159 replies to this topic

[NetworkPro]

I already use Linux but I am replacing even more installations with Linux now ...

[ericgl]

 

Your line for Wifi Sense Disable does not work

 

Needs to be

reg add "HKLM\SOFTWARE\Microsoft\PolicyManager\default\WiFi\AllowAutoConnectToWiFiSenseHotspots" /v "value" /t REG_DWORD /d 0 /f

 

 

Also I am very appreciative of your script and it has been very helpful to me - not to be a critic but PDF might not be the best format for storing all these commands - copy/pasting out of the PDF adds line breaks and spaces, etc where they may not be needed.  TXT or DOC/DOCX might be better.

 

~df

 

 

Thanks, fixed.

 

Script updated to v1.21:

- Fixed WiFi Sense command.

- Script now available as DOCX Format (marked as final, so you don't make accidental changes).

 

Cheers.

[jamil]

Hello friends

By removing apps is gone also the calculator does anyone know how returns it.

 

Thanks to help.

[ericgl]

Hello friends

By removing apps is gone also the calculator does anyone know how returns it.

 

Thanks to help.

 

You can add to Windows 10 the good old calc from Windows 7:

http://winaero.com/d...d.php?view.1795

 

Note: Win10 Enterprise LTSB already comes with the "old" win32 calc, so I didn't need this "fix".

[alacran]

@ericgl

 

I found some info that may be intersting for you:

 

http://www.msfn.org/...r-telemetry-v2/

 

https://en.wikipedia...vation_Protocol

 

Best Regards

[ericgl]

alacran,

 

Yep, seems the RSVP protocol can be safely disabled, as it's been dropped after Windows 2000.

However, I think some of the xxV6 services he suggest disabling are actually needed.

[jamil]

You can add to Windows 10 the good old calc from Windows 7:

http://winaero.com/d...d.php?view.1795

 

Note: Win10 Enterprise LTSB already comes with the "old" win32 calc, so I didn't need this "fix".

Thanks a lot man.

[ericgl]

Script updated to v1.23:

- Added: Enable verbose status messages when you sign-in and sign out.
- Added another command to "Disable WiFi Sense".
- Added another command to "Disable Superfetch".
- Added CPU core parking option to advanced settings of Power Options.



Basically "Core parking" means that the OS can use less CPU cores when they're not needed, thus saving power.
This, however, can somewhat hamper performance, so advanced users prefer to disable this feature.
Better to do this on a desktop. If you’re using a laptop and battery life is important to you - don't change this.
source: https://bitsum.com/parkcontrol/

[NetworkPro]

Explorer.exe loads 3rd party dlls, try disabling some with sysinternals Autoruns and check them out while its running with process explorer.

[dyn5]

could you fix the rename bug yet?

[ericgl]

could you fix the rename bug yet?

 

Already posted here: http://reboot.pro/to...e-4#entry194527

[v77]

The two commands about Windows Defender do not work. We first need to adjust the ACL of the "HKLM\SOFTWARE\Microsoft\Windows Defender\Spynet" registry key.

[ericgl]

The two commands about Windows Defender do not work. We first need to adjust the ACL of the "HKLM\SOFTWARE\Microsoft\Windows Defender\Spynet" registry key.

 

OK, I'll add setacl before these commands.

But as I stated in the comment, it's better to change the settings in GPEDIT.MSC.

[ericgl]

File updated to v1.26.

 

Added: Disable Administrative shares.

[Mikorist]

Anyone sticking with Windows 7 should avoid the following Windows updates.
 

wusa /uninstall /kb:3068708 /norestart
wusa /uninstall /kb:3044374 /norestart
wusa /uninstall /kb:3035583 /norestart
wusa /uninstall /kb:3022345 /norestart
wusa /uninstall /kb:3021917 /norestart
wusa /uninstall /kb:2990214 /norestart
wusa /uninstall /kb:2952664 /norestart
wusa /uninstall /kb:3080149 /norestart
wusa /uninstall /kb:3075249 /norestart

Most of the updates are for Windows 10 preparation, but KB3068708 adds "customer experience and diagnostic telemetry" into Windows 7.

