Next revision | Previous revision |
windows:11_ltsc [2024/10/03 20:01] – created Sean Rhone | windows:11_ltsc [2025/01/29 23:23] (current) – Sean Rhone |
---|
====== Information ====== | ====== Information ====== |
| |
* Microsoft Windows 11 LTSC | * Microsoft Windows 11 IoT Enterprise LTSC |
* :!: TODO: Everything | * Version 24H2 (OS Build 26100.2605) |
| |
* [[https://learn.microsoft.com/en-us/windows/release-health/release-information|Windows 10 release information]] | ====== TODOs ====== |
| |
====== Resources ====== | * :!: 2025/01/06: Use [[windows;10]] |
| |
* https://superuser.com/questions/217504/is-there-a-list-of-windows-special-directories-shortcuts-like-temp/217506#217506 | ===== No-gos ===== |
| |
====== Download ====== | * :?: 2025/01/13: Windows Defender Real-time scanning //might// be disabled through GUI GPE ((process not noticed; says off in Security Center and admin-controlled)) |
| |
===== LTSC ===== | ====== Downloads ====== |
| |
* [[https://forums.mydigitallife.net/threads/discussion-windows-10-enterprise-iot-enterprise-n-ltsc-2021.84509|LTSC 2021]] | ===== ISO ===== |
* IoT Enterprise LTSC has the longest support date of 2032-01-13 and works well | |
| |
* [[https://www.catalog.update.microsoft.com/Search.aspx?q=Cumulative+Update+for+Windows+10+Version+21H2+for+x64-based+Systems|Windows 10 21H2 Cumulative Updates - Microsoft Update Catalog]] | * SHA256 |
* :!: [[https://www.catalog.update.microsoft.com/Search.aspx?q=KB5014032|KB5014032]] 2022-05 SSU is required before the latest CU | |
| |
===== 10 ===== | en-us_windows_11_iot_enterprise_ltsc_2024_x64_dvd_f6b14814.iso |
| |
* To show ISO downloads on Windows 10 from Firefox: Tools -> Browser Tools -> Responsive Design Mode | 4f59662a96fc1da48c1b415d6c369d08af55ddd64e8f1c84e0166d9e50405d7a |
| |
* [[https://www.microsoft.com/en-us/software-download/windows10ISO|Windows 10]] | ===== Updates ===== |
| |
====== Settings ====== | * [[https://www.catalog.update.microsoft.com/Search.aspx?q=Cumulative+Update+for+Windows+11+Version+24H2+for+x64-based+Systems|Windows 11 24H2 Cumulative Updates - Microsoft Update Catalog]] |
| |
===== Nagle's Algorithm ===== | |
| |
* https://gigperformer.com/docs/ultimate-guide-to-optimize-windows-for-stage/naglesalgorithm.html | |
* https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/registry-entry-control-tcp-acknowledgment-behavior | |
* TODO | |
| |
===== Disable Clipboard History ===== | |
| |
**** | |
| |
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\System" /v "AllowClipboardHistory" /t REG_DWORD /d "0" /f | |
| |
===== Disable Cortana and Web Search ===== | |
| |
**** | |
| |
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /v "AllowCortana" /t REG_DWORD /d "0" /f | |
| |
===== Disable CPU Mitigations ===== | |
| |
* https://support.microsoft.com/en-us/help/4073119/protect-against-speculative-execution-side-channel-vulnerabilities-in | |
* https://www.grc.com/inspectre.htm | |
| |
reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v "FeatureSettingsOverride" /t "REG_DWORD" /d "3" /f | |
| |
reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v "FeatureSettingsOverrideMask" /t "REG_DWORD" /d "3" /f | |
| |
===== Disable Game DVR ===== | |
| |
**** | |
| |
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\GameDVR" /v "AllowgameDVR" /t "REG_DWORD" /d "0" /f | |
| |
===== Disable Hibernation and Fast Start ===== | |
| |
