From 24d8aabe8e5979470ee0785564556415e7124034 Mon Sep 17 00:00:00 2001 From: melo936 <50238852+melo936@users.noreply.github.com> Date: Wed, 10 Jul 2024 18:00:40 +0400 Subject: [PATCH 01/47] remove some Windows Updates policies - fixes cumulative updates being delayed --- .../configure-windows-update-and-install.yml | 67 ++++++++----------- .../features/revision/revert.yml | 8 ++- 2 files changed, 34 insertions(+), 41 deletions(-) diff --git a/src/Configuration/features/revision/registry/configure-windows-update-and-install.yml b/src/Configuration/features/revision/registry/configure-windows-update-and-install.yml index bdf197d7..883f16d1 100644 --- a/src/Configuration/features/revision/registry/configure-windows-update-and-install.yml +++ b/src/Configuration/features/revision/registry/configure-windows-update-and-install.yml @@ -9,7 +9,7 @@ actions: # ====================== # === Configure Automatic Updates - Disabled - # === Used to break Xbox Sign-in + # ------> NOTE: Used to break Xbox Sign-in - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'NoAutoUpdate', type: REG_DWORD, data: '1'} # === Pause Windows Updates to 2038 January 19 @@ -23,18 +23,18 @@ actions: - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\WindowsUpdate\UX\Settings', value: 'PauseUpdatesExpiryTime', type: REG_SZ, data: '2038-01-19T03:14:07Z'} - # === Do not allow update deferral policies to cause scans against Windows Update - Enabled - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate', value: 'DisableDualScan', type: REG_DWORD, data: '1'} + # # === Do not allow update deferral policies to cause scans against Windows Update - Enabled + # - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate', value: 'DisableDualScan', type: REG_DWORD, data: '1'} - # === Do not include drivers with Windows Updates - Enabled - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate', value: 'ExcludeWUDriversInQualityUpdate', type: REG_DWORD, data: '1'} - # === Enabling Windows Update Power Management to automatically wake up the system to install scheduled updates - Disabled - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate', value: 'AUPowerManagement', type: REG_DWORD, data: '0'} + # # === Do not include drivers with Windows Updates - Enabled + # - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate', value: 'ExcludeWUDriversInQualityUpdate', type: REG_DWORD, data: '1'} + # # === Enabling Windows Update Power Management to automatically wake up the system to install scheduled updates - Disabled + # - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate', value: 'AUPowerManagement', type: REG_DWORD, data: '0'} - # === Turn off auto-restart notifications for update installations - Enabled - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate', value: 'SetAutoRestartNotificationDisable', type: REG_DWORD, data: '1'} - # === Turn on recommended updates via Automatic Updates - Disabled - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'IncludeRecommendedUpdates', type: REG_DWORD, data: '0'} + # # === Turn off auto-restart notifications for update installations - Enabled + # - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate', value: 'SetAutoRestartNotificationDisable', type: REG_DWORD, data: '1'} + # # === Turn on recommended updates via Automatic Updates - Disabled + # - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'IncludeRecommendedUpdates', type: REG_DWORD, data: '0'} # === Windows Update Notifications - Disabled # ------> https://www.askvg.com/fix-how-to-stop-automatic-forced-upgrade-to-feature-updates-in-windows-10/ @@ -44,21 +44,21 @@ actions: # =================================== # ======> Preview builds # === Manage preview builds - Enabled - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate', value: 'ManagePreviewBuilds', type: REG_DWORD, data: '1'} - # === Set the behavior for receiving preview builds - Disable preview builds - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate', value: 'ManagePreviewBuildsPolicyValue', type: REG_DWORD, data: '0'} - # ======> Feature Updates - # === Select when Preview Builds and Feature Updates are received - Enabled - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate', value: 'DeferFeatureUpdates', type: REG_DWORD, data: '1'} - # === Select the Windows readiness level for the updates you want to receive - Semi-Annual Channel - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate', value: 'BranchReadinessLevel', type: REG_DWORD, data: '20'} - # === After a Preview Build or Feature Update is released, defer receiving it for this many days - 365 days (1 year) - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate', value: 'DeferFeatureUpdatesPeriodInDays', type: REG_DWORD, data: '365'} - # ======> Quality Updates - # === Select when Quality Updates are received - Enabled - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate', value: 'DeferQualityUpdates', type: REG_DWORD, data: '1'} - # === After a quality update is released, defer receiving it for this many days - Enabled - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate', value: 'DeferQualityUpdatesPeriodInDays', type: REG_DWORD, data: '4'} + # - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate', value: 'ManagePreviewBuilds', type: REG_DWORD, data: '1'} + # # === Set the behavior for receiving preview builds - Disable preview builds + # - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate', value: 'ManagePreviewBuildsPolicyValue', type: REG_DWORD, data: '0'} + # # ======> Feature Updates + # # === Select when Preview Builds and Feature Updates are received - Enabled + # - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate', value: 'DeferFeatureUpdates', type: REG_DWORD, data: '1'} + # # === Select the Windows readiness level for the updates you want to receive - Semi-Annual Channel + # - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate', value: 'BranchReadinessLevel', type: REG_DWORD, data: '20'} + # # === After a Preview Build or Feature Update is released, defer receiving it for this many days - 365 days (1 year) + # - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate', value: 'DeferFeatureUpdatesPeriodInDays', type: REG_DWORD, data: '365'} + # # ======> Quality Updates + # # === Select when Quality Updates are received - Enabled + # - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate', value: 'DeferQualityUpdates', type: REG_DWORD, data: '1'} + # # === After a quality update is released, defer receiving it for this many days - Enabled + # - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate', value: 'DeferQualityUpdatesPeriodInDays', type: REG_DWORD, data: '4'} # ========================================= # === Malicious Software Reporting Tool === # ========================================= @@ -101,7 +101,7 @@ actions: # === Download repair content and optional features directly from Windows Update instead of Windows Server Update Services (WSUS) - True # ------> Enable WSUS Fondue. # ------> https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.Servicing::Servicing - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Servicing', value: 'RepairContentServerSource', type: REG_DWORD, data: '2'} + # - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Servicing', value: 'RepairContentServerSource', type: REG_DWORD, data: '2'} # --- Reserved Storage (for updates) - Disabled # ------> https://www.howtogeek.com/425563/how-to-disable-reserved-storage-on-windows-10/ - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ReserveManager', value: 'ShippedWithReserves', type: REG_DWORD, data: '0'} @@ -130,19 +130,6 @@ actions: # [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate] # "DeferUpgrade"=dword:00000001 # "DeferUpgradePeriod"=dword:00000001 - # === Disable automatic drivers installs - # ------> Outdated and unsorted, therfore discarded. - # [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\current\device\Update] - # "ExcludeWUDriversInQualityUpdate"=dword:00000001 - # [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Update] - # "ExcludeWUDriversInQualityUpdate"=dword:00000001 - # [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DriverSearching] - # "DriverUpdateWizardWuSearchEnabled"=dword:00000000 - # [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\PolicyManager\default\Update\ExcludeWUDriversInQualityUpdate] - # "value"=dword:00000001 - # [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsUpdate\UX\Settings] - # "ExcludeWUDriversInQualityUpdate"=dword:00000001 - # === Allow Automatic Updates immediate installation - Disabled # - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'AUOptions', type: REG_DWORD, data: '2'} # === Allow Automatic Updates immediate installation - Disabled (Not supported anymore) diff --git a/src/Configuration/features/revision/revert.yml b/src/Configuration/features/revision/revert.yml index 6a5e76e7..f61b6c86 100644 --- a/src/Configuration/features/revision/revert.yml +++ b/src/Configuration/features/revision/revert.yml @@ -71,4 +71,10 @@ actions: - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\ScheduledDiagnostics', value: 'EnabledExecution', operation: delete, option: '!disable-automatic-maintenance'} # Breaks 'Your Phone' - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\CloudContent', value: 'DisableWindowsConsumerFeatures', operation: delete} \ No newline at end of file + - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\CloudContent', value: 'DisableWindowsConsumerFeatures', operation: delete} + + # Revert Windows Updates policies + - !registryKey: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate', operation: delete} + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Servicing', value: 'RepairContentServerSource', operation: delete} + + From 5d0e6c2af8e32b16bb2656fb1ec3c4c1229cb7a0 Mon Sep 17 00:00:00 2001 From: melo936 <50238852+melo936@users.noreply.github.com> Date: Wed, 10 Jul 2024 18:24:08 +0400 Subject: [PATCH 02/47] AME 2024-06-12 Changes https://docs.ameliorated.io/changelog/2024-06-12.html --- .vscode/settings.json | 3 +- src/Configuration/custom.yml | 23 +++--- .../features/revision/registry.yml | 80 +++++++++---------- src/playbook.conf | 2 + 4 files changed, 54 insertions(+), 54 deletions(-) diff --git a/.vscode/settings.json b/.vscode/settings.json index 67e054ea..24de10ef 100644 --- a/.vscode/settings.json +++ b/.vscode/settings.json @@ -11,7 +11,8 @@ "!systemPackage: mapping", "!cmd: mapping", "!powerShell: mapping", - "!writeStatus: mapping" + "!writeStatus: mapping", + "!task: mapping", ], "redhat.telemetry.enabled": false, "yaml.schemas": { diff --git a/src/Configuration/custom.yml b/src/Configuration/custom.yml index c7280344..a826c4aa 100644 --- a/src/Configuration/custom.yml +++ b/src/Configuration/custom.yml @@ -2,15 +2,14 @@ title: Custom description: Custom Revision configuration privilege: Admin -actions: [] -features: -- features\revision\registry\aaa-edit-ISO-version-and-edition.yml -- features\revision\start.yml -- features\revision\packages.yml -- features\revision\software.yml -- features\revision\services.yml -- features\revision\components.yml -- features\revision\appx.yml -- features\revision\registry.yml -- features\revision\revert.yml -- features\revision\config.yml \ No newline at end of file +actions: + - !task: {path: 'features\revision\registry\aaa-edit-ISO-version-and-edition.yml'} + - !task: {path: 'features\revision\start.yml'} + - !task: {path: 'features\revision\packages.yml'} + - !task: {path: 'features\revision\software.yml'} + - !task: {path: 'features\revision\services.yml'} + - !task: {path: 'features\revision\components.yml'} + - !task: {path: 'features\revision\appx.yml'} + - !task: {path: 'features\revision\registry.yml'} + - !task: {path: 'features\revision\revert.yml'} + - !task: {path: 'features\revision\config.yml'} \ No newline at end of file diff --git a/src/Configuration/features/revision/registry.yml b/src/Configuration/features/revision/registry.yml index 5a407003..fca999e1 100644 --- a/src/Configuration/features/revision/registry.yml +++ b/src/Configuration/features/revision/registry.yml @@ -4,44 +4,42 @@ description: Revision registry configuration privilege: TrustedInstaller actions: - !writeStatus: {status: "Tweaking registry"} -features: - - features\revision\registry\ntlite-settings.yml - # - features\revision\registry\aaa-edit-ISO-version-and-edition.yml - - features\revision\registry\add-take-ownership-in-context-menu.yml - - features\revision\registry\bypass-requirements.yml - - features\revision\registry\configure-crash-control.yml - - features\revision\registry\configure-deprovisioned-apps.yml - - features\revision\registry\configure-explorer-folder-view.yml - - features\revision\registry\configure-explorer-settings.yml - - features\revision\registry\configure-ifeo.yml - - features\revision\registry\configure-internet-explorer.yml - - features\revision\registry\configure-kernel.yml - - features\revision\registry\configure-logon.yml - - features\revision\registry\configure-microsoft-store.yml - - features\revision\registry\configure-multimedia.yml - - features\revision\registry\configure-oobe.yml - - features\revision\registry\configure-power-control.yml - - features\revision\registry\configure-privacy.yml - - features\revision\registry\configure-search-and-cortana.yml - - features\revision\registry\configure-security.yml - - features\revision\registry\configure-start-menu-and-taskbar-notifications).yml - - features\revision\registry\configure-win32priorityseparation.yml - - features\revision\registry\configure-windows-settings.yml - - features\revision\registry\configure-windows-update-and-install.yml - # - features\revision\registry\disable-disk-defragmentation.yml - - features\revision\registry\disable-automatic-maintenance.yml - - features\revision\registry\disable-disk-checking.yml - - features\revision\registry\disable-ease-of-access-features.yml - - features\revision\registry\disable-installing-teams.yml - - features\revision\registry\disable-logging.yml - # - features\revision\registry\disable-prefetcher-superfetch-and-readyboost.yml - - features\revision\registry\disable-system-restore-pre-defined-config.yml - # - features\revision\registry\disable-user-account-control-uac.yml - - features\revision\registry\enable-audio-communications-do-nothing.yml - - features\revision\registry\fixes.yml - - features\revision\registry\make-msi-installer-work-in-safe-mode.yml - - features\revision\registry\mouse-tweaks.yml - - features\revision\registry\old-rightclick-menu.yml - - features\revision\registry\restore-windows-photo-viewer-all-users.yml - - features\revision\registry\revision-static-edition.yml - - features\revision\registry\revision-static-oem-information.yml + - !task: {path: 'features\revision\registry\ntlite-settings.yml'} + - !task: {path: 'features\revision\registry\add-take-ownership-in-context-menu.yml'} + - !task: {path: 'features\revision\registry\bypass-requirements.yml'} + - !task: {path: 'features\revision\registry\configure-crash-control.yml'} + - !task: {path: 'features\revision\registry\configure-deprovisioned-apps.yml'} + - !task: {path: 'features\revision\registry\configure-explorer-folder-view.yml'} + - !task: {path: 'features\revision\registry\configure-explorer-settings.yml'} + - !task: {path: 'features\revision\registry\configure-ifeo.yml'} + - !task: {path: 'features\revision\registry\configure-internet-explorer.yml'} + - !task: {path: 'features\revision\registry\configure-kernel.yml'} + - !task: {path: 'features\revision\registry\configure-logon.yml'} + - !task: {path: 'features\revision\registry\configure-microsoft-store.yml'} + - !task: {path: 'features\revision\registry\configure-multimedia.yml'} + - !task: {path: 'features\revision\registry\configure-oobe.yml'} + - !task: {path: 'features\revision\registry\configure-power-control.yml'} + - !task: {path: 'features\revision\registry\configure-privacy.yml'} + - !task: {path: 'features\revision\registry\configure-search-and-cortana.yml'} + - !task: {path: 'features\revision\registry\configure-security.yml'} + - !task: {path: 'features\revision\registry\configure-start-menu-and-taskbar-notifications).yml'} + - !task: {path: 'features\revision\registry\configure-win32priorityseparation.yml'} + - !task: {path: 'features\revision\registry\configure-windows-settings.yml'} + - !task: {path: 'features\revision\registry\configure-windows-update-and-install.yml'} + # - features\revision\registry\disable-disk-defragmentation.yml'} + - !task: {path: 'features\revision\registry\disable-automatic-maintenance.yml'} + - !task: {path: 'features\revision\registry\disable-disk-checking.yml'} + - !task: {path: 'features\revision\registry\disable-ease-of-access-features.yml'} + - !task: {path: 'features\revision\registry\disable-installing-teams.yml'} + - !task: {path: 'features\revision\registry\disable-logging.yml'} + # - features\revision\registry\disable-prefetcher-superfetch-and-readyboost.yml'} + - !task: {path: 'features\revision\registry\disable-system-restore-pre-defined-config.yml'} + # - features\revision\registry\disable-user-account-control-uac.yml'} + - !task: {path: 'features\revision\registry\enable-audio-communications-do-nothing.yml'} + - !task: {path: 'features\revision\registry\fixes.yml'} + - !task: {path: 'features\revision\registry\make-msi-installer-work-in-safe-mode.yml'} + - !task: {path: 'features\revision\registry\mouse-tweaks.yml'} + - !task: {path: 'features\revision\registry\old-rightclick-menu.yml'} + - !task: {path: 'features\revision\registry\restore-windows-photo-viewer-all-users.yml'} + - !task: {path: 'features\revision\registry\revision-static-edition.yml'} + - !task: {path: 'features\revision\registry\revision-static-oem-information.yml'} diff --git a/src/playbook.conf b/src/playbook.conf index 50a8ba10..78088d58 100644 --- a/src/playbook.conf +++ b/src/playbook.conf @@ -7,6 +7,8 @@ This Playbook will help you quickly deploy ReviOS on your current system.
Experience an ideal, lightweight and stable system, designed to enhance performance and privacy while ensuring compatibility.
