| Both sides previous revisionPrevious revisionNext revision | Previous revision |
| windows:10 [2019/08/31 12:18] – Sean Rhone | windows:10 [2026/03/18 15:00] (current) – Sean Rhone |
|---|
| ====== Information ====== | ====== Information ====== |
| |
| * Microsoft Windows 10 | * Microsoft Windows 10 IoT Enterprise LTSC |
| * LTSC 1809 | * Version 21H2 (OS Build 19044.7058) |
| |
| ====== Notes ====== | ====== Resources ====== |
| |
| * Removing Most/All Modern UI apps on 1803 prevents facial login via Windows Hello from working entirely ((removes camera?)) ((Does not apply to LTSB; can freely remove most/all Modern UI apps and still have functional Windows Hello)) | * [[windows;notes;quick_commands|Quick Commands]] |
| * :!: Enabling Secure Boot prevents non-WHQL drivers from working ((this is particularly bad with Intel RST; if it's signed by Intel, it won't allow booting; there is no warning of this when loading the RST driver during Windows set-up)) | * [[windows:notes:env_paths|Env PATH Variables]] |
| | * [[windows;notes;misc]] |
| | * [[https://learn.microsoft.com/en-us/windows/win32/debug/system-error-codes--0-499-|System Error Codes (0-499+)]] |
| | * [[https://learn.microsoft.com/en-us/windows/deployment/update/windows-update-error-reference|Windows Update error codes]] |
| | * http://redeem.microsoft.com/ (TODO: Put somewhere else) |
| | * [[https://github.com/Espionage724/Windows|GitHub Batch Files]] |
| | * https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/registry-entry-control-tcp-acknowledgment-behavior + [[https://support.purestorage.com/bundle/m_microsoft_platform_guide/page/Solutions/Microsoft_Platform_Guide/Multipath-IO_and_Storage_Settings/topics/concept/c_disabling_delayed_ack_and_nagle.html|this]] (TCP ACK) |
| |
| ====== Download ====== | ===== TODOs ===== |
| |
| * https://forums.mydigitallife.info/threads/72600-ISO-for-latest-enUS-LTSB | * https://learn.microsoft.com/en-us/troubleshoot/windows-server/remote/frame-rate-limited-to-30-fps (60 FPS RDP) |
| | * https://ss64.com/nt/title.html (''TITLE'' in batch files) |
| | * https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-lanmanserver |
| | * https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-privacy |
| | * https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-10/deployment/compatibility/compatibility-fixes-for-windows-8-windows-7-and-windows-vista |
| | * https://forums.overclockers.co.uk/threads/windows-disabling-network-throttling.18558659/#post-25335538 |
| |
| ====== Updates ====== | ====== Updates ====== |
| |
| ===== Servicing Stack ===== | * [[https://www.catalog.update.microsoft.com/Search.aspx?q=Cumulative+Update+for+Windows+10+Version+21H2+for+x64-based+Systems|Windows 10 21H2 Cumulative Updates - Microsoft Update Catalog]] |
| | * :!: [[https://www.catalog.update.microsoft.com/Search.aspx?q=KB5014032|KB5014032]] 2022-05 SSU is required before the latest CU |
| |
| ==== Information ==== | ====== Shortcuts ====== |
| |
| * https://docs.microsoft.com/en-us/windows/deployment/update/servicing-stack-updates#when-are-they-released | ===== Desktop ===== |
| * https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV990001 | |
| * :!: SSU is recommended to be installed **before** the CU | |
| |
| ==== Link ==== | ==== Maintenance ==== |
| |
| * [[https://www.catalog.update.microsoft.com/Search.aspx?q=Update+for+Windows+10+Version+1809+for+x64-based+Systems|Microsoft Update Catalog]] | "notepad.exe" "%UserProfile%\Desktop\Maintenance.bat" |
| |
| YYYY-MM Update for Windows 10 Version 1809 for x64-based Systems (KB#######) | <code> |
| | @echo off |
| |
| ===== Cumulative ===== | TITLE Maintenance |
| | CD "%Temp%" |
| |
| ==== Information ==== | :: Disk Cleanup Set-up |
| | "%SystemRoot%\System32\cleanmgr.exe" /sageset:9999 |
| |
| * :!: SSU is recommended to be installed **before** the CU | :: System File Check, Cleanup, and Repair |
| | "%SystemRoot%\System32\Dism.exe" /online /Cleanup-Image /StartComponentCleanup /ResetBase /RestoreHealth |
| | "%SystemRoot%\System32\sfc.exe" /scannow |
| |
| ==== Link ==== | :: Disk Cleanup |
| | "%SystemRoot%\System32\cleanmgr.exe" /sagerun:9999 |
| |
| * [[http://www.catalog.update.microsoft.com/Search.aspx?q=Cumulative+Update+for+Windows+10+Version+1809+for+x64-based+Systems|Microsoft Update Catalog]] | :: Volume Shadow Copy |
| | "%SystemRoot%\System32\vssadmin.exe" Delete Shadows /All |
| |
| YYYY-MM Cumulative Update for Windows 10 Version 1809 for x64-based Systems (KB#######) | :: USN Change Journal |
