diff --git a/src/Configuration/features/revision/registry/configure-internet-explorer.yml b/src/Configuration/features/revision/registry/configure-internet-explorer.yml index 5bbe3b42..5b1b2773 100644 --- a/src/Configuration/features/revision/registry/configure-internet-explorer.yml +++ b/src/Configuration/features/revision/registry/configure-internet-explorer.yml @@ -78,14 +78,14 @@ actions: - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Internet Explorer', value: 'DisableFlashInIE', type: REG_DWORD, data: '1'} # === Turn off the Security Settings Check feature - Enabled # ------> Disables the bottom bar saying "Your current security settings put your computer at risk." - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\Security', value: 'DisableSecuritySettingsCheck', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Internet Explorer\Security', value: 'DisableSecuritySettingsCheck', type: REG_DWORD, data: '1'} + # - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\Security', value: 'DisableSecuritySettingsCheck', type: REG_DWORD, data: '1'} + # - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Internet Explorer\Security', value: 'DisableSecuritySettingsCheck', type: REG_DWORD, data: '1'} # === Turn off the Security Settings Check feature - Enabled # ------> Disables the bottom bar saying "Your current security settings put your computer at risk." - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\Security', value: 'DisableFixSecuritySettings', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Internet Explorer\Security', value: 'DisableFixSecuritySettings', type: REG_DWORD, data: '1'} + # - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\Security', value: 'DisableFixSecuritySettings', type: REG_DWORD, data: '1'} + # - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Internet Explorer\Security', value: 'DisableFixSecuritySettings', type: REG_DWORD, data: '1'} # === Check for signatures on downloaded programs - Disabled - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\Download', value: 'CheckExeSignatures', type: REG_SZ, data: 'no'} + # - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\Download', value: 'CheckExeSignatures', type: REG_SZ, data: 'no'} # === Allow software to run or install even if the signature is invalid - Disabled - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\Download', value: 'RunInvalidSignatures', type: REG_DWORD, data: '0'} # === Always send Do Not Track header - Enabled @@ -137,8 +137,8 @@ actions: - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\Privacy', value: 'EnableInPrivateBrowsing', type: REG_DWORD, data: '1'} - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Internet Explorer\Privacy', value: 'EnableInPrivateBrowsing', type: REG_DWORD, data: '1'} # === Allow deleting browsing history on exit - Enabled - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\Privacy', value: 'ClearBrowsingHistoryOnExit', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Internet Explorer\Privacy', value: 'ClearBrowsingHistoryOnExit', type: REG_DWORD, data: '1'} + # - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\Privacy', value: 'ClearBrowsingHistoryOnExit', type: REG_DWORD, data: '1'} + # - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Internet Explorer\Privacy', value: 'ClearBrowsingHistoryOnExit', type: REG_DWORD, data: '1'} # === Empty Temporary Internet Files folder when browser is closed - Enabled # ------> https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.InternetExplorer::Advanced_TemporaryInternetFiles - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Cache', value: 'Persistent', type: REG_DWORD, data: '0'} diff --git a/src/Configuration/features/revision/registry/configure-windows-settings.yml b/src/Configuration/features/revision/registry/configure-windows-settings.yml index b5075bcf..a2257c94 100644 --- a/src/Configuration/features/revision/registry/configure-windows-settings.yml +++ b/src/Configuration/features/revision/registry/configure-windows-settings.yml @@ -5,9 +5,8 @@ privilege: TrustedInstaller actions: # === Hide stripped components from Settings - Windows Updates - # ------> IsWUHidden doesn't exist in Windows, but it is added for detection purposes TODO deprecate IsWUHidden - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer', value: 'SettingsPageVisibility', type: REG_SZ, data: 'hide:cortana;privacy-automaticfiledownloads;privacy-feedback;windowsinsider;windowsupdate'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer', value: 'IsWUHidden', type: REG_DWORD, data: '1'} + # - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer', value: 'IsWUHidden', type: REG_DWORD, data: '1'} - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\WindowsUpdate\UX\Settings', value: 'TrayIconVisibility', type: REG_DWORD, data: '0'} # ============== # === System ===