Differences

This shows you the differences between two versions of the page.

--- windows:11_ltsc [2024/10/10 16:54] – Sean Rhone
+++ windows:11_ltsc [2025/06/27 18:44] (current) – [Information] 26100.4484 Sean Rhone
@@ Line 1: / Line 1: @@
 ====== Information ======
-  * Microsoft Windows 11 LTSC 24H2
+  * Microsoft Windows 11 IoT Enterprise LTSC
+  * Version 24H2 (OS Build 26100.4484)
-====== Resources ======
+  * TODO: More info on [[windows;10|Windows 10]]
-  * https://superuser.com/questions/217504/is-there-a-list-of-windows-special-directories-shortcuts-like-temp/217506#217506
+====== Updates ======
-====== Downloads ======
+  * [[https://www.catalog.update.microsoft.com/Search.aspx?q=Cumulative+Update+for+Windows+11+Version+24H2+for+x64-based+Systems|Windows 11 24H2 Cumulative Updates - Microsoft Update Catalog]]
-===== Updates =====
+====== Shortcuts ======
-  * https://www.catalog.update.microsoft.com/Search.aspx?q=Cumulative+Update+for+Windows+11+Version+24H2+for+x64-based+Systems
+===== Desktop =====
-===== LTSC =====
+==== Maintenance ====
-****
+  "notepad.exe" "%UserProfile%\Desktop\Maintenance.bat"
-  en-us_windows_11_iot_enterprise_ltsc_2024_x64_dvd_f6b14814.iso
+<code>
+:: .NET Framework 4
+"%SystemRoot%\Microsoft.NET\Framework\v4.0.30319\ngen.exe" update /force /queue
+"%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\ngen.exe" update /force /queue
+"%SystemRoot%\Microsoft.NET\Framework\v4.0.30319\ngen.exe" executequeueditems
+"%SystemRoot%\Microsoft.NET\Framework64\v4.0.30319\ngen.exe" executequeueditems
-====== Settings ======
+:: System File Check, Cleanup, and Repair
+"%SystemRoot%\System32\Dism.exe" /online /Cleanup-Image /StartComponentCleanup /ResetBase /RestoreHealth
+"%SystemRoot%\System32\sfc.exe" /scannow
-===== Nagle's Algorithm =====
+:: Classic Disk Cleanup
+"%SystemRoot%\System32\cleanmgr.exe" /sageset:65535
+"%SystemRoot%\System32\cleanmgr.exe" /sagerun:65535
-  * https://gigperformer.com/docs/ultimate-guide-to-optimize-windows-for-stage/naglesalgorithm.html
+:: Volume Shadow Copy
-  * https://learn.microsoft.com/en-us/troubleshoot/windows-server/networking/registry-entry-control-tcp-acknowledgment-behavior
+"%SystemRoot%\System32\vssadmin.exe" Delete Shadows /All
-  * TODO
-===== Disable Clipboard History =====
+:: Defrag/Trim
+"%SystemRoot%\System32\Defrag.exe" /AllVolumes /Defrag /TierOptimize /SlabConsolidate /Retrim /Optimize /PrintProgress /Verbose /NormalPriority
-****
+PAUSE
-  reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\System" /v "AllowClipboardHistory" /t REG_DWORD /d "0" /f
+:: End</code>
-===== Disable Cortana and Web Search =====
+====== Settings ======
-****
+===== Classic Context Menu =====
-  reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /v "AllowCortana" /t REG_DWORD /d "0" /f
-===== Disable CPU Mitigations =====
-  * https://support.microsoft.com/en-us/help/4073119/protect-against-speculative-execution-side-channel-vulnerabilities-in
-  * https://www.grc.com/inspectre.htm
-  reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v "FeatureSettingsOverride" /t "REG_DWORD" /d "3" /f
-  reg add "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v "FeatureSettingsOverrideMask" /t "REG_DWORD" /d "3" /f
-===== Disable Game DVR =====
 ****
-  reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\GameDVR" /v "AllowgameDVR" /t "REG_DWORD" /d "0" /f
+  REG ADD "HKEY_CURRENT_USER\Software\Classes\CLSID\{86ca1aa0-34aa-4e8b-a509-50c905bae2a2}\InprocServer32" /ve /t "REG_SZ" /f
-===== Disable Hibernation and Fast Start =====
+===== Enable FIPS Mode =====
