v2.14, 2018-04-06

- Fix and reorganize Telemetry tweaks
 - Update "Enable Remote Desktop" to enable firewall rules (thx @timmytandian)
 - Add "Uninstall Internet Explorer" (thx @mhujer)
 - Add "Enable strong cryptography for .NET Framework" (thx @Sta2s)
 - Add "Enable Audio" for Server
 - Add default preset for making custom presets easier (thx @Conder000)

README.md

@@ -50,7 +50,7 @@ Command using the preset file above:
 **A:** Yes. I'm testing new additions on up-to-date Home and Enterprise editions in VMs. I'm also regularly using it for all my home installations after all bigger updates.
 
 **Q**: I've run the script and it did xxx, how can I undo it?  
-**A:** For every tweak, there is also a corresponding function which restores the default settings. Use them to create and run new preset. Alternatively, since most functions are just automation for actions which can be done using GUI, find appropriate control and modify it manually.
+**A:** For every tweak, there is also a corresponding function which restores the default settings. The default is considered freshly installed Windows 10 or Windows Server 2016 with no adjustments made during or after the installation. Use the tweaks to create and run new preset. Alternatively, since most functions are just automation for actions which can be done using GUI, find appropriate control and modify it manually.
 
 **Q:** I've run the script and it broke my computer / killed neighbor's dog / caused world war 3.  
 **A:** I don't care. Also, that's not a question.
@@ -86,8 +86,8 @@ Check if there isn't already a function with similar purpose as the one you are
 ### Function grouping
 Try to group functions thematically. There are already five major groups (privacy, services, user interface, applications and server-specific), but even within these, some tweaks may be related to each other. In such case, add a new tweak below the existing one and not to the end of the whole group.
 
-### Default settings
-Always add a reference to the tweak and its revert function in the `$tweaks` array containing the default settings. Add references to both functions on the same line (mind the quotes and commas) and always comment out the revert function. Whether to comment out also the tweak in the default preset is a matter of personal preference. The rule of thumb is that if the tweak makes the system faster, smoother, more secure and less obtrusive, it should be enabled by default. Usability has preference over performance (that's why e.g. indexing is kept enabled). Also don't forget to add the function references to all test files.
+### Default preset
+Always add a reference to the tweak and its revert function in the `$tweaks` array containing the default set of tweaks. Add references to both functions on the same line (mind the quotes and commas) and always comment out the revert function. Whether to comment out also the tweak in the default preset is a matter of personal preference. The rule of thumb is that if the tweak makes the system faster, smoother, more secure and less obtrusive, it should be enabled by default. Usability has preference over performance (that's why e.g. indexing is kept enabled). Also don't forget to add the function references to all test files.
 
 ### Repeatability
 Unless applied on unsupported system, all functions have to be applicable repeatedly without any errors. When you're creating a registry key, always check first if the key doesn't happen to already exist. When you're deleting registry value, always append `-ErrorAction SilentlyContinue` to prevent errors while deleting already deleted values.
@@ -96,7 +96,7 @@ Unless applied on unsupported system, all functions have to be applicable repeat
 Suppress all output generated by commands and cmdlets using `| Out-Null` or `-ErrorAction SilentlyContinue` where applicable. Whenever an input is needed, use appropriate parameters to suppress the prompt and programmatically provide values for the command to run (eg. using `-Confirm:$false`). The only acceptable output is from the `Write-Host` cmdlets in the beginning of each function and from non-suppressible cmdlets like `Remove-AppxPackage`.
 
 ### Registry
-Create the registry keys only if they don't exist on fresh installation if Windows 10 or Windows Server 2016. When deleting registry, delete only registry values, not the whole keys. When you're setting registry values, always use `Set-ItemProperty` instead of `New-ItemProperty`. When you're removing registry values, choose either `Set-ItemProperty` or `Remove-ItemProperty` to reinstate the same situation as it was on the clean installation. Again, if you don't know what the original state was, let me know in PR description and I will fill in th gaps. When you need to use `HKEY_USERS` registry hive, always add following snippet before the registry modification to ensure portability.
