User Tools

Site Tools


windows:10

Table of Contents

TODOs

Information

  • Microsoft Windows 10
  • LTSC 1809 (relatively TODO still)

Notes

  • Removing Most/All Modern UI apps on 1803 prevents facial login via Windows Hello from working entirely 1) 2)
  • :!: Enabling Secure Boot prevents non-WHQL drivers from working 3)
  • LTSB has up to WDDM 2.1, whereas 1803 has 2.4 4)

Download

Updates

Servicing Stack

Information

YYYY-MM Update for Windows 10 Version 1809 for x64-based Systems (KB#######)

Cumulative

Information

  • :!: SSU is recommended to be installed before the CU

Link

YYYY-MM Cumulative Update for Windows 10 Version 1809 for x64-based Systems (KB#######)

Prevent Driver Changes

Notes

  • To be done after a proper driver is manually installed
  • This ensures Windows Update nor anything else can replace installed drivers for specific devices unattended
  • Additional entries need to add a new number (the value after /v)
  • The device ID can be acquired from Device Manager and should be pasted as-is (no extra slashes)

Base Policies

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions" /v "DenyDeviceIDs" /t "REG_DWORD" /d "1" /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions" /v "DenyDeviceIDsRetroactive" /t "REG_DWORD" /d "0" /f

Format

  • Do not copy/paste these as-is; only here for reference
  • Adjust to specific devices as-needed

Add Prevent Policy

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceIDs" /v "#" /t "REG_SZ" /d "PCI\VEN_XXXX&DEV_XXXX&SUBSYS_XXXXXXXX&REV_XX" /f

Remove Prevent Policy

reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceIDs" /v "#" /f

Tweaks

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /v "AllowCortana" /t REG_DWORD /d "0" /f

Disable Game DVR

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\GameDVR" /v "AllowgameDVR" /t "REG_DWORD" /d "0" /f

Disable Hibernation and Fast Start

powercfg /H off

Disable Last Access Time File Updates

fsutil behavior set disablelastaccess 1

Disable SmartScreen

  • General
  • Windows Store Apps
  • Microsoft EDGE
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer" /v "SmartScreenEnabled" /t "REG_SZ" /d "Off" /f
reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\AppHost" /v "EnableWebContentEvaluation" /t "REG_DWORD" /d "0" /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\MicrosoftEdge\PhishingFilter" /v "EnabledV9" /t "REG_DWORD" /d "0" /f

Disable Startup Delay

reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Serialize" /v "StartupDelayInMSec" /t "REG_DWORD" /d "0" /f

Disable System Restore

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore" /v "DisableSR " /t "REG_DWORD" /d "1" /f

Disable Telemetry Features

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DataCollection" /v "AllowTelemetry" /t "REG_DWORD" /d "0" /f

Disable User Account Control

reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableLUA" /t "REG_DWORD" /d "0" /f

Disable Windows Defender

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender" /v "DisableAntiSpyware" /t "REG_DWORD" /d "1" /f

Open Pictures With Windows Photo Viewer

reg add "HKCU\Software\Classes\.jpg" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f
reg add "HKCU\Software\Classes\.jpeg" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f
reg add "HKCU\Software\Classes\.gif" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f
reg add "HKCU\Software\Classes\.png" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f
reg add "HKCU\Software\Classes\.bmp" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f
reg add "HKCU\Software\Classes\.tiff" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f
reg add "HKCU\Software\Classes\.ico" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f

Remove Most Modern UI Apps

  • Powershell
Get-AppxPackage -allusers | Remove-AppxPackage

Remove Quick Access

reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer" /v "HubMode" /t "REG_DWORD" /d "1" /f

Dism /online /Disable-Feature /FeatureName:"SearchEngine-Client-Package" /Remove

Show All Folders in File Explorer Pane

reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "NavPaneShowAllFolders" /t "REG_DWORD" /d "1" /f

NetFX3 From Install Media

  • Change D:\ to install media drive if necessary
Dism /online /enable-feature /featurename:"NetFX3" /All /Source:"D:\sources\sxs" /LimitAccess

Maintenance

  • TODO: Add BleachBit
"%windir%\system32\Dism.exe" /online /Cleanup-Image /StartComponentCleanup /ResetBase /RestoreHealth
"%windir%\system32\sfc.exe" /scannow
"%windir%\system32\cleanmgr.exe" /sageset:65535
"%windir%\system32\cleanmgr.exe" /sagerun:65535
"%windir%\system32\dfrgui.exe"

Auto Login

control userpasswords2

Add Hardware Wizard

%SYSTEMROOT%\System32\hdwwiz.exe

GodMode Folder

GodMode.{ED7BA470-8E54-465E-825C-99712043E01C}

Settings

Lock screen Background

  • Hero
C:\Windows\Web\Wallpaper\Windows\img0.jpg

Hardware Diagnostiscs

CPU-Z

FurMark

GPU-Z

HWMonitor

Intel PDT

prime95

Programs

7-Zip

Android Tools

aria2

SETX /M path "%path%;C:\Program Files\aria2c"

