User Tools

Site Tools


windows:10

This is an old revision of the document!


Information

  • Microsoft Windows 10 IoT Enterprise LTSC
  • Version 21H2 (OS Build 19044.7807)

Resources

Updates

Shortcuts

Desktop

Calculator

"%SystemRoot%\System32\win32calc.exe"
Calculator

Maintenance

Downloads

Remove Intel Microcode

Start Menu

SSH

  • TODO: MKDIR new folder + shortcut for update + wiki backup
"%SystemRoot%\explorer.exe" "%AppData%\Microsoft\Windows\Start Menu\Programs\Accessories"
"%SystemRoot%\System32\OpenSSH\ssh.exe" -o "StrictHostKeyChecking='no'" -o "UserKnownHostsFile='NUL'" "192.168.1.152"
Kraityn

Update Office

"%SystemRoot%\explorer.exe" "%ProgramData%\Microsoft\Windows\Start Menu\Programs\Microsoft Office Tools"
"%CommonProgramFiles%\microsoft shared\ClickToRun\OfficeC2RClient.exe" /update "user" forceappshutdown="True" displaylevel="True"
Update Office

Settings

BCDEdit

Microsoft Edge

Printer

ipp://192.168.1.164/ipp/print

Power

Disable Hibernation and Fast Start

"powercfg.exe" /HIBERNATE "OFF"

Enable Ultimate Performance Power Plan

"powercfg.exe" /DUPLICATESCHEME "e9a42b02-d5df-448d-aa00-03f14749eb61"

More Settings

"powercfg.exe" /Qh

Disable Clipboard History

"%SystemRoot%\System32\reg.exe" add "HKLM\SOFTWARE\Policies\Microsoft\Windows\System" /v "AllowClipboardHistory" /t REG_DWORD /d "0" /f
"%SystemRoot%\System32\reg.exe" add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /v "AllowCortana" /t REG_DWORD /d "0" /f

Disable Game DVR

"%SystemRoot%\System32\reg.exe" add "HKLM\SOFTWARE\Policies\Microsoft\Windows\GameDVR" /v "AllowgameDVR" /t "REG_DWORD" /d "0" /f

Quick Lock Screen

  • Directly shows password prompt
REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Personalization" /v "NoLockScreen" /t REG_DWORD /d "1" /f

Undo

REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Personalization" /v "NoLockScreen" /t REG_DWORD /d "0" /f

Disable Online Speech Recognition

reg add "HKLM\SOFTWARE\Policies\Microsoft\InputPersonalization" /v "AllowInputPersonalization" /t REG_DWORD /d "0" /f

Open Pictures With Windows Photo Viewer

reg add "HKCU\Software\Classes\.jpg" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f
reg add "HKCU\Software\Classes\.jpeg" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f
reg add "HKCU\Software\Classes\.gif" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f
reg add "HKCU\Software\Classes\.png" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f
reg add "HKCU\Software\Classes\.bmp" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f
reg add "HKCU\Software\Classes\.tiff" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f
reg add "HKCU\Software\Classes\.ico" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f

Disable Remote Desktop

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" /v "fDenyTSConnections" /t REG_DWORD /d "1" /f

Disable Shared Experiences

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\System" /v "EnableCdp" /t REG_DWORD /d "0" /f

Disable System Restore

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore" /v "DisableSR " /t "REG_DWORD" /d "1" /f

Disable Telemetry Features

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DataCollection" /v "AllowTelemetry" /t "REG_DWORD" /d "0" /f

Disable User Account Control

REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableLUA" /t "REG_DWORD" /d "0" /f

Enable FIPS Mode

"%SystemRoot%\System32\reg.exe" ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy" /v "Enabled" /t "REG_DWORD" /d "1" /f

Remove Quick Access

reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer" /v "HubMode" /t "REG_DWORD" /d "1" /f
"%SystemRoot%\System32\sc.exe" stop "WSearch" & "%SystemRoot%\System32\sc.exe" config "WSearch" "start=disabled"
"%SystemRoot%\System32\Dism.exe" /Online /Disable-Feature /FeatureName:"SearchEngine-Client-Package" /Remove

Show All Folders in File Explorer Pane

reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "NavPaneShowAllFolders" /t "REG_DWORD" /d "1" /f

Verbose Shutdown

reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v "VerboseStatus" /t REG_DWORD /d "1" /f

Other

HOSTS

fakenews + gambling

"%SystemRoot%\System32\curl.exe" --output "%Temp%\blacklist-fg.txt" --location "https://scripttiger.github.io/alts/compressed/blacklist-fg.txt" --progress-bar && MOVE /Y "%Temp%\blacklist-fg.txt" "%SystemRoot%\System32\drivers\etc\hosts" && "%SystemRoot%\System32\ipconfig.exe" /flushdns && "%SystemRoot%\System32\ipconfig.exe" /registerdns

Script

Microsoft Store

WinSAT

"%SystemRoot%\System32\WinSAT.exe" "formal" -restart "clean" -v
"%SystemRoot%\System32\WinSAT.exe" forgethistory
"%SystemRoot%\System32\WinSAT.exe" query

NetFX3 From Install Media

  • Change D:\ to install media drive if necessary
Dism /online /enable-feature /featurename:"NetFX3" /All /Source:"D:\sources\sxs" /LimitAccess