+Create the registry keys only if they don't exist on fresh installation if Windows 10 or Windows Server 2016. When deleting registry, delete only registry values, not the whole keys. When you're setting registry values, always use `Set-ItemProperty` instead of `New-ItemProperty`. When you're removing registry values, choose either `Set-ItemProperty` or `Remove-ItemProperty` to reinstate the same situation as it was on the clean installation. Again, if you don't know what the original state was, let me know in PR description and I will fill in the gaps. When you need to use `HKEY_USERS` registry hive, always add following snippet before the registry modification to ensure portability.
 
 ```powershell
 If (!(Test-Path "HKU:")) {

test/Default.bat

@@ -0,0 +1,3 @@
+@ECHO OFF
+
+powershell.exe -NoProfile -ExecutionPolicy Bypass -File "..\Win10.ps1" -preset "Default.preset"

test/Default.preset

@@ -0,0 +1,134 @@
+# Default preset
+
+RequireAdmin
+
+DisableTelemetry
+DisableWiFiSense
+# DisableSmartScreen
+DisableWebSearch
+DisableAppSuggestions
+DisableBackgroundApps
+DisableLockScreenSpotlight
+DisableLocationTracking
+DisableMapUpdates
+DisableFeedback
+DisableAdvertisingID
+DisableCortana
+DisableErrorReporting
+SetP2PUpdateLocal
+DisableAutoLogger
+DisableDiagTrack
+DisableWAPPush
+
+# SetUACLow
+# EnableSharingMappedDrives
+DisableAdminShares
+# DisableSMB1
+SetCurrentNetworkPrivate
+# SetUnknownNetworksPrivate
+# DisableNetDevicesAutoInst
+# EnableCtrldFolderAccess
+# DisableFirewall
+# DisableDefender
+# DisableDefenderCloud
+EnableF8BootMenu
+SetDEPOptOut
+DisableScriptHost
+EnableDotNetStrongCrypto
+# EnableMeltdownCompatFlag
+
+# DisableUpdateMSRT
+# DisableUpdateDriver
+DisableUpdateRestart
+DisableHomeGroups
+DisableSharedExperiences
+DisableRemoteAssistance
+EnableRemoteDesktop
+DisableAutoplay
+DisableAutorun
+# EnableStorageSense
+# DisableDefragmentation
+# DisableSuperfetch
+# DisableIndexing
+# SetBIOSTimeUTC
+# EnableHibernation
+# DisableSleepButton
+# DisableSleepTimeout
+# DisableFastStartup
+
+DisableActionCenter
+DisableLockScreen
+# DisableLockScreenRS1
+HideNetworkFromLockScreen
+HideShutdownFromLockScreen
+DisableStickyKeys
+ShowTaskManagerDetails"
+ShowFileOperationsDetails
+# EnableFileDeleteConfirm
+HideTaskbarSearchBox
+HideTaskView
+ShowSmallTaskbarIcons
+ShowTaskbarTitles
+HideTaskbarPeopleIcon
+ShowTrayIcons
+DisableSearchAppInStore
+DisableNewAppPrompt
+# SetControlPanelViewIcons
+SetVisualFXPerformance
+# AddENKeyboard
+# EnableNumlock
+
+ShowKnownExtensions
+ShowHiddenFiles
+HideSyncNotifications
+HideRecentShortcuts
+SetExplorerThisPC
+ShowThisPCOnDesktop