| | "%SystemRoot%\System32\fsutil.exe" usn deleteJournal /D "%SystemDrive%" |
| |
| ====== Prevent Driver Changes ====== | :: .NET Framework 4 |
| | "%SystemRoot%\Microsoft.NET\Framework\v4.0.30319\ngen.exe" update /force /queue |
| | "%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\ngen.exe" update /force /queue |
| | "%SystemRoot%\Microsoft.NET\Framework\v4.0.30319\ngen.exe" executequeueditems |
| | "%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\ngen.exe" executequeueditems |
| |
| ===== Notes ===== | PAUSE |
| | "%SystemRoot%\System32\taskkill.exe" /F /IM "explorer.exe" |
| | "%SystemRoot%\System32\timeout.exe" /T "2" /NOBREAK |
| |
| * To be done after a proper driver is manually installed | :: Icon Cache |
| * This ensures Windows Update nor anything else can replace installed drivers for specific devices unattended | DEL /F /Q "%LocalAppData%\Microsoft\Windows\Explorer\"*".db" |
| * Additional entries need to add a new number (the value after ''/v'') | DEL /F /Q "%UserProfile%\AppData\Local\IconCache.db" |
| * The device ID can be acquired from Device Manager and should be pasted as-is (no extra slashes) | |
| |
| ===== Base Policies ===== | :: Shader Cache |
| | DEL /F /Q "%LocalAppData%\D3DSCache\*" |
| | DEL /F /Q "%UserProfile%\AppData\LocalLow\Intel\ShaderCache\*" |
| |
| reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions" /v "DenyDeviceIDs" /t "REG_DWORD" /d "1" /f | :: Temp Dirs |
| | DEL /F /Q "%LocalAppData%\Temp\*" |
| | DEL /F /Q "%SystemRoot%\Temp\*" |
| |
| reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions" /v "DenyDeviceIDsRetroactive" /t "REG_DWORD" /d "0" /f | TIMEOUT /T "2" /NOBREAK |
| | START explorer.exe |
| |
| ===== Format ===== | :: Defrag/Trim |
| | PAUSE |
| | "%SystemRoot%\System32\Defrag.exe" /AllVolumes /Defrag /TierOptimize /SlabConsolidate /Retrim /Optimize /PrintProgress /Verbose /NormalPriority |
| |
| * Do **not** copy/paste these as-is; only here for reference | PAUSE |
| * Adjust to specific devices as-needed | |
| |
| ==== Add Prevent Policy ==== | :: End</code> |
| |
| **** | ===== Downloads ===== |
| |
| reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceIDs" /v "#" /t "REG_SZ" /d "PCI\VEN_XXXX&DEV_XXXX&SUBSYS_XXXXXXXX&REV_XX" /f | ==== Remove Intel Microcode ==== |
| |
| ==== Remove Prevent Policy ==== | "%SystemRoot%\System32\notepad.exe" "%UserProfile%\Downloads\Remove Intel Microcode.bat" |
| |
| **** | <code> |
| | @echo off |
| |
| reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceIDs" /v "#" /f | CD "%Temp%" |
| |
| ====== Tweaks ====== | "%SystemRoot%\System32\takeown.exe /F "%SystemRoot%\System32\mcupdate_GenuineIntel.dll" |
| | "%SystemRoot%\System32\icacls.exe" "%SystemRoot%\System32\mcupdate_GenuineIntel.dll" /grant "Administrators:F" |
| | DEL /Q "%SystemRoot%\System32\mcupdate_GenuineIntel.dll" |
| |
| ===== Disable Clipboard History ===== | :: End</code> |
| |
| **** | "%UserProfile%\Downloads\Remove Intel Microcode.bat" |
| |
| reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\System" /v "AllowClipboardHistory" /t REG_DWORD /d "0" /f | ===== Start Menu ===== |
| |
| ===== Disable Cortana and Web Search ===== | ==== RDP ==== |
| |
| **** | "%SystemRoot%\System32\notepad.exe" "%UserProfile%\Documents\Alira (LAN).rdp" |
| |
| reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /v "AllowCortana" /t REG_DWORD /d "0" /f | <code> |
| | full address:s:192.168.1.152 |
| | redirectprinters:i:0 |
| | redirectcomports:i:0 |
| | redirectsmartcards:i:0 |
| | redirectwebauthn:i:0 |
| | redirectclipboard:i:1 |
| | redirectposdevices:i:0</code> |
| |
| ===== Disable Game DVR ===== | === Start Menu === |
| |
| **** | "%SystemRoot%\explorer.exe" "%AppData%\Microsoft\Windows\Start Menu\Programs\Accessories" |
| |
| reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\GameDVR" /v "AllowgameDVR" /t "REG_DWORD" /d "0" /f | "%UserProfile%\Documents\Alira (LAN).rdp" |
| |
| ===== Disable Hibernation and Fast Start ===== | Alira |
| |
| **** | ====== Settings ====== |
| |
| powercfg /H off | ===== BCDEdit ===== |
| |
| ===== Disable Last Access Time File Updates ===== | * [[windows;notes;bcdedit|Notes]] |
| |
| **** | ===== Microsoft Edge ===== |
| |
| fsutil behavior set disablelastaccess 1 | * [[windows;notes;edge_tweaks|Edge Tweaks]] |
| |
| ===== Disable Online Speech Recognition ===== | ===== Power ===== |
| | |
| | ==== Disable Hibernation and Fast Start ==== |
| |
| **** | **** |
| |
| reg add "HKLM\SOFTWARE\Policies\Microsoft\InputPersonalization" /v "AllowInputPersonalization" /t REG_DWORD /d "0" /f | "powercfg.exe" /HIBERNATE "OFF" |