1.0 + 6a93ec26-284d-4943-9fc4-c9616def55c6 + any 19044 19045 From 6f56527b55536f53ea1d1e7e6a05b40acd6f7703 Mon Sep 17 00:00:00 2001 From: melo936 <50238852+melo936@users.noreply.github.com> Date: Wed, 10 Jul 2024 18:33:10 +0400 Subject: [PATCH 03/47] migrate from ignoreErrors to errorAction --- src/Configuration/features/revision/appx.yml | 14 +++++++------- .../features/revision/components.yml | 14 +++++++------- src/Configuration/features/revision/packages.yml | 16 ++++++++-------- src/Configuration/features/revision/start.yml | 4 ++-- 4 files changed, 24 insertions(+), 24 deletions(-) diff --git a/src/Configuration/features/revision/appx.yml b/src/Configuration/features/revision/appx.yml index 9f30e048..2e4985b9 100644 --- a/src/Configuration/features/revision/appx.yml +++ b/src/Configuration/features/revision/appx.yml @@ -7,13 +7,13 @@ actions: - !writeStatus: {status: "Removing Appx Packages"} # - !appx: {name: '*Disney*', type: family, weight: 10} - - !appx: {name: '*microsoft.microsoftedge.stable*', type: family, ignoreErrors: true, weight: 10, option: "remove-edge"} - - !appx: {name: '*Microsoft.MicrosoftEdge*', type: family, ignoreErrors: true, weight: 10, option: "remove-edge"} - - !appx: {name: '*Microsoft.MicrosoftEdgeDevToolsClient*', ignoreErrors: true, type: family, weight: 10, option: "remove-edge"} - - !file: {path: "C:\\Windows\\SystemApps\\Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe", ignoreErrors: true, option: "remove-edge"} + - !appx: {name: '*microsoft.microsoftedge.stable*', type: family, errorAction: Ignore, weight: 10, option: "remove-edge"} + - !appx: {name: '*Microsoft.MicrosoftEdge*', type: family, errorAction: Ignore, weight: 10, option: "remove-edge"} + - !appx: {name: '*Microsoft.MicrosoftEdgeDevToolsClient*', errorAction: Ignore, type: family, weight: 10, option: "remove-edge"} + - !file: {path: "C:\\Windows\\SystemApps\\Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe", errorAction: Ignore, option: "remove-edge"} - !writeStatus: {status: "Removing OneDrive"} - - !appx: {name: '*OneDrive*', type: family, ignoreErrors: true, weight: 10, option: "remove-onedrive"} + - !appx: {name: '*OneDrive*', type: family, errorAction: Ignore, weight: 10, option: "remove-onedrive"} - !writeStatus: {status: "Removing Spotify"} - !appx: {name: '*Spotify*', type: family, weight: 10} @@ -33,7 +33,7 @@ actions: - !powerShell: command: 'Get-AppxPackage MicrosoftWindows.Client.WebExperience | Remove-AppxPackage' runas: currentUserElevated - - !appx: {name: '*MicrosoftWindows.Client.WebExperience*', ignoreErrors: true, type: family, weight: 10} + - !appx: {name: '*MicrosoftWindows.Client.WebExperience*', errorAction: Ignore, type: family, weight: 10} - !writeStatus: {status: "Removing Alarms"} - !appx: {name: '*Microsoft.WindowsAlarms*', type: family, weight: 10} @@ -137,7 +137,7 @@ actions: - !appx: {name: '*Microsoft.MSPaint*', type: family, weight: 10} - !writeStatus: {status: "Removing Teams"} - - !taskKill: {name: "*teams*", ignoreErrors: true} + - !taskKill: {name: "*teams*", errorAction: Ignore} - !appx: {name: '*MicrosoftTeams*', type: family, weight: 10} # new Teams - !powerShell: {command: 'Get-AppxPackage *MSTeams* | Remove-AppxPackage', runas: currentUserElevated} diff --git a/src/Configuration/features/revision/components.yml b/src/Configuration/features/revision/components.yml index 9fcf8f40..50beb476 100644 --- a/src/Configuration/features/revision/components.yml +++ b/src/Configuration/features/revision/components.yml @@ -8,10 +8,10 @@ actions: # Microsoft Edge - !writeStatus: {status: "Removing Microsoft Edge", option: "remove-edge"} - - !taskKill: {name: "MicrosoftEdgeUpdate", ignoreErrors: true, option: "remove-edge"} - - !taskKill: {name: "msedge", ignoreErrors: true, option: "remove-edge"} - - !taskKill: {name: "MicrosoftEdge*", ignoreErrors: true, option: "remove-edge"} - - !taskKill: {name: "setup", ignoreErrors: true, pathContains: "\\Edge", option: "remove-edge"} + - !taskKill: {name: "MicrosoftEdgeUpdate", errorAction: Ignore, option: "remove-edge"} + - !taskKill: {name: "msedge", errorAction: Ignore, option: "remove-edge"} + - !taskKill: {name: "MicrosoftEdge*", errorAction: Ignore, option: "remove-edge"} + - !taskKill: {name: "setup", errorAction: Ignore, pathContains: "\\Edge", option: "remove-edge"} - !powerShell: command: '.\EDGE.ps1 -Mode EdgeBrowser' @@ -36,9 +36,9 @@ actions: # OneDrive - !writeStatus: {status: "Removing OneDrive", option: "remove-onedrive"} - - !taskKill: {name: "OneDriveStandaloneUpdater", ignoreErrors: true, option: "remove-onedrive"} - - !taskKill: {name: "OneDriveSetup", ignoreErrors: true, option: "remove-onedrive"} - - !taskKill: {name: "OneDrive*", ignoreErrors: true, option: "remove-onedrive"} + - !taskKill: {name: "OneDriveStandaloneUpdater", errorAction: Ignore, option: "remove-onedrive"} + - !taskKill: {name: "OneDriveSetup", errorAction: Ignore, option: "remove-onedrive"} + - !taskKill: {name: "OneDrive*", errorAction: Ignore, option: "remove-onedrive"} - !run: {exeDir: true, exe: "ONED.cmd", option: "remove-onedrive", weight: 40} diff --git a/src/Configuration/features/revision/packages.yml b/src/Configuration/features/revision/packages.yml index 9b167799..df838b10 100644 --- a/src/Configuration/features/revision/packages.yml +++ b/src/Configuration/features/revision/packages.yml @@ -32,14 +32,14 @@ actions: weight: 100 option: 'enable-defender' - - !taskKill: {name: "explorer", ignoreErrors: true} - - !taskKill: {name: "SearchApp", ignoreErrors: true} - - !taskKill: {name: "SearchHost", ignoreErrors: true} - - !taskKill: {name: "RuntimeBroker", ignoreErrors: true} - - !taskKill: {name: "TextInputHost", ignoreErrors: true} - - !taskKill: {name: "ShellExperienceHost", ignoreErrors: true} - - !taskKill: {name: "backgroundTaskHost", ignoreErrors: true} - - !taskKill: {name: "Widgets", ignoreErrors: true} + - !taskKill: {name: "explorer", errorAction: Ignore} + - !taskKill: {name: "SearchApp", errorAction: Ignore} + - !taskKill: {name: "SearchHost", errorAction: Ignore} + - !taskKill: {name: "RuntimeBroker", errorAction: Ignore} + - !taskKill: {name: "TextInputHost", errorAction: Ignore} + - !taskKill: {name: "ShellExperienceHost", errorAction: Ignore} + - !taskKill: {name: "backgroundTaskHost", errorAction: Ignore} + - !taskKill: {name: "Widgets", errorAction: Ignore} # NOTE: This method of removing system packages is now deprecated and not recommended by Revision, as it is one of the main cause of #49 diff --git a/src/Configuration/features/revision/start.yml b/src/Configuration/features/revision/start.yml index a6647fad..0cca8316 100644 --- a/src/Configuration/features/revision/start.yml +++ b/src/Configuration/features/revision/start.yml @@ -58,8 +58,8 @@ actions: - !run: {exe: "powercfg", args: "/setactive scheme_current"} - !writeStatus: {status: 'Installing Revision Tool'} - - !powerShell: {command: "& { Invoke-WebRequest ((Invoke-RestMethod -Uri 'https://api.github.com/repos/meetrevision/revision-tool/releases/latest' -Method Get | ConvertTo-Json | ConvertFrom-Json).assets | where-object { $_.name -eq 'RevisionTool-Setup.exe' }).browser_download_url -OutFile \"$env:TEMP\\RevisionTool-Setup.exe\" }" } - - !cmd: {command: 'call "%temp%\RevisionTool-Setup.exe" /VERYSILENT /TASKS="desktopicon"', wait: true, weight: 150} + - !powerShell: {command: "& { Invoke-WebRequest ((Invoke-RestMethod -Uri 'https://api.github.com/repos/meetrevision/revision-tool/releases/latest' -Method Get | ConvertTo-Json | ConvertFrom-Json).assets | where-object { $_.name -eq 'RevisionTool-Setup.exe' }).browser_download_url -OutFile \"$env:TEMP\\RevisionTool-Setup.exe\" }", errorAction: Halt, wait: true} + - !cmd: {command: 'call "%temp%\RevisionTool-Setup.exe" /VERYSILENT /TASKS="desktopicon"', errorAction: Halt, wait: true, weight: 150} - !writeStatus: {status: "Optimizing PowerShell"} - !run: From e78e3e24674ef618a0175313bf231ea94148b3f1 Mon Sep 17 00:00:00 2001 From: melo936 <50238852+melo936@users.noreply.github.com> Date: Sat, 13 Jul 2024 10:50:37 +0400 Subject: [PATCH 04/47] remove onedrive leftovers --- src/Configuration/features/revision/appx.yml | 5 +++-- src/Executables/ONED.cmd | 11 ++++++++--- 2 files changed, 11 insertions(+), 5 deletions(-) diff --git a/src/Configuration/features/revision/appx.yml b/src/Configuration/features/revision/appx.yml index 2e4985b9..77534a2b 100644 --- a/src/Configuration/features/revision/appx.yml +++ b/src/Configuration/features/revision/appx.yml @@ -48,7 +48,7 @@ actions: - !powerShell: command: 'Get-AppxPackage *windowscommunicationsapps* | Remove-AppxPackage' runas: currentUserElevated - - !appx: {name: '*microsoft.windowscommunicationsapps*', type: family, weight: 10} # Seems to leave leftovers on the taskbar + - !appx: {name: '*microsoft.windowscommunicationsapps*', type: family, weight: 10} - !writeStatus: {status: "Removing People"} - !appx: {name: '*Microsoft.People*', type: family, weight: 10} @@ -143,7 +143,8 @@ actions: - !powerShell: {command: 'Get-AppxPackage *MSTeams* | Remove-AppxPackage', runas: currentUserElevated} - !appx: {name: '*MSTeams*', type: family, weight: 10} - - !writeStatus: {status: "Removing Banners"} + # Breaks Windows Updates + # - !writeStatus: {status: "Removing Banners"} # MicrosoftWindows.Client.CBS_cw5n1h2txyewy! # - !appx: {name: '*Global.ValueBanner*', type: app, unregister: true, weight: 50} # - !appx: {name: '*Global.WsxPackManager*', type: app, unregister: true, weight: 50} diff --git a/src/Executables/ONED.cmd b/src/Executables/ONED.cmd index 55aba5fa..a3a18e38 100644 --- a/src/Executables/ONED.cmd +++ b/src/Executables/ONED.cmd @@ -19,14 +19,16 @@ $users = Get-ChildItem 'HKU:\' foreach ($user in $users) { if (Test-Path "HKU:\$($user.PSChildName)\Volatile Environment") { $regPath = "HKU:\$($user.PSChildName)\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\OneDriveSetup.exe" - $uninstallString = (Get-ItemProperty -Path $regPath).UninstallString + $uninstallString = (Get-ItemProperty -Path $regPath -EA SilentlyContinue).UninstallString if (!([string]::IsNullOrEmpty($uninstallString))) { $uninstallFilePath = [System.IO.Path]::GetDirectoryName($uninstallString) $uninstallRegPaths.Add($uninstallFilePath) } - Remove-ItemProperty -Path "HKU:\$($user.PSChildName)\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" -Name "OneDrive" -ErrorAction SilentlyContinue + Remove-ItemProperty -Path "HKU:\$($user.PSChildName)\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" -Name "OneDrive" -EA SilentlyContinue + + Remove-Item -Path "HKU:\$($user.PSChildName)\Software\Microsoft\Windows\CurrentVersion\Uninstall\OneDriveSetup.exe" -Force -EA SilentlyContinue } } @@ -51,4 +53,7 @@ Get-ChildItem -Path "$env:SystemDrive\Users" -Directory | ForEach-Object { if (Test-Path $oneDriveLinkPath) { Remove-Item -Path $oneDriveLinkPath -Force -ErrorAction SilentlyContinue | Out-Null } -} \ No newline at end of file +} + +# Remove OneDrive from the Explorer sidebar +[microsoft.win32.registry]::SetValue("HKEY_CLASSES_ROOT\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}", "System.IsPinnedToNameSpaceTree", 0, [Microsoft.Win32.RegistryValueKind]::DWord) From e44b79c07bfdeabf1b8628075bc3f6f0df64e8ff Mon Sep 17 00:00:00 2001 From: h3r0 <50238852+melo936@users.noreply.github.com> Date: Thu, 18 Jul 2024 14:16:04 +0000 Subject: [PATCH 05/47] remove Windows 11 22621 support --- README.md | 1 - src/playbook.conf | 1 - 2 files changed, 2 deletions(-) diff --git a/README.md b/README.md index 8e699c6b..e68bfa97 100644 --- a/README.md +++ b/README.md @@ -34,7 +34,6 @@ ReviOS Playbook currently supports ARM64 and AMD64 builds of the following Windo - Windows 10 21H2 `19044` (LTSC) - Windows 10 22H2 `19045` -- Windows 11 22H2 `22621` - Windows 11 23H2 `22631` - Windows 11 24H2 `26100` diff --git a/src/playbook.conf b/src/playbook.conf index 78088d58..b6a2a690 100644 --- a/src/playbook.conf +++ b/src/playbook.conf @@ -12,7 +12,6 @@ 19044 19045 - 22621 22631 26100 From f95cafbf24515fe5e9dd0586f9a5d47bbff1db0e Mon Sep 17 00:00:00 2001 From: h3r0 <50238852+melo936@users.noreply.github.com> Date: Thu, 18 Jul 2024 14:18:04 +0000 Subject: [PATCH 06/47] remove unecessary comments for deprovisioned apps --- .../registry/configure-deprovisioned-apps.yml | 47 ++----------------- 1 file changed, 3 insertions(+), 44 deletions(-) diff --git a/src/Configuration/features/revision/registry/configure-deprovisioned-apps.yml b/src/Configuration/features/revision/registry/configure-deprovisioned-apps.yml index 5e271537..54258543 100644 --- a/src/Configuration/features/revision/registry/configure-deprovisioned-apps.yml +++ b/src/Configuration/features/revision/registry/configure-deprovisioned-apps.yml @@ -4,102 +4,61 @@ description: Prevents some UWP packages from installing after updating Windows privilege: TrustedInstaller actions: - # -------> Cortana - - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned', operation: add} - # -------> Microsoft.Bing - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.549981C3F5F10_8wekyb3d8bbwe', operation: add} + - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.549981C3F5F10_8wekyb3d8bbwe', operation: add} + - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.BingNews_8wekyb3d8bbwe', operation: add} - # -------> Microsoft.ECApp_8wekyb3d8bbwe - Still reinstall after updating Windows - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.BingWeather_8wekyb3d8bbwe', operation: add} - # -------> GetHelp - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.ECApp_8wekyb3d8bbwe', operation: add} - # -------> GetStarted - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.GetHelp_8wekyb3d8bbwe', operation: add} - # -------> EdgeChromium -> Old Edge -> DevToolsClient - Still reinstall after updating Windows - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.Getstarted_8wekyb3d8bbwe', operation: add} + # -------> EdgeChromium, Edge Legacy, DevToolsClient - Still gets reinstalled after installing Windows Updates - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.MicrosoftEdge.Stable_8wekyb3d8bbwe', operation: add} - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.MicrosoftEdge_8wekyb3d8bbwe', operation: add} - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe', operation: add} - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\EdgeUpdate', value: 'DoNotUpdateToEdgeWithChromium', type: REG_DWORD, data: '1'} - # -------> SolitaireCollection - # -------> StickyNotes - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe', operation: add} - # -------> People - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.MicrosoftStickyNotes_8wekyb3d8bbwe', operation: add} - # -------> PowerAutomateDesktop - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.People_8wekyb3d8bbwe', operation: add} - # -------> Microsoft.Todos - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.PowerAutomateDesktop_8wekyb3d8bbwe', operation: add} - # -------> SmartScreen - Still reinstall after updating Windows - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.Todos_8wekyb3d8bbwe', operation: add} - # -------> Microsoft Content - Still reinstall after updating on Windows 10 - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.Windows.Apprep.ChxApp_cw5n1h2txyewy', operation: add} - # -------> PeopleExperienceHost - Still reinstall after updating Windows - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.Windows.ContentDeliveryManager_cw5n1h2txyewy', operation: add} - # -------> Photos - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.Windows.PeopleExperienceHost_cw5n1h2txyewy', operation: add} - # -------> Take a Test app - Still reinstall after updating on Windows 10 - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.Windows.Photos_8wekyb3d8bbwe', operation: add} - # -------> Alarm - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.Windows.SecureAssessmentBrowser_cw5n1h2txyewy', operation: add} - # -------> Camera - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.WindowsAlarms_8wekyb3d8bbwe', operation: add} - # -------> FeedbackHub - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.WindowsCamera_8wekyb3d8bbwe', operation: add} - # -------> Maps - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe', operation: add} - # -------> SoundRecorder - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.WindowsMaps_8wekyb3d8bbwe', operation: add} - # -------> Zune - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe', operation: add} - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.ZuneMusic_8wekyb3d8bbwe', operation: add} - # -------> WebExperience/Widgets - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.ZuneVideo_8wekyb3d8bbwe', operation: add} - # -------> Windows Mail - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy', operation: add} - # -------> Advertising.Xaml - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\microsoft.windowscommunicationsapps_8wekyb3d8bbwe', operation: add} - # -------> 3DViewer - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.Advertising.Xaml_8wekyb3d8bbwe', operation: add} - # -------> Windows Mixed Reality - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe', operation: add} - # -------> Paint - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.MixedReality.Portal_8wekyb3d8bbwe', operation: add} - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.MSPaint_8wekyb3d8bbwe', operation: add} - # -------> Notepad - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.Paint_8wekyb3d8bbwe', operation: add} - # -------> clipchamp.clipchamp_yxz26nhyzhsrt - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.WindowsNotepad_8wekyb3d8bbwe', operation: add} - # -------> Defender - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\clipchamp.clipchamp_yxz26nhyzhsrt', operation: add} - # -------> Calculator - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.SecHealthUI_8wekyb3d8bbwe', operation: add} - # -------> Quick Assest - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.WindowsCalculator_8wekyb3d8bbwe', operation: add} - # -------> Family - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\MicrosoftCorporationII.QuickAssist_8wekyb3d8bbwe', operation: add} # === Surface Hub Apps / Team edition - # -------> Whiteboard - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\MicrosoftCorporationII.MicrosoftFamily_8wekyb3d8bbwe', operation: add} - # -------> SkyDrive - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.Whiteboard_8wekyb3d8bbwe', operation: add} - # -------> MicrosoftTeamsforSurfaceHub - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\microsoft.microsoftskydrive_8wekyb3d8bbwe', operation: add} - # -------> MailforSurfaceHub - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.MicrosoftTeamsforSurfaceHub_8wekyb3d8bbwe', operation: add} - # -------> MicrosoftPowerBI - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\MicrosoftCorporationII.MailforSurfaceHub_8wekyb3d8bbwe', operation: add} - # -------> Skype - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.MicrosoftPowerBIForWindows_8wekyb3d8bbwe', operation: add} - # -------> Office - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.SkypeApp_kzf8qxf38zg5c', operation: add} - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe', operation: add} - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.Office.OneNote_8wekyb3d8bbwe', operation: add} - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.Office.Excel_8wekyb3d8bbwe', operation: add} - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.Office.PowerPoint_8wekyb3d8bbwe', operation: add} - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.Office.Word_8wekyb3d8bbwe', operation: add} - - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.Windows.DevHome_8wekyb3d8bbwe', operation: add} - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.OutlookForWindows_8wekyb3d8bbwe', operation: add} - - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\MSTeams_8wekyb3d8bbwe', operation: add} \ No newline at end of file From d24515cc4059f6907b58b14b9970734394e7d687 Mon Sep 17 00:00:00 2001 From: h3r0 <50238852+melo936@users.noreply.github.com> Date: Tue, 23 Jul 2024 08:20:02 +0000 Subject: [PATCH 07/47] migrate 'apply-revert' option to onUpgrade --- .vscode/extensions.json | 4 +++- .vscode/settings.json | 1 - .../registry/configure-windows-update-and-install.yml | 2 +- src/Configuration/features/revision/revert.yml | 10 +--------- src/playbook.conf | 4 ---- 5 files changed, 5 insertions(+), 16 deletions(-) diff --git a/.vscode/extensions.json b/.vscode/extensions.json index e7a120f8..a7c1b736 100644 --- a/.vscode/extensions.json +++ b/.vscode/extensions.json @@ -1,5 +1,7 @@ { "recommendations": [ - "redhat.vscode-yaml" + "redhat.vscode-yaml", + "ms-vscode.powershell", + "ms-vscode.powershell" ] } \ No newline at end of file diff --git a/.vscode/settings.json b/.vscode/settings.json index 24de10ef..cc1740da 100644 --- a/.vscode/settings.json +++ b/.vscode/settings.json @@ -14,7 +14,6 @@ "!writeStatus: mapping", "!task: mapping", ], - "redhat.telemetry.enabled": false, "yaml.schemas": { "https://json.schemastore.org/github-issue-config.json": "file:///workspaces/playbook/.github/ISSUE_TEMPLATE/config.yml" } diff --git a/src/Configuration/features/revision/registry/configure-windows-update-and-install.yml b/src/Configuration/features/revision/registry/configure-windows-update-and-install.yml index 883f16d1..bec91024 100644 --- a/src/Configuration/features/revision/registry/configure-windows-update-and-install.yml +++ b/src/Configuration/features/revision/registry/configure-windows-update-and-install.yml @@ -10,7 +10,7 @@ actions: # === Configure Automatic Updates - Disabled # ------> NOTE: Used to break Xbox Sign-in - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'NoAutoUpdate', type: REG_DWORD, data: '1'} + # - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'NoAutoUpdate', type: REG_DWORD, data: '1'} # === Pause Windows Updates to 2038 January 19 # === FlightSettingsMaxPauseDays is responsible for the rest regs to work diff --git a/src/Configuration/features/revision/revert.yml b/src/Configuration/features/revision/revert.yml index f61b6c86..de2a0aaf 100644 --- a/src/Configuration/features/revision/revert.yml +++ b/src/Configuration/features/revision/revert.yml @@ -2,17 +2,9 @@ title: Rollback Tweaks description: Rollback tweaks for those who are applying from previous versions of the playbook privilege: TrustedInstaller -option: apply-revert +onUpgrade: true actions: - - - !registryValue: { path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'AUOptions', operation: delete } - - !registryValue: { path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'AutoInstallMinorUpdates', operation: delete } - - !registryValue: { path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'NoAUAsDefaultShutdownOption', operation: delete } - - !registryValue: { path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'NoAUShutdownOption', operation: delete } - - !registryValue: { path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'NoAutoRebootWithLoggedOnUsers', operation: delete } - - !registryValue: { path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'IncludeRecommendedUpdates', operation: delete } - - !registryValue: { path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'EnableFeaturedSoftware', operation: delete } - !registryValue: { path: 'HKLM\SYSTEM\ControlSet001\Control\Session Manager', value: 'HeapDeCommitFreeBlockThreshold', type: REG_DWORD, data: '0' } - !registryValue: { path: 'HKCU\SOFTWARE\Policies\Microsoft\Internet Explorer\Security', value: 'DisableSecuritySettingsCheck', operation: delete } diff --git a/src/playbook.conf b/src/playbook.conf index b6a2a690..c140979f 100644 --- a/src/playbook.conf +++ b/src/playbook.conf @@ -151,10 +151,6 @@ Remove pinned items in Start Menu remove-pinned-items-startmenu - - Fixes for previous ReviOS setup - apply-revert - Disable Automatic Maintenance disable-automatic-maintenance From b7a1868c7cb13785bbb74c51fabcc3a837c442bd Mon Sep 17 00:00:00 2001 From: h3r0 <50238852+melo936@users.noreply.github.com> Date: Sun, 11 Aug 2024 09:17:42 +0000 Subject: [PATCH 08/47] remove Microsoft.Copilot appx if remove-edge is true --- src/Configuration/features/revision/appx.