windows:10
Table of Contents
Information
- Microsoft Windows 10 IoT Enterprise LTSC
- Version 21H2 (OS Build 19044.7058)
Resources
- http://redeem.microsoft.com/ (TODO: Put somewhere else)
TODOs
- https://ss64.com/nt/title.html (
TITLEin batch files)
Updates
KB5014032 2022-05 SSU is required before the latest CU
Shortcuts
Desktop
Maintenance
"notepad.exe" "%UserProfile%\Desktop\Maintenance.bat"
@echo off TITLE Maintenance CD "%Temp%" :: Disk Cleanup Set-up "%SystemRoot%\System32\cleanmgr.exe" /sageset:9999 :: System File Check, Cleanup, and Repair "%SystemRoot%\System32\Dism.exe" /online /Cleanup-Image /StartComponentCleanup /ResetBase /RestoreHealth "%SystemRoot%\System32\sfc.exe" /scannow :: Disk Cleanup "%SystemRoot%\System32\cleanmgr.exe" /sagerun:9999 :: Volume Shadow Copy "%SystemRoot%\System32\vssadmin.exe" Delete Shadows /All :: USN Change Journal "%SystemRoot%\System32\fsutil.exe" usn deleteJournal /D "%SystemDrive%" :: .NET Framework 4 "%SystemRoot%\Microsoft.NET\Framework\v4.0.30319\ngen.exe" update /force /queue "%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\ngen.exe" update /force /queue "%SystemRoot%\Microsoft.NET\Framework\v4.0.30319\ngen.exe" executequeueditems "%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\ngen.exe" executequeueditems PAUSE "%SystemRoot%\System32\taskkill.exe" /F /IM "explorer.exe" "%SystemRoot%\System32\timeout.exe" /T "2" /NOBREAK :: Icon Cache DEL /F /Q "%LocalAppData%\Microsoft\Windows\Explorer\"*".db" DEL /F /Q "%UserProfile%\AppData\Local\IconCache.db" :: Shader Cache DEL /F /Q "%LocalAppData%\D3DSCache\*" DEL /F /Q "%UserProfile%\AppData\LocalLow\Intel\ShaderCache\*" :: Temp Dirs DEL /F /Q "%LocalAppData%\Temp\*" DEL /F /Q "%SystemRoot%\Temp\*" TIMEOUT /T "2" /NOBREAK START explorer.exe :: Defrag/Trim PAUSE "%SystemRoot%\System32\Defrag.exe" /AllVolumes /Defrag /TierOptimize /SlabConsolidate /Retrim /Optimize /PrintProgress /Verbose /NormalPriority PAUSE :: End
Downloads
Remove Intel Microcode
"%SystemRoot%\System32\notepad.exe" "%UserProfile%\Downloads\Remove Intel Microcode.bat"
@echo off CD "%Temp%" "%SystemRoot%\System32\takeown.exe /F "%SystemRoot%\System32\mcupdate_GenuineIntel.dll" "%SystemRoot%\System32\icacls.exe" "%SystemRoot%\System32\mcupdate_GenuineIntel.dll" /grant "Administrators:F" DEL /Q "%SystemRoot%\System32\mcupdate_GenuineIntel.dll" :: End
"%UserProfile%\Downloads\Remove Intel Microcode.bat"
Start Menu
RDP
"%SystemRoot%\System32\notepad.exe" "%UserProfile%\Documents\Alira (LAN).rdp"
full address:s:192.168.1.152 redirectprinters:i:0 redirectcomports:i:0 redirectsmartcards:i:0 redirectwebauthn:i:0 redirectclipboard:i:1 redirectposdevices:i:0
Start Menu
"%SystemRoot%\explorer.exe" "%AppData%\Microsoft\Windows\Start Menu\Programs\Accessories"
"%UserProfile%\Documents\Alira (LAN).rdp"
Alira
Settings
BCDEdit
Microsoft Edge
Power
Disable Hibernation and Fast Start
"powercfg.exe" /HIBERNATE "OFF"
Enable Ultimate Performance Power Plan
"powercfg.exe" /DUPLICATESCHEME "e9a42b02-d5df-448d-aa00-03f14749eb61"
More Settings
"powercfg.exe" /Qh
SMB
Disable Clipboard History
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\System" /v "AllowClipboardHistory" /t REG_DWORD /d "0" /f
Disable Cortana and Web Search
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /v "AllowCortana" /t REG_DWORD /d "0" /f
Disable Game DVR