| |
| ===== Disable Remote Desktop ===== | ==== Enable Ultimate Performance Power Plan ==== |
| |
| **** | **** |
| |
| reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" /v "fDenyTSConnections" /t REG_DWORD /d "1" /f | "powercfg.exe" /DUPLICATESCHEME "e9a42b02-d5df-448d-aa00-03f14749eb61" |
| |
| ===== Disable Shared Experiences ===== | ==== More Settings ==== |
| |
| **** | **** |
| |
| reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\System" /v "EnableCdp" /t REG_DWORD /d "0" /f | "powercfg.exe" /Qh |
| |
| ===== Disable SmartScreen ===== | ===== SMB ===== |
| |
| * General | * [[windows;notes;smb|Notes]] |
| * Windows Store Apps | |
| * Microsoft EDGE | |
| |
| reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer" /v "SmartScreenEnabled" /t "REG_SZ" /d "Off" /f | ===== Disable Clipboard History ===== |
| |
| reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\AppHost" /v "EnableWebContentEvaluation" /t "REG_DWORD" /d "0" /f | **** |
| |
| reg add "HKLM\SOFTWARE\Policies\Microsoft\MicrosoftEdge\PhishingFilter" /v "EnabledV9" /t "REG_DWORD" /d "0" /f | reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\System" /v "AllowClipboardHistory" /t REG_DWORD /d "0" /f |
| |
| ===== Disable Startup Delay ===== | ===== Disable Cortana and Web Search ===== |
| |
| **** | **** |
| |
| reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Serialize" /v "StartupDelayInMSec" /t "REG_DWORD" /d "0" /f | reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /v "AllowCortana" /t REG_DWORD /d "0" /f |
| |
| ===== Disable System Restore ===== | ===== Disable Game DVR ===== |
| |
| **** | **** |
| |
| reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore" /v "DisableSR " /t "REG_DWORD" /d "1" /f | reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\GameDVR" /v "AllowgameDVR" /t "REG_DWORD" /d "0" /f |
| |
| ===== Disable Telemetry Features ===== | ===== Quick Lock Screen ===== |
| |
| **** | * Directly shows password prompt |
| |
| reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DataCollection" /v "AllowTelemetry" /t "REG_DWORD" /d "0" /f | REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Personalization" /v "NoLockScreen" /t REG_DWORD /d "1" /f |
| |
| ===== Disable User Account Control ===== | ==== Undo ==== |
| |
| **** | **** |
| |
| reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableLUA" /t "REG_DWORD" /d "0" /f | REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Personalization" /v "NoLockScreen" /t REG_DWORD /d "0" /f |
| |
| ===== Disable Windows Defender ===== | ===== Disable Online Speech Recognition ===== |
| |
| **** | **** |
| |
| reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender" /v "DisableAntiSpyware" /t "REG_DWORD" /d "1" /f | reg add "HKLM\SOFTWARE\Policies\Microsoft\InputPersonalization" /v "AllowInputPersonalization" /t REG_DWORD /d "0" /f |
| |
| ===== Open Pictures With Windows Photo Viewer ===== | ===== Open Pictures With Windows Photo Viewer ===== |
| reg add "HKCU\Software\Classes\.ico" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f | reg add "HKCU\Software\Classes\.ico" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f |
| |
| ===== Remove Quick Access ===== | ===== Disable Remote Desktop ===== |
| |
| **** | **** |
| |
| reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer" /v "HubMode" /t "REG_DWORD" /d "1" /f | reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" /v "fDenyTSConnections" /t REG_DWORD /d "1" /f |
| |
| ===== Remove Windows Search ===== | ===== Disable Shared Experiences ===== |
| |
| **** | **** |
| |
| Dism /online /Disable-Feature /FeatureName:"SearchEngine-Client-Package" /Remove | reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\System" /v "EnableCdp" /t REG_DWORD /d "0" /f |
| |
| ===== ScriptTiger Hosts File ===== | ===== Disable System Restore ===== |
| |
| * https://scripttiger.github.io/hosts-packages/ | **** |
| |
| * Powershell Script ''*.ps1'' | reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore" /v "DisableSR " /t "REG_DWORD" /d "1" /f |
| |
| <code> | ===== Disable Telemetry Features ===== |
| [Net.ServicePointManager]::SecurityProtocol = "tls12, tls11, tls" | |
| Invoke-WebRequest "https://scripttiger.github.io/alts/compressed/blacklist-fg.txt" -OutFile "C:\Windows\System32\drivers\etc\hosts" | |
| ipconfig /flushdns</code> | |
| | |
| ===== Show All Folders in File Explorer Pane ===== | |
| |
| **** | **** |
| |
| reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "NavPaneShowAllFolders" /t "REG_DWORD" /d "1" /f | reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DataCollection" /v "AllowTelemetry" /t "REG_DWORD" /d "0" /f |
