• Microsoft Windows 10 IoT Enterprise LTSC
• Version 21H2 (OS Build 19044.7548)

• Quick Commands
• Env PATH Variables
• misc

• System Error Codes (0-499+)
• Windows Update error codes

• Windows 10 21H2 Cumulative Updates - Microsoft Update Catalog
• KB5014032 2022-05 SSU is required before the latest CU

"%SystemRoot%\System32\win32calc.exe"

Calculator

"%SystemRoot%\System32\notepad.exe" "%UserProfile%\Desktop\Maintenance.bat"

@echo off

TITLE Maintenance
CD "%Temp%"

:: Disk Cleanup Set-up
"%SystemRoot%\System32\cleanmgr.exe" /sageset:9999

:: System File Check, Cleanup, and Repair
"%SystemRoot%\System32\Dism.exe" /online /Cleanup-Image /StartComponentCleanup /ResetBase /RestoreHealth
"%SystemRoot%\System32\sfc.exe" /scannow

:: Disk Cleanup
"%SystemRoot%\System32\cleanmgr.exe" /sagerun:9999

:: Volume Shadow Copy
"%SystemRoot%\System32\vssadmin.exe" Delete Shadows /All

:: USN Change Journal
"%SystemRoot%\System32\fsutil.exe" usn deleteJournal /D "%SystemDrive%"

:: .NET Framework 4
"%SystemRoot%\Microsoft.NET\Framework\v4.0.30319\ngen.exe" update /force /queue
"%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\ngen.exe" update /force /queue
"%SystemRoot%\Microsoft.NET\Framework\v4.0.30319\ngen.exe" executequeueditems
"%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\ngen.exe" executequeueditems

ECHO Explorer close
PAUSE
"%SystemRoot%\System32\taskkill.exe" /F /IM "explorer.exe"
"%SystemRoot%\System32\timeout.exe" /T "2" /NOBREAK

:: Icon Cache
DEL /F /Q "%LocalAppData%\Microsoft\Windows\Explorer\"*".db"
DEL /F /Q "%UserProfile%\AppData\Local\IconCache.db"

:: Temp Dirs
DEL /F /Q "%LocalAppData%\Temp\*"
DEL /F /Q "%SystemRoot%\Temp\*"

TIMEOUT /T "2" /NOBREAK
START explorer.exe

:: Defrag/Trim
ECHO Defrag
PAUSE
"%SystemRoot%\System32\Defrag.exe" /AllVolumes /Defrag /TierOptimize /SlabConsolidate /Retrim /Optimize /PrintProgress /Verbose /NormalPriority

PAUSE

:: End

"%SystemRoot%\System32\notepad.exe" "%UserProfile%\Downloads\Remove Intel Microcode.bat"

@echo off

CD "%Temp%"

"%SystemRoot%\System32\takeown.exe" /F "%SystemRoot%\System32\mcupdate_GenuineIntel.dll"
"%SystemRoot%\System32\icacls.exe" "%SystemRoot%\System32\mcupdate_GenuineIntel.dll" /grant "Administrators:F"

DEL /Q "%SystemRoot%\System32\mcupdate_GenuineIntel.dll"

:: End

"%UserProfile%\Downloads\Remove Intel Microcode.bat"

• TODO: MKDIR new folder + shortcut for update + wiki backup

"%SystemRoot%\explorer.exe" "%AppData%\Microsoft\Windows\Start Menu\Programs\Accessories"

"%SystemRoot%\System32\OpenSSH\ssh.exe" -o "StrictHostKeyChecking='no'" -o "UserKnownHostsFile='NUL'" "192.168.1.152"

Kraityn

"%SystemRoot%\explorer.exe" "%ProgramData%\Microsoft\Windows\Start Menu\Programs\Microsoft Office Tools"

"%CommonProgramFiles%\microsoft shared\ClickToRun\OfficeC2RClient.exe" /update "user" forceappshutdown="True" displaylevel="True"

Update Office

• Notes

• Edge Tweaks

ipp://192.168.1.164/ipp/print

"powercfg.exe" /HIBERNATE "OFF"

"powercfg.exe" /DUPLICATESCHEME "e9a42b02-d5df-448d-aa00-03f14749eb61"

"powercfg.exe" /Qh

"%SystemRoot%\System32\reg.exe" add "HKLM\SOFTWARE\Policies\Microsoft\Windows\System" /v "AllowClipboardHistory" /t REG_DWORD /d "0" /f

"%SystemRoot%\System32\reg.exe" add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /v "AllowCortana" /t REG_DWORD /d "0" /f

"%SystemRoot%\System32\reg.exe" add "HKLM\SOFTWARE\Policies\Microsoft\Windows\GameDVR" /v "AllowgameDVR" /t "REG_DWORD" /d "0" /f

• Directly shows password prompt

REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Personalization" /v "NoLockScreen" /t REG_DWORD /d "1" /f

REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Personalization" /v "NoLockScreen" /t REG_DWORD /d "0" /f

reg add "HKLM\SOFTWARE\Policies\Microsoft\InputPersonalization" /v "AllowInputPersonalization" /t REG_DWORD /d "0" /f

reg add "HKCU\Software\Classes\.jpg" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f

reg add "HKCU\Software\Classes\.jpeg" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f

reg add "HKCU\Software\Classes\.gif" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f

reg add "HKCU\Software\Classes\.png" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f

reg add "HKCU\Software\Classes\.bmp" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f

reg add "HKCU\Software\Classes\.tiff" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f

reg add "HKCU\Software\Classes\.ico" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" /v "fDenyTSConnections" /t REG_DWORD /d "1" /f

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\System" /v "EnableCdp" /t REG_DWORD /d "0" /f

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore" /v "DisableSR " /t "REG_DWORD" /d "1" /f

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DataCollection" /v "AllowTelemetry" /t "REG_DWORD" /d "0" /f

REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableLUA" /t "REG_DWORD" /d "0" /f

• https://learn.microsoft.com/en-us/windows/security/security-foundations/certification/fips-140-validation

"%SystemRoot%\System32\reg.exe" ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy" /v "Enabled" /t "REG_DWORD" /d "1" /f

reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer" /v "HubMode" /t "REG_DWORD" /d "1" /f

"%SystemRoot%\System32\sc.exe" stop "WSearch" & "%SystemRoot%\System32\sc.exe" config "WSearch" "start=disabled"

"%SystemRoot%\System32\Dism.exe" /Online /Disable-Feature /FeatureName:"SearchEngine-Client-Package" /Remove

reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "NavPaneShowAllFolders" /t "REG_DWORD" /d "1" /f

reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v "VerboseStatus" /t REG_DWORD /d "1" /f

• https://scripttiger.github.io/alts/
• Default

• https://scripttiger.github.io/alts/compressed/blacklist-fg.txt
• Unified hosts + fakenews + gambling (Compressed)

"%SystemRoot%\System32\curl.exe" --output "%Temp%\blacklist-fg.txt" --location "https://scripttiger.github.io/alts/compressed/blacklist-fg.txt" --progress-bar && MOVE /Y "%Temp%\blacklist-fg.txt" "%SystemRoot%\System32\drivers\etc\hosts" && "%SystemRoot%\System32\ipconfig.exe" /flushdns && "%SystemRoot%\System32\ipconfig.exe" /registerdns

"%SystemRoot%\System32\notepad.exe" "%UserProfile%\Downloads\ScriptTiger Hosts (fakenews + gambling).bat"

@echo off

TITLE ScriptTiger Hosts (fakenews + gambling)
CD "%Temp%"

"%SystemRoot%\System32\curl.exe" --output "%Temp%\blacklist-fg.txt" --location "https://scripttiger.github.io/alts/compressed/blacklist-fg.txt" --progress-bar
MOVE /Y "%Temp%\blacklist-fg.txt" "%SystemRoot%\System32\drivers\etc\hosts"

"%SystemRoot%\System32\ipconfig.exe" /flushdns
"%SystemRoot%\System32\ipconfig.exe" /registerdns

:: End

"%UserProfile%\Downloads\ScriptTiger Hosts (fakenews + gambling).bat"

"%SystemRoot%\System32\notepad.exe" "%UserProfile%\Downloads\Install Microsoft Store.bat"

@echo off

TITLE Install Microsoft Store
CD "%Temp%"

"%SystemRoot%\System32\WSReset.exe" -i
"%SystemRoot%\System32\timeout.exe" /T "20" /NOBREAK

"%SystemRoot%\System32\WSReset.exe" -i

EXIT /B

:: End

"%UserProfile%\Downloads\Install Microsoft Store.bat"

"%SystemRoot%\System32\WinSAT.exe" "formal" -restart "clean" -v

"%SystemRoot%\System32\WinSAT.exe" forgethistory

"%SystemRoot%\System32\WinSAT.exe" query

• Change D:\ to install media drive if necessary

Dism /online /enable-feature /featurename:"NetFX3" /All /Source:"D:\sources\sxs" /LimitAccess

• To be done after a proper driver is manually installed
• This ensures Windows Update nor anything else can replace installed drivers for specific devices unattended
• Additional entries need to add a new number (the value after /v)
• The device ID can be acquired from Device Manager and should be pasted as-is (no extra slashes)

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions" /v "DenyDeviceIDs" /t "REG_DWORD" /d "1" /f

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions" /v "DenyDeviceIDsRetroactive" /t "REG_DWORD" /d "0" /f

• Do not copy/paste these as-is; only here for reference
• Adjust to specific devices as-needed

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceIDs" /v "#" /t "REG_SZ" /d "PCI\VEN_XXXX&DEV_XXXX&SUBSYS_XXXXXXXX&REV_XX" /f

reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceIDs" /v "#" /f

• Dynamic Tuning devices can be disabled from registry
• 5 devices

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\ACPI\INT3400\2&daba3ff&1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Dwm ForceEffectMode 1

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced UseOLEDTaskbarTransparency 1