Prevent Driver Changes

Notes

  • To be done after a proper driver is manually installed
  • This ensures Windows Update nor anything else can replace installed drivers for specific devices unattended
  • Additional entries need to add a new number (the value after /v)
  • The device ID can be acquired from Device Manager and should be pasted as-is (no extra slashes)

Base Policies

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions" /v "DenyDeviceIDs" /t "REG_DWORD" /d "1" /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions" /v "DenyDeviceIDsRetroactive" /t "REG_DWORD" /d "0" /f

Format

  • Do not copy/paste these as-is; only here for reference
  • Adjust to specific devices as-needed

Add Prevent Policy

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceIDs" /v "#" /t "REG_SZ" /d "PCI\VEN_XXXX&DEV_XXXX&SUBSYS_XXXXXXXX&REV_XX" /f

Remove Prevent Policy

reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceIDs" /v "#" /f

Alt

  • Dynamic Tuning devices can be disabled from registry
  • 5 devices
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\ACPI\INT3400\2&daba3ff&1

Transparent Taskbar

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Dwm ForceEffectMode 1
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced UseOLEDTaskbarTransparency 1

Aero Lite Theme

COPY /Y "%SystemRoot%\Resources\Themes\aero.theme" "%UserProfile%\Desktop\aerolite.theme"
"%SystemRoot%\System32\notepad.exe" "%UserProfile%\Desktop\aerolite.theme"
[Theme]
DisplayName=Aero Lite
[VisualStyles]
Path=%ResourceDir%\Themes\Aero\AeroLite.msstyles

Apply

  • Delete aerolite.theme after apply
"%UserProfile%\Desktop\aerolite.theme"

Settings

  • Personalization → Colors
  • Default Windows mode: [x] Dark
  • Default app mode: [x] Light
  • [ ] Transparency effects
  • [ ] Automatically pick an accent color
  • Accent color on surfaces: [x] Title bars and window borders

TCP ACK

  • DWORD = 1 for both
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces
TcpAckFrequency
TcpNoDelay

Hide SSH Folder

"%SystemRoot%\System32\attrib.exe" +H "%UserProfile%\.ssh"

Services

Programs

7-Zip

Android Tools

aria2

Brain Workshop

DirectX End-User Runtime

Firefox

Thunderbird

GIMP

Hide Keyrings

"%SystemRoot%\System32\attrib.exe" +H "%UserProfile%\.dbus-keyrings"

KeePassXC

Okular

Notepad++

qBittorrent

VC++ Redist

VLC media player

Vulkan Runtime

Drivers

Hailrake

  • TODO

Boulderback

Chipset

Graphics

Spinesnap

Keyboard

Mouse

  • ATTACK SHARK R6
"%ProgramFiles(x86)%\Microsoft\Edge\Application\msedge_proxy.exe" --app="https://www.xvalleyinno.top/AttackShark/#/project/items"
"%ProgramFiles(x86)%\Microsoft\Edge\Application\msedge_proxy.exe" --app="https://cn.attackshark.pro/WebDriven/index.html#/project/items"

SATA/RST

  • 16.8.5.1014 3)

Ethernet

  • I219-LM Gigabit
  • Intel Corporation Ethernet Connection (7) I219-LM (rev 10) 4)
  • :?: 2026/05/23: 12.19.2.64 limits Receive and Transmit Buffers to 2048 on W11, but can do 4096+ on 10

Wireless

Graphics

8GB VRAM

  • :?: Aperture size and other BIOS options affect available memory 5)
"%SystemRoot%\System32\reg.exe" ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000\GMM" /v "DedicatedSegmentSize" /t "REG_DWORD" /d "8192" /f

Etc

  • :?: DisableFlipImmediateOnHSync=1 caused MW2 (DX9) to cap FPS at refresh rate on external HDMI
  • 2026/07/13: Display1_DisableAsyncFlips=1 capped osu!lazer (D3D11) at refresh rate (OGL was uncapped)
  • IncreaseFixedSegment is seemingly 0 or 1 6)
  • :?: @dota2.exe and etc at 1 7)
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4d36e968-e325-11ce-bfc1-08002be10318}\0000
AdaptiveVsyncEnable
ForcePLLDisableEnableForFreqChange
IncreaseFixedSegment
LSPCONLpmEnable
NarrowGamutSplitGammaEnable
PowerGpsAggressivenessLevel
PSR2Disable
Psr2DrrsEnable
RemoveALLInterlacedModes
ResendACTSignal
TotalPSR2OUICount
z AssertBreakDisable
z AssertEnableMask
z DebugEnableMask
eDPCompressionEnable
1)
causes artifacting on GTA V DX10/11; WU 5800 driver's fine
2)
:!: flashes without warning/prompt
3)
OpROM is 16.0.2.3402, 16.8.5.1014.5 release notes matches latest v16 branch
4)
rev 10 drivers, not rev 18+
5)
1024MB aperture does 7086 MB in dxdiag
6)
source; hints online say it's VRAM increase but DedicatedSegmentSize does that
7)
dx9, 11, games, benchmarks, CAD; 32-bit?
/usr/local/www/wiki/data/attic/windows/10.1791918946.txt.gz · Last modified: by Sean Rhone