| |
| ===== NetFX3 From Install Media ===== | ===== Disable User Account Control ===== |
| | |
| * Change ''D:\'' to install media drive if necessary | |
| | |
| Dism /online /enable-feature /featurename:"NetFX3" /All /Source:"D:\sources\sxs" /LimitAccess | |
| | |
| ===== 1607 ===== | |
| | |
| ==== Disable HomeGroup ==== | |
| |
| **** | **** |
| |
| reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\HomeGroup" /v "DisableHomeGroup" /t "REG_DWORD" /d "1" /f | REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableLUA" /t "REG_DWORD" /d "0" /f |
| |
| ==== Remove Most Modern UI Apps ==== | ===== Enable FIPS Mode ===== |
| |
| * Powershell Script ''*.ps1'' | * https://learn.microsoft.com/en-us/windows/security/security-foundations/certification/fips-140-validation |
| * :!: Do not run this on 1809 as it'll break the Start Menu | |
| |
| Get-AppxPackage -allusers | Remove-AppxPackage | "%SystemRoot%\System32\reg.exe" ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy" /v "Enabled" /t "REG_DWORD" /d "1" /f |
| |
| ==== Remove OneDrive ==== | "%SystemRoot%\System32\WindowsPowerShell\v1.0\powershell.exe" -Command "$md5 = New-Object -TypeName 'System.Security.Cryptography.MD5CryptoServiceProvider'" |
| |
| taskkill /IM "OneDrive.exe" /F | ===== Remove Quick Access ===== |
| |
| %windir%\SysWOW64\OneDriveSetup.exe /uninstall | **** |
| |
| rmdir "%UserProfile%\OneDrive" "%ProgramData%\Microsoft OneDrive" "%LocalAppData%\Microsoft\OneDrive" "C:\OneDriveTemp" /S /Q | reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer" /v "HubMode" /t "REG_DWORD" /d "1" /f |
| |
| reg delete "HKCR\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}" /f | ===== Remove Windows Search ===== |
| |
| reg delete "HKCR\Wow6432Node\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}" /f | "%SystemRoot%\System32\sc.exe" stop "WSearch" & "%SystemRoot%\System32\sc.exe" config "WSearch" "start=disabled" |
| |
| ===== Maintenance ===== | "%SystemRoot%\System32\Dism.exe" /Online /Disable-Feature /FeatureName:"SearchEngine-Client-Package" /Remove |
| |
| * TODO: Add BleachBit | ===== Show All Folders in File Explorer Pane ===== |
| | |
| "%windir%\system32\Dism.exe" /online /Cleanup-Image /StartComponentCleanup /ResetBase /RestoreHealth | |
| | |
| "%windir%\system32\sfc.exe" /scannow | |
| | |
| "%windir%\system32\cleanmgr.exe" /sageset:65535 | |
| | |
| "%windir%\system32\cleanmgr.exe" /sagerun:65535 | |
| | |
| "%windir%\system32\dfrgui.exe" | |
| | |
| ===== Auto Login ===== | |
| |
| **** | **** |
| |
| control userpasswords2 | reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "NavPaneShowAllFolders" /t "REG_DWORD" /d "1" /f |
| |
| ===== Add Hardware Wizard ===== | ===== Verbose Shutdown ===== |
| |
| **** | **** |
| |
| %SYSTEMROOT%\System32\hdwwiz.exe | reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v "VerboseStatus" /t REG_DWORD /d "1" /f |
| |
| ===== GodMode Folder ===== | ===== DX Refresh Rate ===== |
| |
| **** | * https://steamcommunity.com/app/227600/discussions/0/864979008327344181/ |
| | * [[https://www.pcgamingwiki.com/wiki/Glossary:Frame_rate_(FPS)#Force_games_to_use_a_custom_refresh_rate|https://www.pcgamingwiki.com/wiki/Glossary:Frame_rate_(FPS)#Force_games_to_use_a_custom_refresh_rate]] |
| |
| GodMode.{ED7BA470-8E54-465E-825C-99712043E01C} | REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DirectDraw" /v "ForceRefreshRate" /t "REG_DWORD" /d "152" /reg:64 /f |
| |
| ====== Settings ====== | REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\DirectDraw" /v "ForceRefreshRate" /t "REG_DWORD" /d "152" /reg:32 /f |
| |
| ===== Lock screen Background ===== | ====== Other ====== |
| |
| * Hero | ===== Microsoft Store ===== |
| |
| C:\Windows\Web\Wallpaper\Windows\img0.jpg | "%SystemRoot%\System32\notepad.exe" "%UserProfile%\Downloads\Install Microsoft Store.bat" |
| |
| ====== Hardware Diagnostiscs ====== | <code> |
| | @echo off |
| |
| ===== CPU-Z ===== | TITLE Install Microsoft Store |
| | CD "%Temp%" |
| |
| * https://www.cpuid.com/softwares/cpu-z.html | "%SystemRoot%\System32\WSReset.exe" -i |
| | "%SystemRoot%\System32\timeout.exe" /T "20" /NOBREAK |
| |
| ===== FurMark ===== | "%SystemRoot%\System32\WSReset.exe" -i |
| |
| * https://geeks3d.com/furmark/downloads/ | EXIT /B |
| |
| ===== GPU-Z ===== | :: End</code> |
| |
| * https://www.techpowerup.com/download/techpowerup-gpu-z/ | "%UserProfile%\Downloads\Install Microsoft Store.bat" |
| |
| ===== HWMonitor ===== | ===== WinSAT ===== |
