Skip to content

Commit

Permalink
Fixes
Browse files Browse the repository at this point in the history
- Fixed the Get Started placeholder remover script not working properly
- Added more things in revert.yml
- Fixed the registry parts for Firefox
- Fixed Revision Tool not downloading
- Commented out the defender service parts (Revision Tool already covers it)
- Removed Edge and OneDrive startup registry entries
  • Loading branch information
melo936 committed Aug 20, 2023
1 parent a753d0b commit add2111
Show file tree
Hide file tree
Showing 11 changed files with 123 additions and 103 deletions.
5 changes: 5 additions & 0 deletions .vscode/extensions.json
Original file line number Diff line number Diff line change
@@ -0,0 +1,5 @@
{
"recommendations": [
"redhat.vscode-yaml"
]
}
3 changes: 2 additions & 1 deletion .vscode/settings.json
Original file line number Diff line number Diff line change
Expand Up @@ -10,7 +10,8 @@
"!taskKill: mapping",
"!systemPackage: mapping",
"!cmd: mapping",
"!powershell: mapping",
"!powerShell: mapping",
"!writeStatus: mapping"
],
"redhat.telemetry.enabled": false
}
1 change: 1 addition & 0 deletions src/Configuration/features/revision/config.yml
Original file line number Diff line number Diff line change
Expand Up @@ -82,6 +82,7 @@ actions:
exeDir: true
exe: "FILEASSOC.cmd"
weight: 90

- !run:
exeDir: true
exe: "WALLPAPER.cmd"
Expand Down
80 changes: 40 additions & 40 deletions src/Configuration/features/revision/registry.yml
Original file line number Diff line number Diff line change
Expand Up @@ -4,43 +4,43 @@ description: Revision registry configuration
privilege: TrustedInstaller
actions: []
features:
- features\revision\registry\ntlite-settings.yml
- features\revision\registry\aaa-edit-ISO-version-and-edition.yml
- features\revision\registry\add-take-ownership-in-context-menu.yml
- features\revision\registry\bypass-requirements.yml
- features\revision\registry\configure-crash-control.yml
- features\revision\registry\configure-deprovisioned-apps.yml
- features\revision\registry\configure-explorer-folder-view.yml
- features\revision\registry\configure-explorer-settings.yml
- features\revision\registry\configure-ifeo.yml
- features\revision\registry\configure-internet-explorer.yml
- features\revision\registry\configure-kernel.yml
- features\revision\registry\configure-logon.yml
- features\revision\registry\configure-microsoft-store.yml
- features\revision\registry\configure-multimedia.yml
- features\revision\registry\configure-oobe.yml
- features\revision\registry\configure-power-control.yml
- features\revision\registry\configure-privacy.yml
- features\revision\registry\configure-search-and-cortana.yml
- features\revision\registry\configure-security.yml
- features\revision\registry\configure-start-menu-and-taskbar-notifications).yml
- features\revision\registry\configure-win32priorityseparation.yml
- features\revision\registry\configure-windows-settings.yml
- features\revision\registry\configure-windows-update-and-install.yml
# - features\revision\registry\disable-disk-defragmentation.yml
- features\revision\registry\disable-automatic-maintenance.yml
- features\revision\registry\disable-disk-checking.yml
- features\revision\registry\disable-ease-of-access-features.yml
- features\revision\registry\disable-installing-teams.yml
- features\revision\registry\disable-logging.yml
- features\revision\registry\disable-prefetcher-superfetch-and-readyboost.yml
- features\revision\registry\disable-system-restore-pre-defined-config.yml
# - features\revision\registry\disable-user-account-control-uac.yml
- features\revision\registry\enable-audio-communications-do-nothing.yml
- features\revision\registry\fixes.yml
- features\revision\registry\make-msi-installer-work-in-safe-mode.yml
- features\revision\registry\mouse-tweaks.yml
- features\revision\registry\old-rightclick-menu.yml
- features\revision\registry\restore-windows-photo-viewer-all-users.yml
- features\revision\registry\revision-static-edition.yml
- features\revision\registry\revision-static-oem-information.yml
- features\revision\registry\ntlite-settings.yml
- features\revision\registry\aaa-edit-ISO-version-and-edition.yml
- features\revision\registry\add-take-ownership-in-context-menu.yml
- features\revision\registry\bypass-requirements.yml
- features\revision\registry\configure-crash-control.yml
- features\revision\registry\configure-deprovisioned-apps.yml
- features\revision\registry\configure-explorer-folder-view.yml
- features\revision\registry\configure-explorer-settings.yml
- features\revision\registry\configure-ifeo.yml
- features\revision\registry\configure-internet-explorer.yml
- features\revision\registry\configure-kernel.yml
- features\revision\registry\configure-logon.yml
- features\revision\registry\configure-microsoft-store.yml
- features\revision\registry\configure-multimedia.yml
- features\revision\registry\configure-oobe.yml
- features\revision\registry\configure-power-control.yml
- features\revision\registry\configure-privacy.yml
- features\revision\registry\configure-search-and-cortana.yml
- features\revision\registry\configure-security.yml
- features\revision\registry\configure-start-menu-and-taskbar-notifications).yml
- features\revision\registry\configure-win32priorityseparation.yml
- features\revision\registry\configure-windows-settings.yml
- features\revision\registry\configure-windows-update-and-install.yml
# - features\revision\registry\disable-disk-defragmentation.yml
- features\revision\registry\disable-automatic-maintenance.yml
- features\revision\registry\disable-disk-checking.yml
- features\revision\registry\disable-ease-of-access-features.yml
- features\revision\registry\disable-installing-teams.yml
- features\revision\registry\disable-logging.yml
- features\revision\registry\disable-prefetcher-superfetch-and-readyboost.yml
- features\revision\registry\disable-system-restore-pre-defined-config.yml
# - features\revision\registry\disable-user-account-control-uac.yml
- features\revision\registry\enable-audio-communications-do-nothing.yml
- features\revision\registry\fixes.yml
- features\revision\registry\make-msi-installer-work-in-safe-mode.yml
- features\revision\registry\mouse-tweaks.yml
- features\revision\registry\old-rightclick-menu.yml
- features\revision\registry\restore-windows-photo-viewer-all-users.yml
- features\revision\registry\revision-static-edition.yml
- features\revision\registry\revision-static-oem-information.yml
27 changes: 18 additions & 9 deletions src/Configuration/features/revision/revert.yml
Original file line number Diff line number Diff line change
Expand Up @@ -4,12 +4,21 @@ description: Revert configurations that were from previous versions
privilege: TrustedInstaller
actions:

- !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'NoAutoUpdate', type: REG_DWORD, data: '1'}
- !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'AUOptions', operation: delete}
- !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'AutoInstallMinorUpdates', operation: delete}
- !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'NoAUAsDefaultShutdownOption', operation: delete}
- !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'NoAUShutdownOption', operation: delete}
- !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'NoAutoRebootWithLoggedOnUsers', operation: delete}
- !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'IncludeRecommendedUpdates', operation: delete}
- !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'EnableFeaturedSoftware', operation: delete}
- !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Control\Session Manager', value: 'HeapDeCommitFreeBlockThreshold', type: REG_DWORD, data: '0'}
- !registryValue: { path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'NoAutoUpdate', type: REG_DWORD, data: '1' }
- !registryValue: { path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'AUOptions', operation: delete }
- !registryValue: { path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'AutoInstallMinorUpdates', operation: delete }
- !registryValue: { path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'NoAUAsDefaultShutdownOption', operation: delete }
- !registryValue: { path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'NoAUShutdownOption', operation: delete }
- !registryValue: { path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'NoAutoRebootWithLoggedOnUsers', operation: delete }
- !registryValue: { path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'IncludeRecommendedUpdates', operation: delete }
- !registryValue: { path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'EnableFeaturedSoftware', operation: delete }
- !registryValue: { path: 'HKLM\SYSTEM\ControlSet001\Control\Session Manager', value: 'HeapDeCommitFreeBlockThreshold', type: REG_DWORD, data: '0' }

- !registryValue: { path: 'HKCU\SOFTWARE\Policies\Microsoft\Internet Explorer\Security', value: 'DisableSecuritySettingsCheck', operation: delete }
- !registryValue: { path: 'HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer\Security', value: 'DisableSecuritySettingsCheck', operation: delete }
- !registryValue: { path: 'HKCU\SOFTWARE\Policies\Microsoft\Internet Explorer\Security', value: 'DisableFixSecuritySettings', operation: delete }
- !registryValue: { path: 'HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer\Security', value: 'DisableFixSecuritySettings', operation: delete }
- !registryValue: { path: 'HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer\Download', value: 'CheckExeSignatures', operation: delete }
- !registryValue: { path: 'HKCU\SOFTWARE\Policies\Microsoft\Internet Explorer\Privacy', value: 'ClearBrowsingHistoryOnExit', operation: delete }
- !registryValue: { path: 'HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer\Privacy', value: 'ClearBrowsingHistoryOnExit', operation: delete }

