58 Commits
2.8 ... 2.14

Author SHA1 Message Date
Disassembler
dc0a121435 v2.14, 2018-04-06
- Fix and reorganize Telemetry tweaks
 - Update "Enable Remote Desktop" to enable firewall rules (thx @timmytandian)
 - Add "Uninstall Internet Explorer" (thx @mhujer)
 - Add "Enable strong cryptography for .NET Framework" (thx @Sta2s)
 - Add "Enable Audio" for Server
 - Add default preset for making custom presets easier (thx @Conder000)
2018-04-06 16:18:42 +02:00
Disassembler
1ab60c363e Add "Enable Audio" (for Server) 2018-04-06 15:54:35 +02:00
Disassembler
575b7ef26a Add "Enable strong cryptography for .NET Framework", closes #64 (thx @Sta2s) 2018-04-06 14:41:03 +02:00
Disassembler
7be6666d1d Cleanup after #66 2018-04-06 14:37:55 +02:00
Martin Hujer
4df2b8cc44 Add "Uninstall Internet Explorer" (#62) 2018-04-06 14:20:50 +02:00
Disassembler
9dcbd908f4 Add firewall rules modification to Remote Desktop tweaks, closes #63 2018-04-06 14:17:02 +02:00
Disassembler
cf870330c8 Fix and reorganize Telemetry tweaks, closes #67 2018-04-06 13:57:55 +02:00
Conder000
3bdb745e0f Added default preset to the /test folder (#66) 2018-04-06 13:19:28 +02:00
Disassembler
5fe7d91b79 v2.13, 2018-03-18
- Add "Disable Windows Script Host"
 - Add "Uninstall Microsoft Print to PDF"
 - Add "Uninstall Microsoft XPS Document Writer"
 - Add "Remove Default Fax Printer" (thx @MisterDuval)
 - Add more 3rd party bloatware for removal (thx @iamteerawut)
 - Add more Microsoft bloatware for removal
 - Replace Write-Host cmdlet with Write-Output
 - Reorganize and regroup the tweaks a bit
2018-03-18 20:22:44 +01:00
Disassembler
615ff8cacc Add tweaks for default printers uninstallation, reimplements and closes #58 (thx @MisterDuval) 2018-03-18 20:12:03 +01:00
Disassembler
42fde5e945 Remove additional Microsoft bloatware 2018-03-18 12:15:14 +01:00
Disassembler
e3570d5f28 Add "Disable Windows Script Host" 2018-03-18 11:41:57 +01:00
Disassembler
7de3e81c79 Reorganize and regroup tweaks - no functional changes 2018-03-18 11:19:28 +01:00
Disassembler
a41c0eea7b Replace Write-Host cmdlet with Write-Output, closes #44 once and for all 2018-03-18 09:58:24 +01:00
Disassembler
ccc65c4ad3 Remove additonal 3rd party bloatware, closes #60 (thx @iamteerawut) 2018-03-18 09:50:01 +01:00
Disassembler
17a5c51e66 Add a warning for DisableTelemetry, kinda sorta resolves #57 2018-03-18 09:46:31 +01:00
Disassembler
1eaa9d58bd Unify coding style 2018-01-10 08:45:22 +01:00
Disassembler
e24132e074 v2.12, 2018-01-09
- Add "Enable Meltdown (CVE-2017-5754) compatibility flag"
 - Add "Unpin Start Menu tiles" + "Unpin Taskbar icons" (kinda experimental)
 - Fix "Enable Storage Sense" by setting more registries (thx @zerolagaux)
 - Add more 3rd bloatware for removal (thx @zerolagaux)
 - Comment "Enable Controlled Folder Access" from default preset as it conflicts with some installers
 - Disable scheduled tasks related to Telemetry, Feedback and error reporting (thx @xomx)
2018-01-09 16:49:57 +01:00
Disassembler
04b85dac57 Disable tasks related to Telemetry, Feedback and error reporting, closes #37 for now (thx @xomx) 2018-01-09 16:49:08 +01:00
Disassembler
18e75afef6 Add "Unpin Start Menu tiles" + "Unpin Taskbar icons", closes #8 2018-01-09 14:05:59 +01:00
Disassembler
46f3881d2b Unify coding style for Remove-Item, Get-ChildItem and ForEach 2018-01-09 14:02:38 +01:00
Disassembler
b67276058b Remove even more 3rd bloatware, closes #54 (thx @zerolagaux) 2018-01-09 10:13:18 +01:00
Disassembler
8d468e7df1 Set more EnableStorageSense registries, fixes #53 (thx @zerolagaux) 2018-01-09 10:13:00 +01:00
Disassembler
ebaa3d0ba7 Add "Enable Meltdown (CVE-2017-5754) compatibility flag" (commented by default) 2018-01-08 20:54:01 +01:00