| |
| * https://www.cpuid.com/softwares/hwmonitor.html | "%SystemRoot%\System32\WinSAT.exe" "formal" -restart "clean" -v |
| |
| ===== Intel PDT ===== | "%SystemRoot%\System32\WinSAT.exe" forgethistory |
| |
| * https://downloadcenter.intel.com/download/19792 | "%SystemRoot%\System32\WinSAT.exe" query |
| * Intel Processor Diagnostic Tool | |
| |
| ===== prime95 ===== | ===== NetFX3 From Install Media ===== |
| |
| * https://www.mersenne.org/download/ | * Change ''D:\'' to install media drive if necessary |
| |
| ====== Programs ====== | Dism /online /enable-feature /featurename:"NetFX3" /All /Source:"D:\sources\sxs" /LimitAccess |
| |
| ===== 7-Zip ===== | ===== Prevent Driver Changes ===== |
| |
| * http://www.7-zip.org/download.html | ==== Notes ==== |
| |
| ===== Android Tools ===== | * To be done after a proper driver is manually installed |
| | * This ensures Windows Update nor anything else can replace installed drivers for specific devices unattended |
| | * Additional entries need to add a new number (the value after ''/v'') |
| | * The device ID can be acquired from Device Manager and should be pasted as-is (no extra slashes) |
| |
| * https://dl-ssl.google.com/android/repository/latest_usb_driver_windows.zip | ==== Base Policies ==== |
| |
| * https://dl-ssl.google.com/android/repository/platform-tools-latest-windows.zip | reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions" /v "DenyDeviceIDs" /t "REG_DWORD" /d "1" /f |
| |
| SETX /M path "%path%;C:\Program Files\platform-tools" | reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions" /v "DenyDeviceIDsRetroactive" /t "REG_DWORD" /d "0" /f |
| |
| ===== aria2 ===== | ==== Format ==== |
| |
| * https://github.com/aria2/aria2/releases | * Do **not** copy/paste these as-is; only here for reference |
| | * Adjust to specific devices as-needed |
| |
| SETX /M path "%path%;C:\Program Files\aria2c" | ==== Add Prevent Policy ==== |
| |
| ===== BleachBit ===== | **** |
| |
| * https://www.bleachbit.org/download/windows | reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceIDs" /v "#" /t "REG_SZ" /d "PCI\VEN_XXXX&DEV_XXXX&SUBSYS_XXXXXXXX&REV_XX" /f |
| |
| ===== Calculator ===== | ==== Remove Prevent Policy ==== |
| |
| * Only available on LTSB/LTSC | **** |
| |
| win32calc | reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceIDs" /v "#" /f |
| |
| ===== DirectX End-User Runtimes ===== | ===== Update Office ===== |
| |
| * https://www.microsoft.com/en-us/download/confirmation.aspx?id=8109 | "%SystemRoot%\explorer.exe" "%AppData%\Microsoft\Windows\Start Menu\Programs\Administrative Tools" |
| |
| ===== Etcher ===== | "%CommonProgramFiles%\microsoft shared\ClickToRun\OfficeC2RClient.exe" /update "user" forceappshutdown="True" displaylevel="True" |
| |
| * https://www.balena.io/etcher/ | Update Office |
| |
| ===== FileZilla ===== | ====== Services ====== |
| |
| * https://filezilla-project.org/download.php?show_all=1 | * [[windows;notes;services|Notes]] |
| |
| ===== Firefox ===== | ====== Programs ====== |
| |
| ==== Download ==== | * [[windows:programs|More Programs]] |
| |
| * https://download.mozilla.org/?product=firefox-latest&os=win64&lang=en-US | ===== 7-Zip ===== |
| * https://ftp.mozilla.org/pub/firefox/nightly/latest-mozilla-central/ | |
| |
| ==== Settings ==== | * https://www.7-zip.org/download.html |
| |
| === Default Profile === | ===== Android Tools ===== |
| |
| rd "%appdata%\Mozilla" /s /q | * [[https://dl-ssl.google.com/android/repository/latest_usb_driver_windows.zip|USB Driver]] |
| | * [[https://dl-ssl.google.com/android/repository/platform-tools-latest-windows.zip|platform-tools]] |
| |
| md "%appdata%\Mozilla\Firefox\Profiles\espionage724" | ===== aria2 ===== |
| |
| == profiles.ini == | * https://github.com/aria2/aria2/releases |
| |
| notepad "%appdata%\Mozilla\Firefox\profiles.ini" | ===== Brain Workshop ===== |
| |
| <code> | * https://sourceforge.net/projects/brainworkshop/files/brainworkshop/ |
| [General] | |
| StartWithLastProfile=1 | |
| |
| [Profile0] | ===== Calculator ===== |
| Name=default | |
| IsRelative=1 | |
| Path=Profiles/espionage724 | |
| Default=1</code> | |
| |
| === user.js === | * Only available on LTSB/LTSC |
| |
| * Last updated: 2019/07/24 | "%SystemRoot%\System32\win32calc.exe" |
| * :!: IPv6 is disabled in order to prevent WebRTC from potentially grabbing an IPv6 address | |
| * :!: ''media.peerconnection.enabled'' disables WebRTC | |
| |
| notepad "%appdata%\Mozilla\Firefox\Profiles\espionage724\user.js" | ===== DirectX End-User Runtime ===== |
