added win service debloating, customizing unattended.xml
This commit is contained in:
+244
-44
@@ -1,8 +1,11 @@
|
||||
<?xml version="1.0" encoding="utf-8"?>
|
||||
<unattend xmlns="urn:schemas-microsoft-com:unattend" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State">
|
||||
<!--https://schneegans.de/windows/unattend-generator/?LanguageMode=Interactive&ProcessorArchitecture=amd64&ComputerNameMode=Random&CompactOsMode=Default&TimeZoneMode=Implicit&PartitionMode=Interactive&DiskAssertionMode=Skip&WindowsEditionMode=Firmware&InstallFromMode=Automatic&PEMode=Default&UserAccountMode=Unattended&AccountName0=Admin&AccountDisplayName0=&AccountPassword0=&AccountGroup0=Administrators&AccountName1=User&AccountDisplayName1=&AccountPassword1=&AccountGroup1=Users&AutoLogonMode=Own&PasswordExpirationMode=Unlimited&LockoutMode=Default&HideFiles=Hidden&TaskbarSearch=Hide&TaskbarIconsMode=Default&DisableWidgets=true&LeftTaskbar=true&HideTaskViewButton=true&DisableBingResults=true&StartTilesMode=Default&StartPinsMode=Empty&EnableLongPaths=true&DeleteWindowsOld=true&EffectsMode=Default&DesktopIconsMode=Default&StartFoldersMode=Default&WifiMode=Skip&ExpressSettings=DisableAll&LockKeysMode=Skip&StickyKeysMode=Default&ColorMode=Default&WallpaperMode=Default&LockScreenMode=Default&Remove3DViewer=true&RemoveBingSearch=true&RemoveCamera=true&RemoveClipchamp=true&RemoveCopilot=true&RemoveCortana=true&RemoveDevHome=true&RemoveWindowsHello=true&RemoveFamily=true&RemoveFeedbackHub=true&RemoveGameAssist=true&RemoveGetHelp=true&RemoveHandwriting=true&RemoveInternetExplorer=true&RemoveMailCalendar=true&RemoveMaps=true&RemoveMathInputPanel=true&RemoveMediaFeatures=true&RemoveMixedReality=true&RemoveZuneVideo=true&RemoveNews=true&RemoveNotepad=true&RemoveOffice365=true&RemoveOneDrive=true&RemoveOneNote=true&RemoveOneSync=true&RemoveOpenSSHClient=true&RemoveOutlook=true&RemovePaint3D=true&RemovePeople=true&RemovePhotos=true&RemovePowerAutomate=true&RemovePowerShell2=true&RemovePowerShellISE=true&RemoveQuickAssist=true&RemoveRecall=true&RemoveRdpClient=true&RemoveSkype=true&RemoveSolitaire=true&RemoveSpeech=true&RemoveStepsRecorder=true&RemoveStickyNotes=true&RemoveTeams=true&RemoveGetStarted=true&RemoveToDo=true&RemoveVoiceRecorder=true&RemoveWallet=true&RemoveWeather=true&RemoveFaxAndScan=true&RemoveWindowsMediaPlayer=true&RemoveZuneMusic=true&RemoveWordPad=true&RemoveXboxApps=true&WdacMode=Skip-->
|
||||
<!--https://schneegans.de/windows/unattend-generator/?LanguageMode=Unattended&UILanguage=en-US&Locale=en-GB&Keyboard=00000809&GeoLocation=242&ProcessorArchitecture=amd64&ComputerNameMode=Random&CompactOsMode=Default&TimeZoneMode=Implicit&PartitionMode=Interactive&DiskAssertionMode=Skip&WindowsEditionMode=Firmware&InstallFromMode=Automatic&PEMode=Default&UserAccountMode=Unattended&AccountName0=LocalAdmin&AccountDisplayName0=Local+Admin&AccountPassword0=&AccountGroup0=Administrators&AutoLogonMode=Own&PasswordExpirationMode=Unlimited&LockoutMode=Custom&LockoutThreshold=5&LockoutWindow=10&LockoutDuration=30&HideFiles=Hidden&TaskbarSearch=Icon&TaskbarIconsMode=Default&DisableWidgets=true&LeftTaskbar=true&HideTaskViewButton=true&DisableBingResults=true&StartTilesMode=Empty&StartPinsMode=Empty&DisableFastStartup=true&EnableLongPaths=true&HardenSystemDriveAcl=true&TurnOffSystemSounds=true&DisableAppSuggestions=true&HideEdgeFre=true&DisableEdgeStartupBoost=true&EffectsMode=Custom&ListviewShadow=true&ThumbnailsOrIcon=true&DragFullWindows=true&FontSmoothing=true&ListBoxSmoothScrolling=true&DesktopIconsMode=Default&StartFoldersMode=Custom&StartFolderDocuments=true&StartFolderDownloads=true&StartFolderFileExplorer=true&StartFolderNetwork=true&StartFolderSettings=true&WifiMode=Skip&ExpressSettings=DisableAll&LockKeysMode=Configure&CapsLockInitial=Off&CapsLockBehavior=Toggle&NumLockInitial=On&NumLockBehavior=Toggle&ScrollLockInitial=Off&ScrollLockBehavior=Toggle&StickyKeysMode=Disabled&ColorMode=Custom&SystemColorTheme=Dark&AppsColorTheme=Dark&AccentColor=%230078d4&WallpaperMode=Default&LockScreenMode=Default&Remove3DViewer=true&RemoveBingSearch=true&RemoveCamera=true&RemoveClipchamp=true&RemoveCopilot=true&RemoveCortana=true&RemoveDevHome=true&RemoveWindowsHello=true&RemoveFamily=true&RemoveFeedbackHub=true&RemoveGameAssist=true&RemoveGetHelp=true&RemoveHandwriting=true&RemoveInternetExplorer=true&RemoveMailCalendar=true&RemoveMaps=true&RemoveMathInputPanel=true&RemoveMediaFeatures=true&RemoveMixedReality=true&RemoveZuneVideo=true&RemoveNews=true&RemoveOffice365=true&RemoveOneNote=true&RemoveOneSync=true&RemovePaint3D=true&RemovePeople=true&RemovePowerAutomate=true&RemovePowerShell2=true&RemoveRecall=true&RemoveSkype=true&RemoveSolitaire=true&RemoveSpeech=true&RemoveStepsRecorder=true&RemoveStickyNotes=true&RemoveTeams=true&RemoveGetStarted=true&RemoveToDo=true&RemoveVoiceRecorder=true&RemoveWallet=true&RemoveWeather=true&RemoveFaxAndScan=true&RemoveWindowsMediaPlayer=true&RemoveZuneMusic=true&RemoveWordPad=true&RemoveXboxApps=true&RemoveYourPhone=true&WdacMode=Skip-->
|
||||
<settings pass="offlineServicing"></settings>
|
||||
<settings pass="windowsPE">
|
||||
<component name="Microsoft-Windows-International-Core-WinPE" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
|
||||
<UILanguage>en-US</UILanguage>
|
||||
</component>
|
||||
<component name="Microsoft-Windows-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
|
||||
<UserData>
|
||||
<ProductKey>
|
||||
@@ -44,31 +47,28 @@
|
||||
<settings pass="auditSystem"></settings>
|
||||
<settings pass="auditUser"></settings>
|
||||
<settings pass="oobeSystem">
|
||||
<component name="Microsoft-Windows-International-Core" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
|
||||
<InputLocale>0809:00000809</InputLocale>
|
||||
<SystemLocale>en-GB</SystemLocale>
|
||||
<UILanguage>en-US</UILanguage>
|
||||
<UserLocale>en-GB</UserLocale>
|
||||
</component>
|
||||
<component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
|
||||
<UserAccounts>
|
||||
<LocalAccounts>
|
||||
<LocalAccount wcm:action="add">
|
||||
<Name>Admin</Name>
|
||||
<DisplayName></DisplayName>
|
||||
<Name>LocalAdmin</Name>
|
||||
<DisplayName>Local Admin</DisplayName>
|
||||
<Group>Administrators</Group>
|
||||
<Password>
|
||||
<Value></Value>
|
||||
<PlainText>true</PlainText>
|
||||
</Password>
|
||||
</LocalAccount>
|
||||
<LocalAccount wcm:action="add">
|
||||
<Name>User</Name>
|
||||
<DisplayName></DisplayName>
|
||||
<Group>Users</Group>
|
||||
<Password>
|
||||
<Value></Value>
|
||||
<PlainText>true</PlainText>
|
||||
</Password>
|
||||
</LocalAccount>
|
||||
</LocalAccounts>
|
||||
</UserAccounts>
|
||||
<AutoLogon>
|
||||
<Username>Admin</Username>
|
||||
<Username>LocalAdmin</Username>
|
||||
<Enabled>true</Enabled>
|
||||
<LogonCount>1</LogonCount>
|
||||
<Password>
|
||||
@@ -114,6 +114,7 @@ $selectors = @(
|
||||
'Microsoft.BingSearch';
|
||||
'Microsoft.WindowsCamera';
|
||||
'Clipchamp.Clipchamp';
|
||||
'Microsoft.Copilot';
|
||||
'Microsoft.549981C3F5F10';
|
||||
'Microsoft.Windows.DevHome';
|
||||
'MicrosoftCorporationII.MicrosoftFamily';
|
||||
@@ -125,15 +126,11 @@ $selectors = @(
|
||||
'Microsoft.WindowsMaps';
|
||||
'Microsoft.MixedReality.Portal';
|
||||
'Microsoft.BingNews';
|
||||
'Microsoft.WindowsNotepad';
|
||||
'Microsoft.MicrosoftOfficeHub';
|
||||
'Microsoft.Office.OneNote';
|
||||
'Microsoft.OutlookForWindows';
|
||||
'Microsoft.MSPaint';
|
||||
'Microsoft.People';
|
||||
'Microsoft.Windows.Photos';
|
||||
'Microsoft.PowerAutomateDesktop';
|
||||
'MicrosoftCorporationII.QuickAssist';
|
||||
'Microsoft.SkypeApp';
|
||||
'Microsoft.MicrosoftSolitaireCollection';
|
||||
'Microsoft.MicrosoftStickyNotes';
|
||||
@@ -150,6 +147,7 @@ $selectors = @(
|
||||
'Microsoft.XboxIdentityProvider';
|
||||
'Microsoft.XboxSpeechToTextOverlay';
|
||||
'Microsoft.GamingApp';