50 changes: 25 additions & 25 deletions src/Configuration/features/revision/services.yml
Original file line number Diff line number Diff line change
Expand Up @@ -47,31 +47,31 @@ actions:
# === Security Services ===
# =========================
# === Sense
- !service: {name: 'Sense', operation: change, startup: 4}
# === SecurityHealthService
- !service: {name: 'SecurityHealthService', operation: change, startup: 4}
# === WinDefend
- !service: {name: 'WinDefend', operation: change, startup: 4}
# === WdNisSvc
- !service: {name: 'WdNisSvc', operation: change, startup: 4}
# === WdNisDrv
- !service: {name: 'WdNisDrv', operation: change, startup: 4}
# === WdBoot
- !service: {name: 'WdBoot', operation: change, startup: 4}
# === WdFilter
- !service: {name: 'WdFilter', operation: change, startup: 4}
# === MsSecFlt
- !service: {name: 'MsSecFlt', operation: change, startup: 4}
# === webthreatdefsvc - default 3
- !service: {name: 'webthreatdefsvc', operation: change, startup: 4}
# === webthreatdefusersvc - default 2
- !service: {name: 'webthreatdefusersvc', operation: change, startup: 4}
# === Security Center - default 2
- !service: {name: 'wscsvc', operation: change, startup: 4}
# === System Guard
# ------> SgrmAgent,SgrmBroker
- !service: {name: 'SgrmAgent', operation: change, startup: 4}
- !service: {name: 'SgrmBroker', operation: change, startup: 4}
# - !service: {name: 'Sense', operation: change, startup: 4}
# # === SecurityHealthService
# - !service: {name: 'SecurityHealthService', operation: change, startup: 4}
# # === WinDefend
# - !service: {name: 'WinDefend', operation: change, startup: 4}
# # === WdNisSvc
# - !service: {name: 'WdNisSvc', operation: change, startup: 4}
# # === WdNisDrv
# - !service: {name: 'WdNisDrv', operation: change, startup: 4}
# # === WdBoot
# - !service: {name: 'WdBoot', operation: change, startup: 4}
# # === WdFilter
# - !service: {name: 'WdFilter', operation: change, startup: 4}
# # === MsSecFlt
# - !service: {name: 'MsSecFlt', operation: change, startup: 4}
# # === webthreatdefsvc - default 3
# - !service: {name: 'webthreatdefsvc', operation: change, startup: 4}
# # === webthreatdefusersvc - default 2
# - !service: {name: 'webthreatdefusersvc', operation: change, startup: 4}
# # === Security Center - default 2
# - !service: {name: 'wscsvc', operation: change, startup: 4}
# # === System Guard
# # ------> SgrmAgent,SgrmBroker
# - !service: {name: 'SgrmAgent', operation: change, startup: 4}
# - !service: {name: 'SgrmBroker', operation: change, startup: 4}
# ===================================
# == Tcpipreg (experimental)
- !service: {name: 'tcpipreg', operation: change, startup: 4}
Expand Down
40 changes: 19 additions & 21 deletions src/Configuration/features/revision/software.yml
Original file line number Diff line number Diff line change
Expand Up @@ -5,7 +5,7 @@ privilege: TrustedInstaller
actions:

- !writeStatus: {status: 'Installing Revision Tool'}
- !powerShell: {command: '& {Invoke-WebRequest ((Invoke-RestMethod -Uri "https://api.github.com/repos/meetrevision/revision-tool/releases/latest" -Method Get | ConvertTo-Json | ConvertFrom-Json).assets | where-object { $_.name -eq "RevisionTool-Setup.exe" }).browser_download_url -OutFile "$env:TEMP\RevisionTool-Setup.exe"}' }
- !powerShell: {command: "& { Invoke-WebRequest ((Invoke-RestMethod -Uri 'https://api.github.com/repos/meetrevision/revision-tool/releases/latest' -Method Get | ConvertTo-Json | ConvertFrom-Json).assets | where-object { $_.name -eq 'RevisionTool-Setup.exe' }).browser_download_url -OutFile \"$env:TEMP\\RevisionTool-Setup.exe\" }" }
- !cmd: {command: 'call "%temp%\RevisionTool-Setup.exe" /VERYSILENT /TASKS="desktopicon" & del "%temp%\RevisionTool-Setup.exe"', weight: 100}

