Differences

This shows you the differences between two versions of the page.

--- windows:10 [2019/01/26 16:36] – Sean Rhone
+++ windows:10 [2024/03/25 19:42] (current) – Sean Rhone
@@ Line 1: / Line 1: @@
+====== Information ======
+  * Microsoft Windows 10
+  * LTSC 21H2
+  * [[https://learn.microsoft.com/en-us/windows/release-health/release-information|Windows 10 release information]]
+====== Download ======
+  * :!: To show ISO downloads on Windows 10 from Firefox: Tools -> Browser Tools -> Responsive Design Mode
+  * [[https://www.microsoft.com/en-us/software-download/windows10ISO|Windows 10]]
+  * [[https://forums.mydigitallife.net/threads/discussion-windows-10-enterprise-iot-enterprise-n-ltsc-2021.84509|LTSC 2021]]
+====== Updates ======
+===== Slipstream =====
+  * See [[windows:slipstream-updates]]
+===== Information =====
+  * https://docs.microsoft.com/en-us/windows/deployment/update/servicing-stack-updates#when-are-they-released
+  * https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV990001
+  * [[https://www.catalog.update.microsoft.com/Search.aspx?q=Cumulative+Update+for+Windows+10+Version+21H2+for+x64-based+Systems|Windows 10 21H2]]
+====== Settings ======
+===== Disable Clipboard History =====
+****
+  reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\System" /v "AllowClipboardHistory" /t REG_DWORD /d "0" /f
+===== Disable Cortana and Web Search =====
+****
+  reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /v "AllowCortana" /t REG_DWORD /d "0" /f
+===== Disable CPU Mitigations =====
+  * https://support.microsoft.com/en-us/help/4073119/protect-against-speculative-execution-side-channel-vulnerabilities-in
+  * https://www.grc.com/inspectre.htm
+  reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v "FeatureSettingsOverride" /t "REG_DWORD" /d "3" /f
+  reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v "FeatureSettingsOverrideMask" /t "REG_DWORD" /d "3" /f
+===== Disable Game DVR =====
+****
+  reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\GameDVR" /v "AllowgameDVR" /t "REG_DWORD" /d "0" /f
+===== Disable Hibernation and Fast Start =====
+****
+  powercfg /H off
+===== Disable Last Access Time File Updates =====
+****
+  fsutil behavior set disablelastaccess 1
+===== Disable Online Speech Recognition =====
+****
+  reg add "HKLM\SOFTWARE\Policies\Microsoft\InputPersonalization" /v "AllowInputPersonalization" /t REG_DWORD /d "0" /f
+===== Open Pictures With Windows Photo Viewer =====
+  reg add "HKCU\Software\Classes\.jpg" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f
+  reg add "HKCU\Software\Classes\.jpeg" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f
+  reg add "HKCU\Software\Classes\.gif" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f
+  reg add "HKCU\Software\Classes\.png" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f
+  reg add "HKCU\Software\Classes\.bmp" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f
+  reg add "HKCU\Software\Classes\.tiff" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f
+  reg add "HKCU\Software\Classes\.ico" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f
+===== Disable Remote Desktop =====
+****
+  reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" /v "fDenyTSConnections" /t REG_DWORD /d "1" /f
+===== Disable Shared Experiences =====
+****
+  reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\System" /v "EnableCdp" /t REG_DWORD /d "0" /f
+===== Disable SmartScreen =====
+  * General
+  * Windows Store Apps
+  * Microsoft EDGE
+  reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer" /v "SmartScreenEnabled" /t "REG_SZ" /d "Off" /f
+  reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\AppHost" /v "EnableWebContentEvaluation" /t "REG_DWORD" /d "0" /f
+  reg add "HKLM\SOFTWARE\Policies\Microsoft\MicrosoftEdge\PhishingFilter" /v "EnabledV9" /t "REG_DWORD" /d "0" /f
+===== Disable Startup Delay =====
+****
+  reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Serialize" /v "StartupDelayInMSec" /t "REG_DWORD" /d "0" /f
+===== Disable System Restore =====
+****
+  reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore" /v "DisableSR " /t "REG_DWORD" /d "1" /f
+===== Disable Telemetry Features =====
+****
+  reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DataCollection" /v "AllowTelemetry" /t "REG_DWORD" /d "0" /f