|
||||
'Microsoft.YourPhone';
|
||||
'Microsoft.ZuneMusic';
|
||||
'Microsoft.ZuneVideo';
|
||||
);
|
||||
@@ -200,9 +198,6 @@ $selectors = @(
|
||||
'Browser.InternetExplorer';
|
||||
'MathRecognizer';
|
||||
'OneCoreUAP.OneSync';
|
||||
'OpenSSH.Client';
|
||||
'Microsoft.Windows.PowerShell.ISE';
|
||||
'App.Support.QuickAssist';
|
||||
'Language.Speech';
|
||||
'Language.TextToSpeech';
|
||||
'App.StepsRecorder';
|
||||
@@ -259,7 +254,6 @@ $logfile = 'C:\Windows\Setup\Scripts\RemoveCapabilities.log';
|
||||
$selectors = @(
|
||||
'MediaPlayback';
|
||||
'MicrosoftWindowsPowerShellV2Root';
|
||||
'Microsoft-RemoteDesktopConnection';
|
||||
'Recall';
|
||||
);
|
||||
$getCommand = {
|
||||
@@ -304,6 +298,14 @@ $logfile = 'C:\Windows\Setup\Scripts\RemoveFeatures.log';
|
||||
$result | ConvertTo-Json -Depth 3 -Compress;
|
||||
}
|
||||
} *>&1 >> $logfile;
|
||||
</File>
|
||||
<File path="C:\Windows\Setup\Scripts\TurnOffSystemSounds.ps1">
|
||||
$excludes = Get-ChildItem -LiteralPath 'Registry::HKU\DefaultUser\AppEvents\EventLabels' |
|
||||
Where-Object -FilterScript { ($_ | Get-ItemProperty).ExcludeFromCPL -eq 1; } |
|
||||
Select-Object -ExpandProperty 'PSChildName';
|
||||
Get-ChildItem -Path 'Registry::HKU\DefaultUser\AppEvents\Schemes\Apps\*\*' |
|
||||
Where-Object -Property 'PSChildName' -NotIn $excludes |
|
||||
Get-ChildItem -Include '.Current' | Set-ItemProperty -Name '(Default)' -Value '';
|
||||
</File>
|
||||
<File path="C:\Windows\Setup\Scripts\SetStartPins.ps1">
|
||||
$json = '{"pinnedList":[]}';
|
||||
@@ -313,24 +315,75 @@ if( [System.Environment]::OSVersion.Version.Build -lt 20000 ) {
|
||||
$key = 'Registry::HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Start';
|
||||
New-Item -Path $key -ItemType 'Directory' -ErrorAction 'SilentlyContinue';
|
||||
Set-ItemProperty -LiteralPath $key -Name 'ConfigureStartPins' -Value $json -Type 'String';
|
||||
</File>
|
||||
<File path="C:\Users\Default\AppData\Local\Microsoft\Windows\Shell\LayoutModification.xml">
|
||||
<LayoutModificationTemplate Version="1" xmlns="http://schemas.microsoft.com/Start/2014/LayoutModification">
|
||||
<LayoutOptions StartTileGroupCellWidth="6" />
|
||||
<DefaultLayoutOverride>
|
||||
<StartLayoutCollection>
|
||||
<StartLayout GroupCellWidth="6" xmlns="http://schemas.microsoft.com/Start/2014/FullDefaultLayout" />
|
||||
</StartLayoutCollection>
|
||||
</DefaultLayoutOverride>
|
||||
</LayoutModificationTemplate>
|
||||
</File>
|
||||
<File path="C:\Windows\Setup\Scripts\SetColorTheme.ps1">
|
||||
$lightThemeSystem = 0;
|
||||
$lightThemeApps = 0;
|
||||
$accentColorOnStart = 0;
|
||||
$enableTransparency = 0;
|
||||
$htmlAccentColor = '#0078D4';
|
||||
& {
|
||||
$params = @{
|
||||
LiteralPath = 'Registry::HKCU\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize';
|
||||
Force = $true;
|
||||
Type = 'DWord';
|
||||
};
|
||||
Set-ItemProperty @params -Name 'SystemUsesLightTheme' -Value $lightThemeSystem;
|
||||
Set-ItemProperty @params -Name 'AppsUseLightTheme' -Value $lightThemeApps;
|
||||
Set-ItemProperty @params -Name 'ColorPrevalence' -Value $accentColorOnStart;
|
||||
Set-ItemProperty @params -Name 'EnableTransparency' -Value $enableTransparency;
|
||||
};
|
||||
& {
|
||||
Add-Type -AssemblyName 'System.Drawing';
|
||||
$accentColor = [System.Drawing.ColorTranslator]::FromHtml( $htmlAccentColor );
|
||||
|
||||
function ConvertTo-DWord {
|
||||
param(
|
||||
[System.Drawing.Color]
|
||||
$Color
|
||||
);
|
||||
|
||||
[byte[]] $bytes = @(
|
||||
$Color.R;
|
||||
$Color.G;
|
||||
$Color.B;
|
||||
$Color.A;
|
||||
);
|
||||
return [System.BitConverter]::ToUInt32( $bytes, 0);
|
||||
}
|
||||
|
||||
$startColor = [System.Drawing.Color]::FromArgb( 0xD2, $accentColor );
|
||||
Set-ItemProperty -LiteralPath 'Registry::HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent' -Name 'StartColorMenu' -Value( ConvertTo-DWord -Color $accentColor ) -Type 'DWord' -Force;
