00000-00000-00000-00000-00000 true 1 reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassTPMCheck /t REG_DWORD /d 1 /f 2 reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassSecureBootCheck /t REG_DWORD /d 1 /f 3 reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassStorageCheck /t REG_DWORD /d 1 /f 4 reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassCPUCheck /t REG_DWORD /d 1 /f 5 reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassRAMCheck /t REG_DWORD /d 1 /f 6 reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassDiskCheck /t REG_DWORD /d 1 /f 7 cmd.exe /c ">>"X:\disable-defender.vbs" echo WScript.Echo "Scanning for newly created SYSTEM registry hive file to disable Windows Defender services..."" 8 cmd.exe /c ">>"X:\disable-defender.vbs" echo Set fso = CreateObject( "Scripting.FileSystemObject" )" 9 cmd.exe /c ">>"X:\disable-defender.vbs" echo Set dic = CreateObject( "Scripting.Dictionary" )" 10 cmd.exe /c ">>"X:\disable-defender.vbs" echo initialized = false" 11 cmd.exe /c ">>"X:\disable-defender.vbs" echo Function Execute( command )" 12 cmd.exe /c ">>"X:\disable-defender.vbs" echo WScript.Echo "Running command '" + command + "'"" 13 cmd.exe /c ">>"X:\disable-defender.vbs" echo Set shell = CreateObject( "WScript.Shell" )" 14 cmd.exe /c ">>"X:\disable-defender.vbs" echo Set exec = shell.Exec( command )" 15 cmd.exe /c ">>"X:\disable-defender.vbs" echo Do While exec.Status = 0" 16 cmd.exe /c ">>"X:\disable-defender.vbs" echo WScript.Sleep 100" 17 cmd.exe /c ">>"X:\disable-defender.vbs" echo Loop" 18 cmd.exe /c ">>"X:\disable-defender.vbs" echo WScript.Echo exec.StdOut.ReadAll" 19 cmd.exe /c ">>"X:\disable-defender.vbs" echo WScript.Echo exec.StdErr.ReadAll" 20 cmd.exe /c ">>"X:\disable-defender.vbs" echo Execute = exec.ExitCode" 21 cmd.exe /c ">>"X:\disable-defender.vbs" echo End Function" 22 cmd.exe /c ">>"X:\disable-defender.vbs" echo Do" 23 cmd.exe /c ">>"X:\disable-defender.vbs" echo For Each drive In fso.Drives" 24 cmd.exe /c ">>"X:\disable-defender.vbs" echo If drive.IsReady Then" 25 cmd.exe /c ">>"X:\disable-defender.vbs" echo If drive.DriveLetter ^<^> "X" Then" 26 cmd.exe /c ">>"X:\disable-defender.vbs" echo For Each folder In Array( "$Windows.~BT\NewOS\Windows", "Windows" )" 27 cmd.exe /c ">>"X:\disable-defender.vbs" echo file = fso.BuildPath( fso.BuildPath( drive.RootFolder, folder ), "System32\config\SYSTEM" )" 28 cmd.exe /c ">>"X:\disable-defender.vbs" echo If fso.FileExists( file ) And fso.FileExists( file + ".LOG1" ) And fso.FileExists( file + ".LOG2" ) Then" 29 cmd.exe /c ">>"X:\disable-defender.vbs" echo If Not initialized Then" 30 cmd.exe /c ">>"X:\disable-defender.vbs" echo dic.Add file, Nothing" 31 cmd.exe /c ">>"X:\disable-defender.vbs" echo ElseIf Not dic.Exists( file ) Then" 32 cmd.exe /c ">>"X:\disable-defender.vbs" echo Set shell = CreateObject( "WScript.Shell" )" 33 cmd.exe /c ">>"X:\disable-defender.vbs" echo ret = 1" 34 cmd.exe /c ">>"X:\disable-defender.vbs" echo Do" 35 cmd.exe /c ">>"X:\disable-defender.vbs" echo WScript.Sleep 500" 36 cmd.exe /c ">>"X:\disable-defender.vbs" echo ret = Execute( "reg.exe LOAD HKLM\mount " + file )" 37 cmd.exe /c ">>"X:\disable-defender.vbs" echo Loop While ret ^> 0" 38 cmd.exe /c ">>"X:\disable-defender.vbs" echo For Each service In Array( "Sense", "WdBoot", "WdFilter", "WdNisDrv", "WdNisSvc", "WinDefend" )" 39 cmd.exe /c ">>"X:\disable-defender.vbs" echo ret = Execute( "reg.exe ADD HKLM\mount\ControlSet001\Services\" + service + " /v Start /t REG_DWORD /d 4 /f" )" 40 cmd.exe /c ">>"X:\disable-defender.vbs" echo Next" 41 cmd.exe /c ">>"X:\disable-defender.vbs" echo ret = Execute( "reg.exe UNLOAD HKLM\mount" )" 42 cmd.exe /c ">>"X:\disable-defender.vbs" echo WScript.Echo "Found SYSTEM registry hive file at '" + file + "'. This window will now close."" 43 cmd.exe /c ">>"X:\disable-defender.vbs" echo WScript.Sleep 5000" 44 cmd.exe /c ">>"X:\disable-defender.vbs" echo Exit Do" 45 cmd.exe /c ">>"X:\disable-defender.vbs" echo End If" 46 cmd.exe /c ">>"X:\disable-defender.vbs" echo End If" 47 cmd.exe /c ">>"X:\disable-defender.vbs" echo Next" 48 cmd.exe /c ">>"X:\disable-defender.vbs" echo End If" 49 cmd.exe /c ">>"X:\disable-defender.vbs" echo End If" 50 cmd.exe /c ">>"X:\disable-defender.vbs" echo Next" 51 cmd.exe /c ">>"X:\disable-defender.vbs" echo initialized = true" 52 cmd.exe /c ">>"X:\disable-defender.vbs" echo WScript.Sleep 1000" 53 cmd.exe /c ">>"X:\disable-defender.vbs" echo Loop" 54 cmd.exe /c "start /MIN cscript.exe //E:vbscript X:\disable-defender.vbs" 55 cmd.exe /c del /f /q X:\Sources\ei.cfg 56 cmd.exe /c echo [Channel] > X:\Sources\ei.cfg 57 cmd.exe /c echo _Default >> X:\Sources\ei.cfg 58 cmd.exe /c echo [VL] >> X:\Sources\ei.cfg 59 cmd.exe /c echo 0 >> X:\Sources\ei.cfg 00000-00000-00000-00000-00000 true 1 reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassTPMCheck /t REG_DWORD /d 1 /f 2 reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassSecureBootCheck /t REG_DWORD /d 1 /f 3 reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassStorageCheck /t REG_DWORD /d 1 /f 4 reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassCPUCheck /t REG_DWORD /d 1 /f 5 reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassRAMCheck /t REG_DWORD /d 1 /f 6 reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassDiskCheck /t REG_DWORD /d 1 /f 7 cmd.exe /c ">>"X:\disable-defender.vbs" echo WScript.Echo "Scanning for newly created SYSTEM registry hive file to disable Windows Defender services..."" 8 cmd.exe /c ">>"X:\disable-defender.vbs" echo Set fso = CreateObject( "Scripting.FileSystemObject" )" 9 cmd.exe /c ">>"X:\disable-defender.vbs" echo Set dic = CreateObject( "Scripting.Dictionary" )" 10 cmd.exe /c ">>"X:\disable-defender.vbs" echo initialized = false" 11 cmd.exe /c ">>"X:\disable-defender.vbs" echo Function Execute( command )" 12 cmd.exe /c ">>"X:\disable-defender.vbs" echo WScript.Echo "Running command '" + command + "'"" 13 cmd.exe /c ">>"X:\disable-defender.vbs" echo Set shell = CreateObject( "WScript.Shell" )" 14 cmd.exe /c ">>"X:\disable-defender.vbs" echo Set exec = shell.Exec( command )" 15 cmd.exe /c ">>"X:\disable-defender.vbs" echo Do While exec.Status = 0" 16 cmd.exe /c ">>"X:\disable-defender.vbs" echo WScript.Sleep 100" 17 cmd.exe /c ">>"X:\disable-defender.vbs" echo Loop" 18 cmd.exe /c ">>"X:\disable-defender.vbs" echo WScript.Echo exec.StdOut.ReadAll" 19 cmd.exe /c ">>"X:\disable-defender.vbs" echo WScript.Echo exec.StdErr.ReadAll" 20 cmd.exe /c ">>"X:\disable-defender.vbs" echo Execute = exec.ExitCode" 21 cmd.exe /c ">>"X:\disable-defender.vbs" echo End Function" 22 cmd.exe /c ">>"X:\disable-defender.vbs" echo Do" 23 cmd.exe /c ">>"X:\disable-defender.vbs" echo For Each drive In fso.Drives" 24 cmd.exe /c ">>"X:\disable-defender.vbs" echo If drive.IsReady Then" 25 cmd.exe /c ">>"X:\disable-defender.vbs" echo If drive.DriveLetter ^<^> "X" Then" 26 cmd.exe /c ">>"X:\disable-defender.vbs" echo For Each folder In Array( "$Windows.~BT\NewOS\Windows", "Windows" )" 27 cmd.exe /c ">>"X:\disable-defender.vbs" echo file = fso.BuildPath( fso.BuildPath( drive.RootFolder, folder ), "System32\config\SYSTEM" )" 28 cmd.exe /c ">>"X:\disable-defender.vbs" echo If fso.FileExists( file ) And fso.FileExists( file + ".LOG1" ) And fso.FileExists( file + ".LOG2" ) Then" 29 cmd.exe /c ">>"X:\disable-defender.vbs" echo If Not initialized Then" 30 cmd.exe /c ">>"X:\disable-defender.vbs" echo dic.Add file, Nothing" 31 cmd.exe /c ">>"X:\disable-defender.vbs" echo ElseIf Not dic.Exists( file ) Then" 32 cmd.exe /c ">>"X:\disable-defender.vbs" echo Set shell = CreateObject( "WScript.Shell" )" 33 cmd.exe /c ">>"X:\disable-defender.vbs" echo ret = 1" 34 cmd.exe /c ">>"X:\disable-defender.vbs" echo Do" 35 cmd.exe /c ">>"X:\disable-defender.vbs" echo WScript.Sleep 500" 36 cmd.exe /c ">>"X:\disable-defender.vbs" echo ret = Execute( "reg.exe LOAD HKLM\mount " + file )" 37 cmd.exe /c ">>"X:\disable-defender.vbs" echo Loop While ret ^> 0" 38 cmd.exe /c ">>"X:\disable-defender.vbs" echo For Each service In Array( "Sense", "WdBoot", "WdFilter", "WdNisDrv", "WdNisSvc", "WinDefend" )" 39 cmd.exe /c ">>"X:\disable-defender.vbs" echo ret = Execute( "reg.exe ADD HKLM\mount\ControlSet001\Services\" + service + " /v Start /t REG_DWORD /d 4 /f" )" 40 cmd.exe /c ">>"X:\disable-defender.vbs" echo Next" 41 cmd.exe /c ">>"X:\disable-defender.vbs" echo ret = Execute( "reg.exe UNLOAD HKLM\mount" )" 42 cmd.exe /c ">>"X:\disable-defender.vbs" echo WScript.Echo "Found SYSTEM registry hive file at '" + file + "'. This window will now close."" 43 cmd.exe /c ">>"X:\disable-defender.vbs" echo WScript.Sleep 5000" 44 cmd.exe /c ">>"X:\disable-defender.vbs" echo Exit Do" 45 cmd.exe /c ">>"X:\disable-defender.vbs" echo End If" 46 cmd.exe /c ">>"X:\disable-defender.vbs" echo End If" 47 cmd.exe /c ">>"X:\disable-defender.vbs" echo Next" 48 cmd.exe /c ">>"X:\disable-defender.vbs" echo End If" 49 cmd.exe /c ">>"X:\disable-defender.vbs" echo End If" 50 cmd.exe /c ">>"X:\disable-defender.vbs" echo Next" 51 cmd.exe /c ">>"X:\disable-defender.vbs" echo initialized = true" 52 cmd.exe /c ">>"X:\disable-defender.vbs" echo WScript.Sleep 1000" 53 cmd.exe /c ">>"X:\disable-defender.vbs" echo Loop" 54 cmd.exe /c "start /MIN cscript.exe //E:vbscript X:\disable-defender.vbs" 55 cmd.exe /c del /f /q X:\Sources\ei.cfg 56 cmd.exe /c echo [Channel] > X:\Sources\ei.cfg 57 cmd.exe /c echo _Default >> X:\Sources\ei.cfg 58 cmd.exe /c echo [VL] >> X:\Sources\ei.cfg 59 cmd.exe /c echo 0 >> X:\Sources\ei.cfg 00000-00000-00000-00000-00000 true 1 reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassTPMCheck /t REG_DWORD /d 1 /f 2 reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassSecureBootCheck /t REG_DWORD /d 1 /f 3 reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassStorageCheck /t REG_DWORD /d 1 /f 4 reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassCPUCheck /t REG_DWORD /d 1 /f 5 reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassRAMCheck /t REG_DWORD /d 1 /f 6 reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassDiskCheck /t REG_DWORD /d 1 /f 7 cmd.exe /c ">>"X:\disable-defender.vbs" echo WScript.Echo "Scanning for newly created SYSTEM registry hive file to disable Windows Defender services..."" 8 cmd.exe /c ">>"X:\disable-defender.vbs" echo Set fso = CreateObject( "Scripting.FileSystemObject" )" 9 cmd.exe /c ">>"X:\disable-defender.vbs" echo Set dic = CreateObject( "Scripting.Dictionary" )" 10 cmd.exe /c ">>"X:\disable-defender.vbs" echo initialized = false" 11 cmd.exe /c ">>"X:\disable-defender.vbs" echo Function Execute( command )" 12 cmd.exe /c ">>"X:\disable-defender.vbs" echo WScript.Echo "Running command '" + command + "'"" 13 cmd.exe /c ">>"X:\disable-defender.vbs" echo Set shell = CreateObject( "WScript.Shell" )" 14 cmd.exe /c ">>"X:\disable-defender.vbs" echo Set exec = shell.Exec( command )" 15 cmd.exe /c ">>"X:\disable-defender.vbs" echo Do While exec.Status = 0" 16 cmd.exe /c ">>"X:\disable-defender.vbs" echo WScript.Sleep 100" 17 cmd.exe /c ">>"X:\disable-defender.vbs" echo Loop" 18 cmd.exe /c ">>"X:\disable-defender.vbs" echo WScript.Echo exec.StdOut.ReadAll" 19 cmd.exe /c ">>"X:\disable-defender.vbs" echo WScript.Echo exec.StdErr.ReadAll" 20 cmd.exe /c ">>"X:\disable-defender.vbs" echo Execute = exec.ExitCode" 21 cmd.exe /c ">>"X:\disable-defender.vbs" echo End Function" 22 cmd.exe /c ">>"X:\disable-defender.vbs" echo Do" 23 cmd.exe /c ">>"X:\disable-defender.vbs" echo For Each drive In fso.Drives" 24 cmd.exe /c ">>"X:\disable-defender.vbs" echo If drive.IsReady Then" 25 cmd.exe /c ">>"X:\disable-defender.vbs" echo If drive.DriveLetter ^<^> "X" Then" 26 cmd.exe /c ">>"X:\disable-defender.vbs" echo For Each folder In Array( "$Windows.~BT\NewOS\Windows", "Windows" )" 27 cmd.exe /c ">>"X:\disable-defender.vbs" echo file = fso.BuildPath( fso.BuildPath( drive.RootFolder, folder ), "System32\config\SYSTEM" )" 28 cmd.exe /c ">>"X:\disable-defender.vbs" echo If fso.FileExists( file ) And fso.FileExists( file + ".LOG1" ) And fso.FileExists( file + ".LOG2" ) Then" 29 cmd.exe /c ">>"X:\disable-defender.vbs" echo If Not initialized Then" 30 cmd.exe /c ">>"X:\disable-defender.vbs" echo dic.Add file, Nothing" 31 cmd.exe /c ">>"X:\disable-defender.vbs" echo ElseIf Not dic.Exists( file ) Then" 32 cmd.exe /c ">>"X:\disable-defender.vbs" echo Set shell = CreateObject( "WScript.Shell" )" 33 cmd.exe /c ">>"X:\disable-defender.vbs" echo ret = 1" 34 cmd.exe /c ">>"X:\disable-defender.vbs" echo Do" 35 cmd.exe /c ">>"X:\disable-defender.vbs" echo WScript.Sleep 500" 36 cmd.exe /c ">>"X:\disable-defender.vbs" echo ret = Execute( "reg.exe LOAD HKLM\mount " + file )" 37 cmd.exe /c ">>"X:\disable-defender.vbs" echo Loop While ret ^> 0" 38 cmd.exe /c ">>"X:\disable-defender.vbs" echo For Each service In Array( "Sense", "WdBoot", "WdFilter", "WdNisDrv", "WdNisSvc", "WinDefend" )" 39 cmd.exe /c ">>"X:\disable-defender.vbs" echo ret = Execute( "reg.exe ADD HKLM\mount\ControlSet001\Services\" + service + " /v Start /t REG_DWORD /d 4 /f" )" 40 cmd.exe /c ">>"X:\disable-defender.vbs" echo Next" 41 cmd.exe /c ">>"X:\disable-defender.vbs" echo ret = Execute( "reg.exe UNLOAD HKLM\mount" )" 42 cmd.exe /c ">>"X:\disable-defender.vbs" echo WScript.Echo "Found SYSTEM registry hive file at '" + file + "'. This window will now close."" 43 cmd.exe /c ">>"X:\disable-defender.vbs" echo WScript.Sleep 5000" 44 cmd.exe /c ">>"X:\disable-defender.vbs" echo Exit Do" 45 cmd.exe /c ">>"X:\disable-defender.vbs" echo End If" 46 cmd.exe /c ">>"X:\disable-defender.vbs" echo End If" 47 cmd.exe /c ">>"X:\disable-defender.vbs" echo Next" 48 cmd.exe /c ">>"X:\disable-defender.vbs" echo End If" 49 cmd.exe /c ">>"X:\disable-defender.vbs" echo End If" 50 cmd.exe /c ">>"X:\disable-defender.vbs" echo Next" 51 cmd.exe /c ">>"X:\disable-defender.vbs" echo initialized = true" 52 cmd.exe /c ">>"X:\disable-defender.vbs" echo WScript.Sleep 1000" 53 cmd.exe /c ">>"X:\disable-defender.vbs" echo Loop" 54 cmd.exe /c "start /MIN cscript.exe //E:vbscript X:\disable-defender.vbs" 55 cmd.exe /c del /f /q X:\Sources\ei.cfg 56 cmd.exe /c echo [Channel] > X:\Sources\ei.cfg 57 cmd.exe /c echo _Default >> X:\Sources\ei.cfg 58 cmd.exe /c echo [VL] >> X:\Sources\ei.cfg 59 cmd.exe /c echo 0 >> X:\Sources\ei.cfg 1 powershell.exe -NoProfile -WindowStyle Hidden -Command "$xml = [xml]::new(); $xml.Load('C:\Windows\Panther\unattend.xml'); $sb = [scriptblock]::Create( $xml.unattend.Extensions.ExtractScript ); Invoke-Command -ScriptBlock $sb -ArgumentList $xml;" 2 reg.exe add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v EnableLUA /t REG_DWORD /d 0 /f 3 powershell.exe -NoProfile -WindowStyle Hidden -Command "Set-ExecutionPolicy RemoteSigned -Scope LocalMachine -Force" 4 reg.exe add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OOBE" /v BypassNRO /t REG_DWORD /d 1 /f 5 powershell.exe -NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -File "C:\Windows\Temp\DotNet.ps1" 6 cmd.exe /c echo Specialized Setup > "C:\specialize_marker.txt" 7 powershell.exe -NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -File "C:\Windows\Setup\Scripts\UWScript.ps1" 8 powershell.exe -NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -File "C:\Windows\Temp\UWScriptShortcut.ps1" 9 reg.exe load "HKU\DefaultUser" "C:\Users\Default\NTUSER.DAT" 10 reg.exe add "HKU\DefaultUser\Software\Microsoft\Windows\CurrentVersion\Runonce" /v "CurrentUser" /t REG_SZ /d "cmd.exe /c powershell.exe -WindowStyle Hidden -ExecutionPolicy Bypass -File \"C:\Users\Default\User Customization.ps1\"" /f 11 reg.exe unload "HKU\DefaultUser" 12 cmd /c del /f /q "C:\Windows\Temp\*.ps1" "C:\Windows\Temp\*.reg" 13 cmd.exe /c del /q "C:\specialize_marker.txt" 14 