RoE | Wiki

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
====== Information ======

  * Microsoft Windows 10 IoT Enterprise LTSC
  * Version 21H2 (OS Build 19044.5859)

====== Resources ======

  * [[windows;notes;quick_commands|Quick Commands]]
  * [[windows:notes:env_paths|Env PATH Variables]]
  * [[windows;notes;misc]]
  * [[https://learn.microsoft.com/en-us/windows/win32/debug/system-error-codes--0-499-|System Error Codes (0-499+)]]
  * [[https://learn.microsoft.com/en-us/windows/deployment/update/windows-update-error-reference|Windows Update error codes]]
  * http://redeem.microsoft.com/ (TODO: Put somewhere else)
  * [[https://github.com/Espionage724/Windows|GitHub Batch Files]]

===== TODOs =====

  * https://support.microsoft.com/en-us/topic/kb4072698-windows-server-and-azure-stack-hci-guidance-to-protect-against-silicon-based-microarchitectural-and-speculative-execution-side-channel-vulnerabilities-2f965763-00e2-8f98-b632-0d96f30c8c8e#ID0EBBBBJ=FeatureSettingsOverride
  * https://learn.microsoft.com/en-us/windows-hardware/drivers/devtest/bcdedit--set ([[windows;10?rev=1742081524#bcdedit|older rev]])

====== Updates ======

  * [[https://www.catalog.update.microsoft.com/Search.aspx?q=Cumulative+Update+for+Windows+10+Version+21H2+for+x64-based+Systems|Windows 10 21H2 Cumulative Updates - Microsoft Update Catalog]]
  * :!: [[https://www.catalog.update.microsoft.com/Search.aspx?q=KB5014032|KB5014032]] 2022-05 SSU is required before the latest CU

====== Shortcuts ======

===== Desktop =====

==== Maintenance ====

  "notepad.exe" "%UserProfile%\Desktop\Maintenance.bat"

<code>
:: .NET Framework 4
"%SystemRoot%\Microsoft.NET\Framework\v4.0.30319\ngen.exe" update /force /queue
"%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\ngen.exe" update /force /queue
"%SystemRoot%\Microsoft.NET\Framework\v4.0.30319\ngen.exe" executequeueditems
"%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\ngen.exe" executequeueditems

:: System File Check, Cleanup, and Repair
"%SystemRoot%\System32\Dism.exe" /online /Cleanup-Image /StartComponentCleanup /ResetBase /RestoreHealth
"%SystemRoot%\System32\sfc.exe" /scannow

:: Classic Disk Cleanup
"%SystemRoot%\System32\cleanmgr.exe" /sageset:65535
"%SystemRoot%\System32\cleanmgr.exe" /sagerun:65535

:: Volume Shadow Copy
"%SystemRoot%\System32\vssadmin.exe" Delete Shadows /All

PAUSE

:: Defrag/Trim
"%SystemRoot%\System32\Defrag.exe" /AllVolumes /Defrag /TierOptimize /SlabConsolidate /Retrim /Optimize /PrintProgress /Verbose /NormalPriority

PAUSE

:: End</code>

=== Test ===

  * [[https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/cc788042(v=ws.11)?redirectedfrom=MSDN|URL]]

  fsutil usn deleteJournal /D /N C:

===== Downloads =====

==== Reset Icon Cache ====

  "notepad.exe" "%UserProfile%\Downloads\Reset Icon Cache.bat"

<code>
TASKKILL /F /IM "explorer.exe"
TIMEOUT /NOBREAK /T "2"
DEL /F /Q "%LocalAppData%\Microsoft\Windows\Explorer\"*".db"
DEL /F /Q "%UserProfile%\AppData\Local\IconCache.db"
TIMEOUT /NOBREAK /T "2"
START explorer.exe

:: End</code>

  "%UserProfile%\Downloads\Reset Icon Cache.bat"

===== Start Menu =====

==== RDP ====

  "notepad.exe" "%UserProfile%\Documents\Alira (LAN).rdp"

<code>
full address:s:192.168.1.152
redirectprinters:i:0
redirectcomports:i:0
redirectsmartcards:i:0
redirectwebauthn:i:0
redirectclipboard:i:1
redirectposdevices:i:0</code>