Disassembler
e9b915a2da Comment EnableCtrldFolderAccess from default preset as it conflicts with some installers + Fix typo. 2017-12-30 13:24:43 +01:00
Disassembler
3e1c7feeb6 v2.11, 2017-12-27
- Add "Disable Windows Defender Cloud" (thx @bajasoft)
 - Add "Set Control Panel view to icons (Classic)" (thx @DavidBrockmeier)
 - Add "Disable automatic installation of network devices"
 - Add "Disable Sleep start menu and keyboard button" (thx @thecek)
 - Add "Disable display and sleep mode timeouts" (thx @thecek)
 - Add more registry keys for "Disable Wi-Fi Sense" (thx @kukubau)
 - Remove even more bloatware (thx @thecek)
 - Update "Disable Background apps" to not break start menu search
 - Add both ways of hiding Library icons in This PC (either only in This PC or also in other Explorer windows like Personal Folders and open/save dialog)
2017-12-27 19:49:14 +01:00
Disassembler
491be4acc2 Suppress few more warnings when adding/removing nonexistant keys 2017-12-27 19:42:33 +01:00
Disassembler
538a1fdd39 Reintroduce post-1.5 way of hiding icons in Explorer once again
(Previously reverted in 157bf35, related to #36. Sorry for the bloat, I really hate these icons)
2017-12-27 17:58:28 +01:00
Disassembler
50362f37e1 Update DisableBackgroundApps to not break start menu search, again closes #42 2017-12-27 15:52:52 +01:00
Disassembler
871cad8660 Add "Disable display and sleep mode timeouts", closes #50, thx @thecek 2017-12-27 14:19:12 +01:00
Disassembler
5eb8a84dce Add "Disable Sleep start menu and keyboard button" as suggested in #50 2017-12-27 13:56:50 +01:00
Disassembler
d93d5ac4df Add more registry keys for "Disable Wi-Fi Sense", closes #48, thx @kukubau 2017-12-27 10:54:36 +01:00
Disassembler
b6840e2ba2 Add "Disable automatic installation of network devices", closes #47 2017-12-27 10:46:41 +01:00
Disassembler
6830298064 Add "Set Control Panel view to icons (Classic)", reimplements #45, thx @DavidBrockmeier 2017-12-27 09:56:20 +01:00
Disassembler
39a1d9022d Remove more bloatware, closes #43 (thx @thecek) 2017-12-01 16:59:12 +01:00
Disassembler
3f9e7e84a1 Another take on "Disable Background apps" related to #40 and #42 2017-11-13 19:10:19 +01:00
Disassembler
59b2000f6c Fix typo in default preset 2017-11-11 20:27:24 +01:00
Disassembler
b1447c0fc9 Don't apply "DisableBackgroundApps" in default preset, closes #40
+ Add tests for "EnableDefenderCloud"
2017-11-10 16:24:54 +01:00
Jan Bajer
c79ed38b66 Add "Disable Windows Defender Cloud" (#41) 2017-11-10 14:06:35 +01:00
Disassembler
c935abafa3 v2.10, 2017-11-09
- Add "Enable Controlled Folder Access"
- Add "Disable Lock screen Spotlight"
- Add "Enable Storage Sense"
- Add "Show User Folder on desktop"
- Add "Disable Background application access"
- Update "Disable Start Menu suggestions" (thx @Dvorak-Stepan)
- Update bloatware removal list with Print3D and Xbox.TCUI
- Update "Disable Advertising ID" to disable also advertisement telemetry
- Merge "DisableConsumerApps" and "DisableStartSuggestions" into "DisableAppSuggestions"
- Update the way of hiding icons in This PC, so they're not hidden also in personal folders
2017-11-10 00:06:10 +01:00
Disassembler
14bf1e8477 Add additional check in "Disable Advertising ID", remove unnecessary -Force 2017-11-10 00:03:59 +01:00
Disassembler
2f8e43cc03 Add "Enable Storage Sense", closes #39 2017-11-09 23:34:39 +01:00
Disassembler
e0c9dd1df7 Add "Disable Background application access", related to #39 2017-11-09 22:33:04 +01:00
Disassembler
157bf356dc Revert to pre-1.5 way of hiding icons from This PC, kinda fixes #36.
Less reliable, but doesn't hide them in Personal folders.