+===== Disable User Account Control =====
+****
+  reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableLUA" /t "REG_DWORD" /d "0" /f
+===== Disable Windows Defender =====
+****
+  reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender" /v "DisableAntiSpyware" /t "REG_DWORD" /d "1" /f
+===== Remove Quick Access =====
+****
+  reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer" /v "HubMode" /t "REG_DWORD" /d "1" /f
+===== Remove Windows Search =====
+****
+  Dism /online /Disable-Feature /FeatureName:"SearchEngine-Client-Package" /Remove
+===== Show All Folders in File Explorer Pane =====
+****
+  reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "NavPaneShowAllFolders" /t "REG_DWORD" /d "1" /f
+===== Verbose Shutdown =====
+****
+  reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v "VerboseStatus" /t REG_DWORD /d "1" /f
+====== Other ======
+===== ScriptTiger Hosts File =====
+  * https://scripttiger.github.io/hosts-packages/
+  * Unified hosts + fakenews + gambling (Compressed)
+  * Powershell Script ''*.ps1''
+  * TODO: Add admin-mode
+<code>
+[Net.ServicePointManager]::SecurityProtocol = "tls12, tls11, tls"
+Invoke-WebRequest "https://scripttiger.github.io/alts/compressed/blacklist-fg.txt" -OutFile "C:\Windows\System32\drivers\etc\hosts"
+ipconfig /flushdns</code>
+===== NetFX3 From Install Media =====
+  * Change ''D:\'' to install media drive if necessary
+  Dism /online /enable-feature /featurename:"NetFX3" /All /Source:"D:\sources\sxs" /LimitAccess
+===== Remove Most Modern UI Apps =====
+  * Tested fine on 20H2
+  * :!: This broke the start menu on 1809
+  * Powershell Script ''*.ps1''
+  Get-AppxPackage -allusers | Remove-AppxPackage
+===== Remove OneDrive =====
+  taskkill /IM "OneDrive.exe" /F
+  %windir%\SysWOW64\OneDriveSetup.exe /uninstall
+  rmdir "%UserProfile%\OneDrive" "%ProgramData%\Microsoft OneDrive" "%LocalAppData%\Microsoft\OneDrive" "C:\OneDriveTemp" /S /Q
+  reg delete "HKCR\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}" /f
+  reg delete "HKCR\Wow6432Node\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}" /f
+===== Maintenance =====
+  * Last updated: 2020/10/02
+<code>
+:: .NET Framework 4
+"%windir%\microsoft.net\Framework\v4.0.30319\ngen.exe" update /force /queue
+"%windir%\microsoft.net\Framework64\v4.0.30319\ngen.exe" update /force /queue
+"%windir%\microsoft.net\Framework\v4.0.30319\ngen.exe" executequeueditems
+"%windir%\microsoft.net\Framework64\v4.0.30319\ngen.exe" executequeueditems
+:: System File Check, Cleanup, and Repair
+"%windir%\system32\Dism.exe" /online /Cleanup-Image /StartComponentCleanup /ResetBase /RestoreHealth
+"%windir%\system32\sfc.exe" /scannow
+:: Classic Disk Cleanup
+"%windir%\system32\cleanmgr.exe" /sageset:65535
+"%windir%\system32\cleanmgr.exe" /sagerun:65535
+:: Defrag/Trim
+"%windir%\system32\dfrgui.exe"</code>
+===== WSL =====
+  * See [[distros:ubuntu_wsl|Ubuntu WSL]]
+===== Windows Terminal =====
+==== VCLibs ====
+****
+  powershell -Command "Add-AppxPackage https://aka.ms/Microsoft.VCLibs.x64.14.00.Desktop.appx"
+==== Windows Terminal ====
+  * https://github.com/microsoft/terminal/releases
+  powershell -Command "Add-AppxPackage https://github.com/microsoft/terminal/releases/download/v1.16.10261.0/Microsoft.WindowsTerminal_Win10_1.16.10261.0_8wekyb3d8bbwe.msixbundle"
+==== SSH ====
+  * :!: Requires WSL and Ubuntu installed
+  wt wsl --distribution "Ubuntu" -- ssh "espionage724@192.168.1.152"
+====== Information ======
+===== Prevent Driver Changes =====
+==== Notes ====
+  * To be done after a proper driver is manually installed
+  * This ensures Windows Update nor anything else can replace installed drivers for specific devices unattended
+  * Additional entries need to add a new number (the value after ''/v'')
+  * The device ID can be acquired from Device Manager and should be pasted as-is (no extra slashes)
+==== Base Policies ====
+  reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions" /v "DenyDeviceIDs" /t "REG_DWORD" /d "1" /f
+  reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions" /v "DenyDeviceIDsRetroactive" /t "REG_DWORD" /d "0" /f
+==== Format ====
+  * Do **not** copy/paste these as-is; only here for reference
+  * Adjust to specific devices as-needed
+==== Add Prevent Policy ====