-****
+  * https://learn.microsoft.com/en-us/windows/security/security-foundations/certification/fips-140-validation
-  powercfg /H off
+  REG ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy" /v "Enabled" /t "REG_DWORD" /d "1" /f
-===== Disable Last Access Time File Updates =====
-****
-  fsutil behavior set disablelastaccess 1
+  "powershell.exe" -Command "$md5 = New-Object -TypeName 'System.Security.Cryptography.MD5CryptoServiceProvider'"
-===== Disable Online Speech Recognition =====
+==== Disable ====
 ****
-  reg add "HKLM\SOFTWARE\Policies\Microsoft\InputPersonalization" /v "AllowInputPersonalization" /t REG_DWORD /d "0" /f
+  REG ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy" /v "Enabled" /t "REG_DWORD" /d "0" /f
-===== Open Pictures With Windows Photo Viewer =====
+====== Services ======
-  reg add "HKCU\Software\Classes\.jpg" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f
+  * TODO: Separate page, individual batches
-  reg add "HKCU\Software\Classes\.jpeg" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f
+  "sc.exe" stop "DPS" & "sc.exe" config "DPS" "start=disabled"
-  reg add "HKCU\Software\Classes\.gif" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f
+  "sc.exe" stop "SysMain" & "sc.exe" config "SysMain" "start=disabled"
-  reg add "HKCU\Software\Classes\.png" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f
+===== Alira =====
-  reg add "HKCU\Software\Classes\.bmp" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f
-  reg add "HKCU\Software\Classes\.tiff" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f
-  reg add "HKCU\Software\Classes\.ico" /ve /t "REG_SZ" /d "PhotoViewer.FileAssoc.Tiff" /f
-===== Disable Remote Desktop =====
-****
-  reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" /v "fDenyTSConnections" /t REG_DWORD /d "1" /f
-===== Disable Shared Experiences =====
-****
-  reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\System" /v "EnableCdp" /t REG_DWORD /d "0" /f
-===== Disable SmartScreen =====
-  * General
-  * Windows Store Apps
-  * Microsoft Edge
-  reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer" /v "SmartScreenEnabled" /t "REG_SZ" /d "Off" /f
-  reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\AppHost" /v "EnableWebContentEvaluation" /t "REG_DWORD" /d "0" /f
-  reg add "HKLM\SOFTWARE\Policies\Microsoft\MicrosoftEdge\PhishingFilter" /v "EnabledV9" /t "REG_DWORD" /d "0" /f
-===== Disable Startup Delay =====
-****
-  reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Serialize" /v "StartupDelayInMSec" /t "REG_DWORD" /d "0" /f
-===== Disable System Restore =====
-****
-  reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore" /v "DisableSR " /t "REG_DWORD" /d "1" /f
-===== Disable Telemetry Features =====
-****
-  reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DataCollection" /v "AllowTelemetry" /t "REG_DWORD" /d "0" /f
-===== Disable User Account Control =====
-****
-  reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableLUA" /t "REG_DWORD" /d "0" /f
-===== Disable Windows Defender =====
-****
-  reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender" /v "DisableAntiSpyware" /t "REG_DWORD" /d "1" /f
-===== Remove Quick Access =====
-****
-  reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer" /v "HubMode" /t "REG_DWORD" /d "1" /f
-===== Remove Windows Search =====
-****
-  Dism /online /Disable-Feature /FeatureName:"SearchEngine-Client-Package" /Remove
-===== Show All Folders in File Explorer Pane =====
-****
-  reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "NavPaneShowAllFolders" /t "REG_DWORD" /d "1" /f