2017-11-09 22:07:54 +01:00
Disassembler
d1089630c5 Add "Show User Folder on desktop", related to #39 2017-11-09 21:40:33 +01:00
Disassembler
936e0da7ec Merge DisableConsumerApps into DisableAppSuggestions, closes #35 2017-11-09 21:27:55 +01:00
Disassembler
71b8166b9e Rename DisableStartSuggestions to DisableAppSuggestions and add few more Content Delivery Manager values, related to #35 2017-11-09 21:24:02 +01:00
Disassembler
23f19fd851 Add "Disable Lock screen Spotlight", related to #35 2017-11-09 21:08:39 +01:00
Disassembler
9c957d217c Fix typo in "Show network options on lock screen" registry hive 2017-11-09 21:08:14 +01:00
Disassembler
90deb26b55 Update "Disable Advertising ID" to disable also advertisement telemetry 2017-11-09 19:35:52 +01:00
Disassembler
dac835801a Add some more bloatware for removal, closes #38 2017-11-09 19:17:09 +01:00
Disassembler
ad09c6ec67 Update "Disable Start Menu suggestions" for 1709, closes #35 (thx @Dvorak-Stepan) 2017-10-31 14:04:32 +01:00
Disassembler
11dd5c64e5 Add "Enable Controlled Folder Access", closes #33 2017-10-27 14:50:44 +02:00
Disassembler0
1f67aedeab Clarify defaults and fix typo in README 2017-10-22 17:08:02 +02:00
Disassembler
94216899a5 v2.9, 2017-10-22
- Added "DisableSharedExperiences" (thx @DaNy3LL)
- Added "Hide3DObjectsFromThisPC"
- Added "DisableAdobeFlash"
- Commented out "DisableSMB1" as 1709 (RS3) disables it implicitly
2017-10-22 14:35:03 +02:00
Disassembler
d427ae7354 Normalize preset path while passing to elevated script, resolves #27 2017-10-22 14:33:47 +02:00
Disassembler0
8b88e2deeb Add a note about multi-user envs in README 2017-09-29 08:30:29 +02:00
Disassembler
3fa306ac8f Pass command line args into elevation call instead of function args, fixes #26 2017-09-10 23:35:06 +02:00
12 changed files with 1322 additions and 474 deletions

View File

@@ -38,7 +38,7 @@ Command using the preset file above:
**A:** Yes! In fact the script has been written to support exactly this as it's not uncommon that big Windows Updates reset some of the settings.
**Q:** Can I run the script in multi-user environment?
**A:** Yes, to certain extent. Some tweaks (most notably UI tweaks) are set only for the user currently executing the script. As stated above, the script can be run repeatedly; therefore it's possible to run it multiple times, each time as different user. Due to the nature of authentication and privilege escalation mechanisms in Windows, the script can be successfully applied only for users belonging to *Administrators* group. Standard users will get an UAC prompt asking for admin credentials which then causes the tweaks to be applied to the given admin account instead of the original non-privileged one. To circumvent this, add the standard user to the *Administrators* group, run the script, and then remove the user from *Administrators* group again. There are a few ways how the same functionality can be achieved programmatically, but I'm not planning to include any of them as it would negatively impact code complexity and readability.
**A:** Yes, to certain extent. Some tweaks (most notably UI tweaks) are set only for the user currently executing the script. As stated above, the script can be run repeatedly; therefore it's possible to run it multiple times, each time as different user. Due to the nature of authentication and privilege escalation mechanisms in Windows, the script can be successfully applied only for users belonging to *Administrators* group. Standard users will get an UAC prompt asking for admin credentials which then causes the tweaks to be applied to the given admin account instead of the original non-privileged one. To circumvent this, add the standard user to the *Administrators* group, run the script, and then remove the user from *Administrators* group again. There are a few ways how the same functionality can be achieved programmatically, but I'm not planning to include any of them as it would negatively impact code complexity and readability. If you still wish to try to use the script in multi-user environment, check [this answer in issue #29](https://github.com/Disassembler0/Win10-Initial-Setup-Script/issues/29#issuecomment-333040591) for some pointers.
**Q:** Can I run the script on Windows Server 2016?
**A:** Yes. Starting from version 2.5, Windows Server 2016 is supported. There are even few tweaks specific to Server environment. Keep in mind though, that the script is still primarily designed for Windows 10, so you have to create your own preset for Windows Server 2016.
@@ -50,7 +50,7 @@ Command using the preset file above:
**A:** Yes. I'm testing new additions on up-to-date Home and Enterprise editions in VMs. I'm also regularly using it for all my home installations after all bigger updates.