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/src/Configuration/features/revision/appx.yml b/src/Configuration/features/revision/appx.yml index 77534a2b..4c9f213f 100644 --- a/src/Configuration/features/revision/appx.yml +++ b/src/Configuration/features/revision/appx.yml @@ -11,6 +11,7 @@ actions: - !appx: {name: '*Microsoft.MicrosoftEdge*', type: family, errorAction: Ignore, weight: 10, option: "remove-edge"} - !appx: {name: '*Microsoft.MicrosoftEdgeDevToolsClient*', errorAction: Ignore, type: family, weight: 10, option: "remove-edge"} - !file: {path: "C:\\Windows\\SystemApps\\Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe", errorAction: Ignore, option: "remove-edge"} + - !appx: {name: 'Microsoft.Copilot*', type: family, errorAction: Ignore, weight: 10, option: "remove-edge"} - !writeStatus: {status: "Removing OneDrive"} - !appx: {name: '*OneDrive*', type: family, errorAction: Ignore, weight: 10, option: "remove-onedrive"} From b0e7d6a98e47f8df2388e0332f8c7114e8059ed9 Mon Sep 17 00:00:00 2001 From: h3r0 <50238852+melo936@users.noreply.github.com> Date: Sun, 18 Aug 2024 07:51:33 +0000 Subject: [PATCH 09/47] block star-randsrv.bsg.brave.com via hosts --- src/Executables/hosts | 1 + 1 file changed, 1 insertion(+) diff --git a/src/Executables/hosts b/src/Executables/hosts index 2c21fa84..f335a45f 100644 --- a/src/Executables/hosts +++ b/src/Executables/hosts @@ -51,6 +51,7 @@ # 0.0.0.0 laptop-updates.brave.com # 0.0.0.0 variations.brave.com 0.0.0.0 cr.brave.com +0.0.0.0 star-randsrv.bsg.brave.com # Visual Studio / VSCode 0.0.0.0 vortex.data.microsoft.com From 5c432155e29541c5a4ba422a1bc55a6b7ee8de75 Mon Sep 17 00:00:00 2001 From: h3r0 <50238852+melo936@users.noreply.github.com> Date: Sun, 18 Aug 2024 08:08:22 +0000 Subject: [PATCH 10/47] remove machine scope args when installing brave --- src/Configuration/features/revision/software.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/Configuration/features/revision/software.yml b/src/Configuration/features/revision/software.yml index 77a95a2e..7988f6af 100644 --- a/src/Configuration/features/revision/software.yml +++ b/src/Configuration/features/revision/software.yml @@ -15,7 +15,8 @@ actions: - !writeStatus: {status: 'Installing Brave', option: "browser-brave"} - !cmd: - command: 'winget install Brave.Brave --source winget --scope machine --silent --accept-source-agreements --accept-package-agreements' + # command: 'winget install Brave.Brave --source winget --scope machine --silent --accept-source-agreements --accept-package-agreements' + command: 'winget install Brave.Brave --source winget --silent --accept-source-agreements --accept-package-agreements' weight: 150 wait: true runas: currentUserElevated From 1808dbb0dbc2c3b30d59010d92501306a22f1996 Mon Sep 17 00:00:00 2001 From: h3r0 <50238852+melo936@users.noreply.github.com> Date: Sun, 18 Aug 2024 14:39:14 +0000 Subject: [PATCH 11/47] do not disable rdyboost --- src/Configuration/features/revision/config.yml | 18 ++++++++++-------- src/Configuration/features/revision/revert.yml | 6 +++++- 2 files changed, 15 insertions(+), 9 deletions(-) diff --git a/src/Configuration/features/revision/config.yml b/src/Configuration/features/revision/config.yml index ac6d64bb..032d015f 100644 --- a/src/Configuration/features/revision/config.yml +++ b/src/Configuration/features/revision/config.yml @@ -8,15 +8,17 @@ actions: - !powerShell: command: 'Disable-MMAgent -mc' + + # [!] Breaks 'defrag c: -b' and cores parking on some AMD CPUs # Disable Superfetch for SSDs - # Might not work on VMs - - !powerShell: - command: | - $mediaType = (Get-PhysicalDisk -SerialNumber (Get-Disk -Number (Get-Partition -DriveLetter $env:SystemDrive.Substring(0, 1)).DiskNumber).SerialNumber.TrimStart()).MediaType - if ($mediaType -eq 'SSD') { - $path = ${env:ProgramFiles(x86)} + '\Revision Tool\data\flutter_assets\additionals\DisableSF.bat' - Start-Process -FilePath $path -Wait -NoNewWindow - } + # Detection of mediaType might not work on VMs + # - !powerShell: + # command: | + # $mediaType = (Get-PhysicalDisk -SerialNumber (Get-Disk -Number (Get-Partition -DriveLetter $env:SystemDrive.Substring(0, 1)).DiskNumber).SerialNumber.TrimStart()).MediaType + # if ($mediaType -eq 'SSD') { + # $path = ${env:ProgramFiles(x86)} + '\Revision Tool\data\flutter_assets\additionals\DisableSF.bat' + # Start-Process -FilePath $path -Wait -NoNewWindow + # } - !cmd: command: 'setx DOTNET_CLI_TELEMETRY_OPTOUT 1' diff --git a/src/Configuration/features/revision/revert.yml b/src/Configuration/features/revision/revert.yml index de2a0aaf..df867530 100644 --- a/src/Configuration/features/revision/revert.yml +++ b/src/Configuration/features/revision/revert.yml @@ -69,4 +69,8 @@ actions: - !registryKey: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate', operation: delete} - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Servicing', value: 'RepairContentServerSource', operation: delete} - + # Breaks 'defrag c: -b' and cores parking on some AMD CPUs + - !powerShell: + command: | + $path = ${env:ProgramFiles(x86)} + '\Revision Tool\data\flutter_assets\additionals\EnableSF.bat' + Start-Process -FilePath $path -Wait -NoNewWindow From 69c2afba8a299b6e20d248eb01404a8cece575f6 Mon Sep 17 00:00:00 2001 From: h3r0 <50238852+melo936@users.noreply.github.com> Date: Mon, 19 Aug 2024 09:32:55 +0000 Subject: [PATCH 12/47] fix current build detection in 24H2 --- src/Executables/FINALIZE.cmd | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/Executables/FINALIZE.cmd b/src/Executables/FINALIZE.cmd index 3e04b3a6..07376a63 100644 --- a/src/Executables/FINALIZE.cmd +++ b/src/Executables/FINALIZE.cmd @@ -1,6 +1,6 @@ @echo off set version=1.0 -for /f "tokens=2 delims==" %%i in ('wmic os get BuildNumber /value ^| find "="') do set "build=%%i" +for /f "tokens=3" %%i in ('reg query "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion" /v "CurrentBuild"') do set "build=%%i" if %build% gtr 19045 ( set "w11=true" ) From e5c39c188510cfd7a04144d990b9827d5d4659eb Mon Sep 17 00:00:00 2001 From: h3r0 <50238852+melo936@users.noreply.github.com> Date: Tue, 20 Aug 2024 09:18:25 +0000 Subject: [PATCH 13/47] set TaskbarDa registry errorAction to ignore a workaround to prevent the playbook from finishing with errors --- .../features/revision/registry/configure-explorer-settings.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/Configuration/features/revision/registry/configure-explorer-settings.yml b/src/Configuration/features/revision/registry/configure-explorer-settings.yml index 8e3346f3..76bae4c7 100644 --- a/src/Configuration/features/revision/registry/configure-explorer-settings.yml +++ b/src/Configuration/features/revision/registry/configure-explorer-settings.yml @@ -114,7 +114,7 @@ actions: # ------> Other parts of it can be found in configure-ifeo - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Feeds', value: 'EnableFeeds', type: REG_DWORD, data: '0'} - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Feeds', value: 'ShellFeedsTaskbarViewMode', type: REG_DWORD, data: '2'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'TaskbarDa', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'TaskbarDa', type: REG_DWORD, data: '0', errorAction: Ignore} # ------> since 22621.1343 builds, Windows 11 tries to reinstall WebExperience even if it is removed and stored in deprovisioned apps list - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Dsh', value: 'AllowNewsAndInterests', type: REG_DWORD, data: '0'} From 46625225dfc5a00975c8c1a9935bdbf1e87e94e0 Mon Sep 17 00:00:00 2001 From: h3r0 <50238852+melo936@users.noreply.github.com> Date: Tue, 20 Aug 2024 09:21:53 +0000 Subject: [PATCH 14/47] force update group policy --- src/Configuration/features/revision/config.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/src/Configuration/features/revision/config.yml b/src/Configuration/features/revision/config.yml index 032d015f..661df275 100644 --- a/src/Configuration/features/revision/config.yml +++ b/src/Configuration/features/revision/config.yml @@ -102,5 +102,8 @@ actions: - !appx: {operation: clearCache, name: '*XboxIdentityProvider*'} - !appx: {operation: clearCache, name: '*XboxSpeechToTextOverlay*'} + # Force update group policy + - !run: + exe: "gpupdate.exe" # Start as user process to prevent weird look due to running as TrustedInstaller # - !run: {baseDir: true, exe: "NSudoLC.exe", args: '-U:C -UseCurrentConsole explorer.exe'} \ No newline at end of file From 284b089e42eb97a2275a0bb83a27818c1ef90090 Mon Sep 17 00:00:00 2001 From: h3r0 <50238852+melo936@users.noreply.github.com> Date: Wed, 28 Aug 2024 16:28:54 +0000 Subject: [PATCH 15/47] set ShellFeedsTaskbarViewMode registry errorAction to ignore --- src/Configuration/features/revision/config.yml | 4 +--- .../revision/registry/configure-explorer-settings.yml | 2 +- 2 files changed, 2 insertions(+), 4 deletions(-) diff --git a/src/Configuration/features/revision/config.yml b/src/Configuration/features/revision/config.yml index 661df275..704d8261 100644 --- a/src/Configuration/features/revision/config.yml +++ b/src/Configuration/features/revision/config.yml @@ -104,6 +104,4 @@ actions: # Force update group policy - !run: - exe: "gpupdate.exe" - # Start as user process to prevent weird look due to running as TrustedInstaller - # - !run: {baseDir: true, exe: "NSudoLC.exe", args: '-U:C -UseCurrentConsole explorer.exe'} \ No newline at end of file + exe: "gpupdate.exe" \ No newline at end of file diff --git a/src/Configuration/features/revision/registry/configure-explorer-settings.yml b/src/Configuration/features/revision/registry/configure-explorer-settings.yml index 76bae4c7..14eb8528 100644 --- a/src/Configuration/features/revision/registry/configure-explorer-settings.yml +++ b/src/Configuration/features/revision/registry/configure-explorer-settings.yml @@ -113,7 +113,7 @@ actions: # === Disable the new Weather and News widgets # ------> Other parts of it can be found in configure-ifeo - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Feeds', value: 'EnableFeeds', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Feeds', value: 'ShellFeedsTaskbarViewMode', type: REG_DWORD, data: '2'} + - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Feeds', value: 'ShellFeedsTaskbarViewMode', type: REG_DWORD, data: '2', errorAction: Ignore} - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'TaskbarDa', type: REG_DWORD, data: '0', errorAction: Ignore} # ------> since 22621.1343 builds, Windows 11 tries to reinstall WebExperience even if it is removed and stored in deprovisioned apps list - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Dsh', value: 'AllowNewsAndInterests', type: REG_DWORD, data: '0'} From c01f27ccd51df36dcf6c3ddd5297179e2affa3c6 Mon Sep 17 00:00:00 2001 From: lipkiat <133583600+lipkiat@users.noreply.github.com> Date: Thu, 29 Aug 2024 00:35:18 +0800 Subject: [PATCH 16/47] Remove and fix redundant code (#130) * Remove redundant code * Fix `Pause Windows Update` --- .../features/revision/registry/configure-privacy.yml | 2 -- .../registry/configure-windows-update-and-install.yml | 4 ++-- 2 files changed, 2 insertions(+), 4 deletions(-) diff --git a/src/Configuration/features/revision/registry/configure-privacy.yml b/src/Configuration/features/revision/registry/configure-privacy.yml index fce1bb5d..6d635585 100644 --- a/src/Configuration/features/revision/registry/configure-privacy.yml +++ b/src/Configuration/features/revision/registry/configure-privacy.yml @@ -142,8 +142,6 @@ actions: - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'PreInstalledAppsEnabled', type: REG_DWORD, data: '0'} - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'PreInstalledAppsEverEnabled', type: REG_DWORD, data: '0'} # === Pre-installed vendor apps - Off - - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'OemPreInstalledAppsEnabled', type: REG_DWORD, data: '0'} - # === Pre-installed vendor apps - Off - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'OemPreInstalledAppsEnabled', type: REG_DWORD, data: '0'} # === Prevent Content Delivery Manager from reverting feature configuration - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'FeatureManagementEnabled', type: REG_DWORD, data: '0'} diff --git a/src/Configuration/features/revision/registry/configure-windows-update-and-install.yml b/src/Configuration/features/revision/registry/configure-windows-update-and-install.yml index bec91024..665e8083 100644 --- a/src/Configuration/features/revision/registry/configure-windows-update-and-install.yml +++ b/src/Configuration/features/revision/registry/configure-windows-update-and-install.yml @@ -16,7 +16,7 @@ actions: # === FlightSettingsMaxPauseDays is responsible for the rest regs to work - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\WindowsUpdate\UX\Settings', value: 'FlightSettingsMaxPauseDays', type: REG_DWORD, data: '5269'} - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\WindowsUpdate\UX\Settings', value: 'PauseFeatureUpdatesStartTime', type: REG_SZ, data: '2023-08-17T12:47:51Z'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\WindowsUpdate\UX\Settings', value: 'PauseFeatureUpdatesStartTime', type: REG_SZ, data: '2038-01-19T03:14:07Z'} + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\WindowsUpdate\UX\Settings', value: 'PauseFeatureUpdatesEndTime', type: REG_SZ, data: '2038-01-19T03:14:07Z'} - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\WindowsUpdate\UX\Settings', value: 'PauseQualityUpdatesStartTime', type: REG_SZ, data: '2023-08-17T12:47:51Z'} - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\WindowsUpdate\UX\Settings', value: 'PauseQualityUpdatesEndTime', type: REG_SZ, data: '2038-01-19T03:14:07Z'} - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\WindowsUpdate\UX\Settings', value: 'PauseUpdatesStartTime', type: REG_SZ, data: '2023-08-17T12:47:51Z'} @@ -143,4 +143,4 @@ actions: # === No auto-restart with logged on users for scheduled automatic updates installations - Enabled # - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'NoAutoRebootWithLoggedOnUsers', type: REG_DWORD, data: '1'} # === Turn on Software Notifications - Disabled - # - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'EnableFeaturedSoftware', type: REG_DWORD, data: '0'} \ No newline at end of file + # - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'EnableFeaturedSoftware', type: REG_DWORD, data: '0'} From 65228d230a99453d3b9314a80df102f095a6df50 Mon Sep 17 00:00:00 2001 From: h3r0 <50238852+melo936@users.noreply.github.com> Date: Fri, 6 Sep 2024 11:54:09 +0000 Subject: [PATCH 17/47] reorder tasks and implement new appx remover the new appx-remover uses the EndOfLife method, and additionally adds a package in the Deprovisioned key before removing; This change was done, because AME Wizard currently cannot remove pinned appx packages from the taskbar on 24H2. This change is likely to be temporary. remove new appx packages: Microsoft.StartExperiencesApp, Microsoft.WidgetsPlatformRuntime --- src/Configuration/custom.yml | 14 +- src/Configuration/features/revision/appx.yml | 380 ++++++++++++------ .../features/revision/components.yml | 247 ++---------- .../features/revision/packages.yml | 8 - src/Executables/APPX-REMOVER.ps1 | 49 +++ 5 files changed, 343 insertions(+), 355 deletions(-) create mode 100644 src/Executables/APPX-REMOVER.ps1 diff --git a/src/Configuration/custom.yml b/src/Configuration/custom.yml index a826c4aa..6ca23f3f 100644 --- a/src/Configuration/custom.yml +++ b/src/Configuration/custom.yml @@ -2,13 +2,23 @@ title: Custom description: Custom Revision configuration privilege: Admin -actions: +actions: - !task: {path: 'features\revision\registry\aaa-edit-ISO-version-and-edition.yml'} - !task: {path: 'features\revision\start.yml'} + - !task: {path: 'features\revision\components.yml'} + - !task: {path: 'features\revision\packages.yml'} + - !taskKill: {name: "explorer", errorAction: Ignore} + - !taskKill: {name: "SearchApp", errorAction: Ignore} + - !taskKill: {name: "SearchHost", errorAction: Ignore} + - !taskKill: {name: "RuntimeBroker", errorAction: Ignore} + - !taskKill: {name: "TextInputHost", errorAction: Ignore} + - !taskKill: {name: "ShellExperienceHost", errorAction: Ignore} + - !taskKill: {name: "backgroundTaskHost", errorAction: Ignore} + - !taskKill: {name: "Widgets", errorAction: Ignore} + - !task: {path: 'features\revision\software.yml'} - !task: {path: 'features\revision\services.yml'} - - !task: {path: 'features\revision\components.yml'} - !task: {path: 'features\revision\appx.yml'} - !task: {path: 'features\revision\registry.yml'} - !task: {path: 'features\revision\revert.yml'} diff --git a/src/Configuration/features/revision/appx.yml b/src/Configuration/features/revision/appx.yml index 4c9f213f..fc77e02f 100644 --- a/src/Configuration/features/revision/appx.yml +++ b/src/Configuration/features/revision/appx.yml @@ -5,172 +5,286 @@ privilege: TrustedInstaller actions: - !writeStatus: {status: "Removing Appx Packages"} - # - !appx: {name: '*Disney*', type: family, weight: 10} + - !powerShell: + # runas: currentUserElevated + wait: true + exeDir: true + errorAction: Ignore + weight: 48 + command: >- + .