====== Information ======
* Microsoft Windows 10 IoT Enterprise LTSC
* Version 21H2 (OS Build 19044.6937)
* Server ((see [[windows;10|main notes]] for desktop))
====== Updates ======
* [[https://www.catalog.update.microsoft.com/Search.aspx?q=Cumulative+Update+for+Windows+10+Version+21H2+for+x64-based+Systems|Windows 10 21H2 Cumulative Updates - Microsoft Update Catalog]]
* :!: [[https://www.catalog.update.microsoft.com/Search.aspx?q=KB5014032|KB5014032]] 2022-05 SSU is required before the latest CU
====== Shortcuts ======
===== Desktop =====
==== System Properties ====
SystemPropertiesAdvanced.exe
System Props
===== Downloads =====
==== Maintenance ====
"%SystemRoot%\System32\cleanmgr.exe" /sageset:9999
"notepad.exe" "%UserProfile%\Downloads\Maintenance.bat"
@echo off
TITLE Maintenance
CD "%Temp%"
"%SystemRoot%\System32\Dism.exe" /online /Cleanup-Image /StartComponentCleanup /ResetBase /RestoreHealth
"%SystemRoot%\System32\sfc.exe" /scannow
"%SystemRoot%\System32\cleanmgr.exe" /sagerun:9999
"%SystemRoot%\System32\vssadmin.exe" Delete Shadows /All
"%SystemRoot%\System32\fsutil.exe" usn deleteJournal /D "%SystemDrive%"
"%SystemRoot%\System32\Defrag.exe" /AllVolumes /Defrag /TierOptimize /SlabConsolidate /Retrim /Optimize
CALL "%UserProfile%\Downloads\Reset Icon Cache.bat"
"%SystemRoot%\Microsoft.NET\Framework\v4.0.30319\ngen.exe" update /force /queue
"%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\ngen.exe" update /force /queue
"%SystemRoot%\Microsoft.NET\Framework\v4.0.30319\ngen.exe" executequeueditems
"%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\ngen.exe" executequeueditems
:: End
"%UserProfile%\Downloads\Maintenance.bat"
==== Reset Icon Cache ====
"notepad.exe" "%UserProfile%\Downloads\Reset Icon Cache.bat"
@echo off
TITLE Reset Icon Cache
CD "%Temp%"
TASKKILL /F /IM "explorer.exe"
TIMEOUT /T "2" /NOBREAK
DEL /F /Q "%LocalAppData%\Microsoft\Windows\Explorer\"*".db"
DEL /F /Q "%UserProfile%\AppData\Local\IconCache.db"
TIMEOUT /T "2" /NOBREAK
START explorer.exe
:: End
"%UserProfile%\Downloads\Reset Icon Cache.bat"
====== Settings ======
===== Microsoft Edge =====
* [[windows;notes;edge_tweaks|Edge Tweaks]]
===== Power =====
==== Disable Hibernation and Fast Start ====
****
"powercfg.exe" /HIBERNATE "OFF"
==== Enable Ultimate Performance Power Plan ====
****
"powercfg.exe" /DUPLICATESCHEME "e9a42b02-d5df-448d-aa00-03f14749eb61"
==== More Settings ====
****
"powercfg.exe" /Qh
===== SMB =====
* [[windows;notes;smb|Notes]]
===== Disable Clipboard History =====
****
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\System" /v "AllowClipboardHistory" /t REG_DWORD /d "0" /f
===== Disable Cortana and Web Search =====
****
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /v "AllowCortana" /t REG_DWORD /d "0" /f
===== Disable Game DVR =====
****
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\GameDVR" /v "AllowgameDVR" /t "REG_DWORD" /d "0" /f
===== Quick Lock Screen =====
* Directly shows password prompt
REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Personalization" /v "NoLockScreen" /t REG_DWORD /d "1" /f
==== Undo ====
****
REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Personalization" /v "NoLockScreen" /t REG_DWORD /d "0" /f
===== Disable Online Speech Recognition =====
****
reg add "HKLM\SOFTWARE\Policies\Microsoft\InputPersonalization" /v "AllowInputPersonalization" /t REG_DWORD /d "0" /f
===== Open Pictures With Windows Photo Viewer =====
reg add "HKCU\Software\Classes\.jpg" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f
reg add "HKCU\Software\Classes\.jpeg" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f