-===== Verbose Shutdown =====
-****
-  reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v "VerboseStatus" /t REG_DWORD /d "1" /f
-====== Other ======
-===== ScriptTiger Hosts File =====
-  * https://scripttiger.github.io/hosts-packages/
-  * Powershell Script ''*.ps1''
-<code>
-if (!([Security.Principal.WindowsPrincipal][Security.Principal.WindowsIdentity]::GetCurrent()).IsInRole([Security.Principal.WindowsBuiltInRole] "Administrator")) { Start-Process powershell.exe "-NoProfile -ExecutionPolicy Bypass -File `"$PSCommandPath`"" -Verb RunAs; exit }
-[Net.ServicePointManager]::SecurityProtocol = "tls12, tls11, tls"
-# https://scripttiger.github.io/alts/
-# Compressed
-# Unified hosts + fakenews + gambling + porn + social
-Invoke-WebRequest "https://scripttiger.github.io/alts/compressed/blacklist-fgps.txt" -OutFile "C:\Windows\System32\drivers\etc\hosts"
-# Unified hosts + fakenews + gambling + social
-#Invoke-WebRequest "https://scripttiger.github.io/alts/compressed/blacklist-fgs.txt" -OutFile "C:\Windows\System32\drivers\etc\hosts"
-# Unified hosts + fakenews + gambling
-#Invoke-WebRequest "https://scripttiger.github.io/alts/compressed/blacklist-fg.txt" -OutFile "C:\Windows\System32\drivers\etc\hosts"
-ipconfig /flushdns
-</code>
-===== NetFX3 From Install Media =====
-  * Change ''D:\'' to install media drive if necessary
-  Dism /online /enable-feature /featurename:"NetFX3" /All /Source:"D:\sources\sxs" /LimitAccess
-===== Remove Most Modern UI Apps =====
-  * Not necessary with Local Account log-ins and Pro/Enterprise/LTSC editions
-  * Tested fine on 20H2, 21H2, and 23H2
-  * :!: This broke the start menu on 1809
-  * :!: 2024/08: May cause Explorer windows to act broken at times on 11 23H2
-  * Powershell Script ''*.ps1''
-  Get-AppxPackage -allusers | Remove-AppxPackage
-===== Remove OneDrive =====
-  taskkill /IM "OneDrive.exe" /F
-  %windir%\SysWOW64\OneDriveSetup.exe /uninstall
-  rmdir "%UserProfile%\OneDrive" "%ProgramData%\Microsoft OneDrive" "%LocalAppData%\Microsoft\OneDrive" "C:\OneDriveTemp" /S /Q
-  reg delete "HKCR\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}" /f
-  reg delete "HKCR\Wow6432Node\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}" /f
-===== Maintenance =====
-  * Last updated: 2020/10/02
-<code>
-:: .NET Framework 4
-"%windir%\microsoft.net\Framework\v4.0.30319\ngen.exe" update /force /queue
-"%windir%\microsoft.net\Framework64\v4.0.30319\ngen.exe" update /force /queue
-"%windir%\microsoft.net\Framework\v4.0.30319\ngen.exe" executequeueditems
-"%windir%\microsoft.net\Framework64\v4.0.30319\ngen.exe" executequeueditems
-:: System File Check, Cleanup, and Repair
-"%windir%\system32\Dism.exe" /online /Cleanup-Image /StartComponentCleanup /ResetBase /RestoreHealth
-"%windir%\system32\sfc.exe" /scannow
-:: Classic Disk Cleanup
-"%windir%\system32\cleanmgr.exe" /sageset:65535
-"%windir%\system32\cleanmgr.exe" /sagerun:65535
-:: Defrag/Trim
-"%windir%\system32\dfrgui.exe"</code>
-====== Information ======
-===== Prevent Driver Changes =====
-==== Notes ====
-  * To be done after a proper driver is manually installed
-  * This ensures Windows Update nor anything else can replace installed drivers for specific devices unattended
-  * Additional entries need to add a new number (the value after ''/v'')
-  * The device ID can be acquired from Device Manager and should be pasted as-is (no extra slashes)
-==== Base Policies ====
-  reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions" /v "DenyDeviceIDs" /t "REG_DWORD" /d "1" /f