\APPX-REMOVER.ps1 -Packages @( + 'Microsoft.Windows.SecureAssessmentBrowser', + 'Microsoft.Windows.PeopleExperienceHost', + 'Microsoft.Windows.Photos', + 'Microsoft.WindowsCamera', + 'MicrosoftWindows.Client.WebExperience', + 'Microsoft.WidgetsPlatformRuntime', + 'Microsoft.WindowsAlarms', + 'Microsoft.WindowsMaps', + 'Microsoft.MicrosoftStickyNotes', + 'microsoft.windowscommunicationsapps', + 'Microsoft.People', + 'Microsoft.BingNews', + 'Microsoft.BingSearch', + 'Microsoft.BingWeather', + 'Microsoft.MicrosoftSolitaireCollection', + 'Microsoft.WindowsFeedbackHub', + 'Microsoft.GetHelp', + 'Microsoft.Getstarted', + 'Microsoft.Todos', + 'Microsoft.PowerAutomateDesktop', + 'Microsoft.549981C3F5F10', # Cortana + 'MicrosoftCorporationII.QuickAssist', + 'MicrosoftCorporationII.MicrosoftFamily', + 'Microsoft.ZuneMusic', + 'Microsoft.ZuneVideo', + 'Microsoft.WindowsSoundRecorder', + 'Clipchamp.Clipchamp', + 'Microsoft.Whiteboard', + 'Microsoft.MicrosoftTeamsforSurfaceHub', + 'MicrosoftCorporationII.MailforSurfaceHub', + 'Microsoft.MicrosoftPowerBIForWindows', + 'Microsoft.SkypeApp', + 'Microsoft.MicrosoftOfficeHub', + 'Microsoft.Office.Excel', + 'Microsoft.Office.PowerPoint', + 'Microsoft.Office.Word', + 'Microsoft.Office.OneNote', + 'Microsoft.OutlookForWindows', + 'SpotifyAB.SpotifyMusic', + 'OutlookPWA', + 'Flipgrid', + 'Microsoft.Microsoft3DViewer', + 'Microsoft.Advertising', + 'MixedReality.Portal', + 'Microsoft.MSPaint', # Paint 3D + 'MicrosoftTeams', + 'MSTeams', # New Teams + 'Microsoft.WindowsCalculator', + 'Microsoft.StartExperiencesApp' + ) - - !appx: {name: '*microsoft.microsoftedge.stable*', type: family, errorAction: Ignore, weight: 10, option: "remove-edge"} - - !appx: {name: '*Microsoft.MicrosoftEdge*', type: family, errorAction: Ignore, weight: 10, option: "remove-edge"} - - !appx: {name: '*Microsoft.MicrosoftEdgeDevToolsClient*', errorAction: Ignore, type: family, weight: 10, option: "remove-edge"} - - !file: {path: "C:\\Windows\\SystemApps\\Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe", errorAction: Ignore, option: "remove-edge"} - - !appx: {name: 'Microsoft.Copilot*', type: family, errorAction: Ignore, weight: 10, option: "remove-edge"} + - !writeStatus: {status: "Removing Dev Home", option: "remove-appx-devhome"} + - !powerShell: + option: "remove-appx-devhome" + # runas: currentUserElevated + wait: true + exeDir: true + errorAction: Ignore + weight: 10 + command: >- + .\APPX-REMOVER.ps1 -Packages 'Microsoft.Windows.DevHome' + + - !writeStatus: {status: "Removing Xbox Apps", option: "remove-appx-xbox"} + - !appx: {name: 'Microsoft.XboxGameCallableUI*', type: family, weight: 10, option: "remove-appx-xbox"} + - !powerShell: + option: "remove-appx-xbox" + # runas: currentUserElevated + wait: true + exeDir: true + errorAction: Ignore + weight: 30 + command: >- + .\APPX-REMOVER.ps1 -Packages @( + 'Microsoft.Xbox', + 'Microsoft.XboxApp', # Xbox Console Companion is deprecated + 'Microsoft.GamingApp', + 'Microsoft.XboxGameCallableUI' + ) + + + - !writeStatus: {status: "Removing Your Phone", option: "remove-appx-yourphone"} + - !powerShell: + option: "remove-appx-yourphone" + # runas: currentUserElevated + wait: true + exeDir: true + errorAction: Ignore + weight: 20 + command: >- + .\APPX-REMOVER.ps1 -Packages @( + 'Microsoft.YourPhone', + 'MicrosoftWindows.CrossDevice' + ) + + - !writeStatus: {status: "Removing Recall", option: "remove-appx-recall"} + - !powerShell: + option: "remove-appx-recall" + # runas: currentUserElevated + wait: true + exeDir: true + errorAction: Ignore + weight: 10 + command: >- + .\APPX-REMOVER.ps1 -Packages 'MicrosoftWindows.Client.AIX' + +# - !writeStatus: {status: "Removing Appx Packages"} +# # - !appx: {name: '*Disney*', type: family, weight: 10} - - !writeStatus: {status: "Removing OneDrive"} - - !appx: {name: '*OneDrive*', type: family, errorAction: Ignore, weight: 10, option: "remove-onedrive"} +# - !appx: {name: '*microsoft.microsoftedge.stable*', type: family, errorAction: Ignore, weight: 10, option: "remove-edge"} +# - !appx: {name: '*Microsoft.MicrosoftEdge*', type: family, errorAction: Ignore, weight: 10, option: "remove-edge"} +# - !appx: {name: '*Microsoft.MicrosoftEdgeDevToolsClient*', errorAction: Ignore, type: family, weight: 10, option: "remove-edge"} +# - !file: {path: "C:\\Windows\\SystemApps\\Microsoft.MicrosoftEdgeDevToolsClient_8wekyb3d8bbwe", errorAction: Ignore, option: "remove-edge"} +# - !appx: {name: 'Microsoft.Copilot*', type: family, errorAction: Ignore, weight: 10, option: "remove-edge"} - - !writeStatus: {status: "Removing Spotify"} - - !appx: {name: '*Spotify*', type: family, weight: 10} +# - !writeStatus: {status: "Removing OneDrive"} +# - !appx: {name: '*OneDrive*', type: family, errorAction: Ignore, weight: 10, option: "remove-onedrive"} - - !writeStatus: {status: "Removing SecureAssessmentBrowser"} - - !appx: {name: '*SecureAssessmentBrowser*', type: family, weight: 10} +# - !writeStatus: {status: "Removing Spotify"} +# - !appx: {name: '*Spotify*', type: family, weight: 10} - - !writeStatus: {status: "Removing PeopleExperienceHost"} - - !appx: {name: '*PeopleExperienceHost*', type: family, weight: 10} +# - !writeStatus: {status: "Removing SecureAssessmentBrowser"} +# - !appx: {name: '*SecureAssessmentBrowser*', type: family, weight: 10} - - !writeStatus: {status: "Removing Photos"} - - !appx: {name: '*Microsoft.Windows.Photos*', type: family, option: "remove-appx-photos", weight: 10} - - !writeStatus: {status: "Removing Camera"} - - !appx: {name: '*Microsoft.WindowsCamera*', type: family, weight: 10} +# - !writeStatus: {status: "Removing PeopleExperienceHost"} +# - !appx: {name: '*PeopleExperienceHost*', type: family, weight: 10} + +# - !writeStatus: {status: "Removing Photos"} +# - !appx: {name: '*Microsoft.Windows.Photos*', type: family, option: "remove-appx-photos", weight: 10} +# - !writeStatus: {status: "Removing Camera"} +# - !appx: {name: '*Microsoft.WindowsCamera*', type: family, weight: 10} - - !writeStatus: {status: "Removing Widgets"} - - !powerShell: - command: 'Get-AppxPackage MicrosoftWindows.Client.WebExperience | Remove-AppxPackage' - runas: currentUserElevated - - !appx: {name: '*MicrosoftWindows.Client.WebExperience*', errorAction: Ignore, type: family, weight: 10} +# - !writeStatus: {status: "Removing Widgets"} +# - !powerShell: +# command: 'Get-AppxPackage MicrosoftWindows.Client.WebExperience | Remove-AppxPackage' +# runas: currentUserElevated +# - !appx: {name: '*MicrosoftWindows.Client.WebExperience*', errorAction: Ignore, type: family, weight: 10} - - !writeStatus: {status: "Removing Alarms"} - - !appx: {name: '*Microsoft.WindowsAlarms*', type: family, weight: 10} +# - !writeStatus: {status: "Removing Alarms"} +# - !appx: {name: '*Microsoft.WindowsAlarms*', type: family, weight: 10} - - !writeStatus: {status: "Removing Maps"} - - !appx: {name: '*Microsoft.WindowsMaps*', type: family, weight: 10} +# - !writeStatus: {status: "Removing Maps"} +# - !appx: {name: '*Microsoft.WindowsMaps*', type: family, weight: 10} - - !writeStatus: {status: "Removing Sticky Notes"} - - !appx: {name: '*Microsoft.MicrosoftStickyNotes*', type: family, weight: 10} +# - !writeStatus: {status: "Removing Sticky Notes"} +# - !appx: {name: '*Microsoft.MicrosoftStickyNotes*', type: family, weight: 10} - - !writeStatus: {status: "Removing Mail"} - - !powerShell: - command: 'Get-AppxPackage *windowscommunicationsapps* | Remove-AppxPackage' - runas: currentUserElevated - - !appx: {name: '*microsoft.windowscommunicationsapps*', type: family, weight: 10} +# - !writeStatus: {status: "Removing Mail"} +# - !powerShell: +# command: 'Get-AppxPackage *windowscommunicationsapps* | Remove-AppxPackage' +# runas: currentUserElevated +# - !appx: {name: '*microsoft.windowscommunicationsapps*', type: family, weight: 10} - - !writeStatus: {status: "Removing People"} - - !appx: {name: '*Microsoft.People*', type: family, weight: 10} +# - !writeStatus: {status: "Removing People"} +# - !appx: {name: '*Microsoft.People*', type: family, weight: 10} - - !writeStatus: {status: "Removing BingNews"} - - !appx: {name: '*Microsoft.BingNews*', type: family, weight: 10} +# - !writeStatus: {status: "Removing BingNews"} +# - !appx: {name: '*Microsoft.BingNews*', type: family, weight: 10} - - !writeStatus: {status: "Removing BingSearch"} - - !appx: {name: '*BingSearch*', type: family, weight: 10} +# - !writeStatus: {status: "Removing BingSearch"} +# - !appx: {name: '*BingSearch*', type: family, weight: 10} - - !writeStatus: {status: "Removing BingWeather"} - - !appx: {name: '*Microsoft.BingWeather*', type: family, weight: 10} +# - !writeStatus: {status: "Removing BingWeather"} +# - !appx: {name: '*Microsoft.BingWeather*', type: family, weight: 10} - - !writeStatus: {status: "Removing Solitaire"} - - !appx: {name: '*Microsoft.MicrosoftSolitaireCollection*', type: family, weight: 10} +# - !writeStatus: {status: "Removing Solitaire"} +# - !appx: {name: '*Microsoft.MicrosoftSolitaireCollection*', type: family, weight: 10} - - !writeStatus: {status: "Removing Feedback"} - - !appx: {name: '*Microsoft.WindowsFeedbackHub*', type: family, weight: 10} +# - !writeStatus: {status: "Removing Feedback"} +# - !appx: {name: '*Microsoft.WindowsFeedbackHub*', type: family, weight: 10} - - !writeStatus: {status: "Removing GetHelp"} - - !appx: {name: '*Microsoft.GetHelp*', type: family, weight: 10} +# - !writeStatus: {status: "Removing GetHelp"} +# - !appx: {name: '*Microsoft.GetHelp*', type: family, weight: 10} - - !writeStatus: {status: "Removing GetStarted"} - - !appx: {name: '*Microsoft.Getstarted*', type: family, weight: 10} - # Get Started placeholder - # - !appx: {name: '*WebExperienceHost*', type: app, unregister: true, weight: 10} +# - !writeStatus: {status: "Removing GetStarted"} +# - !appx: {name: '*Microsoft.Getstarted*', type: family, weight: 10} +# # Get Started placeholder +# # - !appx: {name: '*WebExperienceHost*', type: app, unregister: true, weight: 10} - - !writeStatus: {status: "Removing Todos"} - - !appx: {name: '*Microsoft.Todos*', type: family, weight: 10} +# - !writeStatus: {status: "Removing Todos"} +# - !appx: {name: '*Microsoft.Todos*', type: family, weight: 10} - - !writeStatus: {status: "Removing PowerAutomate"} - - !appx: {name: '*Microsoft.PowerAutomateDesktop*', type: family, weight: 10} - # Cortana - - !writeStatus: {status: "Removing Cortana"} - - !appx: {name: '*Microsoft.549981C3F5F10*', type: family, weight: 10} +# - !writeStatus: {status: "Removing PowerAutomate"} +# - !appx: {name: '*Microsoft.PowerAutomateDesktop*', type: family, weight: 10} +# # Cortana +# - !writeStatus: {status: "Removing Cortana"} +# - !appx: {name: '*Microsoft.549981C3F5F10*', type: family, weight: 10} - - !writeStatus: {status: "Removing QuickAssist"} - - !appx: {name: '*MicrosoftCorporationII.QuickAssist*', type: family, weight: 10} - - !writeStatus: {status: "Removing MS Family"} - - !appx: {name: '*MicrosoftCorporationII.MicrosoftFamily*', type: family, weight: 10} +# - !writeStatus: {status: "Removing QuickAssist"} +# - !appx: {name: '*MicrosoftCorporationII.QuickAssist*', type: family, weight: 10} +# - !writeStatus: {status: "Removing MS Family"} +# - !appx: {name: '*MicrosoftCorporationII.MicrosoftFamily*', type: family, weight: 10} - - !writeStatus: {status: "Removing ZuneMusic"} - - !appx: {name: '*Microsoft.ZuneMusic*', type: family, weight: 10} - - !writeStatus: {status: "Removing ZuneVideo"} - - !appx: {name: '*Microsoft.ZuneVideo*', type: family, weight: 10} - - !writeStatus: {status: "Removing SoundRecorder"} - - !appx: {name: '*Microsoft.WindowsSoundRecorder*', type: family, weight: 10} - - !writeStatus: {status: "Removing Clipchamp"} - - !appx: {name: '*Clipchamp.Clipchamp*', type: family, weight: 10} - - !writeStatus: {status: "Removing Whiteboard"} - - !appx: {name: '*Microsoft.Whiteboard*', type: family, weight: 10} - - - !writeStatus: {status: "Removing skydrive"} - - !appx: {name: '*microsoft.microsoftskydrive*', type: family, weight: 10} +# - !writeStatus: {status: "Removing ZuneMusic"} +# - !appx: {name: '*Microsoft.ZuneMusic*', type: family, weight: 10} +# - !writeStatus: {status: "Removing ZuneVideo"} +# - !appx: {name: '*Microsoft.ZuneVideo*', type: family, weight: 10} +# - !writeStatus: {status: "Removing SoundRecorder"} +# - !appx: {name: '*Microsoft.WindowsSoundRecorder*', type: family, weight: 10} +# - !writeStatus: {status: "Removing Clipchamp"} +# - !appx: {name: '*Clipchamp.Clipchamp*', type: family, weight: 10} +# - !writeStatus: {status: "Removing Whiteboard"} +# - !appx: {name: '*Microsoft.Whiteboard*', type: family, weight: 10} + +# - !writeStatus: {status: "Removing skydrive"} +# - !appx: {name: '*microsoft.microsoftskydrive*', type: family, weight: 10} - - !writeStatus: {status: "Removing TeamsforSurfaceHub"} - - !appx: {name: '*Microsoft.MicrosoftTeamsforSurfaceHub*', type: family, weight: 10} - - !writeStatus: {status: "Removing MailforSurfaceHub"} - - !appx: {name: '*MicrosoftCorporationII.MailforSurfaceHub*', type: family, weight: 10} - - !writeStatus: {status: "Removing PowerBI"} - - !appx: {name: '*Microsoft.MicrosoftPowerBIForWindows*', type: family, weight: 10} - - !writeStatus: {status: "Removing Skype"} - - !appx: {name: '*Microsoft.SkypeApp*', type: family, weight: 10} +# - !writeStatus: {status: "Removing TeamsforSurfaceHub"} +# - !appx: {name: '*Microsoft.MicrosoftTeamsforSurfaceHub*', type: family, weight: 10} +# - !writeStatus: {status: "Removing MailforSurfaceHub"} +# - !appx: {name: '*MicrosoftCorporationII.MailforSurfaceHub*', type: family, weight: 10} +# - !writeStatus: {status: "Removing PowerBI"} +# - !appx: {name: '*Microsoft.MicrosoftPowerBIForWindows*', type: family, weight: 10} +# - !writeStatus: {status: "Removing Skype"} +# - !appx: {name: '*Microsoft.SkypeApp*', type: family, weight: 10} - - !writeStatus: {status: "Removing UWP Office"} - - !appx: {name: '*Microsoft.MicrosoftOfficeHub*', type: family, weight: 10} - - !appx: {name: '*Microsoft.Office.Excel*', type: family, weight: 10} - - !appx: {name: '*Microsoft.Office.PowerPoint*', type: family, weight: 10} - - !appx: {name: '*Microsoft.Office.Word*', type: family, weight: 10} - - !appx: {name: '*Microsoft.Office.OneNote*', type: family, weight: 10} +# - !writeStatus: {status: "Removing UWP Office"} +# - !appx: {name: '*Microsoft.MicrosoftOfficeHub*', type: family, weight: 10} +# - !appx: {name: '*Microsoft.Office.Excel*', type: family, weight: 10} +# - !appx: {name: '*Microsoft.Office.PowerPoint*', type: family, weight: 10} +# - !appx: {name: '*Microsoft.Office.Word*', type: family, weight: 10} +# - !appx: {name: '*Microsoft.Office.OneNote*', type: family, weight: 10} - - !appx: {name: '*OutlookForWindows*', type: family, weight: 10} - - !appx: {name: '*OutlookPWA*', type: family, weight: 10} +# - !appx: {name: '*OutlookForWindows*', type: family, weight: 10} +# - !appx: {name: '*OutlookPWA*', type: family, weight: 10} - - !writeStatus: {status: "Removing 3DViewer"} - - !appx: {name: '*Microsoft.Microsoft3DViewer*', type: family, weight: 10} +# - !writeStatus: {status: "Removing 3DViewer"} +# - !appx: {name: '*Microsoft.Microsoft3DViewer*', type: family, weight: 10} - - !writeStatus: {status: "Removing Advertising"} - - !appx: {name: 'Microsoft.Advertising*', type: family, weight: 10} +# - !writeStatus: {status: "Removing Advertising"} +# - !appx: {name: 'Microsoft.Advertising*', type: family, weight: 10} - - !writeStatus: {status: "Removing MixedRealityPortal"} - - !appx: {name: '*MixedReality.Portal*', type: family, weight: 10} +# - !writeStatus: {status: "Removing MixedRealityPortal"} +# - !appx: {name: '*MixedReality.Portal*', type: family, weight: 10} - # Paint 3D - - !writeStatus: {status: "Removing Paint 3D"} - - !appx: {name: '*Microsoft.MSPaint*', type: family, weight: 10} - - - !writeStatus: {status: "Removing Teams"} - - !taskKill: {name: "*teams*", errorAction: Ignore} - - !appx: {name: '*MicrosoftTeams*', type: family, weight: 10} - # new Teams - - !powerShell: {command: 'Get-AppxPackage *MSTeams* | Remove-AppxPackage', runas: currentUserElevated} - - !appx: {name: '*MSTeams*', type: family, weight: 10} - - # Breaks Windows Updates - # - !writeStatus: {status: "Removing Banners"} - # MicrosoftWindows.Client.CBS_cw5n1h2txyewy! - # - !appx: {name: '*Global.ValueBanner*', type: app, unregister: true, weight: 50} - # - !appx: {name: '*Global.WsxPackManager*', type: app, unregister: true, weight: 50} - # # MicrosoftWindows.Client.Core_cw5n1h2txyewy - # - !appx: {name: '*Global.BackupBanner*', type: app, unregister: true, weight: 50} - - - !writeStatus: {status: "Removing Dev Home"} - - !appx: {name: '*DevHome*', type: family, option: "remove-appx-devhome", weight: 10} +# # Paint 3D +# - !writeStatus: {status: "Removing Paint 3D"} +# - !appx: {name: '*Microsoft.MSPaint*', type: family, weight: 10} + +# - !writeStatus: {status: "Removing Teams"} +# - !taskKill: {name: "*teams*", errorAction: Ignore} +# - !appx: {name: '*MicrosoftTeams*', type: family, weight: 10} +# # new Teams +# - !powerShell: {command: 'Get-AppxPackage *MSTeams* | Remove-AppxPackage', runas: currentUserElevated} +# - !appx: {name: '*MSTeams*', type: family, weight: 10} + +# # Breaks Windows Updates +# # - !writeStatus: {status: "Removing Banners"} +# # MicrosoftWindows.Client.CBS_cw5n1h2txyewy! +# # - !appx: {name: '*Global.ValueBanner*', type: app, unregister: true, weight: 50} +# # - !appx: {name: '*Global.WsxPackManager*', type: app, unregister: true, weight: 50} +# # # MicrosoftWindows.Client.Core_cw5n1h2txyewy +# # - !appx: {name: '*Global.BackupBanner*', type: app, unregister: true, weight: 50} + +# - !writeStatus: {status: "Removing Dev Home"} +# - !appx: {name: '*DevHome*', type: family, option: "remove-appx-devhome", weight: 10} - # - !writeStatus: {status: "Removing Windows Backup"} - # - !appx: {name: '*WindowsBackup*', type: app, unregister: true, option: "remove-appx-wbackup", weight: 10} +# # - !writeStatus: {status: "Removing Windows Backup"} +# # - !appx: {name: '*WindowsBackup*', type: app, unregister: true, option: "remove-appx-wbackup", weight: 10} - - !writeStatus: {status: "Removing FlipGrid"} - - !appx: {name: '*Flipgrid*', type: family, weight: 10} +# - !writeStatus: {status: "Removing FlipGrid"} +# - !appx: {name: '*Flipgrid*', type: family, weight: 10} - - !writeStatus: {status: "Removing Xbox Apps", option: "remove-appx-xbox"} - - !appx: {name: '*Microsoft.Xbox*', type: family, weight: 10, option: "remove-appx-xbox"} - - !appx: {name: '*Microsoft.GamingApp*', type: family, option: "remove-appx-xbox"} - # Xbox Console Companion is deprecated - - !appx: {name: '*Microsoft.XboxApp*', type: family} +# - !writeStatus: {status: "Removing Xbox Apps", option: "remove-appx-xbox"} +# - !appx: {name: '*Microsoft.Xbox*', type: family, weight: 10, option: "remove-appx-xbox"} +# - !appx: {name: '*Microsoft.GamingApp*', type: family, option: "remove-appx-xbox"} +# # Xbox Console Companion is deprecated +# - !appx: {name: '*Microsoft.XboxApp*', type: family} - - !writeStatus: {status: "Removing Your Phone", option: "remove-appx-yourphone"} - - !appx: {name: '*Microsoft.YourPhone*', type: family, weight: 10, option: "remove-appx-yourphone"} - - !appx: {name: '*MicrosoftWindows.CrossDevice*', type: family, weight: 10, option: "remove-appx-yourphone"} +# - !writeStatus: {status: "Removing Your Phone", option: "remove-appx-yourphone"} +# - !appx: {name: '*Microsoft.YourPhone*', type: family, weight: 10, option: "remove-appx-yourphone"} +# - !appx: {name: '*MicrosoftWindows.CrossDevice*', type: family, weight: 10, option: "remove-appx-yourphone"} - - !writeStatus: {status: "Removing Recall", option: "remove-appx-recall"} - - !appx: {name: '*MicrosoftWindows.Client.AIX*', type: family, weight: 10, option: "remove-appx-recall"} +# - !writeStatus: {status: "Removing Recall", option: "remove-appx-recall"} +# - !appx: {name: '*MicrosoftWindows.Client.AIX*', type: family, weight: 10, option: "remove-appx-recall"} diff --git a/src/Configuration/features/revision/components.yml b/src/Configuration/features/revision/components.yml index 50beb476..e317e700 100644 --- a/src/Configuration/features/revision/components.yml +++ b/src/Configuration/features/revision/components.yml @@ -7,11 +7,20 @@ actions: - !writeStatus: {status: "Removing components"} # Microsoft Edge - - !writeStatus: {status: "Removing Microsoft Edge", option: "remove-edge"} + - !writeStatus: {status: "Removing MS Edge", option: "remove-edge"} - !taskKill: {name: "MicrosoftEdgeUpdate", errorAction: Ignore, option: "remove-edge"} - !taskKill: {name: "msedge", errorAction: Ignore, option: "remove-edge"} - !taskKill: {name: "MicrosoftEdge*", errorAction: Ignore, option: "remove-edge"} - !taskKill: {name: "setup", errorAction: Ignore, pathContains: "\\Edge", option: "remove-edge"} + + # Remove the new Copilot UWP app before removing Edge to avoid leftover files + - !powerShell: + option: "remove-edge" + exeDir: true + errorAction: Ignore + weight: 30 + command: >- + .\APPX-REMOVER.ps1 -Packages 'Microsoft.Copilot' - !powerShell: command: '.