windows:10
Table of Contents
Information
- Microsoft Windows 10
- 21H2
- Also mostly-usable with Windows 11
Notes
Enabling Secure Boot prevents non-WHQL drivers from working 1)
Download
To show ISO downloads on Windows 10 from Firefox: Tools → Browser Tools → Responsive Design Mode
Updates
Slipstream
Information
SSU is to be installed before the CU
Links
- Windows 10 21H2 (LTSC)
Settings
Disable Clipboard History
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\System" /v "AllowClipboardHistory" /t REG_DWORD /d "0" /f
Disable Cortana and Web Search
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /v "AllowCortana" /t REG_DWORD /d "0" /f
Disable CPU Mitigations
reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v "FeatureSettingsOverride" /t "REG_DWORD" /d "3" /f
reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v "FeatureSettingsOverrideMask" /t "REG_DWORD" /d "3" /f
Disable Game DVR
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\GameDVR" /v "AllowgameDVR" /t "REG_DWORD" /d "0" /f
Disable Hibernation and Fast Start
powercfg /H off
Disable Last Access Time File Updates
fsutil behavior set disablelastaccess 1
Disable Online Speech Recognition
reg add "HKLM\SOFTWARE\Policies\Microsoft\InputPersonalization" /v "AllowInputPersonalization" /t REG_DWORD /d "0" /f
Open Pictures With Windows Photo Viewer
reg add "HKCU\Software\Classes\.jpg" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f
reg add "HKCU\Software\Classes\.jpeg" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f
reg add "HKCU\Software\Classes\.gif" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f
reg add "HKCU\Software\Classes\.png" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f
reg add "HKCU\Software\Classes\.bmp" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f
reg add "HKCU\Software\Classes\.tiff" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f
reg add "HKCU\Software\Classes\.ico" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f
Disable Remote Desktop
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" /v "fDenyTSConnections" /t REG_DWORD /d "1" /f
Disable Shared Experiences
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\System" /v "EnableCdp" /t REG_DWORD /d "0" /f
Disable SmartScreen
- General
- Windows Store Apps
- Microsoft EDGE
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer" /v "SmartScreenEnabled" /t "REG_SZ" /d "Off" /f
reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\AppHost" /v "EnableWebContentEvaluation" /t "REG_DWORD" /d "0" /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\MicrosoftEdge\PhishingFilter" /v "EnabledV9" /t "REG_DWORD" /d "0" /f
Disable Startup Delay
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Serialize" /v "StartupDelayInMSec" /t "REG_DWORD" /d "0" /f
Disable System Restore
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore" /v "DisableSR " /t "REG_DWORD" /d "1" /f
Disable Telemetry Features
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DataCollection" /v "AllowTelemetry" /t "REG_DWORD" /d "0" /f
Disable User Account Control
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableLUA" /t "REG_DWORD" /d "0" /f
Disable Windows Defender
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender" /v "DisableAntiSpyware" /t "REG_DWORD" /d "1" /f
Remove Quick Access
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer" /v "HubMode" /t "REG_DWORD" /d "1" /f
Remove Windows Search
Dism /online /Disable-Feature /FeatureName:"SearchEngine-Client-Package" /Remove
Show All Folders in File Explorer Pane
reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "NavPaneShowAllFolders" /t "REG_DWORD" /d "1" /f
Verbose Shutdown
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v "VerboseStatus" /t REG_DWORD /d "1" /f
Other
ScriptTiger Hosts File
- Unified hosts + fakenews + gambling (Compressed)
- Powershell Script
*.ps1
- TODO: Add admin-mode
[Net.ServicePointManager]::SecurityProtocol = "tls12, tls11, tls" Invoke-WebRequest "https://scripttiger.github.io/alts/compressed/blacklist-fg.txt" -OutFile "C:\Windows\System32\drivers\etc\hosts" ipconfig /flushdns
NetFX3 From Install Media
- Change
D:\
