User Tools

Site Tools


windows:10

Table of Contents

Information

  • Microsoft Windows 10 Enterprise 2016 LTSB
  • 10.0.14393

Download

Enterprise 2016 LTSB

Cumulative Update

Enterprise 2016 LTSB

  • 2018-01 Cumulative Update for Windows 10 Version 1607 for x64-based Systems (KB4056890)

Maintenance

Component Store Cleanup, Check, and Repair

Dism /online /Cleanup-Image /StartComponentCleanup /ResetBase /RestoreHealth

sfc scannow

sfc /scannow

Maintenance.cmd

notepad "%UserProfile%\Desktop\Maintenance.bat"
"%windir%\system32\Dism.exe" /online /Cleanup-Image /StartComponentCleanup /ResetBase /RestoreHealth
"%windir%\system32\sfc.exe" /scannow
"%windir%\system32\cleanmgr.exe" /sageset:65535
"%windir%\system32\cleanmgr.exe" /sagerun:65535
rmdir "%temp%" /S /Q
mkdir "%temp%"
rmdir "%windir%\temp" /S /Q
mkdir "%windir%\temp"
"%windir%\system32\dfrgui.exe"

Disable Automatic Driver Updates

Notes

  • To be done after a proper driver is installed
  • This ensures Windows Update nor anything else can replace installed drivers for specific devices
  • Additional entries need to add a new number (the value after /v)
  • The device ID can be acquired from Device Manager and should be pasted as-is (no extra slashes)

Initial

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions" /v "DenyDeviceIDs" /t "REG_DWORD" /d "1" /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions" /v "DenyDeviceIDsRetroactive" /t "REG_DWORD" /d "0" /f

TODO

  • TODO: Add stuff back here in a nicer way; was messy

Telemetry

Disable Telemetry Features

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DataCollection" /v "AllowTelemetry" /t "REG_DWORD" /d "0" /f

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /v "AllowCortana" /t REG_DWORD /d "0" /f

Disable License Telemetry

reg add "HKLM\Software\Policies\Microsoft\Windows NT\CurrentVersion\Software Protection Platform" /v "NoGenTicket" /t "REG_DWORD" /d "1" /f

Disable MRT Reporting

reg add "HKLM\SOFTWARE\Policies\Microsoft\MRT" /v "DontReportInfectionInformation" /t "REG_DWORD" /d "1" /f

Software Management

NetFX3 From Install Media

  • Change D:\ to install media drive if necessary
Dism /online /enable-feature /featurename:"NetFX3" /All /Source:"D:\sources\sxs" /LimitAccess

Remove Most Modern UI Apps

Get-AppxPackage -allusers | Remove-AppxPackage

Dism /online /Disable-Feature /FeatureName:"SearchEngine-Client-Package" /Remove

Remove OneDrive

notepad "%UserProfile%\Desktop\Remove OneDrive.cmd"
taskkill /IM "OneDrive.exe" /F
%windir%\SysWOW64\OneDriveSetup.exe /uninstall
rmdir "%UserProfile%\OneDrive" "%ProgramData%\Microsoft OneDrive" "%LocalAppData%\Microsoft\OneDrive" "C:\OneDriveTemp" /S /Q
reg delete "HKCR\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}" /f
reg delete "HKCR\Wow6432Node\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}" /f

Open Pictures With Windows Photo Viewer

notepad "%UserProfile%\Desktop\Open Pictures With Windows Photo Viewer.cmd"
reg add "HKCU\Software\Classes\.jpg" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f
reg add "HKCU\Software\Classes\.jpeg" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f
reg add "HKCU\Software\Classes\.gif" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f
reg add "HKCU\Software\Classes\.png" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f
reg add "HKCU\Software\Classes\.bmp" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f
reg add "HKCU\Software\Classes\.tiff" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f
reg add "HKCU\Software\Classes\.ico" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f

Network

Steven Black's Unified Hosts File

notepad "%UserProfile%\Downloads\StevenBlack Hosts File.ps1"
Invoke-WebRequest "https://raw.githubusercontent.com/StevenBlack/hosts/master/hosts" -OutFile "C:\Windows\System32\drivers\etc\hosts"
ipconfig /flushdns
reg add "HKLM\SYSTEM\CurrentControlSet\services\Dnscache\Parameters" /v "MaxNegativeCacheTtl" /t "REG_DWORD" /d "0" /f
reg add "HKLM\SYSTEM\CurrentControlSet\services\Dnscache\Parameters" /v "MaxCacheTtl" /t "REG_DWORD" /d "1" /f