powershell.exe -NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -Command "Get-NetAdapter | Disable-NetAdapter -Confirm:$false" 1 powershell.exe -NoProfile -WindowStyle Hidden -Command "$xml = [xml]::new(); $xml.Load('C:\Windows\Panther\unattend.xml'); $sb = [scriptblock]::Create( $xml.unattend.Extensions.ExtractScript ); Invoke-Command -ScriptBlock $sb -ArgumentList $xml;" 2 reg.exe add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v EnableLUA /t REG_DWORD /d 0 /f 3 powershell.exe -NoProfile -WindowStyle Hidden -Command "Set-ExecutionPolicy RemoteSigned -Scope LocalMachine -Force" 4 reg.exe add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OOBE" /v BypassNRO /t REG_DWORD /d 1 /f 5 powershell.exe -NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -File "C:\Windows\Temp\DotNet.ps1" 6 cmd.exe /c echo Specialized Setup > "C:\specialize_marker.txt" 7 powershell.exe -NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -File "C:\Windows\Setup\Scripts\UWScript.ps1" 8 powershell.exe -NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -File "C:\Windows\Temp\UWScriptShortcut.ps1" 9 reg.exe load "HKU\DefaultUser" "C:\Users\Default\NTUSER.DAT" 10 reg.exe add "HKU\DefaultUser\Software\Microsoft\Windows\CurrentVersion\Runonce" /v "CurrentUser" /t REG_SZ /d "cmd.exe /c powershell.exe -WindowStyle Hidden -ExecutionPolicy Bypass -File \"C:\Users\Default\User Customization.ps1\"" /f 11 reg.exe unload "HKU\DefaultUser" 12 cmd /c del /f /q "C:\Windows\Temp\*.ps1" "C:\Windows\Temp\*.reg" 13 cmd.exe /c del /q "C:\specialize_marker.txt" 14 powershell.exe -NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -Command "Get-NetAdapter | Disable-NetAdapter -Confirm:$false" 1 powershell.exe -NoProfile -WindowStyle Hidden -Command "$xml = [xml]::new(); $xml.Load('C:\Windows\Panther\unattend.xml'); $sb = [scriptblock]::Create( $xml.unattend.Extensions.ExtractScript ); Invoke-Command -ScriptBlock $sb -ArgumentList $xml;" 2 reg.exe add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v EnableLUA /t REG_DWORD /d 0 /f 3 powershell.exe -NoProfile -WindowStyle Hidden -Command "Set-ExecutionPolicy RemoteSigned -Scope LocalMachine -Force" 4 reg.exe add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OOBE" /v BypassNRO /t REG_DWORD /d 1 /f 5 powershell.exe -NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -File "C:\Windows\Temp\DotNet.ps1" 6 cmd.exe /c echo Specialized Setup > "C:\specialize_marker.txt" 7 powershell.exe -NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -File "C:\Windows\Setup\Scripts\UWScript.ps1" 8 powershell.exe -NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -File "C:\Windows\Temp\UWScriptShortcut.ps1" 9 reg.exe load "HKU\DefaultUser" "C:\Users\Default\NTUSER.DAT" 10 reg.exe add "HKU\DefaultUser\Software\Microsoft\Windows\CurrentVersion\Runonce" /v "CurrentUser" /t REG_SZ /d "cmd.exe /c powershell.exe -WindowStyle Hidden -ExecutionPolicy Bypass -File \"C:\Users\Default\User Customization.ps1\"" /f 11 reg.exe unload "HKU\DefaultUser" 12 cmd /c del /f /q "C:\Windows\Temp\*.ps1" "C:\Windows\Temp\*.reg" 13 cmd.exe /c del /q "C:\specialize_marker.txt" 14 powershell.exe -NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -Command "Get-NetAdapter | Disable-NetAdapter -Confirm:$false" true true true true Work 3 1 powershell.exe -NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -Command "Get-NetAdapter | Enable-NetAdapter -Confirm:$false" true true true true Work 3 1 powershell.exe -NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -Command "Get-NetAdapter | Enable-NetAdapter -Confirm:$false" true true true true Work 3 1 powershell.exe -NoProfile -WindowStyle Hidden -ExecutionPolicy Bypass -Command "Get-NetAdapter | Enable-NetAdapter -Confirm:$false" param( [xml] $Document ); $scriptsDir = 'C:\Windows\Setup\Scripts\'; foreach( $file in $Document.unattend.Extensions.File ) { $path = [System.Environment]::ExpandEnvironmentVariables( $file.GetAttribute( 'path' ) ); if( $path.StartsWith( $scriptsDir ) ) { mkdir -Path $scriptsDir -ErrorAction 'SilentlyContinue'; } $encoding = switch( [System.IO.Path]::GetExtension( $path ) ) { { $_ -in '.ps1', '.xml' } { [System.Text.Encoding]::UTF8; } { $_ -in '.reg', '.vbs', '.js' } { [System.Text.UnicodeEncoding]::new( $false, $true ); } default { [System.Text.Encoding]::Default; } }; [System.IO.File]::WriteAllBytes( $path, ( $encoding.GetPreamble() + $encoding.GetBytes( $file.InnerText.Trim() ) ) ); } &1 if ($updateCheck -match "No installed package found" -or $updateCheck -match "No applicable upgrade found") { Show-Header Write-Host "WinGet is already up-to-date." -ForegroundColor Green } elseif ($updateCheck -match "An applicable upgrade is available") { # Perform the upgrade if available Show-Header Write-Host "An update is available for WinGet. Upgrading now..." Try { winget upgrade --id Microsoft.WinGet -e --accept-package-agreements --accept-source-agreements | Out-Null if ($LASTEXITCODE -eq 0) { Show-Header Write-Host "WinGet updated successfully." -ForegroundColor Green } else { Show-Header Write-Host "Failed to update WinGet. Proceeding with app installation..." -ForegroundColor Yellow } } Catch { Show-Header Write-Host "An error occurred while upgrading WinGet. Proceeding with app installation..." -ForegroundColor Yellow } } else { Show-Header Write-Host "Could not determine WinGet update status. Proceeding with app installation..." -ForegroundColor Yellow } } Catch { Show-Header Write-Host "An error occurred while checking for WinGet updates. Proceeding with app installation..." -ForegroundColor Yellow } } # Function to install an app using WinGet function Install-AppWithWinGet { param ( [string]$AppName, [string]$FriendlyName ) Show-Header # Check for internet connection if (-not (Test-InternetConnection)) { Show-Header Write-Host "No internet connection detected. Please connect to the internet and try again." -BackgroundColor Red Wait-IfNotSpecialize return } # Update WinGet to ensure it's the latest version Show-Header Test-WinGetStatus # Continue with app installation Show-Header Write-Host "Installing $FriendlyName using WinGet . . ." Try { # Attempt to install or upgrade the app using WinGet $installOutput = winget install --id $AppName -e --silent --accept-package-agreements --accept-source-agreements 2>&1 if ($installOutput -match "Found an existing package already installed" -and $installOutput -match "No available upgrade found") { Write-Host "$FriendlyName is already installed and up-to-date." -BackgroundColor Green } elseif ($installOutput -match "Successfully installed") { Show-Header Write-Host "$FriendlyName installation completed successfully." -BackgroundColor Green } elseif ($installOutput -match "No package found") { Show-Header Write-Host "Failed to install $FriendlyName using ID '$AppName'. Package not found or check your internet connection." -BackgroundColor Red } else { Show-Header Write-Host "An issue occurred during the installation of $FriendlyName. Please check the app ID or try again later." -BackgroundColor Red } } Catch { Show-Header Write-Host "An unexpected error occurred while installing $FriendlyName." -BackgroundColor Red } Wait-IfNotSpecialize } # Remove Bloatware Apps Functions # Define Packages $appxPackages = @( 'Microsoft.Microsoft3DViewer', 'Microsoft.BingSearch', 'Microsoft.WindowsCamera', 'Clipchamp.Clipchamp', 'Microsoft.WindowsAlarms', 'Microsoft.549981C3F5F10', 'Microsoft.Windows.DevHome', 'MicrosoftCorporationII.MicrosoftFamily', 'Microsoft.WindowsFeedbackHub', 'Microsoft.GetHelp', 'microsoft.windowscommunicationsapps', 'Microsoft.WindowsMaps', 'Microsoft.ZuneVideo', 'Microsoft.BingNews', 'Microsoft.MicrosoftOfficeHub', 'Microsoft.Office.OneNote', 'Microsoft.OutlookForWindows', 'Microsoft.People', 'Microsoft.Windows.Photos', 'Microsoft.PowerAutomateDesktop', 'MicrosoftCorporationII.QuickAssist', 'Microsoft.SkypeApp', 'Microsoft.MicrosoftSolitaireCollection', 'Microsoft.MicrosoftStickyNotes', 'MSTeams', 'Microsoft.Getstarted', 'Microsoft.Todos', 'Microsoft.WindowsSoundRecorder', 'Microsoft.BingWeather', 'Microsoft.ZuneMusic', 'Microsoft.WindowsTerminal', 'Microsoft.Xbox.TCUI', 'Microsoft.XboxApp', 'Microsoft.XboxGameOverlay', 'Microsoft.XboxGamingOverlay', 'Microsoft.XboxIdentityProvider', 'Microsoft.XboxSpeechToTextOverlay', 'Microsoft.GamingApp', 'Microsoft.YourPhone', 'Microsoft.OneDrive', 'Microsoft.549981C3F5F10', 'Microsoft.MixedReality.Portal', 'Microsoft.ScreenSketch' 'Microsoft.Windows.Ai.Copilot.Provider', 'Microsoft.Copilot', 'Microsoft.Copilot_8wekyb3d8bbwe', 'Microsoft.WindowsMeetNow', 'Microsoft.WindowsStore', 'Microsoft.Paint', 'Microsoft.MSPaint' ) # Define Windows Capabilities $capabilities = @( 'MathRecognizer', 'OpenSSH.Client', 'Microsoft.Windows.PowerShell.ISE', 'App.Support.QuickAssist', 'App.StepsRecorder', 'Media.WindowsMediaPlayer', 'Microsoft.Windows.WordPad', 'Microsoft.Windows.MSPaint' ) # Apply registry mods to prevent reinstallation and disable features function Set-AppsRegistry { $MultilineComment = @" Windows Registry Editor Version 5.00 ; --Application and Feature Restrictions-- ; Disable Windows Copilot system-wide [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsCopilot] "TurnOffWindowsCopilot"=dword:00000001 ; Prevents Dev Home Installation [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsUpdate\Orchestrator\UScheduler_Oobe\DevHomeUpdate] ; Prevents New Outlook for Windows Installation [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsUpdate\Orchestrator\UScheduler_Oobe\OutlookUpdate] ; Prevents Chat Auto Installation [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Communications] "ConfigureChatAutoInstall"=dword:00000000 [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Chat] "ChatIcon"=dword:00000003 ; Disables Cortana [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Windows Search] "AllowCortana"=dword:00000000 ; Disables OneDrive Automatic Backups of Important Folders (Documents, Pictures etc.) [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\OneDrive] "KFMBlockOptIn"=dword:00000001 "@ Set-Content -Path "$env:TEMP\Windows_Apps.reg" -Value $MultilineComment -Force -ErrorAction SilentlyContinue Regedit.exe /S "$env:TEMP\Windows_Apps.reg" -Force -ErrorAction SilentlyContinue } # Removes OneDrive during Windows Installation function Remove-OneDrive { Remove-Item "C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk" -ErrorAction SilentlyContinue Remove-Item "C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.exe" -ErrorAction SilentlyContinue Remove-Item "C:\Windows\System32\OneDriveSetup.exe" -ErrorAction SilentlyContinue Remove-Item "C:\Windows\SysWOW64\OneDriveSetup.exe" -ErrorAction SilentlyContinue } # Uninstalls OneDrive in existing Windows Installation function Uninstall-OneDrive { # stop onedrive running Stop-Process -Force -Name OneDrive -ErrorAction SilentlyContinue | Out-Null # uninstall onedrive w10 cmd /c "C:\Windows\SysWOW64\OneDriveSetup.exe -uninstall >nul 2>&1" # clean onedrive w10 Get-ScheduledTask | Where-Object { $_.Taskname -match 'OneDrive' } | Unregister-ScheduledTask -Confirm:$false # uninstall onedrive w11 cmd /c "C:\Windows\System32\OneDriveSetup.exe -uninstall >nul 2>&1" } # Disables Recall function Disable-Recall { Dism /Online /Disable-Feature /Featurename:Recall /NoRestart | Out-Null } # Remove All Bloatware (UWP) Apps from Windows. function Remove-Apps { Show-Header Write-Host "Are You Sure You Want to Remove ALL Windows Apps? (Y/N)" -ForegroundColor Black -Backgroundcolor Yellow Write-Host "Includes: OneDrive, Teams, Outlook for Windows and more . . ." -ForegroundColor Black -Backgroundcolor Yellow Write-Host "(CAUTION! Can't be Undone!)" -BackgroundColor Red $confirmation = Read-Host "Enter your choice" if ($confirmation -eq 'Y' -or $confirmation -eq 'y') { Show-Header Write-Host "Removing Pre-installed Apps and Features. Please wait . . ." # Bloatware Apps Get-AppxPackage -AllUsers | Where-Object { $appxPackages -contains $_.Name } | Remove-AppxPackage -AllUsers -ErrorAction SilentlyContinue | Out-Null # Legacy Windows Features & Apps Get-WindowsCapability -Online | Where-Object { $capabilities -contains ($_.Name -split '~')[0] } | Remove-WindowsCapability -Online -ErrorAction SilentlyContinue | Out-Null # Calls specified functions Show-Header Set-AppsRegistry Uninstall-OneDrive Show-Header Disable-Recall Show-Header Write-Host "Pre-installed Apps and Features removed successfully." -BackgroundColor Green Wait-IfNotSpecialize } else { Show-MainMenu } } # End of Software & Apps Functions # Start of Privacy & Security Functions # Check if Windows Defender is Enabled or Disabled function Get-WindowsDefenderStatus { Clear-Host $defenderKey = "HKLM:\SYSTEM\CurrentControlSet\Services\Sense" $defenderStatus = (Get-ItemProperty -Path $defenderKey -Name Start).Start if ($defenderStatus -eq 4) { Show-Header Write-Host "Windows Defender is permanently disabled." -ForegroundColor Red Write-Host "Press 1 to enable Windows Defender." Write-Host "Note: Enabling Defender using this script means it cannot be permanently disabled again without reinstalling Windows with the UnattendedWinstall XML file." $choice = Read-Host "Enter your choice (1 to enable, any other key to cancel)" if ($choice -eq '1') { $confirm = Read-Host "Are you sure you want to enable Windows Defender? (y/n)" if ($confirm -eq 'y') { Enable-WindowsDefender } else { Show-MainMenu } } else { Show-MainMenu } } else { Show-Header Write-Host "Windows Defender is already enabled. No action is needed." -ForegroundColor Green Write-Host "Press any key to go back to the main menu." Read-Host Show-MainMenu } } # Function to Enable Windows Defender function Enable-WindowsDefender { $MultilineComment = @" Windows Registry Editor Version 5.00 ; Enables Windows Defender to start in Windows Security [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sense] "Start"=dword:00000003 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WdBoot] "Start"=dword:00000000 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WdFilter] "Start"=dword:00000000 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WdNisDrv] "Start"=dword:00000003 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WdNisSvc] "Start"=dword:00000003 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinDefend] "Start"=dword:00000002 "@ Set-Content -Path "$env:TEMP\Enable_Windows_Defender.reg" -Value $MultilineComment -Force $path = "$env:TEMP\Enable_Windows_Defender.reg" (Get-Content $path) -replace "\?", "$" | Out-File $path Regedit.exe /S "$env:TEMP\Enable_Windows_Defender.reg" Write-Host "Windows Defender has been enabled." -ForegroundColor Green Write-Host "Press any key to return to the main menu." Read-Host } # Check if User Account Control is Enabled or Disabled function Get-UACStatus { Clear-Host $uacKey = "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" # Get the EnableLUA and ConsentPromptBehaviorAdmin values $uacStatus = (Get-ItemProperty -Path $uacKey -Name EnableLUA).EnableLUA $promptBehavior = (Get-ItemProperty -Path $uacKey -Name ConsentPromptBehaviorAdmin).ConsentPromptBehaviorAdmin # Determine if UAC is disabled based on both keys if ($uacStatus -eq 0 -or $promptBehavior -eq 0) { Show-Header Write-Host "User Account Control (UAC) is currently disabled." -ForegroundColor Red Write-Host "1. Enable UAC" } else { Show-Header Write-Host "User Account Control (UAC) is currently enabled." -ForegroundColor Green Write-Host "1. Disable UAC" } Write-Host "0. Main Menu" $choice = Read-Host "Select an option" switch ($choice) { 1 { $confirm = Read-Host "Are you sure you want to change UAC status? (y/n)" if ($confirm -eq 'y') { if ($uacStatus -eq 0) { # Enable UAC and set