**Q**: I've run the script and it did xxx, how can I undo it?
**A:** For every tweak, there is also a corresponding function which restores the default settings. Use them to create and run new preset. Alternatively, since most functions are just automation for actions which can be done using GUI, find appropriate control and modify it manually.
**A:** For every tweak, there is also a corresponding function which restores the default settings. The default is considered freshly installed Windows 10 or Windows Server 2016 with no adjustments made during or after the installation. Use the tweaks to create and run new preset. Alternatively, since most functions are just automation for actions which can be done using GUI, find appropriate control and modify it manually.
**Q:** I've run the script and it broke my computer / killed neighbor's dog / caused world war 3.
**A:** I don't care. Also, that's not a question.
@@ -86,8 +86,8 @@ Check if there isn't already a function with similar purpose as the one you are
### Function grouping
Try to group functions thematically. There are already five major groups (privacy, services, user interface, applications and server-specific), but even within these, some tweaks may be related to each other. In such case, add a new tweak below the existing one and not to the end of the whole group.
### Default settings
Always add a reference to the tweak and its revert function in the `$tweaks` array containing the default settings. Add references to both functions on the same line (mind the quotes and commas) and always comment out the revert function. Whether to comment out also the tweak in the default preset is a matter of personal preference. The rule of thumb is that if the tweak makes the system faster, smoother, more secure and less obtrusive, it should be enabled by default. Usability has preference over performance (that's why e.g. indexing is kept enabled). Also don't forget to add the function references to all test files.
### Default preset
Always add a reference to the tweak and its revert function in the `$tweaks` array containing the default set of tweaks. Add references to both functions on the same line (mind the quotes and commas) and always comment out the revert function. Whether to comment out also the tweak in the default preset is a matter of personal preference. The rule of thumb is that if the tweak makes the system faster, smoother, more secure and less obtrusive, it should be enabled by default. Usability has preference over performance (that's why e.g. indexing is kept enabled). Also don't forget to add the function references to all test files.
### Repeatability
Unless applied on unsupported system, all functions have to be applicable repeatedly without any errors. When you're creating a registry key, always check first if the key doesn't happen to already exist. When you're deleting registry value, always append `-ErrorAction SilentlyContinue` to prevent errors while deleting already deleted values.
@@ -96,7 +96,7 @@ Unless applied on unsupported system, all functions have to be applicable repeat
Suppress all output generated by commands and cmdlets using `| Out-Null` or `-ErrorAction SilentlyContinue` where applicable. Whenever an input is needed, use appropriate parameters to suppress the prompt and programmatically provide values for the command to run (eg. using `-Confirm:$false`). The only acceptable output is from the `Write-Host` cmdlets in the beginning of each function and from non-suppressible cmdlets like `Remove-AppxPackage`.
### Registry
Create the registry keys only if they don't exist on fresh installation if Windows 10 or Windows Server 2016. When deleting registry, delete only registry values, not the whole keys. When you're setting registry values, always use `Set-ItemProperty` instead of `New-ItemProperty`. When you're removing registry values, choose either `Set-ItemProperty` or `Remove-ItemProperty` to reinstate the same situation as it was on the clean installation. Again, if you don't know what the original state was, let me know in PR description and I will fill in th gaps. When you need to use `HKEY_USERS` registry hive, always add following snippet before the registry modification to ensure portability.
Create the registry keys only if they don't exist on fresh installation if Windows 10 or Windows Server 2016. When deleting registry, delete only registry values, not the whole keys. When you're setting registry values, always use `Set-ItemProperty` instead of `New-ItemProperty`. When you're removing registry values, choose either `Set-ItemProperty` or `Remove-ItemProperty` to reinstate the same situation as it was on the clean installation. Again, if you don't know what the original state was, let me know in PR description and I will fill in the gaps. When you need to use `HKEY_USERS` registry hive, always add following snippet before the registry modification to ensure portability.