+# ShowUserFolderOnDesktop
+HideDesktopFromThisPC
+# HideDesktopFromExplorer
+HideDocumentsFromThisPC
+# HideDocumentsFromExplorer
+HideDownloadsFromThisPC
+# HideDownloadsFromExplorer
+HideMusicFromThisPC
+# HideMusicFromExplorer
+HidePicturesFromThisPC
+# HidePicturesFromExplorer
+HideVideosFromThisPC
+# HideVideosFromExplorer
+Hide3DObjectsFromThisPC
+# Hide3DObjectsFromExplorer
+# DisableThumbnails
+DisableThumbsDB
+
+DisableOneDrive
+UninstallOneDrive
+UninstallMsftBloat
+UninstallThirdPartyBloat
+# UninstallWindowsStore
+DisableXboxFeatures
+DisableAdobeFlash
+# UninstallMediaPlayer
+# UninstallInternetExplorer
+# UninstallWorkFolders
+# InstallLinuxSubsystem
+# InstallHyperV
+SetPhotoViewerAssociation
+AddPhotoViewerOpenWith
+# UninstallPDFPrinter
+UninstallXPSPrinter
+RemoveFaxPrinter
+
+# HideServerManagerOnLogin
+# DisableShutdownTracker
+# DisablePasswordPolicy
+# DisableCtrlAltDelLogin
+# DisableIEEnhancedSecurity
+# EnableAudio
+
+# UnpinStartMenuTiles
+# UnpinTaskbarIcons
+
+WaitForKey
+Restart

test/Win10-ApplyAll.preset

@@ -6,7 +6,9 @@ DisableTelemetry
 DisableWiFiSense
 DisableSmartScreen
 DisableWebSearch
-DisableStartSuggestions
+DisableAppSuggestions
+DisableBackgroundApps
+DisableLockScreenSpotlight
 DisableLocationTracking
 DisableMapUpdates
 DisableFeedback
@@ -24,8 +26,17 @@ DisableAdminShares
 # DisableSMB1
 SetCurrentNetworkPrivate
 SetUnknownNetworksPrivate
+DisableNetDevicesAutoInst
+EnableCtrldFolderAccess
 DisableFirewall
 DisableDefender
+DisableDefenderCloud
+EnableF8BootMenu
+SetDEPOptOut
+DisableScriptHost
+EnableDotNetStrongCrypto
+EnableMeltdownCompatFlag
+
 DisableUpdateMSRT
 DisableUpdateDriver
 DisableUpdateRestart
@@ -35,11 +46,14 @@ DisableRemoteAssistance
 EnableRemoteDesktop
 DisableAutoplay
 DisableAutorun
+EnableStorageSense
 DisableDefragmentation
 DisableSuperfetch
 DisableIndexing
 SetBIOSTimeUTC
 EnableHibernation
+DisableSleepButton
+DisableSleepTimeout
 DisableFastStartup
 
 DisableActionCenter
@@ -57,49 +71,64 @@ ShowSmallTaskbarIcons
 ShowTaskbarTitles
 HideTaskbarPeopleIcon
 ShowTrayIcons
+DisableSearchAppInStore
+DisableNewAppPrompt
+SetControlPanelViewIcons
+SetVisualFXPerformance
+AddENKeyboard
+EnableNumlock
+
 ShowKnownExtensions
 ShowHiddenFiles
 HideSyncNotifications
 HideRecentShortcuts
 SetExplorerThisPC
 ShowThisPCOnDesktop
+ShowUserFolderOnDesktop
 HideDesktopFromThisPC
+HideDesktopFromExplorer
 HideDocumentsFromThisPC
+HideDocumentsFromExplorer
 HideDownloadsFromThisPC
+HideDownloadsFromExplorer
 HideMusicFromThisPC
+HideMusicFromExplorer
 HidePicturesFromThisPC
+HidePicturesFromExplorer
 HideVideosFromThisPC
+HideVideosFromExplorer
 Hide3DObjectsFromThisPC