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\GameDVR" /v "AllowgameDVR" /t "REG_DWORD" /d "0" /f
Quick Lock Screen
- Directly shows password prompt
REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Personalization" /v "NoLockScreen" /t REG_DWORD /d "1" /f
Undo
REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Personalization" /v "NoLockScreen" /t REG_DWORD /d "0" /f
Disable Online Speech Recognition
reg add "HKLM\SOFTWARE\Policies\Microsoft\InputPersonalization" /v "AllowInputPersonalization" /t REG_DWORD /d "0" /f
Open Pictures With Windows Photo Viewer
reg add "HKCU\Software\Classes\.jpg" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f
reg add "HKCU\Software\Classes\.jpeg" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f
reg add "HKCU\Software\Classes\.gif" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f
reg add "HKCU\Software\Classes\.png" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f
reg add "HKCU\Software\Classes\.bmp" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f
reg add "HKCU\Software\Classes\.tiff" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f
reg add "HKCU\Software\Classes\.ico" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f
Disable Remote Desktop
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" /v "fDenyTSConnections" /t REG_DWORD /d "1" /f
Disable Shared Experiences
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\System" /v "EnableCdp" /t REG_DWORD /d "0" /f
Disable System Restore
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore" /v "DisableSR " /t "REG_DWORD" /d "1" /f
Disable Telemetry Features
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DataCollection" /v "AllowTelemetry" /t "REG_DWORD" /d "0" /f
Disable User Account Control
REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableLUA" /t "REG_DWORD" /d "0" /f
Enable FIPS Mode
"%SystemRoot%\System32\reg.exe" ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy" /v "Enabled" /t "REG_DWORD" /d "1" /f
"%SystemRoot%\System32\WindowsPowerShell\v1.0\powershell.exe" -Command "$md5 = New-Object -TypeName 'System.Security.Cryptography.MD5CryptoServiceProvider'"
Remove Quick Access
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer" /v "HubMode" /t "REG_DWORD" /d "1" /f
Remove Windows Search
"%SystemRoot%\System32\sc.exe" stop "WSearch" & "%SystemRoot%\System32\sc.exe" config "WSearch" "start=disabled"
"%SystemRoot%\System32\Dism.exe" /Online /Disable-Feature /FeatureName:"SearchEngine-Client-Package" /Remove
Show All Folders in File Explorer Pane
reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "NavPaneShowAllFolders" /t "REG_DWORD" /d "1" /f
Verbose Shutdown
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v "VerboseStatus" /t REG_DWORD /d "1" /f
DX Refresh Rate
REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DirectDraw" /v "ForceRefreshRate" /t "REG_DWORD" /d "152" /reg:64 /f
REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DirectDraw" /v "ForceRefreshRate" /t "REG_DWORD" /d "152" /reg:32 /f
Other
Microsoft Store
"%SystemRoot%\System32\notepad.exe" "%UserProfile%\Downloads\Install Microsoft Store.bat"
@echo off TITLE Install Microsoft Store CD "%Temp%" "%SystemRoot%\System32\WSReset.exe" -i "%SystemRoot%\System32\timeout.exe" /T "20" /NOBREAK "%SystemRoot%\System32\WSReset.exe" -i EXIT /B :: End