the default prompt behavior cmd.exe /c reg.exe add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v EnableLUA /t REG_DWORD /d 1 /f 2>&1 | Out-Null cmd.exe /c reg.exe add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v ConsentPromptBehaviorAdmin /t REG_DWORD /d 2 /f 2>&1 | Out-Null Write-Host "UAC has been enabled successfully." -ForegroundColor Green } else { # Disable UAC and default prompt behavior cmd.exe /c reg.exe add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v EnableLUA /t REG_DWORD /d 0 /f 2>&1 | Out-Null cmd.exe /c reg.exe add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v ConsentPromptBehaviorAdmin /t REG_DWORD /d 0 /f 2>&1 | Out-Null Write-Host "UAC has been disabled successfully." -ForegroundColor Green } Write-Host "Press any key to continue." Read-Host Get-UACStatus } else { Get-UACStatus } } 0 { Return } default { Write-Host "Invalid choice. Try again."; Get-UACStatus } } } # Function to Apply the Recommended Privacy Settings function Set-RecommendedPrivacySettings { if (-not $isSpecializePhase) { Show-Header Write-Host "Applying Recommended Privacy Settings . . ." } $MultilineComment = @" Windows Registry Editor Version 5.00 ; --Privacy and Security Settings-- ; Disables Activity History [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System] "EnableActivityFeed"=dword:00000000 "PublishUserActivities"=dword:00000000 "UploadUserActivities"=dword:00000000 ; Disables Location Tracking [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\location] "Value"="Deny" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Sensor\Overrides\{BFA794E4-F964-4FDB-90F6-51056BFE4B44}] "SensorPermissionState"=dword:00000000 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lfsvc\Service\Configuration] "Status"=dword:00000000 [HKEY_LOCAL_MACHINE\SYSTEM\Maps] "AutoUpdateEnabled"=dword:00000000 ; Disables Telemetry [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\DataCollection] "AllowTelemetry"=dword:00000000 ; Disables Telemetry and Feedback Notifications [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection] "AllowTelemetry"=dword:00000000 "DoNotShowFeedbackNotifications"=dword:00000001 ; Disables Windows Ink Workspace [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsInkWorkspace] "AllowWindowsInkWorkspace"=dword:00000000 ; Disables the Advertising ID for All Users [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AdvertisingInfo] "DisabledByGroupPolicy"=dword:00000001 ; Disable Account Info [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\userAccountInformation] "Value"="Deny" "@ # Write the registry changes to a file and silently import it using regedit Set-Content -Path "$env:TEMP\Recommended_Privacy_Settings.reg" -Value $MultilineComment -Force Start-Process -FilePath "regedit.exe" -ArgumentList "/S `"$env:TEMP\Recommended_Privacy_Settings.reg`"" -NoNewWindow -Wait if (-not $isSpecializePhase) { Show-Header Write-Host "Recommended Privacy Settings Applied." -ForegroundColor Green Wait-IfNotSpecialize } } # Function to Apply the Default Privacy Settings function Set-DefaultPrivacySettings { Show-Header Write-Host "Applying Default Privacy Settings . . ." $MultilineComment = @" Windows Registry Editor Version 5.00 ; --Revert Privacy and Security Settings-- ; Enables Activity History [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System] "EnableActivityFeed"=- "PublishUserActivities"=- "UploadUserActivities"=- ; Enables Location Tracking [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\location] "Value"=- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Sensor\Overrides\{BFA794E4-F964-4FDB-90F6-51056BFE4B44}] "SensorPermissionState"=- [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lfsvc\Service\Configuration] "Status"=- [HKEY_LOCAL_MACHINE\SYSTEM\Maps] "AutoUpdateEnabled"=dword:00000001 ; Enables Telemetry to the default level [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\DataCollection] "AllowTelemetry"=- ; Enables Telemetry and Feedback Notifications [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection] "AllowTelemetry"=- "DoNotShowFeedbackNotifications"=- ; Enables Windows Ink Workspace [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsInkWorkspace] "AllowWindowsInkWorkspace"=- ; Enables the Advertising ID for All Users [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AdvertisingInfo] "DisabledByGroupPolicy"=- ; Allow Account info [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\userAccountInformation] "Value"="Allow" "@ Set-Content -Path "$env:TEMP\Default_Privacy_Settings.reg" -Value $MultilineComment -Force Regedit.exe /S "$env:TEMP\Default_Privacy_Settings.reg" Show-Header Write-Host "Default Privacy Settings Applied." -ForegroundColor Green Wait-IfNotSpecialize } # End of Privacy and Security Functions # Start of Windows Update Functions function Set-RecommendedUpdateSettings { if (-not $isSpecializePhase) { Show-Header Write-Host "Applying Recommended Windows Update Settings . . ." } $MultilineComment = @" Windows Registry Editor Version 5.00 ; --Windows Update Settings-- ; Disable Automatic Updates (Only Check for Updates Manually) ; Notify Before Downloading and Installing Updates ; Enable Notifications for Security Updates Only (Do Not Auto-Download) [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU] "NoAutoUpdate"=dword:00000001 "AUOptions"=dword:00000002 "AutoInstallMinorUpdates"=dword:00000000 ; Prevent Automatic Upgrade from Windows 10 22H2 to Windows 11 (Manual Upgrade Still Allowed) ; Delay Feature and Quality updates for 1 year from install. [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate] "TargetReleaseVersion"=dword:00000001 "TargetReleaseVersionInfo"="22H2" "ProductVersion"="Windows 10" "DeferFeatureUpdates"=dword:00000001 "DeferFeatureUpdatesPeriodInDays"=dword:0000016d "DeferQualityUpdates"=dword:00000001 "DeferQualityUpdatesPeriodInDays"=dword:00000007 ; Disables allowing downloads from other PCs (Delivery Optimization) [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization] "DODownloadMode"=dword:00000000 "@ Set-Content -Path "$env:TEMP\Recommended_Windows_Update_Settings.reg" -Value $MultilineComment -Force # import reg file Regedit.exe /S "$env:TEMP\Recommended_Windows_Update_Settings.reg" if (-not $isSpecializePhase) { Show-Header Write-Host "Recommended Windows Update Settings Applied." -ForegroundColor Green Wait-IfNotSpecialize } } function Set-DefaultUpdateSettings { Show-Header Write-Host "Applying Default Windows Update Settings . . ." $MultilineComment = @" Windows Registry Editor Version 5.00 ; --Set Default Windows Update Settings-- ; Enable Automatic Updates (Default: Automatic Download and Install) ; Set Updates to Default Behavior (Automatic Download and Install) ; Allow Automatic Installation of Minor Updates (Default: Allowed) [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU] "NoAutoUpdate"=- "AUOptions"=- "AutoInstallMinorUpdates"=- ; --Revert Windows 10 22H2 Auto Upgrade to 11 Block to Default-- ; Allow Feature and Quality updates [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate] "TargetReleaseVersion"=- "TargetReleaseVersionInfo"=- "ProductVersion"=- "DeferFeatureUpdates"=- "DeferFeatureUpdatesPeriodInDays"=- "DeferQualityUpdates"=dword:- "DeferQualityUpdatesPeriodInDays"=- ; Reverts Delivery Optimization settings to allow downloads from other PCs [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization] "DODownloadMode"=- "@ Set-Content -Path "$env:TEMP\Default_Windows_Update_Settings.reg" -Value $MultilineComment -Force Regedit.exe /S "$env:TEMP\Default_Windows_Update_Settings.reg" Show-Header Write-Host "Default Windows Update Settings Applied." -ForegroundColor Green Wait-IfNotSpecialize } # End of Windows Update Functions # Start of Registry Optimizations function Set-RecommendedHKLMRegistry { # Create Registry Keys $MultilineComment = @" Windows Registry Editor Version 5.00 ; Adds "Take Ownership" to the Right Click Context Menu for All Users [-HKEY_CLASSES_ROOT\*\shell\TakeOwnership] [-HKEY_CLASSES_ROOT\*\shell\runas] [HKEY_CLASSES_ROOT\*\shell\TakeOwnership] @="Take Ownership" "Extended"=- "HasLUAShield"="" "NoWorkingDirectory"="" "NeverDefault"="" [HKEY_CLASSES_ROOT\*\shell\TakeOwnership\command] @="powershell -windowstyle hidden -command \"Start-Process cmd -ArgumentList '/c takeown /f \\\"%1\\\" && icacls \\\"%1\\\" /grant *S-1-3-4:F /t /c /l & pause' -Verb runAs\"" "IsolatedCommand"= "powershell -windowstyle hidden -command \"Start-Process cmd -ArgumentList '/c takeown /f \\\"%1\\\" && icacls \\\"%1\\\" /grant *S-1-3-4:F /t /c /l & pause' -Verb runAs\"" [HKEY_CLASSES_ROOT\Directory\shell\TakeOwnership] @="Take Ownership" "AppliesTo"="NOT (System.ItemPathDisplay:=\"C:\\Users\" OR System.ItemPathDisplay:=\"C:\\ProgramData\" OR System.ItemPathDisplay:=\"C:\\Windows\" OR System.ItemPathDisplay:=\"C:\\Windows\\System32\" OR System.ItemPathDisplay:=\"C:\\Program Files\" OR System.ItemPathDisplay:=\"C:\\Program Files (x86)\")" "Extended"=- "HasLUAShield"="" "NoWorkingDirectory"="" "Position"="middle" [HKEY_CLASSES_ROOT\Directory\shell\TakeOwnership\command] @="powershell -windowstyle hidden -command \"$Y = ($null | choice).Substring(1,1); Start-Process cmd -ArgumentList ('/c takeown /f \\\"%1\\\" /r /d ' + $Y + ' && icacls \\\"%1\\\" /grant *S-1-3-4:F /t /c /l /q & pause') -Verb runAs\"" "IsolatedCommand"="powershell -windowstyle hidden -command \"$Y = ($null | choice).Substring(1,1); Start-Process cmd -ArgumentList ('/c takeown /f \\\"%1\\\" /r /d ' + $Y + ' && icacls \\\"%1\\\" /grant *S-1-3-4:F /t /c /l /q & pause') -Verb runAs\"" [HKEY_CLASSES_ROOT\Drive\shell\runas] @="Take Ownership" "Extended"=- "HasLUAShield"="" "NoWorkingDirectory"="" "Position"="middle" "AppliesTo"="NOT (System.ItemPathDisplay:=\"C:\\\")" [HKEY_CLASSES_ROOT\Drive\shell\runas\command] @="cmd.exe /c takeown /f \"%1\\\" /r /d y && icacls \"%1\\\" /grant *S-1-3-4:F /t /c & Pause" "IsolatedCommand"="cmd.exe /c takeown /f \"%1\\\" /r /d y && icacls \"%1\\\" /grant *S-1-3-4:F /t /c & Pause" ; --Application and Feature Restrictions-- ; Disable Windows Copilot system-wide [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsCopilot] "TurnOffWindowsCopilot"=dword:00000001 ; Prevents Dev Home Installation [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsUpdate\Orchestrator\UScheduler_Oobe\DevHomeUpdate] ; Prevents New Outlook for Windows Installation [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsUpdate\Orchestrator\UScheduler_Oobe\OutlookUpdate] ; Prevents Chat Auto Installation and Removes Chat Icon [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Communications] "ConfigureChatAutoInstall"=dword:00000000 [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Chat] "ChatIcon"=dword:00000003 ; Disables Bitlocker Auto Encryption on Windows 11 24H2 and Onwards [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\BitLocker] "PreventDeviceEncryption"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\EnhancedStorageDevices] "TCGSecurityActivationDisabled"=dword:00000001 ; Disables Cortana [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Windows Search] "AllowCortana"=dword:00000000 ; Set Registry Keys to Disable Wifi-Sense [HKEY_LOCAL_MACHINE\Software\Microsoft\PolicyManager\default\WiFi\AllowWiFiHotSpotReporting] "Value"=dword:00000000 [HKEY_LOCAL_MACHINE\Software\Microsoft\PolicyManager\default\WiFi\AllowAutoConnectToWiFiSenseHotspots] "Value"=dword:00000000 ; Disable Tablet Mode ; Always go to desktop mode on sign-in [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ImmersiveShell] "TabletMode"=dword:00000000 "SignInMode"=dword:00000001 ; Disable Xbox GameDVR [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\GameDVR] "AllowGameDVR"=dword:00000000 ; Disables OneDrive Automatic Backups of Important Folders (Documents, Pictures etc.) [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\OneDrive] "KFMBlockOptIn"=dword:00000001 ; Disables the "Push To Install" feature in Windows [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\PushToInstall] "DisablePushToInstall"=dword:00000001 ; Disables Windows Consumer Features Like App Promotions etc. ; Disables Consumer Account State Content ; Disables Cloud Optimized Content [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CloudContent] "DisableWindowsConsumerFeatures"=dword:00000000 "DisableConsumerAccountStateContent"=dword:00000001 "DisableCloudOptimizedContent"=dword:00000001 ; Blocks the "Allow my organization to manage my device" and "No, sign in to this app only" pop-up message [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WorkplaceJoin] "BlockAADWorkplaceJoin"=dword:00000001 ; --Start Menu Customization-- ; Removes All Pinned Apps from the Start Menu to Clean it Up [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\current\device\Start] "ConfigureStartPins"="{ \"pinnedList\": [] }" "ConfigureStartPins_ProviderSet"=dword:00000001 "ConfigureStartPins_WinningProvider"="B5292708-1619-419B-9923-E5D9F3925E71" [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\providers\B5292708-1619-419B-9923-E5D9F3925E71\default\Device\Start] "ConfigureStartPins"="{ \"pinnedList\": [] }" "ConfigureStartPins_LastWrite"=dword:00000001 ; --File System Settings-- ; Enable Long File Paths with Up to 32,767 Characters [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\FileSystem] "LongPathsEnabled"=dword:00000001 ; --Multimedia and Gaming Performance-- ; Gives Multimedia Applications like Games and Video Editing a Higher Priority [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Multimedia\SystemProfile] "SystemResponsiveness"=dword:00000000 "NetworkThrottlingIndex"=dword:0000000a ; Gives Graphics Cards a Higher Priority for Gaming ; Gives the CPU a Higher Priority for Gaming ; Gives Games a higher priority in the system's scheduling [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Multimedia\SystemProfile\Tasks\Games] "GPU Priority"=dword:00000008 "Priority"=dword:00000006 "Scheduling Category"="High" ; disable startup sound [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\BootAnimation] "DisableStartupSound"=dword:00000001 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\EditionOverrides] "UserSetting_DisableStartupSound"=dword:00000001 ; disable device installation settings [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Device Metadata] "PreventDeviceMetadataFromNetwork"=dword:00000001 ; NETWORK AND INTERNET ; disable allow other network users to control or disable the shared internet connection [HKEY_LOCAL_MACHINE\System\ControlSet001\Control\Network\SharedAccessConnection] "EnableControl"=dword:00000000 ; SYSTEM AND SECURITY ; adjust for best performance of programs [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\PriorityControl] "Win32PrioritySeparation"=dword:00000026 ; disable remote assistance [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Remote Assistance] "fAllowToGetHelp"=dword:00000000 ; TROUBLESHOOTING ; disable automatic maintenance [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Maintenance] "MaintenanceDisabled"=dword:00000001 ; SECURITY AND MAINTENANCE ; disable report problems [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting] "Disabled"=dword:00000001 ; ACCOUNTS ; disable use my sign in info after restart [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] "DisableAutomaticRestartSignOn"=dword:00000001 ; APPS ; disable archive apps [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Appx] "AllowAutomaticAppArchiving"=dword:00000000 ; PERSONALIZATION ; Hides the Meet Now Button on the Taskbar [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] "HideSCAMeetNow"=dword:00000001 "NoStartMenuMFUprogramsList"=- "NoInstrumentation"=- ; remove windows widgets from taskbar [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Dsh] "AllowNewsAndInterests"=dword:00000000 ; remove news and interests from Taskbar [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Feeds] "EnableFeeds"=dword:00000000 ; SYSTEM ; turn on hardware accelerated gpu scheduling [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\GraphicsDrivers] "HwSchMode"=dword:00000002 ; disable storage sense [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\StorageSense] "AllowStorageSenseGlobal"=dword:00000000 ; --OTHER-- ; Disable update Microsoft Store apps automatically [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsStore] "AutoDownload"=dword:00000002 ; UWP APPS ; disable background apps [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy] "LetAppsRunInBackground"=dword:00000002 ; disable widgets [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\NewsAndInterests\AllowNewsAndInterests] "value"=dword:00000000 ; NVIDIA ; enable old nvidia sharpening [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nvlddmkm\FTS] "EnableGR535"=dword:00000000 ; OTHER ; remove 3d objects [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{0DB7E03F-FC29-4DC6-9020-FF41B59E513A}] [-HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{0DB7E03F-FC29-4DC6-9020-FF41B59E513A}] ; Remove Home Folder [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace\{f874310e-b6b7-47dc-bc84-b9e6b38f5903}] [HKEY_USERS\.DEFAULT\Control Panel\Mouse] "MouseSpeed"="0" "MouseThreshold1"="0" "MouseThreshold2"="0" "@ Set-Content -Path "$env:TEMP\Optimize_LocalMachine_Registry.reg" -Value $MultilineComment -Force # edit reg file $path = "$env:TEMP\Optimize_LocalMachine_Registry.reg" (Get-Content $path) -replace "\?", "$" | Out-File $path # import reg file Regedit.exe /S "$env:TEMP\Optimize_LocalMachine_Registry.reg" Show-Header Write-Host "Recommended Local Machine Registry Settings Applied." -ForegroundColor Green Wait-IfNotSpecialize } function Set-DefaultHKLMRegistry { # create reg file $MultilineComment = @" Windows Registry Editor Version 5.00 ; --Revert Application and Feature Restrictions-- ; Allows Dev Home Installation [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsUpdate\Orchestrator\UScheduler_Oobe\DevHomeUpdate] @="" ; Allows New Outlook for Windows Installation [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsUpdate\Orchestrator\UScheduler_Oobe\OutlookUpdate] @="" ; Reverts Chat Auto Installation and Restores Chat Icon [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Communications] "ConfigureChatAutoInstall"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Chat] "ChatIcon"=dword:00000001 ; Enables News and Interests [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Dsh] "AllowNewsAndInterests"=- ; Enables BitLocker Auto Encryption on Windows 11 24H2 and Onwards [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\BitLocker] "PreventDeviceEncryption"=- [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\EnhancedStorageDevices] "TCGSecurityActivationDisabled"=- ; Enables Cortana [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Windows Search] "AllowCortana"=- ; Shows the Meet Now Button on the Taskbar ; Shows Recently Added Apps in Start Menu [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] "HideSCAMeetNow"=- ; Re-enables WiFi-Sense [HKEY_LOCAL_MACHINE\Software\Microsoft\PolicyManager\default\WiFi\AllowWiFiHotSpotReporting] "Value"=dword:00000001 [HKEY_LOCAL_MACHINE\Software\Microsoft\PolicyManager\default\WiFi\AllowAutoConnectToWiFiSenseHotspots] "Value"=dword:00000001 ; Enables Tablet Mode ; Default Sign-In Mode [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ImmersiveShell] "TabletMode"=dword:00000001 "SignInMode"=dword:00000000 ; Enables Xbox GameDVR [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\GameDVR] "AllowGameDVR"=- ; Enables OneDrive Automatic Backups of Important Folders (Documents, Pictures etc.) [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\OneDrive] "KFMBlockOptIn"=- ; Enables "Push To Install" feature in Windows [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\PushToInstall] "DisablePushToInstall"=- ; Enables Windows Consumer Features Like App Promotions etc. ; Enables Consumer Account State Content ; Enables Cloud Optimized Content [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CloudContent] "DisableWindowsConsumerFeatures"=- "DisableConsumerAccountStateContent"=- "DisableCloudOptimizedContent"=- ; Unblocks "Allow my organization to manage my device" pop-up message [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WorkplaceJoin] "BlockAADWorkplaceJoin"=- ; --Revert Start Menu Customization-- ; Restores Default Pinned Apps to the Start Menu [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\current\device\Start] "ConfigureStartPins"=- "ConfigureStartPins_ProviderSet"=- "ConfigureStartPins_WinningProvider"=- [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\providers\B5292708-1619-419B-9923-E5D9F3925E71\default\Device\Start] "ConfigureStartPins"=- "ConfigureStartPins_LastWrite"=- ; --Revert File System Settings-- ; Revert Long File Paths to Default (Disabled) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\FileSystem] "LongPathsEnabled"=dword:00000000 ; --Revert Multimedia and Gaming Performance-- ; Reverts Multimedia Applications' System Responsiveness and Network Throttling Index to Default Values [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Multimedia\SystemProfile] "SystemResponsiveness"=dword:00000014 "NetworkThrottlingIndex"=dword:ffffffff ; --Revert Gaming Performance-- ; Reverts Graphics Cards Priority for Gaming to Default [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Multimedia\SystemProfile\Tasks\Games] "GPU Priority"=dword:00000002 ; Default value is 2 ; Reverts CPU Priority for Gaming to Default [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Multimedia\SystemProfile\Tasks\Games] "Priority"=dword:00000002 ; Default value is 2 ; Reverts Games Scheduling Category to Default [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Multimedia\SystemProfile\Tasks\Games] "Scheduling Category"="Medium" ; Default value is "Medium" ; Removes "Take Ownership" from Context Menu [-HKEY_CLASSES_ROOT\*\shell\TakeOwnership] [-HKEY_CLASSES_ROOT\*\shell\runas] [-HKEY_CLASSES_ROOT\Directory\shell\TakeOwnership] [-HKEY_CLASSES_ROOT\Drive\shell\runas] ; HARDWARE AND SOUND ; lock [-HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\FlyoutMenuSettings] ; sleep [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FlyoutMenuSettings] ; startup sound [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\BootAnimation] "DisableStartupSound"=dword:00000000 [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\EditionOverrides] "UserSetting_DisableStartupSound"=dword:00000000 ; device installation settings [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Device Metadata] "PreventDeviceMetadataFromNetwork"=dword:00000000 ; NETWORK AND INTERNET ; allow other network users to control or disable the shared internet connection [HKEY_LOCAL_MACHINE\System\ControlSet001\Control\Network\SharedAccessConnection] "EnableControl"=dword:00000001 ; SYSTEM AND SECURITY ; revert adjust for best performance of programs [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\PriorityControl] "Win32PrioritySeparation"=dword:00000002 ; remote assistance [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Remote Assistance] "fAllowToGetHelp"=dword:00000001 ; TROUBLESHOOTING ; automatic maintenance [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Maintenance] "MaintenanceDisabled"=- ; SECURITY AND MAINTENANCE ; report problems [-HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting] ; ACCOUNTS ; use my sign in info after restart [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] "DisableAutomaticRestartSignOn"=- ; APPS ; archive apps [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Appx] "AllowAutomaticAppArchiving"=- ; PERSONALIZATION [-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize] ; don't hide most used list in start menu ; show recently added apps [-HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Explorer] ; news and interests [-HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Feeds] ; SYSTEM ; hardware accelerated gpu scheduling [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\GraphicsDrivers] "HwSchMode"=- ; storage sense [-HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\StorageSense] ; --OTHER-- ; Enable update Microsoft Store apps automatically [-HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsStore] ; --CAN'T DO NATIVELY-- ; UWP APPS ; background apps [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy] "LetAppsRunInBackground"=- ; widgets [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\NewsAndInterests\AllowNewsAndInterests] "value"=dword:00000001 ; NVIDIA ; old nvidia sharpening [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\nvlddmkm\FTS] "EnableGR535"=dword:00000001 ; OTHER ; 3d objects [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{0DB7E03F-FC29-4DC6-9020-FF41B59E513A}] [HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{0DB7E03F-FC29-4DC6-9020-FF41B59E513A}] ; Restores Home Folder [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace\{f874310e-b6b7-47dc-bc84-b9e6b38f5903}] @="CLSID_MSGraphHomeFolder" [HKEY_USERS\.DEFAULT\Control Panel\Mouse] "MouseSpeed"="1" "MouseThreshold1"="6" "MouseThreshold2"="10" "@ Set-Content -Path "$env:TEMP\Restore_LocalMachine_Registry.reg" -Value $MultilineComment -Force # edit reg file $path = "$env:TEMP\Restore_LocalMachine_Registry.reg" (Get-Content $path) -replace "\?", "$" | Out-File $path # import reg file Regedit.exe /S "$env:TEMP\Restore_LocalMachine_Registry.reg" Show-Header Write-Host "Default Local Machine Registry Settings Applied." -ForegroundColor Green Wait-IfNotSpecialize } function Set-RecommendedHKCURegistry { Clear-Host Write-Host "Optimizing User Registry . . ." # Set Wallpaper (Helper Function for Recommended User Settings) $defaultWallpaperPath = "C:\Windows\Web\4K\Wallpaper\Windows\img0_3840x2160.jpg" $darkModeWallpaperPath = "C:\Windows\Web\4K\Wallpaper\Windows\img19_1920x1200.jpg" function Set-Wallpaper ($wallpaperPath) { reg.exe add "HKEY_CURRENT_USER\Control Panel\Desktop" /v Wallpaper /t REG_SZ /d "$wallpaperPath" /f | Out-Null # Notify the system of the change rundll32.exe user32.dll, UpdatePerUserSystemParameters } # Check Windows version $windowsVersion = (Get-ItemProperty "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion").CurrentBuild # Apply appropriate wallpaper based on Windows version or existence of dark mode wallpaper if ($windowsVersion -ge 22000) { # Assuming Windows 11 starts at build 22000 if (Test-Path $darkModeWallpaperPath) { Set-Wallpaper -wallpaperPath $darkModeWallpaperPath } } else { # Apply default wallpaper for Windows 10 Set-Wallpaper -wallpaperPath $defaultWallpaperPath } $MultilineComment = @" Windows Registry Editor Version 5.00 ; EASE OF ACCESS ; disable narrator [HKEY_CURRENT_USER\Software\Microsoft\Narrator\NoRoam] "DuckAudio"=dword:00000000 "WinEnterLaunchEnabled"=dword:00000000 "ScriptingEnabled"=dword:00000000 "OnlineServicesEnabled"=dword:00000000 "EchoToggleKeys"=dword:00000000 ; disable narrator settings [HKEY_CURRENT_USER\Software\Microsoft\Narrator] "NarratorCursorHighlight"=dword:00000000 "CoupleNarratorCursorKeyboard"=dword:00000000 "IntonationPause"=dword:00000000 "ReadHints"=dword:00000000 "ErrorNotificationType"=dword:00000000 "EchoChars"=dword:00000000 "EchoWords"=dword:00000000 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Narrator\NarratorHome] "MinimizeType"=dword:00000000 "AutoStart"=dword:00000000 ; disable ease of access settings [HKEY_CURRENT_USER\Software\Microsoft\Ease of Access] "selfvoice"=dword:00000000 "selfscan"=dword:00000000 [HKEY_CURRENT_USER\Control Panel\Accessibility] "Sound on Activation"=dword:00000000 "Warning Sounds"=dword:00000000 [HKEY_CURRENT_USER\Control Panel\Accessibility\HighContrast] "Flags"="4194" [HKEY_CURRENT_USER\Control Panel\Accessibility\Keyboard Response] "Flags"="2" "AutoRepeatRate"="0" "AutoRepeatDelay"="0" [HKEY_CURRENT_USER\Control Panel\Accessibility\MouseKeys] "Flags"="130" "MaximumSpeed"="39" "TimeToMaximumSpeed"="3000" [HKEY_CURRENT_USER\Control Panel\Accessibility\StickyKeys] "Flags"="2" [HKEY_CURRENT_USER\Control Panel\Accessibility\ToggleKeys] "Flags"="34" [HKEY_CURRENT_USER\Control Panel\Accessibility\SoundSentry] "Flags"="0" "FSTextEffect"="0" "TextEffect"="0" "WindowsEffect"="0" [HKEY_CURRENT_USER\Control Panel\Accessibility\SlateLaunch] "ATapp"="" "LaunchAT"=dword:00000000 ; CLOCK AND REGION ; disable notify me when the clock changes [HKEY_CURRENT_USER\Control Panel\TimeDate] "DstNotification"=dword:00000000 ; APPEARANCE AND PERSONALIZATION ; open file explorer to this pc ; show file name extensions ; disable display file size information in folder tips ; disable show pop-up description for folder and desktop items ; disable show preview handlers in preview pane ; disable show status bar ; disable show sync provider notifications ; disable use sharing wizard ; disable animations in the taskbar ; enable show thumbnails instead of icons ; disable show translucent selection rectangle ; disable use drop shadows for icon labels on the desktop ; more pins personalization start ; disable show account-related notifications ; disable show recently opened items in start, jump lists and file explorer ; left taskbar alignment ; remove chat from taskbar ; remove task view from taskbar ; remove copilot from taskbar ; disable show recommendations for tips shortcuts new apps and more ; disable share any window from my taskbar ; disable snap window settings - SnapAssist to JointResize Entries ; alt tab open windows only [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced] "LaunchTo"=dword:00000001 "HideFileExt"=dword:00000000 "FolderContentsInfoTip"=dword:00000000 "ShowInfoTip"=dword:00000000 "ShowPreviewHandlers"=dword:00000000 "ShowStatusBar"=dword:00000000 "ShowSyncProviderNotifications"=dword:00000000 "SharingWizardOn"=dword:00000000 "TaskbarAnimations"=dword:0 "IconsOnly"=dword:0 "ListviewAlphaSelect"=dword:0 "ListviewShadow"=dword:0 "Start_Layout"=dword:00000001 "Start_AccountNotifications"=dword:00000000 "Start_TrackDocs"=dword:00000000 "TaskbarAl"=dword:00000000 "TaskbarMn"=dword:00000000 "ShowTaskViewButton"=dword:00000000 "ShowCopilotButton"=dword:00000000 "Start_IrisRecommendations"=dword:00000000 "TaskbarSn"=dword:00000000 "SnapAssist"=dword:00000000 "DITest"=dword:00000000 "EnableSnapBar"=dword:00000000 "EnableTaskGroups"=dword:00000000 "EnableSnapAssistFlyout"=dword:00000000 "SnapFill"=dword:00000000 "JointResize"=dword:00000000 "MultiTaskingAltTabFilter"=dword:00000003 ; hide frequent folders in quick access ; disable show files from office.com ; show all taskbar icons on Windows 10 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer] "ShowFrequent"=dword:00000000 "ShowCloudFilesInQuickAccess"=dword:00000000 "EnableAutoTray"=dword:00000000 ; enable display full path in the title bar [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CabinetState] "FullPath"=dword:00000001 ; HARDWARE AND SOUND ; sound communications do nothing [HKEY_CURRENT_USER\Software\Microsoft\Multimedia\Audio] "UserDuckingPreference"=dword:00000003 ; disable enhance pointer precision ; mouse fix (no accel with epp on) [HKEY_CURRENT_USER\Control Panel\Mouse] "MouseSpeed"="0" "MouseThreshold1"="0" "MouseThreshold2"="0" "MouseSensitivity"="10" "SmoothMouseXCurve"=hex:\ 00,00,00,00,00,00,00,00,\ C0,CC,0C,00,00,00,00,00,\ 80,99,19,00,00,00,00,00,\ 40,66,26,00,00,00,00,00,\ 00,33,33,00,00,00,00,00 "SmoothMouseYCurve"=hex:\ 00,00,00,00,00,00,00,00,\ 00,00,38,00,00,00,00,00,\ 00,00,70,00,00,00,00,00,\ 00,00,A8,00,00,00,00,00,\ 00,00,E0,00,00,00,00,00 ; SYSTEM AND SECURITY ; set appearance options to custom [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\VisualEffects] "VisualFXSetting"=dword:3 ; disable animate controls and elements inside windows ; disable fade or slide menus into view ; disable fade or slide tooltips into view ; disable fade out menu items after clicking ; disable show shadows under mouse pointer ; disable show shadows under windows ; disable slide open combo boxes ; disable smooth-scroll list boxes ; enable smooth edges of screen fonts ; 100% dpi scaling ; disable fix scaling for apps ; disable menu show delay [HKEY_CURRENT_USER\Control Panel\Desktop] "UserPreferencesMask"=hex(2):90,12,03,80,10,00,00,00 "FontSmoothing"="2" "LogPixels"=dword:00000060 "Win8DpiScaling"=dword:00000001 "EnablePerProcessSystemDPI"=dword:00000000 "MenuShowDelay"="0" ; --IMMERSIVE CONTROL PANEL-- ; PRIVACY ; disable show me notification in the settings app [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\SystemSettings\AccountNotifications] "EnableAccountNotifications"=dword:00000000 ; disable voice activation [HKEY_CURRENT_USER\Software\Microsoft\Speech_OneCore\Settings\VoiceActivation\UserPreferenceForAllApps] "AgentActivationEnabled"=dword:00000000 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Speech_OneCore\Settings\VoiceActivation\UserPreferenceForAllApps] "AgentActivationLastUsed"=dword:00000000 ; disable other devices [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\bluetoothSync] "Value"="Deny" ; disable let websites show me locally relevant content by accessing my language list [HKEY_CURRENT_USER\Control Panel\International\User Profile] "HttpAcceptLanguageOptOut"=dword:00000001 ; disable let windows improve start and search results by tracking app launches [HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\EdgeUI] "DisableMFUTracking"=dword:00000001 ; disable personal inking and typing dictionary [HKEY_CURRENT_USER\Software\Microsoft\InputPersonalization] "RestrictImplicitInkCollection"=dword:00000001 "RestrictImplicitTextCollection"=dword:00000001 [HKEY_CURRENT_USER\Software\Microsoft\InputPersonalization\TrainedDataStore] "HarvestContacts"=dword:00000000 [HKEY_CURRENT_USER\Software\Microsoft\Personalization\Settings] "AcceptedPrivacyPolicy"=dword:00000000 ; feedback frequency never [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Siuf\Rules] "NumberOfSIUFInPeriod"=dword:00000000 "PeriodInNanoSeconds"=- ; SEARCH ; disable search highlights ; disable search history ; disable safe search ; disable cloud content search for work or school account ; disable cloud content search for microsoft account [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\SearchSettings] "IsDynamicSearchBoxEnabled"=dword:00000000 "IsDeviceSearchHistoryEnabled"=dword:00000000 "SafeSearchMode"=dword:00000000 "IsAADCloudSearchEnabled"=dword:00000000 "IsMSACloudSearchEnabled"=dword:00000000 ; EASE OF ACCESS ; disable magnifier settings [HKEY_CURRENT_USER\SOFTWARE\Microsoft\ScreenMagnifier] "FollowCaret"=dword:00000000 "FollowNarrator"=dword:00000000 "FollowMouse"=dword:00000000 "FollowFocus"=dword:00000000 ; GAMING ; disable game bar [HKEY_CURRENT_USER\System\GameConfigStore] "GameDVR_Enabled"=dword:00000000 ; disable enable open xbox game bar using game controller ; enable game mode [HKEY_CURRENT_USER\Software\Microsoft\GameBar] "UseNexusForGameBarEnabled"=dword:00000000 "AutoGameModeEnabled"=dword:00000001 ; other settings [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\GameDVR] "AppCaptureEnabled"=dword:00000000 "AudioEncodingBitrate"=dword:0001f400 "AudioCaptureEnabled"=dword:00000000 "CustomVideoEncodingBitrate"=dword:003d0900 "CustomVideoEncodingHeight"=dword:000002d0 "CustomVideoEncodingWidth"=dword:00000500 "HistoricalBufferLength"=dword:0000001e "HistoricalBufferLengthUnit"=dword:00000001 "HistoricalCaptureEnabled"=dword:00000000 "HistoricalCaptureOnBatteryAllowed"=dword:00000001 "HistoricalCaptureOnWirelessDisplayAllowed"=dword:00000001 "MaximumRecordLength"=hex(b):00,D0,88,C3,10,00,00,00 "VideoEncodingBitrateMode"=dword:00000002 "VideoEncodingResolutionMode"=dword:00000002 "VideoEncodingFrameRateMode"=dword:00000000 "EchoCancellationEnabled"=dword:00000001 "CursorCaptureEnabled"=dword:00000000 "VKToggleGameBar"=dword:00000000 "VKMToggleGameBar"=dword:00000000 "VKSaveHistoricalVideo"=dword:00000000 "VKMSaveHistoricalVideo"=dword:00000000 "VKToggleRecording"=dword:00000000 "VKMToggleRecording"=dword:00000000 "VKTakeScreenshot"=dword:00000000 "VKMTakeScreenshot"=dword:00000000 "VKToggleRecordingIndicator"=dword:00000000 "VKMToggleRecordingIndicator"=dword:00000000 "VKToggleMicrophoneCapture"=dword:00000000 "VKMToggleMicrophoneCapture"=dword:00000000 "VKToggleCameraCapture"=dword:00000000 "VKMToggleCameraCapture"=dword:00000000 "VKToggleBroadcast"=dword:00000000 "VKMToggleBroadcast"=dword:00000000 "MicrophoneCaptureEnabled"=dword:00000000 "SystemAudioGain"=hex(b):10,27,00,00,00,00,00,00 "MicrophoneGain"=hex(b):10,27,00,00,00,00,00,00 ; TIME & LANGUAGE ; disable show the voice typing mic button ; disable typing insights [HKEY_CURRENT_USER\Software\Microsoft\input\Settings] "IsVoiceTypingKeyEnabled"=dword:00000000 "InsightsEnabled"=dword:00000000 ; disable capitalize the first letter of each sentence ; disable play key sounds as i type ; disable add a period after i double-tap the spacebar ; disable show key background [HKEY_CURRENT_USER\Software\Microsoft\TabletTip\1.7] "EnableAutoShiftEngage"=dword:00000000 "EnableKeyAudioFeedback"=dword:00000000 "EnableDoubleTapSpace"=dword:00000000 "IsKeyBackgroundEnabled"=dword:00000000 ; PERSONALIZATION ; dark theme [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize] "AppsUseLightTheme"=dword:00000001 "SystemUsesLightTheme"=dword:00000001 "EnableTransparency"=dword:00000001 ; disable web search in start menu [HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows\Explorer] "DisableSearchBoxSuggestions"=dword:00000001 ; Remove meet now [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] "NoStartMenuMFUprogramsList"=- "NoInstrumentation"=- "HideSCAMeetNow"=dword:00000001 ; remove search from taskbar [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Search] "SearchboxTaskbarMode"=dword:00000000 ; disable use dynamic lighting on my devices ; disable compatible apps in the forground always control lighting ; disable match my windows accent color [HKEY_CURRENT_USER\Software\Microsoft\Lighting] "AmbientLightingEnabled"=dword:00000000 "ControlledByForegroundApp"=dword:00000000 "UseSystemAccentColor"=dword:00000000 ; DEVICES ; disable let windows manage my default printer [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows] "LegacyDefaultPrinterMode"=dword:00000001 ; disable write with your fingertip [HKEY_CURRENT_USER\Software\Microsoft\TabletTip\EmbeddedInkControl] "EnableInkingWithTouch"=dword:00000000 ; SYSTEM [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\DWM] "UseDpiScaling"=dword:00000000 ; disable variable refresh rate & enable optimizations for windowed games [HKEY_CURRENT_USER\Software\Microsoft\DirectX\UserGpuPreferences] "DirectXUserGlobalSettings"="SwapEffectUpgradeEnable=1;VRROptimizeEnable=0;" ; disable notifications ; Disable Notifications on Lock Screen [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\PushNotifications] "ToastEnabled"=dword:00000000 "LockScreenToastEnabled"=dword:00000000 ; Disable Allow Notifications to Play Sounds ; Disable Notifications on Lock Screen ; Disable Show Reminders and VoIP Calls Notifications on Lock Screen [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings] "NOC_GLOBAL_SETTING_ALLOW_NOTIFICATION_SOUND"=dword:00000000 "NOC_GLOBAL_SETTING_ALLOW_TOASTS_ABOVE_LOCK"=dword:00000000 "NOC_GLOBAL_SETTING_ALLOW_CRITICAL_TOASTS_ABOVE_LOCK"=dword:00000000 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings\Windows.SystemToast.SecurityAndMaintenance] "Enabled"=dword:00000000 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings\windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel] "Enabled"=dword:00000000 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings\Windows.SystemToast.CapabilityAccess] "Enabled"=dword:00000000 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings\Windows.SystemToast.StartupApp] "Enabled"=dword:00000000 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\UserProfileEngagement] "ScoobeSystemSettingEnabled"=dword:00000000 ; disable suggested actions [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\SmartActionPlatform\SmartClipboard] "Disabled"=dword:00000001 ; battery options optimize for video quality [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\VideoSettings] "VideoQualityOnBattery"=dword:00000001 ; UWP Apps ; disable windows input experience preload [HKEY_CURRENT_USER\Software\Microsoft\input] "IsInputAppPreloadEnabled"=dword:00000000 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Dsh] "IsPrelaunchEnabled"=dword:00000000 ; disable copilot [HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\WindowsCopilot] "TurnOffWindowsCopilot"=dword:00000001 ; DISABLE ADVERTISING & PROMOTIONAL [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager] "ContentDeliveryAllowed"=dword:00000000 "FeatureManagementEnabled"=dword:00000000 "OemPreInstalledAppsEnabled"=dword:00000000 "PreInstalledAppsEnabled"=dword:00000000 "PreInstalledAppsEverEnabled"=dword:00000000 "RotatingLockScreenEnabled"=dword:00000000 "RotatingLockScreenOverlayEnabled"=dword:00000000 "SilentInstalledAppsEnabled"=dword:00000000 "SlideshowEnabled"=dword:00000000 "SoftLandingEnabled"=dword:00000000 "SubscribedContent-310093Enabled"=dword:00000000 "SubscribedContent-314563Enabled"=dword:00000000 "SubscribedContent-338388Enabled"=dword:00000000 "SubscribedContent-338389Enabled"=dword:00000000 "SubscribedContent-338393Enabled"=dword:00000000 "SubscribedContent-353694Enabled"=dword:00000000 "SubscribedContent-353696Enabled"=dword:00000000 "SubscribedContent-353698Enabled"=dword:00000000 "SubscribedContentEnabled"=dword:00000000 "SystemPaneSuggestionsEnabled"=dword:00000000 ; OTHER ; remove gallery [HKEY_CURRENT_USER\Software\Classes\CLSID\{e88865ea-0e1c-4e20-9aa6-edcd0212c87c}] "System.IsPinnedToNameSpaceTree"=dword:00000000 ; restore the classic context menu [HKEY_CURRENT_USER\Software\Classes\CLSID\{86ca1aa0-34aa-4e8b-a509-50c905bae2a2}\InprocServer32] @="" ; removes OneDrive Setup [-HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "OneDriveSetup"=- ; Hides the Try New Outlook Button [HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\Options\General] "HideNewOutlookToggle"=dword:00000000 "@ Set-Content -Path "$env:TEMP\Optimize_User_Registry.reg" -Value $MultilineComment -Force Regedit.exe /S "$env:TEMP\Optimize_User_Registry.reg" Show-Header Write-Host "Recommended User Registry Settings Applied." -ForegroundColor Green Wait-IfNotSpecialize } function Set-DefaultHKCURegistry { Clear-Host Write-Host "Restoring User Default Registry Settings . . ." $MultilineComment = @" Windows Registry Editor Version 5.00 ; --LEGACY CONTROL PANEL-- ; EASE OF ACCESS ; narrator [HKEY_CURRENT_USER\Software\Microsoft\Narrator\NoRoam] "DuckAudio"=- "WinEnterLaunchEnabled"=- "ScriptingEnabled"=- "OnlineServicesEnabled"=- "EchoToggleKeys"=- ; narrator settings [HKEY_CURRENT_USER\Software\Microsoft\Narrator] "NarratorCursorHighlight"=- "CoupleNarratorCursorKeyboard"=- "IntonationPause"=- "ReadHints"=- "ErrorNotificationType"=- "EchoChars"=- "EchoWords"=- [-HKEY_CURRENT_USER\SOFTWARE\Microsoft\Narrator\NarratorHome] ; ease of access settings [-HKEY_CURRENT_USER\Software\Microsoft\Ease of Access] [HKEY_CURRENT_USER\Control Panel\Accessibility] "Sound on Activation"=- "Warning Sounds"=- [HKEY_CURRENT_USER\Control Panel\Accessibility\HighContrast] "Flags"="126" [HKEY_CURRENT_USER\Control Panel\Accessibility\Keyboard Response] "Flags"="126" "AutoRepeatRate"="500" "AutoRepeatDelay"="1000" [HKEY_CURRENT_USER\Control Panel\Accessibility\MouseKeys] "Flags"="62" "MaximumSpeed"="80" "TimeToMaximumSpeed"="3000" [HKEY_CURRENT_USER\Control Panel\Accessibility\StickyKeys] "Flags"="510" [HKEY_CURRENT_USER\Control Panel\Accessibility\ToggleKeys] "Flags"="62" [HKEY_CURRENT_USER\Control Panel\Accessibility\SoundSentry] "Flags"="2" "FSTextEffect"="0" "TextEffect"="0" "WindowsEffect"="1" [HKEY_CURRENT_USER\Control Panel\Accessibility\SlateLaunch] "ATapp"="narrator" "LaunchAT"=dword:00000001 ; CLOCK AND REGION ; notify me when the clock changes [-HKEY_CURRENT_USER\Control Panel\TimeDate] ; APPEARANCE AND PERSONALIZATION [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced] "LaunchTo"=- "HideFileExt"=dword:00000001 "FolderContentsInfoTip"=- "ShowInfoTip"=dword:00000001 "ShowPreviewHandlers"=- "ShowStatusBar"=dword:00000001 "ShowSyncProviderNotifications"=- "SharingWizardOn"=- "TaskbarAnimations"=dword:1 "IconsOnly"=dword:0 "ListviewAlphaSelect"=dword:1 "ListviewShadow"=dword:1 "Start_Layout"=- "Start_AccountNotifications"=- "Start_TrackDocs"=- "TaskbarAl"=- "TaskbarMn"=- "ShowTaskViewButton"=- "ShowCopilotButton"=- "Start_IrisRecommendations"=- "TaskbarSn"=- "SnapAssist"=- "DITest"=- "EnableSnapBar"=- "EnableTaskGroups"=- "EnableSnapAssistFlyout"=- "SnapFill"=- "JointResize"=- "MultiTaskingAltTabFilter"=- ; frequent folders in quick access ; show files from office.com ; don't show all taskbar icons [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer] "ShowFrequent"=- "ShowCloudFilesInQuickAccess"=- "EnableAutoTray"=- ; display full path in the title bar [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CabinetState] "FullPath"=dword:00000000 ; HARDWARE AND SOUND ; sound communications [HKEY_CURRENT_USER\Software\Microsoft\Multimedia\Audio] "UserDuckingPreference"=- ; enhance pointer precision ; mouse (default accel with epp on) [HKEY_CURRENT_USER\Control Panel\Mouse] "MouseSpeed"="1" "MouseThreshold1"="6" "MouseThreshold2"="10" "MouseSensitivity"="10" "SmoothMouseXCurve"=hex:00,00,00,00,00,00,00,00,15,6e,00,00,00,00,00,00,00,40,\ 01,00,00,00,00,00,29,dc,03,00,00,00,00,00,00,00,28,00,00,00,00,00 "SmoothMouseYCurve"=hex:00,00,00,00,00,00,00,00,fd,11,01,00,00,00,00,00,00,24,\ 04,00,00,00,00,00,00,fc,12,00,00,00,00,00,00,c0,bb,01,00,00,00,00 ; SYSTEM AND SECURITY ; set appearance options [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\VisualEffects] "VisualFXSetting"=- ; animate controls and elements inside windows ; fade or slide menus into view ; fade or slide tooltips into view ; fade out menu items after clicking ; show shadows under mouse pointer ; show shadows under windows ; slide open combo boxes ; smooth-scroll list boxes ; smooth edges of screen fonts ; dpi scaling ; fix scaling for apps ; menu show delay [HKEY_CURRENT_USER\Control Panel\Desktop] "UserPreferencesMask"=hex(2):9e,1e,07,80,12,00,00,00 "FontSmoothing"="2" "LogPixels"=- "Win8DpiScaling"=dword:00000000 "EnablePerProcessSystemDPI"=- "MenuShowDelay"="400" ; --IMMERSIVE CONTROL PANEL-- ; PRIVACY ; show me notification in the settings app [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\SystemSettings\AccountNotifications] "EnableAccountNotifications"=- ; allow location override [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\CPSS\Store\UserLocationOverridePrivacySetting] "Value"=dword:00000001 ; voice activation [-HKEY_CURRENT_USER\Software\Microsoft\Speech_OneCore\Settings] ; other devices [-HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\bluetoothSync] ; let websites show me locally