Driver

  • Disable Flow Control
  • Disable Interrupt Moderation
  • Disable Priority and VLAN

Disable Network Connectivity Testing

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\NetworkConnectivityStatusIndicator" /v "NoActiveProbe" /t "REG_DWORD" /d "1" /f

Other Tweaks

Disable Experimentation

reg add "HKLM\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation" /v "value" /t "REG_DWORD" /d "0" /f

Disable Windows Tips

reg add "HKLM\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableSoftLanding" /t "REG_DWORD" /d "1" /f
reg add "HKLM\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableWindowsSpotlightFeatures" /t "REG_DWORD" /d "1" /f
reg add "HKLM\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableWindowsConsumerFeatures" /t "REG_DWORD" /d "1" /f
reg add "HKLM\Software\Policies\Microsoft\Windows\DataCollection" /v "DoNotShowFeedbackNotifications" /t "REG_DWORD" /d "1" /f

Disable Game Bar

reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\GameDVR" /v "AppCaptureEnabled" /t "REG_DWORD" /d "0" /f
reg add "HKCU\System\GameConfigStore" /v "GameDVR_Enabled" /t "REG_DWORD" /d "0" /f

Disable Sync

reg add "HKLM\Software\Policies\Microsoft\Windows\SettingSync" /v "DisableSettingSync" /t "REG_DWORD" /d "1" /f
reg add "HKLM\Software\Policies\Microsoft\Windows\SettingSync" /v "DisableSettingSyncUserOverride" /t "REG_DWORD" /d "1" /f

Disable SmartScreen

reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer" /v "SmartScreenEnabled" /t "REG_SZ" /d "Off" /f
reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\AppHost" /v "SmartScreenEnabled" /t "REG_SZ" /d "Off" /f

Disable Sync Provider Notifications

reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "ShowSyncProviderNotifications" /t "REG_DWORD" /d "0" /f

Disable Windows Insider Pane

reg add "HKLM\SOFTWARE\Microsoft\WindowsSelfHost\UI\Visibility" /v "HideInsiderPage" /t "REG_DWORD" /d "1" /f

Disable Windows Feedback

reg add "HKCU\SOFTWARE\Microsoft\Siuf\Rules" /v "NumberOfSIUFInPeriod" /t "REG_DWORD" /d "0" /f
reg delete "HKCU\SOFTWARE\Microsoft\Siuf\Rules" /v "PeriodInNanoSeconds" /f

Disable Biometrics

reg add "HKLM\SOFTWARE\Policies\Microsoft\Biometrics\Credential Provider" /v "Enabled" /t "REG_DWORD" /d "0" /f

Disable Error Reporting

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting" /v "Disabled" /t REG_DWORD /d "1" /f
reg add "HKLM\SOFTWARE\Microsoft\Windows\Windows Error Reporting" /v "Disabled" /t "REG_DWORD" /d "1" /f

Disable Windows Store

reg add "HKLM\SOFTWARE\Policies\Microsoft\WindowsStore" /v "RemoveWindowsStore" /t "REG_DWORD" /d "1" /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\WindowsStore" /v "DisableStoreApps" /t "REG_DWORD" /d "1" /f

Disable Automatic Maintenance

reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Maintenance" /v "MaintenanceDisabled" /t "REG_DWORD" /d "1" /f

Disable User Account Control

reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableLUA" /t "REG_DWORD" /d "0" /f

Show All Folders in File Explorer Pane

reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "NavPaneShowAllFolders" /t "REG_DWORD" /d "1" /f

Auto Login

control userpasswords2

Disable Dynamic Ticks

bcdedit /set "disabledynamictick" "Yes"

Disable Hibernation and Fast Start

powercfg /H off

Disable Windows Defender

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender" /v "DisableAntiSpyware" /t "REG_DWORD" /d "1" /f

Disable Peer-to-Peer Networking

reg add "HKLM\SOFTWARE\Policies\Microsoft\Peernet" /v "Disabled" /t "REG_DWORD" /d "1" /f

Prevent MRT

reg add "HKLM\SOFTWARE\Policies\Microsoft\MRT" /v "DontOfferThroughWUAU" /t "REG_DWORD" /d "1" /f

Lock screen Background

C:\Windows\Web\Wallpaper\Windows\img0.jpg

Increase Taskbar Transparency

reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "UseOLEDTaskbarTransparency" /t "REG_DWORD" /d "1" /f