- !powerShell:
Expand All @@ -31,23 +31,23 @@ actions:
weight: 150
option: "browser-firefox"
- !writeStatus: {status: 'Tweaking Firefox settings', option: "browser-firefox"}
- !registryValue {path: 'HKCU\Software\Policies\Mozilla\Firefox', value: 'DisableTelemetry', type: REG_DWORD, data: '1', option: "browser-firefox"}
- !registryValue {path: 'HKCU\Software\Policies\Mozilla\Firefox', value: 'DisablePocket', type: REG_DWORD, data: '1', option: "browser-firefox"}
- !registryValue {path: 'HKCU\Software\Policies\Mozilla\Firefox', value: 'CaptivePortal', type: REG_DWORD, data: '0', option: "browser-firefox"}
- !registryValue {path: 'HKCU\Software\Policies\Mozilla\Firefox', value: 'DisableFirefoxStudies', type: REG_DWORD, data: '1', option: "browser-firefox"}
- !registryValue {path: 'HKCU\Software\Policies\Mozilla\Firefox', value: 'ExtensionSettings', type: REG_MULTI_SZ, data: '{\\0 "[email protected]": {\\0 "installation_mode": "force_installed",\\0 "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"\\0 }\\0}', option: "browser-firefox"}
- !registryValue {path: 'HKCU\Software\Policies\Mozilla\Firefox', value: 'DisableDefaultBrowserAgent', type: REG_DWORD, data: '1', option: "browser-firefox"}
- !registryValue {path: 'HKCU\Software\Policies\Mozilla\Firefox', value: 'Preferences', type: REG_MULTI_SZ, data: '{"network.cookie.sameSite.laxByDefault":{"Value":true,"Status":"user"},"network.cookie.sameSite.noneRequiresSecure":{"Value":true,"Status":"user"},"network.cookie.sameSite.schemeful":{"Value":true,"Status":"user"},"browser.contentblocking.category":{"Value":"strict","Status":"user"},"browser.newtabpage.activity-stream.showSponsored":{"Value":false,"Status":"user"},"browser.newtabpage.activity-stream.showSponsoredTopSites":{"Value":false,"Status":"user"}}', option: "browser-firefox"}
- !registryValue {path: 'HKCU\Software\Policies\Mozilla\Firefox\Bookmarks\1', value: 'Title', type: REG_SZ, data: 'Revision', option: "browser-firefox"}
- !registryValue {path: 'HKCU\Software\Policies\Mozilla\Firefox\Bookmarks\1', value: 'URL', type: REG_SZ, data: 'https://revi.cc/', option: "browser-firefox"}
- !registryValue {path: 'HKCU\Software\Policies\Mozilla\Firefox\Bookmarks\1', value: 'Favicon', type: REG_SZ, data: 'https://revi.cc/img/favicon.png', option: "browser-firefox"}
- !registryValue {path: 'HKCU\Software\Policies\Mozilla\Firefox\Bookmarks\1', value: 'Placement', type: REG_SZ, data: 'toolbar', option: "browser-firefox"}
- !registryValue {path: 'HKCU\Software\Policies\Mozilla\Firefox\Bookmarks\1', value: 'Folder', type: REG_SZ, data: '', option: "browser-firefox"}
- !registryValue {path: 'HKCU\Software\Policies\Mozilla\Firefox\Bookmarks\10', value: 'Title', type: REG_SZ, data: 'FAQ', option: "browser-firefox"}
- !registryValue {path: 'HKCU\Software\Policies\Mozilla\Firefox\Bookmarks\10', value: 'URL', type: REG_SZ, data: 'https://revi.cc/docs/faq/', option: "browser-firefox"}
- !registryValue {path: 'HKCU\Software\Policies\Mozilla\Firefox\Bookmarks\10', value: 'Favicon', type: REG_SZ, data: 'https://revi.cc/img/favicon.png', option: "browser-firefox"}
- !registryValue {path: 'HKCU\Software\Policies\Mozilla\Firefox\Bookmarks\10', value: 'Placement', type: REG_SZ, data: 'toolbar', option: "browser-firefox"}
- !registryValue {path: 'HKCU\Software\Policies\Mozilla\Firefox\Bookmarks\10', value: 'Folder', type: REG_SZ, data: '', option: "browser-firefox"}
- !registryValue: {path: 'HKCU\Software\Policies\Mozilla\Firefox', value: 'DisableTelemetry', type: REG_DWORD, data: '1', option: "browser-firefox"}
