• Microsoft Windows 11 Pro for Workstations
• Version Dev (OS Build 27954.1)

• TODO: More info on Windows 10

"notepad.exe" "%UserProfile%\Desktop\Maintenance.bat"

:: .NET Framework 4
"%SystemRoot%\Microsoft.NET\Framework\v4.0.30319\ngen.exe" update /force /queue
"%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\ngen.exe" update /force /queue
"%SystemRoot%\Microsoft.NET\Framework\v4.0.30319\ngen.exe" executequeueditems
"%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\ngen.exe" executequeueditems

:: System File Check, Cleanup, and Repair
"%SystemRoot%\System32\Dism.exe" /online /Cleanup-Image /StartComponentCleanup /ResetBase /RestoreHealth
"%SystemRoot%\System32\sfc.exe" /scannow

:: Classic Disk Cleanup
"%SystemRoot%\System32\cleanmgr.exe" /sageset:65535
"%SystemRoot%\System32\cleanmgr.exe" /sagerun:65535

:: Volume Shadow Copy
"%SystemRoot%\System32\vssadmin.exe" Delete Shadows /All

:: Defrag/Trim
"%SystemRoot%\System32\Defrag.exe" /AllVolumes /Defrag /TierOptimize /SlabConsolidate /Retrim /Optimize /PrintProgress /Verbose /NormalPriority

PAUSE

:: End

REG ADD "HKEY_CURRENT_USER\Software\Classes\CLSID\{86ca1aa0-34aa-4e8b-a509-50c905bae2a2}\InprocServer32" /ve /t "REG_SZ" /f

• https://learn.microsoft.com/en-us/windows/security/security-foundations/certification/fips-140-validation

REG ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy" /v "Enabled" /t "REG_DWORD" /d "1" /f

"powershell.exe" -Command "$md5 = New-Object -TypeName 'System.Security.Cryptography.MD5CryptoServiceProvider'"

REG ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy" /v "Enabled" /t "REG_DWORD" /d "0" /f

• https://learn.microsoft.com/en-us/windows/win32/memory/4-gigabyte-tuning

REG ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v "AllocationPreference" /t "REG_DWORD" /d "0x100000" /f

"netsh.exe" advfirewall firewall set rule name="Core Networking Diagnostics - ICMP Echo Request (ICMPv4-In)" profile="private,public" new enable="yes" && "netsh.exe" advfirewall firewall set rule name="Core Networking Diagnostics - ICMP Echo Request (ICMPv4-Out)" profile="private,public" new enable="yes" && "netsh.exe" advfirewall firewall set rule name="Core Networking Diagnostics - ICMP Echo Request (ICMPv6-In)" profile="private,public" new enable="yes" && "netsh.exe" advfirewall firewall set rule name="Core Networking Diagnostics - ICMP Echo Request (ICMPv6-Out)" profile="private,public" new enable="yes"

• Default

"netsh.exe" advfirewall firewall set rule name="Core Networking Diagnostics - ICMP Echo Request (ICMPv4-In)" profile="private,public" new enable="no" && "netsh.exe" advfirewall firewall set rule name="Core Networking Diagnostics - ICMP Echo Request (ICMPv4-Out)" profile="private,public" new enable="no" && "netsh.exe" advfirewall firewall set rule name="Core Networking Diagnostics - ICMP Echo Request (ICMPv6-In)" profile="private,public" new enable="no" && "netsh.exe" advfirewall firewall set rule name="Core Networking Diagnostics - ICMP Echo Request (ICMPv6-Out)" profile="private,public" new enable="no"

• Notes