+****
+  reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceIDs" /v "#" /t "REG_SZ" /d "PCI\VEN_XXXX&DEV_XXXX&SUBSYS_XXXXXXXX&REV_XX" /f
+==== Remove Prevent Policy ====
+****
+  reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceIDs" /v "#" /f
+====== Programs ======
+  * [[windows:programs|More Programs]]
+===== 7-Zip =====
+  * https://www.7-zip.org/download.html
+===== Android Tools =====
+  * [[https://dl-ssl.google.com/android/repository/latest_usb_driver_windows.zip|Latest USB Driver]]
+  * [[https://dl-ssl.google.com/android/repository/platform-tools-latest-windows.zip|Latest platform-tools]]
+  * :!: [[https://dl.google.com/android/repository/platform-tools_r30.0.5-windows.zip|30.0.5 platform-tools]] ((this specific version was needed to workaround a ''fastboot'' error that only happened on the latest version))
+  SETX /M path "%path%;C:\Program Files\platform-tools"
+===== aria2 =====
+  * https://github.com/aria2/aria2/releases
+  SETX /M path "%path%;C:\Program Files\aria2c"
+===== Brain Workshop =====
+  * https://sourceforge.net/projects/brainworkshop/files/brainworkshop/
+===== Calculator =====
+  * Only available on LTSB/LTSC
+  win32calc
+===== DirectX End-User Runtime =====
+  * https://www.microsoft.com/en-us/download/confirmation.aspx?id=8109
+===== FileZilla =====
+  * https://filezilla-project.org/download.php?show_all=1
+===== Firefox =====
+  * [[https://download.mozilla.org/?product=firefox-latest-ssl&os=win64&lang=en-US|exe]]
+===== GIMP =====
+  * https://www.gimp.org/downloads
+===== KeePassXC =====
+  * https://keepassxc.org/download#windows
+===== Keybase =====
+  * https://keybase.io/docs/the_app/install_windows
+===== LibreOffice =====
+  * https://www.libreoffice.org/download/download/
+===== mpv =====
+  * https://sourceforge.net/projects/mpv-player-windows/files/64bit-v3/
+  * https://mpv.io/
+===== MuPDF =====
+  * https://mupdf.com/releases/index.html
+===== Notepad++ =====
+  * https://notepad-plus-plus.org/download
+===== OBS =====
+  * https://obsproject.com/download
+===== Thunderbird =====
+  * https://www.thunderbird.net/en-US/thunderbird/all/#E
+===== Transmission =====
+  * https://transmissionbt.com/download.html
+===== VC++ Redist =====
+  * https://github.com/abbodi1406/vcredist/releases
+====== Games ======
+===== Battle.net App =====
+  * https://download.battle.net/en-us/?product=bnetdesk
+===== Steam =====
+  * https://steamcdn-a.akamaihd.net/client/installer/SteamSetup.exe
+  * See [[notes:game_command-line_arguments|Command-line flags]]
+====== Drivers ======
+  * See [[windows:drivers]] for more URLs
+===== Spinesnap =====
+  * [[https://www.dell.com/support/home/en-us/product-support/product/latitude-15-5591-laptop/drivers|Dell Support and BIOS Updates]]
+==== Chipset ====
+  * TODO: Chipset name
+  * [[https://rog.asus.com/forum/showthread.php?117609-DRIVERS-Intel-Chipset-MEI-SATA-VMD-(1xx-2xx-3xx-4xx-5xx-6xx-7xx)|ASUS ROG Forums]] (AHCI 2xx/3xx)
+  * [[https://www.elevenforum.com/t/drivers-intel-chipset-mei-sata-vmd-1xx-2xx-3xx-4xx-5xx-6xx-7xx.11373/|Windows 11 Forum]] (AHCI 2xx/3xx)
+==== SerialIO ====
+  * TODO: Chipset name
+  * [[https://www.elevenforum.com/t/drivers-intel-serial-io-3xx-4xx-5xx-6xx-7xx.11375/|Windows 11 Forum]] (3xx/4xx)
+  * [[https://rog.asus.com/forum/showthread.php?125235-DRIVERS-Intel-Serial-IO-(3xx-4xx-5xx-6xx-7xx)|ASUS ROG Forums]] (3xx/4xx)
+==== Ethernet ====
+  * I219-LM Gigabit
+  * [[https://www.elevenforum.com/t/drivers-intel-ethernet-wifi-bluetooth.11383/|Windows 11 Forum]] (I217/I218/I219)
+  * [[https://rog.asus.com/forum/showthread.php?118280-DRIVERS-Intel-Ethernet-WiFi-Bluetooth|ASUS ROG Forums]] (I217/I218/I219)
+==== Wireless + Bluetooth ====
+  * wireless-AC 9560
+  * [[https://rog.asus.com/forum/showthread.php?118280-DRIVERS-Intel-Ethernet-WiFi-Bluetooth|ASUS ROG Forums]] (8xxx/9xxx/AXxxx)
+  * [[https://www.elevenforum.com/t/drivers-intel-ethernet-wifi-bluetooth.11383/|Windows 11 Forum]] (8xxx/9xxx/AXxxx)
+==== Graphics ====
+  * Intel UHD Graphics 630
+  * [[https://www.intel.com/content/www/us/en/support/products/126790/graphics/intel-uhd-graphics-family/intel-uhd-graphics-630.html#drivers-software|Intel Download Center]]
+  * [[https://forums.laptopvideo2go.com/forum/174-intel-video-drivers-and-tools/|LaptopVideo2Go]]