Use Uncompressed JPEG Desktop Backgrounds

reg add "HKCU\Control Panel\Desktop" /v "JPEGImportQuality" /t "REG_DWORD" /d "100" /f

Disable System Restore

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore" /v "DisableConfig" /t "REG_DWORD" /d "1" /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore" /v "DisableSR " /t "REG_DWORD" /d "1" /f

Disable Startup Delay

reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Serialize" /v "StartupDelayInMSec" /t "REG_DWORD" /d "0" /f

Disable HomeGroups

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\HomeGroup" /v "DisableHomeGroup" /t "REG_DWORD" /d "1" /f

Settings

Internet Time Server

w32tm /config /syncfromflags:manual /manualpeerlist:"0.pool.ntp.org 1.pool.ntp.org 2.pool.ntp.org 3.pool.ntp.org"

Programs

7-Zip

Android

aria2

SETX /M path "%path%;C:\Program Files\aria2c"

burfadel Tools

Calculator

win32calc

DirectX End-User Runtimes

FileZilla

GIMP

Google Chrome

ImageUSB

Keybase

KeePassXC

LibreOffice

MarkC Mouse Acceleration Fix

Microsoft Toolkit

Mozilla Firefox

user.js

  • Last updated: 2018/02/05
cd "%APPDATA%\Mozilla\Firefox\Profiles\*.default" & notepad "user.js"
user_pref("layout.frame_rate.precise", true);
user_pref("mousewheel.min_line_scroll_amount", 40);
user_pref("browser.sessionstore.interval", 300000);
user_pref("extensions.pocket.enabled", false);
user_pref("loop.enabled", false);
user_pref("reader.parse-on-load.enabled", false);
user_pref("network.captive-portal-service.enabled", false);
user_pref("network.cookie.cookieBehavior", 1);
user_pref("browser.sessionstore.privacy_level", 2);
user_pref("browser.cache.disk.enable", false);
user_pref("privacy.popups.disable_from_plugins", 3);
user_pref("dom.battery.enabled", false);
user_pref("media.peerconnection.ice.default_address_only", true);
user_pref("toolkit.telemetry.enabled", false);
user_pref("privacy.donottrackheader.enabled", true);
user_pref("geo.enabled", false);
user_pref("browser.safebrowsing.malware.enabled", false);
user_pref("browser.safebrowsing.phishing.enabled", false);
user_pref("browser.safebrowsing.downloads.enabled", false);
user_pref("webgl.disabled", true);
user_pref("network.cookie.lifetimePolicy", 2);
user_pref("browser.display.use_document_fonts", 0);
user_pref("network.http.referer.userControlPolicy", 2);
user_pref("dom.webaudio.enabled", false);
user_pref("dom.webnotifications.enabled", false);
user_pref("gfx.canvas.azure.accelerated", true);
user_pref("layers.acceleration.force-enabled", true);
user_pref("browser.tabs.remote.autostart", true);
user_pref("browser.tabs.remote.force-enable", true);
user_pref("extensions.screenshots.system-disabled", true);
user_pref("datareporting.policy.dataSubmissionEnabled", false);
user_pref("media.autoplay.enabled", false);
user_pref("browser.tabs.drawInTitlebar", true);

Extensions

  • Enable Active Mode
  • Don't Log Total Number Of Cookies Deleted
  • Don't Show Notification After Cookie CleanUp
  • Clean Cookies from Open Tabs on StartUp

No Resource URI Leak

  • Block Web-exposed subset of chrome URIs
  • Update the policy

uBlock Origin

  • Enable Advanced Mode
  • Uncheck EasyPrivacy
  • Uncheck EasyList
  • Check MVPS HOSTS
  • Check hpHost's Ad and tracking servers
  • Check Dan Pollock's hosts file
Custom 3rd-party filters
https://secure.fanboy.co.nz/fanboy-problematic-sites.txt
https://secure.fanboy.co.nz/r/fanboy-ultimate.txt
https://secure.fanboy.co.nz/fanboy-antifacebook.txt
https://secure.fanboy.co.nz/fanboy-antifonts.txt
https://raw.githubusercontent.com/ryanbr/fanboy-adblock/master/fanboy-cookiemonster.txt
https://raw.githubusercontent.com/ryanbr/fanboy-adblock/master/popads-domains-list.txt
https://raw.githubusercontent.com/ryanbr/fanboy-adblock/master/fake-news.txt
https://raw.githubusercontent.com/ryanbr/fanboy-adblock/master/enhancedstats-addon.txt
My filters
! Facebook 2017/11/10
www.facebook.com###sideNav > div
www.facebook.com###rightCol
www.facebook.com###fbDockChatBuddylistNub > .fbNubButton
www.facebook.com###feedx_sprouts_container

