User Tools

Site Tools


windows:10

Table of Contents

TODOs

Information

  • Microsoft Windows 10
  • LTSB 1603

Notes

  • Removing Most/All Modern UI apps on 1803 prevents facial login via Windows Hello from working entirely 1) 2)
  • Enabling Secure Boot prevents non-WHQL drivers from working 3)
  • LTSB has up to WDDM 2.1, whereas 1803 has 2.4 4)

Download

Cumulative Update

YYYY-MM Cumulative Update for Windows 10 Version 1603 for x64-based Systems (KB#######)

Prevent Driver Changes

Notes

  • To be done after a proper driver is manually installed
  • This ensures Windows Update nor anything else can replace installed drivers for specific devices unattended
  • Additional entries need to add a new number (the value after /v)
  • The device ID can be acquired from Device Manager and should be pasted as-is (no extra slashes)

Base Policies

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions" /v "DenyDeviceIDs" /t "REG_DWORD" /d "1" /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions" /v "DenyDeviceIDsRetroactive" /t "REG_DWORD" /d "0" /f

Format

  • Do not copy/paste these as-is; only here for reference
  • Adjust to specific devices as-needed

Add Prevent Policy

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceIDs" /v "#" /t "REG_SZ" /d "PCI\VEN_XXXX&DEV_XXXX&SUBSYS_XXXXXXXX&REV_XX" /f

Remove Prevent Policy

reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceIDs" /v "#" /f

Tweaks

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /v "AllowCortana" /t REG_DWORD /d "0" /f

Disable Game DVR

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\GameDVR" /v "AllowgameDVR" /t "REG_DWORD" /d "0" /f

Disable Hibernation and Fast Start

powercfg /H off

Disable HomeGroup

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\HomeGroup" /v "DisableHomeGroup" /t "REG_DWORD" /d "1" /f

Disable SmartScreen

  • General
  • Windows Store Apps
  • Microsoft EDGE
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer" /v "SmartScreenEnabled" /t "REG_SZ" /d "Off" /f
reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\AppHost" /v "EnableWebContentEvaluation" /t "REG_DWORD" /d "0" /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\MicrosoftEdge\PhishingFilter" /v "EnabledV9" /t "REG_DWORD" /d "0" /f

Disable Startup Delay

reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Serialize" /v "StartupDelayInMSec" /t "REG_DWORD" /d "0" /f

Disable Sync Provider Notifications

reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "ShowSyncProviderNotifications" /t "REG_DWORD" /d "0" /f

Disable System Restore

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore" /v "DisableSR " /t "REG_DWORD" /d "1" /f

Disable Telemetry Features

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DataCollection" /v "AllowTelemetry" /t "REG_DWORD" /d "0" /f

Disable User Account Control

reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableLUA" /t "REG_DWORD" /d "0" /f

Disable Windows Defender

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender" /v "DisableAntiSpyware" /t "REG_DWORD" /d "1" /f

Disable Windows Insider Pane

reg add "HKLM\SOFTWARE\Microsoft\WindowsSelfHost\UI\Visibility" /v "HideInsiderPage" /t "REG_DWORD" /d "1" /f

Open Pictures With Windows Photo Viewer

reg add "HKCU\Software\Classes\.jpg" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f
reg add "HKCU\Software\Classes\.jpeg" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f
reg add "HKCU\Software\Classes\.gif" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f
reg add "HKCU\Software\Classes\.png" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f
reg add "HKCU\Software\Classes\.bmp" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f
reg add "HKCU\Software\Classes\.tiff" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f
reg add "HKCU\Software\Classes\.ico" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f

Remove Most Modern UI Apps

  • Powershell
Get-AppxPackage -allusers | Remove-AppxPackage

Remove OneDrive

taskkill /IM "OneDrive.exe" /F
%windir%\SysWOW64\OneDriveSetup.exe /uninstall
rmdir "%UserProfile%\OneDrive" "%ProgramData%\Microsoft OneDrive" "%LocalAppData%\Microsoft\OneDrive" "C:\OneDriveTemp" /S /Q
reg delete "HKCR\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}" /f
reg delete "HKCR\Wow6432Node\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}" /f

Remove Quick Access

reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer" /v "HubMode" /t "REG_DWORD" /d "1" /f

Dism /online /Disable-Feature /FeatureName:"SearchEngine-Client-Package" /Remove

Show All Folders in File Explorer Pane

reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "NavPaneShowAllFolders" /t "REG_DWORD" /d "1" /f

NetFX3 From Install Media

  • Change D:\ to install media drive if necessary
Dism /online /enable-feature /featurename:"NetFX3" /All /Source:"D:\sources\sxs" /LimitAccess

Maintenance

"%windir%\system32\Dism.exe" /online /Cleanup-Image /StartComponentCleanup /ResetBase /RestoreHealth
"%windir%\system32\sfc.exe" /scannow
"%windir%\system32\cleanmgr.exe" /sageset:65535
"%windir%\system32\cleanmgr.exe" /sagerun:65535
"%windir%\system32\dfrgui.exe"

Auto Login

control userpasswords2

Settings

Lock screen Background

C:\Windows\Web\Wallpaper\Windows\img0.jpg

Internet Time Server

0.north-america.pool.ntp.org

Programs

7-Zip

Android

aria2

SETX /M path "%path%;C:\Program Files\aria2c"

