and elements inside windows +; fade or slide menus into view +; fade or slide tooltips into view +; fade out menu items after clicking +; show shadows under mouse pointer +; show shadows under windows +; slide open combo boxes +; smooth-scroll list boxes +; smooth edges of screen fonts +; dpi scaling +; fix scaling for apps +; menu show delay +[HKEY_CURRENT_USER\Control Panel\Desktop] +"UserPreferencesMask"=hex(2):9e,1e,07,80,12,00,00,00 +"FontSmoothing"="2" +"LogPixels"=- +"Win8DpiScaling"=dword:00000000 +"EnablePerProcessSystemDPI"=- +"MenuShowDelay"="400" + +; --IMMERSIVE CONTROL PANEL-- +; PRIVACY +; show me notification in the settings app +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\SystemSettings\AccountNotifications] +"EnableAccountNotifications"=- + +; allow location override +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\CPSS\Store\UserLocationOverridePrivacySetting] +"Value"=dword:00000001 + +; voice activation +[-HKEY_CURRENT_USER\Software\Microsoft\Speech_OneCore\Settings] + +; other devices +[-HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\bluetoothSync] + +; let websites show me locally relevant content by accessing my language list +[HKEY_CURRENT_USER\Control Panel\International\User Profile] +"HttpAcceptLanguageOptOut"=- + +; let windows improve start and search results by tracking app launches +[-HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\EdgeUI] + +; personal inking and typing dictionary +[HKEY_CURRENT_USER\Software\Microsoft\InputPersonalization] +"RestrictImplicitInkCollection"=dword:00000000 +"RestrictImplicitTextCollection"=dword:00000000 + +[HKEY_CURRENT_USER\Software\Microsoft\InputPersonalization\TrainedDataStore] +"HarvestContacts"=dword:00000001 + +[HKEY_CURRENT_USER\Software\Microsoft\Personalization\Settings] +"AcceptedPrivacyPolicy"=dword:00000001 + +; feedback frequency +[-HKEY_CURRENT_USER\SOFTWARE\Microsoft\Siuf] + +; SEARCH +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\SearchSettings] +"IsDynamicSearchBoxEnabled"=- +"IsDeviceSearchHistoryEnabled"=- +"SafeSearchMode"=- +"IsAADCloudSearchEnabled"=- +"IsMSACloudSearchEnabled"=- + +; EASE OF ACCESS +; magnifier settings +[HKEY_CURRENT_USER\SOFTWARE\Microsoft\ScreenMagnifier] +"FollowCaret"=- +"FollowNarrator"=- +"FollowMouse"=- +"FollowFocus"=- + +; GAMING +; game bar +[HKEY_CURRENT_USER\System\GameConfigStore] +"GameDVR_Enabled"=dword:00000000 + +; enable open xbox game bar using game controller +; game mode +[HKEY_CURRENT_USER\Software\Microsoft\GameBar] +"UseNexusForGameBarEnabled"=- +"AutoGameModeEnabled"=- + +; other settings +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\GameDVR] +"AppCaptureEnabled"=- +"AudioEncodingBitrate"=- +"AudioCaptureEnabled"=- +"CustomVideoEncodingBitrate"=- +"CustomVideoEncodingHeight"=- +"CustomVideoEncodingWidth"=- +"HistoricalBufferLength"=- +"HistoricalBufferLengthUnit"=- +"HistoricalCaptureEnabled"=- +"HistoricalCaptureOnBatteryAllowed"=- +"HistoricalCaptureOnWirelessDisplayAllowed"=- +"MaximumRecordLength"=- +"VideoEncodingBitrateMode"=- +"VideoEncodingResolutionMode"=- +"VideoEncodingFrameRateMode"=- +"EchoCancellationEnabled"=- +"CursorCaptureEnabled"=- +"VKToggleGameBar"=- +"VKMToggleGameBar"=- +"VKSaveHistoricalVideo"=- +"VKMSaveHistoricalVideo"=- +"VKToggleRecording"=- +"VKMToggleRecording"=- +"VKTakeScreenshot"=- +"VKMTakeScreenshot"=- +"VKToggleRecordingIndicator"=- +"VKMToggleRecordingIndicator"=- +"VKToggleMicrophoneCapture"=- +"VKMToggleMicrophoneCapture"=- +"VKToggleCameraCapture"=- +"VKMToggleCameraCapture"=- +"VKToggleBroadcast"=- +"VKMToggleBroadcast"=- +"MicrophoneCaptureEnabled"=- +"SystemAudioGain"=- +"MicrophoneGain"=- + +; TIME & LANGUAGE +; show the voice typing mic button +; typing insights +[HKEY_CURRENT_USER\Software\Microsoft\input\Settings] +"IsVoiceTypingKeyEnabled"=- +"InsightsEnabled"=- + +; capitalize the first letter of each sentence +; play key sounds as i type +; add a period after i double-tap the spacebar +; show key background +[HKEY_CURRENT_USER\Software\Microsoft\TabletTip\1.7] +"EnableAutoShiftEngage"=- +"EnableKeyAudioFeedback"=- +"EnableDoubleTapSpace"=- +"IsKeyBackgroundEnabled"=- + +; PERSONALIZATION +; light theme +[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize] +"AppsUseLightTheme"=dword:00000001 +"SystemUsesLightTheme"=dword:00000001 + +[-HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows\Explorer] + +[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] + +; search from taskbar +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Search] +"SearchboxTaskbarMode"=- + +; meet now +[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] + +; use dynamic lighting on my devices +; compatible apps in the forground always control lighting +; match my windows accent color +[HKEY_CURRENT_USER\Software\Microsoft\Lighting] +"AmbientLightingEnabled"=dword:00000001 +"ControlledByForegroundApp"=- +"UseSystemAccentColor"=dword:00000001 + +; DEVICES +; let windows manage my default printer +[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows] +"LegacyDefaultPrinterMode"=dword:ffffffff + +; write with your fingertip +[-HKEY_CURRENT_USER\Software\Microsoft\TabletTip\EmbeddedInkControl] + +; SYSTEM +[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\DWM] +"UseDpiScaling"=- + +; variable refresh rate & optimizations for windowed games +[HKEY_CURRENT_USER\Software\Microsoft\DirectX\UserGpuPreferences] +"DirectXUserGlobalSettings"=- + +; Notification defaults +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\PushNotifications] +"ToastEnabled"=- +"LockScreenToastEnabled"=- + +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings] +"NOC_GLOBAL_SETTING_ALLOW_NOTIFICATION_SOUND"=- +"NOC_GLOBAL_SETTING_ALLOW_TOASTS_ABOVE_LOCK"=- +"NOC_GLOBAL_SETTING_ALLOW_CRITICAL_TOASTS_ABOVE_LOCK"=- + +[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings\Windows.SystemToast.SecurityAndMaintenance] + +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings\windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel] +"Enabled"=- + +[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings\Windows.SystemToast.CapabilityAccess] + +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings\Windows.SystemToast.StartupApp] +"Enabled"=dword:00000000 + +[-HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\UserProfileEngagement] + +; suggested actions +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\SmartActionPlatform\SmartClipboard] +"Disabled"=- + +; battery options optimize +[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\VideoSettings] + +; UWP APPS +; disable windows input experience preload +[HKEY_CURRENT_USER\Software\Microsoft\input] +"IsInputAppPreloadEnabled"=- + +[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Dsh] + +; copilot +[-HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\WindowsCopilot] + +; ADVERTISING & PROMOTIONAL +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager] +"ContentDeliveryAllowed"=dword:00000001 +"FeatureManagementEnabled"=dword:00000001 +"OemPreInstalledAppsEnabled"=dword:00000001 +"PreInstalledAppsEnabled"=dword:00000001 +"PreInstalledAppsEverEnabled"=dword:00000001 +"RotatingLockScreenEnabled"=dword:00000001 +"RotatingLockScreenOverlayEnabled"=dword:00000001 +"SilentInstalledAppsEnabled"=dword:00000001 +"SlideshowEnabled"=dword:00000001 +"SoftLandingEnabled"=dword:00000001 +"SubscribedContent-310093Enabled"=- +"SubscribedContent-314563Enabled"=- +"SubscribedContent-338388Enabled"=- +"SubscribedContent-338389Enabled"=- +"SubscribedContent-338393Enabled"=- +"SubscribedContent-353694Enabled"=- +"SubscribedContent-353696Enabled"=- +"SubscribedContent-353698Enabled"=- +"SubscribedContentEnabled"=dword:00000001 +"SystemPaneSuggestionsEnabled"=dword:00000001 + +; OTHER +; gallery +[-HKEY_CURRENT_USER\Software\Classes\CLSID\{e88865ea-0e1c-4e20-9aa6-edcd0212c87c}] + +; context menu +[-HKEY_CURRENT_USER\Software\Classes\CLSID\{86ca1aa0-34aa-4e8b-a509-50c905bae2a2}] +"@ + Set-Content -Path "$env:TEMP\Restore_User_Registry.reg" -Value $MultilineComment -Force + Regedit.exe /S "$env:TEMP\Restore_User_Registry.reg" + Show-Header + Write-Host "Default User Registry Settings Applied." -ForegroundColor Green + Wait-IfNotSpecialize +} +# End of Registry Optimizations + +# Start of Tasks and Services Functions +function Set-ServiceStartup { + # List of services to set to Disabled + $disabledServices = @( + 'AJRouter', 'AssignedAccessManagerSvc', 'AppIDSvc', 'BDESVC', 'DiagTrack', + 'DPS', 'EFS', 'FontCache', 'PcaSvc', 'RmSvc', 'WSearch', 'WbioSrvc', 'lfsvc' + ) + + # List of services to set to Manual + $manualServices = @( + 'BITS', 'CDPSvc', 'DusmSvc', 'LanmanServer', 'LanmanWorkstation', + 'Spooler', 'StateRepository', 'StorSvc', 'SysMain', 'TokenBroker', + 'TrkWks', 'UsoSvc', 'WpnService', 'edgeupdate', 'edgeupdatem', + 'iphlpsvc', 'sppsvc' + ) + + # Set the services in the disabledServices list to Disabled + foreach ($service in $disabledServices) { + try { + Set-Service -Name $service -StartupType Disabled -ErrorAction SilentlyContinue | Out-Null + } + catch { + Show-Header + Write-Host "Failed to set $service to Disabled: $_" -ForegroundColor Yellow + Wait-IfNotSpecialize + } + } + + # Set the services in the manualServices list to Manual + foreach ($service in $manualServices) { + try { + Set-Service -Name $service -StartupType Manual -ErrorAction SilentlyContinue | Out-Null + } + catch { + Show-Header + Write-Host "Failed to set $service to Manual: $_" -ForegroundColor Yellow + Wait-IfNotSpecialize + } + } + + Show-Header + Write-Host "Service startup types updated successfully." -ForegroundColor Green + Wait-IfNotSpecialize +} + +function Set-DefaultServices { + # Get all services that are not currently set to Automatic and revert them + $allServices = Get-Service | Where-Object { $_.StartType -ne 'Automatic' } + + $successCount = 0 + foreach ($service in $allServices) { + try { + Show-Header + Write-Host "Setting services to Automatic where permissions are allowed. Please wait . . ." + # Set the service startup type to Automatic using Set-Service + Set-Service -Name $service.Name -StartupType Automatic 2>&1 | Out-Null + + # Forcibly set the startup type to Automatic using WMI as a fallback + $wmiService = Get-WmiObject -Class Win32_Service -Filter "Name='$($service.Name)'" 2>&1 | Out-Null + if ($wmiService) { + $result = $wmiService.ChangeStartMode("Automatic") 2>&1 | Out-Null + if ($result.ReturnValue -eq 0) { + $successCount++ + } + } + } + catch { + # Silently continue if a service fails + continue + } + } + Show-Header + Write-Host "Successfully set services to Automatic where permissions allowed." -ForegroundColor Green + Wait-IfNotSpecialize +} + +function Disable-ScheduledTasks { + # Define the list of scheduled tasks to disable + $scheduledTasks = @( + "Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser", + "Microsoft\Windows\Application Experience\ProgramDataUpdater", + "Microsoft\Windows\Autochk\Proxy", + "Microsoft\Windows\Customer Experience Improvement Program\Consolidator", + "Microsoft\Windows\Customer Experience Improvement Program\UsbCeip", + "Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector", + "Microsoft\Windows\Feedback\Siuf\DmClient", + "Microsoft\Windows\Feedback\Siuf\DmClientOnScenarioDownload", + "Microsoft\Windows\Windows Error Reporting\QueueReporting", + "Microsoft\Windows\Application Experience\MareBackup", + "Microsoft\Windows\Application Experience\StartupAppTask", + "Microsoft\Windows\Application Experience\PcaPatchDbTask", + "Microsoft\Windows\Maps\MapsUpdateTask" + ) + + $successCount = 0 + foreach ($task in $scheduledTasks) { + try { + # Disable the task without wildcards + schtasks /Change /TN $task /Disable 2>&1 | Out-Null + $successCount++ + } + catch { + # Silently continue if a task fails + continue + } + } + + Show-Header + Write-Host "Successfully disabled unneeded scheduled tasks." -ForegroundColor Green + Wait-IfNotSpecialize +} + +function Enable-ScheduledTasks { + # Define the list of scheduled tasks to enable (same as those to disable) + $scheduledTasks = @( + "Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser", + "Microsoft\Windows\Application Experience\ProgramDataUpdater", + "Microsoft\Windows\Autochk\Proxy", + "Microsoft\Windows\Customer Experience Improvement Program\Consolidator", + "Microsoft\Windows\Customer Experience Improvement Program\UsbCeip", + "Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector", + "Microsoft\Windows\Feedback\Siuf\DmClient", + "Microsoft\Windows\Feedback\Siuf\DmClientOnScenarioDownload", + "Microsoft\Windows\Windows Error Reporting\QueueReporting", + "Microsoft\Windows\Application Experience\MareBackup", + "Microsoft\Windows\Application Experience\StartupAppTask", + "Microsoft\Windows\Application Experience\PcaPatchDbTask", + "Microsoft\Windows\Maps\MapsUpdateTask" + ) + + $successCount = 0 + foreach ($task in $scheduledTasks) { + try { + # Disable the task without wildcards + schtasks /Change /TN $task /Disable 2>&1 | Out-Null + $successCount++ + } + catch { + # Silently continue if a task fails + continue + } + } + + Show-Header + Write-Host "Successfully Enabled Default scheduled tasks." -ForegroundColor Green + Wait-IfNotSpecialize +} +# End of Tasks and Services Functions + +# Start of Power Settings Functions +function Set-RecommendedPowerSettings { + Clear-Host + # Import and set Ultimate power plan + cmd /c "powercfg /duplicatescheme e9a42b02-d5df-448d-aa00-03f14749eb61 99999999-9999-9999-9999-999999999999 >nul 2>&1 & powercfg /SETACTIVE 99999999-9999-9999-9999-999999999999 >nul 2>&1" + + # Get all power plans and delete them + powercfg /L | ForEach-Object { + if ($_ -match "^\s*Power Scheme GUID: (\S+)") { + $guid = $matches[1] + if ($guid -ne "99999999-9999-9999-9999-999999999999") { + cmd /c "powercfg /delete $guid" | Out-Null + } + } + } + + # Registry modifications + $regChanges = @( + 'HKLM\SYSTEM\CurrentControlSet\Control\Power /v HibernateEnabled /t REG_DWORD /d 0', # Disables hibernate + 'HKLM\SYSTEM\CurrentControlSet\Control\Power /v HibernateEnabledDefault /t REG_DWORD /d 0', # Disables default hibernate settings + 'HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\FlyoutMenuSettings /v ShowLockOption /t REG_DWORD /d 0', # Hides the Lock option from the Power menu + 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FlyoutMenuSettings /v ShowSleepOption /t REG_DWORD /d 0', # Hides the Sleep option from the Power menu + 'HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Power /v HiberbootEnabled /t REG_DWORD /d 0', # Disables Fast Startup (Hiberboot) + 'HKLM\SYSTEM\ControlSet001\Control\Power\PowerSettings\54533251-82be-4824-96c1-47b60b740d00\0cc5b647-c1df-4637-891a-dec35c318583 /v ValueMax /t REG_DWORD /d 0', # Unparks CPU cores by setting the maximum processor state + 'HKLM\SYSTEM\CurrentControlSet\Control\Power\PowerThrottling /v PowerThrottlingOff /t REG_DWORD /d 1', # Disables power throttling + 'HKLM\System\ControlSet001\Control\Power\PowerSettings\2a737441-1930-4402-8d77-b2bebba308a3\0853a681-27c8-4100-a2fd-82013e970683 /v Attributes /t REG_DWORD /d 2', # Unhides "Hub Selective Suspend Timeout" + 'HKLM\System\ControlSet001\Control\Power\PowerSettings\2a737441-1930-4402-8d77-b2bebba308a3\d4e98f31-5ffe-4ce1-be31-1b38b384c009 /v Attributes /t REG_DWORD /d 2' # Unhides "USB 3 Link Power Management" + ) + + + foreach ($reg in $regChanges) { + cmd /c "reg add `$reg` /f >nul 2>&1" + } + + # Modify Power Plan settings + $settings = @( + @{ + SubgroupGUID = "0012ee47-9041-4b5d-9b77-535fba8b1442" # Hard Disk + SettingGUIDs = @("6738e2c4-e8a5-4a42-b16a-e040e769756e") # Turn off hard disk after + }, + @{ + SubgroupGUID = "0d7dbae2-4294-402a-ba8e-26777e8488cd" # Desktop Background Settings + SettingGUIDs = @("309dce9b-bef4-4119-9921-a851fb12f0f4") # Slide show + }, + @{ + SubgroupGUID = "19cbb8fa-5279-450e-9fac-8a3d5fedd0c1" # Wireless Adapter Settings + SettingGUIDs = @("12bbebe6-58d6-4636-95bb-3217ef867c1a") # Power saving mode + }, + @{ + SubgroupGUID = "238c9fa8-0aad-41ed-83f4-97be242c8f20" # Sleep + SettingGUIDs = @( + "29f6c1db-86da-48c5-9fdb-f2b67b1f44da", # Sleep after + "94ac6d29-73ce-41a6-809f-6363ba21b47e", # Allow hybrid sleep + "9d7815a6-7ee4-497e-8888-515a05f02364", # Hibernate after + "bd3b718a-0680-4d9d-8ab2-e1d2b4ac806d" # Allow wake timers + ) + }, + @{ + SubgroupGUID = "2a737441-1930-4402-8d77-b2bebba308a3" # USB Settings + SettingGUIDs = @( + "0853a681-27c8-4100-a2fd-82013e970683", # USB selective suspend setting + "48e6b7a6-50f5-4782-a5d4-53bb8f07e226", # USB 3 Link Power Management + "d4e98f31-5ffe-4ce1-be31-1b38b384c009" # USB Hub Selective Suspend Timeout + ) + }, + @{ + SubgroupGUID = "501a4d13-42af-4429-9fd1-a8218c268e20" # PCI Express + SettingGUIDs = @("ee12f906-d277-404b-b6da-e5fa1a576df5") # Link State Power Management + }, + @{ + SubgroupGUID = "7516b95f-f776-4464-8c53-06167f40cc99" # Display settings + SettingGUIDs = @("3c0bc021-c8a8-4e07-a973-6b14cbcb2b7e") # Turn off Display After setting + } + ) + + + foreach ($group in $settings) { + $subgroup = $group.SubgroupGUID + foreach ($setting in $group.SettingGUIDs) { + powercfg /setacvalueindex 99999999-9999-9999-9999-999999999999 $subgroup $setting 0x00000000 + powercfg /setdcvalueindex 99999999-9999-9999-9999-999999999999 $subgroup $setting 0x00000000 + } + } + + if (-not $isSpecializePhase) { + Show-Header + Write-Host "Recommended Power Settings Applied." -ForegroundColor Green + Wait-IfNotSpecialize + return + } +} + +function Set-DefaultPowerSettings { + Clear-Host + # Restore default power plans and enable hibernate + powercfg -restoredefaultschemes + cmd /c "powercfg /hibernate on >nul 2>&1" + cmd /c "reg add `"HKLM\SYSTEM\CurrentControlSet\Control\Power`" /v `"HibernateEnabledDefault`" /t REG_DWORD /d `"1`" /f >nul 2>&1" + + # Registry modifications + $regChanges = @( + 'HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\FlyoutMenuSettings /v ShowLockOption /t REG_DWORD /d 1', + 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FlyoutMenuSettings /v ShowSleepOption /t REG_DWORD /d 1', + 'HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Power /v HiberbootEnabled /t REG_DWORD /d 1', + 'HKLM\SYSTEM\ControlSet001\Control\Power\PowerSettings\54533251-82be-4824-96c1-47b60b740d00\0cc5b647-c1df-4637-891a-dec35c318583 /v ValueMax /t REG_DWORD /d 100', + 'HKLM\System\ControlSet001\Control\Power\PowerSettings\2a737441-1930-4402-8d77-b2bebba308a3\0853a681-27c8-4100-a2fd-82013e970683 /v Attributes /t REG_DWORD /d 1', + 'HKLM\System\ControlSet001\Control\Power\PowerSettings\2a737441-1930-4402-8d77-b2bebba308a3\d4e98f31-5ffe-4ce1-be31-1b38b384c009 /v Attributes /t REG_DWORD /d 1' + ) + + foreach ($reg in $regChanges) { + cmd /c "reg add `$reg` /f >nul 2>&1" + } + + Show-Header + Write-Host "Default Power Settings Applied." -ForegroundColor Green + Wait-IfNotSpecialize + return +} + +# End of Power Settings Functions + +# END OF COMMAND & OPERATION FUNCTIONS + +# Check if this is running in the specialize phase to Apply Settings automatically during Windows Installation +if (Test-Path -Path $markerFilePath) { + # Bloatware Apps + Get-AppxProvisionedPackage -Online | + Where-Object { $appxPackages -contains $_.DisplayName } | + Remove-AppxProvisionedPackage -AllUsers -Online -ErrorAction SilentlyContinue + # Legacy Windows Features & Apps + Get-WindowsCapability -Online | + Where-Object { $capabilities -contains ($_.Name -split '~')[0] } | + Remove-WindowsCapability -Online -ErrorAction SilentlyContinue + # Additional Software & Apps + Set-AppsRegistry + Remove-OneDrive + Disable-Recall + # Privacy & Security + Set-RecommendedPrivacySettings + # Windows Updates + Set-RecommendedUpdateSettings + # Optimize Registry + Set-RecommendedHKLMRegistry + # Tasks and Services + Disable-ScheduledTasks + Set-ServiceStartup + # Power Settings + Set-RecommendedPowerSettings + exit +} + +# Main loop to keep showing the main menu +while ($script:loop) { + Show-MainMenu +} \ No newline at end of file diff --git a/autounattend.xml b/autounattend.xml new file mode 100644 index 0000000..b1d760e --- /dev/null +++ b/autounattend.xml @@ -0,0 +1,4568 @@ + + + + + + + + + VK7JG-NPHTM-C97JM-9MPGT-3V66T + + true + + + + 1 + reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassTPMCheck /t REG_DWORD /d 1 /f + + + 2 + reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassSecureBootCheck /t REG_DWORD /d 1 /f + + + 3 + reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassStorageCheck /t REG_DWORD /d 1 /f + + + 4 + reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassCPUCheck /t REG_DWORD /d 1 /f + + + 5 + reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassRAMCheck /t REG_DWORD /d 1 /f + + + 6 + reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassDiskCheck /t REG_DWORD /d 1 /f + + + + 7 + cmd.exe /c ">>"X:\disable-defender.vbs" echo WScript.Echo "Scanning for newly created SYSTEM registry hive file to disable Windows Defender services..."" + + + 8 + cmd.exe /c ">>"X:\disable-defender.vbs" echo Set fso = CreateObject( "Scripting.FileSystemObject" )" + + + 9 + cmd.exe /c ">>"X:\disable-defender.vbs" echo Set dic = CreateObject( "Scripting.Dictionary" )" + + + 10 + cmd.exe /c ">>"X:\disable-defender.vbs" echo initialized = false" + + + 11 + cmd.exe /c ">>"X:\disable-defender.vbs" echo Function Execute( command )" + + + 12 + cmd.exe /c ">>"X:\disable-defender.vbs" echo WScript.Echo "Running command '" + command + "'"" + + + 13 + cmd.exe /c ">>"X:\disable-defender.vbs" echo Set shell = CreateObject( "WScript.Shell" )" + + + 14 + cmd.exe /c ">>"X:\disable-defender.vbs" echo Set exec = shell.Exec( command )" + + + 15 + cmd.exe /c ">>"X:\disable-defender.vbs" echo Do While exec.Status = 0" + + + 16 + cmd.exe /c ">>"X:\disable-defender.vbs" echo WScript.Sleep 100" + + + 17 + cmd.exe /c ">>"X:\disable-defender.vbs" echo Loop" + + + 18 + cmd.exe /c ">>"X:\disable-defender.vbs" echo WScript.Echo exec.StdOut.ReadAll" + + + 19 + cmd.exe /c ">>"X:\disable-defender.vbs" echo WScript.Echo exec.StdErr.ReadAll" + + + 20 + cmd.exe /c ">>"X:\disable-defender.vbs" echo Execute = exec.ExitCode" + + + 21 + cmd.exe /c ">>"X:\disable-defender.vbs" echo End Function" + + + 22 + cmd.exe /c ">>"X:\disable-defender.vbs" echo Do" + + + 23 + cmd.exe /c ">>"X:\disable-defender.vbs" echo For Each drive In fso.Drives" + + + 24 + cmd.exe /c ">>"X:\disable-defender.vbs" echo If drive.IsReady Then" + + + 25 + cmd.exe /c ">>"X:\disable-defender.vbs" echo If drive.DriveLetter ^<^> "X" Then" + + + 26 + cmd.exe /c ">>"X:\disable-defender.vbs" echo For Each folder In Array( "$Windows.~BT\NewOS\Windows", "Windows" )" + + + 27 + cmd.exe /c ">>"X:\disable-defender.vbs" echo file = fso.BuildPath( fso.BuildPath( drive.RootFolder, folder ), "System32\config\SYSTEM" )" + + + 28 + cmd.exe /c ">>"X:\disable-defender.vbs" echo If fso.FileExists( file ) And fso.FileExists( file + ".LOG1" ) And fso.FileExists( file + ".LOG2" ) Then" + + + 29 + cmd.exe /c ">>"X:\disable-defender.vbs" echo If Not initialized Then" + + + 30 + cmd.exe /c ">>"X:\disable-defender.vbs" echo dic.Add file, Nothing" + + + 31 + cmd.exe /c ">>"X:\disable-defender.vbs" echo ElseIf Not dic.Exists( file ) Then" + + + 32 + cmd.exe /c ">>"X:\disable-defender.vbs" echo Set shell = CreateObject( "WScript.Shell" )" + + + 33 + cmd.exe /c ">>"X:\disable-defender.vbs" echo ret = 1" + + + 34 + cmd.exe /c ">>"X:\disable-defender.vbs" echo Do" + + + 35 + cmd.exe /c ">>"X:\disable-defender.vbs" echo WScript.Sleep 500" + + + 36 + cmd.exe /c ">>"X:\disable-defender.vbs" echo ret = Execute( "reg.exe LOAD HKLM\mount " + file )" + + + 37 + cmd.exe /c ">>"X:\disable-defender.vbs" echo Loop While ret ^> 0" + + + 38 + cmd.exe /c ">>"X:\disable-defender.vbs" echo For Each service In Array( "Sense", "WdBoot", "WdFilter", "WdNisDrv", "WdNisSvc", "WinDefend" )" + + + 39 + cmd.exe /c ">>"X:\disable-defender.vbs" echo ret = Execute( "reg.exe ADD HKLM\mount\ControlSet001\Services\" + service + " /v Start /t REG_DWORD /d 4 /f" )" + + + 40 + cmd.exe /c ">>"X:\disable-defender.vbs" echo Next" + + + 41 + cmd.exe /c ">>"X:\disable-defender.vbs" echo ret = Execute( "reg.exe UNLOAD HKLM\mount" )" + + + 42 + cmd.exe /c ">>"X:\disable-defender.vbs" echo WScript.Echo "Found SYSTEM registry hive file at '" + file + "'. This window will now close."" + + + 43 + cmd.exe /c ">>"X:\disable-defender.vbs" echo WScript.Sleep 5000" + + + 44 + cmd.exe /c ">>"X:\disable-defender.vbs" echo Exit Do" + + + 45 + cmd.exe /c ">>"X:\disable-defender.vbs" echo End If" + + + 46 + cmd.exe /c ">>"X:\disable-defender.vbs" echo End If" + + + 47 + cmd.exe /c ">>"X:\disable-defender.vbs" echo Next" + + + 48 + cmd.exe /c ">>"X:\disable-defender.vbs" echo End If" + + + 49 + cmd.exe /c ">>"X:\disable-defender.vbs" echo End If" + + + 50 + cmd.exe /c ">>"X:\disable-defender.vbs" echo Next" + + + 51 + cmd.exe /c ">>"X:\disable-defender.vbs" echo initialized = true" + + + 52 + cmd.exe /c ">>"X:\disable-defender.vbs" echo WScript.Sleep 1000" + + + 53 + cmd.exe /c ">>"X:\disable-defender.vbs" echo Loop" + + + 54 + cmd.exe /c "start /MIN cscript.exe //E:vbscript X:\disable-defender.vbs" + + + + + + + VK7JG-NPHTM-C97JM-9MPGT-3V66T + + true + + + + 1 + reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassTPMCheck /t REG_DWORD /d 1 /f + + + 2 + reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassSecureBootCheck /t REG_DWORD /d 1 /f + + + 3 + reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassStorageCheck /t REG_DWORD /d 1 /f + + + 4 + reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassCPUCheck /t REG_DWORD /d 1 /f + + + 5 + reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassRAMCheck /t REG_DWORD /d 1 /f + + + 6 + reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassDiskCheck /t REG_DWORD /d 1 /f + + + + 7 + cmd.exe /c ">>"X:\disable-defender.vbs" echo WScript.Echo "Scanning for newly created SYSTEM registry hive file to disable Windows Defender services..."" + + + 8 + cmd.exe /c ">>"X:\disable-defender.vbs" echo Set fso = CreateObject( "Scripting.FileSystemObject" )" + + + 9 + cmd.exe /c ">>"X:\disable-defender.vbs" echo Set dic = CreateObject( "Scripting.Dictionary" )" + + + 10 + cmd.exe /c ">>"X:\disable-defender.vbs" echo initialized = false" + + + 11 + cmd.exe /c ">>"X:\disable-defender.vbs" echo Function Execute( command )" + + + 12 + cmd.exe /c ">>"X:\disable-defender.vbs" echo WScript.Echo "Running command '" + command + "'"" + + + 13 + cmd.exe /c ">>"X:\disable-defender.vbs" echo Set shell = CreateObject( "WScript.Shell" )" + + + 14 + cmd.exe /c ">>"X:\disable-defender.vbs" echo Set exec = shell.Exec( command )" + + + 15 + cmd.exe /c ">>"X:\disable-defender.vbs" echo Do While exec.Status = 0" + + + 16 + cmd.exe /c ">>"X:\disable-defender.vbs" echo WScript.Sleep 100" + + + 17 + cmd.exe /c ">>"X:\disable-defender.vbs" echo Loop" + + + 18 + cmd.exe /c ">>"X:\disable-defender.vbs" echo WScript.Echo exec.StdOut.ReadAll" + + + 19 + cmd.exe /c ">>"X:\disable-defender.vbs" echo WScript.Echo exec.StdErr.ReadAll" + + + 20 + cmd.exe /c ">>"X:\disable-defender.vbs" echo Execute = exec.ExitCode" + + + 21 + cmd.exe /c ">>"X:\disable-defender.vbs" echo End Function" + + + 22 + cmd.exe /c ">>"X:\disable-defender.vbs" echo Do" + + + 23 + cmd.exe /c ">>"X:\disable-defender.vbs" echo For Each drive In fso.Drives" + + + 24 + cmd.exe /c ">>"X:\disable-defender.vbs" echo If drive.IsReady Then" + + + 25 + cmd.exe /c ">>"X:\disable-defender.vbs" echo If drive.DriveLetter ^<^> "X" Then" + + + 26 + cmd.exe /c ">>"X:\disable-defender.vbs" echo For Each folder In Array( "$Windows.~BT\NewOS\Windows", "Windows" )" + + + 27 + cmd.exe /c ">>"X:\disable-defender.vbs" echo file = fso.BuildPath( fso.BuildPath( drive.RootFolder, folder ), "System32\config\SYSTEM" )" + + + 28 + cmd.exe /c ">>"X:\disable-defender.vbs" echo If fso.FileExists( file ) And fso.FileExists( file + ".LOG1" ) And fso.FileExists( file + ".LOG2" ) Then" + + + 29 + cmd.exe /c ">>"X:\disable-defender.vbs" echo If Not initialized Then" + + + 30 + cmd.exe /c ">>"X:\disable-defender.vbs" echo dic.Add file, Nothing" + + + 31 + cmd.exe /c ">>"X:\disable-defender.vbs" echo ElseIf Not dic.Exists( file ) Then" + + + 32 + cmd.exe /c ">>"X:\disable-defender.vbs" echo Set shell = CreateObject( "WScript.Shell" )" + + + 33 + cmd.exe /c ">>"X:\disable-defender.vbs" echo ret = 1" + + + 34 + cmd.exe /c ">>"X:\disable-defender.vbs" echo Do" + + + 35 + cmd.exe /c ">>"X:\disable-defender.vbs" echo WScript.Sleep 500" + + + 36 + cmd.exe /c ">>"X:\disable-defender.vbs" echo ret = Execute( "reg.exe LOAD HKLM\mount " + file )" + + + 37 + cmd.exe /c ">>"X:\disable-defender.vbs" echo Loop While ret ^> 0" + + + 38 + cmd.exe /c ">>"X:\disable-defender.vbs" echo For Each service In Array( "Sense", "WdBoot", "WdFilter", "WdNisDrv", "WdNisSvc", "WinDefend" )" + + + 39 + cmd.exe /c ">>"X:\disable-defender.vbs" echo ret = Execute( "reg.exe ADD HKLM\mount\ControlSet001\Services\" + service + " /v Start /t REG_DWORD /d 4 /f" )" + + + 40 + cmd.exe /c ">>"X:\disable-defender.vbs" echo Next" + + + 41 + cmd.exe /c ">>"X:\disable-defender.vbs" echo ret = Execute( "reg.exe UNLOAD HKLM\mount" )" + + + 42 + cmd.exe /c ">>"X:\disable-defender.vbs" echo WScript.Echo "Found SYSTEM registry hive file at '" + file + "'. This window will now close."" + + + 43 + cmd.exe /c ">>"X:\disable-defender.vbs" echo WScript.Sleep 5000" + + + 44 + cmd.exe /c ">>"X:\disable-defender.vbs" echo Exit Do" + + + 45 + cmd.exe /c ">>"X:\disable-defender.vbs" echo End If" + + + 46 + cmd.exe /c ">>"X:\disable-defender.vbs" echo End If" + + + 47 + cmd.exe /c ">>"X:\disable-defender.vbs" echo Next" + + + 48 + cmd.exe /c ">>"X:\disable-defender.vbs" echo End If" + + + 49 + cmd.exe /c ">>"X:\disable-defender.vbs" echo End If" + + + 50 + cmd.exe /c ">>"X:\disable-defender.vbs" echo Next" + + + 51 + cmd.exe /c ">>"X:\disable-defender.vbs" echo initialized = true" + + + 52 + cmd.exe /c ">>"X:\disable-defender.vbs" echo WScript.Sleep 1000" + + + 53 + cmd.exe /c ">>"X:\disable-defender.vbs" echo Loop" + + + 54 + cmd.exe /c "start /MIN cscript.exe //E:vbscript X:\disable-defender.vbs" + + + + + + + VK7JG-NPHTM-C97JM-9MPGT-3V66T + + true + + + + 1 + reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassTPMCheck /t REG_DWORD /d 1 /f + + + 2 + reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassSecureBootCheck /t REG_DWORD /d 1 /f + + + 3 + reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassStorageCheck /t REG_DWORD /d 1 /f + + + 4 + reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassCPUCheck /t REG_DWORD /d 1 /f + + + 5 + reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassRAMCheck /t REG_DWORD /d 1 /f + + + 6 + reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassDiskCheck /t REG_DWORD /d 1 /f + + + + 7 + cmd.exe /c ">>"X:\disable-defender.vbs" echo WScript.Echo "Scanning for newly created SYSTEM registry hive file to disable Windows Defender services..."" + + + 8 + cmd.exe /c ">>"X:\disable-defender.vbs" echo Set fso = CreateObject( "Scripting.FileSystemObject" )" + + + 9 + cmd.exe /c ">>"X:\disable-defender.vbs" echo Set dic = CreateObject( "Scripting.Dictionary" )" + + + 10 + cmd.exe /c ">>"X:\disable-defender.vbs" echo initialized = false" + + + 11 + cmd.exe /c ">>"X:\disable-defender.vbs" echo Function Execute( command )" + + + 12 + cmd.exe /c ">>"X:\disable-defender.vbs" echo WScript.Echo "Running command '" + command + "'"" + + + 13 + cmd.exe /c ">>"X:\disable-defender.vbs" echo Set shell = CreateObject( "WScript.Shell" )" + + + 14 + cmd.exe /c ">>"X:\disable-defender.vbs" echo Set exec = shell.Exec( command )" + + + 15 + cmd.exe /c ">>"X:\disable-defender.vbs" echo Do While exec.Status = 0" + + + 16 + cmd.exe /c ">>"X:\disable-defender.vbs" echo WScript.Sleep 100" + + + 17 + cmd.exe /c ">>"X:\disable-defender.vbs" echo Loop" + + + 18 + cmd.exe /c ">>"X:\disable-defender.vbs" echo WScript.Echo exec.StdOut.ReadAll" + + + 19 + cmd.exe /c ">>"X:\disable-defender.vbs" echo WScript.Echo exec.StdErr.ReadAll" + + + 20 + cmd.exe /c ">>"X:\disable-defender.vbs" echo Execute = exec.ExitCode" + + + 21 + cmd.exe /c ">>"X:\disable-defender.vbs" echo End Function" + + + 22 + cmd.exe /c ">>"X:\disable-defender.vbs" echo Do" + + + 23 + cmd.exe /c ">>"X:\disable-defender.vbs" echo For Each drive In fso.Drives" + + + 24 + cmd.exe /c ">>"X:\disable-defender.vbs" echo If drive.IsReady Then" + + + 25 + cmd.exe /c ">>"X:\disable-defender.vbs" echo If drive.DriveLetter ^<^> "X" Then" + + + 26 + cmd.exe /c ">>"X:\disable-defender.vbs" echo For Each folder In Array( "$Windows.~BT\NewOS\Windows", "Windows" )" + + + 27 + cmd.exe /c ">>"X:\disable-defender.vbs" echo file = fso.BuildPath( fso.BuildPath( drive.RootFolder, folder ), "System32\config\SYSTEM" )" + + + 28 + cmd.exe /c ">>"X:\disable-defender.vbs" echo If fso.FileExists( file ) And fso.FileExists( file + ".LOG1" ) And fso.FileExists( file + ".LOG2" ) Then" + + + 29 + cmd.exe /c ">>"X:\disable-defender.vbs" echo If Not initialized Then" + + + 30 + cmd.exe /c ">>"X:\disable-defender.vbs" echo dic.Add file, Nothing" + + + 31 + cmd.exe /c ">>"X:\disable-defender.vbs" echo ElseIf Not dic.Exists( file ) Then" + + + 32 + cmd.exe /c ">>"X:\disable-defender.vbs" echo Set shell = CreateObject( "WScript.Shell" )" + + + 33 + cmd.exe /c ">>"X:\disable-defender.vbs" echo ret = 1" + + + 34 + cmd.exe /c ">>"X:\disable-defender.vbs" echo Do" + + + 35 + cmd.exe /c ">>"X:\disable-defender.vbs" echo WScript.Sleep 500" + + + 36 + cmd.exe /c ">>"X:\disable-defender.vbs" echo ret = Execute( "reg.exe LOAD HKLM\mount " + file )" + + + 37 + cmd.exe /c ">>"X:\disable-defender.vbs" echo Loop While ret ^> 0" + + + 38 + cmd.exe /c ">>"X:\disable-defender.vbs" echo For Each service In Array( "Sense", "WdBoot", "WdFilter", "WdNisDrv", "WdNisSvc", "WinDefend" )" + + + 39 + cmd.exe /c ">>"X:\disable-defender.vbs" echo ret = Execute( "reg.exe ADD HKLM\mount\ControlSet001\Services\" + service + " /v Start /t REG_DWORD /d 4 /f" )" + + + 40 + cmd.exe /c ">>"X:\disable-defender.vbs" echo Next" + + + 41 + cmd.exe /c ">>"X:\disable-defender.vbs" echo ret = Execute( "reg.exe UNLOAD HKLM\mount" )" + + + 42 + cmd.exe /c ">>"X:\disable-defender.vbs" echo WScript.Echo "Found SYSTEM registry hive file at '" + file + "'. This window will now close."" + + + 43 + cmd.exe /c ">>"X:\disable-defender.vbs" echo WScript.Sleep 5000" + + + 44 + cmd.exe /c ">>"X:\disable-defender.vbs" echo Exit Do" + + + 45 + cmd.exe /c ">>"X:\disable-defender.vbs" echo End If" + + + 46 + cmd.exe /c ">>"X:\disable-defender.vbs" echo End If" + + + 47 + cmd.exe /c ">>"X:\disable-defender.vbs" echo Next" + + + 48 + cmd.exe /c ">>"X:\disable-defender.vbs" echo End If" + + + 49 + cmd.exe /c ">>"X:\disable-defender.vbs" echo End If" + + + 50 + cmd.exe /c ">>"X:\disable-defender.vbs" echo Next" + + + 51 + cmd.exe /c ">>"X:\disable-defender.vbs" echo initialized = true" + + + 52 + cmd.exe /c ">>"X:\disable-defender.vbs" echo WScript.Sleep 1000" + + + 53 + cmd.exe /c ">>"X:\disable-defender.vbs" echo Loop" + + + 54 + cmd.exe /c "start /MIN cscript.exe //E:vbscript X:\disable-defender.vbs" + + + + + + + + + + 1 + + powershell.exe -NoProfile -WindowStyle Hidden -Command "$xml = [xml]::new(); $xml.Load('C:\Windows\Panther\unattend.xml'); $sb = [scriptblock]::Create( $xml.unattend.Extensions.ExtractScript ); Invoke-Command -ScriptBlock $sb -ArgumentList $xml;" + + + 2 + + reg.exe add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v EnableLUA /t REG_DWORD /d 0 /f + + + 3 + + powershell.exe -NoProfile -WindowStyle Hidden -Command "Set-ExecutionPolicy RemoteSigned -Scope LocalMachine -Force" + + + 4 + + reg.exe add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OOBE" /v BypassNRO /t REG_DWORD /d 1 /f + + + 5 + + powershell.exe -NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -File "C:\Windows\Temp\DotNet.ps1" + + + 6 + + cmd.exe /c echo Specialized Setup > "C:\specialize_marker.txt" + + + 7 + + powershell.exe -NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -File "C:\Windows\Setup\Scripts\UWScript.ps1" + + + 8 + + powershell.exe -NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -File "C:\Windows\Temp\UWScriptShortcut.ps1" + + + 9 + + reg.exe load "HKU\DefaultUser" "C:\Users\Default\NTUSER.DAT" + + + 10 + + reg.exe add "HKU\DefaultUser\Software\Microsoft\Windows\CurrentVersion\Runonce" /v "CurrentUser" /t REG_SZ /d "cmd.exe /c powershell.exe -WindowStyle Hidden -ExecutionPolicy Bypass -File \"C:\Users\Default\User Customization.ps1\"" /f + + + 11 + + reg.exe unload "HKU\DefaultUser" + + + + 12 + cmd /c del /f /q "C:\Windows\Temp\*.ps1" "C:\Windows\Temp\*.reg" + + + 13 + + cmd.exe /c del /q "C:\specialize_marker.txt" + + + + + + + 1 + + powershell.exe -NoProfile -WindowStyle Hidden -Command "$xml = [xml]::new(); $xml.Load('C:\Windows\Panther\unattend.xml'); $sb = [scriptblock]::Create( $xml.unattend.Extensions.ExtractScript ); Invoke-Command -ScriptBlock $sb -ArgumentList $xml;" + + + 2 + + reg.exe add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v EnableLUA /t REG_DWORD /d 0 /f + + + 3 + + powershell.exe -NoProfile -WindowStyle Hidden -Command "Set-ExecutionPolicy RemoteSigned -Scope LocalMachine -Force" + + + 4 + + reg.exe add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OOBE" /v BypassNRO /t REG_DWORD /d 1 /f + + + 5 + + powershell.exe -NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -File "C:\Windows\Temp\DotNet.ps1" + + + 6 + + cmd.exe /c echo Specialized Setup > "C:\specialize_marker.txt" + + + 7 + + powershell.exe -NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -File "C:\Windows\Setup\Scripts\UWScript.ps1" + + + 8 + + powershell.exe -NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -File "C:\Windows\Temp\UWScriptShortcut.ps1" + + + 9 + + reg.exe load "HKU\DefaultUser" "C:\Users\Default\NTUSER.DAT" + + + 10 + + reg.exe add "HKU\DefaultUser\Software\Microsoft\Windows\CurrentVersion\Runonce" /v "CurrentUser" /t REG_SZ /d "cmd.exe /c powershell.exe -WindowStyle Hidden -ExecutionPolicy Bypass -File \"C:\Users\Default\User Customization.ps1\"" /f + + + 11 + + reg.exe unload "HKU\DefaultUser" + + + + 12 + cmd /c del /f /q "C:\Windows\Temp\*.ps1" "C:\Windows\Temp\*.reg" + + + 13 + + cmd.exe /c del /q "C:\specialize_marker.txt" + + + + + + + 1 + + powershell.exe -NoProfile -WindowStyle Hidden -Command "$xml = [xml]::new(); $xml.Load('C:\Windows\Panther\unattend.xml'); $sb = [scriptblock]::Create( $xml.unattend.Extensions.ExtractScript ); Invoke-Command -ScriptBlock $sb -ArgumentList $xml;" + + + 2 + + reg.exe add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v EnableLUA /t REG_DWORD /d 0 /f + + + 3 + + powershell.exe -NoProfile -WindowStyle Hidden -Command "Set-ExecutionPolicy RemoteSigned -Scope LocalMachine -Force" + + + 4 + + reg.exe add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OOBE" /v BypassNRO /t REG_DWORD /d 1 /f + + + 5 + + powershell.exe -NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -File "C:\Windows\Temp\DotNet.ps1" + + + 6 + + cmd.exe /c echo Specialized Setup > "C:\specialize_marker.txt" + + + 7 + + powershell.exe -NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -File "C:\Windows\Setup\Scripts\UWScript.ps1" + + + 8 + + powershell.exe -NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -File "C:\Windows\Temp\UWScriptShortcut.ps1" + + + 9 + + reg.exe load "HKU\DefaultUser" "C:\Users\Default\NTUSER.DAT" + + + 10 + + reg.exe add "HKU\DefaultUser\Software\Microsoft\Windows\CurrentVersion\Runonce" /v "CurrentUser" /t REG_SZ /d "cmd.exe /c powershell.exe -WindowStyle Hidden -ExecutionPolicy Bypass -File \"C:\Users\Default\User Customization.ps1\"" /f + + + 11 + + reg.exe unload "HKU\DefaultUser" + + + + 12 + cmd /c del /f /q "C:\Windows\Temp\*.ps1" "C:\Windows\Temp\*.reg" + + + 13 + + cmd.exe /c del /q "C:\specialize_marker.txt" + + + + + + + + + + true + true + true + true + Work + 3 + + + + + + + true + true + true + true + Work + 3 + + + + + + + true + true + true + true + Work + 3 + + + + + + + +param( + [xml] $Document +); + +$scriptsDir = 'C:\Windows\Setup\Scripts\'; +foreach( $file in $Document.unattend.Extensions.File ) { + $path = [System.Environment]::ExpandEnvironmentVariables( + $file.GetAttribute( 'path' ) + ); + if( $path.StartsWith( $scriptsDir ) ) { + mkdir -Path $scriptsDir -ErrorAction 'SilentlyContinue'; + } + $encoding = switch( [System.IO.Path]::GetExtension( $path ) ) { + { $_ -in '.ps1', '.xml' } { [System.Text.Encoding]::UTF8; } + { $_ -in '.reg', '.vbs', '.js' } { [System.Text.UnicodeEncoding]::new( $false, $true ); } + default { [System.Text.Encoding]::Default; } + }; + [System.IO.File]::WriteAllBytes( $path, ( $encoding.GetPreamble() + $encoding.GetBytes( $file.InnerText.Trim() ) ) ); +} + + + + + + &1 + if ($updateCheck -match "No installed package found" -or $updateCheck -match "No applicable upgrade found") { + Show-Header + Write-Host "WinGet is already up-to-date." -ForegroundColor Green + } + elseif ($updateCheck -match "An applicable upgrade is available") { + # Perform the upgrade if available + Show-Header + Write-Host "An update is available for WinGet. Upgrading now..." + Try { + winget upgrade --id Microsoft.WinGet -e --accept-package-agreements --accept-source-agreements | Out-Null + if ($LASTEXITCODE -eq 0) { + Show-Header + Write-Host "WinGet updated successfully." -ForegroundColor Green + } + else { + Show-Header + Write-Host "Failed to update WinGet. Proceeding with app installation..." -ForegroundColor Yellow + } + } + Catch { + Show-Header + Write-Host "An error occurred while upgrading WinGet. Proceeding with app installation..." -ForegroundColor Yellow + } + } + else { + Show-Header + Write-Host "Could not determine WinGet update status. Proceeding with app installation..." -ForegroundColor Yellow + } + } + Catch { + Show-Header + Write-Host "An error occurred while checking for WinGet updates. Proceeding with app installation..." -ForegroundColor Yellow + } +} + +# Function to install an app using WinGet +function Install-AppWithWinGet { + param ( + [string]$AppName, + [string]$FriendlyName + ) + + Show-Header + + # Check for internet connection + if (-not (Test-InternetConnection)) { + Show-Header + Write-Host "No internet connection detected. Please connect to the internet and try again." -BackgroundColor Red + Wait-IfNotSpecialize + return + } + + # Update WinGet to ensure it's the latest version + Show-Header + Test-WinGetStatus + + # Continue with app installation + Show-Header + Write-Host "Installing $FriendlyName using WinGet . . ." + Try { + # Attempt to install or upgrade the app using WinGet + $installOutput = winget install --id $AppName -e --silent --accept-package-agreements --accept-source-agreements 2>&1 + + if ($installOutput -match "Found an existing package already installed" -and $installOutput -match "No available upgrade found") { + Write-Host "$FriendlyName is already installed and up-to-date." -BackgroundColor Green + } + elseif ($installOutput -match "Successfully installed") { + Show-Header + Write-Host "$FriendlyName installation completed successfully." -BackgroundColor Green + } + elseif ($installOutput -match "No package found") { + Show-Header + Write-Host "Failed to install $FriendlyName using ID '$AppName'. Package not found or check your internet connection." -BackgroundColor Red + } + else { + Show-Header + Write-Host "An issue occurred during the installation of $FriendlyName. Please check the app ID or try again later." -BackgroundColor Red + } + } + Catch { + Show-Header + Write-Host "An unexpected error occurred while installing $FriendlyName." -BackgroundColor Red + } + Wait-IfNotSpecialize +} + +# Remove Bloatware Apps Functions +# Define Packages +$appxPackages = @( + 'Microsoft.Microsoft3DViewer', 'Microsoft.BingSearch', 'Microsoft.WindowsCamera', 'Clipchamp.Clipchamp', + 'Microsoft.WindowsAlarms', 'Microsoft.549981C3F5F10', 'Microsoft.Windows.DevHome', + 'MicrosoftCorporationII.MicrosoftFamily', 'Microsoft.WindowsFeedbackHub', 'Microsoft.GetHelp', + 'microsoft.windowscommunicationsapps', 'Microsoft.WindowsMaps', 'Microsoft.ZuneVideo', + 'Microsoft.BingNews', 'Microsoft.MicrosoftOfficeHub', 'Microsoft.Office.OneNote', + 'Microsoft.OutlookForWindows', 'Microsoft.People', 'Microsoft.Windows.Photos', + 'Microsoft.PowerAutomateDesktop', 'MicrosoftCorporationII.QuickAssist', 'Microsoft.SkypeApp', + 'Microsoft.MicrosoftSolitaireCollection', 'Microsoft.MicrosoftStickyNotes', 'MSTeams', + 'Microsoft.Getstarted', 'Microsoft.Todos', 'Microsoft.WindowsSoundRecorder', 'Microsoft.BingWeather', + 'Microsoft.ZuneMusic', 'Microsoft.WindowsTerminal', 'Microsoft.Xbox.TCUI', 'Microsoft.XboxApp', + 'Microsoft.XboxGameOverlay', 'Microsoft.XboxGamingOverlay', 'Microsoft.XboxIdentityProvider', + 'Microsoft.XboxSpeechToTextOverlay', 'Microsoft.GamingApp', 'Microsoft.YourPhone', 'Microsoft.OneDrive', + 'Microsoft.549981C3F5F10', 'Microsoft.MixedReality.Portal', 'Microsoft.ScreenSketch' + 'Microsoft.Windows.Ai.Copilot.Provider', 'Microsoft.Copilot', 'Microsoft.Copilot_8wekyb3d8bbwe', + 'Microsoft.WindowsMeetNow', 'Microsoft.WindowsStore', 'Microsoft.Paint', 'Microsoft.MSPaint' +) + +# Define Windows Capabilities +$capabilities = @( + 'Browser.InternetExplorer', 'MathRecognizer', 'OpenSSH.Client', + 'Microsoft.Windows.PowerShell.ISE', 'App.Support.QuickAssist', 'App.StepsRecorder', + 'Media.WindowsMediaPlayer', 'Microsoft.Windows.WordPad', 'Microsoft.Windows.MSPaint' +) + +# Apply registry mods to prevent reinstallation and disable features +function Set-AppsRegistry { + $MultilineComment = @" +Windows Registry Editor Version 5.00 + +; --Application and Feature Restrictions-- + +; Disable Windows Copilot system-wide +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsCopilot] +"TurnOffWindowsCopilot"=dword:00000001 + +; Prevents Dev Home Installation +[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsUpdate\Orchestrator\UScheduler_Oobe\DevHomeUpdate] + +; Prevents New Outlook for Windows Installation +[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsUpdate\Orchestrator\UScheduler_Oobe\OutlookUpdate] + +; Prevents Chat Auto Installation +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Communications] +"ConfigureChatAutoInstall"=dword:00000000 + +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Chat] +"ChatIcon"=dword:00000003 + +; Disables Cortana +[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Windows Search] +"AllowCortana"=dword:00000000 + +; Disables OneDrive Automatic Backups of Important Folders (Documents, Pictures etc.) +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\OneDrive] +"KFMBlockOptIn"=dword:00000001 +"@ + Set-Content -Path "$env:TEMP\Windows_Apps.reg" -Value $MultilineComment -Force -ErrorAction SilentlyContinue + Regedit.exe /S "$env:TEMP\Windows_Apps.reg" -Force -ErrorAction SilentlyContinue +} + +# Removes OneDrive during Windows Installation +function Remove-OneDrive { + Remove-Item "C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk" -ErrorAction SilentlyContinue + Remove-Item "C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.exe" -ErrorAction SilentlyContinue + Remove-Item "C:\Windows\System32\OneDriveSetup.exe" -ErrorAction SilentlyContinue + Remove-Item "C:\Windows\SysWOW64\OneDriveSetup.exe" -ErrorAction SilentlyContinue +} + +# Uninstalls OneDrive in existing Windows Installation +function Uninstall-OneDrive { + # stop onedrive running + Stop-Process -Force -Name OneDrive -ErrorAction SilentlyContinue | Out-Null + # uninstall onedrive w10 + cmd /c "C:\Windows\SysWOW64\OneDriveSetup.exe -uninstall >nul 2>&1" + # clean onedrive w10 + Get-ScheduledTask | Where-Object { $_.Taskname -match 'OneDrive' } | Unregister-ScheduledTask -Confirm:$false + # uninstall onedrive w11 + cmd /c "C:\Windows\System32\OneDriveSetup.exe -uninstall >nul 2>&1" +} + +# Disables Recall +function Disable-Recall { + Dism /Online /Disable-Feature /Featurename:Recall /NoRestart | Out-Null +} + +# Remove All Bloatware (UWP) Apps from Windows. +function Remove-Apps { + Show-Header + Write-Host "Are You Sure You Want to Remove ALL Windows Apps? (Y/N)" -ForegroundColor Black -Backgroundcolor Yellow + Write-Host "Includes: OneDrive, Teams, Outlook for Windows and more . . ." -ForegroundColor Black -Backgroundcolor Yellow + Write-Host "(CAUTION! Can't be Undone!)" -BackgroundColor Red + $confirmation = Read-Host "Enter your choice" + + if ($confirmation -eq 'Y' -or $confirmation -eq 'y') { + Show-Header + Write-Host "Removing Pre-installed Apps and Features. Please wait . . ." + # Bloatware Apps + Get-AppxPackage -AllUsers | + Where-Object { $appxPackages -contains $_.Name } | + Remove-AppxPackage -AllUsers -ErrorAction SilentlyContinue | Out-Null + # Legacy Windows Features & Apps + Get-WindowsCapability -Online | + Where-Object { $capabilities -contains ($_.Name -split '~')[0] } | + Remove-WindowsCapability -Online -ErrorAction SilentlyContinue | Out-Null + # Calls specified functions + Show-Header + Set-AppsRegistry + Uninstall-OneDrive + Show-Header + Disable-Recall + Show-Header + Write-Host "Pre-installed Apps and Features removed successfully." -BackgroundColor Green + Wait-IfNotSpecialize + } + else { + Show-MainMenu + } +} +# End of Software & Apps Functions + +# Start of Privacy & Security Functions +# Check if Windows Defender is Enabled or Disabled +function Get-WindowsDefenderStatus { + Clear-Host + $defenderKey = "HKLM:\SYSTEM\CurrentControlSet\Services\Sense" + $defenderStatus = (Get-ItemProperty -Path $defenderKey -Name Start).Start + + if ($defenderStatus -eq 4) { + Show-Header + Write-Host "Windows Defender is permanently disabled." -ForegroundColor Red + Write-Host "Press 1 to enable Windows Defender." + Write-Host "Note: Enabling Defender using this script means it cannot be permanently disabled again without reinstalling Windows with the UnattendedWinstall XML file." + + $choice = Read-Host "Enter your choice (1 to enable, any other key to cancel)" + + if ($choice -eq '1') { + $confirm = Read-Host "Are you sure you want to enable Windows Defender? (y/n)" + if ($confirm -eq 'y') { + Enable-WindowsDefender + } + else { + Show-MainMenu + } + } + else { + Show-MainMenu + } + } + else { + Show-Header + Write-Host "Windows Defender is already enabled. No action is needed." -ForegroundColor Green + Write-Host "Press any key to go back to the main menu." + Read-Host + Show-MainMenu + } +} + + +# Function to Enable Windows Defender +function Enable-WindowsDefender { + $MultilineComment = @" +Windows Registry Editor Version 5.00 + +; Enables Windows Defender to start in Windows Security +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sense] +"Start"=dword:00000003 + +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WdBoot] +"Start"=dword:00000000 + +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WdFilter] +"Start"=dword:00000000 + +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WdNisDrv] +"Start"=dword:00000003 + +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WdNisSvc] +"Start"=dword:00000003 + +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinDefend] +"Start"=dword:00000002 +"@ + Set-Content -Path "$env:TEMP\Enable_Windows_Defender.reg" -Value $MultilineComment -Force + $path = "$env:TEMP\Enable_Windows_Defender.reg" + (Get-Content $path) -replace "\?", "$" | Out-File $path + Regedit.exe /S "$env:TEMP\Enable_Windows_Defender.reg" + Write-Host "Windows Defender has been enabled." -ForegroundColor Green + Write-Host "Press any key to return to the main menu." + Read-Host +} + +# Check if User Account Control is Enabled or Disabled +function Get-UACStatus { + Clear-Host + $uacKey = "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" + + # Get the EnableLUA and ConsentPromptBehaviorAdmin values + $uacStatus = (Get-ItemProperty -Path $uacKey -Name EnableLUA).EnableLUA + $promptBehavior = (Get-ItemProperty -Path $uacKey -Name ConsentPromptBehaviorAdmin).ConsentPromptBehaviorAdmin + + # Determine if UAC is disabled based on both keys + if ($uacStatus -eq 0 -or $promptBehavior -eq 0) { + Show-Header + Write-Host "User Account Control (UAC) is currently disabled." -ForegroundColor Red + Write-Host "1. Enable UAC" + } + else { + Show-Header + Write-Host "User Account Control (UAC) is currently enabled." -ForegroundColor Green + Write-Host "1. Disable UAC" + } + Write-Host "0. Main Menu" + $choice = Read-Host "Select an option" + switch ($choice) { + 1 { + $confirm = Read-Host "Are you sure you want to change UAC status? (y/n)" + if ($confirm -eq 'y') { + if ($uacStatus -eq 0) { + # Enable UAC and set the default prompt behavior + cmd.exe /c reg.exe add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v EnableLUA /t REG_DWORD /d 1 /f 2>&1 | Out-Null + cmd.exe /c reg.exe add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v ConsentPromptBehaviorAdmin /t REG_DWORD /d 2 /f 2>&1 | Out-Null + Write-Host "UAC has been enabled successfully." -ForegroundColor Green + } + else { + # Disable UAC and default prompt behavior + cmd.exe /c reg.exe add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v EnableLUA /t REG_DWORD /d 0 /f 2>&1 | Out-Null + cmd.exe /c reg.exe add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v ConsentPromptBehaviorAdmin /t REG_DWORD /d 0 /f 2>&1 | Out-Null + Write-Host "UAC has been disabled successfully." -ForegroundColor Green + } + Write-Host "Press any key to continue." + Read-Host + Get-UACStatus + } + else { + Get-UACStatus + } + } + 0 { Return } + default { Write-Host "Invalid choice. Try again."; Get-UACStatus } + } +} + + +# Function to Apply the Recommended Privacy Settings +function Set-RecommendedPrivacySettings { + + if (-not $isSpecializePhase) { + Show-Header + Write-Host "Applying Recommended Privacy Settings . . ." + } + + $MultilineComment = @" +Windows Registry Editor Version 5.00 + +; --Privacy and Security Settings-- + +; Disables Activity History +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System] +"EnableActivityFeed"=dword:00000000 +"PublishUserActivities"=dword:00000000 +"UploadUserActivities"=dword:00000000 + +; Disables Location Tracking +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\location] +"Value"="Deny" + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Sensor\Overrides\{BFA794E4-F964-4FDB-90F6-51056BFE4B44}] +"SensorPermissionState"=dword:00000000 + +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lfsvc\Service\Configuration] +"Status"=dword:00000000 + +[HKEY_LOCAL_MACHINE\SYSTEM\Maps] +"AutoUpdateEnabled"=dword:00000000 + +; Disables Telemetry +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\DataCollection] +"AllowTelemetry"=dword:00000000 + +; Disables Telemetry and Feedback Notifications +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection] +"AllowTelemetry"=dword:00000000 +"DoNotShowFeedbackNotifications"=dword:00000001 + +; Disables Windows Ink Workspace +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsInkWorkspace] +"AllowWindowsInkWorkspace"=dword:00000000 + +; Disables the Advertising ID for All Users +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AdvertisingInfo] +"DisabledByGroupPolicy"=dword:00000001 + +; Disable Account Info +[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\userAccountInformation] +"Value"="Deny" +"@ + # Write the registry changes to a file and silently import it using regedit + Set-Content -Path "$env:TEMP\Recommended_Privacy_Settings.reg" -Value $MultilineComment -Force + Start-Process -FilePath "regedit.exe" -ArgumentList "/S `"$env:TEMP\Recommended_Privacy_Settings.reg`"" -NoNewWindow -Wait + + if (-not $isSpecializePhase) { + Show-Header + Write-Host "Recommended Privacy Settings Applied." -ForegroundColor Green + Wait-IfNotSpecialize + } +} + + +# Function to Apply the Default Privacy Settings +function Set-DefaultPrivacySettings { + + Show-Header + Write-Host "Applying Default Privacy Settings . . ." + + $MultilineComment = @" +Windows Registry Editor Version 5.00 + +; --Revert Privacy and Security Settings-- + +; Enables Activity History +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System] +"EnableActivityFeed"=- +"PublishUserActivities"=- +"UploadUserActivities"=- + +; Enables