-SetVisualFXPerformance
+Hide3DObjectsFromExplorer
 DisableThumbnails
 DisableThumbsDB
-AddENKeyboard
-EnableNumlock
 
 DisableOneDrive
 UninstallOneDrive
 UninstallMsftBloat
 UninstallThirdPartyBloat
 UninstallWindowsStore
-DisableConsumerApps
 DisableXboxFeatures
 DisableAdobeFlash
 UninstallMediaPlayer
+UninstallInternetExplorer
 UninstallWorkFolders
 InstallLinuxSubsystem
 InstallHyperV
 SetPhotoViewerAssociation
 AddPhotoViewerOpenWith
-DisableSearchAppInStore
-DisableNewAppPrompt
-EnableF8BootMenu
-SetDEPOptOut
+UninstallPDFPrinter
+UninstallXPSPrinter
+RemoveFaxPrinter
 
 # HideServerManagerOnLogin
 # DisableShutdownTracker
 # DisablePasswordPolicy
 # DisableCtrlAltDelLogin
 # DisableIEEnhancedSecurity
+# EnableAudio
+
+UnpinStartMenuTiles
+UnpinTaskbarIcons
 
 WaitForKey
 Restart

test/Win10-RestoreAll.preset

@@ -6,7 +6,9 @@ EnableTelemetry
 EnableWiFiSense
 EnableSmartScreen
 EnableWebSearch
-EnableStartSuggestions
+EnableAppSuggestions
+EnableBackgroundApps
+EnableLockScreenSpotlight
 EnableLocationTracking
 EnableMapUpdates
 EnableFeedback
@@ -24,8 +26,17 @@ EnableAdminShares
 # EnableSMB1
 SetCurrentNetworkPublic
 SetUnknownNetworksPublic
+EnableNetDevicesAutoInst
+DisableCtrldFolderAccess
 EnableFirewall
 EnableDefender
+EnableDefenderCloud
+DisableF8BootMenu
+SetDEPOptIn
+EnableScriptHost
+DisableDotNetStrongCrypto
+DisableMeltdownCompatFlag
+
 EnableUpdateMSRT
 EnableUpdateDriver
 EnableUpdateRestart
@@ -35,11 +46,14 @@ EnableRemoteAssistance
 DisableRemoteDesktop
 EnableAutoplay
 EnableAutorun
+DisableStorageSense
 EnableDefragmentation
 EnableSuperfetch
 EnableIndexing
 SetBIOSTimeLocal
 DisableHibernation
+EnableSleepButton
+EnableSleepTimeout
 EnableFastStartup
 
 EnableActionCenter
@@ -57,49 +71,61 @@ ShowLargeTaskbarIcons
 HideTaskbarTitles
 ShowTaskbarPeopleIcon
 HideTrayIcons
+EnableSearchAppInStore
+EnableNewAppPrompt
+SetControlPanelViewCategories
+SetVisualFXAppearance
+RemoveENKeyboard
+DisableNumlock
+
 HideKnownExtensions
 HideHiddenFiles
 ShowSyncNotifications
 ShowRecentShortcuts
 SetExplorerQuickAccess
 HideThisPCFromDesktop
+HideUserFolderFromDesktop
 ShowDesktopInThisPC
+ShowDesktopInExplorer
 ShowDocumentsInThisPC
+ShowDocumentsInExplorer
 ShowDownloadsInThisPC
+ShowDownloadsInExplorer
 ShowMusicInThisPC
+ShowMusicInExplorer
 ShowPicturesInThisPC
+ShowPicturesInExplorer
 ShowVideosInThisPC
+ShowVideosInExplorer
 Show3DObjectsInThisPC
-SetVisualFXAppearance
+Show3DObjectsInExplorer
 EnableThumbnails
 EnableThumbsDB
-RemoveENKeyboard
-DisableNumlock
 
 EnableOneDrive
 InstallOneDrive
 InstallMsftBloat
 InstallThirdPartyBloat
 InstallWindowsStore
-EnableConsumerApps