Visual C++ Redistributable Runtimes

Calculator

  • Only on LTSB
win32calc

DirectX End-User Runtimes

FileZilla

GIMP

Google Chrome

Etcher

Keybase

KeePassXC

LibreOffice

MarkC Mouse Acceleration Fix

KMSpico

Mozilla Firefox

user.js

  • Last updated: 2018/02/05
cd "%APPDATA%\Mozilla\Firefox\Profiles\*.default" & notepad "user.js"
user_pref("layout.frame_rate.precise", true);
user_pref("mousewheel.min_line_scroll_amount", 40);
user_pref("browser.sessionstore.interval", 300000);
user_pref("extensions.pocket.enabled", false);
user_pref("loop.enabled", false);
user_pref("reader.parse-on-load.enabled", false);
user_pref("network.captive-portal-service.enabled", false);
user_pref("network.cookie.cookieBehavior", 1);
user_pref("browser.sessionstore.privacy_level", 2);
user_pref("browser.cache.disk.enable", false);
user_pref("privacy.popups.disable_from_plugins", 3);
user_pref("dom.battery.enabled", false);
user_pref("media.peerconnection.ice.default_address_only", true);
user_pref("toolkit.telemetry.enabled", false);
user_pref("privacy.donottrackheader.enabled", true);
user_pref("geo.enabled", false);
user_pref("browser.safebrowsing.malware.enabled", false);
user_pref("browser.safebrowsing.phishing.enabled", false);
user_pref("browser.safebrowsing.downloads.enabled", false);
user_pref("webgl.disabled", true);
user_pref("network.cookie.lifetimePolicy", 2);
user_pref("browser.display.use_document_fonts", 0);
user_pref("network.http.referer.userControlPolicy", 2);
user_pref("dom.webaudio.enabled", false);
user_pref("dom.webnotifications.enabled", false);
user_pref("gfx.canvas.azure.accelerated", true);
user_pref("layers.acceleration.force-enabled", true);
user_pref("browser.tabs.remote.autostart", true);
user_pref("browser.tabs.remote.force-enable", true);
user_pref("extensions.screenshots.system-disabled", true);
user_pref("datareporting.policy.dataSubmissionEnabled", false);
user_pref("media.autoplay.enabled", false);
user_pref("browser.tabs.drawInTitlebar", true);

Extensions

  • Enable Active Mode
  • Don't Log Total Number Of Cookies Deleted
  • Don't Show Notification After Cookie CleanUp
  • Clean Cookies from Open Tabs on StartUp

No Resource URI Leak

  • Block Web-exposed subset of chrome URIs
  • Update the policy

uBlock Origin

  • Enable Advanced Mode
  • Uncheck EasyPrivacy
  • Uncheck EasyList
  • Check MVPS HOSTS
  • Check hpHost's Ad and tracking servers
  • Check Dan Pollock's hosts file
Custom 3rd-party filters
https://secure.fanboy.co.nz/fanboy-problematic-sites.txt
https://secure.fanboy.co.nz/r/fanboy-ultimate.txt
https://secure.fanboy.co.nz/fanboy-antifacebook.txt
https://secure.fanboy.co.nz/fanboy-antifonts.txt
https://raw.githubusercontent.com/ryanbr/fanboy-adblock/master/fanboy-cookiemonster.txt
https://raw.githubusercontent.com/ryanbr/fanboy-adblock/master/popads-domains-list.txt
https://raw.githubusercontent.com/ryanbr/fanboy-adblock/master/fake-news.txt
https://raw.githubusercontent.com/ryanbr/fanboy-adblock/master/enhancedstats-addon.txt

Mozilla Thunderbird

mpv

Notepad++

Prime95

PuTTY

Games

Battle.net App

Steam

Diablo II

Glide Wrapper

FINAL FANTASY XIV

Guild Wars 2

"C:\Program Files\Guild Wars 2\Gw2-64.exe" -autologin
"C:\Program Files\Guild Wars 2\Gw2-64.exe" -image
"C:\Program Files\Guild Wars 2\Gw2-64.exe" -repair

Unreal Tournament 99

Drivers

Nightwane

  • Acer Aspire TC-780

AMD Radeon RX 560

Intel Chipset

Intel Rapid Storage Technology

Realtek Ethernet

Corsair Utility Engine

Spinesnap

  • Dell Latitude 5285

Intel HD Graphics

Intel Chipset

Intel Management Engine Interface

  • TODO: This is Corporate/5MB; figure out if full suite is needed?
  • Intel MEI

Intel Rapid Storage Technology

Intel Wireless

Piety

AMD Radeon R7 M445/440

Realtek PCIe FE Family Controller

Intel HD Graphics

Intel Chipset

Intel Management Engine Interface

Intel Rapid Storage Technology

Intel Wireless

Hatebeat

AMD Radeon HD 6800 Series

aria2c "https://www2.ati.com/drivers/beta/non-whql-win10-64bit-radeon-software-crimson-relive-16.2.1-sep20.exe" --referer="https://www2.ati.com"

AMD Chipset

aria2c "https://www2.ati.com/drivers/amd-chipset-drivers.exe" --referer="https://www2.ati.com"
1)
removes camera?
2)
Does not apply to LTSB; can freely remove most/all Modern UI apps and still have functional Windows Hello
3)
this is particularly bad with Intel RST; if it's signed by Intel, it won't allow booting; there is no warning of this when loading the RST driver during Windows set-up
4)
shouldn't be an issue; HDR requires 2.4 but nothing I do uses HDR to care
windows/10.txt · Last modified: 2018/08/09 10:55 by Sean Rhone