**** | |
| |
powercfg /H off | |
| |
===== Disable Last Access Time File Updates ===== | |
| |
**** | |
| |
fsutil behavior set disablelastaccess 1 | |
| |
===== Disable Online Speech Recognition ===== | |
| |
**** | |
| |
reg add "HKLM\SOFTWARE\Policies\Microsoft\InputPersonalization" /v "AllowInputPersonalization" /t REG_DWORD /d "0" /f | |
| |
===== Open Pictures With Windows Photo Viewer ===== | |
| |
reg add "HKCU\Software\Classes\.jpg" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f | |
| |
reg add "HKCU\Software\Classes\.jpeg" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f | |
| |
reg add "HKCU\Software\Classes\.gif" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f | |
| |
reg add "HKCU\Software\Classes\.png" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f | |
| |
reg add "HKCU\Software\Classes\.bmp" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f | |
| |
reg add "HKCU\Software\Classes\.tiff" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f | |
| |
reg add "HKCU\Software\Classes\.ico" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f | |
| |
===== Disable Remote Desktop ===== | |
| |
**** | |
| |
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" /v "fDenyTSConnections" /t REG_DWORD /d "1" /f | |
| |
===== Disable Shared Experiences ===== | |
| |
**** | |
| |
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\System" /v "EnableCdp" /t REG_DWORD /d "0" /f | |
| |
===== Disable SmartScreen ===== | |
| |
* General | |
* Windows Store Apps | |
* Microsoft Edge | |
| |
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer" /v "SmartScreenEnabled" /t "REG_SZ" /d "Off" /f | |
| |
reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\AppHost" /v "EnableWebContentEvaluation" /t "REG_DWORD" /d "0" /f | |
| |
reg add "HKLM\SOFTWARE\Policies\Microsoft\MicrosoftEdge\PhishingFilter" /v "EnabledV9" /t "REG_DWORD" /d "0" /f | |
| |
===== Disable Startup Delay ===== | |
| |
**** | |
| |
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Serialize" /v "StartupDelayInMSec" /t "REG_DWORD" /d "0" /f | |
| |
===== Disable System Restore ===== | |
| |
**** | |
| |
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore" /v "DisableSR " /t "REG_DWORD" /d "1" /f | |
| |
===== Disable Telemetry Features ===== | |
| |
**** | |
| |
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DataCollection" /v "AllowTelemetry" /t "REG_DWORD" /d "0" /f | |
| |
===== Disable User Account Control ===== | |
| |
**** | |
| |
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableLUA" /t "REG_DWORD" /d "0" /f | |
| |
===== Disable Windows Defender ===== | |
| |
**** | |
| |
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender" /v "DisableAntiSpyware" /t "REG_DWORD" /d "1" /f | |
| |
===== Remove Quick Access ===== | |
| |
**** | |
| |
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer" /v "HubMode" /t "REG_DWORD" /d "1" /f | |
| |
===== Remove Windows Search ===== | |
| |
**** | |
| |
Dism /online /Disable-Feature /FeatureName:"SearchEngine-Client-Package" /Remove | |
| |
===== Show All Folders in File Explorer Pane ===== | |
| |
**** | |
| |
reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "NavPaneShowAllFolders" /t "REG_DWORD" /d "1" /f | |
| |
===== Verbose Shutdown ===== | |
| |
**** | |
| |
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v "VerboseStatus" /t REG_DWORD /d "1" /f | |
| |
====== Other ====== | |
