• Microsoft Windows 10 IoT Enterprise LTSC
• Version 21H2 (OS Build 19044.6811)
• Server ¹⁾

• Windows 10 21H2 Cumulative Updates - Microsoft Update Catalog
• KB5014032 2022-05 SSU is required before the latest CU

SystemPropertiesAdvanced.exe

System Props

"%SystemRoot%\System32\cleanmgr.exe" /sageset:65535

"notepad.exe" "%UserProfile%\Desktop\Maintenance.bat"

:: .NET Framework 4
"%SystemRoot%\Microsoft.NET\Framework\v4.0.30319\ngen.exe" update /force /queue
"%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\ngen.exe" update /force /queue
"%SystemRoot%\Microsoft.NET\Framework\v4.0.30319\ngen.exe" executequeueditems
"%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\ngen.exe" executequeueditems

:: System File Check, Cleanup, and Repair
"%SystemRoot%\System32\Dism.exe" /online /Cleanup-Image /StartComponentCleanup /ResetBase /RestoreHealth
"%SystemRoot%\System32\sfc.exe" /scannow

:: Classic Disk Cleanup
"%SystemRoot%\System32\cleanmgr.exe" /sagerun:65535

:: Volume Shadow Copy
"%SystemRoot%\System32\vssadmin.exe" Delete Shadows /All

:: Defrag/Trim
"%SystemRoot%\System32\Defrag.exe" /AllVolumes /Defrag /TierOptimize /SlabConsolidate /Retrim /Optimize

:: End

"notepad.exe" "%UserProfile%\Downloads\Reset Icon Cache.bat"

TASKKILL /F /IM "explorer.exe"
TIMEOUT /T "2" /NOBREAK
DEL /F /Q "%LocalAppData%\Microsoft\Windows\Explorer\"*".db"
DEL /F /Q "%UserProfile%\AppData\Local\IconCache.db"
TIMEOUT /T "2" /NOBREAK
START explorer.exe

:: End

"%UserProfile%\Downloads\Reset Icon Cache.bat"

"bcdedit.exe" /set "disabledynamictick" "Yes"

"bcdedit.exe" /set "nx" "AlwaysOff"

• Edge Tweaks

"powercfg.exe" /HIBERNATE "OFF"

"powercfg.exe" /DUPLICATESCHEME "e9a42b02-d5df-448d-aa00-03f14749eb61"

"powercfg.exe" /Qh

• Notes

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\System" /v "AllowClipboardHistory" /t REG_DWORD /d "0" /f

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /v "AllowCortana" /t REG_DWORD /d "0" /f

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\GameDVR" /v "AllowgameDVR" /t "REG_DWORD" /d "0" /f

• Directly shows password prompt

REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Personalization" /v "NoLockScreen" /t REG_DWORD /d "1" /f

REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Personalization" /v "NoLockScreen" /t REG_DWORD /d "0" /f

reg add "HKLM\SOFTWARE\Policies\Microsoft\InputPersonalization" /v "AllowInputPersonalization" /t REG_DWORD /d "0" /f

reg add "HKCU\Software\Classes\.jpg" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f

reg add "HKCU\Software\Classes\.jpeg" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f

reg add "HKCU\Software\Classes\.gif" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f

reg add "HKCU\Software\Classes\.png" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f

reg add "HKCU\Software\Classes\.bmp" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f

reg add "HKCU\Software\Classes\.tiff" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f

reg add "HKCU\Software\Classes\.ico" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\System" /v "EnableCdp" /t REG_DWORD /d "0" /f

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore" /v "DisableSR " /t "REG_DWORD" /d "1" /f

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DataCollection" /v "AllowTelemetry" /t "REG_DWORD" /d "0" /f

REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableLUA" /t "REG_DWORD" /d "0" /f

• https://learn.microsoft.com/en-us/windows/security/security-foundations/certification/fips-140-validation

REG ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy" /v "Enabled" /t "REG_DWORD" /d "1" /f

"powershell.exe" -Command "$md5 = New-Object -TypeName 'System.Security.Cryptography.MD5CryptoServiceProvider'"

reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer" /v "HubMode" /t "REG_DWORD" /d "1" /f

"sc.exe" stop "WSearch" & "sc.exe" config "WSearch" "start=disabled"

"DISM.exe" /Online /Disable-Feature /FeatureName:"SearchEngine-Client-Package" /Remove

reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "NavPaneShowAllFolders" /t "REG_DWORD" /d "1" /f

reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v "VerboseStatus" /t REG_DWORD /d "1" /f

• Notes

• More Programs

• https://www.7-zip.org/download.html

7z2501-x64.exe

• Only available on LTSB/LTSC

win32calc

• https://www.microsoft.com/en-us/download/confirmation.aspx?id=8109

• https://www.firefox.com/en-US/download/all/desktop-esr/win64-msi/en-US/
• https://www.firefox.com/en-US/download/all/

• Settings

• https://keepassxc.org/download#windows

• https://forums.mydigitallife.net/threads/repack-visual-c-redistributable-runtimes-2025-10-17.76588/

• See Drivers for more URLs

• https://www.dell.com/support/home/en-us/drivers/driversdetails?driverid=r0jhr&oscode=w764&productcode=precision-m6500
• 9.1.1.1025

taskschd.msc

• https://learn.microsoft.com/en-us/windows-server/administration/windows-commands/shutdown
• Application: Maintenance (Planned)
• Daily 06:00:00 AM

SCHTASKS /Create /SC "ONCE" /TN "OS Restart" /TR "shutdown.exe /g /t 0 /f /d p:4:1" /ST "06:00" /F