• Microsoft Windows 10
• LTSC 1809

• Removing Most/All Modern UI apps on 1803 prevents facial login via Windows Hello from working entirely ^{1) 2)}
• Enabling Secure Boot prevents non-WHQL drivers from working ³⁾

• https://forums.mydigitallife.info/threads/72600-ISO-for-latest-enUS-LTSB

• https://docs.microsoft.com/en-us/windows/deployment/update/servicing-stack-updates#when-are-they-released
• https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV990001
• SSU is recommended to be installed before the CU

• Microsoft Update Catalog

YYYY-MM Update for Windows 10 Version 1809 for x64-based Systems (KB#######)

• SSU is recommended to be installed before the CU

• Microsoft Update Catalog

YYYY-MM Cumulative Update for Windows 10 Version 1809 for x64-based Systems (KB#######)

• To be done after a proper driver is manually installed
• This ensures Windows Update nor anything else can replace installed drivers for specific devices unattended
• Additional entries need to add a new number (the value after /v)
• The device ID can be acquired from Device Manager and should be pasted as-is (no extra slashes)

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions" /v "DenyDeviceIDs" /t "REG_DWORD" /d "1" /f

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions" /v "DenyDeviceIDsRetroactive" /t "REG_DWORD" /d "0" /f

• Do not copy/paste these as-is; only here for reference
• Adjust to specific devices as-needed

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceIDs" /v "#" /t "REG_SZ" /d "PCI\VEN_XXXX&DEV_XXXX&SUBSYS_XXXXXXXX&REV_XX" /f

reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceIDs" /v "#" /f

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\System" /v "AllowClipboardHistory" /t REG_DWORD /d "0" /f

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /v "AllowCortana" /t REG_DWORD /d "0" /f

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\GameDVR" /v "AllowgameDVR" /t "REG_DWORD" /d "0" /f

powercfg /H off

fsutil behavior set disablelastaccess 1

reg add "HKLM\SOFTWARE\Policies\Microsoft\InputPersonalization" /v "AllowInputPersonalization" /t REG_DWORD /d "0" /f

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" /v "fDenyTSConnections" /t REG_DWORD /d "1" /f

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\System" /v "EnableCdp" /t REG_DWORD /d "0" /f

• General
• Windows Store Apps
• Microsoft EDGE

reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer" /v "SmartScreenEnabled" /t "REG_SZ" /d "Off" /f

reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\AppHost" /v "EnableWebContentEvaluation" /t "REG_DWORD" /d "0" /f

reg add "HKLM\SOFTWARE\Policies\Microsoft\MicrosoftEdge\PhishingFilter" /v "EnabledV9" /t "REG_DWORD" /d "0" /f

reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Serialize" /v "StartupDelayInMSec" /t "REG_DWORD" /d "0" /f

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore" /v "DisableSR " /t "REG_DWORD" /d "1" /f

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DataCollection" /v "AllowTelemetry" /t "REG_DWORD" /d "0" /f

reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableLUA" /t "REG_DWORD" /d "0" /f

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender" /v "DisableAntiSpyware" /t "REG_DWORD" /d "1" /f

reg add "HKCU\Software\Classes\.jpg" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f

reg add "HKCU\Software\Classes\.jpeg" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f

reg add "HKCU\Software\Classes\.gif" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f

reg add "HKCU\Software\Classes\.png" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f

reg add "HKCU\Software\Classes\.bmp" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f

reg add "HKCU\Software\Classes\.tiff" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f

reg add "HKCU\Software\Classes\.ico" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f

reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer" /v "HubMode" /t "REG_DWORD" /d "1" /f

Dism /online /Disable-Feature /FeatureName:"SearchEngine-Client-Package" /Remove

• https://scripttiger.github.io/hosts-packages/

• Powershell Script *.ps1

[Net.ServicePointManager]::SecurityProtocol = "tls12, tls11, tls"
Invoke-WebRequest "https://scripttiger.github.io/alts/compressed/blacklist-fg.txt" -OutFile "C:\Windows\System32\drivers\etc\hosts"
ipconfig /flushdns

reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "NavPaneShowAllFolders" /t "REG_DWORD" /d "1" /f