BleachBit

Calculator

  • Only available on LTSB/LTSC
win32calc

DirectX End-User Runtimes

Etcher

FileZilla

Firefox

Download

Settings

Default Profile

rd "%appdata%\Mozilla" /s /q
md "%appdata%\Mozilla\Firefox\Profiles\espionage724"
profiles.ini
notepad "%appdata%\Mozilla\Firefox\profiles.ini"
[General]
StartWithLastProfile=1

[Profile0]
Name=default
IsRelative=1
Path=Profiles/espionage724
Default=1

user.js

  • Last updated: 2018/11/24
notepad "%appdata%\Mozilla\Firefox\Profiles\espionage724\user.js"
/******************************************************************************
 * SECTION: Custom Stuff -> General                                           *
 ******************************************************************************/

user_pref("extensions.screenshots.disabled", true);
user_pref("reader.parse-on-load.enabled", false);

user_pref("media.mediasource.experimental.enabled", true);
user_pref("media.mediasource.ignore_codecs", true);
user_pref("media.autoplay.enabled", false);

user_pref("webgl.disabled", true);
user_pref("webgl.enable-webgl2", false);
user_pref("accessibility.force_disabled", 1);
user_pref("mousewheel.min_line_scroll_amount", 40);
user_pref("browser.tabs.drawInTitlebar", true);

/******************************************************************************
 * END                                                                        *
 ******************************************************************************/

Remove Features

rd "%ProgramFiles%\Mozilla Firefox\browser\features" /s /q

Extensions

  • [x] Enable Automatic Cleaning? Delay Before Cleaning
  • [x] Enable Cleanup on Domain Change
  • [ ] Enable Cleanup Log and Counter
  • [ ] Show Notification After Cookie Cleanup
  • [x] Clean Cookies from Open Tabs on Startup
  • [x] Localstorage Cleanup (Firefox 58+)

uBlock Origin

Settings
  • [x] Prevent WebRTC from leaking local IP addresses
Filter lists
  • [ ] Ads → EasyList 5)
  • [ ] Privacy → EasyPrivacy 6)
  • Multipurpose → [x] Dan Pollock's hosts file
  • Multipurpose → [x] hpHost's Ad and tracking servers
  • Multipurpose → [x] MVPS HOSTS
  • Custom → [x] Import
Custom 3rd-party filters
  • Last updated: 2018/11/24
https://www.fanboy.co.nz/fanboy-problematic-sites.txt
https://www.fanboy.co.nz/r/fanboy-ultimate.txt
https://www.fanboy.co.nz/fanboy-antifacebook.txt
https://www.fanboy.co.nz/fanboy-antifonts.txt
https://www.fanboy.co.nz/fanboy-cookiemonster.txt
https://raw.githubusercontent.com/ryanbr/fanboy-adblock/master/popads-domains-list.txt
https://raw.githubusercontent.com/ryanbr/fanboy-adblock/master/fake-news.txt

Testing Sites

GIMP

Google Chrome

iTunes

KeePassXC

Keybase

KMS-VL-ALL

LibreOffice

MarkC Mouse Acceleration Fix

Notepad++

qBittorrent

Thunderbird

Visual C++ Redistributable Runtimes

VLC

VPN.AC

Games

Battle.net App

Path of Exile

Steam

Diablo II

Glide Wrapper

Guild Wars 2

"C:\Program Files\Guild Wars 2\Gw2-64.exe" -autologin
"C:\Program Files\Guild Wars 2\Gw2-64.exe" -image
"C:\Program Files\Guild Wars 2\Gw2-64.exe" -repair

Drivers

Nightwane

  • Acer Aspire TC-780

Intel Rapid Storage Technology

Intel Chipset

Realtek Audio

Realtek Ethernet

AMD Radeon RX 580

CORSAIR iCUE

Spinesnap

  • Dell XPS 13 (9360)

Intel HD Graphics

Intel Chipset

Intel HID Event Filter

Intel Management Engine Interface

Intel Rapid Storage Technology

Killer Networking

Qualcomm Bluetooth

  • Need Bluetooth for Killer 1535/1525/1435 - Windows 10

Piety

AMD Radeon R7 M445/440

Realtek Ethernet

Intel HD Graphics

Intel Chipset

Intel Management Engine Interface

Intel Rapid Storage Technology

Intel Wireless

Intel Bluetooth

Hatebeat

AMD Radeon HD 6800 Series

aria2c "https://www2.ati.com/drivers/beta/non-whql-win10-64bit-radeon-software-crimson-relive-16.2.1-sep20.exe" --referer="https://www2.ati.com"

AMD Chipset

aria2c "https://www2.ati.com/drivers/amd-chipset-drivers.exe" --referer="https://www2.ati.com"
1)
removes camera?
2)
Does not apply to LTSB; can freely remove most/all Modern UI apps and still have functional Windows Hello
3)
this is particularly bad with Intel RST; if it's signed by Intel, it won't allow booting; there is no warning of this when loading the RST driver during Windows set-up
4)
shouldn't be an issue; HDR requires 2.4 but nothing I do uses HDR to care
5) , 6)
uncheck; included in Fanboy Ultimate List
windows/10.txt · Last modified: 2018/12/10 03:06 by Sean Rhone