| |
===== ScriptTiger Hosts File ===== | |
| |
* https://scripttiger.github.io/hosts-packages/ | |
| |
* Powershell Script ''*.ps1'' | |
| |
<code> | |
if (!([Security.Principal.WindowsPrincipal][Security.Principal.WindowsIdentity]::GetCurrent()).IsInRole([Security.Principal.WindowsBuiltInRole] "Administrator")) { Start-Process powershell.exe "-NoProfile -ExecutionPolicy Bypass -File `"$PSCommandPath`"" -Verb RunAs; exit } | |
[Net.ServicePointManager]::SecurityProtocol = "tls12, tls11, tls" | |
| |
# https://scripttiger.github.io/alts/ | |
# Compressed | |
| |
# Unified hosts + fakenews + gambling + porn + social | |
Invoke-WebRequest "https://scripttiger.github.io/alts/compressed/blacklist-fgps.txt" -OutFile "C:\Windows\System32\drivers\etc\hosts" | |
| |
# Unified hosts + fakenews + gambling + social | |
#Invoke-WebRequest "https://scripttiger.github.io/alts/compressed/blacklist-fgs.txt" -OutFile "C:\Windows\System32\drivers\etc\hosts" | |
| |
# Unified hosts + fakenews + gambling | |
#Invoke-WebRequest "https://scripttiger.github.io/alts/compressed/blacklist-fg.txt" -OutFile "C:\Windows\System32\drivers\etc\hosts" | |
| |
ipconfig /flushdns | |
</code> | |
| |
===== NetFX3 From Install Media ===== | |
| |
* Change ''D:\'' to install media drive if necessary | |
| |
Dism /online /enable-feature /featurename:"NetFX3" /All /Source:"D:\sources\sxs" /LimitAccess | |
| |
===== Remove Most Modern UI Apps ===== | |
| |
* Not necessary with Local Account log-ins and Pro/Enterprise/LTSC editions | |
* Tested fine on 20H2, 21H2, and 23H2 | |
* :!: This broke the start menu on 1809 | |
* :!: 2024/08: May cause Explorer windows to act broken at times on 11 23H2 | |
| |
* Powershell Script ''*.ps1'' | |
| |
Get-AppxPackage -allusers | Remove-AppxPackage | |
| |
===== Remove OneDrive ===== | |
| |
taskkill /IM "OneDrive.exe" /F | |
| |
%windir%\SysWOW64\OneDriveSetup.exe /uninstall | |
| |
rmdir "%UserProfile%\OneDrive" "%ProgramData%\Microsoft OneDrive" "%LocalAppData%\Microsoft\OneDrive" "C:\OneDriveTemp" /S /Q | |
| |
reg delete "HKCR\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}" /f | |
| |
reg delete "HKCR\Wow6432Node\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}" /f | |
| |
===== Maintenance ===== | |
| |
* Last updated: 2020/10/02 | |
| |
<code> | |
:: .NET Framework 4 | |
"%windir%\microsoft.net\Framework\v4.0.30319\ngen.exe" update /force /queue | |
"%windir%\microsoft.net\Framework64\v4.0.30319\ngen.exe" update /force /queue | |
"%windir%\microsoft.net\Framework\v4.0.30319\ngen.exe" executequeueditems | |
"%windir%\microsoft.net\Framework64\v4.0.30319\ngen.exe" executequeueditems | |
| |
:: System File Check, Cleanup, and Repair | |
"%windir%\system32\Dism.exe" /online /Cleanup-Image /StartComponentCleanup /ResetBase /RestoreHealth | |
"%windir%\system32\sfc.exe" /scannow | |
| |
:: Classic Disk Cleanup | |
"%windir%\system32\cleanmgr.exe" /sageset:65535 | |
"%windir%\system32\cleanmgr.exe" /sagerun:65535 | |
| |
:: Defrag/Trim | |
"%windir%\system32\dfrgui.exe"</code> | |
| |
====== Information ====== | |
| |
===== Prevent Driver Changes ===== | |
| |
==== Notes ==== | |
| |
* To be done after a proper driver is manually installed | |
* This ensures Windows Update nor anything else can replace installed drivers for specific devices unattended | |
* Additional entries need to add a new number (the value after ''/v'') | |