|
||||
Set-ItemProperty -LiteralPath 'Registry::HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent' -Name 'AccentColorMenu' -Value( ConvertTo-DWord -Color $accentColor ) -Type 'DWord' -Force;
|
||||
Set-ItemProperty -LiteralPath 'Registry::HKCU\Software\Microsoft\Windows\DWM' -Name 'AccentColor' -Value( ConvertTo-DWord -Color $accentColor ) -Type 'DWord' -Force;
|
||||
$params = @{
|
||||
LiteralPath = 'Registry::HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent';
|
||||
Name = 'AccentPalette';
|
||||
};
|
||||
$palette = Get-ItemPropertyValue @params;
|
||||
$index = 20;
|
||||
$palette[ $index++ ] = $accentColor.R;
|
||||
$palette[ $index++ ] = $accentColor.G;
|
||||
$palette[ $index++ ] = $accentColor.B;
|
||||
$palette[ $index++ ] = $accentColor.A;
|
||||
Set-ItemProperty @params -Value $palette -Type 'Binary' -Force;
|
||||
};
|
||||
</File>
|
||||
<File path="C:\Windows\Setup\Scripts\Specialize.ps1">
|
||||
$scripts = @(
|
||||
{
|
||||
Remove-Item -LiteralPath 'Registry::HKLM\Software\Microsoft\WindowsUpdate\Orchestrator\UScheduler_Oobe\DevHomeUpdate' -Force -ErrorAction 'SilentlyContinue';
|
||||
};
|
||||
{
|
||||
reg.exe add "HKCR\.txt\ShellNew" /v ItemName /t REG_EXPAND_SZ /d "@C:\Windows\system32\notepad.exe,-470" /f;
|
||||
reg.exe add "HKCR\.txt\ShellNew" /v NullFile /t REG_SZ /f;
|
||||
reg.exe add "HKCR\txtfilelegacy" /v FriendlyTypeName /t REG_EXPAND_SZ /d "@C:\Windows\system32\notepad.exe,-469" /f;
|
||||
reg.exe add "HKCR\txtfilelegacy" /ve /t REG_SZ /d "Text Document" /f;
|
||||
};
|
||||
{
|
||||
Remove-Item -LiteralPath 'C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk', 'C:\Windows\System32\OneDriveSetup.exe', 'C:\Windows\SysWOW64\OneDriveSetup.exe' -ErrorAction 'Continue';
|
||||
};
|
||||
{
|
||||
Remove-Item -LiteralPath 'Registry::HKLM\Software\Microsoft\WindowsUpdate\Orchestrator\UScheduler_Oobe\OutlookUpdate' -Force -ErrorAction 'SilentlyContinue';
|
||||
};
|
||||
{
|
||||
reg.exe add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Communications" /v ConfigureChatAutoInstall /t REG_DWORD /d 0 /f;
|
||||
};
|
||||
@@ -343,18 +396,123 @@ $scripts = @(
|
||||
{
|
||||
Get-Content -LiteralPath 'C:\Windows\Setup\Scripts\RemoveFeatures.ps1' -Raw | Invoke-Expression;
|
||||
};
|
||||
{
|
||||
net.exe accounts /lockoutthreshold:5 /lockoutduration:30 /lockoutwindow:10;
|
||||
};
|
||||
{
|
||||
net.exe accounts /maxpwage:UNLIMITED;
|
||||
};
|
||||
{
|
||||
reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\FileSystem" /v LongPathsEnabled /t REG_DWORD /d 1 /f
|
||||
};
|
||||
{
|
||||
icacls.exe C:\ /remove:g "*S-1-5-11"
|
||||
};
|
||||
{
|
||||
reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Power" /v HiberbootEnabled /t REG_DWORD /d 0 /f;
|
||||
};
|
||||
{
|
||||
reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Dsh" /v AllowNewsAndInterests /t REG_DWORD /d 0 /f;
|
||||
};
|
||||
{
|
||||
reg.exe add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\LogonUI\BootAnimation" /v DisableStartupSound /t REG_DWORD /d 1 /f;
|
||||
reg.exe add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\EditionOverrides" /v UserSetting_DisableStartupSound /t REG_DWORD /d 1 /f;
|
||||
};
|
||||
{
|
||||
reg.exe add "HKLM\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableWindowsConsumerFeatures" /t REG_DWORD /d 1 /f;
|
||||
};
|
||||
{
|
||||
reg.exe add "HKLM\Software\Policies\Microsoft\Edge" /v HideFirstRunExperience /t REG_DWORD /d 1 /f;
|
||||
};
|
||||
{
|
||||
reg.exe add "HKLM\Software\Policies\Microsoft\Edge\Recommended" /v BackgroundModeEnabled /t REG_DWORD /d 0 /f;
|
||||
reg.exe add "HKLM\Software\Policies\Microsoft\Edge\Recommended" /v StartupBoostEnabled /t REG_DWORD /d 0 /f;
|
||||
};
|
||||
{
|
||||
Get-Content -LiteralPath 'C:\Windows\Setup\Scripts\SetStartPins.ps1' -Raw | Invoke-Expression;
|
||||
};
|
||||
{
|
||||