| |
| <code> | * https://www.microsoft.com/en-us/download/confirmation.aspx?id=8109 |
| /*********** | |
| * General * | |
| ***********/ | |
| |
| user_pref("extensions.screenshots.disabled", true); | ===== Firefox ===== |
| user_pref("reader.parse-on-load.enabled", false); | |
| |
| user_pref("media.mediasource.experimental.enabled", true); | * https://www.firefox.com/en-US/download/all/desktop-esr/win64-msi/en-US/ |
| user_pref("media.mediasource.ignore_codecs", true); | * https://www.firefox.com/en-US/download/all/ |
| user_pref("media.autoplay.enabled", false); | |
| |
| user_pref("webgl.disabled", true); | * [[programs;firefox|Settings]] |
| user_pref("webgl.enable-webgl2", false); | |
| user_pref("accessibility.force_disabled", 1); | |
| user_pref("mousewheel.min_line_scroll_amount", 40); | |
| user_pref("browser.tabs.drawInTitlebar", true); | |
| |
| /******* | REG ADD "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers" /v "%ProgramFiles%\Mozilla Firefox\firefox.exe" /t "REG_SZ" /d "~ HIGHDPIAWARE" /f |
| * U2F * | |
| *******/ | |
| |
| user_pref("security.webauth.u2f", true); | ===== Thunderbird ===== |
| |
| /*********** | * https://www.thunderbird.net/en-US/thunderbird/all/ |
| * Privacy * | |
| ***********/ | |
| | |
| user_pref("network.dns.disableIPv6", true); | |
| user_pref("media.peerconnection.enabled", false); | |
| | |
| /******* | |
| * END * | |
| *******/</code> | |
| | |
| === Apply Settings === | |
| | |
| * :!: Firefox must be started for the first time with the ''-p'' flag for the profile above to be used | |
| | |
| "%ProgramFiles%\Mozilla Firefox\firefox.exe" -p default | |
| | |
| ==== Remove Features ==== | |
| | |
| **** | |
| | |
| rd "%ProgramFiles%\Mozilla Firefox\browser\features" /s /q | |
| | |
| ==== Extensions ==== | |
| | |
| * Decentraleyes | |
| * HTTPS Everywhere | |
| * Privacy Possum | |
| * Cookie AutoDelete | |
| * uBlock Origin | |
| | |
| * https://addons.mozilla.org/en-US/firefox/addon/decentraleyes/versions | |
| * https://www.eff.org/https-everywhere | |
| * https://addons.mozilla.org/en-US/firefox/addon/privacy-possum/versions | |
| * https://addons.mozilla.org/en-US/firefox/addon/cookie-autodelete/versions | |
| * https://addons.mozilla.org/en-US/firefox/addon/ublock-origin/versions | |
| | |
| === Cookie AutoDelete === | |
| | |
| * [x] Enable Automatic Cleaning? Delay Before Cleaning | |
| * [x] Enable Cleanup on Domain Change | |
| * [ ] Enable Cleanup Log and Counter | |
| * [ ] Show Notification After Cookie Cleanup | |
| * [x] Clean Cookies from Open Tabs on Startup | |
| * [x] Localstorage Cleanup (Firefox 58+) | |
| | |
| === uBlock Origin === | |
| | |
| == Settings == | |
| | |
| * [x] Prevent WebRTC from leaking local IP addresses | |
| | |
| == Filter lists == | |
| | |
| * [ ] Ads -> EasyList ((uncheck; included in ''Fanboy Ultimate List'')) | |
| * [ ] Privacy -> EasyPrivacy ((uncheck; included in ''Fanboy Ultimate List'')) | |
| | |
| * Multipurpose -> [x] Dan Pollock's hosts file | |
| * Multipurpose -> [x] hpHost's Ad and tracking servers | |
| * Multipurpose -> [x] MVPS HOSTS | |
| | |
| * Custom -> [x] Import | |
| | |
| == Custom 3rd-party filters == | |
| | |
| * Last updated: 2018/11/24 | |
| | |
| <code> | |
| https://www.fanboy.co.nz/fanboy-problematic-sites.txt | |
| https://www.fanboy.co.nz/r/fanboy-ultimate.txt | |
| https://www.fanboy.co.nz/fanboy-antifacebook.txt | |
| https://www.fanboy.co.nz/fanboy-antifonts.txt | |
| https://www.fanboy.co.nz/fanboy-cookiemonster.txt | |
| https://raw.githubusercontent.com/ryanbr/fanboy-adblock/master/popads-domains-list.txt | |
| https://raw.githubusercontent.com/ryanbr/fanboy-adblock/master/fake-news.txt</code> | |
| | |
| ==== Testing Sites ==== | |
| | |
| * https://www.youtube.com/html5 | |
| * https://ipx.ac | |
| * https://decentraleyes.org/test/ | |
| * https://panopticlick.eff.org/ | |
| * https://browserleaks.com/ | |
| * https://speedof.me/ | |
| |
| ===== GIMP ===== | ===== GIMP ===== |
| * https://www.gimp.org/downloads | * https://www.gimp.org/downloads |
| |
| ===== Google Chrome ===== | * Install for me only (recommended) |
| | * Compact installation (no components) |
| * https://www.google.com/chrome/?standalone=1&platform=win64 | * Launch -> Create -> ''[ ]'' Show on Start |
| | |
| ===== iTunes ===== | |
| | |
| * https://www.apple.com/itunes/download/win64 | |
| |
| ===== KeePassXC ===== | ===== KeePassXC ===== |
| |
| * https://keepassxc.org/download#windows | * https://keepassxc.org/download#windows |
| |
| ===== Keybase ===== | |
| |