=== Start Menu ===

  "explorer.exe" "%AppData%\Microsoft\Windows\Start Menu\Programs\Accessories"

  "%UserProfile%\Documents\Alira (LAN).rdp"

  Alira

====== Settings ======

===== BCDEdit =====

  "bcdedit.exe" /set "disabledynamictick" "Yes"

  "bcdedit.exe" /set "nx" "AlwaysOff"

===== Microsoft Edge =====

  * [[windows;notes;edge_tweaks|Edge Tweaks]]

===== Power =====

==== Disable Hibernation and Fast Start ====

****

  "powercfg.exe" /HIBERNATE "OFF"

==== Enable Ultimate Performance Power Plan ====

****

  "powercfg.exe" /DUPLICATESCHEME "e9a42b02-d5df-448d-aa00-03f14749eb61"

==== More Settings ====

****

  "powercfg.exe" /Qh

===== Disable Clipboard History =====

****

  reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\System" /v "AllowClipboardHistory" /t REG_DWORD /d "0" /f

===== Disable Cortana and Web Search =====

****

  reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /v "AllowCortana" /t REG_DWORD /d "0" /f

===== Disable Game DVR =====

****

  reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\GameDVR" /v "AllowgameDVR" /t "REG_DWORD" /d "0" /f

===== Quick Lock Screen =====

  * Directly shows password prompt

  REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Personalization" /v "NoLockScreen" /t REG_DWORD /d "1" /f

==== Undo ====

****

  REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Personalization" /v "NoLockScreen" /t REG_DWORD /d "0" /f

===== Disable Online Speech Recognition =====

****

  reg add "HKLM\SOFTWARE\Policies\Microsoft\InputPersonalization" /v "AllowInputPersonalization" /t REG_DWORD /d "0" /f

===== Open Pictures With Windows Photo Viewer =====

  reg add "HKCU\Software\Classes\.jpg" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f

  reg add "HKCU\Software\Classes\.jpeg" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f

  reg add "HKCU\Software\Classes\.gif" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f

  reg add "HKCU\Software\Classes\.png" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f

  reg add "HKCU\Software\Classes\.bmp" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f

  reg add "HKCU\Software\Classes\.tiff" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f

  reg add "HKCU\Software\Classes\.ico" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f

===== Disable Remote Desktop =====

****

  reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" /v "fDenyTSConnections" /t REG_DWORD /d "1" /f

===== Disable Shared Experiences =====

****

  reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\System" /v "EnableCdp" /t REG_DWORD /d "0" /f

===== Disable System Restore =====

****

  reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore" /v "DisableSR " /t "REG_DWORD" /d "1" /f

===== Disable Telemetry Features =====

****

  reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DataCollection" /v "AllowTelemetry" /t "REG_DWORD" /d "0" /f

===== Disable User Account Control =====

****

  REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableLUA" /t "REG_DWORD" /d "0" /f

===== Enable FIPS Mode =====

  * https://learn.microsoft.com/en-us/windows/security/security-foundations/certification/fips-140-validation

  REG ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy" /v "Enabled" /t "REG_DWORD" /d "1" /f

  "powershell.exe" -Command "$md5 = New-Object -TypeName 'System.Security.Cryptography.MD5CryptoServiceProvider'"

==== Disable ====

****

  REG ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy" /v "Enabled" /t "REG_DWORD" /d "0" /f

===== Remove Quick Access =====

****

  reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer" /v "HubMode" /t "REG_DWORD" /d "1" /f

===== Remove Windows Search =====

  "sc.exe" stop "WSearch" & "sc.exe" config "WSearch" "start=disabled"

  "DISM.exe" /Online /Disable-Feature /FeatureName:"SearchEngine-Client-Package" /Remove

===== Show All Folders in File Explorer Pane =====

****

  reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "NavPaneShowAllFolders" /t "REG_DWORD" /d "1" /f

===== Verbose Shutdown =====

****

  reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v "VerboseStatus" /t REG_DWORD /d "1" /f