Set-ItemProperty -LiteralPath "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\VisualEffects\ControlAnimations" -Name 'DefaultValue' -Value 0 -Type 'DWord' -Force;
|
||||
Set-ItemProperty -LiteralPath "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\VisualEffects\AnimateMinMax" -Name 'DefaultValue' -Value 0 -Type 'DWord' -Force;
|
||||
Set-ItemProperty -LiteralPath "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\VisualEffects\TaskbarAnimations" -Name 'DefaultValue' -Value 0 -Type 'DWord' -Force;
|
||||
Set-ItemProperty -LiteralPath "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\VisualEffects\DWMAeroPeekEnabled" -Name 'DefaultValue' -Value 0 -Type 'DWord' -Force;
|
||||
Set-ItemProperty -LiteralPath "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\VisualEffects\MenuAnimation" -Name 'DefaultValue' -Value 0 -Type 'DWord' -Force;
|
||||
Set-ItemProperty -LiteralPath "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\VisualEffects\TooltipAnimation" -Name 'DefaultValue' -Value 0 -Type 'DWord' -Force;
|
||||
Set-ItemProperty -LiteralPath "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\VisualEffects\SelectionFade" -Name 'DefaultValue' -Value 0 -Type 'DWord' -Force;
|
||||
Set-ItemProperty -LiteralPath "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\VisualEffects\DWMSaveThumbnailEnabled" -Name 'DefaultValue' -Value 0 -Type 'DWord' -Force;
|
||||
Set-ItemProperty -LiteralPath "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\VisualEffects\CursorShadow" -Name 'DefaultValue' -Value 0 -Type 'DWord' -Force;
|
||||
Set-ItemProperty -LiteralPath "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\VisualEffects\ListviewShadow" -Name 'DefaultValue' -Value 1 -Type 'DWord' -Force;
|
||||
Set-ItemProperty -LiteralPath "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\VisualEffects\ThumbnailsOrIcon" -Name 'DefaultValue' -Value 1 -Type 'DWord' -Force;
|
||||
Set-ItemProperty -LiteralPath "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\VisualEffects\ListviewAlphaSelect" -Name 'DefaultValue' -Value 0 -Type 'DWord' -Force;
|
||||
Set-ItemProperty -LiteralPath "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\VisualEffects\DragFullWindows" -Name 'DefaultValue' -Value 1 -Type 'DWord' -Force;
|
||||
Set-ItemProperty -LiteralPath "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\VisualEffects\ComboBoxAnimation" -Name 'DefaultValue' -Value 0 -Type 'DWord' -Force;
|
||||
Set-ItemProperty -LiteralPath "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\VisualEffects\FontSmoothing" -Name 'DefaultValue' -Value 1 -Type 'DWord' -Force;
|
||||
Set-ItemProperty -LiteralPath "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\VisualEffects\ListBoxSmoothScrolling" -Name 'DefaultValue' -Value 1 -Type 'DWord' -Force;
|
||||
Set-ItemProperty -LiteralPath "Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\VisualEffects\DropShadow" -Name 'DefaultValue' -Value 0 -Type 'DWord' -Force;
|
||||
};
|
||||
{
|
||||
reg.exe add "HKU\.DEFAULT\Control Panel\Accessibility\StickyKeys" /v Flags /t REG_SZ /d 10 /f;
|
||||
};
|
||||
<!-- Custom code to disable Windows telemetry -->
|
||||
{
|
||||
Set-ItemProperty -Path "HKLM:\SOFTWARE\Policies\Microsoft\Windows\DataCollection" -Name 'AllowTelemetry' -Type 'DWord' -Value 0 -ErrorAction SilentlyContinue -Force;
|
||||
Set-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\DataCollection" -Name 'AllowTelemetry' -Type 'DWord' -Value 0 -ErrorAction SilentlyContinue -Force;
|
||||
Set-ItemProperty -Path "HKLM:\SOFTWARE\Policies\Microsoft\SQMClient\Windows" -Name 'CEIPEnable' -Type 'DWord' -Value 0 -ErrorAction SilentlyContinue -Force;
|
||||
Set-ItemProperty -Path "HKLM:\SOFTWARE\Policies\Microsoft\Windows\AdvertisingInfo" -Name 'Enabled' -Type 'DWord' -Value 0 -ErrorAction SilentlyContinue -Force;
|
||||
Set-ItemProperty -Path "HKLM:\SOFTWARE\Policies\Microsoft\Windows\Windows Search" -Name 'AllowCortana' -Type 'DWord' -Value 0 -ErrorAction SilentlyContinue -Force;