relevant content by accessing my language list [HKEY_CURRENT_USER\Control Panel\International\User Profile] "HttpAcceptLanguageOptOut"=- ; let windows improve start and search results by tracking app launches [-HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\EdgeUI] ; personal inking and typing dictionary [HKEY_CURRENT_USER\Software\Microsoft\InputPersonalization] "RestrictImplicitInkCollection"=dword:00000000 "RestrictImplicitTextCollection"=dword:00000000 [HKEY_CURRENT_USER\Software\Microsoft\InputPersonalization\TrainedDataStore] "HarvestContacts"=dword:00000001 [HKEY_CURRENT_USER\Software\Microsoft\Personalization\Settings] "AcceptedPrivacyPolicy"=dword:00000001 ; feedback frequency [-HKEY_CURRENT_USER\SOFTWARE\Microsoft\Siuf] ; SEARCH [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\SearchSettings] "IsDynamicSearchBoxEnabled"=- "IsDeviceSearchHistoryEnabled"=- "SafeSearchMode"=- "IsAADCloudSearchEnabled"=- "IsMSACloudSearchEnabled"=- ; EASE OF ACCESS ; magnifier settings [HKEY_CURRENT_USER\SOFTWARE\Microsoft\ScreenMagnifier] "FollowCaret"=- "FollowNarrator"=- "FollowMouse"=- "FollowFocus"=- ; GAMING ; game bar [HKEY_CURRENT_USER\System\GameConfigStore] "GameDVR_Enabled"=dword:00000000 ; enable open xbox game bar using game controller ; game mode [HKEY_CURRENT_USER\Software\Microsoft\GameBar] "UseNexusForGameBarEnabled"=- "AutoGameModeEnabled"=- ; other settings [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\GameDVR] "AppCaptureEnabled"=- "AudioEncodingBitrate"=- "AudioCaptureEnabled"=- "CustomVideoEncodingBitrate"=- "CustomVideoEncodingHeight"=- "CustomVideoEncodingWidth"=- "HistoricalBufferLength"=- "HistoricalBufferLengthUnit"=- "HistoricalCaptureEnabled"=- "HistoricalCaptureOnBatteryAllowed"=- "HistoricalCaptureOnWirelessDisplayAllowed"=- "MaximumRecordLength"=- "VideoEncodingBitrateMode"=- "VideoEncodingResolutionMode"=- "VideoEncodingFrameRateMode"=- "EchoCancellationEnabled"=- "CursorCaptureEnabled"=- "VKToggleGameBar"=- "VKMToggleGameBar"=- "VKSaveHistoricalVideo"=- "VKMSaveHistoricalVideo"=- "VKToggleRecording"=- "VKMToggleRecording"=- "VKTakeScreenshot"=- "VKMTakeScreenshot"=- "VKToggleRecordingIndicator"=- "VKMToggleRecordingIndicator"=- "VKToggleMicrophoneCapture"=- "VKMToggleMicrophoneCapture"=- "VKToggleCameraCapture"=- "VKMToggleCameraCapture"=- "VKToggleBroadcast"=- "VKMToggleBroadcast"=- "MicrophoneCaptureEnabled"=- "SystemAudioGain"=- "MicrophoneGain"=- ; TIME & LANGUAGE ; show the voice typing mic button ; typing insights [HKEY_CURRENT_USER\Software\Microsoft\input\Settings] "IsVoiceTypingKeyEnabled"=- "InsightsEnabled"=- ; capitalize the first letter of each sentence ; play key sounds as i type ; add a period after i double-tap the spacebar ; show key background [HKEY_CURRENT_USER\Software\Microsoft\TabletTip\1.7] "EnableAutoShiftEngage"=- "EnableKeyAudioFeedback"=- "EnableDoubleTapSpace"=- "IsKeyBackgroundEnabled"=- ; PERSONALIZATION ; light theme [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize] "AppsUseLightTheme"=dword:00000001 "SystemUsesLightTheme"=dword:00000001 [-HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows\Explorer] [-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] ; search from taskbar [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Search] "SearchboxTaskbarMode"=- ; meet now [-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] ; use dynamic lighting on my devices ; compatible apps in the forground always control lighting ; match my windows accent color [HKEY_CURRENT_USER\Software\Microsoft\Lighting] "AmbientLightingEnabled"=dword:00000001 "ControlledByForegroundApp"=- "UseSystemAccentColor"=dword:00000001 ; DEVICES ; let windows manage my default printer [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows] "LegacyDefaultPrinterMode"=dword:ffffffff ; write with your fingertip [-HKEY_CURRENT_USER\Software\Microsoft\TabletTip\EmbeddedInkControl] ; SYSTEM [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\DWM] "UseDpiScaling"=- ; variable refresh rate & optimizations for windowed games [HKEY_CURRENT_USER\Software\Microsoft\DirectX\UserGpuPreferences] "DirectXUserGlobalSettings"=- ; Notification defaults [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\PushNotifications] "ToastEnabled"=- "LockScreenToastEnabled"=- [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings] "NOC_GLOBAL_SETTING_ALLOW_NOTIFICATION_SOUND"=- "NOC_GLOBAL_SETTING_ALLOW_TOASTS_ABOVE_LOCK"=- "NOC_GLOBAL_SETTING_ALLOW_CRITICAL_TOASTS_ABOVE_LOCK"=- [-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings\Windows.SystemToast.SecurityAndMaintenance] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings\windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel] "Enabled"=- [-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings\Windows.SystemToast.CapabilityAccess] [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings\Windows.SystemToast.StartupApp] "Enabled"=dword:00000000 [-HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\UserProfileEngagement] ; suggested actions [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\SmartActionPlatform\SmartClipboard] "Disabled"=- ; battery options optimize [-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\VideoSettings] ; UWP APPS ; disable windows input experience preload [HKEY_CURRENT_USER\Software\Microsoft\input] "IsInputAppPreloadEnabled"=- [-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Dsh] ; copilot [-HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\WindowsCopilot] ; ADVERTISING & PROMOTIONAL [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager] "ContentDeliveryAllowed"=dword:00000001 "FeatureManagementEnabled"=dword:00000001 "OemPreInstalledAppsEnabled"=dword:00000001 "PreInstalledAppsEnabled"=dword:00000001 "PreInstalledAppsEverEnabled"=dword:00000001 "RotatingLockScreenEnabled"=dword:00000001 "RotatingLockScreenOverlayEnabled"=dword:00000001 "SilentInstalledAppsEnabled"=dword:00000001 "SlideshowEnabled"=dword:00000001 "SoftLandingEnabled"=dword:00000001 "SubscribedContent-310093Enabled"=- "SubscribedContent-314563Enabled"=- "SubscribedContent-338388Enabled"=- "SubscribedContent-338389Enabled"=- "SubscribedContent-338393Enabled"=- "SubscribedContent-353694Enabled"=- "SubscribedContent-353696Enabled"=- "SubscribedContent-353698Enabled"=- "SubscribedContentEnabled"=dword:00000001 "SystemPaneSuggestionsEnabled"=dword:00000001 ; OTHER ; gallery [-HKEY_CURRENT_USER\Software\Classes\CLSID\{e88865ea-0e1c-4e20-9aa6-edcd0212c87c}] ; context menu [-HKEY_CURRENT_USER\Software\Classes\CLSID\{86ca1aa0-34aa-4e8b-a509-50c905bae2a2}] "@ Set-Content -Path "$env:TEMP\Restore_User_Registry.reg" -Value $MultilineComment -Force Regedit.exe /S "$env:TEMP\Restore_User_Registry.reg" Show-Header Write-Host "Default User Registry Settings Applied." -ForegroundColor Green Wait-IfNotSpecialize } # End of Registry Optimizations # Start of Tasks and Services Functions function Set-ServiceStartup { # List of services to set to Disabled $disabledServices = @( 'AJRouter', 'AppVClient', 'AssignedAccessManagerSvc', 'DiagTrack', 'DialogBlockingService', 'NetTcpPortSharing', 'RemoteAccess', 'RemoteRegistry', 'shpamsvc', 'ssh-agent', 'tzautoupdate', 'uhssvc', 'UevAgentService' ) # List of services to set to Manual $manualServices = @( 'ALG', 'AppIDSvc', 'AppMgmt', 'AppReadiness', 'AppXSvc', 'Appinfo', 'AxInstSV', 'BDESVC', 'BITS', 'BTAGService', 'BcastDVRUserService_*', 'Browser', 'CDPSvc', 'CDPUserSvc_*', 'COMSysApp', 'CaptureService_*', 'CertPropSvc', 'ClipSVC', 'ConsentUxUserSvc_*', 'CscService', 'DcpSvc', 'DevQueryBroker', 'DeviceAssociationBrokerSvc_*', 'DeviceAssociationService', 'DeviceInstall', 'DevicePickerUserSvc_*', 'DevicesFlowUserSvc_*', 'DisplayEnhancementService', 'DmEnrollmentSvc', 'DoSvc', 'DsSvc', 'DsmSvc', 'EFS', 'EapHost', 'EntAppSvc', 'FDResPub', 'Fax', 'FrameServer', 'FrameServerMonitor', 'GraphicsPerfSvc', 'HomeGroupListener', 'HomeGroupProvider', 'HvHost', 'IEEtwCollectorService', 'IKEEXT', 'InstallService', 'InventorySvc', 'IpxlatCfgSvc', 'KtmRm', 'LicenseManager', 'LxpSvc', 'MSDTC', 'MSiSCSI', 'MapsBroker', 'McpManagementService', 'MessagingService_*', 'MicrosoftEdgeElevationService', 'MixedRealityOpenXRSvc', 'MsKeyboardFilter', 'NPSMSvc_*', 'NaturalAuthentication', 'NcaSvc', 'NcbService', 'NcdAutoSetup', 'Netman', 'NgcCtnrSvc', 'NgcSvc', 'NlaSvc', 'P9RdrService_*', 'PNRPAutoReg', 'PNRPsvc', 'PcaSvc', 'PeerDistSvc', 'PenService_*', 'PerfHost', 'PhoneSvc', 'PimIndexMaintenanceSvc_*', 'PlugPlay', 'PolicyAgent', 'PrintNotify', 'PrintWorkflowUserSvc_*', 'PushToInstall', 'QWAVE', 'RasAuto', 'RasMan', 'RetailDemo', 'RmSvc', 'RpcLocator', 'SCPolicySvc', 'SCardSvr', 'SDRSVC', 'SEMgrSvc', 'SecurityHealthService', 'SensorDataService', 'SensorService', 'SensrSvc', 'SessionEnv', 'SharedAccess', 'SharedRealitySvc', 'SmsRouter', 'SstpSvc', 'StateRepository', 'StiSvc', 'StorSvc', 'TabletInputService', 'TapiSrv', 'TextInputManagementService', 'TieringEngineService', 'TimeBroker', 'TimeBrokerSvc', 'TokenBroker', 'TroubleshootingSvc', 'TrustedInstaller', 'UI0Detect', 'UdkUserSvc_*', 'UmRdpService', 'UnistoreSvc_*', 'UserDataSvc_*', 'UsoSvc', 'VSS', 'VacSvc', 'W32Time', 'WEPHOSTSVC', 'WFDSConMgrSvc', 'WMPNetworkSvc', 'WManSvc', 'WPDBusEnum', 'WSService', 'WSearch', 'WaaSMedicSvc', 'WalletService', 'WarpJITSvc', 'WbioSrvc', 'WcsPlugInService', 'WdiServiceHost', 'WdiSystemHost', 'WebClient', 'Wecsvc', 'WerSvc', 'WiaRpc', 'WinHttpAutoProxySvc', 'WinRM', 'WpcMonSvc', 'WpnService', 'WwanSvc', 'XblAuthManager', 'XblGameSave', 'XboxGipSvc', 'XboxNetApiSvc', 'autotimesvc', 'bthserv', 'camsvc', 'cbdhsvc_*', 'cloudidsvc', 'dcsvc', 'defragsvc', 'diagnosticshub.standardcollector.service', 'diagsvc', 'dmwappushservice', 'dot3svc', 'edgeupdate', 'edgeupdatem', 'embeddedmode', 'fdPHost', 'fhsvc', 'hidserv', 'icssvc', 'lfsvc', 'lltdsvc', 'lmhosts', 'msiserver', 'netprofm', 'p2pimsvc', 'p2psvc', 'perceptionsimulation', 'pla', 'seclogon', 'smphost', 'spectrum', 'sppsvc', 'svsvc', 'swprv', 'upnphost', 'vds', 'vm3dservice', 'vmicguestinterface', 'vmicheartbeat', 'vmickvpexchange', 'vmicrdv', 'vmicshutdown', 'vmictimesync', 'vmicvmsession', 'vmicvss', 'wbengine', 'wcncsvc', 'webthreatdefsvc', 'wercplsupport', 'wisvc', 'wlidsvc', 'wlpasvc', 'wmiApSrv', 'workfolderssvc', 'wuauserv', 'wudfsvc' ) # Set the services in the disabledServices list to Disabled foreach ($service in $disabledServices) { try { Set-Service -Name $service -StartupType Disabled -ErrorAction SilentlyContinue | Out-Null } catch { Show-Header Write-Host "Failed to set $service to Disabled: $_" -ForegroundColor Yellow Wait-IfNotSpecialize } } # Set the services in the manualServices list to Manual foreach ($service in $manualServices) { try { Set-Service -Name $service -StartupType Manual -ErrorAction SilentlyContinue | Out-Null } catch { Show-Header Write-Host "Failed to set $service to Manual: $_" -ForegroundColor Yellow Wait-IfNotSpecialize } } Show-Header Write-Host "Service startup types updated successfully." -ForegroundColor Green Wait-IfNotSpecialize } function Set-DefaultServices { # Get all services that are not currently set to Automatic and revert them $allServices = Get-Service | Where-Object { $_.StartType -ne 'Automatic' } $successCount = 0 foreach ($service in $allServices) { try { Show-Header Write-Host "Setting services to Automatic where permissions are allowed. Please wait . . ." # Set the service startup type to Automatic using Set-Service Set-Service -Name $service.Name -StartupType Automatic 2>&1 | Out-Null # Forcibly set the startup type to Automatic using WMI as a fallback $wmiService = Get-WmiObject -Class Win32_Service -Filter "Name='$($service.Name)'" 2>&1 | Out-Null if ($wmiService) { $result = $wmiService.ChangeStartMode("Automatic") 2>&1 | Out-Null if ($result.ReturnValue -eq 0) { $successCount++ } } } catch { # Silently continue if a service fails continue } } Show-Header Write-Host "Successfully set services to Automatic where permissions allowed." -ForegroundColor Green Wait-IfNotSpecialize } function Disable-ScheduledTasks { # Define the list of scheduled tasks to disable $scheduledTasks = @( "Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser", "Microsoft\Windows\Application Experience\ProgramDataUpdater", "Microsoft\Windows\Autochk\Proxy", "Microsoft\Windows\Customer Experience Improvement Program\Consolidator", "Microsoft\Windows\Customer Experience Improvement Program\UsbCeip", "Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector", "Microsoft\Windows\Feedback\Siuf\DmClient", "Microsoft\Windows\Feedback\Siuf\DmClientOnScenarioDownload", "Microsoft\Windows\Windows Error Reporting\QueueReporting", "Microsoft\Windows\Application Experience\MareBackup", "Microsoft\Windows\Application Experience\StartupAppTask", "Microsoft\Windows\Application Experience\PcaPatchDbTask", "Microsoft\Windows\Maps\MapsUpdateTask" ) $successCount = 0 foreach ($task in $scheduledTasks) { try { # Disable the task without wildcards schtasks /Change /TN $task /Disable 2>&1 | Out-Null $successCount++ } catch { # Silently continue if a task fails continue } } Show-Header Write-Host "Successfully disabled unneeded scheduled tasks." -ForegroundColor Green Wait-IfNotSpecialize } function Enable-ScheduledTasks { # Define the list of scheduled tasks to enable (same as those to disable) $scheduledTasks = @( "Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser", "Microsoft\Windows\Application Experience\ProgramDataUpdater", "Microsoft\Windows\Autochk\Proxy", "Microsoft\Windows\Customer Experience Improvement Program\Consolidator", "Microsoft\Windows\Customer Experience Improvement Program\UsbCeip", "Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector", "Microsoft\Windows\Feedback\Siuf\DmClient", "Microsoft\Windows\Feedback\Siuf\DmClientOnScenarioDownload", "Microsoft\Windows\Windows Error Reporting\QueueReporting", "Microsoft\Windows\Application Experience\MareBackup", "Microsoft\Windows\Application Experience\StartupAppTask", "Microsoft\Windows\Application Experience\PcaPatchDbTask", "Microsoft\Windows\Maps\MapsUpdateTask" ) $successCount = 0 foreach ($task in $scheduledTasks) { try { # Disable the task without wildcards schtasks /Change /TN $task /Disable 2>&1 | Out-Null $successCount++ } catch { # Silently continue if a task fails continue } } Show-Header Write-Host "Successfully Enabled Default scheduled tasks." -ForegroundColor Green Wait-IfNotSpecialize } # End of Tasks and Services Functions # Start of Power Settings Functions function Set-RecommendedPowerSettings { Clear-Host # Import and set Ultimate power plan cmd /c "powercfg /duplicatescheme e9a42b02-d5df-448d-aa00-03f14749eb61 99999999-9999-9999-9999-999999999999 >nul 2>&1 & powercfg /SETACTIVE 99999999-9999-9999-9999-999999999999 >nul 2>&1" # Get all power plans and delete them powercfg /L | ForEach-Object { if ($_ -match "^\s*Power Scheme GUID: (\S+)") { $guid = $matches[1] if ($guid -ne "99999999-9999-9999-9999-999999999999") { cmd /c "powercfg /delete $guid" | Out-Null } } } # Registry modifications $regChanges = @( 'HKLM\SYSTEM\CurrentControlSet\Control\Power /v HibernateEnabled /t REG_DWORD /d 0', # Disables hibernate 'HKLM\SYSTEM\CurrentControlSet\Control\Power /v HibernateEnabledDefault /t REG_DWORD /d 0', # Disables default hibernate settings 'HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\FlyoutMenuSettings /v ShowLockOption /t REG_DWORD /d 0', # Hides the Lock option from the Power menu 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FlyoutMenuSettings /v ShowSleepOption /t REG_DWORD /d 0', # Hides the Sleep option from the Power menu 'HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Power /v HiberbootEnabled /t REG_DWORD /d 0', # Disables