Location Tracking +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\location] +"Value"=- + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Sensor\Overrides\{BFA794E4-F964-4FDB-90F6-51056BFE4B44}] +"SensorPermissionState"=- + +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lfsvc\Service\Configuration] +"Status"=- + +[HKEY_LOCAL_MACHINE\SYSTEM\Maps] +"AutoUpdateEnabled"=dword:00000001 + +; Enables Telemetry to the default level +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\DataCollection] +"AllowTelemetry"=- + +; Enables Telemetry and Feedback Notifications +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection] +"AllowTelemetry"=- +"DoNotShowFeedbackNotifications"=- + +; Enables Windows Ink Workspace +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsInkWorkspace] +"AllowWindowsInkWorkspace"=- + +; Enables the Advertising ID for All Users +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AdvertisingInfo] +"DisabledByGroupPolicy"=- + +; Allow Account info +[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\userAccountInformation] +"Value"="Allow" +"@ + Set-Content -Path "$env:TEMP\Default_Privacy_Settings.reg" -Value $MultilineComment -Force + Regedit.exe /S "$env:TEMP\Default_Privacy_Settings.reg" + Show-Header + Write-Host "Default Privacy Settings Applied." -ForegroundColor Green + Wait-IfNotSpecialize +} + +# End of Privacy and Security Functions + +# Start of Windows Update Functions +function Set-RecommendedUpdateSettings { + + if (-not $isSpecializePhase) { + Show-Header + Write-Host "Applying Recommended Windows Update Settings . . ." + } + + $MultilineComment = @" +Windows Registry Editor Version 5.00 + +; --Windows Update Settings-- + +; Disable Automatic Updates (Only Check for Updates Manually) +; Notify Before Downloading and Installing Updates +; Enable Notifications for Security Updates Only (Do Not Auto-Download) +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU] +"NoAutoUpdate"=dword:00000001 +"AUOptions"=dword:00000002 +"AutoInstallMinorUpdates"=dword:00000000 + +; Prevent Automatic Upgrade from Windows 10 22H2 to Windows 11 (Manual Upgrade Still Allowed) +; Delay Feature and Quality updates for 1 year from install. +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate] +"TargetReleaseVersion"=dword:00000001 +"TargetReleaseVersionInfo"="22H2" +"ProductVersion"="Windows 10" +"DeferFeatureUpdates"=dword:00000001 +"DeferFeatureUpdatesPeriodInDays"=dword:0000016d +"DeferQualityUpdates"=dword:00000001 +"DeferQualityUpdatesPeriodInDays"=dword:0000016d + +; Disables allowing downloads from other PCs (Delivery Optimization) +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization] +"DODownloadMode"=dword:00000000 +"@ + Set-Content -Path "$env:TEMP\Recommended_Windows_Update_Settings.reg" -Value $MultilineComment -Force + # import reg file + Regedit.exe /S "$env:TEMP\Recommended_Windows_Update_Settings.reg" + + if (-not $isSpecializePhase) { + Show-Header + Write-Host "Recommended Windows Update Settings Applied." -ForegroundColor Green + Wait-IfNotSpecialize + } +} + +function Set-DefaultUpdateSettings { + + Show-Header + Write-Host "Applying Default Windows Update Settings . . ." + + $MultilineComment = @" +Windows Registry Editor Version 5.00 + +; --Set Default Windows Update Settings-- + +; Enable Automatic Updates (Default: Automatic Download and Install) +; Set Updates to Default Behavior (Automatic Download and Install) +; Allow Automatic Installation of Minor Updates (Default: Allowed) +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU] +"NoAutoUpdate"=- +"AUOptions"=- +"AutoInstallMinorUpdates"=- + +; --Revert Windows 10 22H2 Auto Upgrade to 11 Block to Default-- +; Allow Feature and Quality updates +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate] +"TargetReleaseVersion"=- +"TargetReleaseVersionInfo"=- +"ProductVersion"=- +"DeferFeatureUpdates"=- +"DeferFeatureUpdatesPeriodInDays"=- +"DeferQualityUpdates"=dword:- +"DeferQualityUpdatesPeriodInDays"=- + +; Reverts Delivery Optimization settings to allow downloads from other PCs +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization] +"DODownloadMode"=- +"@ + Set-Content -Path "$env:TEMP\Default_Windows_Update_Settings.reg" -Value $MultilineComment -Force + Regedit.exe /S "$env:TEMP\Default_Windows_Update_Settings.reg" + + Show-Header + Write-Host "Default Windows Update Settings Applied." -ForegroundColor Green + Wait-IfNotSpecialize +} +# End of Windows Update Functions + +# Start of Registry Optimizations +function Set-RecommendedHKLMRegistry { + # Create Registry Keys + $MultilineComment = @" +Windows Registry Editor Version 5.00 + +; Adds "Take Ownership" to the Right Click Context Menu for All Users + +[-HKEY_CLASSES_ROOT\*\shell\TakeOwnership] +[-HKEY_CLASSES_ROOT\*\shell\runas] + +[HKEY_CLASSES_ROOT\*\shell\TakeOwnership] +@="Take Ownership" +"Extended"=- +"HasLUAShield"="" +"NoWorkingDirectory"="" +"NeverDefault"="" + +[HKEY_CLASSES_ROOT\*\shell\TakeOwnership\command] +@="powershell -windowstyle hidden -command \"Start-Process cmd -ArgumentList '/c takeown /f \\\"%1\\\" && icacls \\\"%1\\\" /grant *S-1-3-4:F /t /c /l & pause' -Verb runAs\"" +"IsolatedCommand"= "powershell -windowstyle hidden -command \"Start-Process cmd -ArgumentList '/c takeown /f \\\"%1\\\" && icacls \\\"%1\\\" /grant *S-1-3-4:F /t /c /l & pause' -Verb runAs\"" + +[HKEY_CLASSES_ROOT\Directory\shell\TakeOwnership] +@="Take Ownership" +"AppliesTo"="NOT (System.ItemPathDisplay:=\"C:\\Users\" OR System.ItemPathDisplay:=\"C:\\ProgramData\" OR System.ItemPathDisplay:=\"C:\\Windows\" OR System.ItemPathDisplay:=\"C:\\Windows\\System32\" OR System.ItemPathDisplay:=\"C:\\Program Files\" OR System.ItemPathDisplay:=\"C:\\Program Files (x86)\")" +"Extended"=- +"HasLUAShield"="" +"NoWorkingDirectory"="" +"Position"="middle" + +[HKEY_CLASSES_ROOT\Directory\shell\TakeOwnership\command] +@="powershell -windowstyle hidden -command \"$Y = ($null | choice).Substring(1,1); Start-Process cmd -ArgumentList ('/c takeown /f \\\"%1\\\" /r /d ' + $Y + ' && icacls \\\"%1\\\" /grant *S-1-3-4:F /t /c /l /q & pause') -Verb runAs\"" +"IsolatedCommand"="powershell -windowstyle hidden -command \"$Y = ($null | choice).Substring(1,1); Start-Process cmd -ArgumentList ('/c takeown /f \\\"%1\\\" /r /d ' + $Y + ' && icacls \\\"%1\\\" /grant *S-1-3-4:F /t /c /l /q & pause') -Verb runAs\"" + +[HKEY_CLASSES_ROOT\Drive\shell\runas] +@="Take Ownership" +"Extended"=- +"HasLUAShield"="" +"NoWorkingDirectory"="" +"Position"="middle" +"AppliesTo"="NOT (System.ItemPathDisplay:=\"C:\\\")" + +[HKEY_CLASSES_ROOT\Drive\shell\runas\command] +@="cmd.exe /c takeown /f \"%1\\\" /r /d y && icacls \"%1\\\" /grant *S-1-3-4:F /t /c & Pause" +"IsolatedCommand"="cmd.exe /c takeown /f \"%1\\\" /r /d y && icacls \"%1\\\" /grant *S-1-3-4:F /t /c & Pause" + +; --Application and Feature Restrictions-- + +; Disable Windows Copilot system-wide +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsCopilot] +"TurnOffWindowsCopilot"=dword:00000001 + +; Prevents Dev Home Installation +[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsUpdate\Orchestrator\UScheduler_Oobe\DevHomeUpdate] + +; Prevents New Outlook for Windows Installation +[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsUpdate\Orchestrator\UScheduler_Oobe\OutlookUpdate] + +; Prevents Chat Auto Installation and Removes Chat Icon +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Communications] +"ConfigureChatAutoInstall"=dword:00000000 + +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Chat] +"ChatIcon"=dword:00000003 + +; Disables Bitlocker Auto Encryption on Windows 11 24H2 and Onwards +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\BitLocker] +"PreventDeviceEncryption"=dword:00000001 + +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\EnhancedStorageDevices] +"TCGSecurityActivationDisabled"=dword:00000001 + +; Disables Cortana +[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Windows Search] +"AllowCortana"=dword:00000000 + +; Set Registry Keys to Disable Wifi-Sense +[HKEY_LOCAL_MACHINE\Software\Microsoft\PolicyManager\default\WiFi\AllowWiFiHotSpotReporting] +"Value"=dword:00000000 + +[HKEY_LOCAL_MACHINE\Software\Microsoft\PolicyManager\default\WiFi\AllowAutoConnectToWiFiSenseHotspots] +"Value"=dword:00000000 + +; Disable Tablet Mode +; Always go to desktop mode on sign-in +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ImmersiveShell] +"TabletMode"=dword:00000000 +"SignInMode"=dword:00000001 + +; Disable Xbox GameDVR +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\GameDVR] +"AllowGameDVR"=dword:00000000 + +; Disables OneDrive Automatic Backups of Important Folders (Documents, Pictures etc.) +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\OneDrive] +"KFMBlockOptIn"=dword:00000001 + +; Disables the "Push To Install" feature in Windows +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\PushToInstall] +"DisablePushToInstall"=dword:00000001 + +; Disables Windows Consumer Features Like App Promotions etc. +; Disables Consumer Account State Content +; Disables Cloud Optimized Content +[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CloudContent] +"DisableWindowsConsumerFeatures"=dword:00000000 +"DisableConsumerAccountStateContent"=dword:00000001 +"DisableCloudOptimizedContent"=dword:00000001 + +; Blocks the "Allow my organization to manage my device" and "No, sign in to this app only" pop-up message +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WorkplaceJoin] +"BlockAADWorkplaceJoin"=dword:00000001 + +; --Start Menu Customization-- +; Removes All Pinned Apps from the Start Menu to Clean it Up +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\current\device\Start] +"ConfigureStartPins"="{ \"pinnedList\": [] }" +"ConfigureStartPins_ProviderSet"=dword:00000001 +"ConfigureStartPins_WinningProvider"="B5292708-1619-419B-9923-E5D9F3925E71" + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\providers\B5292708-1619-419B-9923-E5D9F3925E71\default\Device\Start] +"ConfigureStartPins"="{ \"pinnedList\": [] }" +"ConfigureStartPins_LastWrite"=dword:00000001 + +; --File System Settings-- +; Enable Long File Paths with Up to 32,767 Characters +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\FileSystem] +"LongPathsEnabled"=dword:00000001 + +; --Memory Management-- +; Controls whether the memory page file is cleared at shutdown (0 means it will not be cleared, speeding up shutdown) +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management] +"ClearPageFileAtShutdown"=dword:00000000 + +; --Multimedia and Gaming Performance-- +; Gives Multimedia Applications like Games and Video Editing a Higher Priority +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Multimedia\SystemProfile] +"SystemResponsiveness"=dword:00000000 +"NetworkThrottlingIndex"=dword:0000000a + +; Gives Graphics Cards a Higher Priority for Gaming +; Gives the CPU a Higher Priority for Gaming +; Gives Games a higher priority in the system's scheduling +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Multimedia\SystemProfile\Tasks\Games] +"GPU Priority"=dword:00000008 +"Priority"=dword:00000006 +"Scheduling Category"="High" + +; disable startup sound +[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\BootAnimation] +"DisableStartupSound"=dword:00000001 + +[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\EditionOverrides] +"UserSetting_DisableStartupSound"=dword:00000001 + +; disable device installation settings +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Device Metadata] +"PreventDeviceMetadataFromNetwork"=dword:00000001 + +; NETWORK AND INTERNET +; disable allow other network users to control or disable the shared internet connection +[HKEY_LOCAL_MACHINE\System\ControlSet001\Control\Network\SharedAccessConnection] +"EnableControl"=dword:00000000 + +; SYSTEM AND SECURITY +; adjust for best performance of programs +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\PriorityControl] +"Win32PrioritySeparation"=dword:00000026 + +; disable remote assistance +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Remote Assistance] +"fAllowToGetHelp"=dword:00000000 + +; TROUBLESHOOTING +; disable automatic maintenance +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Maintenance] +"MaintenanceDisabled"=dword:00000001 + +; SECURITY AND MAINTENANCE +; disable report problems +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting] +"Disabled"=dword:00000001 + +; ACCOUNTS +; disable use my sign in info after restart +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] +"DisableAutomaticRestartSignOn"=dword:00000001 + +; APPS +; disable archive apps +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Appx] +"AllowAutomaticAppArchiving"=dword:00000000 + +; PERSONALIZATION +; Hides the Meet Now Button on the Taskbar +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] +"HideSCAMeetNow"=dword:00000001 +"NoStartMenuMFUprogramsList"=- +"NoInstrumentation"=- + +; remove windows widgets from taskbar +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Dsh] +"AllowNewsAndInterests"=dword:00000000 + +; remove news and interests from Taskbar +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Feeds] +"EnableFeeds"=dword:00000000 + +; SYSTEM +; turn on hardware accelerated gpu scheduling +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\GraphicsDrivers] +"HwSchMode"=dword:00000002 + +; disable storage sense +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\StorageSense] +"AllowStorageSenseGlobal"=dword:00000000 + +; --OTHER-- +; Disable update Microsoft Store apps automatically +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsStore] +"AutoDownload"=dword:00000002 + +; EDGE +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge] +"StartupBoostEnabled"=dword:00000000 +"HardwareAccelerationModeEnabled"=dword:00000000 +"BackgroundModeEnabled"=dword:00000000 + +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MicrosoftEdgeElevationService] +"Start"=dword:00000004 + +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\edgeupdate] +"Start"=dword:00000004 + +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\edgeupdatem] +"Start"=dword:00000004 + +; CHROME +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome] +"StartupBoostEnabled"=dword:00000000 +"HardwareAccelerationModeEnabled"=dword:00000000 +"BackgroundModeEnabled"=dword:00000000 +"HighEfficiencyModeEnabled"=dword:00000001 + +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\GoogleChromeElevationService] +"Start"=dword:00000004 + +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gupdate] +"Start"=dword:00000004 + +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gupdatem] +"Start"=dword:00000004 + +; UWP APPS +; disable background apps +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy] +"LetAppsRunInBackground"=dword:00000002 + +; disable widgets +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\NewsAndInterests\AllowNewsAndInterests] +"value"=dword:00000000 + +; NVIDIA +; enable old nvidia sharpening +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nvlddmkm\FTS] +"EnableGR535"=dword:00000000 + +; OTHER +; remove 3d objects +[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{0DB7E03F-FC29-4DC6-9020-FF41B59E513A}] +[-HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{0DB7E03F-FC29-4DC6-9020-FF41B59E513A}] + +; Remove Home Folder +[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace\{f874310e-b6b7-47dc-bc84-b9e6b38f5903}] + +[HKEY_USERS\.DEFAULT\Control Panel\Mouse] +"MouseSpeed"="0" +"MouseThreshold1"="0" +"MouseThreshold2"="0" +"@ + Set-Content -Path "$env:TEMP\Optimize_LocalMachine_Registry.reg" -Value $MultilineComment -Force + # edit reg file + $path = "$env:TEMP\Optimize_LocalMachine_Registry.reg" + (Get-Content $path) -replace "\?", "$" | Out-File $path + # import reg file + Regedit.exe /S "$env:TEMP\Optimize_LocalMachine_Registry.reg" + Show-Header + Write-Host "Recommended Local Machine Registry Settings Applied." -ForegroundColor Green + Wait-IfNotSpecialize +} + +function Set-DefaultHKLMRegistry { + # create reg file + $MultilineComment = @" +Windows Registry Editor Version 5.00 + +; --Revert Application and Feature Restrictions-- + +; Allows Dev Home Installation +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsUpdate\Orchestrator\UScheduler_Oobe\DevHomeUpdate] +@="" + +; Allows New Outlook for Windows Installation +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsUpdate\Orchestrator\UScheduler_Oobe\OutlookUpdate] +@="" + +; Reverts Chat Auto Installation and Restores Chat Icon +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Communications] +"ConfigureChatAutoInstall"=dword:00000001 + +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Chat] +"ChatIcon"=dword:00000001 + +; Enables News and Interests +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Dsh] +"AllowNewsAndInterests"=- + +; Enables BitLocker Auto Encryption on Windows 11 24H2 and Onwards +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\BitLocker] +"PreventDeviceEncryption"=- + +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\EnhancedStorageDevices] +"TCGSecurityActivationDisabled"=- + +; Enables Cortana +[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Windows Search] +"AllowCortana"=- + +; Shows the Meet Now Button on the Taskbar +; Shows Recently Added Apps in Start Menu +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] +"HideSCAMeetNow"=- + +; Re-enables WiFi-Sense +[HKEY_LOCAL_MACHINE\Software\Microsoft\PolicyManager\default\WiFi\AllowWiFiHotSpotReporting] +"Value"=dword:00000001 + +[HKEY_LOCAL_MACHINE\Software\Microsoft\PolicyManager\default\WiFi\AllowAutoConnectToWiFiSenseHotspots] +"Value"=dword:00000001 + +; Enables Tablet Mode +; Default Sign-In Mode +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ImmersiveShell] +"TabletMode"=dword:00000001 +"SignInMode"=dword:00000000 + +; Enables Xbox GameDVR +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\GameDVR] +"AllowGameDVR"=- + +; Enables OneDrive Automatic Backups of Important Folders (Documents, Pictures etc.) +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\OneDrive] +"KFMBlockOptIn"=- + +; Enables "Push To Install" feature in Windows +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\PushToInstall] +"DisablePushToInstall"=- + +; Enables Windows Consumer Features Like App Promotions etc. +; Enables Consumer Account State Content +; Enables Cloud Optimized Content +[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CloudContent] +"DisableWindowsConsumerFeatures"=- +"DisableConsumerAccountStateContent"=- +"DisableCloudOptimizedContent"=- + +; Unblocks "Allow my organization to manage my device" pop-up message +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WorkplaceJoin] +"BlockAADWorkplaceJoin"=- + +; --Revert Start Menu Customization-- + +; Restores Default Pinned Apps to the Start Menu +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\current\device\Start] +"ConfigureStartPins"=- +"ConfigureStartPins_ProviderSet"=- +"ConfigureStartPins_WinningProvider"=- + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\providers\B5292708-1619-419B-9923-E5D9F3925E71\default\Device\Start] +"ConfigureStartPins"=- +"ConfigureStartPins_LastWrite"=- + +; --Revert File System Settings-- + +; Revert Long File Paths to Default (Disabled) +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\FileSystem] +"LongPathsEnabled"=dword:00000000 + +; --Revert Multimedia and Gaming Performance-- + +; Reverts Multimedia Applications' System Responsiveness and Network Throttling Index to Default Values +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Multimedia\SystemProfile] +"SystemResponsiveness"=dword:00000014 +"NetworkThrottlingIndex"=dword:ffffffff + +; --Revert Memory Management-- + +; Reverts Clearing the Page File at Shutdown to Default (Enabled) +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management] +"ClearPageFileAtShutdown"=dword:00000001 + +; --Revert Gaming Performance-- + +; Reverts Graphics Cards Priority for Gaming to Default +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Multimedia\SystemProfile\Tasks\Games] +"GPU Priority"=dword:00000002 ; Default value is 2 + +; Reverts CPU Priority for Gaming to Default +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Multimedia\SystemProfile\Tasks\Games] +"Priority"=dword:00000002 ; Default value is 2 + +; Reverts Games Scheduling Category to Default +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Multimedia\SystemProfile\Tasks\Games] +"Scheduling Category"="Medium" ; Default value is "Medium" + +; Removes "Take Ownership" from Context Menu +[-HKEY_CLASSES_ROOT\*\shell\TakeOwnership] + +[-HKEY_CLASSES_ROOT\*\shell\runas] + +[-HKEY_CLASSES_ROOT\Directory\shell\TakeOwnership] + +[-HKEY_CLASSES_ROOT\Drive\shell\runas] + +; HARDWARE AND SOUND +; lock +[-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\FlyoutMenuSettings] + +; sleep +[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FlyoutMenuSettings] + +; startup sound +[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\BootAnimation] +"DisableStartupSound"=dword:00000000 + +[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\EditionOverrides] +"UserSetting_DisableStartupSound"=dword:00000000 + +; device installation settings +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Device Metadata] +"PreventDeviceMetadataFromNetwork"=dword:00000000 + +; NETWORK AND INTERNET +; allow other network users to control or disable the shared internet connection +[HKEY_LOCAL_MACHINE\System\ControlSet001\Control\Network\SharedAccessConnection] +"EnableControl"=dword:00000001 + +; SYSTEM AND SECURITY +; revert adjust for best performance of programs +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\PriorityControl] +"Win32PrioritySeparation"=dword:00000002 + +; remote assistance +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Remote Assistance] +"fAllowToGetHelp"=dword:00000001 + +; TROUBLESHOOTING +; automatic maintenance +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Maintenance] +"MaintenanceDisabled"=- + +; SECURITY AND MAINTENANCE +; report problems +[-HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting] + +; ACCOUNTS +; use my sign in info after restart +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] +"DisableAutomaticRestartSignOn"=- + +; APPS +; archive apps +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Appx] +"AllowAutomaticAppArchiving"=- + +; PERSONALIZATION + +[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize] + +; don't hide most used list in start menu +; show recently added apps +[-HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Explorer] + +; news and interests +[-HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Feeds] + +; SYSTEM +; hardware accelerated gpu scheduling +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\GraphicsDrivers] +"HwSchMode"=- + +; storage sense +[-HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\StorageSense] + +; --OTHER-- +; Enable update Microsoft Store apps automatically +[-HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsStore] + +; EDGE +[-HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge] + +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MicrosoftEdgeElevationService] +"Start"=dword:00000002 + +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\edgeupdate] +"Start"=dword:00000002 + +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\edgeupdatem] +"Start"=dword:00000002 + +; CHROME +[-HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome] + +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\GoogleChromeElevationService] +"Start"=dword:00000002 + +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gupdate] +"Start"=dword:00000002 + +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gupdatem] +"Start"=dword:00000002 + +; --CAN'T DO NATIVELY-- +; UWP APPS +; background apps +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy] +"LetAppsRunInBackground"=- + +; widgets +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\NewsAndInterests\AllowNewsAndInterests] +"value"=dword:00000001 + +; NVIDIA +; old nvidia sharpening +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nvlddmkm\FTS] +"EnableGR535"=dword:00000001 + +; OTHER +; 3d objects +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{0DB7E03F-FC29-4DC6-9020-FF41B59E513A}] +[HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{0DB7E03F-FC29-4DC6-9020-FF41B59E513A}] + +; Restores Home Folder +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace\{f874310e-b6b7-47dc-bc84-b9e6b38f5903}] +@="CLSID_MSGraphHomeFolder" + +[HKEY_USERS\.DEFAULT\Control Panel\Mouse] +"MouseSpeed"="1" +"MouseThreshold1"="6" +"MouseThreshold2"="10" +"@ + Set-Content -Path "$env:TEMP\Restore_LocalMachine_Registry.reg" -Value $MultilineComment -Force + # edit reg file + $path = "$env:TEMP\Restore_LocalMachine_Registry.reg" + (Get-Content $path) -replace "\?", "$" | Out-File $path + # import reg file + Regedit.exe /S "$env:TEMP\Restore_LocalMachine_Registry.reg" + Show-Header + Write-Host "Default Local Machine Registry Settings Applied." -ForegroundColor Green + Wait-IfNotSpecialize +} + + +function Set-RecommendedHKCURegistry { + Clear-Host + Write-Host "Optimizing User Registry . . ." + + # Set Wallpaper (Helper Function for Recommended User Settings) + $defaultWallpaperPath = "C:\Windows\Web\4K\Wallpaper\Windows\img0_3840x2160.jpg" + $darkModeWallpaperPath = "C:\Windows\Web\4K\Wallpaper\Windows\img19_1920x1200.jpg" + + function Set-Wallpaper ($wallpaperPath) { + reg.exe add "HKEY_CURRENT_USER\Control Panel\Desktop" /v Wallpaper /t REG_SZ /d "$wallpaperPath" /f | Out-Null + # Notify the system of the change + rundll32.exe user32.dll, UpdatePerUserSystemParameters + } + + # Check Windows version + $windowsVersion = (Get-ItemProperty "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion").CurrentBuild + + # Apply appropriate wallpaper based on Windows version or existence of dark mode wallpaper + if ($windowsVersion -ge 22000) { + # Assuming Windows 11 starts at build 22000 + if (Test-Path $darkModeWallpaperPath) { + Set-Wallpaper -wallpaperPath $darkModeWallpaperPath + } + } + else { + # Apply default wallpaper for Windows 10 + Set-Wallpaper -wallpaperPath $defaultWallpaperPath + } + + $MultilineComment = @" +Windows Registry Editor Version 5.00 + +; EASE OF ACCESS +; disable narrator +[HKEY_CURRENT_USER\Software\Microsoft\Narrator\NoRoam] +"DuckAudio"=dword:00000000 +"WinEnterLaunchEnabled"=dword:00000000 +"ScriptingEnabled"=dword:00000000 +"OnlineServicesEnabled"=dword:00000000 +"EchoToggleKeys"=dword:00000000 + +; disable narrator settings +[HKEY_CURRENT_USER\Software\Microsoft\Narrator] +"NarratorCursorHighlight"=dword:00000000 +"CoupleNarratorCursorKeyboard"=dword:00000000 +"IntonationPause"=dword:00000000 +"ReadHints"=dword:00000000 +"ErrorNotificationType"=dword:00000000 +"EchoChars"=dword:00000000 +"EchoWords"=dword:00000000 + +[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Narrator\NarratorHome] +"MinimizeType"=dword:00000000 +"AutoStart"=dword:00000000 + +; disable ease of access settings +[HKEY_CURRENT_USER\Software\Microsoft\Ease of Access] +"selfvoice"=dword:00000000 +"selfscan"=dword:00000000 + +[HKEY_CURRENT_USER\Control Panel\Accessibility] +"Sound on Activation"=dword:00000000 +"Warning Sounds"=dword:00000000 + +[HKEY_CURRENT_USER\Control Panel\Accessibility\HighContrast] +"Flags"="4194" + +[HKEY_CURRENT_USER\Control Panel\Accessibility\Keyboard Response] +"Flags"="2" +"AutoRepeatRate"="0" +"AutoRepeatDelay"="0" + +[HKEY_CURRENT_USER\Control Panel\Accessibility\MouseKeys] +"Flags"="130" +"MaximumSpeed"="39" +"TimeToMaximumSpeed"="3000" + +[HKEY_CURRENT_USER\Control Panel\Accessibility\StickyKeys] +"Flags"="2" + +[HKEY_CURRENT_USER\Control Panel\Accessibility\ToggleKeys] +"Flags"="34" + +[HKEY_CURRENT_USER\Control Panel\Accessibility\SoundSentry] +"Flags"="0" +"FSTextEffect"="0" +"TextEffect"="0" +"WindowsEffect"="0" + +[HKEY_CURRENT_USER\Control Panel\Accessibility\SlateLaunch] +"ATapp"="" +"LaunchAT"=dword:00000000 + +; CLOCK AND REGION +; disable notify me when the clock changes +[HKEY_CURRENT_USER\Control Panel\TimeDate] +"DstNotification"=dword:00000000 + +; APPEARANCE AND PERSONALIZATION +; open file explorer to this pc +; show file name extensions +; disable display file size information in folder tips +; disable show pop-up description for folder and desktop items +; disable show preview handlers in preview pane +; disable show status bar +; disable show sync provider notifications +; disable use sharing wizard +; disable animations in the taskbar +; enable show thumbnails instead of icons +; disable show translucent selection rectangle +; disable use drop shadows for icon labels on the desktop +; more pins personalization start +; disable show account-related notifications +; disable show recently opened items in start, jump lists and file explorer +; left taskbar alignment +; remove chat from taskbar +; remove task view from taskbar +; remove copilot from taskbar +; disable show recommendations for tips shortcuts new apps and more +; disable share any window from my taskbar +; disable snap window settings - SnapAssist to JointResize Entries +; alt tab open windows only +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced] +"LaunchTo"=dword:00000001 +"HideFileExt"=dword:00000000 +"FolderContentsInfoTip"=dword:00000000 +"ShowInfoTip"=dword:00000000 +"ShowPreviewHandlers"=dword:00000000 +"ShowStatusBar"=dword:00000000 +"ShowSyncProviderNotifications"=dword:00000000 +"SharingWizardOn"=dword:00000000 +"TaskbarAnimations"=dword:0 +"IconsOnly"=dword:0 +"ListviewAlphaSelect"=dword:0 +"ListviewShadow"=dword:0 +"Start_Layout"=dword:00000001 +"Start_AccountNotifications"=dword:00000000 +"Start_TrackDocs"=dword:00000000 +"TaskbarAl"=dword:00000000 +"TaskbarMn"=dword:00000000 +"ShowTaskViewButton"=dword:00000000 +"ShowCopilotButton"=dword:00000000 +"Start_IrisRecommendations"=dword:00000000 +"TaskbarSn"=dword:00000000 +"SnapAssist"=dword:00000000 +"DITest"=dword:00000000 +"EnableSnapBar"=dword:00000000 +"EnableTaskGroups"=dword:00000000 +"EnableSnapAssistFlyout"=dword:00000000 +"SnapFill"=dword:00000000 +"JointResize"=dword:00000000 +"MultiTaskingAltTabFilter"=dword:00000003 + +; hide frequent folders in quick access +; disable show files from office.com +; show all taskbar icons on Windows 10 +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer] +"ShowFrequent"=dword:00000000 +"ShowCloudFilesInQuickAccess"=dword:00000000 +"EnableAutoTray"=dword:00000000 + +; enable display full path in the title bar +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CabinetState] +"FullPath"=dword:00000001 + +; HARDWARE AND SOUND +; sound communications do nothing +[HKEY_CURRENT_USER\Software\Microsoft\Multimedia\Audio] +"UserDuckingPreference"=dword:00000003 + +; disable enhance pointer precision +; mouse fix (no accel with epp on) +[HKEY_CURRENT_USER\Control Panel\Mouse] +"MouseSpeed"="0" +"MouseThreshold1"="0" +"MouseThreshold2"="0" +"MouseSensitivity"="10" +"SmoothMouseXCurve"=hex:\ + 00,00,00,00,00,00,00,00,\ + C0,CC,0C,00,00,00,00,00,\ + 80,99,19,00,00,00,00,00,\ + 40,66,26,00,00,00,00,00,\ + 00,33,33,00,00,00,00,00 +"SmoothMouseYCurve"=hex:\ + 00,00,00,00,00,00,00,00,\ + 00,00,38,00,00,00,00,00,\ + 00,00,70,00,00,00,00,00,\ + 00,00,A8,00,00,00,00,00,\ + 00,00,E0,00,00,00,00,00 + +; SYSTEM AND SECURITY +; set appearance options to custom +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\VisualEffects] +"VisualFXSetting"=dword:3 + +; disable animate controls and elements inside windows +; disable fade or slide menus into view +; disable fade or slide tooltips into view +; disable fade out menu items after clicking +; disable show shadows under mouse pointer +; disable show shadows under windows +; disable slide open combo boxes +; disable smooth-scroll list boxes +; enable smooth edges of screen fonts +; 100% dpi scaling +; disable fix scaling for apps +; disable menu show delay +[HKEY_CURRENT_USER\Control Panel\Desktop] +"UserPreferencesMask"=hex(2):90,12,03,80,10,00,00,00 +"FontSmoothing"="2" +"LogPixels"=dword:00000060 +"Win8DpiScaling"=dword:00000001 +"EnablePerProcessSystemDPI"=dword:00000000 +"MenuShowDelay"="0" + +; --IMMERSIVE CONTROL PANEL-- +; PRIVACY +; disable show me notification in the settings app +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\SystemSettings\AccountNotifications] +"EnableAccountNotifications"=dword:00000000 + +; disable voice activation +[HKEY_CURRENT_USER\Software\Microsoft\Speech_OneCore\Settings\VoiceActivation\UserPreferenceForAllApps] +"AgentActivationEnabled"=dword:00000000 + +[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Speech_OneCore\Settings\VoiceActivation\UserPreferenceForAllApps] +"AgentActivationLastUsed"=dword:00000000 + +; disable other devices +[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\bluetoothSync] +"Value"="Deny" + +; disable let websites show me locally relevant content by accessing my language list +[HKEY_CURRENT_USER\Control Panel\International\User Profile] +"HttpAcceptLanguageOptOut"=dword:00000001 + +; disable let windows improve start and search results by tracking app launches +[HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\EdgeUI] +"DisableMFUTracking"=dword:00000001 + +; disable personal inking and typing dictionary +[HKEY_CURRENT_USER\Software\Microsoft\InputPersonalization] +"RestrictImplicitInkCollection"=dword:00000001 +"RestrictImplicitTextCollection"=dword:00000001 + +[HKEY_CURRENT_USER\Software\Microsoft\InputPersonalization\TrainedDataStore] +"HarvestContacts"=dword:00000000 + +[HKEY_CURRENT_USER\Software\Microsoft\Personalization\Settings] +"AcceptedPrivacyPolicy"=dword:00000000 + +; feedback frequency never +[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Siuf\Rules] +"NumberOfSIUFInPeriod"=dword:00000000 +"PeriodInNanoSeconds"=- + +; SEARCH +; disable search highlights +; disable search history +; disable safe search +; disable cloud content search for work or school account +; disable cloud content search for microsoft account +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\SearchSettings] +"IsDynamicSearchBoxEnabled"=dword:00000000 +"IsDeviceSearchHistoryEnabled"=dword:00000000 +"SafeSearchMode"=dword:00000000 +"IsAADCloudSearchEnabled"=dword:00000000 +"IsMSACloudSearchEnabled"=dword:00000000 + +; EASE OF ACCESS +; disable magnifier settings +[HKEY_CURRENT_USER\SOFTWARE\Microsoft\ScreenMagnifier] +"FollowCaret"=dword:00000000 +"FollowNarrator"=dword:00000000 +"FollowMouse"=dword:00000000 +"FollowFocus"=dword:00000000 + +; GAMING +; disable game bar +[HKEY_CURRENT_USER\System\GameConfigStore] +"GameDVR_Enabled"=dword:00000000 + +; disable enable open xbox game bar using game controller +; enable game mode +[HKEY_CURRENT_USER\Software\Microsoft\GameBar] +"UseNexusForGameBarEnabled"=dword:00000000 +"AutoGameModeEnabled"=dword:00000001 + +; other settings +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\GameDVR] +"AppCaptureEnabled"=dword:00000000 +"AudioEncodingBitrate"=dword:0001f400 +"AudioCaptureEnabled"=dword:00000000 +"CustomVideoEncodingBitrate"=dword:003d0900 +"CustomVideoEncodingHeight"=dword:000002d0 +"CustomVideoEncodingWidth"=dword:00000500 +"HistoricalBufferLength"=dword:0000001e +"HistoricalBufferLengthUnit"=dword:00000001 +"HistoricalCaptureEnabled"=dword:00000000 +"HistoricalCaptureOnBatteryAllowed"=dword:00000001 +"HistoricalCaptureOnWirelessDisplayAllowed"=dword:00000001 +"MaximumRecordLength"=hex(b):00,D0,88,C3,10,00,00,00 +"VideoEncodingBitrateMode"=dword:00000002 +"VideoEncodingResolutionMode"=dword:00000002 +"VideoEncodingFrameRateMode"=dword:00000000 +"EchoCancellationEnabled"=dword:00000001 +"CursorCaptureEnabled"=dword:00000000 +"VKToggleGameBar"=dword:00000000 +"VKMToggleGameBar"=dword:00000000 +"VKSaveHistoricalVideo"=dword:00000000 +"VKMSaveHistoricalVideo"=dword:00000000 +"VKToggleRecording"=dword:00000000 +"VKMToggleRecording"=dword:00000000 +"VKTakeScreenshot"=dword:00000000 +"VKMTakeScreenshot"=dword:00000000 +"VKToggleRecordingIndicator"=dword:00000000 +"VKMToggleRecordingIndicator"=dword:00000000 +"VKToggleMicrophoneCapture"=dword:00000000 +"VKMToggleMicrophoneCapture"=dword:00000000 +"VKToggleCameraCapture"=dword:00000000 +"VKMToggleCameraCapture"=dword:00000000 +"VKToggleBroadcast"=dword:00000000 +"VKMToggleBroadcast"=dword:00000000 +"MicrophoneCaptureEnabled"=dword:00000000 +"SystemAudioGain"=hex(b):10,27,00,00,00,00,00,00 +"MicrophoneGain"=hex(b):10,27,00,00,00,00,00,00 + +; TIME & LANGUAGE +; disable show the voice typing mic button +; disable typing insights +[HKEY_CURRENT_USER\Software\Microsoft\input\Settings] +"IsVoiceTypingKeyEnabled"=dword:00000000 +"InsightsEnabled"=dword:00000000 + +; disable capitalize the first letter of each sentence +; disable play key sounds as i type +; disable add a period after i double-tap the spacebar +; disable show key background +[HKEY_CURRENT_USER\Software\Microsoft\TabletTip\1.7] +"EnableAutoShiftEngage"=dword:00000000 +"EnableKeyAudioFeedback"=dword:00000000 +"EnableDoubleTapSpace"=dword:00000000 +"IsKeyBackgroundEnabled"=dword:00000000 + +; PERSONALIZATION +; dark theme +[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize] +"AppsUseLightTheme"=dword:00000000 +"SystemUsesLightTheme"=dword:00000000 +"EnableTransparency"=dword:00000001 + +; disable web search in start menu +[HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows\Explorer] +"DisableSearchBoxSuggestions"=dword:00000001 + +; Remove meet now +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] +"NoStartMenuMFUprogramsList"=- +"NoInstrumentation"=- +"HideSCAMeetNow"=dword:00000001 + +; remove search from taskbar +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Search] +"SearchboxTaskbarMode"=dword:00000000 + +; disable use dynamic lighting on my devices +; disable compatible apps in the forground always control lighting +; disable match my windows accent color +[HKEY_CURRENT_USER\Software\Microsoft\Lighting] +"AmbientLightingEnabled"=dword:00000000 +"ControlledByForegroundApp"=dword:00000000 +"UseSystemAccentColor"=dword:00000000 + +; DEVICES +; disable let windows manage my default printer +[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows] +"LegacyDefaultPrinterMode"=dword:00000001 + +; disable write with your fingertip +[HKEY_CURRENT_USER\Software\Microsoft\TabletTip\EmbeddedInkControl] +"EnableInkingWithTouch"=dword:00000000 + +; SYSTEM +[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\DWM] +"UseDpiScaling"=dword:00000000 + +; disable variable refresh rate & enable optimizations for windowed games +[HKEY_CURRENT_USER\Software\Microsoft\DirectX\UserGpuPreferences] +"DirectXUserGlobalSettings"="SwapEffectUpgradeEnable=1;VRROptimizeEnable=0;" + +; disable notifications +; Disable Notifications on Lock Screen +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\PushNotifications] +"ToastEnabled"=dword:00000000 +"LockScreenToastEnabled"=dword:00000000 + +; Disable Allow Notifications to Play Sounds +; Disable Notifications on Lock Screen +; Disable Show Reminders and VoIP Calls Notifications on Lock Screen +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings] +"NOC_GLOBAL_SETTING_ALLOW_NOTIFICATION_SOUND"=dword:00000000 +"NOC_GLOBAL_SETTING_ALLOW_TOASTS_ABOVE_LOCK"=dword:00000000 +"NOC_GLOBAL_SETTING_ALLOW_CRITICAL_TOASTS_ABOVE_LOCK"=dword:00000000 + +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings\Windows.SystemToast.SecurityAndMaintenance] +"Enabled"=dword:00000000 + +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings\windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel] +"Enabled"=dword:00000000 + +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings\Windows.SystemToast.CapabilityAccess] +"Enabled"=dword:00000000 + +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings\Windows.SystemToast.StartupApp] +"Enabled"=dword:00000000 + +[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\UserProfileEngagement] +"ScoobeSystemSettingEnabled"=dword:00000000 + +; disable suggested actions +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\SmartActionPlatform\SmartClipboard] +"Disabled"=dword:00000001 + +; battery options optimize for video quality +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\VideoSettings] +"VideoQualityOnBattery"=dword:00000001 + +; UWP Apps +; disable windows input experience preload +[HKEY_CURRENT_USER\Software\Microsoft\input] +"IsInputAppPreloadEnabled"=dword:00000000 + +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Dsh] +"IsPrelaunchEnabled"=dword:00000000 + +; disable copilot +[HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\WindowsCopilot] +"TurnOffWindowsCopilot"=dword:00000001 + +; DISABLE ADVERTISING & PROMOTIONAL +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager] +"ContentDeliveryAllowed"=dword:00000000 +"FeatureManagementEnabled"=dword:00000000 +"OemPreInstalledAppsEnabled"=dword:00000000 +"PreInstalledAppsEnabled"=dword:00000000 +"PreInstalledAppsEverEnabled"=dword:00000000 +"RotatingLockScreenEnabled"=dword:00000000 +"RotatingLockScreenOverlayEnabled"=dword:00000000 +"SilentInstalledAppsEnabled"=dword:00000000 +"SlideshowEnabled"=dword:00000000 +"SoftLandingEnabled"=dword:00000000 +"SubscribedContent-310093Enabled"=dword:00000000 +"SubscribedContent-314563Enabled"=dword:00000000 +"SubscribedContent-338388Enabled"=dword:00000000 +"SubscribedContent-338389Enabled"=dword:00000000 +"SubscribedContent-338393Enabled"=dword:00000000 +"SubscribedContent-353694Enabled"=dword:00000000 +"SubscribedContent-353696Enabled"=dword:00000000 +"SubscribedContent-353698Enabled"=dword:00000000 +"SubscribedContentEnabled"=dword:00000000 +"SystemPaneSuggestionsEnabled"=dword:00000000 + +; OTHER +; remove gallery +[HKEY_CURRENT_USER\Software\Classes\CLSID\{e88865ea-0e1c-4e20-9aa6-edcd0212c87c}] +"System.IsPinnedToNameSpaceTree"=dword:00000000 + +; restore the classic context menu +[HKEY_CURRENT_USER\Software\Classes\CLSID\{86ca1aa0-34aa-4e8b-a509-50c905bae2a2}\InprocServer32] +@="" + +; removes OneDrive Setup +[-HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] +"OneDriveSetup"=- + +; Hides the Try New Outlook Button +[HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\Options\General] +"HideNewOutlookToggle"=dword:00000000 +"@ + Set-Content -Path "$env:TEMP\Optimize_User_Registry.reg" -Value $MultilineComment -Force + Regedit.exe /S "$env:TEMP\Optimize_User_Registry.reg" + Show-Header + Write-Host "Recommended User Registry Settings Applied." -ForegroundColor Green + Wait-IfNotSpecialize +} + +function Set-DefaultHKCURegistry { + Clear-Host + Write-Host "Restoring User Default Registry Settings . . ." + $MultilineComment = @" +Windows Registry Editor Version 5.00 + +; --LEGACY CONTROL PANEL-- +; EASE OF ACCESS +; narrator +[HKEY_CURRENT_USER\Software\Microsoft\Narrator\NoRoam] +"DuckAudio"=- +"WinEnterLaunchEnabled"=- +"ScriptingEnabled"=- +"OnlineServicesEnabled"=- +"EchoToggleKeys"=- + +; narrator settings +[HKEY_CURRENT_USER\Software\Microsoft\Narrator] +"NarratorCursorHighlight"=- +"CoupleNarratorCursorKeyboard"=- +"IntonationPause"=- +"ReadHints"=- +"ErrorNotificationType"=- +"EchoChars"=- +"EchoWords"=- + +[-HKEY_CURRENT_USER\SOFTWARE\Microsoft\Narrator\NarratorHome] + +; ease of access settings +[-HKEY_CURRENT_USER\Software\Microsoft\Ease of Access] + +[HKEY_CURRENT_USER\Control Panel\Accessibility] +"Sound on Activation"=- +"Warning Sounds"=- + +[HKEY_CURRENT_USER\Control Panel\Accessibility\HighContrast] +"Flags"="126" + +[HKEY_CURRENT_USER\Control Panel\Accessibility\Keyboard Response] +"Flags"="126" +"AutoRepeatRate"="500" +"AutoRepeatDelay"="1000" + +[HKEY_CURRENT_USER\Control Panel\Accessibility\MouseKeys] +"Flags"="62" +"MaximumSpeed"="80" +"TimeToMaximumSpeed"="3000" + +[HKEY_CURRENT_USER\Control Panel\Accessibility\StickyKeys] +"Flags"="510" + +[HKEY_CURRENT_USER\Control Panel\Accessibility\ToggleKeys] +"Flags"="62" + +[HKEY_CURRENT_USER\Control Panel\Accessibility\SoundSentry] +"Flags"="2" +"FSTextEffect"="0" +"TextEffect"="0" +"WindowsEffect"="1" + +[HKEY_CURRENT_USER\Control Panel\Accessibility\SlateLaunch] +"ATapp"="narrator" +"LaunchAT"=dword:00000001 + +; CLOCK AND REGION +; notify me when the clock changes +[-HKEY_CURRENT_USER\Control Panel\TimeDate] + +; APPEARANCE AND PERSONALIZATION +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced] +"LaunchTo"=- +"HideFileExt"=dword:00000001 +"FolderContentsInfoTip"=- +"ShowInfoTip"=dword:00000001 +"ShowPreviewHandlers"=- +"ShowStatusBar"=dword:00000001 +"ShowSyncProviderNotifications"=- +"SharingWizardOn"=- +"TaskbarAnimations"=dword:1 +"IconsOnly"=dword:0 +"ListviewAlphaSelect"=dword:1 +"ListviewShadow"=dword:1 +"Start_Layout"=- +"Start_AccountNotifications"=- +"Start_TrackDocs"=- +"TaskbarAl"=- +"TaskbarMn"=- +"ShowTaskViewButton"=- +"ShowCopilotButton"=- +"Start_IrisRecommendations"=- +"TaskbarSn"=- +"SnapAssist"=- +"DITest"=- +"EnableSnapBar"=- +"EnableTaskGroups"=- +"EnableSnapAssistFlyout"=- +"SnapFill"=- +"JointResize"=- +"MultiTaskingAltTabFilter"=- + +; frequent folders in quick access +; show files from office.com +; don't show all taskbar icons +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer] +"ShowFrequent"=- +"ShowCloudFilesInQuickAccess"=- +"EnableAutoTray"=- + +; display full path in the title bar +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CabinetState] +"FullPath"=dword:00000000 + +; HARDWARE AND SOUND +; sound communications +[HKEY_CURRENT_USER\Software\Microsoft\Multimedia\Audio] +"UserDuckingPreference"=- + +; enhance pointer precision +; mouse (default accel with epp on) +[HKEY_CURRENT_USER\Control Panel\Mouse] +"MouseSpeed"="1" +"MouseThreshold1"="6" +"MouseThreshold2"="10" +"MouseSensitivity"="10" +"SmoothMouseXCurve"=hex:00,00,00,00,00,00,00,00,15,6e,00,00,00,00,00,00,00,40,\ + 01,00,00,00,00,00,29,dc,03,00,00,00,00,00,00,00,28,00,00,00,00,00 +"SmoothMouseYCurve"=hex:00,00,00,00,00,00,00,00,fd,11,01,00,00,00,00,00,00,24,\ + 04,00,00,00,00,00,00,fc,12,00,00,00,00,00,00,c0,bb,01,00,00,00,00 + +; SYSTEM AND SECURITY +; set appearance options +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\VisualEffects] +"VisualFXSetting"=- + +; animate controls and elements inside windows +; fade or slide menus into view +; fade or slide tooltips into view +; fade out menu items after clicking +; show shadows under mouse pointer +; show shadows under windows +; slide open combo boxes +; smooth-scroll list boxes +; smooth edges of screen fonts +; dpi scaling +; fix scaling for apps +; menu show delay +[HKEY_CURRENT_USER\Control Panel\Desktop] +"UserPreferencesMask"=hex(2):9e,1e,07,80,12,00,00,00 +"FontSmoothing"="2" +"LogPixels"=- +"Win8DpiScaling"=dword:00000000 +"EnablePerProcessSystemDPI"=- +"MenuShowDelay"="400" + +; --IMMERSIVE CONTROL PANEL-- +; PRIVACY +; show me notification in the settings app +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\SystemSettings\AccountNotifications] +"EnableAccountNotifications"=- + +; allow location override +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\CPSS\Store\UserLocationOverridePrivacySetting] +"Value"=dword:00000001 + +; voice activation +[-HKEY_CURRENT_USER\Software\Microsoft\Speech_OneCore\Settings] + +; other devices +[-HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\bluetoothSync] + +; let websites show me locally relevant content by accessing my language list +[HKEY_CURRENT_USER\Control Panel\International\User Profile] +"HttpAcceptLanguageOptOut"=- + +; let windows improve start and search results by tracking app launches +[-HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\EdgeUI] + +; personal inking and typing dictionary +[HKEY_CURRENT_USER\Software\Microsoft\InputPersonalization] +"RestrictImplicitInkCollection"=dword:00000000 +"RestrictImplicitTextCollection"=dword:00000000 + +[HKEY_CURRENT_USER\Software\Microsoft\InputPersonalization\TrainedDataStore] +"HarvestContacts"=dword:00000001 + +[HKEY_CURRENT_USER\Software\Microsoft\Personalization\Settings] +"AcceptedPrivacyPolicy"=dword:00000001 + +; feedback frequency +[-HKEY_CURRENT_USER\SOFTWARE\Microsoft\Siuf] + +; SEARCH +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\SearchSettings] +"IsDynamicSearchBoxEnabled"=- +"IsDeviceSearchHistoryEnabled"=- +"SafeSearchMode"=- +"IsAADCloudSearchEnabled"=- +"IsMSACloudSearchEnabled"=- + +; EASE OF ACCESS +; magnifier settings +[HKEY_CURRENT_USER\SOFTWARE\Microsoft\ScreenMagnifier] +"FollowCaret"=- +"FollowNarrator"=- +"FollowMouse"=- +"FollowFocus"=- + +; GAMING +; game bar +[HKEY_CURRENT_USER\System\GameConfigStore] +"GameDVR_Enabled"=dword:00000000 + +; enable open xbox game bar using game controller +; game mode +[HKEY_CURRENT_USER\Software\Microsoft\GameBar] +"UseNexusForGameBarEnabled"=- +"AutoGameModeEnabled"=- + +; other settings +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\GameDVR] +"AppCaptureEnabled"=- +"AudioEncodingBitrate"=- +"AudioCaptureEnabled"=- +"CustomVideoEncodingBitrate"=- +"CustomVideoEncodingHeight"=- +"CustomVideoEncodingWidth"=- +"HistoricalBufferLength"=- +"HistoricalBufferLengthUnit"=- +"HistoricalCaptureEnabled"=- +"HistoricalCaptureOnBatteryAllowed"=- +"HistoricalCaptureOnWirelessDisplayAllowed"=- +"MaximumRecordLength"=- +"VideoEncodingBitrateMode"=- +"VideoEncodingResolutionMode"=- +"VideoEncodingFrameRateMode"=- +"EchoCancellationEnabled"=- +"CursorCaptureEnabled"=- +"VKToggleGameBar"=- +"VKMToggleGameBar"=- +"VKSaveHistoricalVideo"=- +"VKMSaveHistoricalVideo"=- +"VKToggleRecording"=- +"VKMToggleRecording"=- +"VKTakeScreenshot"=- +"VKMTakeScreenshot"=- +"VKToggleRecordingIndicator"=- +"VKMToggleRecordingIndicator"=- +"VKToggleMicrophoneCapture"=- +"VKMToggleMicrophoneCapture"=- +"VKToggleCameraCapture"=- +"VKMToggleCameraCapture"=- +"VKToggleBroadcast"=- +"VKMToggleBroadcast"=- +"MicrophoneCaptureEnabled"=- +"SystemAudioGain"=- +"MicrophoneGain"=- + +; TIME & LANGUAGE +; show the voice typing mic button +; typing insights +[HKEY_CURRENT_USER\Software\Microsoft\input\Settings] +"IsVoiceTypingKeyEnabled"=- +"InsightsEnabled"=- + +; capitalize the first letter of each sentence +; play key sounds as i type +; add a period after i double-tap the spacebar +; show key background +[HKEY_CURRENT_USER\Software\Microsoft\TabletTip\1.7] +"EnableAutoShiftEngage"=- +"EnableKeyAudioFeedback"=- +"EnableDoubleTapSpace"=- +"IsKeyBackgroundEnabled"=- + +; PERSONALIZATION +; light theme +[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize] +"AppsUseLightTheme"=dword:00000001 +"SystemUsesLightTheme"=dword:00000001 + +[-HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows\Explorer] + +[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] + +; search from taskbar +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Search] +"SearchboxTaskbarMode"=- + +; meet now +[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] + +; use dynamic lighting on my devices +; compatible apps in the forground always control lighting +; match my windows accent color +[HKEY_CURRENT_USER\Software\Microsoft\Lighting] +"AmbientLightingEnabled"=dword:00000001 +"ControlledByForegroundApp"=- +"UseSystemAccentColor"=dword:00000001 + +; DEVICES +; let windows manage my default printer +[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows] +"LegacyDefaultPrinterMode"=dword:ffffffff + +; write with your fingertip +[-HKEY_CURRENT_USER\Software\Microsoft\TabletTip\EmbeddedInkControl] + +; SYSTEM +[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\DWM] +"UseDpiScaling"=- + +; variable refresh rate & optimizations for windowed games +[HKEY_CURRENT_USER\Software\Microsoft\DirectX\UserGpuPreferences] +"DirectXUserGlobalSettings"=- + +; Notification defaults +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\PushNotifications] +"ToastEnabled"=- +"LockScreenToastEnabled"=- + +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings] +"NOC_GLOBAL_SETTING_ALLOW_NOTIFICATION_SOUND"=- +"NOC_GLOBAL_SETTING_ALLOW_TOASTS_ABOVE_LOCK"=- +"NOC_GLOBAL_SETTING_ALLOW_CRITICAL_TOASTS_ABOVE_LOCK"=- + +[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings\Windows.SystemToast.SecurityAndMaintenance] + +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings\windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel] +"Enabled"=- + +[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings\Windows.SystemToast.CapabilityAccess] + +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings\Windows.SystemToast.StartupApp] +"Enabled"=dword:00000000 + +[-HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\UserProfileEngagement] + +; suggested actions +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\SmartActionPlatform\SmartClipboard] +"Disabled"=- + +; battery options optimize +[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\VideoSettings] + +; UWP APPS +; disable windows input experience preload +[HKEY_CURRENT_USER\Software\Microsoft\input] +"IsInputAppPreloadEnabled"=- + +[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Dsh] + +; copilot +[-HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\WindowsCopilot] + +; ADVERTISING & PROMOTIONAL +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager] +"ContentDeliveryAllowed"=dword:00000001 +"FeatureManagementEnabled"=dword:00000001 +"OemPreInstalledAppsEnabled"=dword:00000001 +"PreInstalledAppsEnabled"=dword:00000001 +"PreInstalledAppsEverEnabled"=dword:00000001 +"RotatingLockScreenEnabled"=dword:00000001 +"RotatingLockScreenOverlayEnabled"=dword:00000001 +"SilentInstalledAppsEnabled"=dword:00000001 +"SlideshowEnabled"=dword:00000001 +"SoftLandingEnabled"=dword:00000001 +"SubscribedContent-310093Enabled"=- +"SubscribedContent-314563Enabled"=- +"SubscribedContent-338388Enabled"=- +"SubscribedContent-338389Enabled"=- +"SubscribedContent-338393Enabled"=- +"SubscribedContent-353694Enabled"=- +"SubscribedContent-353696Enabled"=- +"SubscribedContent-353698Enabled"=- +"SubscribedContentEnabled"=dword:00000001 +"SystemPaneSuggestionsEnabled"=dword:00000001 + +; OTHER +; gallery +[-HKEY_CURRENT_USER\Software\Classes\CLSID\{e88865ea-0e1c-4e20-9aa6-edcd0212c87c}] + +; context menu +[-HKEY_CURRENT_USER\Software\Classes\CLSID\{86ca1aa0-34aa-4e8b-a509-50c905bae2a2}] +"@ + Set-Content -Path "$env:TEMP\Restore_User_Registry.reg" -Value $MultilineComment -Force + Regedit.exe /S "$env:TEMP\Restore_User_Registry.reg" + Show-Header + Write-Host "Default User Registry Settings Applied." -ForegroundColor Green + Wait-IfNotSpecialize +} +# End of Registry Optimizations + +# Start of Tasks and Services Functions +function Set-ServiceStartup { + # List of services to set to Disabled + $disabledServices = @( + 'AJRouter', 'AssignedAccessManagerSvc', 'AppIDSvc', 'BDESVC', 'DiagTrack', + 'DPS', 'EFS', 'FontCache', 'PcaSvc', 'RmSvc', 'WSearch', 'WbioSrvc', 'lfsvc' + ) + + # List of services to set to Manual + $manualServices = @( + 'BITS', 'CDPSvc', 'DusmSvc', 'LanmanServer', 'LanmanWorkstation', + 'Spooler', 'StateRepository', 'StorSvc', 'SysMain', 'TokenBroker', + 'TrkWks', 'UsoSvc', 'WpnService', 'edgeupdate', 'edgeupdatem', + 'iphlpsvc', 'sppsvc' + ) + + # Set the services in the disabledServices list to Disabled + foreach ($service in $disabledServices) { + try { + Set-Service -Name $service -StartupType Disabled -ErrorAction SilentlyContinue | Out-Null + } + catch { + Show-Header + Write-Host "Failed to set $service to Disabled: $_" -ForegroundColor Yellow + Wait-IfNotSpecialize + } + } + + # Set the services in the manualServices list to Manual + foreach ($service in $manualServices) { + try { + Set-Service -Name $service -StartupType Manual -ErrorAction SilentlyContinue | Out-Null + } + catch { + Show-Header + Write-Host "Failed to set $service to Manual: $_" -ForegroundColor Yellow + Wait-IfNotSpecialize + } + } + + Show-Header + Write-Host "Service startup types updated successfully." -ForegroundColor Green + Wait-IfNotSpecialize +} + +function Set-DefaultServices { + # Get all services that are not currently set to Automatic and revert