 EnableXboxFeatures
 EnableAdobeFlash
 InstallMediaPlayer
+InstallInternetExplorer
 InstallWorkFolders
 UninstallLinuxSubsystem
 UninstallHyperV
 UnsetPhotoViewerAssociation
 RemovePhotoViewerOpenWith
-EnableSearchAppInStore
-EnableNewAppPrompt
-DisableF8BootMenu
-SetDEPOptIn
+InstallPDFPrinter
+InstallXPSPrinter
+AddFaxPrinter
 
 # ShowServerManagerOnLogin
 # EnableShutdownTracker
 # EnablePasswordPolicy
 # EnableCtrlAltDelLogin
 # EnableIEEnhancedSecurity
+# DisableAudio
 
 WaitForKey
 Restart

test/WinServer2016-ApplyAll.preset

@@ -6,7 +6,9 @@ DisableTelemetry
 DisableWiFiSense
 DisableSmartScreen
 DisableWebSearch
-DisableStartSuggestions
+DisableAppSuggestions
+DisableBackgroundApps
+DisableLockScreenSpotlight
 DisableLocationTracking
 DisableMapUpdates
 DisableFeedback
@@ -24,8 +26,17 @@ DisableAdminShares
 DisableSMB1
 SetCurrentNetworkPrivate
 SetUnknownNetworksPrivate
+DisableNetDevicesAutoInst
+# EnableCtrldFolderAccess
 DisableFirewall
 DisableDefender
+DisableDefenderCloud
+EnableF8BootMenu
+SetDEPOptOut
+DisableScriptHost
+EnableDotNetStrongCrypto
+EnableMeltdownCompatFlag
+
 DisableUpdateMSRT
 DisableUpdateDriver
 DisableUpdateRestart
@@ -35,11 +46,14 @@ DisableUpdateRestart
 EnableRemoteDesktop
 DisableAutoplay
 DisableAutorun
+# EnableStorageSense
 DisableDefragmentation
 # DisableSuperfetch
 DisableIndexing
 SetBIOSTimeUTC
 EnableHibernation
+DisableSleepButton
+DisableSleepTimeout
 DisableFastStartup
 
 DisableActionCenter
@@ -57,49 +71,64 @@ ShowSmallTaskbarIcons
 ShowTaskbarTitles
 HideTaskbarPeopleIcon
 ShowTrayIcons
+DisableSearchAppInStore
+DisableNewAppPrompt
+SetControlPanelViewIcons
+SetVisualFXPerformance
+AddENKeyboard
+EnableNumlock
+
 ShowKnownExtensions
 ShowHiddenFiles
 HideSyncNotifications
 HideRecentShortcuts
 SetExplorerThisPC
 ShowThisPCOnDesktop
+ShowUserFolderOnDesktop
 HideDesktopFromThisPC
+HideDesktopFromExplorer
 HideDocumentsFromThisPC
+HideDocumentsFromExplorer
 HideDownloadsFromThisPC
+HideDownloadsFromExplorer
 HideMusicFromThisPC
+HideMusicFromExplorer
 HidePicturesFromThisPC
+HidePicturesFromExplorer
 HideVideosFromThisPC
+HideVideosFromExplorer
 Hide3DObjectsFromThisPC
-SetVisualFXPerformance
+Hide3DObjectsFromExplorer
 DisableThumbnails
 DisableThumbsDB
-AddENKeyboard
-EnableNumlock
 
 DisableOneDrive
 # UninstallOneDrive
 UninstallMsftBloat
 UninstallThirdPartyBloat
 UninstallWindowsStore
-DisableConsumerApps
 DisableXboxFeatures
 DisableAdobeFlash
 UninstallMediaPlayer
+UninstallInternetExplorer
 # UninstallWorkFolders
 # InstallLinuxSubsystem
 InstallHyperV
 SetPhotoViewerAssociation
 AddPhotoViewerOpenWith
-DisableSearchAppInStore
-DisableNewAppPrompt