Fast Startup (Hiberboot) 'HKLM\SYSTEM\ControlSet001\Control\Power\PowerSettings\54533251-82be-4824-96c1-47b60b740d00\0cc5b647-c1df-4637-891a-dec35c318583 /v ValueMax /t REG_DWORD /d 0', # Unparks CPU cores by setting the maximum processor state 'HKLM\SYSTEM\CurrentControlSet\Control\Power\PowerThrottling /v PowerThrottlingOff /t REG_DWORD /d 1', # Disables power throttling 'HKLM\System\ControlSet001\Control\Power\PowerSettings\2a737441-1930-4402-8d77-b2bebba308a3\0853a681-27c8-4100-a2fd-82013e970683 /v Attributes /t REG_DWORD /d 2', # Unhides "Hub Selective Suspend Timeout" 'HKLM\System\ControlSet001\Control\Power\PowerSettings\2a737441-1930-4402-8d77-b2bebba308a3\d4e98f31-5ffe-4ce1-be31-1b38b384c009 /v Attributes /t REG_DWORD /d 2' # Unhides "USB 3 Link Power Management" ) foreach ($reg in $regChanges) { cmd /c "reg add `$reg` /f >nul 2>&1" } # Modify Power Plan settings $settings = @( @{ SubgroupGUID = "0012ee47-9041-4b5d-9b77-535fba8b1442" # Hard Disk SettingGUIDs = @("6738e2c4-e8a5-4a42-b16a-e040e769756e") # Turn off hard disk after }, @{ SubgroupGUID = "0d7dbae2-4294-402a-ba8e-26777e8488cd" # Desktop Background Settings SettingGUIDs = @("309dce9b-bef4-4119-9921-a851fb12f0f4") # Slide show }, @{ SubgroupGUID = "19cbb8fa-5279-450e-9fac-8a3d5fedd0c1" # Wireless Adapter Settings SettingGUIDs = @("12bbebe6-58d6-4636-95bb-3217ef867c1a") # Power saving mode }, @{ SubgroupGUID = "238c9fa8-0aad-41ed-83f4-97be242c8f20" # Sleep SettingGUIDs = @( "29f6c1db-86da-48c5-9fdb-f2b67b1f44da", # Sleep after "94ac6d29-73ce-41a6-809f-6363ba21b47e", # Allow hybrid sleep "9d7815a6-7ee4-497e-8888-515a05f02364", # Hibernate after "bd3b718a-0680-4d9d-8ab2-e1d2b4ac806d" # Allow wake timers ) }, @{ SubgroupGUID = "2a737441-1930-4402-8d77-b2bebba308a3" # USB Settings SettingGUIDs = @( "0853a681-27c8-4100-a2fd-82013e970683", # USB selective suspend setting "48e6b7a6-50f5-4782-a5d4-53bb8f07e226", # USB 3 Link Power Management "d4e98f31-5ffe-4ce1-be31-1b38b384c009" # USB Hub Selective Suspend Timeout ) }, @{ SubgroupGUID = "501a4d13-42af-4429-9fd1-a8218c268e20" # PCI Express SettingGUIDs = @("ee12f906-d277-404b-b6da-e5fa1a576df5") # Link State Power Management }, @{ SubgroupGUID = "7516b95f-f776-4464-8c53-06167f40cc99" # Display settings SettingGUIDs = @("3c0bc021-c8a8-4e07-a973-6b14cbcb2b7e") # Turn off Display After setting } ) foreach ($group in $settings) { $subgroup = $group.SubgroupGUID foreach ($setting in $group.SettingGUIDs) { powercfg /setacvalueindex 99999999-9999-9999-9999-999999999999 $subgroup $setting 0x00000000 powercfg /setdcvalueindex 99999999-9999-9999-9999-999999999999 $subgroup $setting 0x00000000 } } if (-not $isSpecializePhase) { Show-Header Write-Host "Recommended Power Settings Applied." -ForegroundColor Green Wait-IfNotSpecialize return } } function Set-DefaultPowerSettings { Clear-Host # Restore default power plans and enable hibernate powercfg -restoredefaultschemes cmd /c "powercfg /hibernate on >nul 2>&1" cmd /c "reg add `"HKLM\SYSTEM\CurrentControlSet\Control\Power`" /v `"HibernateEnabledDefault`" /t REG_DWORD /d `"1`" /f >nul 2>&1" # Registry modifications $regChanges = @( 'HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\FlyoutMenuSettings /v ShowLockOption /t REG_DWORD /d 1', 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FlyoutMenuSettings /v ShowSleepOption /t REG_DWORD /d 1', 'HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Power /v HiberbootEnabled /t REG_DWORD /d 1', 'HKLM\SYSTEM\ControlSet001\Control\Power\PowerSettings\54533251-82be-4824-96c1-47b60b740d00\0cc5b647-c1df-4637-891a-dec35c318583 /v ValueMax /t REG_DWORD /d 100', 'HKLM\System\ControlSet001\Control\Power\PowerSettings\2a737441-1930-4402-8d77-b2bebba308a3\0853a681-27c8-4100-a2fd-82013e970683 /v Attributes /t REG_DWORD /d 1', 'HKLM\System\ControlSet001\Control\Power\PowerSettings\2a737441-1930-4402-8d77-b2bebba308a3\d4e98f31-5ffe-4ce1-be31-1b38b384c009 /v Attributes /t REG_DWORD /d 1' ) foreach ($reg in $regChanges) { cmd /c "reg add `$reg` /f >nul 2>&1" } Show-Header Write-Host "Default Power Settings Applied." -ForegroundColor Green Wait-IfNotSpecialize return } # End of Power Settings Functions # END OF COMMAND & OPERATION FUNCTIONS # Check if this is running in the specialize phase to Apply Settings automatically during Windows Installation if (Test-Path -Path $markerFilePath) { # Bloatware Apps Get-AppxProvisionedPackage -Online | Where-Object { $appxPackages -contains $_.DisplayName } | Remove-AppxProvisionedPackage -AllUsers -Online -ErrorAction SilentlyContinue # Legacy Windows Features & Apps Get-WindowsCapability -Online | Where-Object { $capabilities -contains ($_.Name -split '~')[0] } | Remove-WindowsCapability -Online -ErrorAction SilentlyContinue # Additional Software & Apps Set-AppsRegistry Remove-OneDrive Disable-Recall # Privacy & Security Set-RecommendedPrivacySettings # Windows Updates Set-RecommendedUpdateSettings # Optimize Registry Set-RecommendedHKLMRegistry # Tasks and Services Disable-ScheduledTasks Set-ServiceStartup # Power Settings Set-RecommendedPowerSettings exit } # Main loop to keep showing the main menu while ($script:loop) { Show-MainMenu } ]]> "@ # Define Unicode characters for checkmark and cross $checkmark = [char]0x2713 # Unicode for ✓ $cross = [char]0x2717 # Unicode for ✗ # Load XAML Add-Type -AssemblyName PresentationFramework [xml]$xamlParsed = $xaml $xamlWindow = [Windows.Markup.XamlReader]::Load((New-Object System.Xml.XmlNodeReader $xamlParsed)) # Applies User Account Settings Try { # Uninstall Copilot Get-AppxPackage -Name 'Microsoft.Copilot' | Remove-AppxPackage Get-AppxPackage -Name 'Microsoft.Windows.Ai.Copilot.Provider' | Remove-AppxPackage $MultilineComment = @" Windows Registry Editor Version 5.00 ; EASE OF ACCESS ; disable narrator [HKEY_CURRENT_USER\Software\Microsoft\Narrator\NoRoam] "DuckAudio"=dword:00000000 "WinEnterLaunchEnabled"=dword:00000000 "ScriptingEnabled"=dword:00000000 "OnlineServicesEnabled"=dword:00000000 "EchoToggleKeys"=dword:00000000 ; disable narrator settings [HKEY_CURRENT_USER\Software\Microsoft\Narrator] "NarratorCursorHighlight"=dword:00000000 "CoupleNarratorCursorKeyboard"=dword:00000000 "IntonationPause"=dword:00000000 "ReadHints"=dword:00000000 "ErrorNotificationType"=dword:00000000 "EchoChars"=dword:00000000 "EchoWords"=dword:00000000 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Narrator\NarratorHome] "MinimizeType"=dword:00000000 "AutoStart"=dword:00000000 ; disable ease of access settings [HKEY_CURRENT_USER\Software\Microsoft\Ease of Access] "selfvoice"=dword:00000000 "selfscan"=dword:00000000 [HKEY_CURRENT_USER\Control Panel\Accessibility] "Sound on Activation"=dword:00000000 "Warning Sounds"=dword:00000000 [HKEY_CURRENT_USER\Control Panel\Accessibility\HighContrast] "Flags"="4194" [HKEY_CURRENT_USER\Control Panel\Accessibility\Keyboard Response] "Flags"="2" "AutoRepeatRate"="0" "AutoRepeatDelay"="0" [HKEY_CURRENT_USER\Control Panel\Accessibility\MouseKeys] "Flags"="130" "MaximumSpeed"="39" "TimeToMaximumSpeed"="3000" [HKEY_CURRENT_USER\Control Panel\Accessibility\StickyKeys] "Flags"="2" [HKEY_CURRENT_USER\Control Panel\Accessibility\ToggleKeys] "Flags"="34" [HKEY_CURRENT_USER\Control Panel\Accessibility\SoundSentry] "Flags"="0" "FSTextEffect"="0" "TextEffect"="0" "WindowsEffect"="0" [HKEY_CURRENT_USER\Control Panel\Accessibility\SlateLaunch] "ATapp"="" "LaunchAT"=dword:00000000 ; CLOCK AND REGION ; disable notify me when the clock changes [HKEY_CURRENT_USER\Control Panel\TimeDate] "DstNotification"=dword:00000000 ; APPEARANCE AND PERSONALIZATION ; open file explorer to this pc ; show file name extensions ; disable display file size information in folder tips ; disable show pop-up description for folder and desktop items ; disable show preview handlers in preview pane ; disable show status bar ; disable show sync provider notifications ; disable use sharing wizard ; disable animations in the taskbar ; enable show thumbnails instead of icons ; disable show translucent selection rectangle ; disable use drop shadows for icon labels on the desktop ; more pins personalization start ; disable show account-related notifications ; disable show recently opened items in start, jump lists and file explorer ; left taskbar alignment ; remove chat from taskbar ; remove task view from taskbar ; remove copilot from taskbar ; disable show recommendations for tips shortcuts new apps and more ; disable share any window from my taskbar ; disable snap window settings - SnapAssist to JointResize Entries ; alt tab open windows only [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced] "LaunchTo"=dword:00000001 "HideFileExt"=dword:00000000 "FolderContentsInfoTip"=dword:00000000 "ShowInfoTip"=dword:00000000 "ShowPreviewHandlers"=dword:00000000 "ShowStatusBar"=dword:00000000 "ShowSyncProviderNotifications"=dword:00000000 "SharingWizardOn"=dword:00000000 "TaskbarAnimations"=dword:0 "IconsOnly"=dword:0 "ListviewAlphaSelect"=dword:0 "ListviewShadow"=dword:0 "Start_Layout"=dword:00000001 "Start_AccountNotifications"=dword:00000000 "Start_TrackDocs"=dword:00000000 "TaskbarAl"=dword:00000000 "TaskbarMn"=dword:00000000 "ShowTaskViewButton"=dword:00000000 "ShowCopilotButton"=dword:00000000 "Start_IrisRecommendations"=dword:00000000 "TaskbarSn"=dword:00000000 "SnapAssist"=dword:00000000 "DITest"=dword:00000000 "EnableSnapBar"=dword:00000000 "EnableTaskGroups"=dword:00000000 "EnableSnapAssistFlyout"=dword:00000000 "SnapFill"=dword:00000000 "JointResize"=dword:00000000 "MultiTaskingAltTabFilter"=dword:00000003 ; hide frequent folders in quick access ; disable show files from office.com ; show all taskbar icons on Windows 10 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer] "ShowFrequent"=dword:00000000 "ShowCloudFilesInQuickAccess"=dword:00000000 "EnableAutoTray"=dword:00000000 ; enable display full path in the title bar [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\CabinetState] "FullPath"=dword:00000001 ; HARDWARE AND SOUND ; sound communications do nothing [HKEY_CURRENT_USER\Software\Microsoft\Multimedia\Audio] "UserDuckingPreference"=dword:00000003 ; disable enhance pointer precision ; mouse fix (no accel with epp on) [HKEY_CURRENT_USER\Control Panel\Mouse] "MouseSpeed"="0" "MouseThreshold1"="0" "MouseThreshold2"="0" "MouseSensitivity"="10" "SmoothMouseXCurve"=hex:\ 00,00,00,00,00,00,00,00,\ C0,CC,0C,00,00,00,00,00,\ 80,99,19,00,00,00,00,00,\ 40,66,26,00,00,00,00,00,\ 00,33,33,00,00,00,00,00 "SmoothMouseYCurve"=hex:\ 00,00,00,00,00,00,00,00,\ 00,00,38,00,00,00,00,00,\ 00,00,70,00,00,00,00,00,\ 00,00,A8,00,00,00,00,00,\ 00,00,E0,00,00,00,00,00 ; SYSTEM AND SECURITY ; set appearance options to custom [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\VisualEffects] "VisualFXSetting"=dword:3 ; disable animate controls and elements inside windows ; disable fade or slide menus into view ; disable fade or slide tooltips into view ; disable fade out menu items after clicking ; disable show shadows under mouse pointer ; disable show shadows under windows ; disable slide open combo boxes ; disable smooth-scroll list boxes ; enable smooth edges of screen fonts ; 100% dpi scaling ; disable fix scaling for apps ; disable menu show delay [HKEY_CURRENT_USER\Control Panel\Desktop] "UserPreferencesMask"=hex(2):90,12,03,80,10,00,00,00 "FontSmoothing"="2" "LogPixels"=dword:00000060 "Win8DpiScaling"=dword:00000001 "EnablePerProcessSystemDPI"=dword:00000000 "MenuShowDelay"="0" ; --IMMERSIVE CONTROL PANEL-- ; PRIVACY ; disable show me notification in the settings app [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\SystemSettings\AccountNotifications] "EnableAccountNotifications"=dword:00000000 ; disable voice activation [HKEY_CURRENT_USER\Software\Microsoft\Speech_OneCore\Settings\VoiceActivation\UserPreferenceForAllApps] "AgentActivationEnabled"=dword:00000000 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Speech_OneCore\Settings\VoiceActivation\UserPreferenceForAllApps] "AgentActivationLastUsed"=dword:00000000 ; disable other devices [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\bluetoothSync] "Value"="Deny" ; disable let websites show me locally relevant content by accessing my language list [HKEY_CURRENT_USER\Control Panel\International\User Profile] "HttpAcceptLanguageOptOut"=dword:00000001 ; disable let windows improve start and search results by tracking app launches [HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\EdgeUI] "DisableMFUTracking"=dword:00000001 ; disable personal inking and typing dictionary [HKEY_CURRENT_USER\Software\Microsoft\InputPersonalization] "RestrictImplicitInkCollection"=dword:00000001 "RestrictImplicitTextCollection"=dword:00000001 [HKEY_CURRENT_USER\Software\Microsoft\InputPersonalization\TrainedDataStore] "HarvestContacts"=dword:00000000 [HKEY_CURRENT_USER\Software\Microsoft\Personalization\Settings] "AcceptedPrivacyPolicy"=dword:00000000 ; feedback frequency never [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Siuf\Rules] "NumberOfSIUFInPeriod"=dword:00000000 "PeriodInNanoSeconds"=- ; SEARCH ; disable search highlights ; disable search history ; disable safe search ; disable cloud content search for work or school account ; disable cloud content search for microsoft account [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\SearchSettings] "IsDynamicSearchBoxEnabled"=dword:00000000 "IsDeviceSearchHistoryEnabled"=dword:00000000 "SafeSearchMode"=dword:00000000 "IsAADCloudSearchEnabled"=dword:00000000 "IsMSACloudSearchEnabled"=dword:00000000 ; EASE OF ACCESS ; disable magnifier settings [HKEY_CURRENT_USER\SOFTWARE\Microsoft\ScreenMagnifier] "FollowCaret"=dword:00000000 "FollowNarrator"=dword:00000000 "FollowMouse"=dword:00000000 "FollowFocus"=dword:00000000 ; GAMING ; disable game bar [HKEY_CURRENT_USER\System\GameConfigStore] "GameDVR_Enabled"=dword:00000000 ; disable enable open xbox game bar using game controller ; enable game mode [HKEY_CURRENT_USER\Software\Microsoft\GameBar] "UseNexusForGameBarEnabled"=dword:00000000 "AutoGameModeEnabled"=dword:00000001 ; other settings [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\GameDVR] "AppCaptureEnabled"=dword:00000000 "AudioEncodingBitrate"=dword:0001f400 "AudioCaptureEnabled"=dword:00000000 "CustomVideoEncodingBitrate"=dword:003d0900 "CustomVideoEncodingHeight"=dword:000002d0 "CustomVideoEncodingWidth"=dword:00000500 "HistoricalBufferLength"=dword:0000001e "HistoricalBufferLengthUnit"=dword:00000001 "HistoricalCaptureEnabled"=dword:00000000 "HistoricalCaptureOnBatteryAllowed"=dword:00000001 "HistoricalCaptureOnWirelessDisplayAllowed"=dword:00000001 "MaximumRecordLength"=hex(b):00,D0,88,C3,10,00,00,00 "VideoEncodingBitrateMode"=dword:00000002 "VideoEncodingResolutionMode"=dword:00000002 "VideoEncodingFrameRateMode"=dword:00000000 "EchoCancellationEnabled"=dword:00000001 "CursorCaptureEnabled"=dword:00000000 "VKToggleGameBar"=dword:00000000 "VKMToggleGameBar"=dword:00000000 "VKSaveHistoricalVideo"=dword:00000000 "VKMSaveHistoricalVideo"=dword:00000000 "VKToggleRecording"=dword:00000000 "VKMToggleRecording"=dword:00000000 "VKTakeScreenshot"=dword:00000000 "VKMTakeScreenshot"=dword:00000000 "VKToggleRecordingIndicator"=dword:00000000 "VKMToggleRecordingIndicator"=dword:00000000 "VKToggleMicrophoneCapture"=dword:00000000 "VKMToggleMicrophoneCapture"=dword:00000000 "VKToggleCameraCapture"=dword:00000000 "VKMToggleCameraCapture"=dword:00000000 "VKToggleBroadcast"=dword:00000000 "VKMToggleBroadcast"=dword:00000000 "MicrophoneCaptureEnabled"=dword:00000000 "SystemAudioGain"=hex(b):10,27,00,00,00,00,00,00 "MicrophoneGain"=hex(b):10,27,00,00,00,00,00,00 ; TIME & LANGUAGE ; disable show the voice typing mic button ; disable typing insights [HKEY_CURRENT_USER\Software\Microsoft\input\Settings] "IsVoiceTypingKeyEnabled"=dword:00000000 "InsightsEnabled"=dword:00000000 ; disable capitalize the first letter of each sentence ; disable play key sounds as i type ; disable add a period after i double-tap the spacebar ; disable show key background [HKEY_CURRENT_USER\Software\Microsoft\TabletTip\1.7] "EnableAutoShiftEngage"=dword:00000000 "EnableKeyAudioFeedback"=dword:00000000 "EnableDoubleTapSpace"=dword:00000000 "IsKeyBackgroundEnabled"=dword:00000000 ; PERSONALIZATION ; dark theme [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize] "AppsUseLightTheme"=dword:00000001 "SystemUsesLightTheme"=dword:00000001 "EnableTransparency"=dword:00000001 ; disable web search in start menu [HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows\Explorer] "DisableSearchBoxSuggestions"=dword:00000001 ; Remove meet now [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] "NoStartMenuMFUprogramsList"=- "NoInstrumentation"=- "HideSCAMeetNow"=dword:00000001 ; remove search from taskbar [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Search] "SearchboxTaskbarMode"=dword:00000000 ; disable use dynamic lighting on my devices ; disable compatible apps in the forground always control lighting ; disable match my windows accent color [HKEY_CURRENT_USER\Software\Microsoft\Lighting] "AmbientLightingEnabled"=dword:00000000 "ControlledByForegroundApp"=dword:00000000 "UseSystemAccentColor"=dword:00000000 ; DEVICES ; disable let windows manage my default printer [HKEY_CURRENT_USER\Software\Microsoft\Windows NT\CurrentVersion\Windows] "LegacyDefaultPrinterMode"=dword:00000001 ; disable write with your fingertip [HKEY_CURRENT_USER\Software\Microsoft\TabletTip\EmbeddedInkControl] "EnableInkingWithTouch"=dword:00000000 ; SYSTEM [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\DWM] "UseDpiScaling"=dword:00000000 ; disable variable refresh rate & enable optimizations for windowed games [HKEY_CURRENT_USER\Software\Microsoft\DirectX\UserGpuPreferences] "DirectXUserGlobalSettings"="SwapEffectUpgradeEnable=1;VRROptimizeEnable=0;" ; disable notifications ; Disable Notifications on Lock Screen [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\PushNotifications] "ToastEnabled"=dword:00000000 "LockScreenToastEnabled"=dword:00000000 ; Disable Allow Notifications to Play Sounds ; Disable Notifications on Lock Screen ; Disable Show Reminders and VoIP Calls Notifications on Lock Screen [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings] "NOC_GLOBAL_SETTING_ALLOW_NOTIFICATION_SOUND"=dword:00000000 "NOC_GLOBAL_SETTING_ALLOW_TOASTS_ABOVE_LOCK"=dword:00000000 "NOC_GLOBAL_SETTING_ALLOW_CRITICAL_TOASTS_ABOVE_LOCK"=dword:00000000 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings\Windows.SystemToast.SecurityAndMaintenance] "Enabled"=dword:00000000 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings\windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel] "Enabled"=dword:00000000 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings\Windows.SystemToast.CapabilityAccess] "Enabled"=dword:00000000 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings\Windows.SystemToast.StartupApp] "Enabled"=dword:00000000 [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\UserProfileEngagement] "ScoobeSystemSettingEnabled"=dword:00000000 ; disable suggested actions [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\SmartActionPlatform\SmartClipboard] "Disabled"=dword:00000001 ; battery options optimize for video quality [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\VideoSettings] "VideoQualityOnBattery"=dword:00000001 ; UWP Apps ; disable windows input experience preload [HKEY_CURRENT_USER\Software\Microsoft\input] "IsInputAppPreloadEnabled"=dword:00000000 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Dsh] "IsPrelaunchEnabled"=dword:00000000 ; disable copilot [HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\WindowsCopilot] "TurnOffWindowsCopilot"=dword:00000001 ; DISABLE ADVERTISING & PROMOTIONAL [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager] "ContentDeliveryAllowed"=dword:00000000 "FeatureManagementEnabled"=dword:00000000 "OemPreInstalledAppsEnabled"=dword:00000000 "PreInstalledAppsEnabled"=dword:00000000 "PreInstalledAppsEverEnabled"=dword:00000000 "RotatingLockScreenEnabled"=dword:00000000 "RotatingLockScreenOverlayEnabled"=dword:00000000 "SilentInstalledAppsEnabled"=dword:00000000 "SlideshowEnabled"=dword:00000000 "SoftLandingEnabled"=dword:00000000 "SubscribedContent-310093Enabled"=dword:00000000 "SubscribedContent-314563Enabled"=dword:00000000 "SubscribedContent-338388Enabled"=dword:00000000 "SubscribedContent-338389Enabled"=dword:00000000 "SubscribedContent-338393Enabled"=dword:00000000 "SubscribedContent-353694Enabled"=dword:00000000 "SubscribedContent-353696Enabled"=dword:00000000 "SubscribedContent-353698Enabled"=dword:00000000 "SubscribedContentEnabled"=dword:00000000 "SystemPaneSuggestionsEnabled"=dword:00000000 ; OTHER ; remove gallery [HKEY_CURRENT_USER\Software\Classes\CLSID\{e88865ea-0e1c-4e20-9aa6-edcd0212c87c}] "System.IsPinnedToNameSpaceTree"=dword:00000000 ; restore the classic context menu [HKEY_CURRENT_USER\Software\Classes\CLSID\{86ca1aa0-34aa-4e8b-a509-50c905bae2a2}\InprocServer32] @="" ; removes OneDrive Setup [-HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "OneDriveSetup"=- ; Hides the Try New Outlook Button [HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\Options\General] "HideNewOutlookToggle"=dword:00000000 ; Cleans up Taskbar [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband] "FavoritesRemovedChanges"=dword:00000003 "FavoritesResolve"=hex:31,03,00,00,4c,00,00,00,01,14,02,00,00,00,00,00,c0,00,\ 00,00,00,00,00,46,83,00,80,00,20,00,00,00,be,33,35,e7,d1,24,db,01,be,33,35,\ e7,d1,24,db,01,25,b3,7a,4d,05,84,da,01,97,01,00,00,00,00,00,00,01,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,00,a0,01,3a,00,1f,80,c8,27,34,1f,10,5c,10,\ 42,aa,03,2e,e4,52,87,d6,68,26,00,01,00,26,00,ef,be,12,00,00,00,85,35,2b,d7,\ d1,24,db,01,9b,e4,33,e7,d1,24,db,01,ab,5a,34,e7,d1,24,db,01,14,00,56,00,31,\ 00,00,00,00,00,56,59,b9,b3,11,00,54,61,73,6b,42,61,72,00,40,00,09,00,04,00,\ ef,be,56,59,b9,b3,56,59,b9,b3,2e,00,00,00,f2,69,01,00,00,00,04,00,00,00,00,\ 00,00,00,00,00,00,00,00,00,00,00,ef,80,fc,00,54,00,61,00,73,00,6b,00,42,00,\ 61,00,72,00,00,00,16,00,0e,01,32,00,97,01,00,00,81,58,c4,3a,20,00,46,49,4c,\ 45,45,58,7e,31,2e,4c,4e,4b,00,00,7c,00,09,00,04,00,ef,be,56,59,b9,b3,56,59,\ b9,b3,2e,00,00,00,c3,6a,01,00,00,00,02,00,00,00,00,00,00,00,00,00,52,00,00,\ 00,00,00,db,dc,91,00,46,00,69,00,6c,00,65,00,20,00,45,00,78,00,70,00,6c,00,\ 6f,00,72,00,65,00,72,00,2e,00,6c,00,6e,00,6b,00,00,00,40,00,73,00,68,00,65,\ 00,6c,00,6c,00,33,00,32,00,2e,00,64,00,6c,00,6c,00,2c,00,2d,00,32,00,32,00,\ 30,00,36,00,37,00,00,00,1c,00,22,00,00,00,1e,00,ef,be,02,00,55,00,73,00,65,\ 00,72,00,50,00,69,00,6e,00,6e,00,65,00,64,00,00,00,1c,00,12,00,00,00,2b,00,\ ef,be,7c,4c,37,e7,d1,24,db,01,1c,00,42,00,00,00,1d,00,ef,be,02,00,4d,00,69,\ 00,63,00,72,00,6f,00,73,00,6f,00,66,00,74,00,2e,00,57,00,69,00,6e,00,64,00,\ 6f,00,77,00,73,00,2e,00,45,00,78,00,70,00,6c,00,6f,00,72,00,65,00,72,00,00,\ 00,1c,00,00,00,9a,00,00,00,1c,00,00,00,01,00,00,00,1c,00,00,00,2d,00,00,00,\ 00,00,00,00,99,00,00,00,11,00,00,00,03,00,00,00,0e,76,ea,84,10,00,00,00,00,\ 43,3a,5c,55,73,65,72,73,5c,6d,65,6d,5c,41,70,70,44,61,74,61,5c,52,6f,61,6d,\ 69,6e,67,5c,4d,69,63,72,6f,73,6f,66,74,5c,49,6e,74,65,72,6e,65,74,20,45,78,\ 70,6c,6f,72,65,72,5c,51,75,69,63,6b,20,4c,61,75,6e,63,68,5c,55,73,65,72,20,\ 50,69,6e,6e,65,64,5c,54,61,73,6b,42,61,72,5c,46,69,6c,65,20,45,78,70,6c,6f,\ 72,65,72,2e,6c,6e,6b,00,00,60,00,00,00,03,00,00,a0,58,00,00,00,00,00,00,00,\ 64,65,73,6b,74,6f,70,2d,6e,76,6a,67,69,71,33,00,1e,48,b8,ac,e6,93,44,44,85,\ d1,06,17,eb,52,3b,ea,cc,41,5d,b0,c4,90,ef,11,b9,08,00,0c,29,5b,06,9a,1e,48,\ b8,ac,e6,93,44,44,85,d1,06,17,eb,52,3b,ea,cc,41,5d,b0,c4,90,ef,11,b9,08,00,\ 0c,29,5b,06,9a,45,00,00,00,09,00,00,a0,39,00,00,00,31,53,50,53,b1,16,6d,44,\ ad,8d,70,48,a7,48,40,2e,a4,3d,78,8c,1d,00,00,00,68,00,00,00,00,48,00,00,00,\ d4,d9,2d,27,b2,34,c5,4f,ad,3b,78,a5,c4,f6,71,2d,00,00,00,00,00,00,00,00,00,\ 00,00,00 "Favorites"=hex:00,a4,01,00,00,3a,00,1f,80,c8,27,34,1f,10,5c,10,42,aa,03,2e,e4,\ 52,87,d6,68,26,00,01,00,26,00,ef,be,12,00,00,00,85,35,2b,d7,d1,24,db,01,9b,\ e4,33,e7,d1,24,db,01,ab,5a,34,e7,d1,24,db,01,14,00,56,00,31,00,00,00,00,00,\ 56,59,b9,b3,11,00,54,61,73,6b,42,61,72,00,40,00,09,00,04,00,ef,be,56,59,b9,\ b3,56,59,b9,b3,2e,00,00,00,f2,69,01,00,00,00,04,00,00,00,00,00,00,00,00,00,\ 00,00,00,00,00,00,ef,80,fc,00,54,00,61,00,73,00,6b,00,42,00,61,00,72,00,00,\ 00,16,00,12,01,32,00,97,01,00,00,81,58,c4,3a,20,00,46,49,4c,45,45,58,7e,31,\ 2e,4c,4e,4b,00,00,7c,00,09,00,04,00,ef,be,56,59,b9,b3,56,59,b9,b3,2e,00,00,\ 00,c3,6a,01,00,00,00,02,00,00,00,00,00,00,00,00,00,52,00,00,00,00,00,db,dc,\ 91,00,46,00,69,00,6c,00,65,00,20,00,45,00,78,00,70,00,6c,00,6f,00,72,00,65,\ 00,72,00,2e,00,6c,00,6e,00,6b,00,00,00,40,00,73,00,68,00,65,00,6c,00,6c,00,\ 33,00,32,00,2e,00,64,00,6c,00,6c,00,2c,00,2d,00,32,00,32,00,30,00,36,00,37,\ 00,00,00,1c,00,12,00,00,00,2b,00,ef,be,7c,4c,37,e7,d1,24,db,01,1c,00,42,00,\ 00,00,1d,00,ef,be,02,00,4d,00,69,00,63,00,72,00,6f,00,73,00,6f,00,66,00,74,\ 00,2e,00,57,00,69,00,6e,00,64,00,6f,00,77,00,73,00,2e,00,45,00,78,00,70,00,\ 6c,00,6f,00,72,00,65,00,72,00,00,00,1c,00,26,00,00,00,1e,00,ef,be,02,00,53,\ 00,79,00,73,00,74,00,65,00,6d,00,50,00,69,00,6e,00,6e,00,65,00,64,00,00,00,\ 1c,00,00,00,ff "FavoritesChanges"=dword:00000002 "FavoritesVersion"=dword:00000002 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Taskband\AuxilliaryPins] "MailPin"=dword:00000000 "TFLPin"=dword:00000000 "CopilotPWAPin"=dword:00000000 "@ Set-Content -Path "$env:TEMP\Optimize_User_Registry.reg" -Value $MultilineComment -Force # Import registry file silently Regedit.exe /S "$env:TEMP\Optimize_User_Registry.reg" # Set Wallpaper $defaultWallpaperPath = "C:\Windows\Web\4K\Wallpaper\Windows\img0_3840x2160.jpg" $darkModeWallpaperPath = "C:\Windows\Web\4K\Wallpaper\Windows\img19_1920x1200.jpg" function Set-Wallpaper ($wallpaperPath) { reg.exe add "HKEY_CURRENT_USER\Control Panel\Desktop" /v Wallpaper /t REG_SZ /d "$wallpaperPath" /f | Out-Null # Notify the system of the change rundll32.exe user32.dll, UpdatePerUserSystemParameters } # Check Windows version $windowsVersion = (Get-ItemProperty "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion").CurrentBuild # Apply appropriate wallpaper based on Windows version or existence of dark mode wallpaper if ($windowsVersion -ge 22000) { # Assuming Windows 11 starts at build 22000 if (Test-Path $darkModeWallpaperPath) { Set-Wallpaper -wallpaperPath $darkModeWallpaperPath } } else { # Apply default wallpaper for Windows 10 Set-Wallpaper -wallpaperPath $defaultWallpaperPath } # Update the XAML TextBlock with the success message $xamlWindow.FindName("StatusMessage").Text = "Recommended User settings have been applied successfully $checkmark" } Catch { # Update the XAML TextBlock with the failure message $xamlWindow.FindName("StatusMessage").Text = "Failed to apply Recommended User settings $cross" } # Check Windows Defender status by inspecting the registry key $defenderStatus = Get-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Services\WinDefend" -Name "Start" -ErrorAction SilentlyContinue If ($defenderStatus.Start -eq 4) { # Windows Defender is disabled, update the Defender TextBlock and make button available $xamlWindow.FindName("DefenderStatusText").Text = "Windows Defender is Disabled." $xamlWindow.FindName("EnableDefenderButton").IsEnabled = $true # Enable the button } Else { # Windows Defender is enabled, update the Defender TextBlock and disable the button $xamlWindow.FindName("DefenderStatusText").Text = "Windows Defender is Enabled." $xamlWindow.FindName("EnableDefenderButton").IsEnabled = $false # Disable the button } # Check UAC status by inspecting the registry key $uacStatus = Get-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" -Name "EnableLUA" -ErrorAction SilentlyContinue If ($uacStatus.EnableLUA -eq 0) { # UAC is disabled, update the UAC TextBlock and make button available $xamlWindow.FindName("UACStatusText").Text = "User Account Control is Disabled." $xamlWindow.FindName("EnableUACButton").IsEnabled = $true # Enable the button } Else { # UAC is enabled, update the UAC TextBlock and disable the button $xamlWindow.FindName("UACStatusText").Text = "User Account Control is Enabled." $xamlWindow.FindName("EnableUACButton").IsEnabled = $false # Disable the button } # Define Event Handlers for Defender and UAC $xamlWindow.FindName("EnableDefenderButton").Add_Click({ $result = [System.Windows.MessageBox]::Show("Are you sure you want to enable Windows Defender?", "Confirm Action", [System.Windows.MessageBoxButton]::YesNo, [System.Windows.MessageBoxImage]::Question) If ($result -eq 'Yes') { Try { $MultilineComment = @" Windows Registry Editor Version 5.00 ; Enables Windows Defender to start in Windows Security [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sense] "Start"=dword:00000003 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WdBoot] "Start"=dword:00000000 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WdFilter] "Start"=dword:00000000 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WdNisDrv] "Start"=dword:00000003 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WdNisSvc] "Start"=dword:00000003 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinDefend] "Start"=dword:00000002 "@ Set-Content -Path "$env:TEMP\Enable_Windows_Defender.reg" -Value $MultilineComment -Force # edit reg file $path = "$env:TEMP\Enable_Windows_Defender.reg" (Get-Content $path) -replace "\?","$" | Out-File $path # import reg file Regedit.exe /S "$env:TEMP\Enable_Windows_Defender.reg" [System.Windows.MessageBox]::Show("Windows Defender has been enabled. Restart to Apply Changes.", "Success", [System.Windows.MessageBoxButton]::OK, [System.Windows.MessageBoxImage]::Information) } Catch { [System.Windows.MessageBox]::Show("Failed to enable Windows Defender.", "Error", [System.Windows.MessageBoxButton]::OK, [System.Windows.MessageBoxImage]::Error) } } }) $xamlWindow.FindName("EnableUACButton").Add_Click({ $result = [System.Windows.MessageBox]::Show("Are you sure you want to enable UAC?", "Confirm Action", [System.Windows.MessageBoxButton]::YesNo, [System.Windows.MessageBoxImage]::Question) If ($result -eq 'Yes') { Try { Write-Output "Enable UAC Button Clicked" cmd.exe /c reg.exe add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v EnableLUA /t REG_DWORD /d 3 /f [System.Windows.MessageBox]::Show("User Account Control (UAC) has been successfully enabled.", "Success", [System.Windows.MessageBoxButton]::OK, [System.Windows.MessageBoxImage]::Information) } Catch { [System.Windows.MessageBox]::Show("Failed to enable UAC.", "Error", [System.Windows.MessageBoxButton]::OK, [System.Windows.MessageBoxImage]::Error) } } }) $xamlWindow.FindName("RestartButton").Add_Click({ $result = [System.Windows.MessageBox]::Show("Are you sure you want to restart your computer?", "Confirm Restart", [System.Windows.MessageBoxButton]::YesNo, [System.Windows.MessageBoxImage]::Question) If ($result -eq 'Yes') { Try { Write-Output "Restart Button Clicked" reg.exe add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /v AutoRestartShell /t REG_DWORD /d 1 /f Start-Process -FilePath "shutdown.exe" -ArgumentList "/r /t 1" -NoNewWindow } Catch { [System.Windows.MessageBox]::Show("Failed to restart the computer.", "Error", [System.Windows.MessageBoxButton]::OK, [System.Windows.MessageBoxImage]::Error) } } }) # Show the Window $xamlWindow.ShowDialog() ]]> ]]>