|
||||
Set-ItemProperty -Path "HKLM:\SOFTWARE\Policies\Microsoft\Windows\DataCollection" -Name 'AllowDeviceNameInTelemetry' -Type 'DWord' -Value 0 -ErrorAction SilentlyContinue -Force;
|
||||
Set-ItemProperty -Path "HKLM:\SOFTWARE\Policies\Microsoft\Windows\DataCollection" -Name 'LimitDiagnosticLogCollection' -Type 'DWord' -Value 0 -ErrorAction SilentlyContinue -Force;
|
||||
Set-ItemProperty -Path "HKLM:\SOFTWARE\Policies\Microsoft\Windows\DataCollection" -Name 'LimitDumpCollection' -Type 'DWord' -Value 0 -ErrorAction SilentlyContinue -Force;
|
||||
Set-ItemProperty -Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Search" -Name 'CortanaConsent' -Type 'DWord' -Value 0 -ErrorAction SilentlyContinue -Force;
|
||||
reg.exe add "HKLM\Software\Policies\Microsoft\Windows\DataCollection" /v DoNotShowFeedbackNotifications /t reg.exe_DWORD /d 1 /f;
|
||||
reg.exe add "HKLM\Software\Policies\Microsoft\Windows\AdvertisingInfo" /v DisabledByGroupPolicy /t reg.exe_DWORD /d 1 /f;
|
||||
reg.exe add "HKLM\Software\Microsoft\Windows\Windows Error Reporting" /v Disabled /t reg.exe_DWORD /d 1 /f;
|
||||
reg.exe add "HKLM\Software\Microsoft\Windows\CurrentVersion\DeliveryOptimization\Config" /v DODownloadMode /t reg.exe_DWORD /d 0 /f;
|
||||
reg.exe add "HKLM\Software\Policies\Microsoft\Windows\DeliveryOptimization" /v DODownloadMode /t reg.exe_DWORD /d 0 /f;
|
||||
reg.exe add "HKLM\System\CurrentControlSet\Control\Remote Assistance" /v fAllowToGetHelp /t reg.exe_DWORD /d 0 /f;
|
||||
reg.exe add "HKLM\System\CurrentControlSet\Control\FileSystem" /v LongPathsEnabled /t reg.exe_DWORD /d 1 /f;
|
||||
reg.exe add "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Multimedia\SystemProfile" /v SystemResponsiveness /t reg.exe_DWORD /d 0 /f;
|
||||
reg.exe add "HKLM\Software\Microsoft\Windows NT\CurrentVersion\Multimedia\SystemProfile" /v NetworkThrottlingIndex /t reg.exe_DWORD /d 4294967295 /f;
|
||||
reg.exe add "HKLM\System\CurrentControlSet\Control\Session Manager\Memory Management" /v ClearPageFileAtShutdown /t reg.exe_DWORD /d 0 /f;
|
||||
reg.exe add "HKLM\System\ControlSet001\Services\Ndu" /v Start /t reg.exe_DWORD /d 2 /f;
|
||||
reg.exe add "HKLM\System\CurrentControlSet\Services\LanmanServer\Parameters" /v IRPStackSize /t reg.exe_DWORD /d 30 /f;
|
||||
reg.exe add "HKU\.DEFAULT\Software\Policies\Microsoft\Windows\Windows Feeds" /v EnableFeeds /t reg.exe_DWORD /d 0 /f;
|
||||
reg.exe add "HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Feeds" /v ShellFeedsTaskbarViewMode /t reg.exe_DWORD /d 2 /f;
|
||||
reg.exe add "HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v HideSCAMeetNow /t reg.exe_DWORD /d 1 /f;
|
||||
reg.exe add "HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\UserProfileEngagement" /v ScoobeSystemSettingEnabled /t reg.exe_DWORD /d 0 /f;
|
||||
reg.exe add "HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v ContentDeliveryAllowed /t reg.exe_DWORD /d 0 /f;
|
||||
reg.exe add "HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v OemPreInstalledAppsEnabled /t reg.exe_DWORD /d 0 /f;
|
||||
reg.exe add "HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v PreInstalledAppsEnabled /t reg.exe_DWORD /d 0 /f;
|
||||
reg.exe add "HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v PreInstalledAppsEverEnabled /t reg.exe_DWORD /d 0 /f;
|
||||
reg.exe add "HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v SilentInstalledAppsEnabled /t reg.exe_DWORD /d 0 /f;
|
||||
reg.exe add "HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v SubscribedContent-338387Enabled /t reg.exe_DWORD /d 0 /f;
|
||||
reg.exe add "HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v SubscribedContent-338388Enabled /t reg.exe_DWORD /d 0 /f;
|
||||
reg.exe add "HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v SubscribedContent-338389Enabled /t reg.exe_DWORD /d 0 /f;