- !registryValue: {path: 'HKCU\Software\Policies\Mozilla\Firefox', value: 'DisablePocket', type: REG_DWORD, data: '1', option: "browser-firefox"}
- !registryValue: {path: 'HKCU\Software\Policies\Mozilla\Firefox', value: 'CaptivePortal', type: REG_DWORD, data: '0', option: "browser-firefox"}
- !registryValue: {path: 'HKCU\Software\Policies\Mozilla\Firefox', value: 'DisableFirefoxStudies', type: REG_DWORD, data: '1', option: "browser-firefox"}
- !registryValue: {path: 'HKCU\Software\Policies\Mozilla\Firefox', value: 'ExtensionSettings', type: REG_MULTI_SZ, data: '{\\0 "[email protected]": {\\0 "installation_mode": "force_installed",\\0 "install_url": "https://addons.mozilla.org/firefox/downloads/latest/ublock-origin/latest.xpi"\\0 }\\0}', option: "browser-firefox"}
- !registryValue: {path: 'HKCU\Software\Policies\Mozilla\Firefox', value: 'DisableDefaultBrowserAgent', type: REG_DWORD, data: '1', option: "browser-firefox"}
- !registryValue: {path: 'HKCU\Software\Policies\Mozilla\Firefox', value: 'Preferences', type: REG_MULTI_SZ, data: '{"network.cookie.sameSite.laxByDefault":{"Value":true,"Status":"user"},"network.cookie.sameSite.noneRequiresSecure":{"Value":true,"Status":"user"},"network.cookie.sameSite.schemeful":{"Value":true,"Status":"user"},"browser.contentblocking.category":{"Value":"strict","Status":"user"},"browser.newtabpage.activity-stream.showSponsored":{"Value":false,"Status":"user"},"browser.newtabpage.activity-stream.showSponsoredTopSites":{"Value":false,"Status":"user"}}', option: "browser-firefox"}
- !registryValue: {path: 'HKCU\Software\Policies\Mozilla\Firefox\Bookmarks\1', value: 'Title', type: REG_SZ, data: 'Revision', option: "browser-firefox"}
- !registryValue: {path: 'HKCU\Software\Policies\Mozilla\Firefox\Bookmarks\1', value: 'URL', type: REG_SZ, data: 'https://revi.cc/', option: "browser-firefox"}
- !registryValue: {path: 'HKCU\Software\Policies\Mozilla\Firefox\Bookmarks\1', value: 'Favicon', type: REG_SZ, data: 'https://revi.cc/img/favicon.png', option: "browser-firefox"}
- !registryValue: {path: 'HKCU\Software\Policies\Mozilla\Firefox\Bookmarks\1', value: 'Placement', type: REG_SZ, data: 'toolbar', option: "browser-firefox"}
- !registryValue: {path: 'HKCU\Software\Policies\Mozilla\Firefox\Bookmarks\1', value: 'Folder', type: REG_SZ, data: '', option: "browser-firefox"}
- !registryValue: {path: 'HKCU\Software\Policies\Mozilla\Firefox\Bookmarks\10', value: 'Title', type: REG_SZ, data: 'FAQ', option: "browser-firefox"}
- !registryValue: {path: 'HKCU\Software\Policies\Mozilla\Firefox\Bookmarks\10', value: 'URL', type: REG_SZ, data: 'https://revi.cc/docs/faq/', option: "browser-firefox"}
- !registryValue: {path: 'HKCU\Software\Policies\Mozilla\Firefox\Bookmarks\10', value: 'Favicon', type: REG_SZ, data: 'https://revi.cc/img/favicon.png', option: "browser-firefox"}
- !registryValue: {path: 'HKCU\Software\Policies\Mozilla\Firefox\Bookmarks\10', value: 'Placement', type: REG_SZ, data: 'toolbar', option: "browser-firefox"}
- !registryValue: {path: 'HKCU\Software\Policies\Mozilla\Firefox\Bookmarks\10', value: 'Folder', type: REG_SZ, data: '', option: "browser-firefox"}
- !cmd: {command: '%ProgramFiles(x86)%\Mozilla Maintenance Service\uninstall.exe /uninstall', option: "browser-firefox"}

- !writeStatus: {status: 'Installing Ungoogled Chromium', option: "browser-ugc"}
Expand All @@ -60,6 +60,4 @@ actions:
- !cmd:
command: '"%ProgramData%\chocolatey\bin\choco.exe" install -y --force --allow-empty-checksums librewolf'
weight: 150
option: "browser-librewolf"

!
option: "browser-librewolf"
Loading

0 comments on commit add2111

Please sign in to comment.