====== Other ======

===== Microsoft Store =====

  "WSReset.exe" -i

<code>
"WSReset.exe" -i
TIMEOUT /T "20" /NOBREAK
"WSReset.exe" -i
EXIT /B

:: End</code>

===== WinSAT =====

  "WinSAT.exe" forgethistory

  "WinSAT.exe" "formal" -restart "clean"

  "WinSAT.exe" query

===== NetFX3 From Install Media =====

  * Change ''D:\'' to install media drive if necessary

  Dism /online /enable-feature /featurename:"NetFX3" /All /Source:"D:\sources\sxs" /LimitAccess

===== Prevent Driver Changes =====

==== Notes ====

  * To be done after a proper driver is manually installed
  * This ensures Windows Update nor anything else can replace installed drivers for specific devices unattended
  * Additional entries need to add a new number (the value after ''/v'')
  * The device ID can be acquired from Device Manager and should be pasted as-is (no extra slashes)

==== Base Policies ====

  reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions" /v "DenyDeviceIDs" /t "REG_DWORD" /d "1" /f

  reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions" /v "DenyDeviceIDsRetroactive" /t "REG_DWORD" /d "0" /f

==== Format ====

  * Do **not** copy/paste these as-is; only here for reference
  * Adjust to specific devices as-needed

==== Add Prevent Policy ====

****

  reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceIDs" /v "#" /t "REG_SZ" /d "PCI\VEN_XXXX&DEV_XXXX&SUBSYS_XXXXXXXX&REV_XX" /f

==== Remove Prevent Policy ====

****

  reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceIDs" /v "#" /f

====== Services ======

  * TODO: Separate page, individual batches

  "sc.exe" stop "DPS" & "sc.exe" config "DPS" "start=disabled"

  "sc.exe" stop "DiagTrack" & "sc.exe" config "DiagTrack" "start=disabled"

  "sc.exe" stop "WdiSystemHost" & "sc.exe" config "WdiSystemHost" "start=disabled"

  "sc.exe" stop "PcaSvc" & "sc.exe" config "PcaSvc" "start=disabled"

===== Spinesnap =====

  "sc.exe" stop "ApHidMonitorService" & "sc.exe" config "ApHidMonitorService" "start=disabled"

  "sc.exe" stop "RstMwService" & "sc.exe" config "RstMwService" "start=disabled"

====== Programs ======

  * [[windows:programs|More Programs]]

===== 7-Zip =====

  * https://www.7-zip.org/download.html

===== Android Tools =====

  * [[https://dl-ssl.google.com/android/repository/latest_usb_driver_windows.zip|USB Driver]]
  * [[https://dl-ssl.google.com/android/repository/platform-tools-latest-windows.zip|platform-tools]]

===== aria2 =====

  * https://github.com/aria2/aria2/releases

===== Brain Workshop =====

  * https://sourceforge.net/projects/brainworkshop/files/brainworkshop/

===== Calculator =====

  * Only available on LTSB/LTSC

  win32calc

===== DirectX End-User Runtime =====

  * https://www.microsoft.com/en-us/download/confirmation.aspx?id=8109

===== Firefox =====

  * [[https://download.mozilla.org/?product=firefox-esr-msi-latest-ssl&os=win64&lang=en-US|ESR MSI]]

  * [[programs;firefox|Settings]]

===== Thunderbird =====

  * [[https://download.mozilla.org/?product=thunderbird-esr-msi-latest-ssl&os=win64&lang=en-US|ESR MSI]]

===== GIMP =====

  * https://www.gimp.org/downloads

===== KeePassXC =====

  * https://keepassxc.org/download#windows

===== LibreOffice =====

  * https://www.libreoffice.org/download/download/

  * ''[ ]'' Use Skia
  * ''[ ]'' Use a Java runtime

===== Okular =====

  * https://cdn.kde.org/ci-builds/graphics/okular/master/windows/

===== Notepad++ =====

  * https://notepad-plus-plus.org/download

===== OBS =====

  * https://github.com/obsproject/obs-studio/releases

===== qBittorrent =====

  * https://www.qbittorrent.org/download

===== VC++ Redist =====

  * https://github.com/abbodi1406/vcredist/releases

===== foobar2000 =====

  * https://www.foobar2000.org/download

===== VLC media player =====

  * https://download.videolan.org/pub/videolan/vlc/last/win64/
  * https://www.videolan.org/vlc/download-windows.html