EDIT:
Microsoft have released more telemetry updates.

KB3080149 - Update for customer experience and diagnostic telemetry
KB3075249 - Update that adds telemetry points to consent.exe

Looks like we'll have to make mother of all tweak scripts for Windows 7/8/8.1, Windows Server 2008/2012 R2 all together .Windows Vista hasn't received any telemetry updates AFAIK.

Sticking with Windows XP & Tisqel GNU/Linux

[broodplank]

I have some valuable info right here:

 

I ran the app O&O ShutUp10, it's a tool that can disable all privacy settings. I ran the "Apply all recommend and limited recommended settings". Check out what i sniffed with procmon.

 

 

 

Converted them to C# for myself.

Registry.SetValue(@"HKLM\SOFTWARE\Policies\Microsoft\Windows\CredUI", "DisablePasswordReveal", "1", RegistryValueKind.DWord);

Registry.SetValue(@"HKLM\SOFTWARE\Policies\Microsoft\Windows\AppCompat", "DisableUAR", "1", RegistryValueKind.DWord);

Registry.SetValue(@"HKLM\System\CurrentControlSet\Services\DiagTrack", "Start" "4", RegistryValueKind.DWord);

Registry.SetValue(@"HKLM\System\CurrentControlSet\Services\dmwappushservice\Start", "4", RegistryValueKind.DWord);

Registry.SetValue(@"HKLM\System\CurrentControlSet\Control\WMI\AutoLogger\AutoLogger-Diagtrack-Listener\Start", "0", RegistryValueKind.DWord);

Registry.SetValue(@"HKLM\SOFTWARE\Wow6432Node\Microsoft\WcmSvc\wifinetworkmanager\features\S-1-5-21-3594097047-4031107988-3619644258-1001\FeatureStates", "828", RegistryValueKind.DWord);

Registry.SetValue(@"HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\DeviceAccess\Global\{A8804298-2D5F-42E3-9531-9C8C39EB29CE}\Value", "Deny", RegistryValueKind.DWord);

Registry.SetValue(@"HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\DeviceAccess\Global\LooselyCoupled\Value", "Deny", RegistryValueKind.DWord);

Registry.SetValue(@"HKLM\SOFTWARE\Policies\Microsoft\WMDRM\DisableOnline", "1", RegistryValueKind.DWord);

Registry.SetValue(@"HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\DeviceAccess\Global\{C1D23ACC-752B-43E5-8448-8D0E519CD6D6}\Value", "Deny", RegistryValueKind.DWord);

Registry.SetValue(@"HKLM\SOFTWARE\Policies\Microsoft\Windows\TabletPC\PreventHandwritingDataSharing", "1", RegistryValueKind.DWord);

Registry.SetValue(@"HKLM\SOFTWARE\Policies\Microsoft\Windows\AppCompat\DisableInventory", "1", RegistryValueKind.DWord);

Registry.SetValue(@"HKCU\SOFTWARE\Microsoft\Personalization\Settings\AcceptedPrivacyPolicy", "0", RegistryValueKind.DWord);

Registry.SetValue(@"HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\SettingSync\Groups\Language\Enabled", "0", RegistryValueKind.DWord);

Registry.SetValue(@"HKCU\SOFTWARE\Microsoft\InputPersonalization\RestrictImplicitInkCollection", "1", RegistryValueKind.DWord);

Registry.SetValue(@"HKCU\SOFTWARE\Microsoft\InputPersonalization\RestrictImplicitTextCollection", "1", RegistryValueKind.DWord);

Registry.SetValue(@"HKCU\SOFTWARE\Microsoft\InputPersonalization\TrainedDataStore\HarvestContacts", "0", RegistryValueKind.DWord);

Registry.SetValue(@"HKLM\SOFTWARE\Policies\Microsoft\Windows\Personalization\NoLockScreenCamera", "1", RegistryValueKind.DWord);