```powershell
If (!(Test-Path "HKU:")) {

1441
Win10.ps1

File diff suppressed because it is too large Load Diff

3
test/Default.bat Normal file
View File

@@ -0,0 +1,3 @@
@ECHO OFF
powershell.exe -NoProfile -ExecutionPolicy Bypass -File "..\Win10.ps1" -preset "Default.preset"

134
test/Default.preset Normal file
View File

@@ -0,0 +1,134 @@
# Default preset
RequireAdmin
DisableTelemetry
DisableWiFiSense
# DisableSmartScreen
DisableWebSearch
DisableAppSuggestions
DisableBackgroundApps
DisableLockScreenSpotlight
DisableLocationTracking
DisableMapUpdates
DisableFeedback
DisableAdvertisingID
DisableCortana
DisableErrorReporting
SetP2PUpdateLocal
DisableAutoLogger
DisableDiagTrack
DisableWAPPush
# SetUACLow
# EnableSharingMappedDrives
DisableAdminShares
# DisableSMB1
SetCurrentNetworkPrivate
# SetUnknownNetworksPrivate
# DisableNetDevicesAutoInst
# EnableCtrldFolderAccess
# DisableFirewall
# DisableDefender
# DisableDefenderCloud
EnableF8BootMenu
SetDEPOptOut
DisableScriptHost
EnableDotNetStrongCrypto
# EnableMeltdownCompatFlag
# DisableUpdateMSRT
# DisableUpdateDriver
DisableUpdateRestart
DisableHomeGroups
DisableSharedExperiences
DisableRemoteAssistance
EnableRemoteDesktop
DisableAutoplay
DisableAutorun
# EnableStorageSense
# DisableDefragmentation
# DisableSuperfetch
# DisableIndexing
# SetBIOSTimeUTC
# EnableHibernation
# DisableSleepButton
# DisableSleepTimeout
# DisableFastStartup
DisableActionCenter
DisableLockScreen
# DisableLockScreenRS1
HideNetworkFromLockScreen
HideShutdownFromLockScreen
DisableStickyKeys
ShowTaskManagerDetails"
ShowFileOperationsDetails
# EnableFileDeleteConfirm
HideTaskbarSearchBox
HideTaskView
ShowSmallTaskbarIcons
ShowTaskbarTitles
HideTaskbarPeopleIcon
ShowTrayIcons
DisableSearchAppInStore
DisableNewAppPrompt
# SetControlPanelViewIcons
SetVisualFXPerformance
# AddENKeyboard
# EnableNumlock
ShowKnownExtensions
ShowHiddenFiles
HideSyncNotifications
HideRecentShortcuts
SetExplorerThisPC
ShowThisPCOnDesktop
# ShowUserFolderOnDesktop
HideDesktopFromThisPC
# HideDesktopFromExplorer
HideDocumentsFromThisPC
# HideDocumentsFromExplorer
HideDownloadsFromThisPC
# HideDownloadsFromExplorer
HideMusicFromThisPC
# HideMusicFromExplorer
HidePicturesFromThisPC
# HidePicturesFromExplorer
HideVideosFromThisPC
# HideVideosFromExplorer
Hide3DObjectsFromThisPC
# Hide3DObjectsFromExplorer
# DisableThumbnails
DisableThumbsDB
DisableOneDrive
UninstallOneDrive
UninstallMsftBloat
UninstallThirdPartyBloat
# UninstallWindowsStore
DisableXboxFeatures
DisableAdobeFlash
# UninstallMediaPlayer
# UninstallInternetExplorer
# UninstallWorkFolders
# InstallLinuxSubsystem
# InstallHyperV
SetPhotoViewerAssociation
AddPhotoViewerOpenWith
# UninstallPDFPrinter
UninstallXPSPrinter
RemoveFaxPrinter
# HideServerManagerOnLogin
# DisableShutdownTracker
# DisablePasswordPolicy
# DisableCtrlAltDelLogin
# DisableIEEnhancedSecurity
# EnableAudio
# UnpinStartMenuTiles
# UnpinTaskbarIcons
WaitForKey
Restart

View File

@@ -1,3 +1,3 @@
@ECHO OFF
powershell.exe -NoProfile -ExecutionPolicy Bypass -File "%~dp0..\Win10.ps1" -preset "%~dp0Win10-ApplyAll.preset"
powershell.exe -NoProfile -ExecutionPolicy Bypass -File "..\Win10.ps1" -preset "Win10-ApplyAll.preset"

View File

@@ -6,7 +6,9 @@ DisableTelemetry
DisableWiFiSense
DisableSmartScreen
DisableWebSearch
DisableStartSuggestions
DisableAppSuggestions