\EDGE.ps1 -Mode EdgeBrowser' @@ -20,6 +29,19 @@ actions: option: "remove-edge" weight: 40 + - !powerShell: + option: "remove-edge" + exeDir: true + errorAction: Ignore + weight: 30 + command: >- + .\APPX-REMOVER.ps1 -Packages @( + 'Microsoft.Copilot', + 'Microsoft.MicrosoftEdge', + 'Microsoft.MicrosoftEdgeDevToolsClient' + ) + + - !file: {path: "%ProgramFiles(x86)%\\Microsoft\\Edge", option: "remove-edge", weight: 50} # - !service: {name: "edgeupdate", operation: delete} @@ -41,217 +63,18 @@ actions: - !taskKill: {name: "OneDrive*", errorAction: Ignore, option: "remove-onedrive"} - !run: {exeDir: true, exe: "ONED.cmd", option: "remove-onedrive", weight: 40} - - # - !service: {name: "OneSyncSvc*", option: "remove-onedrive", operation: delete} - # - !registryKey: {path: 'HKCR\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}', option: "remove-onedrive"} - # - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run', value: 'OneDrive', option: "remove-onedrive", operation: delete} - # - !registryKey: {path: 'HKCU\SOFTWARE\Microsoft\OneDrive', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\.fluid', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\.note', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\.whiteboard', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\.loop', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\TypeLib\{F904F88C-E60D-4327-9FA2-865AD075B400}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\Interface\{A87958FF-B414-7748-9183-DBF183A25905}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\Interface\{A87958FF-B414-7748-9183-DBF183A25905}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\NucleusNativeMessaging.NucleusNativeMessaging.1', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\NucleusNativeMessaging.NucleusNativeMessaging', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\CLSID\{917E8742-AA3B-7318-FA12-10485FB322A2}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\CLSID\{917E8742-AA3B-7318-FA12-10485FB322A2}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\NucleusToastActivator.NucleusToastActivator.1', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\NucleusToastActivator.NucleusToastActivator', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\CLSID\{47E6DCAF-41F8-441C-BD0E-A50D5FE6C4D1}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\CLSID\{47E6DCAF-41F8-441C-BD0E-A50D5FE6C4D1}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\mssharepointclient', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Google\Chrome\NativeMessagingHosts\com.microsoft.onedrive.nucleus.auth.provider', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\AppID\{EEABD3A3-784D-4334-AAFC-BB13234F17CF}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\AppID\OneDrive.EXE', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\CLSID\{6bb93b4e-44d8-40e2-bd97-42dbcf18a40f}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\CLSID\{AB807329-7324-431B-8B36-DBD581F56E0B}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\Interface\{1EDD003E-C446-43C5-8BA0-3778CC4792CC}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\Interface\{1EDD003E-C446-43C5-8BA0-3778CC4792CC}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\TypeLib\{4B1C80DA-FA45-468F-B42B-46496BDBE0C5}\1.0', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\SyncEngineStorageProviderHandlerProxy.SyncEngineStorageProviderHandlerProxy', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\CLSID\{A3CA1CF4-5F3E-4AC0-91B9-0D3716E1EAC3}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\TypeLib\{638805C3-4BA3-4AC8-8AAC-71A0BA2BC284}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\FileSyncClient.FileSyncClient.1', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\FileSyncClient.FileSyncClient', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\CLSID\{7B37E4E2-C62F-4914-9620-8FB5062718CC}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\FileSyncClient.AutoPlayHandler.1', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\FileSyncClient.AutoPlayHandler', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\CLSID\{5999E1EE-711E-48D2-9884-851A709F543D}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\BannerNotificationHandler.BannerNotificationHandler', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\CLSID\{2e7c0a19-0438-41e9-81e3-3ad3d64f55ba}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\Interface\{F0AF7C30-EAE4-4644-961D-54E6E28708D6}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\Interface\{F0AF7C30-EAE4-4644-961D-54E6E28708D6}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\Interface\{9D613F8A-B30E-4938-8490-CB5677701EBF}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\Interface\{9D613F8A-B30E-4938-8490-CB5677701EBF}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\Interface\{79A2A54C-3916-41FD-9FAB-F26ED0BBA755}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\Interface\{79A2A54C-3916-41FD-9FAB-F26ED0BBA755}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\Interface\{0299ECA9-80B6-43C8-A79A-FB1C5F19E7D8}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\Interface\{0299ECA9-80B6-43C8-A79A-FB1C5F19E7D8}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\Interface\{0f872661-c863-47a4-863f-c065c182858a}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\Interface\{0f872661-c863-47a4-863f-c065c182858a}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\Interface\{da82e55e-fa2f-45b3-aec3-e7294106ef52}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\Interface\{da82e55e-fa2f-45b3-aec3-e7294106ef52}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\Interface\{e9de26a1-51b2-47b4-b1bf-c87059cc02a7}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\Interface\{e9de26a1-51b2-47b4-b1bf-c87059cc02a7}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\Interface\{2692D1F2-2C7C-4AE0-8E73-8F37736C912D}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\Interface\{2692D1F2-2C7C-4AE0-8E73-8F37736C912D}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\Interface\{5D5DD08F-A10E-4FEF-BCA7-E73E666FC66C}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\Interface\{5D5DD08F-A10E-4FEF-BCA7-E73E666FC66C}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\Interface\{EE15BBBB-9E60-4C52-ABCB-7540FF3DF6B3}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\Interface\{EE15BBBB-9E60-4C52-ABCB-7540FF3DF6B3}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\Interface\{8D3F8F15-1DE1-4662-BF93-762EABE988B2}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\Interface\{8D3F8F15-1DE1-4662-BF93-762EABE988B2}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\Interface\{2B865677-AC3A-43BD-B9E7-BF6FCD3F0596}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\Interface\{2B865677-AC3A-43BD-B9E7-BF6FCD3F0596}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\Interface\{50487D09-FFA9-45E1-8DF5-D457F646CD83}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\Interface\{50487D09-FFA9-45E1-8DF5-D457F646CD83}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\Interface\{D32F7B3A-DEC8-4F44-AF28-E9B7FEB62118}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\Interface\{D32F7B3A-DEC8-4F44-AF28-E9B7FEB62118}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\Interface\{ACDB5DB0-C9D5-461C-BAAA-5DCE0B980E40}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\Interface\{ACDB5DB0-C9D5-461C-BAAA-5DCE0B980E40}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\TypeLib\{909A6CCD-6810-46C4-89DF-05BE7EB61E6C}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\Interface\{10C9242E-D604-49B5-99E4-BF87945EF86C}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\Interface\{10C9242E-D604-49B5-99E4-BF87945EF86C}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\Interface\{F062BA81-ADFE-4A92-886A-23FD851D6406}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\Interface\{F062BA81-ADFE-4A92-886A-23FD851D6406}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\Interface\{3A4E62AE-45D9-41D5-85F5-A45B77AB44E5}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\Interface\{3A4E62AE-45D9-41D5-85F5-A45B77AB44E5}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\Interface\{390AF5A7-1390-4255-9BC9-935BFCFA5D57}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\Interface\{390AF5A7-1390-4255-9BC9-935BFCFA5D57}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\Interface\{1196AE48-D92B-4BC7-85DE-664EC3F761F1}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\Interface\{1196AE48-D92B-4BC7-85DE-664EC3F761F1}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\Interface\{D0ED5C72-6197-4AAD-9B16-53FE461DD85C}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\Interface\{D0ED5C72-6197-4AAD-9B16-53FE461DD85C}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\Interface\{AF60000F-661D-472A-9588-F062F6DB7A0E}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\Interface\{AF60000F-661D-472A-9588-F062F6DB7A0E}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\Interface\{5d65dd0d-81bf-4ff4-aeea-6effb445cb3f}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\Interface\{5d65dd0d-81bf-4ff4-aeea-6effb445cb3f}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\Interface\{b5c25645-7426-433f-8a5f-42b7ff27a7b2}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\Interface\{b5c25645-7426-433f-8a5f-42b7ff27a7b2}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\Interface\{f0440f4e-4884-4a8F-8a45-ba89c00f96f2}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\Interface\{f0440f4e-4884-4a8F-8a45-ba89c00f96f2}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\Interface\{0776ae27-5ab9-4e18-9063-1836da63117a}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\Interface\{0776ae27-5ab9-4e18-9063-1836da63117a}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\Interface\{1b7aed4f-fcaf-4da4-8795-c03e635d8edc}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\Interface\{1b7aed4f-fcaf-4da4-8795-c03e635d8edc}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\Interface\{0d4e4444-cb20-4c2b-b8b2-94e5656ecae8}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\Interface\{0d4e4444-cb20-4c2b-b8b2-94e5656ecae8}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\Interface\{d8c80ebb-099c-4208-afa3-fbc4d11f8a3c}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\Interface\{d8c80ebb-099c-4208-afa3-fbc4d11f8a3c}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\Interface\{C2FE84F5-E036-4A07-950C-9BFD3EAB983A}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\Interface\{C2FE84F5-E036-4A07-950C-9BFD3EAB983A}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\Interface\{8B9F14F4-9559-4A3F-B7D0-312E992B6D98}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\Interface\{8B9F14F4-9559-4A3F-B7D0-312E992B6D98}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\Interface\{22A68885-0FD9-42F6-9DED-4FB174DC7344}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\Interface\{22A68885-0FD9-42F6-9DED-4FB174DC7344}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\Interface\{a7126d4c-f492-4eb9-8a2a-f673dbdd3334}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\Interface\{a7126d4c-f492-4eb9-8a2a-f673dbdd3334}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\Interface\{c1439245-96b4-47fc-b391-679386c5d40f}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\Interface\{c1439245-96b4-47fc-b391-679386c5d40f}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\Interface\{944903E8-B03F-43A0-8341-872200D2DA9C}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\Interface\{944903E8-B03F-43A0-8341-872200D2DA9C}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\Interface\{B54E7079-90C9-4C62-A6B8-B2834C33A04A}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\Interface\{B54E7079-90C9-4C62-A6B8-B2834C33A04A}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\Interface\{1B71F23B-E61F-45C9-83BA-235D55F50CF9}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\Interface\{1B71F23B-E61F-45C9-83BA-235D55F50CF9}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\Interface\{049FED7E-C3EA-4B66-9D92-10E8085D60FB}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\Interface\{049FED7E-C3EA-4B66-9D92-10E8085D60FB}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\Interface\{2387C6BD-9A36-41A2-88ED-FF731E529384}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\Interface\{2387C6BD-9A36-41A2-88ED-FF731E529384}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\Interface\{EA23A664-A558-4548-A8FE-A6B94D37C3CF}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\Interface\{EA23A664-A558-4548-A8FE-A6B94D37C3CF}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\Interface\{2F12C599-7AA5-407A-B898-09E6E4ED2D1E}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\Interface\{2F12C599-7AA5-407A-B898-09E6E4ED2D1E}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\Interface\{2EB31403-EBE0-41EA-AE91-A1953104EA55}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\Interface\{2EB31403-EBE0-41EA-AE91-A1953104EA55}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\Interface\{AEEBAD4E-3E0A-415B-9B94-19C499CD7B6A}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\Interface\{AEEBAD4E-3E0A-415B-9B94-19C499CD7B6A}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\Interface\{fac14b75-7862-4ceb-be41-f53945a61c17}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\Interface\{fac14b75-7862-4ceb-be41-f53945a61c17}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\TypeLib\{BAE13F6C-0E2A-4DEB-AA46-B8F55319347C}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\Interface\{466F31F7-9892-477E-B189-FA5C59DE3603}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\Interface\{466F31F7-9892-477E-B189-FA5C59DE3603}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\Interface\{869BDA08-7ACF-42B8-91AE-4D8D597C0B33}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\Interface\{869BDA08-7ACF-42B8-91AE-4D8D597C0B33}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\Interface\{679EC955-75AA-4FB2-A7ED-8C0152ECF409}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\Interface\{679EC955-75AA-4FB2-A7ED-8C0152ECF409}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\CLSID\{5AB7172C-9C11-405C-8DD5-AF20F3606282}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\CLSID\{5AB7172C-9C11-405C-8DD5-AF20F3606282}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\CLSID\{A78ED123-AB77-406B-9962-2A5D9D2F7F30}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\CLSID\{A78ED123-AB77-406B-9962-2A5D9D2F7F30}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\CLSID\{9AA2F32D-362A-42D9-9328-24A483E2CCC3}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\CLSID\{9AA2F32D-362A-42D9-9328-24A483E2CCC3}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\CLSID\{C5FF006E-2AE9-408C-B85B-2DFDD5449D9C}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\CLSID\{C5FF006E-2AE9-408C-B85B-2DFDD5449D9C}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\CLSID\{7AFDFDDB-F914-11E4-8377-6C3BE50D980C}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\CLSID\{82CA8DE3-01AD-4CEA-9D75-BE4C51810A9E}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\CLSID\{1BF42E4C-4AF4-4CFD-A1A0-CF2960B8F63E}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\CLSID\{20894375-46AE-46E2-BAFD-CB38975CDCE6}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\CLSID\{20894375-46AE-46E2-BAFD-CB38975CDCE6}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\CLSID\{0827D883-485C-4D62-BA2C-A332DBF3D4B0}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\CLSID\{0827D883-485C-4D62-BA2C-A332DBF3D4B0}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\*\shellex\ContextMenuHandlers\ FileSyncEx', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\Directory\Background\shellex\ContextMenuHandlers\ FileSyncEx', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\Directory\shellex\ContextMenuHandlers\ FileSyncEx', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\IE.AssocFile.URL\shellex\ContextMenuHandlers\ FileSyncEx', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\lnkfile\shellex\ContextMenuHandlers\ FileSyncEx', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\CLSID\{021E4F06-9DCC-49AD-88CF-ECC2DA314C8A}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\CLSID\{021E4F06-9DCC-49AD-88CF-ECC2DA314C8A}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\Interface\{31508CC7-9BC7-494B-9D0F-7B1C7F144182}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\Interface\{31508CC7-9BC7-494B-9D0F-7B1C7F144182}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\TypeLib\{C9F3F6BB-3172-4CD8-9EB7-37C9BE601C87}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\SyncEngineFileInfoProvider.SyncEngineFileInfoProvider.1', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\SyncEngineFileInfoProvider.SyncEngineFileInfoProvider', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\OOBERequestHandler.OOBERequestHandler.1', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\OOBERequestHandler.OOBERequestHandler', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\CLSID\{94269C4E-071A-4116-90E6-52E557067E4E}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\CLSID\{94269C4E-071A-4116-90E6-52E557067E4E}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\TypeLib\{082D3FEC-D0D0-4DF6-A988-053FECE7B884}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\CLSID\{389510b7-9e58-40d7-98bf-60b911cb0ea9}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\CLSID\{389510b7-9e58-40d7-98bf-60b911cb0ea9}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\Interface\{4410DC33-BC7C-496B-AA84-4AEA3EEE75F7}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\Interface\{4410DC33-BC7C-496B-AA84-4AEA3EEE75F7}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\Interface\{B05D37A9-03A2-45CF-8850-F660DF0CBF07}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\Interface\{B05D37A9-03A2-45CF-8850-F660DF0CBF07}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\Interface\{53de12aa-df96-413d-a25e-c75b6528abf2}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\Interface\{53de12aa-df96-413d-a25e-c75b6528abf2}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\CLSID\{A926714B-7BFC-4D08-A035-80021395FFA8}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\CLSID\{A926714B-7BFC-4D08-A035-80021395FFA8}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\Interface\{6A821279-AB49-48F8-9A27-F6C59B4FF024}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\Interface\{6A821279-AB49-48F8-9A27-F6C59B4FF024}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\Interface\{A91EFACB-8B83-4B84-B797-1C8CF3AB3DCB}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\Interface\{A91EFACB-8B83-4B84-B797-1C8CF3AB3DCB}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\Interface\{C47B67D4-BA96-44BC-AB9E-1CAC8EEA9E93}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\Interface\{C47B67D4-BA96-44BC-AB9E-1CAC8EEA9E93}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\CLSID\{4410DC33-BC7C-496B-AA84-4AEA3EEE75F7}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\CLSID\{4410DC33-BC7C-496B-AA84-4AEA3EEE75F7}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\CLSID\{9489FEB2-1925-4D01-B788-6D912C70F7F2}', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\WOW6432Node\CLSID\{9489FEB2-1925-4D01-B788-6D912C70F7F2}', option: "remove-onedrive"} - # - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_BROWSER_EMULATION', value: 'OneDrive.exe', operation: delete} - # - !registryKey: {path: 'HKCU\SOFTWARE\Classes\odopen', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\Microsoft\SkyDrive', option: "remove-onedrive"} - # - !registryKey: {path: 'HKCU\SOFTWARE\SyncEngines\Providers\OneDrive', option: "remove-onedrive"} - # - !registryKey: {path: "HKCU\\SOFTWARE\\Classes\\CLSID\\{018D5C66-4533-4307-9B53-224DE2ED1FE6}", option: "remove-onedrive"} - # - !registryKey: {path: "HKCU\\SOFTWARE\\Classes\\WOW6432Node\\CLSID\\{018D5C66-4533-4307-9B53-224DE2ED1FE6}", option: "remove-onedrive"} - # - !file: {path: "%windir%\\System32\\OneDriveSetup.exe", option: "remove-onedrive"} - # - !file: {path: "%windir%\\SysWOW64\\OneDriveSetup.exe", option: "remove-onedrive"} - # - !file: {path: "%windir%\\SysWOW64\\OneDriveSettingSyncProvider.dll", option: "remove-onedrive"} - !file: {path: "%SystemDrive%\\OneDriveTemp", option: "remove-onedrive"} - !file: {path: "%ProgramData%\\Microsoft OneDrive", option: "remove-onedrive"} - # - !run: {exe: "explorer.exe", wait: false} \ No newline at end of file + - !powerShell: + option: "remove-onedrive" + # runas: currentUserElevated + wait: true + exeDir: true + errorAction: Ignore + weight: 10 + command: >- + .