Registry.SetValue(@"HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search\AllowCortana", "0", RegistryValueKind.DWord);

Registry.SetValue(@"HKCU\SOFTWARE\Microsoft\Input\TIPC\Enabled", "0", RegistryValueKind.DWord);

Registry.SetValue(@"HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\AdvertisingInfo\Enabled", "0", RegistryValueKind.DWord);

Registry.SetValue(@"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\AdvertisingInfo\Enabled", "0", RegistryValueKind.DWord);

Registry.SetValue(@"HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\PushNotifications\ToastEnabled", "0", RegistryValueKind.DWord);

Registry.SetValue(@"HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\DeviceAccess\Global\{D89823BA-7180-4B81-B50C-7E471E6121A3}\Value", "Deny", RegistryValueKind.DWord);

Registry.SetValue(@"HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\DeviceAccess\Global\{E5323777-F976-4f5b-9B55-B94699C46E44}\Value", "Deny", RegistryValueKind.DWord);

Registry.SetValue(@"HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\DeviceAccess\Global\{BFA794E4-F964-4FDB-90F6-51056BFE4B44}\Value", "Deny", RegistryValueKind.DWord);

Registry.SetValue(@"HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\DeviceAccess\Global\{2EEF81BE-33FA-4800-9670-1CD474972C3F}\Value", "Deny", RegistryValueKind.DWord);

Registry.SetValue(@"HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\DeviceAccess\Global\{992AFA70-6F47-4148-B3E9-3003349C1548}\Value", "Deny", RegistryValueKind.DWord);

Registry.SetValue(@"HKLM\SOFTWARE\Policies\Microsoft\Biometrics\Enabled", "0", RegistryValueKind.DWord);

Registry.SetValue(@"HKCU\Control Panel\International\User Profile\HttpAcceptLanguageOptOut", "1", RegistryValueKind.DWord);

Registry.SetValue(@"HKLM\SOFTWARE\Policies\Microsoft\Windows\LocationAndSensors\DisableLocation", "1", RegistryValueKind.DWord);

Registry.SetValue(@"HKLM\SOFTWARE\Policies\Microsoft\Windows\LocationAndSensors\DisableSensors", "1", RegistryValueKind.DWord);

Registry.SetValue(@"HKLM\SOFTWARE\Policies\Microsoft\Windows\DataCollection\AllowTelemetry", "0", RegistryValueKind.DWord);

Registry.SetValue(@"HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\DataCollection\AllowTelemetry", "0", RegistryValueKind.DWord);

Registry.SetValue(@"HKLM\SOFTWARE\Policies\Microsoft\Windows\AppCompat\AITEnable", "0", RegistryValueKind.DWord);

Registry.SetValue(@"HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\DeliveryOptimization\SystemSettingsDownloadMode", "0", RegistryValueKind.DWord);

Registry.SetValue(@"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\DeliveryOptimization\Config\DODownloadMode", "0", RegistryValueKind.DWord);

Registry.SetValue(@"HKLM\SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization\DODownloadMode", "0", RegistryValueKind.DWord);

Registry.SetValue(@"HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\DeferUpgrade", "1", RegistryValueKind.DWord);

Registry.SetValue(@"HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\DriverSearching\SearchOrderConfig", "0", RegistryValueKind.DWord);

Registry.SetValue(@"HKCU\SOFTWARE\Microsoft\Siuf\Rules\NumberOfSIUFInPeriod", "0", RegistryValueKind.DWord);

Registry.SetValue(@"HKCU\SOFTWARE\Microsoft\Siuf\Rules\PeriodInNanoSeconds", "0", RegistryValueKind.DWord);

Registry.SetValue(@"HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Search\BingSearchEnabled", "0", RegistryValueKind.DWord);

Registry.SetValue(@"HKLM\SOFTWARE\Policies\Microsoft\Windows\OneDrive\DisableFileSyncNGSC", "1", RegistryValueKind.DWord);

[broodplank]

Sorry for double post but my previous lines of C# were all incorrect.