DisableBackgroundApps
DisableLockScreenSpotlight
DisableLocationTracking
DisableMapUpdates
DisableFeedback
@@ -21,24 +23,37 @@ DisableWAPPush
SetUACLow
EnableSharingMappedDrives
DisableAdminShares
DisableSMB1
# DisableSMB1
SetCurrentNetworkPrivate
SetUnknownNetworksPrivate
DisableNetDevicesAutoInst
EnableCtrldFolderAccess
DisableFirewall
DisableDefender
DisableDefenderCloud
EnableF8BootMenu
SetDEPOptOut
DisableScriptHost
EnableDotNetStrongCrypto
EnableMeltdownCompatFlag
DisableUpdateMSRT
DisableUpdateDriver
DisableUpdateRestart
DisableHomeGroups
DisableSharedExperiences
DisableRemoteAssistance
EnableRemoteDesktop
DisableAutoplay
DisableAutorun
EnableStorageSense
DisableDefragmentation
DisableSuperfetch
DisableIndexing
SetBIOSTimeUTC
EnableHibernation
DisableSleepButton
DisableSleepTimeout
DisableFastStartup
DisableActionCenter
@@ -56,47 +71,64 @@ ShowSmallTaskbarIcons
ShowTaskbarTitles
HideTaskbarPeopleIcon
ShowTrayIcons
DisableSearchAppInStore
DisableNewAppPrompt
SetControlPanelViewIcons
SetVisualFXPerformance
AddENKeyboard
EnableNumlock
ShowKnownExtensions
ShowHiddenFiles
HideSyncNotifications
HideRecentShortcuts
SetExplorerThisPC
ShowThisPCOnDesktop
ShowUserFolderOnDesktop
HideDesktopFromThisPC
HideDesktopFromExplorer
HideDocumentsFromThisPC
HideDocumentsFromExplorer
HideDownloadsFromThisPC
HideDownloadsFromExplorer
HideMusicFromThisPC
HideMusicFromExplorer
HidePicturesFromThisPC
HidePicturesFromExplorer
HideVideosFromThisPC
SetVisualFXPerformance
HideVideosFromExplorer
Hide3DObjectsFromThisPC
Hide3DObjectsFromExplorer
DisableThumbnails
DisableThumbsDB
AddENKeyboard
EnableNumlock
DisableOneDrive
UninstallOneDrive
UninstallMsftBloat
UninstallThirdPartyBloat
UninstallWindowsStore
DisableConsumerApps
DisableXboxFeatures
DisableAdobeFlash
UninstallMediaPlayer
UninstallInternetExplorer
UninstallWorkFolders
InstallLinuxSubsystem
InstallHyperV
SetPhotoViewerAssociation
AddPhotoViewerOpenWith
DisableSearchAppInStore
DisableNewAppPrompt
EnableF8BootMenu
SetDEPOptOut
UninstallPDFPrinter
UninstallXPSPrinter
RemoveFaxPrinter
# HideServerManagerOnLogin
# DisableShutdownTracker
# DisablePasswordPolicy
# DisableCtrlAltDelLogin
# DisableIEEnhancedSecurity
# EnableAudio
UnpinStartMenuTiles
UnpinTaskbarIcons
WaitForKey
Restart

View File

@@ -1,3 +1,3 @@
@ECHO OFF
powershell.exe -NoProfile -ExecutionPolicy Bypass -File "%~dp0..\Win10.ps1" -preset "%~dp0Win10-RestoreAll.preset"
powershell.exe -NoProfile -ExecutionPolicy Bypass -File "..\Win10.ps1" -preset "Win10-RestoreAll.preset"

View File

@@ -6,7 +6,9 @@ EnableTelemetry
EnableWiFiSense
EnableSmartScreen
EnableWebSearch
EnableStartSuggestions
EnableAppSuggestions
EnableBackgroundApps
EnableLockScreenSpotlight
EnableLocationTracking
EnableMapUpdates
EnableFeedback
@@ -21,24 +23,37 @@ EnableWAPPush
SetUACHigh
DisableSharingMappedDrives
EnableAdminShares
EnableSMB1
# EnableSMB1
SetCurrentNetworkPublic
SetUnknownNetworksPublic
EnableNetDevicesAutoInst
DisableCtrldFolderAccess
EnableFirewall
EnableDefender
EnableDefenderCloud
DisableF8BootMenu
SetDEPOptIn
EnableScriptHost
DisableDotNetStrongCrypto
DisableMeltdownCompatFlag
EnableUpdateMSRT
EnableUpdateDriver
EnableUpdateRestart
EnableHomeGroups
EnableSharedExperiences
EnableRemoteAssistance
DisableRemoteDesktop
EnableAutoplay
EnableAutorun
DisableStorageSense
EnableDefragmentation
EnableSuperfetch