to install media drive if necessary
Dism /online /enable-feature /featurename:"NetFX3" /All /Source:"D:\sources\sxs" /LimitAccess
Remove Most Modern UI Apps
- Tested fine on 20H2
This broke the start menu on 1809
- Powershell Script
*.ps1
Get-AppxPackage -allusers | Remove-AppxPackage
Remove OneDrive
taskkill /IM "OneDrive.exe" /F
%windir%\SysWOW64\OneDriveSetup.exe /uninstall
rmdir "%UserProfile%\OneDrive" "%ProgramData%\Microsoft OneDrive" "%LocalAppData%\Microsoft\OneDrive" "C:\OneDriveTemp" /S /Q
reg delete "HKCR\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}" /f
reg delete "HKCR\Wow6432Node\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}" /f
Maintenance
- Last updated: 2020/10/02
:: .NET Framework 4 "%windir%\microsoft.net\Framework\v4.0.30319\ngen.exe" update /force /queue "%windir%\microsoft.net\Framework64\v4.0.30319\ngen.exe" update /force /queue "%windir%\microsoft.net\Framework\v4.0.30319\ngen.exe" executequeueditems "%windir%\microsoft.net\Framework64\v4.0.30319\ngen.exe" executequeueditems :: System File Check, Cleanup, and Repair "%windir%\system32\Dism.exe" /online /Cleanup-Image /StartComponentCleanup /ResetBase /RestoreHealth "%windir%\system32\sfc.exe" /scannow :: Classic Disk Cleanup "%windir%\system32\cleanmgr.exe" /sageset:65535 "%windir%\system32\cleanmgr.exe" /sagerun:65535 :: Defrag/Trim "%windir%\system32\dfrgui.exe"
WSL
- See Ubuntu WSL
Windows Terminal
VCLibs
powershell -Command "Add-AppxPackage https://aka.ms/Microsoft.VCLibs.x64.14.00.Desktop.appx"
Windows Terminal
powershell -Command "Add-AppxPackage https://github.com/microsoft/terminal/releases/download/v1.16.10261.0/Microsoft.WindowsTerminal_Win10_1.16.10261.0_8wekyb3d8bbwe.msixbundle"
SSH
Requires WSL and Ubuntu installed
wt wsl --distribution "Ubuntu" -- ssh "espionage724@192.168.1.152"
Information
Prevent Driver Changes
Notes
- To be done after a proper driver is manually installed
- This ensures Windows Update nor anything else can replace installed drivers for specific devices unattended
- Additional entries need to add a new number (the value after
/v
) - The device ID can be acquired from Device Manager and should be pasted as-is (no extra slashes)
Base Policies
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions" /v "DenyDeviceIDs" /t "REG_DWORD" /d "1" /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions" /v "DenyDeviceIDsRetroactive" /t "REG_DWORD" /d "0" /f
Format
- Do not copy/paste these as-is; only here for reference
- Adjust to specific devices as-needed
Add Prevent Policy
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceIDs" /v "#" /t "REG_SZ" /d "PCI\VEN_XXXX&DEV_XXXX&SUBSYS_XXXXXXXX&REV_XX" /f
Remove Prevent Policy
reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceIDs" /v "#" /f
Hardware Utilities
CPU-Z
GPU-Z
prime95
HWiNFO
poclmembench
Driver Store Explorer
AMD Cleanup Utility
NVIDIA Cleanup Utility
memtest_vulkan
memtestCL
Fooling Around
FurMark
Intel PDT
- Intel Processor Diagnostic Tool
Programs
7-Zip
Android Tools
SETX /M path "%path%;C:\Program Files\platform-tools"
aria2
SETX /M path "%path%;C:\Program Files\aria2c"
BleachBit
Brain Workshop
Calculator
- Only available on LTSB/LTSC
win32calc
DirectX End-User Runtime
FileZilla
Firefox
GIMP
Google Chrome
KeePassXC
Keybase
LibreOffice
mpv
MuPDF
Notepad++
OBS
Python
Rufus
Thunderbird
Transmission
Visual C++ Redistributable Runtimes
Games
Battle.net App
Discord
Heroic
SideQuest
Steam
Drivers
- See drivers for more URLs
Spinesnap
Chipset
- TODO: Chipset name
- ASUS ROG Forums (AHCI 2xx/3xx)
- Windows 11 Forum (AHCI 2xx/3xx)
SerialIO
- TODO: Chipset name
- Windows 11 Forum (3xx/4xx)
- ASUS ROG Forums (3xx/4xx)
Ethernet
- I219-LM Gigabit
- Windows 11 Forum (I217/I218/I219)
- ASUS ROG Forums (I217/I218/I219)
Wireless + Bluetooth
- wireless-AC 9560
- ASUS ROG Forums (8xxx/9xxx/AXxxx)
- Windows 11 Forum (8xxx/9xxx/AXxxx)
Graphics
- Intel UHD Graphics 630
1)
this is particularly bad with Intel RST; if it's signed by Intel, it won't allow booting; there is no warning of this when loading the RST driver during Windows set-up
/var/www/wiki/data/pages/windows/10.txt · Last modified: 2023/09/14 17:53 by Sean Rhone