reg add "HKCU\Software\Classes\.gif" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f
reg add "HKCU\Software\Classes\.png" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f
reg add "HKCU\Software\Classes\.bmp" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f
reg add "HKCU\Software\Classes\.tiff" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f
reg add "HKCU\Software\Classes\.ico" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f
===== Disable Shared Experiences =====
****
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\System" /v "EnableCdp" /t REG_DWORD /d "0" /f
===== Disable System Restore =====
****
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore" /v "DisableSR " /t "REG_DWORD" /d "1" /f
===== Disable Telemetry Features =====
****
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DataCollection" /v "AllowTelemetry" /t "REG_DWORD" /d "0" /f
===== Disable User Account Control =====
****
REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableLUA" /t "REG_DWORD" /d "0" /f
===== Enable FIPS Mode =====
* https://learn.microsoft.com/en-us/windows/security/security-foundations/certification/fips-140-validation
REG ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy" /v "Enabled" /t "REG_DWORD" /d "1" /f
"powershell.exe" -Command "$md5 = New-Object -TypeName 'System.Security.Cryptography.MD5CryptoServiceProvider'"
===== Remove Quick Access =====
****
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer" /v "HubMode" /t "REG_DWORD" /d "1" /f
===== Remove Windows Search =====
"sc.exe" stop "WSearch" & "sc.exe" config "WSearch" "start=disabled"
"DISM.exe" /Online /Disable-Feature /FeatureName:"SearchEngine-Client-Package" /Remove
===== Show All Folders in File Explorer Pane =====
****
reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "NavPaneShowAllFolders" /t "REG_DWORD" /d "1" /f
===== Verbose Shutdown =====
****
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v "VerboseStatus" /t REG_DWORD /d "1" /f
====== Services ======
* [[windows;notes;services|Notes]]
====== Programs ======
* [[windows:programs|More Programs]]
===== 7-Zip =====
* https://www.7-zip.org/download.html
7z2501-x64.exe
===== Calculator =====
* Only available on LTSB/LTSC
win32calc
===== DirectX End-User Runtime =====
* https://www.microsoft.com/en-us/download/confirmation.aspx?id=8109
===== Firefox =====
* https://www.firefox.com/en-US/download/all/desktop-esr/win64-msi/en-US/
* https://www.firefox.com/en-US/download/all/
* [[programs;firefox|Settings]]
===== KeePassXC =====
* https://keepassxc.org/download#windows
===== VC++ Redist =====
* https://forums.mydigitallife.net/threads/repack-visual-c-redistributable-runtimes-2025-10-17.76588/
====== Drivers ======
* See [[windows:drivers|Drivers]] for more URLs
===== Boulderback =====
==== Chipset ====
* https://www.dell.com/support/home/en-us/drivers/driversdetails?driverid=r0jhr&oscode=w764&productcode=precision-m6500
* ''9.1.1.1025''
====== Task Scheduler ======
===== OS Restart =====
* https://learn.microsoft.com/en-us/windows-server/administration/windows-commands/shutdown
* Application: Maintenance (Planned)
* Daily ''06:00:00 AM''
SCHTASKS /Create /SC "DAILY" /TN "OS Restart" /TR "'%SystemRoot%\System32\shutdown.exe' /g /t '0' /f /d p:'4':'1'" /ST "06:00" /F
===== Maintenance =====
* [[#maintenance|Maintenance.bat]]
* Application: Maintenance (Planned)
* Monthly (first Wednesday) ''05:00:00 AM''
SCHTASKS /Create /SC "MONTHLY" /MO "FIRST" /D "WED" /M "*" /TN "OS Maintenance" /TR "%UserProfile%\Downloads\Maintenance.bat" /ST "05:00" /F