-  reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions" /v "DenyDeviceIDsRetroactive" /t "REG_DWORD" /d "0" /f
-==== Format ====
-  * Do **not** copy/paste these as-is; only here for reference
-  * Adjust to specific devices as-needed
-==== Add Prevent Policy ====
-****
-  reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceIDs" /v "#" /t "REG_SZ" /d "PCI\VEN_XXXX&DEV_XXXX&SUBSYS_XXXXXXXX&REV_XX" /f
-==== Remove Prevent Policy ====
 ****
-  reg delete "HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceInstall\Restrictions\DenyDeviceIDs" /v "#" /f
+  "sc.exe" stop "AMD External Events Utility" & "sc.exe" config "AMD External Events Utility" "start=disabled"
 ====== Programs ======
@@ Line 288: / Line 89: @@
 ===== Android Tools =====
-  * [[https://dl-ssl.google.com/android/repository/latest_usb_driver_windows.zip|Latest USB Driver]]
+  * [[https://dl-ssl.google.com/android/repository/latest_usb_driver_windows.zip|Latest USB Driver zip]]
-  * [[https://dl-ssl.google.com/android/repository/platform-tools-latest-windows.zip|Latest platform-tools]]
+  * [[https://dl-ssl.google.com/android/repository/platform-tools-latest-windows.zip|Latest platform-tools zip]]
-  SETX /M path "%path%;C:\Program Files\platform-tools"
 ===== aria2 =====
   * https://github.com/aria2/aria2/releases
-  SETX /M path "%path%;C:\Program Files\aria2c"
 ===== Brain Workshop =====
   * https://sourceforge.net/projects/brainworkshop/files/brainworkshop/
-===== Calculator =====
-  * Only available on LTSB/LTSC
-  win32calc
 ===== DirectX End-User Runtime =====
@@ Line 316: / Line 107: @@
   * [[https://download.mozilla.org/?product=firefox-latest-ssl&os=win64&lang=en-US|exe]]
+  * [[programs;firefox|Settings]]
 ===== GIMP =====
@@ Line 329: / Line 121: @@
   * https://www.libreoffice.org/download/download/
-===== mpv =====
+  * Options -> Uncheck Use Skia (HW accel should be checked)
+  * Options -> Disable Java runtime environment
-  * https://sourceforge.net/projects/mpv-player-windows/files/64bit-v3/
+===== MSI Afterburner/RTSS =====
-  * https://mpv.io/
+  * [[https://www.guru3d.com/download/msi-afterburner-beta-download/|MSI Afterburner - Guru3D]] (4.6.5 Stable Final)
+  * [[https://www.guru3d.com/download/rtss-rivatuner-statistics-server-download/|Rivatuner Statistics Server - Guru3D]] (7.3.6 Final)
+  * TODO: AB monitoring needs specific info for GPU/CPU graph for screenshots
 ===== MuPDF =====
@@ Line 342: / Line 139: @@
   * https://notepad-plus-plus.org/download
-===== OBS =====
-  * https://obsproject.com/download
 ===== qBittorrent =====
   * https://www.qbittorrent.org/download
+  * https://github.com/waelisa/Best-blocklist/raw/main/wael.list.p2p.zip
 ===== Thunderbird =====
@@ Line 359: / Line 153: @@
   * https://github.com/abbodi1406/vcredist/releases
-===== Vulkan Runtime =====
+===== VLC media player =====
-  * https://vulkan.lunarg.com/sdk/home
+  * https://download.videolan.org/pub/videolan/vlc/last/win64/
-  * :!: May require requires dragging ''VulkanRT-#-Installer.exe'' onto [[https://github.com/jschicht/RunAsTI|RunAsTI64.exe]]
+  * https://www.videolan.org/vlc/download-windows.html
-  * :!: TODO: Test ''sudo''
 ====== Games ======
@@ Line 369: / Line 162: @@
 ===== Battle.net App =====
-  * https://download.battle.net/en-us/?product=bnetdesk
+  * https://downloader.battle.net/download/getInstaller?os=win&installer=Battle.net-Setup.exe
 ===== Steam =====
   * https://steamcdn-a.akamaihd.net/client/installer/SteamSetup.exe
-  * See [[games;windows;notes;game_launch_flags|Game Launch Flags]]
+  * [[games;windows;notes;game_launch_flags|Game Launch Flags]]