them + $allServices = Get-Service | Where-Object { $_.StartType -ne 'Automatic' } + + $successCount = 0 + foreach ($service in $allServices) { + try { + Show-Header + Write-Host "Setting services to Automatic where permissions are allowed. Please wait . . ." + # Set the service startup type to Automatic using Set-Service + Set-Service -Name $service.Name -StartupType Automatic 2>&1 | Out-Null + + # Forcibly set the startup type to Automatic using WMI as a fallback + $wmiService = Get-WmiObject -Class Win32_Service -Filter "Name='$($service.Name)'" 2>&1 | Out-Null + if ($wmiService) { + $result = $wmiService.ChangeStartMode("Automatic") 2>&1 | Out-Null + if ($result.ReturnValue -eq 0) { + $successCount++ + } + } + } + catch { + # Silently continue if a service fails + continue + } + } + Show-Header + Write-Host "Successfully set services to Automatic where permissions allowed." -ForegroundColor Green + Wait-IfNotSpecialize +} + +function Disable-ScheduledTasks { + # Define the list of scheduled tasks to disable + $scheduledTasks = @( + "Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser", + "Microsoft\Windows\Application Experience\ProgramDataUpdater", + "Microsoft\Windows\Autochk\Proxy", + "Microsoft\Windows\Customer Experience Improvement Program\Consolidator", + "Microsoft\Windows\Customer Experience Improvement Program\UsbCeip", + "Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector", + "Microsoft\Windows\Feedback\Siuf\DmClient", + "Microsoft\Windows\Feedback\Siuf\DmClientOnScenarioDownload", + "Microsoft\Windows\Windows Error Reporting\QueueReporting", + "Microsoft\Windows\Application Experience\MareBackup", + "Microsoft\Windows\Application Experience\StartupAppTask", + "Microsoft\Windows\Application Experience\PcaPatchDbTask", + "Microsoft\Windows\Maps\MapsUpdateTask" + ) + + $successCount = 0 + foreach ($task in $scheduledTasks) { + try { + # Disable the task without wildcards + schtasks /Change /TN $task /Disable 2>&1 | Out-Null + $successCount++ + } + catch { + # Silently continue if a task fails + continue + } + } + + Show-Header + Write-Host "Successfully disabled unneeded scheduled tasks." -ForegroundColor Green + Wait-IfNotSpecialize +} + +function Enable-ScheduledTasks { + # Define the list of scheduled tasks to enable (same as those to disable) + $scheduledTasks = @( + "Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser", + "Microsoft\Windows\Application Experience\ProgramDataUpdater", + "Microsoft\Windows\Autochk\Proxy", + "Microsoft\Windows\Customer Experience Improvement Program\Consolidator", + "Microsoft\Windows\Customer Experience Improvement Program\UsbCeip", + "Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector", + "Microsoft\Windows\Feedback\Siuf\DmClient", + "Microsoft\Windows\Feedback\Siuf\DmClientOnScenarioDownload", + "Microsoft\Windows\Windows Error Reporting\QueueReporting", + "Microsoft\Windows\Application Experience\MareBackup", + "Microsoft\Windows\Application Experience\StartupAppTask", + "Microsoft\Windows\Application Experience\PcaPatchDbTask", + "Microsoft\Windows\Maps\MapsUpdateTask" + ) + + $successCount = 0 + foreach ($task in $scheduledTasks) { + try { + # Disable the task without wildcards + schtasks /Change /TN $task /Disable 2>&1 | Out-Null + $successCount++ + } + catch { + # Silently continue if a task fails + continue + } + } + + Show-Header + Write-Host "Successfully Enabled Default scheduled tasks." -ForegroundColor Green + Wait-IfNotSpecialize +} +# End of Tasks and Services Functions + +# Start of Power Settings Functions +function Set-RecommendedPowerSettings { + Clear-Host + # Import and set Ultimate power plan + cmd /c "powercfg /duplicatescheme e9a42b02-d5df-448d-aa00-03f14749eb61 99999999-9999-9999-9999-999999999999 >nul 2>&1 & powercfg /SETACTIVE 99999999-9999-9999-9999-999999999999 >nul 2>&1" + + # Get all power plans and delete them + powercfg /L | ForEach-Object { + if ($_ -match "^\s*Power Scheme GUID: (\S+)") { + $guid = $matches[1] + if ($guid -ne "99999999-9999-9999-9999-999999999999") { + cmd /c "powercfg /delete $guid" | Out-Null + } + } + } + + # Registry modifications + $regChanges = @( + 'HKLM\SYSTEM\CurrentControlSet\Control\Power /v HibernateEnabled /t REG_DWORD /d 0', # Disables hibernate + 'HKLM\SYSTEM\CurrentControlSet\Control\Power /v HibernateEnabledDefault /t REG_DWORD /d 0', # Disables default hibernate settings + 'HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\FlyoutMenuSettings /v ShowLockOption /t REG_DWORD /d 0', # Hides the Lock option from the Power menu + 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FlyoutMenuSettings /v ShowSleepOption /t REG_DWORD /d 0', # Hides the Sleep option from the Power menu + 'HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Power /v HiberbootEnabled /t REG_DWORD /d 0', # Disables Fast Startup (Hiberboot) + 'HKLM\SYSTEM\ControlSet001\Control\Power\PowerSettings\54533251-82be-4824-96c1-47b60b740d00\0cc5b647-c1df-4637-891a-dec35c318583 /v ValueMax /t REG_DWORD /d 0', # Unparks CPU cores by setting the maximum processor state + 'HKLM\SYSTEM\CurrentControlSet\Control\Power\PowerThrottling /v PowerThrottlingOff /t REG_DWORD /d 1', # Disables power throttling + 'HKLM\System\ControlSet001\Control\Power\PowerSettings\2a737441-1930-4402-8d77-b2bebba308a3\0853a681-27c8-4100-a2fd-82013e970683 /v Attributes /t REG_DWORD /d 2', # Unhides "Hub Selective Suspend Timeout" + 'HKLM\System\ControlSet001\Control\Power\PowerSettings\2a737441-1930-4402-8d77-b2bebba308a3\d4e98f31-5ffe-4ce1-be31-1b38b384c009 /v Attributes /t REG_DWORD /d 2' # Unhides "USB 3 Link Power Management" + ) + + + foreach ($reg in $regChanges) { + cmd /c "reg add `$reg` /f >nul 2>&1" + } + + # Modify Power Plan settings + $settings = @( + @{ + SubgroupGUID = "0012ee47-9041-4b5d-9b77-535fba8b1442" # Hard Disk + SettingGUIDs = @("6738e2c4-e8a5-4a42-b16a-e040e769756e") # Turn off hard disk after + }, + @{ + SubgroupGUID = "0d7dbae2-4294-402a-ba8e-26777e8488cd" # Desktop Background Settings + SettingGUIDs = @("309dce9b-bef4-4119-9921-a851fb12f0f4") # Slide show + }, + @{ + SubgroupGUID = "19cbb8fa-5279-450e-9fac-8a3d5fedd0c1" # Wireless Adapter Settings + SettingGUIDs = @("12bbebe6-58d6-4636-95bb-3217ef867c1a") # Power saving mode + }, + @{ + SubgroupGUID = "238c9fa8-0aad-41ed-83f4-97be242c8f20" # Sleep + SettingGUIDs = @( + "29f6c1db-86da-48c5-9fdb-f2b67b1f44da", # Sleep after + "94ac6d29-73ce-41a6-809f-6363ba21b47e", # Allow hybrid sleep + "9d7815a6-7ee4-497e-8888-515a05f02364", # Hibernate after + "bd3b718a-0680-4d9d-8ab2-e1d2b4ac806d" # Allow wake timers + ) + }, + @{ + SubgroupGUID = "2a737441-1930-4402-8d77-b2bebba308a3" # USB Settings + SettingGUIDs = @( + "0853a681-27c8-4100-a2fd-82013e970683", # USB selective suspend setting + "48e6b7a6-50f5-4782-a5d4-53bb8f07e226", # USB 3 Link Power Management + "d4e98f31-5ffe-4ce1-be31-1b38b384c009" # USB Hub Selective Suspend Timeout + ) + }, + @{ + SubgroupGUID = "501a4d13-42af-4429-9fd1-a8218c268e20" # PCI Express + SettingGUIDs = @("ee12f906-d277-404b-b6da-e5fa1a576df5") # Link State Power Management + }, + @{ + SubgroupGUID = "7516b95f-f776-4464-8c53-06167f40cc99" # Display settings + SettingGUIDs = @("3c0bc021-c8a8-4e07-a973-6b14cbcb2b7e") # Turn off Display After setting + } + ) + + + foreach ($group in $settings) { + $subgroup = $group.SubgroupGUID + foreach ($setting in $group.SettingGUIDs) { + powercfg /setacvalueindex 99999999-9999-9999-9999-999999999999 $subgroup $setting 0x00000000 + powercfg /setdcvalueindex 99999999-9999-9999-9999-999999999999 $subgroup $setting 0x00000000 + } + } + + if (-not $isSpecializePhase) { + Show-Header + Write-Host "Recommended Power Settings Applied." -ForegroundColor Green + Wait-IfNotSpecialize + return + } +} + +function Set-DefaultPowerSettings { + Clear-Host + # Restore default power plans and enable hibernate + powercfg -restoredefaultschemes + cmd /c "powercfg /hibernate on >nul 2>&1" + cmd /c "reg add `"HKLM\SYSTEM\CurrentControlSet\Control\Power`" /v `"HibernateEnabledDefault`" /t REG_DWORD /d `"1`" /f >nul 2>&1" + + # Registry modifications + $regChanges = @( + 'HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\FlyoutMenuSettings /v ShowLockOption /t REG_DWORD /d 1', + 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FlyoutMenuSettings /v ShowSleepOption /t REG_DWORD /d 1', + 'HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Power /v HiberbootEnabled /t REG_DWORD /d 1', + 'HKLM\SYSTEM\ControlSet001\Control\Power\PowerSettings\54533251-82be-4824-96c1-47b60b740d00\0cc5b647-c1df-4637-891a-dec35c318583 /v ValueMax /t REG_DWORD /d 100', + 'HKLM\System\ControlSet001\Control\Power\PowerSettings\2a737441-1930-4402-8d77-b2bebba308a3\0853a681-27c8-4100-a2fd-82013e970683 /v Attributes /t REG_DWORD /d 1', + 'HKLM\System\ControlSet001\Control\Power\PowerSettings\2a737441-1930-4402-8d77-b2bebba308a3\d4e98f31-5ffe-4ce1-be31-1b38b384c009 /v Attributes /t REG_DWORD /d 1' + ) + + foreach ($reg in $regChanges) { + cmd /c "reg add `$reg` /f >nul 2>&1" + } + + Show-Header + Write-Host "Default Power Settings Applied." -ForegroundColor Green + Wait-IfNotSpecialize + return +} + +# End of Power Settings Functions + +# END OF COMMAND & OPERATION FUNCTIONS + +# Check if this is running in the specialize phase to Apply Settings automatically during Windows Installation +if (Test-Path -Path $markerFilePath) { + # Bloatware Apps + Get-AppxProvisionedPackage -Online | + Where-Object { $appxPackages -contains $_.DisplayName } | + Remove-AppxProvisionedPackage -AllUsers -Online -ErrorAction SilentlyContinue + # Legacy Windows Features & Apps + Get-WindowsCapability -Online | + Where-Object { $capabilities -contains ($_.Name -split '~')[0] } | + Remove-WindowsCapability -Online -ErrorAction SilentlyContinue + # Additional Software & Apps + Set-AppsRegistry + Remove-OneDrive + Disable-Recall + # Privacy & Security + Set-RecommendedPrivacySettings + # Windows Updates + Set-RecommendedUpdateSettings + # Optimize Registry + Set-RecommendedHKLMRegistry + # Tasks and Services + Disable-ScheduledTasks + Set-ServiceStartup + # Power Settings + Set-RecommendedPowerSettings + exit +} + +# Main loop to keep showing the main menu +while ($script:loop) { + Show-MainMenu +} + ]]> + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +"@ + +# Define Unicode characters for checkmark and cross +$checkmark = [char]0x2713 # Unicode for ✓ +$cross = [char]0x2717 # Unicode for ✗ + +# Load XAML +Add-Type -AssemblyName PresentationFramework +[xml]$xamlParsed = $xaml +$xamlWindow = [Windows.Markup.XamlReader]::Load((New-Object System.Xml.XmlNodeReader $xamlParsed)) + +# Applies User Account Settings +Try { + +# Uninstall Copilot +Get-AppxPackage -Name 'Microsoft.Copilot' | Remove-AppxPackage +Get-AppxPackage -Name 'Microsoft.Windows.Ai.Copilot.Provider' | Remove-AppxPackage + +$MultilineComment = @" +Windows Registry Editor Version 5.00 + +; EASE OF ACCESS +; disable narrator +[HKEY_CURRENT_USER\Software\Microsoft\Narrator\NoRoam] +"DuckAudio"=dword:00000000 +"WinEnterLaunchEnabled"=dword:00000000 +"ScriptingEnabled"=dword:00000000 +"OnlineServicesEnabled"=dword:00000000 +"EchoToggleKeys"=dword:00000000 + +; disable narrator settings +[HKEY_CURRENT_USER\Software\Microsoft\Narrator] +"NarratorCursorHighlight"=dword:00000000 +"CoupleNarratorCursorKeyboard"=dword:00000000 +"IntonationPause"=dword:00000000 +"ReadHints"=dword:00000000 +"ErrorNotificationType"=dword:00000000 +"EchoChars"=dword:00000000 +"EchoWords"=dword:00000000 + +[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Narrator\NarratorHome] +"MinimizeType"=dword:00000000 +"AutoStart"=dword:00000000 + +; disable ease of access settings +[HKEY_CURRENT_USER\Software\Microsoft\Ease of Access] +"selfvoice"=dword:00000000 +"selfscan"=dword:00000000 + +[HKEY_CURRENT_USER\Control Panel\Accessibility] +"Sound on Activation"=dword:00000000 +"Warning Sounds"=dword:00000000 + +[HKEY_CURRENT_USER\Control Panel\Accessibility\HighContrast] +"Flags"="4194" + +[HKEY_CURRENT_USER\Control Panel\Accessibility\Keyboard Response] +"Flags"="2" +"AutoRepeatRate"="0" +"AutoRepeatDelay"="0" + +[HKEY_CURRENT_USER\Control Panel\Accessibility\MouseKeys] +"Flags"="130" +"MaximumSpeed"="39" +"TimeToMaximumSpeed"="3000" + +[HKEY_CURRENT_USER\Control Panel\Accessibility\StickyKeys] +"Flags"="2" + +[HKEY_CURRENT_USER\Control Panel\Accessibility\ToggleKeys] +"Flags"="34" + +[HKEY_CURRENT_USER\Control Panel\Accessibility\SoundSentry] +"Flags"="0" +"FSTextEffect"="0" +"TextEffect"="0" +"WindowsEffect"="0" + +[HKEY_CURRENT_USER\Control Panel\Accessibility\SlateLaunch] +"ATapp"="" +"LaunchAT"=dword:00000000 + +; CLOCK AND REGION +; disable notify me when the clock changes +[HKEY_CURRENT_USER\Control Panel\TimeDate] +"DstNotification"=dword:00000000 + +; APPEARANCE AND PERSONALIZATION +; open file explorer to this pc +; show file name extensions +; disable display file size information in folder tips +; disable show pop-up description for folder and desktop items +; disable show preview handlers in preview pane +; disable show status bar +; disable show sync provider notifications +; disable use sharing wizard +; disable animations in the taskbar +; enable show thumbnails instead of icons +; disable show translucent selection rectangle +; disable use drop shadows for icon labels on the desktop +; more pins personalization start +; disable show account-related notifications +; disable show recently opened items in start, jump lists and file explorer +; left taskbar alignment +; remove chat from taskbar +; remove task view from taskbar +; remove copilot from taskbar +; disable show recommendations for tips shortcuts new apps and more +; disable share any window from my taskbar +; disable snap window settings - SnapAssist to JointResize Entries +; alt tab open windows only +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced] +"LaunchTo"=dword:00000001 +"HideFileExt"=dword:00000000 +"FolderContentsInfoTip"=dword:00000000 +"ShowInfoTip"=dword:00000000 +"ShowPreviewHandlers"=dword:00000000 +"ShowStatusBar"=dword:00000000 +"ShowSyncProviderNotifications"=dword:00000000 +"SharingWizardOn"=dword:00000000 +"TaskbarAnimations"=dword:0 +"IconsOnly"=dword:0 +"ListviewAlphaSelect"=dword:0 +"ListviewShadow"=dword:0 +"Start_Layout"=dword:00000001 +"Start_AccountNotifications"=dword:00000000 +"Start_TrackDocs"=dword:00000000 +"TaskbarAl"=dword:00000000 +"TaskbarMn"=dword:00000000 +"ShowTaskViewButton"=dword:00000000 +"ShowCopilotButton"=dword:00000000 +"Start_IrisRecommendations"=dword:00000000 +"TaskbarSn"=dword:00000000 +"SnapAssist"=dword:00000000 +"DITest"=dword:00000000 +"EnableSnapBar"=dword:00000000 +"EnableTaskGroups"=dword:00000000 +"EnableSnapAssistFlyout"=dword:00000000 +"SnapFill"=dword:00000000 +"JointResize"=dword:00000000 +"MultiTaskingAltTabFilter"=dword:00000003 + +; hide frequent folders in quick access +; disable show files from office.com +; show all taskbar icons on Windows 10 +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer] +"ShowFrequent"=dword:00000000 +"ShowCloudFilesInQuickAccess"=dword:00000000 +"EnableAutoTray"=dword:00000000 + +; enable display full path in the title bar +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CabinetState] +"FullPath"=dword:00000001 + +; HARDWARE AND SOUND +; sound communications do nothing +[HKEY_CURRENT_USER\Software\Microsoft\Multimedia\Audio] +"UserDuckingPreference"=dword:00000003 + +; disable enhance pointer precision +; mouse fix (no accel with epp on) +[HKEY_CURRENT_USER\Control Panel\Mouse] +"MouseSpeed"="0" +"MouseThreshold1"="0" +"MouseThreshold2"="0" +"MouseSensitivity"="10" +"SmoothMouseXCurve"=hex:\ + 00,00,00,00,00,00,00,00,\ + C0,CC,0C,00,00,00,00,00,\ + 80,99,19,00,00,00,00,00,\ + 40,66,26,00,00,00,00,00,\ + 00,33,33,00,00,00,00,00 +"SmoothMouseYCurve"=hex:\ + 00,00,00,00,00,00,00,00,\ + 00,00,38,00,00,00,00,00,\ + 00,00,70,00,00,00,00,00,\ + 00,00,A8,00,00,00,00,00,\ + 00,00,E0,00,00,00,00,00 + +; SYSTEM AND SECURITY +; set appearance options to custom +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\VisualEffects] +"VisualFXSetting"=dword:3 + +; disable animate controls and elements inside windows +; disable fade or slide menus into view +; disable fade or slide tooltips into view +; disable fade out menu items after clicking +; disable show shadows under mouse pointer +; disable show shadows under windows +; disable slide open combo boxes +; disable smooth-scroll list boxes +; enable smooth edges of screen fonts +; 100% dpi scaling +; disable fix scaling for apps +; disable menu show delay +[HKEY_CURRENT_USER\Control Panel\Desktop] +"UserPreferencesMask"=hex(2):90,12,03,80,10,00,00,00 +"FontSmoothing"="2" +"LogPixels"=dword:00000060 +"Win8DpiScaling"=dword:00000001 +"EnablePerProcessSystemDPI"=dword:00000000 +"MenuShowDelay"="0" + +; --IMMERSIVE CONTROL PANEL-- +; PRIVACY +; disable show me notification in the settings app +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\SystemSettings\AccountNotifications] +"EnableAccountNotifications"=dword:00000000 + +; disable voice activation +[HKEY_CURRENT_USER\Software\Microsoft\Speech_OneCore\Settings\VoiceActivation\UserPreferenceForAllApps] +"AgentActivationEnabled"=dword:00000000 + +[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Speech_OneCore\Settings\VoiceActivation\UserPreferenceForAllApps] +"AgentActivationLastUsed"=dword:00000000 + +; disable other devices +[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\bluetoothSync] +"Value"="Deny" + +; disable let websites show me locally relevant content by accessing my language list +[HKEY_CURRENT_USER\Control Panel\International\User Profile] +"HttpAcceptLanguageOptOut"=dword:00000001 + +; disable let windows improve start and search results by tracking app launches +[HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\EdgeUI] +"DisableMFUTracking"=dword:00000001 + +; disable personal inking and typing dictionary +[HKEY_CURRENT_USER\Software\Microsoft\InputPersonalization] +"RestrictImplicitInkCollection"=dword:00000001 +"RestrictImplicitTextCollection"=dword:00000001 + +[HKEY_CURRENT_USER\Software\Microsoft\InputPersonalization\TrainedDataStore] +"HarvestContacts"=dword:00000000 + +[HKEY_CURRENT_USER\Software\Microsoft\Personalization\Settings] +"AcceptedPrivacyPolicy"=dword:00000000 + +; feedback frequency never +[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Siuf\Rules] +"NumberOfSIUFInPeriod"=dword:00000000 +"PeriodInNanoSeconds"=- + +; SEARCH +; disable search highlights +; disable search history +; disable safe search +; disable cloud content search for work or school account +; disable cloud content search for microsoft account +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\SearchSettings] +"IsDynamicSearchBoxEnabled"=dword:00000000 +"IsDeviceSearchHistoryEnabled"=dword:00000000 +"SafeSearchMode"=dword:00000000 +"IsAADCloudSearchEnabled"=dword:00000000 +"IsMSACloudSearchEnabled"=dword:00000000 + +; EASE OF ACCESS +; disable magnifier settings +[HKEY_CURRENT_USER\SOFTWARE\Microsoft\ScreenMagnifier] +"FollowCaret"=dword:00000000 +"FollowNarrator"=dword:00000000 +"FollowMouse"=dword:00000000 +"FollowFocus"=dword:00000000 + +; GAMING +; disable game bar +[HKEY_CURRENT_USER\System\GameConfigStore] +"GameDVR_Enabled"=dword:00000000 + +; disable enable open xbox game bar using game controller +; enable game mode +[HKEY_CURRENT_USER\Software\Microsoft\GameBar] +"UseNexusForGameBarEnabled"=dword:00000000 +"AutoGameModeEnabled"=dword:00000001 + +; other settings +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\GameDVR] +"AppCaptureEnabled"=dword:00000000 +"AudioEncodingBitrate"=dword:0001f400 +"AudioCaptureEnabled"=dword:00000000 +"CustomVideoEncodingBitrate"=dword:003d0900 +"CustomVideoEncodingHeight"=dword:000002d0 +"CustomVideoEncodingWidth"=dword:00000500 +"HistoricalBufferLength"=dword:0000001e +"HistoricalBufferLengthUnit"=dword:00000001 +"HistoricalCaptureEnabled"=dword:00000000 +"HistoricalCaptureOnBatteryAllowed"=dword:00000001 +"HistoricalCaptureOnWirelessDisplayAllowed"=dword:00000001 +"MaximumRecordLength"=hex(b):00,D0,88,C3,10,00,00,00 +"VideoEncodingBitrateMode"=dword:00000002 +"VideoEncodingResolutionMode"=dword:00000002 +"VideoEncodingFrameRateMode"=dword:00000000 +"EchoCancellationEnabled"=dword:00000001 +"CursorCaptureEnabled"=dword:00000000 +"VKToggleGameBar"=dword:00000000 +"VKMToggleGameBar"=dword:00000000 +"VKSaveHistoricalVideo"=dword:00000000 +"VKMSaveHistoricalVideo"=dword:00000000 +"VKToggleRecording"=dword:00000000 +"VKMToggleRecording"=dword:00000000 +"VKTakeScreenshot"=dword:00000000 +"VKMTakeScreenshot"=dword:00000000 +"VKToggleRecordingIndicator"=dword:00000000 +"VKMToggleRecordingIndicator"=dword:00000000 +"VKToggleMicrophoneCapture"=dword:00000000 +"VKMToggleMicrophoneCapture"=dword:00000000 +"VKToggleCameraCapture"=dword:00000000 +"VKMToggleCameraCapture"=dword:00000000 +"VKToggleBroadcast"=dword:00000000 +"VKMToggleBroadcast"=dword:00000000 +"MicrophoneCaptureEnabled"=dword:00000000 +"SystemAudioGain"=hex(b):10,27,00,00,00,00,00,00 +"MicrophoneGain"=hex(b):10,27,00,00,00,00,00,00 + +; TIME & LANGUAGE +; disable show the voice typing mic button +; disable typing insights +[HKEY_CURRENT_USER\Software\Microsoft\input\Settings] +"IsVoiceTypingKeyEnabled"=dword:00000000 +"InsightsEnabled"=dword:00000000 + +; disable capitalize the first letter of each sentence +; disable play key sounds as i type +; disable add a period after i double-tap the spacebar +; disable show key background +[HKEY_CURRENT_USER\Software\Microsoft\TabletTip\1.7] +"EnableAutoShiftEngage"=dword:00000000 +"EnableKeyAudioFeedback"=dword:00000000 +"EnableDoubleTapSpace"=dword:00000000 +"IsKeyBackgroundEnabled"=dword:00000000 + +; PERSONALIZATION +; dark theme +[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize] +"AppsUseLightTheme"=dword:00000000 +"SystemUsesLightTheme"=dword:00000000 +"EnableTransparency"=dword:00000001 + +; disable web search in start menu +[HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows\Explorer] +"DisableSearchBoxSuggestions"=dword:00000001 + +; Remove meet now +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] +"NoStartMenuMFUprogramsList"=- +"NoInstrumentation"=- +"HideSCAMeetNow"=dword:00000001 + +; remove search from taskbar +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Search] +"SearchboxTaskbarMode"=dword:00000000 + +; disable use dynamic lighting on my devices +; disable compatible apps in the forground always control lighting +; disable match my windows accent color +[HKEY_CURRENT_USER\Software\Microsoft\Lighting] +"AmbientLightingEnabled"=dword:00000000 +"ControlledByForegroundApp"=dword:00000000 +"UseSystemAccentColor"=dword:00000000 + +; DEVICES +; disable let windows manage my default printer +[HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows] +"LegacyDefaultPrinterMode"=dword:00000001 + +; disable write with your fingertip +[HKEY_CURRENT_USER\Software\Microsoft\TabletTip\EmbeddedInkControl] +"EnableInkingWithTouch"=dword:00000000 + +; SYSTEM +[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\DWM] +"UseDpiScaling"=dword:00000000 + +; disable variable refresh rate & enable optimizations for windowed games +[HKEY_CURRENT_USER\Software\Microsoft\DirectX\UserGpuPreferences] +"DirectXUserGlobalSettings"="SwapEffectUpgradeEnable=1;VRROptimizeEnable=0;" + +; disable notifications +; Disable Notifications on Lock Screen +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\PushNotifications] +"ToastEnabled"=dword:00000000 +"LockScreenToastEnabled"=dword:00000000 + +; Disable Allow Notifications to Play Sounds +; Disable Notifications on Lock Screen +; Disable Show Reminders and VoIP Calls Notifications on Lock Screen +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings] +"NOC_GLOBAL_SETTING_ALLOW_NOTIFICATION_SOUND"=dword:00000000 +"NOC_GLOBAL_SETTING_ALLOW_TOASTS_ABOVE_LOCK"=dword:00000000 +"NOC_GLOBAL_SETTING_ALLOW_CRITICAL_TOASTS_ABOVE_LOCK"=dword:00000000 + +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings\Windows.SystemToast.SecurityAndMaintenance] +"Enabled"=dword:00000000 + +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings\windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel] +"Enabled"=dword:00000000 + +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings\Windows.SystemToast.CapabilityAccess] +"Enabled"=dword:00000000 + +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings\Windows.SystemToast.StartupApp] +"Enabled"=dword:00000000 + +[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\UserProfileEngagement] +"ScoobeSystemSettingEnabled"=dword:00000000 + +; disable suggested actions +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\SmartActionPlatform\SmartClipboard] +"Disabled"=dword:00000001 + +; battery options optimize for video quality +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\VideoSettings] +"VideoQualityOnBattery"=dword:00000001 + +; UWP Apps +; disable windows input experience preload +[HKEY_CURRENT_USER\Software\Microsoft\input] +"IsInputAppPreloadEnabled"=dword:00000000 + +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Dsh] +"IsPrelaunchEnabled"=dword:00000000 + +; disable copilot +[HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\WindowsCopilot] +"TurnOffWindowsCopilot"=dword:00000001 + +; DISABLE ADVERTISING & PROMOTIONAL +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager] +"ContentDeliveryAllowed"=dword:00000000 +"FeatureManagementEnabled"=dword:00000000 +"OemPreInstalledAppsEnabled"=dword:00000000 +"PreInstalledAppsEnabled"=dword:00000000 +"PreInstalledAppsEverEnabled"=dword:00000000 +"RotatingLockScreenEnabled"=dword:00000000 +"RotatingLockScreenOverlayEnabled"=dword:00000000 +"SilentInstalledAppsEnabled"=dword:00000000 +"SlideshowEnabled"=dword:00000000 +"SoftLandingEnabled"=dword:00000000 +"SubscribedContent-310093Enabled"=dword:00000000 +"SubscribedContent-314563Enabled"=dword:00000000 +"SubscribedContent-338388Enabled"=dword:00000000 +"SubscribedContent-338389Enabled"=dword:00000000 +"SubscribedContent-338393Enabled"=dword:00000000 +"SubscribedContent-353694Enabled"=dword:00000000 +"SubscribedContent-353696Enabled"=dword:00000000 +"SubscribedContent-353698Enabled"=dword:00000000 +"SubscribedContentEnabled"=dword:00000000 +"SystemPaneSuggestionsEnabled"=dword:00000000 + +; OTHER +; remove gallery +[HKEY_CURRENT_USER\Software\Classes\CLSID\{e88865ea-0e1c-4e20-9aa6-edcd0212c87c}] +"System.IsPinnedToNameSpaceTree"=dword:00000000 + +; restore the classic context menu +[HKEY_CURRENT_USER\Software\Classes\CLSID\{86ca1aa0-34aa-4e8b-a509-50c905bae2a2}\InprocServer32] +@="" + +; removes OneDrive Setup +[-HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] +"OneDriveSetup"=- + +; Hides the Try New Outlook Button +[HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\Options\General] +"HideNewOutlookToggle"=dword:00000000 + +; Cleans up Taskbar +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband] +"FavoritesRemovedChanges"=dword:00000003 +"FavoritesResolve"=hex:31,03,00,00,4c,00,00,00,01,14,02,00,00,00,00,00,c0,00,\ + 00,00,00,00,00,46,83,00,80,00,20,00,00,00,be,33,35,e7,d1,24,db,01,be,33,35,\ + e7,d1,24,db,01,25,b3,7a,4d,05,84,da,01,97,01,00,00,00,00,00,00,01,00,00,00,\ + 00,00,00,00,00,00,00,00,00,00,00,00,a0,01,3a,00,1f,80,c8,27,34,1f,10,5c,10,\ + 42,aa,03,2e,e4,52,87,d6,68,26,00,01,00,26,00,ef,be,12,00,00,00,85,35,2b,d7,\ + d1,24,db,01,9b,e4,33,e7,d1,24,db,01,ab,5a,34,e7,d1,24,db,01,14,00,56,00,31,\ + 00,00,00,00,00,56,59,b9,b3,11,00,54,61,73,6b,42,61,72,00,40,00,09,00,04,00,\ + ef,be,56,59,b9,b3,56,59,b9,b3,2e,00,00,00,f2,69,01,00,00,00,04,00,00,00,00,\ + 00,00,00,00,00,00,00,00,00,00,00,ef,80,fc,00,54,00,61,00,73,00,6b,00,42,00,\ + 61,00,72,00,00,00,16,00,0e,01,32,00,97,01,00,00,81,58,c4,3a,20,00,46,49,4c,\ + 45,45,58,7e,31,2e,4c,4e,4b,00,00,7c,00,09,00,04,00,ef,be,56,59,b9,b3,56,59,\ + b9,b3,2e,00,00,00,c3,6a,01,00,00,00,02,00,00,00,00,00,00,00,00,00,52,00,00,\ + 00,00,00,db,dc,91,00,46,00,69,00,6c,00,65,00,20,00,45,00,78,00,70,00,6c,00,\ + 6f,00,72,00,65,00,72,00,2e,00,6c,00,6e,00,6b,00,00,00,40,00,73,00,68,00,65,\ + 00,6c,00,6c,00,33,00,32,00,2e,00,64,00,6c,00,6c,00,2c,00,2d,00,32,00,32,00,\ + 30,00,36,00,37,00,00,00,1c,00,22,00,00,00,1e,00,ef,be,02,00,55,00,73,00,65,\ + 00,72,00,50,00,69,00,6e,00,6e,00,65,00,64,00,00,00,1c,00,12,00,00,00,2b,00,\ + ef,be,7c,4c,37,e7,d1,24,db,01,1c,00,42,00,00,00,1d,00,ef,be,02,00,4d,00,69,\ + 00,63,00,72,00,6f,00,73,00,6f,00,66,00,74,00,2e,00,57,00,69,00,6e,00,64,00,\ + 6f,00,77,00,73,00,2e,00,45,00,78,00,70,00,6c,00,6f,00,72,00,65,00,72,00,00,\ + 00,1c,00,00,00,9a,00,00,00,1c,00,00,00,01,00,00,00,1c,00,00,00,2d,00,00,00,\ + 00,00,00,00,99,00,00,00,11,00,00,00,03,00,00,00,0e,76,ea,84,10,00,00,00,00,\ + 43,3a,5c,55,73,65,72,73,5c,6d,65,6d,5c,41,70,70,44,61,74,61,5c,52,6f,61,6d,\ + 69,6e,67,5c,4d,69,63,72,6f,73,6f,66,74,5c,49,6e,74,65,72,6e,65,74,20,45,78,\ + 70,6c,6f,72,65,72,5c,51,75,69,63,6b,20,4c,61,75,6e,63,68,5c,55,73,65,72,20,\ + 50,69,6e,6e,65,64,5c,54,61,73,6b,42,61,72,5c,46,69,6c,65,20,45,78,70,6c,6f,\ + 72,65,72,2e,6c,6e,6b,00,00,60,00,00,00,03,00,00,a0,58,00,00,00,00,00,00,00,\ + 64,65,73,6b,74,6f,70,2d,6e,76,6a,67,69,71,33,00,1e,48,b8,ac,e6,93,44,44,85,\ + d1,06,17,eb,52,3b,ea,cc,41,5d,b0,c4,90,ef,11,b9,08,00,0c,29,5b,06,9a,1e,48,\ + b8,ac,e6,93,44,44,85,d1,06,17,eb,52,3b,ea,cc,41,5d,b0,c4,90,ef,11,b9,08,00,\ + 0c,29,5b,06,9a,45,00,00,00,09,00,00,a0,39,00,00,00,31,53,50,53,b1,16,6d,44,\ + ad,8d,70,48,a7,48,40,2e,a4,3d,78,8c,1d,00,00,00,68,00,00,00,00,48,00,00,00,\ + d4,d9,2d,27,b2,34,c5,4f,ad,3b,78,a5,c4,f6,71,2d,00,00,00,00,00,00,00,00,00,\ + 00,00,00 +"Favorites"=hex:00,a4,01,00,00,3a,00,1f,80,c8,27,34,1f,10,5c,10,42,aa,03,2e,e4,\ + 52,87,d6,68,26,00,01,00,26,00,ef,be,12,00,00,00,85,35,2b,d7,d1,24,db,01,9b,\ + e4,33,e7,d1,24,db,01,ab,5a,34,e7,d1,24,db,01,14,00,56,00,31,00,00,00,00,00,\ + 56,59,b9,b3,11,00,54,61,73,6b,42,61,72,00,40,00,09,00,04,00,ef,be,56,59,b9,\ + b3,56,59,b9,b3,2e,00,00,00,f2,69,01,00,00,00,04,00,00,00,00,00,00,00,00,00,\ + 00,00,00,00,00,00,ef,80,fc,00,54,00,61,00,73,00,6b,00,42,00,61,00,72,00,00,\ + 00,16,00,12,01,32,00,97,01,00,00,81,58,c4,3a,20,00,46,49,4c,45,45,58,7e,31,\ + 2e,4c,4e,4b,00,00,7c,00,09,00,04,00,ef,be,56,59,b9,b3,56,59,b9,b3,2e,00,00,\ + 00,c3,6a,01,00,00,00,02,00,00,00,00,00,00,00,00,00,52,00,00,00,00,00,db,dc,\ + 91,00,46,00,69,00,6c,00,65,00,20,00,45,00,78,00,70,00,6c,00,6f,00,72,00,65,\ + 00,72,00,2e,00,6c,00,6e,00,6b,00,00,00,40,00,73,00,68,00,65,00,6c,00,6c,00,\ + 33,00,32,00,2e,00,64,00,6c,00,6c,00,2c,00,2d,00,32,00,32,00,30,00,36,00,37,\ + 00,00,00,1c,00,12,00,00,00,2b,00,ef,be,7c,4c,37,e7,d1,24,db,01,1c,00,42,00,\ + 00,00,1d,00,ef,be,02,00,4d,00,69,00,63,00,72,00,6f,00,73,00,6f,00,66,00,74,\ + 00,2e,00,57,00,69,00,6e,00,64,00,6f,00,77,00,73,00,2e,00,45,00,78,00,70,00,\ + 6c,00,6f,00,72,00,65,00,72,00,00,00,1c,00,26,00,00,00,1e,00,ef,be,02,00,53,\ + 00,79,00,73,00,74,00,65,00,6d,00,50,00,69,00,6e,00,6e,00,65,00,64,00,00,00,\ + 1c,00,00,00,ff +"FavoritesChanges"=dword:00000002 +"FavoritesVersion"=dword:00000002 + +[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband\AuxilliaryPins] +"MailPin"=dword:00000000 +"TFLPin"=dword:00000000 +"CopilotPWAPin"=dword:00000000 +"@ + Set-Content -Path "$env:TEMP\Optimize_User_Registry.reg" -Value $MultilineComment -Force + + # Import registry file silently + Regedit.exe /S "$env:TEMP\Optimize_User_Registry.reg" + +# Set Wallpaper +$defaultWallpaperPath = "C:\Windows\Web\4K\Wallpaper\Windows\img0_3840x2160.jpg" +$darkModeWallpaperPath = "C:\Windows\Web\4K\Wallpaper\Windows\img19_1920x1200.jpg" + +function Set-Wallpaper ($wallpaperPath) { + reg.exe add "HKEY_CURRENT_USER\Control Panel\Desktop" /v Wallpaper /t REG_SZ /d "$wallpaperPath" /f | Out-Null + # Notify the system of the change + rundll32.exe user32.dll, UpdatePerUserSystemParameters +} + +# Check Windows version +$windowsVersion = (Get-ItemProperty "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion").CurrentBuild + +# Apply appropriate wallpaper based on Windows version or existence of dark mode wallpaper +if ($windowsVersion -ge 22000) { # Assuming Windows 11 starts at build 22000 + if (Test-Path $darkModeWallpaperPath) { + Set-Wallpaper -wallpaperPath $darkModeWallpaperPath + } +} else { + # Apply default wallpaper for Windows 10 + Set-Wallpaper -wallpaperPath $defaultWallpaperPath +} + + # Update the XAML TextBlock with the success message + $xamlWindow.FindName("StatusMessage").Text = "Recommended User settings have been applied successfully $checkmark" +} Catch { + # Update the XAML TextBlock with the failure message + $xamlWindow.FindName("StatusMessage").Text = "Failed to apply Recommended User settings $cross" +} + +# Check Windows Defender status by inspecting the registry key +$defenderStatus = Get-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Services\WinDefend" -Name "Start" -ErrorAction SilentlyContinue + +If ($defenderStatus.Start -eq 4) { + # Windows Defender is disabled, update the Defender TextBlock and make button available + $xamlWindow.FindName("DefenderStatusText").Text = "Windows Defender is Disabled." + $xamlWindow.FindName("EnableDefenderButton").IsEnabled = $true # Enable the button +} Else { + # Windows Defender is enabled, update the Defender TextBlock and disable the button + $xamlWindow.FindName("DefenderStatusText").Text = "Windows Defender is Enabled." + $xamlWindow.FindName("EnableDefenderButton").IsEnabled = $false # Disable the button +} + +# Check UAC status by inspecting the registry key +$uacStatus = Get-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" -Name "EnableLUA" -ErrorAction SilentlyContinue + +If ($uacStatus.EnableLUA -eq 0) { + # UAC is disabled, update the UAC TextBlock and make button available + $xamlWindow.FindName("UACStatusText").Text = "User Account Control is Disabled." + $xamlWindow.FindName("EnableUACButton").IsEnabled = $true # Enable the button +} Else { + # UAC is enabled, update the UAC TextBlock and disable the button + $xamlWindow.FindName("UACStatusText").Text = "User Account Control is Enabled." + $xamlWindow.FindName("EnableUACButton").IsEnabled = $false # Disable the button +} + +# Define Event Handlers for Defender and UAC +$xamlWindow.FindName("EnableDefenderButton").Add_Click({ + $result = [System.Windows.MessageBox]::Show("Are you sure you want to enable Windows Defender?", "Confirm Action", [System.Windows.MessageBoxButton]::YesNo, [System.Windows.MessageBoxImage]::Question) + If ($result -eq 'Yes') { + Try { + $MultilineComment = @" +Windows Registry Editor Version 5.00 + +; Enables Windows Defender to start in Windows Security +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sense] +"Start"=dword:00000003 + +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WdBoot] +"Start"=dword:00000000 + +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WdFilter] +"Start"=dword:00000000 + +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WdNisDrv] +"Start"=dword:00000003 + +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WdNisSvc] +"Start"=dword:00000003 + +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinDefend] +"Start"=dword:00000002 +"@ +Set-Content -Path "$env:TEMP\Enable_Windows_Defender.reg" -Value $MultilineComment -Force +# edit reg file +$path = "$env:TEMP\Enable_Windows_Defender.reg" +(Get-Content $path) -replace "\?","$" | Out-File $path +# import reg file +Regedit.exe /S "$env:TEMP\Enable_Windows_Defender.reg" + [System.Windows.MessageBox]::Show("Windows Defender has been enabled. Restart to Apply Changes.", "Success", [System.Windows.MessageBoxButton]::OK, [System.Windows.MessageBoxImage]::Information) + } Catch { + [System.Windows.MessageBox]::Show("Failed to enable Windows Defender.", "Error", [System.Windows.MessageBoxButton]::OK, [System.Windows.MessageBoxImage]::Error) + } + } +}) + +$xamlWindow.FindName("EnableUACButton").Add_Click({ + $result = [System.Windows.MessageBox]::Show("Are you sure you want to enable UAC?", "Confirm Action", [System.Windows.MessageBoxButton]::YesNo, [System.Windows.MessageBoxImage]::Question) + If ($result -eq 'Yes') { + Try { + Write-Output "Enable UAC Button Clicked" + cmd.exe /c reg.exe add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v EnableLUA /t REG_DWORD /d 3 /f + [System.Windows.MessageBox]::Show("User Account Control (UAC) has been successfully enabled.", "Success", [System.Windows.MessageBoxButton]::OK, [System.Windows.MessageBoxImage]::Information) + } Catch { + [System.Windows.MessageBox]::Show("Failed to enable UAC.", "Error", [System.Windows.MessageBoxButton]::OK, [System.Windows.MessageBoxImage]::Error) + } + } +}) + +$xamlWindow.FindName("RestartButton").Add_Click({ + $result = [System.Windows.MessageBox]::Show("Are you sure you want to restart your computer?", "Confirm Restart", [System.Windows.MessageBoxButton]::YesNo, [System.Windows.MessageBoxImage]::Question) + If ($result -eq 'Yes') { + Try { + Write-Output "Restart Button Clicked" + reg.exe add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /v AutoRestartShell /t REG_DWORD /d 1 /f + Start-Process -FilePath "shutdown.exe" -ArgumentList "/r /t 1" -NoNewWindow + } Catch { + [System.Windows.MessageBox]::Show("Failed to restart the computer.", "Error", [System.Windows.MessageBoxButton]::OK, [System.Windows.MessageBoxImage]::Error) + } + } +}) +# Show the Window +$xamlWindow.ShowDialog() + ]]> + + + + + + + + + + + + ]]> + + + \ No newline at end of file