\APPX-REMOVER.ps1 -Packages @( + 'OneDrive', + 'microsoft.microsoftskydrive' + ) \ No newline at end of file diff --git a/src/Configuration/features/revision/packages.yml b/src/Configuration/features/revision/packages.yml index df838b10..14c930ed 100644 --- a/src/Configuration/features/revision/packages.yml +++ b/src/Configuration/features/revision/packages.yml @@ -32,14 +32,6 @@ actions: weight: 100 option: 'enable-defender' - - !taskKill: {name: "explorer", errorAction: Ignore} - - !taskKill: {name: "SearchApp", errorAction: Ignore} - - !taskKill: {name: "SearchHost", errorAction: Ignore} - - !taskKill: {name: "RuntimeBroker", errorAction: Ignore} - - !taskKill: {name: "TextInputHost", errorAction: Ignore} - - !taskKill: {name: "ShellExperienceHost", errorAction: Ignore} - - !taskKill: {name: "backgroundTaskHost", errorAction: Ignore} - - !taskKill: {name: "Widgets", errorAction: Ignore} # NOTE: This method of removing system packages is now deprecated and not recommended by Revision, as it is one of the main cause of #49 diff --git a/src/Executables/APPX-REMOVER.ps1 b/src/Executables/APPX-REMOVER.ps1 new file mode 100644 index 00000000..b51bad8c --- /dev/null +++ b/src/Executables/APPX-REMOVER.ps1 @@ -0,0 +1,49 @@ +param ( + [Parameter(Mandatory=$true)] + [string[]]$Packages +) + +$baseRegistryPath = "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore" + +$allPackages = Get-AppxPackage -AllUsers | Select-Object PackageFullName, PackageFamilyName, PackageUserInformation, NonRemovable + +foreach ($package in $Packages) { + $filteredPackages = $allPackages | Where-Object { $_.PackageFullName -like "*$package*" } + + foreach ($pkg in $filteredPackages) { + + $fullPackageName = $pkg.PackageFullName + $packageFamilyName = $pkg.PackageFamilyName + + Write-Host "Removing package: $($fullPackageName)" + + # Adding to Deprovisioned may prevent some UWP packages from installing after updating Windows + $deprovisionedPath = "$baseRegistryPath\Deprovisioned\$packageFamilyName" + if (-not (Test-Path -Path $deprovisionedPath)) { + New-Item -Path $deprovisionedPath -Force + } + + $inboxAppsPath = "$baseRegistryPath\InboxApplications\$fullPackageName" + if (Test-Path $inboxAppsPath) { + Remove-Item -Path $inboxAppsPath -Force + } + + if ($pkg.NonRemovable -eq 1) { + Set-NonRemovableAppsPolicy -Online -PackageFamilyName $packageFamilyName -NonRemovable 0 + } + + # Add to EndOfLife + foreach ($userInfo in $pkg.PackageUserInformation) { + $userSid = $userInfo.UserSecurityID.SID + $endOfLifePath = "$baseRegistryPath\EndOfLife\$userSid\$fullPackageName" + New-Item -Path $endOfLifePath -Force + + # Errors may occur if the package is not added to the EndOfLife registry key for every user who has it installed + Remove-AppxPackage -Package $fullPackageName -User $userSid + } + + # Second attempt + # An APPX package can be installed for multiple users, and when uninstallation is performed for each or all users, its status may appear as "Staged" or "Installed(pending removal)" for certain users. Therefore, a second attempt is needed to remove the package completely + Remove-AppxPackage -Package $fullPackageName -AllUsers + } +} \ No newline at end of file From 7e76aeba6e15e737027a9f2127a86c55a4dff925 Mon Sep 17 00:00:00 2001 From: h3r0 <50238852+melo936@users.noreply.github.com> Date: Fri, 6 Sep 2024 12:30:33 +0000 Subject: [PATCH 18/47] allow users to enable speech services --- src/Configuration/features/revision/appx.yml | 1 - .../revision/registry/configure-search-and-cortana.yml | 2 +- .../features/revision/registry/configure-windows-settings.yml | 2 +- .../features/revision/registry/ntlite-settings.yml | 4 ++-- src/Configuration/features/revision/revert.yml | 4 ++++ 5 files changed, 8 insertions(+), 5 deletions(-) diff --git a/src/Configuration/features/revision/appx.yml b/src/Configuration/features/revision/appx.yml index fc77e02f..3d52eab3 100644 --- a/src/Configuration/features/revision/appx.yml +++ b/src/Configuration/features/revision/appx.yml @@ -60,7 +60,6 @@ actions: 'Microsoft.MSPaint', # Paint 3D 'MicrosoftTeams', 'MSTeams', # New Teams - 'Microsoft.WindowsCalculator', 'Microsoft.StartExperiencesApp' ) diff --git a/src/Configuration/features/revision/registry/configure-search-and-cortana.yml b/src/Configuration/features/revision/registry/configure-search-and-cortana.yml index 84cddc3d..e20fd11f 100644 --- a/src/Configuration/features/revision/registry/configure-search-and-cortana.yml +++ b/src/Configuration/features/revision/registry/configure-search-and-cortana.yml @@ -47,7 +47,7 @@ actions: - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Search', value: 'BingSearchEnabled', type: REG_DWORD, data: '0'} # === Automatic Update of Speech Data - Off # ------> https://www.howto-connect.com/enable-disable-automatic-update-speech-data-windows-10/ - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Speech_OneCore\Preferences', value: 'ModelDownloadAllowed', type: REG_DWORD, data: '0'} + # - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Speech_OneCore\Preferences', value: 'ModelDownloadAllowed', type: REG_DWORD, data: '0'} # === Cortana on Lock Screen - Disabled # ------> https://winaero.com/blog/how-to-enable-cortana-on-lock-screen/ - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Speech_OneCore\Preferences', value: 'VoiceActivationEnableAboveLockscreen', type: REG_DWORD, data: '0'} diff --git a/src/Configuration/features/revision/registry/configure-windows-settings.yml b/src/Configuration/features/revision/registry/configure-windows-settings.yml index c75924a9..fdeb0d18 100644 --- a/src/Configuration/features/revision/registry/configure-windows-settings.yml +++ b/src/Configuration/features/revision/registry/configure-windows-settings.yml @@ -210,7 +210,7 @@ actions: - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\InputPersonalization', value: 'RestrictImplicitTextCollection', type: REG_DWORD, data: '1'} # === Allow users to enable online speech recognition services - Disabled # ------> If this policy is disabled, speech services will be disabled, and users cannot enable speech services via settings. - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\InputPersonalization', value: 'AllowInputPersonalization', type: REG_DWORD, data: '0'} + # - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\InputPersonalization', value: 'AllowInputPersonalization', type: REG_DWORD, data: '0'} # ======> Diagnostics & feedback # === Diagnostic data - Disabled diff --git a/src/Configuration/features/revision/registry/ntlite-settings.yml b/src/Configuration/features/revision/registry/ntlite-settings.yml index 86b1e83d..1ea27acd 100644 --- a/src/Configuration/features/revision/registry/ntlite-settings.yml +++ b/src/Configuration/features/revision/registry/ntlite-settings.yml @@ -131,7 +131,7 @@ actions: - !registryValue: {path: 'HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SystemPaneSuggestionsEnabled', type: REG_DWORD, data: '0'} - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SubscribedContent-338388Enabled', type: REG_DWORD, data: '0'} - !registryValue: {path: 'HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SubscribedContent-338388Enabled', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\InputPersonalization', value: 'AllowInputPersonalization', type: REG_DWORD, data: '0'} + # - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\InputPersonalization', value: 'AllowInputPersonalization', type: REG_DWORD, data: '0'} - !registryValue: {path: 'HKCU\Software\Microsoft\Personalization\Settings', value: 'AcceptedPrivacyPolicy', type: REG_DWORD, data: '0'} - !registryValue: {path: 'HKU\S-1-5-18\Software\Microsoft\Personalization\Settings', value: 'AcceptedPrivacyPolicy', type: REG_DWORD, data: '0'} - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\TextInput', value: 'AllowLinguisticDataCollection', type: REG_DWORD, data: '0'} @@ -267,7 +267,7 @@ actions: # - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\DriverSearching', value: 'SearchOrderConfig', operation: delete} # - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\DriverSearching'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Speech_OneCore\Preferences', value: 'ModelDownloadAllowed', type: REG_DWORD, data: '0'} + # - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Speech_OneCore\Preferences', value: 'ModelDownloadAllowed', type: REG_DWORD, data: '0'} - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Device Metadata', value: 'PreventDeviceMetadataFromNetwork', type: REG_DWORD, data: '1'} - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\DriverSearching', value: 'DontSearchWindowsUpdate', type: REG_DWORD, data: '1'} - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\DriverSearching', value: 'DriverUpdateWizardWuSearchEnabled', type: REG_DWORD, data: '0'} diff --git a/src/Configuration/features/revision/revert.yml b/src/Configuration/features/revision/revert.yml index df867530..aafaba05 100644 --- a/src/Configuration/features/revision/revert.yml +++ b/src/Configuration/features/revision/revert.yml @@ -74,3 +74,7 @@ actions: command: | $path = ${env:ProgramFiles(x86)} + '\Revision Tool\data\flutter_assets\additionals\EnableSF.bat' Start-Process -FilePath $path -Wait -NoNewWindow + + # Speech Recognition + - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\InputPersonalization', value: 'AllowInputPersonalization', operation: delete} + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Speech_OneCore\Preferences', value: 'ModelDownloadAllowed', operation: delete} \ No newline at end of file From 01aabe5c7b9914aef2a64ef9bcb97e06742af51a Mon Sep 17 00:00:00 2001 From: h3r0 <50238852+melo936@users.noreply.github.com> Date: Sun, 15 Sep 2024 12:47:13 +0000 Subject: [PATCH 19/47] additional fixes after enabling superfetch --- src/Configuration/features/revision/revert.yml | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/src/Configuration/features/revision/revert.yml b/src/Configuration/features/revision/revert.yml index aafaba05..597c5f91 100644 --- a/src/Configuration/features/revision/revert.yml +++ b/src/Configuration/features/revision/revert.yml @@ -5,6 +5,8 @@ privilege: TrustedInstaller onUpgrade: true actions: + - !writeStatus: {status: "Removing Outdated Changes"} + - !registryValue: { path: 'HKLM\SYSTEM\ControlSet001\Control\Session Manager', value: 'HeapDeCommitFreeBlockThreshold', type: REG_DWORD, data: '0' } - !registryValue: { path: 'HKCU\SOFTWARE\Policies\Microsoft\Internet Explorer\Security', value: 'DisableSecuritySettingsCheck', operation: delete } @@ -75,6 +77,13 @@ actions: $path = ${env:ProgramFiles(x86)} + '\Revision Tool\data\flutter_assets\additionals\EnableSF.bat' Start-Process -FilePath $path -Wait -NoNewWindow + # Additional fixes + Start-Process -FilePath 'rundll32.exe' -ArgumentList 'advapi32.dll,ProcessIdleTasks' -Wait -NoNewWindow + Start-Process -FilePath 'defrag' -ArgumentList "$env:SystemDrive -b" -Wait -NoNewWindow + + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Dfrg\BootOptimizeFunction', value: 'Enable', operation: delete} + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OptimalLayout', value: 'EnableAutoLayout', operation: delete} + # Speech Recognition - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\InputPersonalization', value: 'AllowInputPersonalization', operation: delete} - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Speech_OneCore\Preferences', value: 'ModelDownloadAllowed', operation: delete} \ No newline at end of file From 6a29347e214da3efb48c97d417e95c56d86971a6 Mon Sep 17 00:00:00 2001 From: h3r0 <50238852+melo936@users.noreply.github.com> Date: Sun, 15 Sep 2024 13:40:34 +0000 Subject: [PATCH 20/47] install brave from msstore the brave update services break when installing from winget source --- src/Configuration/features/revision/software.yml | 4 ++-- src/Executables/UPDATE-APPX.ps1 | 4 ++-- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/src/Configuration/features/revision/software.yml b/src/Configuration/features/revision/software.yml index 7988f6af..ad0f7835 100644 --- a/src/Configuration/features/revision/software.yml +++ b/src/Configuration/features/revision/software.yml @@ -16,7 +16,7 @@ actions: - !writeStatus: {status: 'Installing Brave', option: "browser-brave"} - !cmd: # command: 'winget install Brave.Brave --source winget --scope machine --silent --accept-source-agreements --accept-package-agreements' - command: 'winget install Brave.Brave --source winget --silent --accept-source-agreements --accept-package-agreements' + command: 'winget install XP8C9QZMS2PC1T --source msstore --silent --accept-source-agreements --accept-package-agreements' weight: 150 wait: true runas: currentUserElevated @@ -37,7 +37,7 @@ actions: # Firefox - !writeStatus: {status: 'Installing Firefox', option: "browser-firefox"} - !cmd: - command: 'winget install Mozilla.Firefox --source winget --scope machine --silent --accept-source-agreements --accept-package-agreements' + command: 'winget install Mozilla.Firefox --source winget --silent --accept-source-agreements --accept-package-agreements' weight: 150 runas: currentUserElevated wait: true diff --git a/src/Executables/UPDATE-APPX.ps1 b/src/Executables/UPDATE-APPX.ps1 index 97035879..dd0ef813 100644 --- a/src/Executables/UPDATE-APPX.ps1 +++ b/src/Executables/UPDATE-APPX.ps1 @@ -1,6 +1,6 @@ Write-Host 'Updating Microsoft Store apps...' -Write-Host 'Installing Winget Source' -Add-AppPackage 'https://cdn.winget.microsoft.com/cache/source.msix' -ForceApplicationShutdown -Verbose +# Write-Host 'Installing Winget Source' +# Add-AppPackage 'https://cdn.winget.microsoft.com/cache/source.msix' -ForceApplicationShutdown -Verbose $productName = (Get-ItemProperty -Path 'HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion').ProductName Write-Host "Product Name: $productName" $path = Join-Path ${env:ProgramFiles(x86)} 'Revision Tool' From 6b6afc4a35c0acba5d8f6af5f67b98ae5fa85e0e Mon Sep 17 00:00:00 2001 From: h3r0 <50238852+melo936@users.noreply.github.com> Date: Wed, 18 Sep 2024 10:40:11 +0000 Subject: [PATCH 21/47] refactor files and directories structure - more organized - separated many registry tweaks - removed sections: Attachment Manager section from explorer; configure-explorer-folder-view; PrimaryIntranetSearchScopeUrl & SecondaryIntranetSearchScopeUrl; Windows Defender Antivirus - Security Intelligence Updates. - moved tweaks from ntlite-settings.yml to their own sections - added and improved documentation of registry tweaks - updated group policy links - added more ceip tweaks --- .gitignore | 1 + .../revision/config.yml => Tasks/final.yml} | 13 +- .../packages/app-win32.yml} | 24 +- .../revision => Tasks/packages}/appx.yml | 1 - .../Tasks/packages/optional-features.yml | 11 + .../packages/win-sxs.yml} | 2 +- src/Configuration/Tasks/registry.yml | 70 ++ .../registry/explorer/context-menu.yml} | 9 +- .../Tasks/registry/explorer/control-panel.yml | 98 +++ .../Tasks/registry/explorer/explorer.yml | 109 ++++ .../Tasks/registry/explorer/notifications.yml | 22 + .../Tasks/registry/explorer/search.yml | 69 ++ .../Tasks/registry/explorer/start-menu.yml | 39 ++ .../Tasks/registry/explorer/taskbar.yml | 34 + .../Tasks/registry/explorer/view.yml | 21 + .../registry/explorer/win-settings.yml} | 545 +++++++++------- .../registry/misc/classic-photo-viewer.yml} | 27 +- .../registry/misc/deprovisioned-apps.yml} | 2 +- .../misc}/disable-installing-teams.yml | 0 .../registry/misc}/disable-logging.yml | 7 +- ...able-system-restore-pre-defined-config.yml | 0 ...enable-audio-communications-do-nothing.yml | 0 .../registry/misc}/fixes.yml | 77 ++- .../misc/msi-installer-in-safe-mode.yml} | 5 +- .../Tasks/registry/os-info/edition.yml | 14 + .../registry/os-info/oem-info.yml} | 4 +- .../Tasks/registry/privacy/app-compat.yml | 23 + .../Tasks/registry/privacy/cdm.yml | 54 ++ .../Tasks/registry/privacy/ceip.yml | 22 + .../Tasks/registry/privacy/cloud-content.yml | 42 ++ .../Tasks/registry/privacy/privacy.yml | 106 +++ .../Tasks/registry/privacy/telemetry.yml | 55 ++ .../Tasks/registry/privacy/wer.yml | 30 + .../Tasks/registry/security/bitlocker.yml | 9 + .../Tasks/registry/security/security.yml | 86 +++ .../Tasks/registry/security/vbs.yml | 30 + .../registry/system/boot.yml} | 6 +- .../registry/system}/bypass-requirements.yml | 4 +- .../registry/system/crash-control.yml} | 4 +- .../system}/disable-automatic-maintenance.yml | 2 +- .../registry/system/ifeo.yml} | 4 +- .../registry/system/kernel.yml} | 0 .../Tasks/registry/system/logon.yml | 35 + .../registry/system/multimedia.yml} | 2 + .../registry/system/oobe.yml} | 50 +- .../Tasks/registry/system/power.yml | 32 + .../registry/system/win32ps.yml} | 4 +- .../Tasks/registry/updates/drivers.yml | 25 + .../registry/updates/internet-explorer.yml | 287 +++++++++ .../Tasks/registry/updates/ms-store.yml | 12 + .../registry/updates/updates.yml} | 160 ++--- .../{features/revision => Tasks}/revert.yml | 30 +- .../{features/revision => Tasks}/services.yml | 56 +- .../{features/revision => Tasks}/software.yml | 0 .../{features/revision => Tasks}/start.yml | 6 +- src/Configuration/custom.yml | 25 - .../features/revision/registry.yml | 45 -- .../aaa-edit-ISO-version-and-edition.yml | 19 - .../configure-explorer-folder-view.yml | 608 ------------------ .../registry/configure-explorer-settings.yml | 202 ------ .../registry/configure-internet-explorer.yml | 219 ------- .../revision/registry/configure-logon.yml | 40 -- .../registry/configure-microsoft-store.yml | 12 - .../registry/configure-power-control.yml | 34 - .../revision/registry/configure-privacy.yml | 238 ------- .../registry/configure-search-and-cortana.yml | 59 -- .../revision/registry/configure-security.yml | 199 ------ ...