EnableIndexing
SetBIOSTimeLocal
DisableHibernation
EnableSleepButton
EnableSleepTimeout
EnableFastStartup
EnableActionCenter
@@ -56,47 +71,61 @@ ShowLargeTaskbarIcons
HideTaskbarTitles
ShowTaskbarPeopleIcon
HideTrayIcons
EnableSearchAppInStore
EnableNewAppPrompt
SetControlPanelViewCategories
SetVisualFXAppearance
RemoveENKeyboard
DisableNumlock
HideKnownExtensions
HideHiddenFiles
ShowSyncNotifications
ShowRecentShortcuts
SetExplorerQuickAccess
HideThisPCFromDesktop
HideUserFolderFromDesktop
ShowDesktopInThisPC
ShowDesktopInExplorer
ShowDocumentsInThisPC
ShowDocumentsInExplorer
ShowDownloadsInThisPC
ShowDownloadsInExplorer
ShowMusicInThisPC
ShowMusicInExplorer
ShowPicturesInThisPC
ShowPicturesInExplorer
ShowVideosInThisPC
SetVisualFXAppearance
ShowVideosInExplorer
Show3DObjectsInThisPC
Show3DObjectsInExplorer
EnableThumbnails
EnableThumbsDB
RemoveENKeyboard
DisableNumlock
EnableOneDrive
InstallOneDrive
InstallMsftBloat
InstallThirdPartyBloat
InstallWindowsStore
EnableConsumerApps
EnableXboxFeatures
EnableAdobeFlash
InstallMediaPlayer
InstallInternetExplorer
InstallWorkFolders
UninstallLinuxSubsystem
UninstallHyperV
UnsetPhotoViewerAssociation
RemovePhotoViewerOpenWith
EnableSearchAppInStore
EnableNewAppPrompt
DisableF8BootMenu
SetDEPOptIn
InstallPDFPrinter
InstallXPSPrinter
AddFaxPrinter
# ShowServerManagerOnLogin
# EnableShutdownTracker
# EnablePasswordPolicy
# EnableCtrlAltDelLogin
# EnableIEEnhancedSecurity
# DisableAudio
WaitForKey
Restart

View File

@@ -1,3 +1,3 @@
@ECHO OFF
powershell.exe -NoProfile -ExecutionPolicy Bypass -File "%~dp0..\Win10.ps1" -preset "%~dp0WinServer2016-ApplyAll.preset"
powershell.exe -NoProfile -ExecutionPolicy Bypass -File "..\Win10.ps1" -preset "WinServer2016-ApplyAll.preset"

View File

@@ -6,7 +6,9 @@ DisableTelemetry
DisableWiFiSense
DisableSmartScreen
DisableWebSearch
DisableStartSuggestions
DisableAppSuggestions
DisableBackgroundApps
DisableLockScreenSpotlight
DisableLocationTracking
DisableMapUpdates
DisableFeedback
@@ -18,27 +20,40 @@ DisableAutoLogger
DisableDiagTrack
DisableWAPPush
SetUACHigh
SetUACLow
EnableSharingMappedDrives
DisableAdminShares
DisableSMB1
SetCurrentNetworkPrivate
SetUnknownNetworksPrivate
DisableNetDevicesAutoInst
# EnableCtrldFolderAccess
DisableFirewall
DisableDefender
DisableDefenderCloud
EnableF8BootMenu
SetDEPOptOut
DisableScriptHost
EnableDotNetStrongCrypto
EnableMeltdownCompatFlag
DisableUpdateMSRT
DisableUpdateDriver
DisableUpdateRestart
# DisableHomeGroups
# DisableSharedExperiences
# DisableRemoteAssistance
EnableRemoteDesktop
DisableAutoplay
DisableAutorun
# EnableStorageSense
DisableDefragmentation
# DisableSuperfetch
DisableIndexing
SetBIOSTimeUTC
EnableHibernation
DisableSleepButton
DisableSleepTimeout
DisableFastStartup
DisableActionCenter
@@ -56,47 +71,64 @@ ShowSmallTaskbarIcons
ShowTaskbarTitles
HideTaskbarPeopleIcon
ShowTrayIcons
DisableSearchAppInStore
DisableNewAppPrompt
SetControlPanelViewIcons
SetVisualFXPerformance
AddENKeyboard
EnableNumlock
ShowKnownExtensions
ShowHiddenFiles
HideSyncNotifications
HideRecentShortcuts
SetExplorerThisPC
ShowThisPCOnDesktop
ShowUserFolderOnDesktop
HideDesktopFromThisPC
HideDesktopFromExplorer
HideDocumentsFromThisPC
HideDocumentsFromExplorer
HideDownloadsFromThisPC
HideDownloadsFromExplorer
HideMusicFromThisPC
HideMusicFromExplorer
HidePicturesFromThisPC
HidePicturesFromExplorer