"%UserProfile%\Downloads\Install Microsoft Store.bat"
WinSAT
"%SystemRoot%\System32\WinSAT.exe" "formal" -restart "clean" -v
"%SystemRoot%\System32\WinSAT.exe" forgethistory
"%SystemRoot%\System32\WinSAT.exe" query
NetFX3 From Install Media
- Change
D:\to install media drive if necessary
Dism /online /enable-feature /featurename:"NetFX3" /All /Source:"D:\sources\sxs" /LimitAccess
Prevent Driver Changes
Notes
- To be done after a proper driver is manually installed
- This ensures Windows Update nor anything else can replace installed drivers for specific devices unattended
- Additional entries need to add a new number (the value after
/v) - The device ID can be acquired from Device Manager and should be pasted as-is (no extra slashes)
Base Policies
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions" /v "DenyDeviceIDs" /t "REG_DWORD" /d "1" /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions" /v "DenyDeviceIDsRetroactive" /t "REG_DWORD" /d "0" /f
Format
- Do not copy/paste these as-is; only here for reference
- Adjust to specific devices as-needed
Add Prevent Policy
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceIDs" /v "#" /t "REG_SZ" /d "PCI\VEN_XXXX&DEV_XXXX&SUBSYS_XXXXXXXX&REV_XX" /f
Remove Prevent Policy
reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceIDs" /v "#" /f
Update Office
"%SystemRoot%\explorer.exe" "%AppData%\Microsoft\Windows\Start Menu\Programs\Administrative Tools"
"%CommonProgramFiles%\microsoft shared\ClickToRun\OfficeC2RClient.exe" /update "user" forceappshutdown="True" displaylevel="True"
Update Office
Services
Programs
7-Zip
Android Tools
aria2
Brain Workshop
Calculator
- Only available on LTSB/LTSC
"%SystemRoot%\System32\win32calc.exe"
DirectX End-User Runtime
Firefox
REG ADD "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers" /v "%ProgramFiles%\Mozilla Firefox\firefox.exe" /t "REG_SZ" /d "~ HIGHDPIAWARE" /f
Thunderbird
GIMP
- Install for me only (recommended)
- Compact installation (no components)
- Launch → Create →
[ ]Show on Start
KeePassXC
LibreOffice
[ ]Use a Java runtime
Okular
Notepad++
OBS
qBittorrent
VC++ Redist
VLC media player
Vulkan Runtime
Games
Battle.net App
Steam
Shortcut
- Disable: Settings → Interface → Enable GPU accelerated rendering in web views
"%ProgramFiles(x86)%\Steam\steam.exe" -silent -nocrashmonitor -cef-single-process -cef-disable-breakpad
Steam (min)
Drivers
- See Drivers for more URLs
Spinesnap
Keyboard
- EPOMAKER x LEOBOG Hi75
Mouse
- ATTACK SHARK R6
"%ProgramFiles(x86)%\Microsoft\Edge\Application\msedge_proxy.exe" --app="https://www.xvalleyinno.top/AttackShark/#/project/items"
"%ProgramFiles(x86)%\Microsoft\Edge\Application\msedge_proxy.exe" --app="https://cn.attackshark.pro/WebDriven/index.html#/project/items"
SATA/RST
Intel RST Premium driver with RST/RAID enabled caused random BSoDs 1)
Ethernet
- I219-LM Gigabit
- Intel Corporation Ethernet Connection (7) I219-LM (rev 10) 2)
Wireless
- AX210
Graphics
- Intel UHD Graphics 630
- Intel Corporation CoffeeLake-H GT2 [UHD Graphics 630]
8GB VRAM
Aperture size and other BIOS options affect available memory 3)
"%SystemRoot%\System32\reg.exe" ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000\GMM" /v "DedicatedSegmentSize" /t "REG_DWORD" /d "8192" /f
Boulderback
Chipset
Graphics
/usr/local/www/wiki/data/pages/windows/10.txt · Last modified: by Sean Rhone