-start-menu-and-taskbar-notifications).yml | 115 ---- .../registry/disable-disk-defragmentation.yml | 12 - .../disable-ease-of-access-features.yml | 68 -- .../disable-user-account-control-uac.yml | 38 -- .../revision/registry/mouse-tweaks.yml | 73 --- .../revision/registry/ntlite-settings.yml | 280 -------- .../revision/registry/old-rightclick-menu.yml | 7 - .../registry/revision-static-edition.yml | 8 - src/Configuration/main.yml | 34 + src/Executables/FINALIZE.cmd | 1 + src/playbook.conf | 4 - 78 files changed, 1981 insertions(+), 2739 deletions(-) create mode 100644 .gitignore rename src/Configuration/{features/revision/config.yml => Tasks/final.yml} (90%) rename src/Configuration/{features/revision/components.yml => Tasks/packages/app-win32.yml} (65%) rename src/Configuration/{features/revision => Tasks/packages}/appx.yml (99%) create mode 100644 src/Configuration/Tasks/packages/optional-features.yml rename src/Configuration/{features/revision/packages.yml => Tasks/packages/win-sxs.yml} (99%) create mode 100644 src/Configuration/Tasks/registry.yml rename src/Configuration/{features/revision/registry/add-take-ownership-in-context-menu.yml => Tasks/registry/explorer/context-menu.yml} (89%) create mode 100644 src/Configuration/Tasks/registry/explorer/control-panel.yml create mode 100644 src/Configuration/Tasks/registry/explorer/explorer.yml create mode 100644 src/Configuration/Tasks/registry/explorer/notifications.yml create mode 100644 src/Configuration/Tasks/registry/explorer/search.yml create mode 100644 src/Configuration/Tasks/registry/explorer/start-menu.yml create mode 100644 src/Configuration/Tasks/registry/explorer/taskbar.yml create mode 100644 src/Configuration/Tasks/registry/explorer/view.yml rename src/Configuration/{features/revision/registry/configure-windows-settings.yml => Tasks/registry/explorer/win-settings.yml} (59%) rename src/Configuration/{features/revision/registry/restore-windows-photo-viewer-all-users.yml => Tasks/registry/misc/classic-photo-viewer.yml} (80%) rename src/Configuration/{features/revision/registry/configure-deprovisioned-apps.yml => Tasks/registry/misc/deprovisioned-apps.yml} (99%) rename src/Configuration/{features/revision/registry => Tasks/registry/misc}/disable-installing-teams.yml (100%) rename src/Configuration/{features/revision/registry => Tasks/registry/misc}/disable-logging.yml (69%) rename src/Configuration/{features/revision/registry => Tasks/registry/misc}/disable-system-restore-pre-defined-config.yml (100%) rename src/Configuration/{features/revision/registry => Tasks/registry/misc}/enable-audio-communications-do-nothing.yml (100%) rename src/Configuration/{features/revision/registry => Tasks/registry/misc}/fixes.yml (60%) rename src/Configuration/{features/revision/registry/make-msi-installer-work-in-safe-mode.yml => Tasks/registry/misc/msi-installer-in-safe-mode.yml} (74%) create mode 100644 src/Configuration/Tasks/registry/os-info/edition.yml rename src/Configuration/{features/revision/registry/revision-static-oem-information.yml => Tasks/registry/os-info/oem-info.yml} (90%) create mode 100644 src/Configuration/Tasks/registry/privacy/app-compat.yml create mode 100644 src/Configuration/Tasks/registry/privacy/cdm.yml create mode 100644 src/Configuration/Tasks/registry/privacy/ceip.yml create mode 100644 src/Configuration/Tasks/registry/privacy/cloud-content.yml create mode 100644 src/Configuration/Tasks/registry/privacy/privacy.yml create mode 100644 src/Configuration/Tasks/registry/privacy/telemetry.yml create mode 100644 src/Configuration/Tasks/registry/privacy/wer.yml create mode 100644 src/Configuration/Tasks/registry/security/bitlocker.yml create mode 100644 src/Configuration/Tasks/registry/security/security.yml create mode 100644 src/Configuration/Tasks/registry/security/vbs.yml rename src/Configuration/{features/revision/registry/disable-disk-checking.yml => Tasks/registry/system/boot.yml} (64%) rename src/Configuration/{features/revision/registry => Tasks/registry/system}/bypass-requirements.yml (90%) rename src/Configuration/{features/revision/registry/configure-crash-control.yml => Tasks/registry/system/crash-control.yml} (89%) rename src/Configuration/{features/revision/registry => Tasks/registry/system}/disable-automatic-maintenance.yml (92%) rename src/Configuration/{features/revision/registry/configure-ifeo.yml => Tasks/registry/system/ifeo.yml} (98%) rename src/Configuration/{features/revision/registry/configure-kernel.yml => Tasks/registry/system/kernel.yml} (100%) create mode 100644 src/Configuration/Tasks/registry/system/logon.yml rename src/Configuration/{features/revision/registry/configure-multimedia.yml => Tasks/registry/system/multimedia.yml} (61%) rename src/Configuration/{features/revision/registry/configure-oobe.yml => Tasks/registry/system/oobe.yml} (59%) create mode 100644 src/Configuration/Tasks/registry/system/power.yml rename src/Configuration/{features/revision/registry/configure-win32priorityseparation.yml => Tasks/registry/system/win32ps.yml} (81%) create mode 100644 src/Configuration/Tasks/registry/updates/drivers.yml create mode 100644 src/Configuration/Tasks/registry/updates/internet-explorer.yml create mode 100644 src/Configuration/Tasks/registry/updates/ms-store.yml rename src/Configuration/{features/revision/registry/configure-windows-update-and-install.yml => Tasks/registry/updates/updates.yml} (59%) rename src/Configuration/{features/revision => Tasks}/revert.yml (73%) rename src/Configuration/{features/revision => Tasks}/services.yml (62%) rename src/Configuration/{features/revision => Tasks}/software.yml (100%) rename src/Configuration/{features/revision => Tasks}/start.yml (96%) delete mode 100644 src/Configuration/custom.yml delete mode 100644 src/Configuration/features/revision/registry.yml delete mode 100644 src/Configuration/features/revision/registry/aaa-edit-ISO-version-and-edition.yml delete mode 100644 src/Configuration/features/revision/registry/configure-explorer-folder-view.yml delete mode 100644 src/Configuration/features/revision/registry/configure-explorer-settings.yml delete mode 100644 src/Configuration/features/revision/registry/configure-internet-explorer.yml delete mode 100644 src/Configuration/features/revision/registry/configure-logon.yml delete mode 100644 src/Configuration/features/revision/registry/configure-microsoft-store.yml delete mode 100644 src/Configuration/features/revision/registry/configure-power-control.yml delete mode 100644 src/Configuration/features/revision/registry/configure-privacy.yml delete mode 100644 src/Configuration/features/revision/registry/configure-search-and-cortana.yml delete mode 100644 src/Configuration/features/revision/registry/configure-security.yml delete mode 100644 src/Configuration/features/revision/registry/configure-start-menu-and-taskbar-notifications).yml delete mode 100644 src/Configuration/features/revision/registry/disable-disk-defragmentation.yml delete mode 100644 src/Configuration/features/revision/registry/disable-ease-of-access-features.yml delete mode 100644 src/Configuration/features/revision/registry/disable-user-account-control-uac.yml delete mode 100644 src/Configuration/features/revision/registry/mouse-tweaks.yml delete mode 100644 src/Configuration/features/revision/registry/ntlite-settings.yml delete mode 100644 src/Configuration/features/revision/registry/old-rightclick-menu.yml delete mode 100644 src/Configuration/features/revision/registry/revision-static-edition.yml create mode 100644 src/Configuration/main.yml diff --git a/.gitignore b/.gitignore new file mode 100644 index 00000000..9f50af74 --- /dev/null +++ b/.gitignore @@ -0,0 +1 @@ +*.apbx \ No newline at end of file diff --git a/src/Configuration/features/revision/config.yml b/src/Configuration/Tasks/final.yml similarity index 90% rename from src/Configuration/features/revision/config.yml rename to src/Configuration/Tasks/final.yml index 704d8261..9c132c20 100644 --- a/src/Configuration/features/revision/config.yml +++ b/src/Configuration/Tasks/final.yml @@ -8,6 +8,7 @@ actions: - !powerShell: command: 'Disable-MMAgent -mc' + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Services\Pending\7971f918-a847-4430-9279-4a52d1efe18d', value: 'RegisterWithAU', type: REG_DWORD, data: '0'} # [!] Breaks 'defrag c: -b' and cores parking on some AMD CPUs # Disable Superfetch for SSDs @@ -41,9 +42,6 @@ actions: - !powerShell: {command: 'Get-ScheduledTask -TaskPath "\Microsoft\Office\*" | Disable-ScheduledTask'} - # OneDrive workaround - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\OneDrive', value: 'DisableFileSyncNGSC', operation: delete} - - !run: exeDir: true exe: "PowerShell" @@ -81,14 +79,7 @@ actions: exeDir: true runas: currentUserElevated option: "configure-wallpaper" - weight: 45 - - - !writeStatus: {status: "Configuring features"} - - !run: - exeDir: true - exe: "PowerShell" - args: '-NoP -ExecutionPolicy Bypass -File DISM-FEATURES.ps1' - weight: 270 + weight: 45 # Necessary to refresh start menu entries etc. - !appx: {operation: clearCache, name: '*Client.CBS*'} diff --git a/src/Configuration/features/revision/components.yml b/src/Configuration/Tasks/packages/app-win32.yml similarity index 65% rename from src/Configuration/features/revision/components.yml rename to src/Configuration/Tasks/packages/app-win32.yml index e317e700..0426f3cc 100644 --- a/src/Configuration/features/revision/components.yml +++ b/src/Configuration/Tasks/packages/app-win32.yml @@ -1,19 +1,17 @@ --- -title: Components -description: Remove certain windows components +title: Remove Win32 apps +description: Removal of Win32 apps privilege: TrustedInstaller actions: - - !writeStatus: {status: "Removing components"} - - # Microsoft Edge + # Microsoft Edge - !writeStatus: {status: "Removing MS Edge", option: "remove-edge"} - !taskKill: {name: "MicrosoftEdgeUpdate", errorAction: Ignore, option: "remove-edge"} - !taskKill: {name: "msedge", errorAction: Ignore, option: "remove-edge"} - !taskKill: {name: "MicrosoftEdge*", errorAction: Ignore, option: "remove-edge"} - !taskKill: {name: "setup", errorAction: Ignore, pathContains: "\\Edge", option: "remove-edge"} - # Remove the new Copilot UWP app before removing Edge to avoid leftover files + # Remove the new Copilot UWP app before removing Edge to avoid leftovers - !powerShell: option: "remove-edge" exeDir: true @@ -40,23 +38,11 @@ actions: 'Microsoft.MicrosoftEdge', 'Microsoft.MicrosoftEdgeDevToolsClient' ) - - !file: {path: "%ProgramFiles(x86)%\\Microsoft\\Edge", option: "remove-edge", weight: 50} - # - !service: {name: "edgeupdate", operation: delete} - # - !service: {name: "edgeupdatem", operation: delete} - # - !service: {name: "MicrosoftEdgeElevationService", operation: delete} - - # - !file: {path: "%ProgramFiles(x86)%\\Microsoft\\EdgeUpdate", weight: 10} - # - !file: {path: "%ProgramFiles(x86)%\\Microsoft\\EdgeCore", weight: 10} - - # Allow uninstall of Edge, EdgeUpdate and WebView - - !registryValue: {path: 'HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft Edge', value: 'NoRemove', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft Edge Update', value: 'NoRemove', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft EdgeWebView', value: 'NoRemove', type: REG_DWORD, data: '0'} - # OneDrive + # OneDrive - !writeStatus: {status: "Removing OneDrive", option: "remove-onedrive"} - !taskKill: {name: "OneDriveStandaloneUpdater", errorAction: Ignore, option: "remove-onedrive"} - !taskKill: {name: "OneDriveSetup", errorAction: Ignore, option: "remove-onedrive"} diff --git a/src/Configuration/features/revision/appx.yml b/src/Configuration/Tasks/packages/appx.yml similarity index 99% rename from src/Configuration/features/revision/appx.yml rename to src/Configuration/Tasks/packages/appx.yml index 3d52eab3..5c142cb0 100644 --- a/src/Configuration/features/revision/appx.yml +++ b/src/Configuration/Tasks/packages/appx.yml @@ -90,7 +90,6 @@ actions: 'Microsoft.GamingApp', 'Microsoft.XboxGameCallableUI' ) - - !writeStatus: {status: "Removing Your Phone", option: "remove-appx-yourphone"} - !powerShell: diff --git a/src/Configuration/Tasks/packages/optional-features.yml b/src/Configuration/Tasks/packages/optional-features.yml new file mode 100644 index 00000000..5910ff5e --- /dev/null +++ b/src/Configuration/Tasks/packages/optional-features.yml @@ -0,0 +1,11 @@ +--- +title: Optional Features +description: Configures Windows optional features +privilege: TrustedInstaller +actions: + - !writeStatus: {status: "Configuring features"} + - !powerShell: + exeDir: true + errorAction: Ignore + weight: 100 + command: 'DISM-FEATURES.ps1' \ No newline at end of file diff --git a/src/Configuration/features/revision/packages.yml b/src/Configuration/Tasks/packages/win-sxs.yml similarity index 99% rename from src/Configuration/features/revision/packages.yml rename to src/Configuration/Tasks/packages/win-sxs.yml index 14c930ed..063a0d4e 100644 --- a/src/Configuration/features/revision/packages.yml +++ b/src/Configuration/Tasks/packages/win-sxs.yml @@ -1,6 +1,6 @@ --- title: Packages -description: Removes system packages +description: Removes system (WinSxS) packages privilege: TrustedInstaller actions: - !writeStatus: {status: "Removing system packages"} diff --git a/src/Configuration/Tasks/registry.yml b/src/Configuration/Tasks/registry.yml new file mode 100644 index 00000000..a38598bc --- /dev/null +++ b/src/Configuration/Tasks/registry.yml @@ -0,0 +1,70 @@ +--- +title: Registry +description: Revision registry configuration +privilege: TrustedInstaller +actions: + - !writeStatus: {status: "Tweaking registry"} + + # OS Info + - !writeStatus: {status: "Configuring OS Info"} + - !task: {path: 'Tasks\registry\os-info\edition.yml'} + - !task: {path: 'Tasks\registry\os-info\oem-info.yml'} + + # Explorer + - !writeStatus: {status: "Configuring Explorer"} + - !task: {path: 'Tasks\registry\explorer\explorer.yml'} + - !task: {path: 'Tasks\registry\explorer\context-menu.yml'} + - !task: {path: 'Tasks\registry\explorer\control-panel.yml'} + - !task: {path: 'Tasks\registry\explorer\notifications.yml'} + - !task: {path: 'Tasks\registry\explorer\search.yml'} + - !task: {path: 'Tasks\registry\explorer\start-menu.yml'} + - !task: {path: 'Tasks\registry\explorer\taskbar.yml'} + - !task: {path: 'Tasks\registry\explorer\view.yml'} + - !task: {path: 'Tasks\registry\explorer\win-settings.yml'} + + # Privacy + - !writeStatus: {status: "Configuring Privacy"} + - !task: {path: 'Tasks\registry\privacy\privacy.yml'} + - !task: {path: 'Tasks\registry\privacy\app-compat.yml'} + - !task: {path: 'Tasks\registry\privacy\cdm.yml'} + - !task: {path: 'Tasks\registry\privacy\ceip.yml'} + - !task: {path: 'Tasks\registry\privacy\cloud-content.yml'} + - !task: {path: 'Tasks\registry\privacy\telemetry.yml'} + - !task: {path: 'Tasks\registry\privacy\wer.yml'} + + # Security + - !writeStatus: {status: "Configuring Security"} + - !task: {path: 'Tasks\registry\security\security.yml'} + - !task: {path: 'Tasks\registry\security\vbs.yml'} + + # System + - !writeStatus: {status: "Configuring System"} + - !task: {path: 'Tasks\registry\system\boot.yml'} + - !task: {path: 'Tasks\registry\system\bypass-requirements.yml'} + - !task: {path: 'Tasks\registry\system\crash-control.yml'} + - !task: {path: 'Tasks\registry\system\disable-automatic-maintenance.yml'} + - !task: {path: 'Tasks\registry\system\ifeo.yml'} + - !task: {path: 'Tasks\registry\system\kernel.yml'} + - !task: {path: 'Tasks\registry\system\logon.yml'} + - !task: {path: 'Tasks\registry\system\multimedia.yml'} + - !task: {path: 'Tasks\registry\system\oobe.yml'} + - !task: {path: 'Tasks\registry\system\power.yml'} + - !task: {path: 'Tasks\registry\system\win32ps.yml'} + + # Updates + - !writeStatus: {status: "Configuring Updates"} + - !task: {path: 'Tasks\registry\updates\updates.yml'} + - !task: {path: 'Tasks\registry\updates\drivers.yml'} + - !task: {path: 'Tasks\registry\updates\internet-explorer.yml'} + - !task: {path: 'Tasks\registry\updates\ms-store.yml'} + + # Miscellaneous + - !task: {path: 'Tasks\registry\misc\classic-photo-viewer.yml'} + - !task: {path: 'Tasks\registry\misc\deprovisioned-apps.yml'} + - !task: {path: 'Tasks\registry\misc\disable-installing-teams.yml'} + - !task: {path: 'Tasks\registry\misc\disable-logging.yml'} + - !task: {path: 'Tasks\registry\misc\disable-system-restore-pre-defined-config.yml'} + - !task: {path: 'Tasks\registry\misc\enable-audio-communications-do-nothing.yml'} + - !task: {path: 'Tasks\registry\misc\fixes.yml'} + - !task: {path: 'Tasks\registry\misc\msi-installer-in-safe-mode.yml'} + diff --git a/src/Configuration/features/revision/registry/add-take-ownership-in-context-menu.yml b/src/Configuration/Tasks/registry/explorer/context-menu.yml similarity index 89% rename from src/Configuration/features/revision/registry/add-take-ownership-in-context-menu.yml rename to src/Configuration/Tasks/registry/explorer/context-menu.yml index 416e1058..ecce73aa 100644 --- a/src/Configuration/features/revision/registry/add-take-ownership-in-context-menu.yml +++ b/src/Configuration/Tasks/registry/explorer/context-menu.yml @@ -1,10 +1,13 @@ --- -title: add-take-ownership-in-context-menu -description: add-take-ownership-in-context-menu +title: Configure Explorer -> Context Menu +description: Configure the context menu in Windows Explorer privilege: TrustedInstaller actions: - # === Add Take Ownership to the context menu. + # Enables the classic right click context menu in Explorer on Windows 11 + - !registryValue: {path: 'HKCU\Software\Classes\CLSID\{86ca1aa0-34aa-4e8b-a509-50c905bae2a2}\InprocServer32', value: '', type: REG_SZ, data: '', option: "configure-lcm"} + + # === Add Take Ownership to the context menu. - !registryKey: {path: 'HKCR\*\shell\runas'} - !registryValue: {path: 'HKCR\*\shell\runas', value: '', type: REG_SZ, data: 'Take Ownership'} - !registryValue: {path: 'HKCR\*\shell\runas', value: 'HasLUAShield', type: REG_SZ, data: ''} diff --git a/src/Configuration/Tasks/registry/explorer/control-panel.yml b/src/Configuration/Tasks/registry/explorer/control-panel.yml new file mode 100644 index 00000000..5a41b8e8 --- /dev/null +++ b/src/Configuration/Tasks/registry/explorer/control-panel.yml @@ -0,0 +1,98 @@ +--- +title: Configure Control Panel +description: Configure Control Panel +privilege: TrustedInstaller +actions: + + # === Disable Wallpaper JPEG (.jpg) image Compression. + - !registryValue: {path: 'HKCU\Control Panel\Desktop', value: 'JPEGImportQuality', type: REG_DWORD, data: '100'} + + # === Disable system beeps. + - !registryValue: {path: 'HKCU\Control Panel\Sound', value: 'Beep', type: REG_SZ, data: 'no'} + + # === Changes the time (milliseconds) it takes for the tooltips to pop up when hovering your mouse over elements to 30 ms. (default = 400 ms) + - !registryValue: {path: 'HKCU\Control Panel\Mouse', value: 'MouseHoverTime', type: REG_SZ, data: '30'} + + # === Makes the Start Menu appear almost instantly when you click on the Windows icon in the Taskbar. + - !registryValue: {path: 'HKCU\Control Panel\Desktop', value: 'MenuShowDelay', type: REG_SZ, data: '0'} + + # === Specifies time (in milliseconds) that the mouse needs to remain over a window before the window is activated. (current setting is 10 ms) + - !registryValue: {path: 'HKCU\Control Panel\Desktop', value: 'ActiveWndTrkTimeout', type: REG_DWORD, data: '10'} + + # === Disables the blue screen that pops up when you're trying to shutdown or restart, asking you to save your work. + - !registryValue: {path: 'HKCU\Control Panel\Desktop', value: 'AutoEndTasks', type: REG_SZ, data: '0'} + - !registryValue: {path: 'HKU\.DEFAULT\Control Panel\Desktop', value: 'AutoEndTasks', type: REG_SZ, data: '0'} + + # === HungAppTimeout also specifies how long (5 seconds by default) the system waits for user processes to end after the user clicks/taps on the End task button in Task Manager. + # ------> Changed 2 seconds (2000), default is 5 seconds (5000). + # ------> https://www.tenforums.com/tutorials/97842-change-hungapptimeout-value-windows-10-a.html + - !registryValue: {path: 'HKCU\Control Panel\Desktop', value: 'HungAppTimeout', type: REG_SZ, data: '2000'} + - !registryValue: {path: 'HKU\.DEFAULT\Control Panel\Desktop', value: 'HungAppTimeout', type: REG_SZ, data: '2000'} + + # === The WaitToKillAppTimeout value determines how long the system waits for user processes to end after the user attempts to sign out, restart, or shut down Windows. + # ------> Default is 20 seconds (20000). + # ------> https://www.eightforums.com/threads/waittokillapptimeout-specify-for-shutdown-in-windows.37424/ + - !registryValue: {path: 'HKCU\Control Panel\Desktop', value: 'WaitToKillAppTimeout', type: REG_SZ, data: '2000'} + - !registryValue: {path: 'HKU\.DEFAULT\Control Panel\Desktop', value: 'WaitToKillAppTimeout', type: REG_SZ, data: '2000'} + + # === This value controls the timeout period in milliseconds for all low-level hooks. + # ------> https://www.registryrecycler.com/blog/2013/07/speed-up-your-windows-pc-through-registry/ + # ------> https://www.quickmacros.com/au/help/api/Au.AHookWin.LowLevelHooksTimeout.html#Au_AHookWin_LowLevelHooksTimeout_remarks + # ------> https://bit.ly/300Dqwh + - !registryValue: {path: 'HKCU\Control Panel\Desktop', value: 'LowLevelHooksTimeout', type: REG_SZ, data: '1000'} + - !registryValue: {path: 'HKU\.DEFAULT\Control Panel\Desktop', value: 'LowLevelHooksTimeout', type: REG_SZ, data: '1000'} + + # === Removes Ease of Access -> MouseKeys features tied to alteration of Sensitivity, so that it'll never change even when using MouseKeys. + - !registryValue: {path: 'HKCU\Control Panel\Accessibility\MouseKeys', value: 'MaximumSpeed', operation: delete} + - !registryValue: {path: 'HKCU\Control Panel\Accessibility\MouseKeys', value: 'TimeToMaximumSpeed', operation: delete} + + + # === Unticks Enhance Pointer Precision in Control Panel -> Mouse -> Pointer Options + - !registryKey: {path: 'HKCU\Control Panel\Accessibility\MouseKeys', operation: add} + - !registryValue: {path: 'HKCU\Control Panel\Mouse', value: 'MouseSpeed', type: REG_SZ, data: '0'} + - !registryValue: {path: 'HKCU\Control Panel\Mouse', value: 