Table of Contents

TODO

Run as Basic User

RUNAS /trustlevel:"0x20000" "x"
RUNAS /trustlevel:"0x20000" "C:\Users\Espionage724\Downloads\OpenTabletDriver-0.6.5.1_win-x64\OpenTabletDriver.UX.Wpf.exe"
RUNAS /showtrustlevels

Reboot Timer

shutdown /r /f /t 60
shutdown /a

Windows Defender

Disable

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender" /v "DisableAntiSpyware" /t "REG_DWORD" /d "1" /f

Remove

Uninstall-WindowsFeature -Name Windows-Defender

Disable Startup Delay

reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Serialize" /v "StartupDelayInMSec" /t "REG_DWORD" /d "0" /f

Disable SmartScreen

reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer" /v "SmartScreenEnabled" /t "REG_SZ" /d "Off" /f
reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\AppHost" /v "EnableWebContentEvaluation" /t "REG_DWORD" /d "0" /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\MicrosoftEdge\PhishingFilter" /v "EnabledV9" /t "REG_DWORD" /d "0" /f

Remove Most Modern UI Apps

Get-AppxPackage -allusers | Remove-AppxPackage

Remove OneDrive

"%SystemRoot%\System32\reg.exe" DELETE "HKEY_CURRENT_USER\Environment" /v "OneDrive" /f

Old

taskkill /IM "OneDrive.exe" /F
%windir%\SysWOW64\OneDriveSetup.exe /uninstall
rmdir "%UserProfile%\OneDrive" "%ProgramData%\Microsoft OneDrive" "%LocalAppData%\Microsoft\OneDrive" "C:\OneDriveTemp" /S /Q
reg delete "HKCR\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}" /f
reg delete "HKCR\Wow6432Node\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}" /f

GPU Shader Cache Wipe

Intel

DEL /F /Q "%UserProfile%\AppData\LocalLow\Intel\ShaderCache\"*

DX Refresh Rate

REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DirectDraw" /v "ForceRefreshRate" /t "REG_DWORD" /d "760" /reg:64 /f
REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DirectDraw" /v "ForceRefreshRate" /t "REG_DWORD" /d "760" /reg:32 /f

Test FIPS Mode

"%SystemRoot%\System32\WindowsPowerShell\v1.0\powershell.exe" -Command "$md5 = New-Object -TypeName 'System.Security.Cryptography.MD5CryptoServiceProvider'"

MEM_TOP_DOWN

"%SystemRoot%\System32\reg.exe" ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v "AllocationPreference" /t "REG_DWORD" /d "0x100000" /f

RST to AHCI

  1. safeboot minimal
  2. Reboot to BIOS settings
  3. RST → AHCI
  4. Boot to Safe Mode
  5. /deletevalue safeboot
  6. Reboot to Windows
"%SystemRoot%\System32\bcdedit.exe" /set "SAFEBOOT" "Minimal"
"%SystemRoot%\System32\bcdedit.exe" /deletevalue "SAFEBOOT"

Eject ISO

"%SystemRoot%\System32\WindowsPowerShell\v1.0\powershell.exe" -Command "(New-Object -COM 'Shell.Application').NameSpace(17).ParseName('D:').InvokeVerb('Eject')"

Tweaks

Memory Management

"%SystemRoot%\System32\reg.exe" ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v "DisablePagingExecutive" /t "REG_DWORD" /d "1" /f
"%SystemRoot%\System32\reg.exe" ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v "LargeSystemCache" /t "REG_DWORD" /d "1" /f
"%SystemRoot%\System32\reg.exe" ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v "SystemPages" /t "REG_DWORD" /d "0XFFFFFFFF" /f

UseLargePages

"%SystemRoot%\System32\reg.exe" ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\explorer.exe" /v "UseLargePages" /t "REG_DWORD" /d "1" /f
"%SystemRoot%\System32\reg.exe" ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\dwm.exe" /v "UseLargePages" /t "REG_DWORD" /d "1" /f
"%SystemRoot%\System32\reg.exe" ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\ntoskrnl.exe" /v "UseLargePages" /t "REG_DWORD" /d "1" /f
"%SystemRoot%\System32\reg.exe" ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\svchost.exe" /v "UseLargePages" /t "REG_DWORD" /d "1" /f
"%SystemRoot%\System32\reg.exe" ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\csrss.exe" /v "UseLargePages" /t "REG_DWORD" /d "1" /f

Firefox

"%SystemRoot%\System32\reg.exe" ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\firefox.exe" /v "UseLargePages" /t "REG_DWORD" /d "0" /f

Start Menu

RDP

"%SystemRoot%\System32\notepad.exe" "%UserProfile%\Documents\Alira (LAN).rdp"
full address:s:192.168.1.152
networkautodetect:i:0
connection type:i:6
gatewayusagemethod:i:4
use redirection server name:i:0
prompt for credentials:i:0
allow font smoothing:i:1
redirectprinters:i:0
redirectcomports:i:0
redirectsmartcards:i:0
redirectwebauthn:i:0
redirectclipboard:i:1
redirectposdevices:i:0

Start Menu

"%SystemRoot%\explorer.exe" "%AppData%\Microsoft\Windows\Start Menu\Programs\Accessories"
"%UserProfile%\Documents\Alira (LAN).rdp"
Alira

Version Notes

LTSC 1809

LTSB 1607

1)
client closes after loading Sound resources