===== Vulkan Runtime =====

  * https://vulkan.lunarg.com/sdk/home

====== Games ======

===== Battle.net App =====

  * https://download.battle.net/en-us/?product=bnetdesk
  * [[http://dist.blizzard.com/downloads/bna-installers/322d5bb9ae0318de3d4cde7641c96425/retail.1/Battle.net-Setup-enUS.exe|Older exe]] (no SSL)

===== Steam =====

  * https://steamcdn-a.akamaihd.net/client/installer/SteamSetup.exe
  * See [[games;windows;notes;game_launch_flags|Game Launch Flags]]

==== Shortcut ====

  * Disable: Settings -> Interface -> Enable GPU accelerated rendering in web views

  "%ProgramFiles(x86)%\Steam\steam.exe" -silent -nocrashmonitor -cef-single-process -cef-disable-breakpad

  Steam (min)

====== Drivers ======

  * See [[windows:drivers|Drivers]] for more URLs

===== Boulderback =====

==== Chipset ====

  * https://www.dell.com/support/home/en-us/drivers/driversdetails?driverid=r0jhr&oscode=w764&productcode=precision-m6500
  * ''9.1.1.1025''

==== Graphics ====

  * https://www.amd.com/en/support/downloads/drivers.html/graphics/firepro/firepro-mobility-series/firepro-m7820-mobility.html
  * [[https://drivers.amd.com/drivers/amdcleanuputility.exe|amdcleanuputility.exe]]

===== Spinesnap =====

  * [[https://www.dell.com/support/home/en-us/product-support/product/latitude-15-5591-laptop/drivers|Dell Latitude 5591 - Support and BIOS Updates]]

==== Keyboard ====

  * EPOMAKER x LEOBOG Hi75

  * https://epomaker.com/blogs/firmware/epomaker-x-leobog-hi75-firmware
  * https://epomaker.com/blogs/software/epomaker-x-leobog-hi75-driver

==== Mouse ====

  * ATTACK SHARK R6

  "%ProgramFiles(x86)%\Microsoft\Edge\Application\msedge_proxy.exe" --app="https://cn.attackshark.pro/WebDriven/index.html#/project/items"

==== SATA/RST ====

  * [[https://www.intel.com/content/www/us/en/download/19755/intel-rapid-storage-technology-driver-installation-software-with-intel-optane-memory-8th-and-9th-gen-platforms.html|Intel Download Center]]
  * :?: Last tested version: ''17.11.3.1010''

==== Ethernet ====

  * I219-LM Gigabit
  * Intel Corporation Ethernet Connection (7) I219-LM (rev 10) ((rev 10 drivers, not rev 18+))

  * [[https://www.intel.com/content/www/us/en/products/sku/82185/intel-ethernet-connection-i219lm/downloads.html|Intel Download Center]]
  * Last tested: ''Wired_driver_30.0.1_x64.zip''

==== Wireless ====

  * Wireless-AC 9560
  * Intel Corporation Cannon Lake PCH CNVi WiFi (rev 10)

  * [[https://www.intel.com/content/www/us/en/products/sku/99446/intel-wirelessac-9560/downloads.html|Intel Download Center]] (IT Administrators 8-))
  * Last tested: ''WiFi-23.110.0-Driver64-Win10-Win11.zip''

=== Bluetooth ===

  * Last tested: ''BT-23.100.1-64UWD-Win10-Win11.zip''

==== Graphics ====

  * Intel UHD Graphics 630
  * Intel Corporation CoffeeLake-H GT2 [UHD Graphics 630]

  * [[https://www.intel.com/content/www/us/en/support/products/126790/graphics/intel-uhd-graphics-family/intel-uhd-graphics-630.html#drivers-software|Intel Download Center]]
  * Last tested: ''gfx_win_101.2135.exe''