|
||||
reg.exe add "HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v SubscribedContent-353698Enabled /t reg.exe_DWORD /d 0 /f;
|
||||
reg.exe add "HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v SystemPaneSuggestionsEnabled /t reg.exe_DWORD /d 0 /f;
|
||||
reg.exe add "HKU\.DEFAULT\Software\Policies\Microsoft\Windows\CloudContent" /v DisableTailoredExperiencesWithDiagnosticData /t reg.exe_DWORD /d 1 /f;
|
||||
reg.exe add "HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\OperationStatusManager" /v EnthusiastMode /t reg.exe_DWORD /d 1 /f;
|
||||
reg.exe add "HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v ShowTaskViewButton /t reg.exe_DWORD /d 0 /f;
|
||||
reg.exe add "HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\People" /v PeopleBand /t reg.exe_DWORD /d 0 /f;
|
||||
reg.exe add "HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v LaunchTo /t reg.exe_DWORD /d 1 /f;
|
||||
reg.exe add "HKU\.DEFAULT\Control Panel\Desktop" /v AutoEndTasks /t reg.exe_DWORD /d 1 /f;
|
||||
reg.exe add "HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\TaskbarDeveloperSettings" /v TaskbarEndTask /t REG_DWORD /d 1 /f;
|
||||
Stop-Service "dmwappushservice" -ErrorAction SilentlyContinue -Force;
|
||||
Set-Service "dmwappushservice" -StartupType Disabled -ErrorAction SilentlyContinue -Force;
|
||||
Disable-ScheduledTask -TaskName "Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser" -ErrorAction SilentlyContinue;
|
||||
Disable-ScheduledTask -TaskName "Microsoft\Windows\Application Experience\ProgramDataUpdater" -ErrorAction SilentlyContinue;
|
||||
Disable-ScheduledTask -TaskName "Microsoft\Windows\Autochk\Proxy" -ErrorAction SilentlyContinue;
|
||||
Disable-ScheduledTask -TaskName "Microsoft\Windows\Customer Experience Improvement Program\Consolidator" -ErrorAction SilentlyContinue;
|
||||
Disable-ScheduledTask -TaskName "Microsoft\Windows\Customer Experience Improvement Program\UsbCeip" -ErrorAction SilentlyContinue;
|
||||
Disable-ScheduledTask -TaskName "Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector" -ErrorAction SilentlyContinue;
|
||||
Disable-ScheduledTask -TaskName "Microsoft\Windows\Feedback\Siuf\DmClient" -ErrorAction SilentlyContinue;
|
||||
Disable-ScheduledTask -TaskName "Microsoft\Windows\Feedback\Siuf\DmClientOnScenarioDownload" -ErrorAction SilentlyContinue;
|
||||
Disable-ScheduledTask -TaskName "Microsoft\Windows\Windows Error Reporting\QueueReporting" -ErrorAction SilentlyContinue;
|
||||
Disable-ScheduledTask -TaskName "Microsoft\Windows\Application Experience\MareBackup" -ErrorAction SilentlyContinue;
|
||||
Disable-ScheduledTask -TaskName "Microsoft\Windows\Application Experience\StartupAppTask" -ErrorAction SilentlyContinue;
|
||||
Disable-ScheduledTask -TaskName "Microsoft\Windows\Application Experience\PcaPatchDbTask" -ErrorAction SilentlyContinue;
|
||||
Disable-ScheduledTask -TaskName "Microsoft\Windows\Maps\MapsUpdateTask" -ErrorAction SilentlyContinue;
|
||||
};
|
||||
);
|
||||
|
||||
& {
|
||||
@@ -385,7 +543,19 @@ $scripts = @(
|
||||
Get-AppxPackage -Name 'Microsoft.Windows.Ai.Copilot.Provider' | Remove-AppxPackage;
|
||||
};
|
||||
{
|
||||
Set-ItemProperty -LiteralPath 'Registry::HKCU\Software\Microsoft\Windows\CurrentVersion\Search' -Name 'SearchboxTaskbarMode' -Type 'DWord' -Value 0;
|
||||
Set-ItemProperty -LiteralPath 'Registry::HKCU\AppEvents\Schemes' -Name '(Default)' -Type 'String' -Value '.None';
|
||||
};
|
||||
{
|
||||
Set-ItemProperty -LiteralPath 'Registry::HKCU\Software\Microsoft\Windows\CurrentVersion\Search' -Name 'SearchboxTaskbarMode' -Type 'DWord' -Value 1;
|
||||
};
|
||||
{
|
||||
Set-ItemProperty -LiteralPath 'Registry::HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\VisualEffects' -Name 'VisualFXSetting' -Type 'DWord' -Value 3 -Force;
|
||||
};
|
||||
{
|
||||