• Change D:\ to install media drive if necessary

Dism /online /enable-feature /featurename:"NetFX3" /All /Source:"D:\sources\sxs" /LimitAccess

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\HomeGroup" /v "DisableHomeGroup" /t "REG_DWORD" /d "1" /f

• Powershell Script *.ps1
• Do not run this on 1809 as it'll break the Start Menu
• Seems safe to run on 201H

Get-AppxPackage -allusers | Remove-AppxPackage

taskkill /IM "OneDrive.exe" /F

%windir%\SysWOW64\OneDriveSetup.exe /uninstall

rmdir "%UserProfile%\OneDrive" "%ProgramData%\Microsoft OneDrive" "%LocalAppData%\Microsoft\OneDrive" "C:\OneDriveTemp" /S /Q

reg delete "HKCR\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}" /f

reg delete "HKCR\Wow6432Node\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}" /f

"%windir%\microsoft.net\Framework\v4.0.30319\ngen.exe" update /force /queue
"%windir%\microsoft.net\Framework64\v4.0.30319\ngen.exe" update /force /queue
"%windir%\microsoft.net\Framework\v4.0.30319\ngen.exe" executequeueditems
"%windir%\microsoft.net\Framework64\v4.0.30319\ngen.exe" executequeueditems

"%windir%\system32\Dism.exe" /online /Cleanup-Image /StartComponentCleanup /ResetBase /RestoreHealth
"%windir%\system32\sfc.exe" /scannow

"%windir%\system32\cleanmgr.exe" /sageset:65535
"%windir%\system32\cleanmgr.exe" /sagerun:65535

"%windir%\system32\dfrgui.exe"

control userpasswords2

%SYSTEMROOT%\System32\hdwwiz.exe

GodMode.{ED7BA470-8E54-465E-825C-99712043E01C}

• Hero

C:\Windows\Web\Wallpaper\Windows\img0.jpg

reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v "VerboseStatus" /t REG_DWORD /d "1" /f

• For whatever reason, Windows likes to revert to High Performance (or another program switches it) instead of keeping a custom power plan
• The solution to this is to simply remove all power plans that aren't the custom one…

powercfg /list

• Windows 10 Help Forums

powercfg -duplicatescheme e9a42b02-d5df-448d-aa00-03f14749eb61

• Replace x with the GUID of the plan listed with the above command

powercfg -delete x

powercfg -delete 381b4222-f694-41f0-9685-ff5bb260df2e

• https://www.cpuid.com/softwares/cpu-z.html

• https://geeks3d.com/furmark/downloads/

• https://www.techpowerup.com/download/techpowerup-gpu-z/

• https://www.cpuid.com/softwares/hwmonitor.html

• https://downloadcenter.intel.com/download/19792
• Intel Processor Diagnostic Tool

• https://www.mersenne.org/download/

• https://github.com/mcmilk/7-Zip-zstd/

• https://dl-ssl.google.com/android/repository/latest_usb_driver_windows.zip

• https://dl-ssl.google.com/android/repository/platform-tools-latest-windows.zip

SETX /M path "%path%;C:\Program Files\platform-tools"

• https://github.com/aria2/aria2/releases

SETX /M path "%path%;C:\Program Files\aria2c"

• https://www.bleachbit.org/download/windows

• Only available on LTSB/LTSC

win32calc

• https://www.microsoft.com/en-us/download/confirmation.aspx?id=8109

• https://filezilla-project.org/download.php?show_all=1

• exe
• MSI

rd "%appdata%\Mozilla" /s /q

md "%appdata%\Mozilla\Firefox\Profiles\espionage724"

notepad "%appdata%\Mozilla\Firefox\profiles.ini"

[General]
StartWithLastProfile=1

[Profile0]
Name=default
IsRelative=1
Path=Profiles/espionage724
Default=1

• Last updated: 2020/07/14
• Remove VPN section if not using a VPN

notepad "%appdata%\Mozilla\Firefox\Profiles\espionage724\user.js"