! Reddit 2017/11/10
www.reddit.com##.trending-subreddits
www.reddit.com###chat
www.reddit.com##.initialized.listing-chooser
www.reddit.com##.listingsignupbar.infobar
www.reddit.com##.menuarea
www.reddit.com##.create.sidebox
www.reddit.com##.hohoho.sidebox

! Imgur 2017/11/10
imgur.com###right-content
imgur.com##.caption-create
imgur.com##.post-action
imgur.com##.comments-info
imgur.com###topbar
imgur.com##.spotlight-container

! Phoronix 2017/11/10
www.phoronix.com##.restore.notice
www.phoronix.com###breadcrumbs
www.phoronix.com###widget_6
www.phoronix.com###notices
www.phoronix.com###channel-subtabbar
www.phoronix.com###widget_152
www.phoronix.com###widget_153
www.phoronix.com###widget_2
www.phoronix.com###widget_151
www.phoronix.com###widget_9
www.phoronix.com###widget_7
www.phoronix.com###widget_4
www.phoronix.com###footer-tabbar
www.phoronix.com###footer-copyright
www.phoronix.com###ui-id-1
www.phoronix.com###sidebar
www.phoronix.com###footer

! My Digital Life Forums 2017/11/10
forums.mydigitallife.net##.noticeContent.baseHtml
forums.mydigitallife.net##footer
forums.mydigitallife.net##.persistentFooterButton__bar--spaceHolder
forums.mydigitallife.net##.element.concealed

! Gfycat 2017/11/10
gfycat.com###header-container
gfycat.com###video-details-container
gfycat.com##.right

Mozilla Thunderbird

mpv

mpv-install.bat

Notepad++

Prime95

PuTTY

Games

Battle.net App

Steam

Diablo II

Guild Wars 2

"C:\Program Files\Guild Wars 2\Gw2-64.exe" -autologin
"C:\Program Files\Guild Wars 2\Gw2-64.exe" -image
"C:\Program Files\Guild Wars 2\Gw2-64.exe" -repair

Unreal Tournament 99

Drivers

Spinesnap

Intel(R) HD Graphics 630

  • PAVP must be enabled in BIOS or else installing the graphics driver results in a TDR BSoD
PCI\VEN_8086&DEV_591B&SUBSYS_12081025&REV_04

Intel Chipset

Intel Serial IO

NVIDIA GeForce GTX 1060

Telemetry Strip

  • Extract driver to folder
  • Remove every folder and file from the root extracted folder except the following
    • Display.Driver\
    • Display.Optimus\
    • NVI2\
    • EULA.txt
    • ListDevices.txt
    • setup.cfg
    • setup.exe
  • Run setup.exe with /s flag for Silent 2)

Realtek High Definition Audio

  • Uninstall Dolby Audio X2 Windows API SDK
  • Disable Audio DSP in BIOS in order to not deal with Intel SST's driver mess
  • TODO: Write notes on SST

Realtek RTL8111/8168/8411 PCI-E Gigabit Ethernet Controller

Qualcomm Atheros QCA61x4 Wireless

PCI\VEN_168C&DEV_003E&SUBSYS_080711AD&REV_32

Realtek PCI-E Card Reader

Piety

Intel(R) HD Graphics 630

Intel Chipset

Intel Serial IO

Intel Dynamic Platform and Thermal Framework

AMD Radeon R7 M445/440

Realtek High Definition Audio

Intel Bluetooth

Realtek PCIe FE Family Controller

Intel Dual Band Wireless-AC 3165

Realtek USB 2.0 Card Reader

  • USB Mass Storage Device > Realtek USB 2.0 Card Reader

Intel Management Engine Interface

Intel 6th Generation I/O SATA AHCI Controller

Hatebeat

AMD Radeon HD 6800 Series

aria2c "https://www2.ati.com/drivers/amd-catalyst-15.7.1-win10-64bit.exe" --referer="https://www2.ati.com"
aria2c "https://www2.ati.com/drivers/beta/non-whql-64bit-nieg-radeon-crimson-16.2.1-win10-win8.1-win7-feb27.exe" --referer="https://www2.ati.com"

AMD Chipset

aria2c "https://www2.ati.com/drivers/amd-chipset-drivers.exe" --referer="https://www2.ati.com"
1)
PH317-51-787B
2)
will automatically reboot
windows/10.txt · Last modified: 2018/02/05 13:24 by Sean Rhone