HideVideosFromThisPC
SetVisualFXPerformance
HideVideosFromExplorer
Hide3DObjectsFromThisPC
Hide3DObjectsFromExplorer
DisableThumbnails
DisableThumbsDB
AddENKeyboard
EnableNumlock
DisableOneDrive
# UninstallOneDrive
UninstallMsftBloat
UninstallThirdPartyBloat
UninstallWindowsStore
DisableConsumerApps
DisableXboxFeatures
DisableAdobeFlash
UninstallMediaPlayer
UninstallInternetExplorer
# UninstallWorkFolders
# InstallLinuxSubsystem
InstallHyperV
SetPhotoViewerAssociation
AddPhotoViewerOpenWith
DisableSearchAppInStore
DisableNewAppPrompt
EnableF8BootMenu
SetDEPOptOut
UninstallPDFPrinter
UninstallXPSPrinter
RemoveFaxPrinter
HideServerManagerOnLogin
DisableShutdownTracker
DisablePasswordPolicy
DisableCtrlAltDelLogin
DisableIEEnhancedSecurity
EnableAudio
# UnpinStartMenuTiles
UnpinTaskbarIcons
WaitForKey
Restart

View File

@@ -1,3 +1,3 @@
@ECHO OFF
powershell.exe -NoProfile -ExecutionPolicy Bypass -File "%~dp0..\Win10.ps1" -preset "%~dp0WinServer2016-RestoreAll.preset"
powershell.exe -NoProfile -ExecutionPolicy Bypass -File "..\Win10.ps1" -preset "WinServer2016-RestoreAll.preset"

View File

@@ -6,7 +6,9 @@ EnableTelemetry
EnableWiFiSense
EnableSmartScreen
EnableWebSearch
EnableStartSuggestions
EnableAppSuggestions
EnableBackgroundApps
EnableLockScreenSpotlight
EnableLocationTracking
EnableMapUpdates
EnableFeedback
@@ -24,21 +26,34 @@ EnableAdminShares
EnableSMB1
SetCurrentNetworkPublic
SetUnknownNetworksPublic
EnableNetDevicesAutoInst
# DisableCtrldFolderAccess
EnableFirewall
EnableDefender
EnableDefenderCloud
DisableF8BootMenu
SetDEPOptIn
EnableScriptHost
DisableDotNetStrongCrypto
DisableMeltdownCompatFlag
EnableUpdateMSRT
EnableUpdateDriver
EnableUpdateRestart
# EnableHomeGroups
# EnableSharedExperiences
# EnableRemoteAssistance
DisableRemoteDesktop
EnableAutoplay
EnableAutorun
# DisableStorageSense
EnableDefragmentation
# EnableSuperfetch
EnableIndexing
SetBIOSTimeLocal
DisableHibernation
EnableSleepButton
EnableSleepTimeout
EnableFastStartup
EnableActionCenter
@@ -56,47 +71,61 @@ ShowLargeTaskbarIcons
HideTaskbarTitles
ShowTaskbarPeopleIcon
HideTrayIcons
EnableSearchAppInStore
EnableNewAppPrompt
SetControlPanelViewCategories
SetVisualFXAppearance
RemoveENKeyboard
DisableNumlock
HideKnownExtensions
HideHiddenFiles
ShowSyncNotifications
ShowRecentShortcuts
SetExplorerQuickAccess
HideThisPCFromDesktop
HideUserFolderFromDesktop
ShowDesktopInThisPC
ShowDesktopInExplorer
ShowDocumentsInThisPC
ShowDocumentsInExplorer
ShowDownloadsInThisPC
ShowDownloadsInExplorer
ShowMusicInThisPC
ShowMusicInExplorer
ShowPicturesInThisPC
ShowPicturesInExplorer
ShowVideosInThisPC
SetVisualFXAppearance
ShowVideosInExplorer
Show3DObjectsInThisPC
Show3DObjectsInExplorer
EnableThumbnails
EnableThumbsDB
RemoveENKeyboard
DisableNumlock
EnableOneDrive
# InstallOneDrive
InstallMsftBloat
InstallThirdPartyBloat
InstallWindowsStore
EnableConsumerApps
EnableXboxFeatures
EnableAdobeFlash
InstallMediaPlayer
InstallInternetExplorer
# InstallWorkFolders
# UninstallLinuxSubsystem
UninstallHyperV
UnsetPhotoViewerAssociation
RemovePhotoViewerOpenWith
EnableSearchAppInStore
EnableNewAppPrompt
DisableF8BootMenu
SetDEPOptIn
InstallPDFPrinter
InstallXPSPrinter
AddFaxPrinter
ShowServerManagerOnLogin
EnableShutdownTracker
EnablePasswordPolicy
EnableCtrlAltDelLogin
EnableIEEnhancedSecurity
DisableAudio
WaitForKey
Restart