/***********
 * General *
 ***********/

user_pref("extensions.screenshots.disabled", true);
user_pref("reader.parse-on-load.enabled", false);

user_pref("media.mediasource.experimental.enabled", true);
user_pref("media.mediasource.ignore_codecs", true);
user_pref("media.autoplay.enabled", false);
user_pref("media.av1.enabled", false);
user_pref("media.hardware-video-decoding.force-enabled", true);
user_pref("widget.wayland-dmabuf-vaapi.enabled", true);

user_pref("webgl.disabled", true);
user_pref("webgl.enable-webgl2", false);
user_pref("accessibility.force_disabled", 1);
user_pref("mousewheel.min_line_scroll_amount", 40);
user_pref("browser.tabs.drawInTitlebar", true);
user_pref("network.standard-url.escape-utf8", false);

/***********
 * Privacy *
 ***********/

user_pref("security.tls.version.min", 2);
user_pref("security.ssl.require_safe_negotiation", true);
user_pref("security.ssl.treat_unsafe_negotiation_as_broken", true);
user_pref("security.OCSP.require", true);
user_pref("security.cert_pinning.enforcement_level", 2);
user_pref("security.ssl3.rsa_des_ede3_sha", false);
user_pref("security.ssl.enable_false_start", false);

user_pref("geo.enabled", false);
user_pref("network.http.sendRefererHeader", false);
user_pref("privacy.donottrackheader.enabled", true);

user_pref("browser.safebrowsing.malware.enabled", false);
user_pref("browser.safebrowsing.phishing.enabled", false);
user_pref("browser.safebrowsing.downloads.enabled", false);

user_pref("network.security.esni.enabled", true);

user_pref("privacy.resistFingerprinting", true);
user_pref("privacy.trackingprotection.enabled", true);
user_pref("toolkit.telemetry.enabled", false);

/*******
 * U2F *
 *******/

user_pref("security.webauth.u2f", true);

/**********
 * Tweaks *
 **********/

user_pref("browser.cache.disk.enable", false);
user_pref("browser.cache.memory.enable", true);
user_pref("browser.cache.memory.enable", true);

/*******
 * VPN *
 *******/

user_pref("network.dns.disableIPv6", true);
user_pref("media.peerconnection.enabled", false);

/*******
 * END *
 *******/

• Firefox must be started for the first time with the -p flag for the profile above to be used

"%ProgramFiles%\Mozilla Firefox\firefox.exe" -p default

rd "%ProgramFiles%\Mozilla Firefox\browser\features" /s /q

• Decentraleyes
• HTTPS Everywhere
• Privacy Possum
• Cookie AutoDelete
• uBlock Origin

• https://addons.mozilla.org/en-US/firefox/addon/decentraleyes/versions
• https://www.eff.org/https-everywhere
• https://addons.mozilla.org/en-US/firefox/addon/privacy-possum/versions
• https://addons.mozilla.org/en-US/firefox/addon/cookie-autodelete/versions
• https://addons.mozilla.org/en-US/firefox/addon/ublock-origin/versions

• [x] Enable Automatic Cleaning? Delay Before Cleaning
• [x] Enable Cleanup on Domain Change
• [ ] Enable Cleanup Log and Counter
• [ ] Show Notification After Cookie Cleanup
• [x] Clean Cookies from Open Tabs on Startup
• [x] Localstorage Cleanup (Firefox 58+)

• [x] Prevent WebRTC from leaking local IP addresses

• [ ] Ads → EasyList ⁴⁾
• [ ] Privacy → EasyPrivacy ⁵⁾

• Multipurpose → [x] Dan Pollock's hosts file
• Multipurpose → [x] hpHost's Ad and tracking servers
• Multipurpose → [x] MVPS HOSTS

• Custom → [x] Import

• Last updated: 2018/11/24

https://www.fanboy.co.nz/fanboy-problematic-sites.txt
https://www.fanboy.co.nz/r/fanboy-ultimate.txt
https://www.fanboy.co.nz/fanboy-antifacebook.txt
https://www.fanboy.co.nz/fanboy-antifonts.txt
https://www.fanboy.co.nz/fanboy-cookiemonster.txt
https://raw.githubusercontent.com/ryanbr/fanboy-adblock/master/popads-domains-list.txt
https://raw.githubusercontent.com/ryanbr/fanboy-adblock/master/fake-news.txt