| * https://prerelease.keybase.io/keybase_setup_amd64.msi | |
| |
| ===== KMS-VL-ALL ===== | |
| |
| * https://forums.mydigitallife.net/threads/kms_vl_all-smart-activation-script.79535/ | |
| |
| ===== LibreOffice ===== | ===== LibreOffice ===== |
| * https://www.libreoffice.org/download/download/ | * https://www.libreoffice.org/download/download/ |
| |
| ===== MarkC Mouse Acceleration Fix ===== | * ''[ ]'' Use a Java runtime |
| |
| * https://donewmouseaccel.blogspot.com/2010/03/markc-windows-7-mouse-acceleration-fix.html | ===== Okular ===== |
| | |
| | * https://cdn.kde.org/ci-builds/graphics/okular/master/windows/ |
| |
| ===== Notepad++ ===== | ===== Notepad++ ===== |
| |
| * https://notepad-plus-plus.org/download | * https://github.com/notepad-plus-plus/notepad-plus-plus/releases |
| |
| ===== qBittorrent ===== | ===== OBS ===== |
| |
| * https://www.fosshub.com/qBittorrent.html | * https://github.com/obsproject/obs-studio/releases |
| |
| ===== Thunderbird ===== | ===== qBittorrent ===== |
| |
| * https://download.mozilla.org/?product=thunderbird-latest&os=win&lang=en-US | * https://www.qbittorrent.org/download |
| * https://releases.mozilla.org/pub/thunderbird/nightly/latest-comm-central/ | |
| |
| ===== Visual C++ Redistributable Runtimes ===== | ===== VC++ Redist ===== |
| |
| * https://forums.mydigitallife.net/threads/repack-visual-c-redistributable-runtimes.76588/ | * https://forums.mydigitallife.net/threads/repack-visual-c-redistributable-runtimes-2025-10-17.76588/ |
| * https://github.com/abbodi1406/vcredist | |
| |
| ===== WireGuard ===== | ===== VLC media player ===== |
| |
| * :!: If kill switch is enabled, all local network resources can't be accessed | * https://download.videolan.org/pub/videolan/vlc/last/win64/ |
| | * https://www.videolan.org/vlc/download-windows.html |
| |
| * https://www.wireguard.com/install/ | ===== Vulkan Runtime ===== |
| |
| ==== VPN.AC ==== | * https://vulkan.lunarg.com/sdk/home |
| | |
| * https://vpn.ac/knowledgebase/130/WireGuard-on-Windows.html | |
| * https://vpn.ac/wgmanager | |
| | |
| ===== VLC ===== | |
| | |
| * https://get.videolan.org/vlc/last/win64/ | |
| |
| ====== Games ====== | ====== Games ====== |
| ===== Battle.net App ===== | ===== Battle.net App ===== |
| |
| * https://us.battle.net/download/getInstaller?os=win&installer=Battle.net-Setup.exe | * https://download.battle.net/en-us/?product=bnetdesk |
| | * [[http://dist.blizzard.com/downloads/bna-installers/322d5bb9ae0318de3d4cde7641c96425/retail.1/Battle.net-Setup-enUS.exe|Older exe]] (no SSL) |
| ===== Path of Exile ===== | * TODO: [[games;windows;notes;battle_net_client]] |
| | |
| * https://www.pathofexile.com/downloads/PathOfExileInstaller.exe | |
| |
| ===== Steam ===== | ===== Steam ===== |
| |
| * https://steamcdn-a.akamaihd.net/client/installer/SteamSetup.exe | * https://steamcdn-a.akamaihd.net/client/installer/SteamSetup.exe |
| | * See [[games;windows;notes;game_launch_flags|Game Launch Flags]] |
| |
| ===== Diablo II ===== | ==== Shortcut ==== |
| |
| ==== Glide Wrapper ==== | * Disable: Settings -> Interface -> Enable GPU accelerated rendering in web views |
| |
| * http://www.svenswrapper.de/english/downloads.html | "%ProgramFiles(x86)%\Steam\steam.exe" -silent -nocrashmonitor -cef-single-process -cef-disable-breakpad |
| |
| ===== Guild Wars 2 ===== | Steam (min) |
| |
| * https://account.arena.net/content/download/gw2/win/64 | ====== Drivers ====== |
| |
| "C:\Program Files\Guild Wars 2\Gw2-64.exe" -autologin | * See [[windows:drivers|Drivers]] for more URLs |
| | |
| "C:\Program Files\Guild Wars 2\Gw2-64.exe" -image | |
| | |
| "C:\Program Files\Guild Wars 2\Gw2-64.exe" -repair | |
| | |
| ====== Drivers ====== | |
| |
| ===== Spinesnap ===== | ===== Spinesnap ===== |
| |
| * [[https://support.apple.com/kb/sp703|Technical Specifications]] | * [[https://www.dell.com/support/home/en-us/product-support/product/latitude-15-5591-laptop/drivers|Dell Latitude 5591 - Support and BIOS Updates]] |
| | |
| * MacBook Pro (Retina, 13-inch, Mid 2014) | |
| * i5-4278U (Haswell 4th-gen) | |
| | |
| ==== Intel Graphics ==== | |
| | |
| * https://downloadcenter.intel.com/product/97500/Graphics-for-4th-Generation-Intel-Processors | |
| * https://forums.laptopvideo2go.com/topic/32622-2019155063-154042-4th-and-5th-generation-haswell-broadwell-cherry-trail-windows-10-windows-81-windows-8-windows-7/ | |
| | |
| ==== Intel Management Engine Interface ==== | |
| | |
| * http://www.win-raid.com/t596f39-Intel-Management-Engine-Drivers-Firmware-amp-System-Tools.html | |
| * https://downloadcenter.intel.com/download/28083 | |
