• Microsoft Windows 11 Pro for Workstations
• Version Dev (OS Build 27954.1)

• TODO: More info on Windows 10

"notepad.exe" "%UserProfile%\Desktop\Maintenance.bat"

:: .NET Framework 4
"%SystemRoot%\Microsoft.NET\Framework\v4.0.30319\ngen.exe" update /force /queue
"%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\ngen.exe" update /force /queue
"%SystemRoot%\Microsoft.NET\Framework\v4.0.30319\ngen.exe" executequeueditems
"%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\ngen.exe" executequeueditems

:: System File Check, Cleanup, and Repair
"%SystemRoot%\System32\Dism.exe" /online /Cleanup-Image /StartComponentCleanup /ResetBase /RestoreHealth
"%SystemRoot%\System32\sfc.exe" /scannow

:: Classic Disk Cleanup
"%SystemRoot%\System32\cleanmgr.exe" /sageset:65535
"%SystemRoot%\System32\cleanmgr.exe" /sagerun:65535

:: Volume Shadow Copy
"%SystemRoot%\System32\vssadmin.exe" Delete Shadows /All

PAUSE

:: Defrag/Trim
"%SystemRoot%\System32\Defrag.exe" /AllVolumes /Defrag /TierOptimize /SlabConsolidate /Retrim /Optimize /PrintProgress /Verbose /NormalPriority

PAUSE

:: End

• URL

fsutil usn deleteJournal /D C:

• TODO: Intel ShaderCache clear somewhere else ¹⁾

"notepad.exe" "%UserProfile%\Downloads\Reset Icon Cache.bat"

TASKKILL /F /IM "explorer.exe"
TIMEOUT /NOBREAK /T "2"

DEL /F /Q "%LocalAppData%\Microsoft\Windows\Explorer\"*".db"
DEL /F /Q "%UserProfile%\AppData\Local\IconCache.db"

:: Intel GPU
DEL /F /Q "%UserProfile%\AppData\LocalLow\Intel\ShaderCache\"*

TIMEOUT /NOBREAK /T "2"
START explorer.exe

:: End

"%UserProfile%\Downloads\Reset Icon Cache.bat"

"notepad.exe" "%UserProfile%\Documents\Alira (LAN).rdp"

full address:s:192.168.1.152
redirectprinters:i:0
redirectcomports:i:0
redirectsmartcards:i:0
redirectwebauthn:i:0
redirectclipboard:i:1
redirectposdevices:i:0

"explorer.exe" "%AppData%\Microsoft\Windows\Start Menu\Programs\Accessories"

"%UserProfile%\Documents\Alira (LAN).rdp"

Alira

REG ADD "HKEY_CURRENT_USER\Software\Classes\CLSID\{86ca1aa0-34aa-4e8b-a509-50c905bae2a2}\InprocServer32" /ve /t "REG_SZ" /f

• https://learn.microsoft.com/en-us/windows/security/security-foundations/certification/fips-140-validation

REG ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy" /v "Enabled" /t "REG_DWORD" /d "1" /f

"powershell.exe" -Command "$md5 = New-Object -TypeName 'System.Security.Cryptography.MD5CryptoServiceProvider'"

REG ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy" /v "Enabled" /t "REG_DWORD" /d "0" /f

• https://learn.microsoft.com/en-us/windows/win32/memory/4-gigabyte-tuning

REG ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v "AllocationPreference" /t "REG_DWORD" /d "0x100000" /f

REG ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v "DisablePagingExecutive" /t "REG_DWORD" /d "1" /f

REG ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v "LargeSystemCache" /t "REG_DWORD" /d "1" /f

REG ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v "SystemPages" /t "REG_DWORD" /d "0XFFFFFFFF" /f

"netsh.exe" advfirewall firewall set rule name="Core Networking Diagnostics - ICMP Echo Request (ICMPv4-In)" profile="private,public" new enable="yes" && "netsh.exe" advfirewall firewall set rule name="Core Networking Diagnostics - ICMP Echo Request (ICMPv4-Out)" profile="private,public" new enable="yes" && "netsh.exe" advfirewall firewall set rule name="Core Networking Diagnostics - ICMP Echo Request (ICMPv6-In)" profile="private,public" new enable="yes" && "netsh.exe" advfirewall firewall set rule name="Core Networking Diagnostics - ICMP Echo Request (ICMPv6-Out)" profile="private,public" new enable="yes"

• Default

"netsh.exe" advfirewall firewall set rule name="Core Networking Diagnostics - ICMP Echo Request (ICMPv4-In)" profile="private,public" new enable="no" && "netsh.exe" advfirewall firewall set rule name="Core Networking Diagnostics - ICMP Echo Request (ICMPv4-Out)" profile="private,public" new enable="no" && "netsh.exe" advfirewall firewall set rule name="Core Networking Diagnostics - ICMP Echo Request (ICMPv6-In)" profile="private,public" new enable="no" && "netsh.exe" advfirewall firewall set rule name="Core Networking Diagnostics - ICMP Echo Request (ICMPv6-Out)" profile="private,public" new enable="no"

• Notes