* The device ID can be acquired from Device Manager and should be pasted as-is (no extra slashes) | |
| |
==== Base Policies ==== | |
| |
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions" /v "DenyDeviceIDs" /t "REG_DWORD" /d "1" /f | |
| |
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions" /v "DenyDeviceIDsRetroactive" /t "REG_DWORD" /d "0" /f | |
| |
==== Format ==== | |
| |
* Do **not** copy/paste these as-is; only here for reference | |
* Adjust to specific devices as-needed | |
| |
==== Add Prevent Policy ==== | |
| |
**** | |
| |
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceIDs" /v "#" /t "REG_SZ" /d "PCI\VEN_XXXX&DEV_XXXX&SUBSYS_XXXXXXXX&REV_XX" /f | |
| |
==== Remove Prevent Policy ==== | |
| |
**** | |
| |
reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceIDs" /v "#" /f | |
| |
====== Programs ====== | |
| |
* [[windows:programs|More Programs]] | |
| |
===== 7-Zip ===== | |
| |
* https://www.7-zip.org/download.html | |
| |
===== Android Tools ===== | |
| |
* [[https://dl-ssl.google.com/android/repository/latest_usb_driver_windows.zip|Latest USB Driver]] | |
* [[https://dl-ssl.google.com/android/repository/platform-tools-latest-windows.zip|Latest platform-tools]] | |
* :!: [[https://dl.google.com/android/repository/platform-tools_r30.0.5-windows.zip|30.0.5 platform-tools]] ((this specific version was needed to workaround a ''fastboot'' error that only happened on the latest version)) | |
| |
SETX /M path "%path%;C:\Program Files\platform-tools" | |
| |
===== aria2 ===== | |
| |
* https://github.com/aria2/aria2/releases | |
| |
SETX /M path "%path%;C:\Program Files\aria2c" | |
| |
===== Brain Workshop ===== | |
| |
* https://sourceforge.net/projects/brainworkshop/files/brainworkshop/ | |
| |
===== Calculator ===== | |
| |
* Only available on LTSB/LTSC | |
| |
win32calc | |
| |
===== DirectX End-User Runtime ===== | |
| |
* https://www.microsoft.com/en-us/download/confirmation.aspx?id=8109 | |
| |
===== Firefox ===== | |
| |
* [[https://download.mozilla.org/?product=firefox-latest-ssl&os=win64&lang=en-US|exe]] | |
| |
===== GIMP ===== | |
| |
* https://www.gimp.org/downloads | |
| |
===== KeePassXC ===== | |
| |
* https://keepassxc.org/download#windows | |
| |
===== mpv ===== | |
| |
* https://sourceforge.net/projects/mpv-player-windows/files/64bit-v3/ | |
* https://mpv.io/ | |
| |
===== MuPDF ===== | |
| |
* https://mupdf.com/releases/index.html | |
* https://mupdf.com/releases/history.html | |
| |
===== Notepad++ ===== | |
| |
* https://notepad-plus-plus.org/download | |
| |
===== OBS ===== | |
| |
* https://obsproject.com/download | |
| |
===== qBittorrent ===== | |
| |
* https://www.qbittorrent.org/download | |
| |
===== VC++ Redist ===== | |
| |
* https://github.com/abbodi1406/vcredist/releases | |
| |
===== Vulkan Runtime ===== | |
| |
* https://vulkan.lunarg.com/sdk/home | |
* :!: If Intel Graphics drivers are installed first, requires dragging ''VulkanRT-#-Installer.exe'' onto [[https://github.com/jschicht/RunAsTI|RunAsTI64.exe]] | |
| |
====== Games ====== | |
| |
===== Battle.net App ===== | |
| |
* https://download.battle.net/en-us/?product=bnetdesk | |
| |
===== Steam ===== | |
| |
* https://steamcdn-a.akamaihd.net/client/installer/SteamSetup.exe | |
* See [[games;windows;notes;game_launch_flags|Game Launch Flags]] | |
| |
====== Drivers ====== | |
| |
* See [[windows:drivers|Drivers]] for more URLs | |
| |