Set-ItemProperty -Path 'Registry::HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Start' -Name 'VisiblePlaces' -Value $( [convert]::FromBase64String('ztU0LVr6Q0WC8iLm6vd3PC+zZ+PeiVVDv85h83sYqTe8JIoUDNaJQqCAbtm7okiCRIF1/g0IrkKL2jTtl7ZjlIYIc1KqUUNCn3sndlhGWdQ=') ) -Type 'Binary';
|
||||
};
|
||||
{
|
||||
Get-Content -LiteralPath 'C:\Windows\Setup\Scripts\SetColorTheme.ps1' -Raw | Invoke-Expression;
|
||||
};
|
||||
{
|
||||
Get-Process -Name 'explorer' -ErrorAction 'SilentlyContinue' | Where-Object -FilterScript {
|
||||
@@ -424,24 +594,57 @@ $scripts = @(
|
||||
{
|
||||
reg.exe add "HKU\DefaultUser\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore" /f;
|
||||
};
|
||||
{
|
||||
reg.exe add "HKU\DefaultUser\Software\Microsoft\Notepad" /v ShowStoreBanner /t REG_DWORD /d 0 /f;
|
||||
};
|
||||
{
|
||||
Remove-ItemProperty -LiteralPath 'Registry::HKU\DefaultUser\Software\Microsoft\Windows\CurrentVersion\Run' -Name 'OneDriveSetup' -Force -ErrorAction 'Continue';
|
||||
};
|
||||
{
|
||||
reg.exe add "HKU\DefaultUser\Software\Microsoft\Windows\CurrentVersion\GameDVR" /v AppCaptureEnabled /t REG_DWORD /d 0 /f;
|
||||
};
|
||||
{
|
||||
reg.exe add "HKU\DefaultUser\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v ShowTaskViewButton /t REG_DWORD /d 0 /f;
|
||||
};
|
||||
{
|
||||
Get-Content -LiteralPath 'C:\Windows\Setup\Scripts\TurnOffSystemSounds.ps1' -Raw | Invoke-Expression;
|
||||
};
|
||||
{
|
||||
$names = @(
|
||||
'ContentDeliveryAllowed';
|
||||
'FeatureManagementEnabled';
|
||||
'OEMPreInstalledAppsEnabled';
|
||||
'PreInstalledAppsEnabled';
|
||||
'PreInstalledAppsEverEnabled';
|
||||
'SilentInstalledAppsEnabled';
|
||||
'SoftLandingEnabled';
|
||||
'SubscribedContentEnabled';
|
||||
'SubscribedContent-310093Enabled';
|
||||
'SubscribedContent-338387Enabled';
|
||||
'SubscribedContent-338388Enabled';
|
||||
'SubscribedContent-338389Enabled';
|
||||
'SubscribedContent-338393Enabled';
|
||||
'SubscribedContent-353694Enabled';
|
||||
'SubscribedContent-353696Enabled';
|
||||
'SubscribedContent-353698Enabled';
|
||||
'SystemPaneSuggestionsEnabled';
|
||||
);
|
||||
|
||||
foreach( $name in $names ) {
|
||||
reg.exe add "HKU\DefaultUser\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v $name /t REG_DWORD /d 0 /f;
|
||||
}
|
||||
};
|
||||
{
|
||||
reg.exe add "HKU\DefaultUser\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v TaskbarAl /t REG_DWORD /d 0 /f;
|
||||
};
|
||||
{
|
||||
foreach( $root in 'Registry::HKU\.DEFAULT', 'Registry::HKU\DefaultUser' ) {
|
||||
Set-ItemProperty -LiteralPath "$root\Control Panel\Keyboard" -Name 'InitialKeyboardIndicators' -Type 'String' -Value 2 -Force;
|
||||
}
|
||||
};
|
||||
{
|
||||
reg.exe add "HKU\DefaultUser\Software\Policies\Microsoft\Windows\Explorer" /v DisableSearchBoxSuggestions /t REG_DWORD /d 1 /f;
|
||||
};
|
||||
{
|
||||
reg.exe add "HKU\DefaultUser\Control Panel\Accessibility\StickyKeys" /v Flags /t REG_SZ /d 10 /f;
|
||||
};
|
||||
{
|
||||
reg.exe add "HKU\DefaultUser\Software\Microsoft\Windows\DWM" /v ColorPrevalence /t REG_DWORD /d 0 /f;
|
||||
};
|
||||
{
|
||||
reg.exe add "HKU\DefaultUser\Software\Microsoft\Windows\CurrentVersion\RunOnce" /v "UnattendedSetup" /t REG_SZ /d "powershell.exe -WindowStyle Normal -NoProfile -Command \""Get-Content -LiteralPath 'C:\Windows\Setup\Scripts\UserOnce.ps1' -Raw | Invoke-Expression;\""" /f;
|
||||
};
|
||||
@@ -474,9 +677,6 @@ $scripts = @(
|
||||
{
|
||||
Set-ItemProperty -LiteralPath 'Registry::HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon' -Name 'AutoLogonCount' -Type 'DWord' -Force -Value 0;
|
||||
};
|
||||
{
|
||||
cmd.exe /c "rmdir C:\Windows.old";
|
||||
};
|
||||
{
|
||||
Remove-Item -LiteralPath @(
|
||||
'C:\Windows\Panther\unattend.xml';
|
||||
@@ -509,4 +709,4 @@ $scripts = @(
|
||||
} *>&1 >> "C:\Windows\Setup\Scripts\FirstLogon.log";
|
||||
</File>
|
||||
</Extensions>
|
||||
</unattend>
|
||||
</unattend>
|
||||
Reference in New Issue
Block a user