COPY /Y "%SystemRoot%\Resources\Themes\aero.theme" "%UserProfile%\Desktop\aerolite.theme"

"%SystemRoot%\System32\notepad.exe" "%UserProfile%\Desktop\aerolite.theme"

[Theme]
DisplayName=Aero Lite

[VisualStyles]
Path=%ResourceDir%\Themes\Aero\AeroLite.msstyles

• Delete aerolite.theme after apply

"%UserProfile%\Desktop\aerolite.theme"

• Personalization → Colors

• Default Windows mode: [x] Dark
• Default app mode: [x] Light
• [ ] Transparency effects
• [ ] Automatically pick an accent color
• Accent color on surfaces: [x] Title bars and window borders

• DWORD = 1 for both

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces

TcpAckFrequency

TcpNoDelay

"%SystemRoot%\System32\attrib.exe" +H "%UserProfile%\.ssh"

• Notes

• More Programs

• https://www.7-zip.org/download.html

• USB Driver
• platform-tools

• https://github.com/aria2/aria2/releases

• https://sourceforge.net/projects/brainworkshop/files/brainworkshop/

• https://www.microsoft.com/en-us/download/confirmation.aspx?id=8109

• https://www.firefox.com/en-US/download/all/desktop-esr/win64-msi/en-US/
• https://www.firefox.com/en-US/download/all/

• Settings

• https://www.thunderbird.net/en-US/thunderbird/all/

• https://www.gimp.org/downloads

"%SystemRoot%\System32\attrib.exe" +H "%UserProfile%\.dbus-keyrings"

• https://keepassxc.org/download#windows

• https://cdn.kde.org/ci-builds/graphics/okular/master/windows/

• https://github.com/notepad-plus-plus/notepad-plus-plus/releases

• https://www.qbittorrent.org/download

• https://github.com/abbodi1406/vcredist/releases
• https://forums.mydigitallife.net/threads/repack-visual-c-redistributable-runtimes-2025-10-17.76588/

• https://download.videolan.org/pub/videolan/vlc/last/win64/
• https://www.videolan.org/vlc/download-windows.html

• https://vulkan.lunarg.com/sdk/home

• See Drivers for more URLs

• TODO

• https://www.dell.com/support/home/en-us/drivers/driversdetails?driverid=r0jhr&oscode=w764&productcode=precision-m6500
• 9.1.1.1025

• https://www.amd.com/en/support/downloads/drivers.html/graphics/firepro/firepro-mobility-series/firepro-m7820-mobility.html
• amdcleanuputility.exe

• Dell Latitude 5591 - Support and BIOS Updates

• EPOMAKER x LEOBOG Hi75

• https://leobogtech.com/blogs/software/leobog-driver
• Hi75RGB固件.exe (V5.0.0) ¹⁾

• ATTACK SHARK R6

"%ProgramFiles(x86)%\Microsoft\Edge\Application\msedge_proxy.exe" --app="https://www.xvalleyinno.top/AttackShark/#/project/items"

"%ProgramFiles(x86)%\Microsoft\Edge\Application\msedge_proxy.exe" --app="https://cn.attackshark.pro/WebDriven/index.html#/project/items"

• 16.8.5.1014 ²⁾

• I219-LM Gigabit
• Intel Corporation Ethernet Connection (7) I219-LM (rev 10) ³⁾
• 2026/05/23: 12.19.2.64 limits Receive and Transmit Buffers to 2048 on W11, but can do 4096+ on 10

• https://www.intel.com/content/www/us/en/products/sku/82185/intel-ethernet-connection-i219lm/downloads.html

• AX210

• https://www.intel.com/content/www/us/en/products/sku/204836/intel-wifi-6e-ax210-gig/downloads.html

• Intel UHD Graphics 630
• Intel Corporation CoffeeLake-H GT2 [UHD Graphics 630]

• https://www.intel.com/content/www/us/en/support/products/126790/graphics/processor-graphics/intel-uhd-graphics-family/intel-uhd-graphics-630.html

• Aperture size and other BIOS options affect available memory ⁴⁾

"%SystemRoot%\System32\reg.exe" ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000\GMM" /v "DedicatedSegmentSize" /t "REG_DWORD" /d "8192" /f

• DisableFlipImmediateOnHSync=1 caused MW2 (DX9) to cap FPS at refresh rate on external HDMI
• 2026/07/13: Display1_DisableAsyncFlips=1 capped osu!lazer (D3D11) at refresh rate (OGL was uncapped)
• IncreaseFixedSegment is seemingly 0 or 1 ⁵⁾
• @dota2.exe and etc at 1 ⁶⁾

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000

AdaptiveVsyncEnable
ForcePLLDisableEnableForFreqChange
IncreaseFixedSegment
LSPCONLpmEnable
NarrowGamutSplitGammaEnable
PowerGpsAggressivenessLevel
PSR2Disable
Psr2DrrsEnable
RemoveALLInterlacedModes
ResendACTSignal
TotalPSR2OUICount
z AssertBreakDisable
z AssertEnableMask
z DebugEnableMask