-EnableF8BootMenu
-SetDEPOptOut
+UninstallPDFPrinter
+UninstallXPSPrinter
+RemoveFaxPrinter
 
 HideServerManagerOnLogin
 DisableShutdownTracker
 DisablePasswordPolicy
 DisableCtrlAltDelLogin
 DisableIEEnhancedSecurity
+EnableAudio
+
+# UnpinStartMenuTiles
+UnpinTaskbarIcons
 
 WaitForKey
 Restart

test/WinServer2016-RestoreAll.preset

@@ -6,7 +6,9 @@ EnableTelemetry
 EnableWiFiSense
 EnableSmartScreen
 EnableWebSearch
-EnableStartSuggestions
+EnableAppSuggestions
+EnableBackgroundApps
+EnableLockScreenSpotlight
 EnableLocationTracking
 EnableMapUpdates
 EnableFeedback
@@ -24,8 +26,17 @@ EnableAdminShares
 EnableSMB1
 SetCurrentNetworkPublic
 SetUnknownNetworksPublic
+EnableNetDevicesAutoInst
+# DisableCtrldFolderAccess
 EnableFirewall
 EnableDefender
+EnableDefenderCloud
+DisableF8BootMenu
+SetDEPOptIn
+EnableScriptHost
+DisableDotNetStrongCrypto
+DisableMeltdownCompatFlag
+
 EnableUpdateMSRT
 EnableUpdateDriver
 EnableUpdateRestart
@@ -35,11 +46,14 @@ EnableUpdateRestart
 DisableRemoteDesktop
 EnableAutoplay
 EnableAutorun
+# DisableStorageSense
 EnableDefragmentation
 # EnableSuperfetch
 EnableIndexing
 SetBIOSTimeLocal
 DisableHibernation
+EnableSleepButton
+EnableSleepTimeout
 EnableFastStartup
 
 EnableActionCenter
@@ -57,49 +71,61 @@ ShowLargeTaskbarIcons
 HideTaskbarTitles
 ShowTaskbarPeopleIcon
 HideTrayIcons
+EnableSearchAppInStore
+EnableNewAppPrompt
+SetControlPanelViewCategories
+SetVisualFXAppearance
+RemoveENKeyboard
+DisableNumlock
+
 HideKnownExtensions
 HideHiddenFiles
 ShowSyncNotifications
 ShowRecentShortcuts
 SetExplorerQuickAccess
 HideThisPCFromDesktop
+HideUserFolderFromDesktop
 ShowDesktopInThisPC
+ShowDesktopInExplorer
 ShowDocumentsInThisPC
+ShowDocumentsInExplorer
 ShowDownloadsInThisPC
+ShowDownloadsInExplorer
 ShowMusicInThisPC
+ShowMusicInExplorer
 ShowPicturesInThisPC
+ShowPicturesInExplorer
 ShowVideosInThisPC
+ShowVideosInExplorer
 Show3DObjectsInThisPC
-SetVisualFXAppearance
+Show3DObjectsInExplorer
 EnableThumbnails
 EnableThumbsDB
-RemoveENKeyboard
-DisableNumlock
 
 EnableOneDrive
 # InstallOneDrive
 InstallMsftBloat
 InstallThirdPartyBloat
 InstallWindowsStore
-EnableConsumerApps
 EnableXboxFeatures
 EnableAdobeFlash
 InstallMediaPlayer
+InstallInternetExplorer
 # InstallWorkFolders
 # UninstallLinuxSubsystem
 UninstallHyperV
 UnsetPhotoViewerAssociation
 RemovePhotoViewerOpenWith
-EnableSearchAppInStore
-EnableNewAppPrompt
-DisableF8BootMenu
-SetDEPOptIn
+InstallPDFPrinter
+InstallXPSPrinter
+AddFaxPrinter
 
 ShowServerManagerOnLogin
 EnableShutdownTracker
 EnablePasswordPolicy
 EnableCtrlAltDelLogin
 EnableIEEnhancedSecurity
+DisableAudio
 
 WaitForKey
 Restart