-====== Drivers ======
+==== Shortcut ====
-  * See [[windows:drivers|Drivers]] for more URLs
+  * Disable: Settings -> Interface -> Enable GPU accelerated rendering in web views
-===== Spinesnap =====
+  "%ProgramFiles(x86)%\Steam\steam.exe" -silent -nocrashmonitor -cef-single-process -cef-disable-breakpad
-  * [[https://www.dell.com/support/home/en-us/product-support/product/latitude-15-5591-laptop/drivers|Dell Latitude 5591 - Support and BIOS Updates]]
+  Steam (min)
-==== Chipset ====
+====== Drivers ======
-  * Intel(R) Core(TM) i5-8400H CPU @ 2.50GHz
+  * See [[windows:drivers|Drivers]] for more URLs
-  * TODO: Chipset name
-  * [[https://rog.asus.com/forum/showthread.php?117609-DRIVERS-Intel-Chipset-MEI-SATA-VMD-(1xx-2xx-3xx-4xx-5xx-6xx-7xx)|ASUS ROG Forums]] (AHCI 2xx/3xx)
-  * [[https://www.elevenforum.com/t/drivers-intel-chipset-mei-sata-vmd-1xx-2xx-3xx-4xx-5xx-6xx-7xx.11373/|Windows 11 Forum]] (AHCI 2xx/3xx)
-==== SATA/RST ====
-  * [[https://www.intel.com/content/www/us/en/download/19755/intel-rapid-storage-technology-driver-installation-software-with-intel-optane-memory-8th-and-9th-gen-platforms.html|Intel Download Center]] ((Intel recommends extracting drivers (''f6vmdflpy-x64.zip'') from the exe in the [[https://downloadmirror.intel.com/773230/Release_Notes_17_11_3_1010_2_EndUser.pdf|17.11.3.1010.2 Release Notes]]))
-  * [[https://rog.asus.com/forum/showthread.php?117609-DRIVERS-Intel-Chipset-MEI-SATA-VMD-(1xx-2xx-3xx-4xx-5xx-6xx-7xx)|ASUS ROG Forums]] (AHCI 2xx/3xx)
-  * [[https://www.elevenforum.com/t/drivers-intel-chipset-mei-sata-vmd-1xx-2xx-3xx-4xx-5xx-6xx-7xx.11373/|Windows 11 Forum]] (AHCI 2xx/3xx)
-==== SerialIO ====
-  * Intel Corporation Cannon Lake PCH Serial IO I2C Controller #0 and #1 (rev 10)
-  * TODO: Chipset name
-  * :?: At some point on the links below the ''3xx'' mention was removed, but ''4xx'' is the same ''30.100.2132.2'' version
-  * [[https://rog.asus.com/forum/showthread.php?125235-DRIVERS-Intel-Serial-IO-(3xx-4xx-5xx-6xx-7xx)|ASUS ROG Forums]] (3xx/4xx)
-  * [[https://www.elevenforum.com/t/drivers-intel-serial-io-3xx-4xx-5xx-6xx-7xx.11375/|Windows 11 Forum]] (3xx/4xx)
-==== Ethernet ====
-  * I219-LM Gigabit
-  * :!: Intel Corporation Ethernet Connection (7) I219-LM (rev 10) ((rev 10 drivers, not rev 18+))
-  * [[https://www.intel.com/content/www/us/en/products/sku/82185/intel-ethernet-connection-i219lm/downloads.html|Intel Download Center]] ((2024/09/10: The latest version is ''29.3.1'' provided in the Complete Driver Pack, and is 800MB+))
-  * [[https://rog.asus.com/forum/showthread.php?118280-DRIVERS-Intel-Ethernet-WiFi-Bluetooth|ASUS ROG Forums]] (I217/I218/I219)
-  * [[https://www.elevenforum.com/t/drivers-intel-ethernet-wifi-bluetooth.11383/|Windows 11 Forum]] (I217/I218/I219)
-==== Wireless + Bluetooth ====
-  * wireless-AC 9560
-  * Intel Corporation Cannon Lake PCH CNVi WiFi (rev 10)
-  * [[https://www.intel.com/content/www/us/en/products/sku/99446/intel-wirelessac-9560/downloads.html|Intel Download Center]] (IT Administrators 8-))
-  * [[https://rog.asus.com/forum/showthread.php?118280-DRIVERS-Intel-Ethernet-WiFi-Bluetooth|ASUS ROG Forums]] (8xxx/9xxx/AXxxx)
-  * [[https://www.elevenforum.com/t/drivers-intel-ethernet-wifi-bluetooth.11383/|Windows 11 Forum]] (8xxx/9xxx/AXxxx)
-==== Graphics ====
-  * Intel UHD Graphics 630
-  * Intel Corporation CoffeeLake-H GT2 [UHD Graphics 630]
-  * [[https://www.intel.com/content/www/us/en/support/products/126790/graphics/intel-uhd-graphics-family/intel-uhd-graphics-630.html#drivers-software|Intel Download Center]]