• https://www.youtube.com/html5
• https://ipx.ac
• https://decentraleyes.org/test/
• https://panopticlick.eff.org/
• https://browserleaks.com/
• https://speedof.me/
• https://www.cloudflare.com/ssl/encrypted-sni/
• https://1.1.1.1/help

• https://www.gimp.org/downloads

• https://www.google.com/chrome/?standalone=1&platform=win64

• https://www.apple.com/itunes/download/win64

• https://keepassxc.org/download#windows

• https://prerelease.keybase.io/keybase_setup_amd64.msi

• https://github.com/abbodi1406/KMS_VL_ALL_AIO/releases
• https://forums.mydigitallife.net/threads/kms_vl_all-smart-activation-script.79535/

• https://www.libreoffice.org/download/download/

• https://donewmouseaccel.blogspot.com/2010/03/markc-windows-7-mouse-acceleration-fix.html

• https://sourceforge.net/projects/mpv-player-windows/files/64bit/
• https://mpv.io/

• https://notepad-plus-plus.org/download

• https://obsproject.com/download

• https://www.oculus.com/rift/setup/?locale=en_US

• Let Oculus download its 5.15GB installer
• While it is installing, backup the C:\OculusSetup-DownloadCache folder
• If restoring, copy C:\OculusSetup-DownloadCache and start the Oculus installer
• If an updated Oculus client is available, it will download instead of restoring

• https://developer.oculus.com/documentation/native/pc/dg-compositor-mirror/?locale=en_US

--Size 1280 1280 --FovTanAngleMultiplier 1.3 1.3 --DisableTimewarp --SymmetricFov --RightEyeOnly --DisableFovStencil --IncludeSystemGui --IncludeNotifications

• https://rufus.ie/

• https://www.thunderbird.net/en-US/thunderbird/all/#E

• There is a 64-bit version of Thunderbird for Windows

• https://transmissionbt.com/download/

http://john.bitsurge.net/public/biglist.p2p.gz

• https://github.com/abbodi1406/vcredist/releases
• https://forums.mydigitallife.net/threads/repack-visual-c-redistributable-runtimes.76588/

• https://vulkan.lunarg.com/sdk/home#windows
• https://vulkan.lunarg.com/sdk/home#sdk/downloadConfirm/latest/windows/vulkan-runtime.exe

• If kill switch is enabled, all local network resources can't be accessed

• https://www.wireguard.com/install/

• https://vpn.ac/knowledgebase/130/WireGuard-on-Windows.html
• https://vpn.ac/wgmanager

• http://dist.blizzard.com/downloads/bna-installers/322d5bb9ae0318de3d4cde7641c96425/retail.1/Battle.net-Setup-enUS.exe

• https://www.pathofexile.com/downloads/PathOfExileInstaller.exe

• https://steamcdn-a.akamaihd.net/client/installer/SteamSetup.exe
• See Command-line flags

• http://www.svenswrapper.de/english/downloads.html

• https://account.arena.net/content/download/gw2/win/64

• Acer Predator PH315-51

• Intel Corporation Wireless-AC 9560 [Jefferson Peak] (rev 10)
• Intel(R) Wireless-AC 9560 160MHz

• Intel Official
• Station-Drivers

• Intel Official
• Station-Drivers

• Realtek Semiconductor Co., Ltd. RTL8111/8168/8411 PCI Express Gigabit Ethernet Controller (rev 12)
• Realtek PCIe GbE Family Controller

• Realtek Official
• Station-Drivers

• Intel Corporation UHD Graphics 630 (Mobile)
• Intel(R) UHD Graphics 630

• Intel Official
• LaptopVideo2Go Forums

• Control panel randomly downloads at some point

• NVIDIA Corporation GP106M [GeForce GTX 1060 Mobile] (rev a1)
• NVIDIA GeForce GTX 1060

• NVIDIA Corporation GP106 High Definition Audio Controller (rev a1)

• CHEF-KOCH/nVidia-modded-Inf GitHub
• cryohellinc Clean Version guru3D
• NVIDIA Official