 

Here are the fixed ones:

 

                Registry.SetValue(@"HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CredUI", "DisablePasswordReveal", 1, RegistryValueKind.DWord);
                Registry.SetValue(@"HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppCompat", "DisableUAR", 1, RegistryValueKind.DWord);
                Registry.SetValue(@"HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\DiagTrack", "Start", 4, RegistryValueKind.DWord);
                Registry.SetValue(@"HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\dmwappushservice", "Start", 4, RegistryValueKind.DWord);
                Registry.SetValue(@"HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\WMI\AutoLogger\AutoLogger-Diagtrack-Listener", "Start", 0, RegistryValueKind.DWord);
                Registry.SetValue(@"HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\WcmSvc\wifinetworkmanager\features\S-1-5-21-3594097047-4031107988-3619644258-1001", "FeatureStates", 828, RegistryValueKind.DWord);
                Registry.SetValue(@"HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\DeviceAccess\Global\{A8804298-2D5F-42E3-9531-9C8C39EB29CE}\Value", "Deny", RegistryValueKind.String);
                Registry.SetValue(@"HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\DeviceAccess\Global\LooselyCoupled", "Value", "Deny", RegistryValueKind.String);
                Registry.SetValue(@"HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WMDRM", "DisableOnline", 1, RegistryValueKind.DWord);
                Registry.SetValue(@"HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\DeviceAccess\Global\{C1D23ACC-752B-43E5-8448-8D0E519CD6D6}", "Value", "Deny", RegistryValueKind.String);
                Registry.SetValue(@"HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\TabletPC", "PreventHandwritingDataSharing", 1, RegistryValueKind.DWord);
                Registry.SetValue(@"HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppCompat", "DisableInventory", 1, RegistryValueKind.DWord);
                Registry.SetValue(@"HKEY_CURRENT_USER\SOFTWARE\Microsoft\Personalization\Settings", "AcceptedPrivacyPolicy", 0, RegistryValueKind.DWord);
                Registry.SetValue(@"HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\SettingSync\Groups\Language", "Enabled", 0, RegistryValueKind.DWord);
                Registry.SetValue(@"HKEY_CURRENT_USER\SOFTWARE\Microsoft\InputPersonalization", "RestrictImplicitInkCollection", 1, RegistryValueKind.DWord);
                Registry.SetValue(@"HKEY_CURRENT_USER\SOFTWARE\Microsoft\InputPersonalization", "RestrictImplicitTextCollection", 1, RegistryValueKind.DWord);
                Registry.SetValue(@"HKEY_CURRENT_USER\SOFTWARE\Microsoft\InputPersonalization\TrainedDataStore", "HarvestContacts", 0, RegistryValueKind.DWord);
                Registry.SetValue(@"HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Personalization", "NoLockScreenCamera", 1, RegistryValueKind.DWord);
                Registry.SetValue(@"HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search", "AllowCortana", 0, RegistryValueKind.DWord);
                Registry.SetValue(@"HKEY_CURRENT_USER\SOFTWARE\Microsoft\Input\TIPC", "Enabled", 0, RegistryValueKind.DWord);
                Registry.SetValue(@"HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\AdvertisingInfo", "Enabled", 0, RegistryValueKind.DWord);
                Registry.SetValue(@"HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\AdvertisingInfo", "Enabled", 0, RegistryValueKind.DWord);
                Registry.SetValue(@"HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\PushNotifications", "ToastEnabled", 0, RegistryValueKind.DWord);
                Registry.SetValue(@"HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\DeviceAccess\Global\{D89823BA-7180-4B81-B50C-7E471E6121A3}", "Value", "Deny", RegistryValueKind.String);
                Registry.SetValue(@"HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\DeviceAccess\Global\{E5323777-F976-4f5b-9B55-B94699C46E44}", "Value", "Deny", RegistryValueKind.String);
                Registry.SetValue(@"HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\DeviceAccess\Global\{BFA794E4-F964-4FDB-90F6-51056BFE4B44}", "Value", "Deny", RegistryValueKind.String);
                Registry.SetValue(@"HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\DeviceAccess\Global\{2EEF81BE-33FA-4800-9670-1CD474972C3F}", "Value", "Deny", RegistryValueKind.String);
                Registry.SetValue(@"HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\DeviceAccess\Global\{992AFA70-6F47-4148-B3E9-3003349C1548}", "Value", "Deny", RegistryValueKind.String);
                Registry.SetValue(@"HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Biometrics", "Enabled", 0, RegistryValueKind.DWord);
                Registry.SetValue(@"HKEY_CURRENT_USER\Control Panel\International\User Profile", "HttpAcceptLanguageOptOut", 1, RegistryValueKind.DWord);
                Registry.SetValue(@"HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LocationAndSensors", "DisableLocation", 1, RegistryValueKind.DWord);
                Registry.SetValue(@"HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\LocationAndSensors", "DisableSensors", 1, RegistryValueKind.DWord);
                Registry.SetValue(@"HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection", "AllowTelemetry", 0, RegistryValueKind.DWord);
                Registry.SetValue(@"HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\DataCollection", "AllowTelemetry", 0, RegistryValueKind.DWord);
                Registry.SetValue(@"HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppCompat", "AITEnable", 0, RegistryValueKind.DWord);
                Registry.SetValue(@"HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\DeliveryOptimization", "SystemSettingsDownloadMode", 0, RegistryValueKind.DWord);
                Registry.SetValue(@"HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\DeliveryOptimization\Config", "DODownloadMode", 0, RegistryValueKind.DWord);
                Registry.SetValue(@"HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization", "DODownloadMode", 0, RegistryValueKind.DWord);
                Registry.SetValue(@"HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate", "DeferUpgrade", 1, RegistryValueKind.DWord);
                Registry.SetValue(@"HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\DriverSearching", "SearchOrderConfig", 0, RegistryValueKind.DWord);
                Registry.SetValue(@"HKEY_CURRENT_USER\SOFTWARE\Microsoft\Siuf\Rules", "NumberOfSIUFInPeriod", 0, RegistryValueKind.DWord);
                Registry.SetValue(@"HKEY_CURRENT_USER\SOFTWARE\Microsoft\Siuf\Rules", "PeriodInNanoSeconds", 0, RegistryValueKind.DWord);
                Registry.SetValue(@"HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Search", "BingSearchEnabled", 0, RegistryValueKind.DWord);
                Registry.SetValue(@"HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\OneDrive", "DisableFileSyncNGSC", 1, RegistryValueKind.DWord);