===== Spinesnap ===== | |
| |
* [[https://www.dell.com/support/home/en-us/product-support/product/latitude-15-5591-laptop/drivers|Dell Latitude 5591 - Support and BIOS Updates]] | |
| |
==== Chipset ==== | |
| |
* Intel(R) Core(TM) i5-8400H CPU @ 2.50GHz | |
* TODO: Chipset name | |
| |
* [[https://rog.asus.com/forum/showthread.php?117609-DRIVERS-Intel-Chipset-MEI-SATA-VMD-(1xx-2xx-3xx-4xx-5xx-6xx-7xx)|ASUS ROG Forums]] (AHCI 2xx/3xx) | |
* [[https://www.elevenforum.com/t/drivers-intel-chipset-mei-sata-vmd-1xx-2xx-3xx-4xx-5xx-6xx-7xx.11373/|Windows 11 Forum]] (AHCI 2xx/3xx) | |
| |
==== SATA/RST ==== | |
| |
* [[https://www.intel.com/content/www/us/en/download/19755/intel-rapid-storage-technology-driver-installation-software-with-intel-optane-memory-8th-and-9th-gen-platforms.html|Intel Download Center]] ((Intel recommends extracting drivers (''f6vmdflpy-x64.zip'') from the exe in the [[https://downloadmirror.intel.com/773230/Release_Notes_17_11_3_1010_2_EndUser.pdf|17.11.3.1010.2 Release Notes]])) | |
* [[https://rog.asus.com/forum/showthread.php?117609-DRIVERS-Intel-Chipset-MEI-SATA-VMD-(1xx-2xx-3xx-4xx-5xx-6xx-7xx)|ASUS ROG Forums]] (AHCI 2xx/3xx) | |
* [[https://www.elevenforum.com/t/drivers-intel-chipset-mei-sata-vmd-1xx-2xx-3xx-4xx-5xx-6xx-7xx.11373/|Windows 11 Forum]] (AHCI 2xx/3xx) | |
| |
==== SerialIO ==== | |
| |
* Intel Corporation Cannon Lake PCH Serial IO I2C Controller #0 and #1 (rev 10) | |
* TODO: Chipset name | |
| |
* :?: At some point on the links below the ''3xx'' mention was removed, but ''4xx'' is the same ''30.100.2132.2'' version | |
* [[https://rog.asus.com/forum/showthread.php?125235-DRIVERS-Intel-Serial-IO-(3xx-4xx-5xx-6xx-7xx)|ASUS ROG Forums]] (3xx/4xx) | |
* [[https://www.elevenforum.com/t/drivers-intel-serial-io-3xx-4xx-5xx-6xx-7xx.11375/|Windows 11 Forum]] (3xx/4xx) | |
| |
==== Ethernet ==== | |
| |
* I219-LM Gigabit | |
* :!: Intel Corporation Ethernet Connection (7) I219-LM (rev 10) ((rev 10 drivers, not rev 18+)) | |
| |
* [[https://www.intel.com/content/www/us/en/products/sku/82185/intel-ethernet-connection-i219lm/downloads.html|Intel Download Center]] ((2024/09/10: The latest version is ''29.3.1'' provided in the Complete Driver Pack, and is 800MB+)) | |
* [[https://rog.asus.com/forum/showthread.php?118280-DRIVERS-Intel-Ethernet-WiFi-Bluetooth|ASUS ROG Forums]] (I217/I218/I219) | |
* [[https://www.elevenforum.com/t/drivers-intel-ethernet-wifi-bluetooth.11383/|Windows 11 Forum]] (I217/I218/I219) | |
| |
==== Wireless + Bluetooth ==== | |
| |
* wireless-AC 9560 | |
* Intel Corporation Cannon Lake PCH CNVi WiFi (rev 10) | |
| |
* [[https://www.intel.com/content/www/us/en/products/sku/99446/intel-wirelessac-9560/downloads.html|Intel Download Center]] (IT Administrators 8-)) | |
* [[https://rog.asus.com/forum/showthread.php?118280-DRIVERS-Intel-Ethernet-WiFi-Bluetooth|ASUS ROG Forums]] (8xxx/9xxx/AXxxx) | |
* [[https://www.elevenforum.com/t/drivers-intel-ethernet-wifi-bluetooth.11383/|Windows 11 Forum]] (8xxx/9xxx/AXxxx) | |
| |
==== Graphics ==== | |
| |
* Intel UHD Graphics 630 | |
* Intel Corporation CoffeeLake-H GT2 [UHD Graphics 630] | |
| |
* [[https://www.intel.com/content/www/us/en/support/products/126790/graphics/intel-uhd-graphics-family/intel-uhd-graphics-630.html#drivers-software|Intel Download Center]] | |
* [[https://forums.laptopvideo2go.com/forum/174-intel-video-drivers-and-tools/|LaptopVideo2Go]] | |
| |