• Remove the dch part from the driver URL in order to download the standard driver
• Example URLs: 441.87 DCH and 441.87 Standard

• Keep the following folders/files and remove everything else:

• Display.Driver
• Display.Optimus
• GFExperience
• HDAudio
• NVI2
• EULA.txt
• ListDevices.txt
• setup.cfg
• setup.exe

• Create a NVIDIA Silent.cmd in the root NVIDIA driver directory with the following contents:

setup.exe -s Display.Driver

• Intel Corporation Cannon Lake PCH

• Intel Official
• Station-Drivers

• Intel Corporation Cannon Lake PCH Serial IO I2C Controller #0 (rev 10)
• Intel(R) Serial IO I2C Host Controller - A368

• Intel Corporation Cannon Lake PCH Serial IO I2C Controller #1 (rev 10)
• Intel(R) Serial IO I2C Host Controller - A369

• Intel Corporation Cannon Lake PCH Serial IO UART Host Controller (rev 10)
• Intel(R) Serial IO UART Host Controller - A328

• Station-Drivers

• The latest version is tricky to get from Station-Drivers since some work and others don't ID match
• Latest known good: 30.100.1947.3
• Not compatible: 30.100.1932.6, 30.100.1916.1

• Intel Corporation Cannon Lake PCH cAVS (rev 10)
• Realtek High Definition Audio

• ALC255

• Windows 10 Forums
• Microsoft Update Catalog

• FF00 is wanted if given a choice since it's Generic

• Intel Corporation SSD Pro 7600p/760p/E 6100p Series
• Intel(R) NVMe Controller

• Station-Drivers
• Win-Raid Forum

• The RST driver package provides the driver for both the SATA controller and NVMe drive, regardless of the NVMe drive being port-remapped or not

• Intel Corporation SSD Pro 7600p/760p/E 6100p Series

• Intel Official
• Win-Raid Forum

• If RST is disabled, use the Intel Official driver for the NVMe drive, and use the AHCI driver provided from Win-Raid Forum for the SATA controller

• Realtek Semiconductor Co., Ltd. RTL8411B PCI Express Card Reader (rev 01)
• Realtek PCIE CardReader

• Station-Drivers

• Corsair Gaming HARPOON RGB Mouse

• CORSAIR Official

• ELAN0504:01 04F3:3091 Touchpad
• ELAN I2C Filter Driver

• Acer

• The I2C driver doesn't exist on Station-Drivers

• http://www.dell.com/support/home/us/en/04/product-support/product/inspiron-17-5767-laptop/drivers

• Dell Inspiron 17 5767

• http://support.amd.com/en-us/download/mobile?os=Windows+10+-+64

• Intel Corporation Cannon Lake PCH HECI Controller (rev 10)

• Win-Raid Forum
• Intel Official

• https://www.realtek.com/en/component/zoo/category/network-interface-controllers-10-100m-fast-ethernet-pci-express-software

• https://forums.laptopvideo2go.com/forum/174-intel-video-drivers-and-tools
• https://downloadcenter.intel.com/download/28289

• https://downloadcenter.intel.com/download/28310

• http://www.win-raid.com/t596f39-Intel-Management-Engine-Drivers-Firmware-amp-System-Tools.html
• https://downloadcenter.intel.com/download/28083

• Intel MEI

• http://www.win-raid.com/t2f23-Intel-RST-RSTe-Drivers-newest-v-WHQL-v-WHQL.html
• https://downloadcenter.intel.com/download/28255

• Intel RST

• https://downloadcenter.intel.com/download/28276

• https://downloadcenter.intel.com/download/28009

• https://support.amd.com/en-us/download/desktop/legacy?product=legacy3&os=Windows+10+-+64

aria2c "https://www2.ati.com/drivers/beta/non-whql-win10-64bit-radeon-software-crimson-relive-16.2.1-sep20.exe" --referer="https://www2.ati.com"

• https://support.amd.com/en-us/download/chipset?os=Windows+10+-+64

aria2c "https://www2.ati.com/drivers/amd-chipset-drivers.exe" --referer="https://www2.ati.com"