 

tested difference with the tool and this code, and result is exactly the same

Edited by broodplank, 26 August 2015 - 03:56 PM.

[ericgl]

Thanks, broodplank.

 

Will look into some of those to add to my file.

[dyn5]

Link for the word file on first post is offline

[ericgl]

@dyn5,

 

Yeah, Mega is currently down. Now up again   .

I've added an alternative link.

[v77]

A feature called "flip ahead" allows Internet Explorer to preload pages before we click on the links.
This feature is enabled by default and sends to Microsoft the browsing history.
Disabling it changes 2 registry values:

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\FlipAhead]
"FPEnabled"=dword:00000000

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Suggested Sites]
"DataStreamEnabledState"=dword:00000000

[ericgl]

Thanks, v77.

I'll look into it.

[ericgl]

v77,

 

Just checked IE Advanced settings on Win10 Enterprise x64 b10532 en-US.

Flip ahead is Turned OFF, by default.

Not sure which edition you used, but It may be set to On by default on Win10 Home.

Anyway, I've added the snippet to my script.

 

File updated to v1.29:

- Added some more IE tweaks.

- Small fixes

 

Cheers :-)

[v77]

I have Windows 10 Enterprise x64 build 10240, but not LTSB.
I just re-checked on a clean install, and no matter I use the "recommended settings" or not, the 32-bit or the 64-bit version of IE, by default it is enabled. As this feature is meant to improve performances, it's not surprising.

So what you say is interesting...