| | |
| * Intel MEI | |
| | |
| ==== Intel RST ==== | |
| | |
| * http://www.win-raid.com/t2f23-Intel-RST-RSTe-Drivers-newest-v-WHQL-v-WHQL.html | |
| * https://downloadcenter.intel.com/download/28255 | |
| | |
| * Intel RST | |
| * :!: v14 is the latest supported branch for non-Skylake | |
| | |
| ==== AMD Radeon RX 580 ==== | |
| | |
| * https://www.amd.com/en/support/graphics/radeon-500-series/radeon-rx-500-series/radeon-rx-580 | |
| * https://forums.guru3d.com/forums/videocards-amd-radeon-catalyst-drivers-section.46/ | |
| | |
| * TODO: eGPU | |
| | |
| ==== CORSAIR iCUE ==== | |
| | |
| * https://www.corsair.com/us/en/downloads | |
| | |
| ===== Piety ===== | |
| |
| * http://www.dell.com/support/home/us/en/04/product-support/product/inspiron-17-5767-laptop/drivers | ==== Keyboard ==== |
| |
| * Dell Inspiron 17 5767 | * EPOMAKER x LEOBOG Hi75 |
| |
| ==== AMD Radeon R7 M445/440 ==== | * https://epomaker.com/blogs/firmware/epomaker-x-leobog-hi75-firmware |
| | * https://epomaker.com/blogs/software/epomaker-x-leobog-hi75-driver |
| |
| * http://support.amd.com/en-us/download/mobile?os=Windows+10+-+64 | ==== Mouse ==== |
| |
| ==== Realtek Ethernet ==== | * ATTACK SHARK R6 |
| |
| * https://www.realtek.com/en/component/zoo/category/network-interface-controllers-10-100m-fast-ethernet-pci-express-software | "%ProgramFiles(x86)%\Microsoft\Edge\Application\msedge_proxy.exe" --app="https://www.xvalleyinno.top/AttackShark/#/project/items" |
| |
| ==== Intel HD Graphics ==== | "%ProgramFiles(x86)%\Microsoft\Edge\Application\msedge_proxy.exe" --app="https://cn.attackshark.pro/WebDriven/index.html#/project/items" |
| |
| * https://forums.laptopvideo2go.com/forum/174-intel-video-drivers-and-tools | ==== SATA/RST ==== |
| * https://downloadcenter.intel.com/download/28289 | |
| |
| ==== Intel Chipset ==== | * :!: Intel RST Premium driver with RST/RAID enabled caused random BSoDs ((Standard AHCI Win10 and native NVMe Win11 24H2+ both fine)) |
| |
| * https://downloadcenter.intel.com/download/28310 | ==== Ethernet ==== |
| |
| ==== Intel Management Engine Interface ==== | * I219-LM Gigabit |
| | * Intel Corporation Ethernet Connection (7) I219-LM (rev 10) ((rev 10 drivers, not rev 18+)) |
| |
| * http://www.win-raid.com/t596f39-Intel-Management-Engine-Drivers-Firmware-amp-System-Tools.html | * https://www.intel.com/content/www/us/en/products/sku/82185/intel-ethernet-connection-i219lm/downloads.html |
| * https://downloadcenter.intel.com/download/28083 | |
| |
| * Intel MEI | ==== Wireless ==== |
| |
| ==== Intel Rapid Storage Technology ==== | * AX210 |
| |
| * http://www.win-raid.com/t2f23-Intel-RST-RSTe-Drivers-newest-v-WHQL-v-WHQL.html | * https://www.intel.com/content/www/us/en/products/sku/204836/intel-wifi-6e-ax210-gig/downloads.html |
| * https://downloadcenter.intel.com/download/28255 | |
| |
| * Intel RST | ==== Graphics ==== |
| |
| ==== Intel Wireless ==== | * Intel UHD Graphics 630 |
| | * Intel Corporation CoffeeLake-H GT2 [UHD Graphics 630] |
| |
| * https://downloadcenter.intel.com/download/28276 | * https://www.intel.com/content/www/us/en/support/products/126790/graphics/processor-graphics/intel-uhd-graphics-family/intel-uhd-graphics-630.html |
| |
| ==== Intel Bluetooth ==== | === 8GB VRAM === |
| |
| * https://downloadcenter.intel.com/download/28009 | * :?: Aperture size and other BIOS options affect available memory ((1024MB aperture does ''7086 MB'' in ''dxdiag'')) |
| |
| ===== Hatebeat ===== | "%SystemRoot%\System32\reg.exe" ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000\GMM" /v "DedicatedSegmentSize" /t "REG_DWORD" /d "8192" /f |
| |
| ==== AMD Radeon HD 6800 Series ==== | ===== Boulderback ===== |
| |
| * https://support.amd.com/en-us/download/desktop/legacy?product=legacy3&os=Windows+10+-+64 | ==== Chipset ==== |
| |
| aria2c "https://www2.ati.com/drivers/beta/non-whql-win10-64bit-radeon-software-crimson-relive-16.2.1-sep20.exe" --referer="https://www2.ati.com" | * https://www.dell.com/support/home/en-us/drivers/driversdetails?driverid=r0jhr&oscode=w764&productcode=precision-m6500 |
| | * ''9.1.1.1025'' |
| |
| ==== AMD Chipset ==== | ==== Graphics ==== |
| |
| * https://support.amd.com/en-us/download/chipset?os=Windows+10+-+64 | * https://www.amd.com/en/support/downloads/drivers.html/graphics/firepro/firepro-mobility-series/firepro-m7820-mobility.html |
| | * [[https://drivers.amd.com/drivers/amdcleanuputility.exe|amdcleanuputility.exe]] |
| |
| aria2c "https://www2.ati.com/drivers/amd-chipset-drivers.exe" --referer="https://www2.ati.com" | |