'MouseThreshold1', type: REG_SZ, data: '0'} + - !registryValue: {path: 'HKCU\Control Panel\Mouse', value: 'MouseThreshold2', type: REG_SZ, data: '0'} + - !registryValue: {path: 'HKU\.DEFAULT\Control Panel\Mouse', value: 'MouseSpeed', type: REG_SZ, data: '0'} + - !registryValue: {path: 'HKU\.DEFAULT\Control Panel\Mouse', value: 'MouseThreshold1', type: REG_SZ, data: '0'} + - !registryValue: {path: 'HKU\.DEFAULT\Control Panel\Mouse', value: 'MouseThreshold2', type: REG_SZ, data: '0'} + + # === Allow Online Tips - Disabled + # ------> If disabled, Settings will not contact Microsoft content services to retrieve tips and help content. + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer', value: 'AllowOnlineTips', type: REG_DWORD, data: '0'} + + + # ================================================= + # === Remove Ease of Access hives from Registry === + # ================================================= + # === Remove and clean up Ease of Access registry entries and keys (HKEY_CURRENT_USER) + - !registryKey: {path: 'HKCU\Control Panel\Accessibility\AudioDescription'} + - !registryKey: {path: 'HKCU\Control Panel\Accessibility\Blind Access'} + - !registryKey: {path: 'HKCU\Control Panel\Accessibility\HighContrast'} + - !registryKey: {path: 'HKCU\Control Panel\Accessibility\Keyboard Preference'} + - !registryKey: {path: 'HKCU\Control Panel\Accessibility\Keyboard Response'} + - !registryKey: {path: 'HKCU\Control Panel\Accessibility\MouseKeys'} + - !registryKey: {path: 'HKCU\Control Panel\Accessibility\On'} + - !registryKey: {path: 'HKCU\Control Panel\Accessibility\ShowSounds'} + - !registryKey: {path: 'HKCU\Control Panel\Accessibility\SlateLaunch'} + - !registryKey: {path: 'HKCU\Control Panel\Accessibility\SoundSentry'} + - !registryKey: {path: 'HKCU\Control Panel\Accessibility\StickyKeys'} + - !registryKey: {path: 'HKCU\Control Panel\Accessibility\TimeOut'} + - !registryKey: {path: 'HKCU\Control Panel\Accessibility\ToggleKeys'} + + # =================================================== + # === Disable Ease of Access features in Registry === + # =================================================== + # === Disable Ease of Access features (HKEY_CURRENT_USER) + - !registryValue: {path: 'HKCU\Control Panel\Accessibility\AudioDescription', value: 'Flags', type: REG_SZ, data: '0'} + - !registryValue: {path: 'HKCU\Control Panel\Accessibility\Blind Access', value: 'Flags', type: REG_SZ, data: '0'} + - !registryValue: {path: 'HKCU\Control Panel\Accessibility\HighContrast', value: 'Flags', type: REG_SZ, data: '0'} + - !registryValue: {path: 'HKCU\Control Panel\Accessibility\Keyboard Preference', value: 'Flags', type: REG_SZ, data: '0'} + - !registryValue: {path: 'HKCU\Control Panel\Accessibility\Keyboard Response', value: 'Flags', type: REG_SZ, data: '0'} + - !registryValue: {path: 'HKCU\Control Panel\Accessibility\MouseKeys', value: 'Flags', type: REG_SZ, data: '0'} + - !registryValue: {path: 'HKCU\Control Panel\Accessibility\On', value: 'Flags', type: REG_SZ, data: '0'} + - !registryValue: {path: 'HKCU\Control Panel\Accessibility\ShowSounds', value: 'Flags', type: REG_SZ, data: '0'} + - !registryValue: {path: 'HKCU\Control Panel\Accessibility\SlateLaunch', value: 'Flags', type: REG_SZ, data: '0'} + - !registryValue: {path: 'HKCU\Control Panel\Accessibility\SoundSentry', value: 'Flags', type: REG_SZ, data: '0'} + - !registryValue: {path: 'HKCU\Control Panel\Accessibility\StickyKeys', value: 'Flags', type: REG_SZ, data: '0'} + - !registryValue: {path: 'HKCU\Control Panel\Accessibility\TimeOut', value: 'Flags', type: REG_SZ, data: '0'} + - !registryValue: {path: 'HKCU\Control Panel\Accessibility\ToggleKeys', value: 'Flags', type: REG_SZ, data: '0'} \ No newline at end of file diff --git a/src/Configuration/Tasks/registry/explorer/explorer.yml b/src/Configuration/Tasks/registry/explorer/explorer.yml new file mode 100644 index 00000000..df9af7af --- /dev/null +++ b/src/Configuration/Tasks/registry/explorer/explorer.yml @@ -0,0 +1,109 @@ +--- +title: Configure Explorer +description: Configure general settings for Explorer +privilege: TrustedInstaller +actions: + + # === perf: Disables Automatic Folder Type Discovery + # ------> Disabling it fixes the 'folder always loading' issue when a folder contains a lot of media files. + # ------> https://www.windowslatest.com/2024/03/04/windows-11-can-open-big-folders-in-file-explorer-faster-if-you-turn-off-folder-discovery/ + - !registryValue: {path: 'HKCU\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\AllFolders\Shell', value: 'FolderType', type: REG_SZ, data: 'NotSpecified'} + + # === perf: Force explorer to use high performance GPU + - !registryValue: { path: 'HKCU\Software\Microsoft\DirectX\UserGpuPreferences', value: 'C:\Windows\explorer.exe', type: REG_SZ, data: 'GpuPreference=2;' } + + # === perf: Disable 'Include account-based insights, recent, favorite and recommended' for OneDrive in File Explorer + - !registryValue: { path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Explorer', value: 'DisableGraphRecentItems', type: REG_DWORD, data: '1' } + + # === perf: Disable 'Group By' in the Downloads folder to avoid unnecessary dates comparison + - !powerShell: + runas: trustedInstaller + command: | + $folderTypesKey = 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderTypes' + $downloadsFolderID = '{885a186e-a440-4ada-812b-db871b942259}' + + $path = Join-Path -Path $folderTypesKey -ChildPath $downloadsFolderID + Get-ChildItem -Path $path -Recurse | ForEach-Object { + if ((Get-ItemProperty -Path $_.PSPath).GroupBy) { + Set-ItemProperty -Path $_.PSPath -Name GroupBy -Value '' + } + } + + # Necesarry to refresh 'Bags' + - !powerShell: + runas: currentUserElevated + command: | + $downloadsFolderID = '{885a186e-a440-4ada-812b-db871b942259}' + $bagsPath = 'HKCU:\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags' + Get-ChildItem -Path $bagsPath | ForEach-Object { + $fullPath = Join-Path -Path $_.PSPath -ChildPath 'Shell\{885A186E-A440-4ADA-812B-DB871B942259}' + if (Test-Path -Path $fullPath) { + Remove-Item -Path $fullPath -Recurse + } + } + + # === Disable the new Spotlight icon on Desktop (24H2) + - !registryValue: { path: 'HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel', value: '{2cc5ca98-6485-489a-920e-b3e88a6ccce3}', type: REG_DWORD, data: '1' } + + # === Increased context options time threshold + # ------> If selecting and right clicking more than x amount of items, some context options disappear (i.e. Take ownership), this will increase the threshold. + - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer', value: 'MultipleInvokePromptMinimum', type: REG_DWORD, data: '100'} + - !registryValue: {path: 'HKCU\Software\Winaero.com\Winaero Tweaker\Changes', value: 'pageContextMenuSelectionLimit', type: REG_DWORD, data: '1'} + + # === Disable ' - Shortcut.' text on shortcut creation. + - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer', value: 'link', type: REG_BINARY, data: '00000000'} + + # === Always show more details in a file copy dialog - Enabled + - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\OperationStatusManager', value: 'EnthusiastMode', type: REG_DWORD, data: '1'} + + # === AutoPlay - Disabled + # ------> Auto play is the notification that pops up when you insert an external storage device, like a USB. + - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers', value: 'DisableAutoplay', type: REG_DWORD, data: '1'} + + # === AutoRun - Disabled + # ------> Disable autorun will limit the functionality of autorun.inf on all disks. + # ------> https://learn.microsoft.com/en-us/windows/win32/shell/autoplay-reg + - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer', value: 'NoDriveTypeAutoRun', type: REG_DWORD, data: '255'} + - !registryValue: {path: 'HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer', value: 'NoDriveTypeAutoRun', type: REG_DWORD, data: '255'} + + # === Windows low disk space checking - Disabled + # ------> (Also prevents idle hard disks from going into standby) + - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer', value: 'NoLowDiskSpaceChecks', type: REG_DWORD, data: '1'} + + # === Speed up shutdown time by lowering the amount of time it takes the OS to close/kill background Services. + # ------> Changed to 1.5 seconds (1500), default is 5 seconds (5000). + # ------> https://www.sevenforums.com/tutorials/717-shut-down-speed-up.html + - !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Control', value: 'WaitToKillServiceTimeout', type: REG_SZ, data: '1500'} + + # === Do not track Shell shortcuts during roaming - Enabled + # ------> https://admx.help/?Category=Windows_11_2022&Policy=Microsoft.Policies.WindowsExplorer::LinkResolveIgnoreLinkInfo + - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer', value: 'LinkResolveIgnoreLinkInfo', type: REG_DWORD, data: '1'} + + + # === Disable Taskbar Animations. (prevents the pop up windows in the taskbar from getting stuck too) + - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'TaskbarAnimations', type: REG_DWORD, data: '0', option: 'configure-explorer-taskbar-animations'} + + - !registryValue: { path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'TaskbarAnimations', operation: delete, option: '!configure-explorer-taskbar-animations' } + + # === Allow Windows Ink Workspace - Enabled (On, but disallow access above lock) + # ------> https://admx.help/?Category=Windows_11_2022&Policy=Microsoft.Policies.WindowsInkWorkspace::AllowSuggestedAppsInWindowsInkWorkspace + - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\WindowsInkWorkspace', value: 'AllowWindowsInkWorkspace', type: REG_DWORD, data: '1'} + + # === Allow suggested apps in Windows Ink Workspace - Disabled + - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\WindowsInkWorkspace', value: 'AllowSuggestedAppsInWindowsInkWorkspace', type: REG_DWORD, data: '0'} + + # === 'Show recommendations for tips, shortcuts, new apps, and more' - Disabled + - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'Start_IrisRecommendations', type: REG_DWORD, data: '0'} + + # === 'Show account related notifications occasionally in Start' - Disabled + - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'Start_AccountNotifications', type: REG_DWORD, data: '0'} + + # === 'End Task' - Enabled + - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\TaskbarDeveloperSettings', value: 'TaskbarEndTask', type: REG_DWORD, data: '1'} + + # === Open File Explorer to This PC by Default + - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'LaunchTo', type: REG_DWORD, data: '1'} + + # === Show Pop-up Description - Hide + # ------> https://www.tenforums.com/tutorials/89239-hide-show-pop-up-descriptions-windows-10-a.html + - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'ShowInfoTip', type: REG_DWORD, data: '0'} \ No newline at end of file diff --git a/src/Configuration/Tasks/registry/explorer/notifications.yml b/src/Configuration/Tasks/registry/explorer/notifications.yml new file mode 100644 index 00000000..50bf163a --- /dev/null +++ b/src/Configuration/Tasks/registry/explorer/notifications.yml @@ -0,0 +1,22 @@ +--- +title: Configure Explorer -> Notifications +description: Configure Explorer, Start Menu and Taskbar notifications +privilege: TrustedInstaller +actions: + + # === Turn off feature advertisement balloon notifications - Enabled + - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows\Explorer', value: 'NoBalloonFeatureAdvertisements', type: REG_DWORD, data: '1'} + + # === Turn off notification area cleanup - Enabled + - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows\Explorer', value: 'NoAutoTrayNotify', type: REG_DWORD, data: '1'} + + # === Turn off notifications network usage - Enabled + - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\PushNotifications', value: 'NoCloudApplicationNotification', type: REG_DWORD, data: '1'} + + # === (Windows Update) Display options for update notifications + # === 2 – Disable all notifications, including restart warnings + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate', value: 'UpdateNotificationLevel', type: REG_DWORD, data: '2'} + + # === Let's finish setting up your device - Enabled + - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\UserProfileEngagement', value: 'ScoobeSystemSettingEnabled', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Context\CloudExperienceHostIntent\Wireless', value: 'ScoobeCheckCompleted', type: REG_DWORD, data: '1'} \ No newline at end of file diff --git a/src/Configuration/Tasks/registry/explorer/search.yml b/src/Configuration/Tasks/registry/explorer/search.yml new file mode 100644 index 00000000..54231b0c --- /dev/null +++ b/src/Configuration/Tasks/registry/explorer/search.yml @@ -0,0 +1,69 @@ +--- +title: Configure Explorer -> Search +description: Configure Search +privilege: TrustedInstaller +actions: + + # === (perf) Respect Power Settings when Indexing - Enabled (Win11 only) + # ------> PC is in Battery Saver, Best Power Efficiency, or Game Mode; Process usage exceeds 80%; Disk usage goes up above 70% + # ------> https://www.elevenforum.com/t/turn-on-or-off-respect-power-settings-when-indexing-in-windows-11.2960/ + - !registryValue: {path: 'HKLM\Software\Microsoft\Windows Search\Gather\Windows\SystemIndex', value: 'RespectPowerModes', type: REG_DWORD, data: '1'} + + # === (perf) Prevent indexing when running on battery power to conserve energy - Enabled + # ------> https://winaero.com/disable-search-indexing-battery-windows-10/ + - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search', value: 'PreventIndexOnBattery', type: REG_DWORD, data: '1'} + + # === Turn off display of recent search entries in the File Explorer search box - Enabled + # ------> Additionally this also disables Bing in the Start Menu in Windows 10's May 2020 update (20H1). + # ------> https://www.howtogeek.com/224159/how-to-disable-bing-in-the-windows-10-start-menu/ + # ------> https://admx.help/?Category=Windows_11_2022&Policy=Microsoft.Policies.WindowsExplorer::DisableSearchBoxSuggestions + - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows\Explorer', value: 'DisableSearchBoxSuggestions', type: REG_DWORD, data: '1'} + + # === Allow Cloud Search - User Selected + # ------> https://admx.help/?Category=Windows_11_2022&Policy=FullArmor.Policies.3B9EA2B5_A1D1_4CD5_9EDE_75B22990BC21::AllowCloudSearch + - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search', value: 'AllowCloudSearch', type: REG_DWORD, data: '2'} + + # === Allow Cortana above lock screen - Disabled + - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search', value: 'AllowCortanaAboveLock', type: REG_DWORD, data: '0'} + + # === Allow Cortana - Disabled + - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search', value: 'AllowCortana', type: REG_DWORD, data: '1'} + + # === Allow Cortana Page in OOBE on an AAD account - Disabled + # ------> https://admx.help/?Category=Windows_11_2022&Policy=FullArmor.Policies.3B9EA2B5_A1D1_4CD5_9EDE_75B22990BC21::AllowCortanaInAAD + - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search', value: 'AllowCortanaInAAD', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search', value: 'AllowCortanaInAADPathOOBE', type: REG_DWORD, data: '0'} + + # === Allow search and Cortana to use location - Disabled + - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search', value: 'AllowSearchToUseLocation', type: REG_DWORD, data: '0'} + + # === Don't search the web or display web results in Search - Enabled + - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search', value: 'ConnectedSearchUseWeb', type: REG_DWORD, data: '0'} + + # === Don't search the web or display web results in Search over metered connections - Enabled + - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search', value: 'ConnectedSearchUseWebOverMeteredConnections', type: REG_DWORD, data: '0'} + + # === Do not allow web search - Enabled + - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search', value: 'DisableWebSearch', type: REG_DWORD, data: '1'} + + # === Set the SafeSearch setting for Search - Off (Disabled) + - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search', value: 'ConnectedSearchSafeSearch', type: REG_DWORD, data: '3'} + + # === Set what information is shared in Search - Anonymous info + # ------> Anonymous info: Share usage information but don't share search history, Microsoft account info or specific location + # ------> https://admx.help/?Category=Windows_11_2022&Policy=FullArmor.Policies.3B9EA2B5_A1D1_4CD5_9EDE_75B22990BC21::SearchPrivacy + - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search', value: 'ConnectedSearchPrivacy', type: REG_DWORD, data: '3'} + + # === Disable Bing Integration in the Start Menu + # ------> Only applies to 1909 and lower. + # ------> https://www.howtogeek.com/224159/how-to-disable-bing-in-the-windows-10-start-menu/ + - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Search', value: 'CortanaConsent', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Search', value: 'BingSearchEnabled', type: REG_DWORD, data: '0'} + + # === Automatic Update of Speech Data - Off + # ------> https://www.howto-connect.com/enable-disable-automatic-update-speech-data-windows-10/ + # - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Speech_OneCore\Preferences', value: 'ModelDownloadAllowed', type: REG_DWORD, data: '0'} + + # === Cortana on Lock Screen - Disabled + # ------> https://winaero.com/blog/how-to-enable-cortana-on-lock-screen/ + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Speech_OneCore\Preferences', value: 'VoiceActivationEnableAboveLockscreen', type: REG_DWORD, data: '0'} \ No newline at end of file diff --git a/src/Configuration/Tasks/registry/explorer/start-menu.yml b/src/Configuration/Tasks/registry/explorer/start-menu.yml new file mode 100644 index 00000000..f633096b --- /dev/null +++ b/src/Configuration/Tasks/registry/explorer/start-menu.yml @@ -0,0 +1,39 @@ +--- +title: Configure Explorer -> Start Menu +description: Configure Start Menu +privilege: TrustedInstaller +actions: + + # === Pin items to the Start Menu + # -----> MS Store, Settings, Notepad, Paint, File Explorer, Calculator + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Start', value: 'ConfigureStartPins', type: REG_SZ, data: '{"pinnedList":[{"packagedAppId":"Microsoft.WindowsStore_8wekyb3d8bbwe!App"},{"packagedAppId":"windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel"},{"packagedAppId":"Microsoft.WindowsNotepad_8wekyb3d8bbwe!App"},{"packagedAppId":"Microsoft.Paint_8wekyb3d8bbwe!App"},{"desktopAppLink":"%APPDATA%\\Microsoft\\Windows\\Start Menu\\Programs\\File Explorer.lnk"},{"packagedAppId":"Microsoft.WindowsCalculator_8wekyb3d8bbwe!App"}]}'} + + # === Choose which folders appear on Start + # ------> "_ProviderSet"=dword:00000000 == Allows User Toggle + # ------> "_ProviderSet"=dword:00000001 == Blocks User Toggle + # ------> "AllowPinnedFolderXXXXXXXXXXXX"=dword:00000001 == Show + # ------> "AllowPinnedFolderXXXXXXXXXXXX"=dword:00000000 == Hide + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Start', value: 'AllowPinnedFolderDocuments', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Start', value: 'AllowPinnedFolderDocuments_ProviderSet', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Start', value: 'AllowPinnedFolderDownloads', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Start', value: 'AllowPinnedFolderDownloads_ProviderSet', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Start', value: 'AllowPinnedFolderFileExplorer', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Start', value: 'AllowPinnedFolderFileExplorer_ProviderSet', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Start', value: 'AllowPinnedFolderHomeGroup', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Start', value: 'AllowPinnedFolderHomeGroup_ProviderSet', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Start', value: 'AllowPinnedFolderMusic', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Start', value: 'AllowPinnedFolderMusic_ProviderSet', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Start', value: 'AllowPinnedFolderNetwork', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Start', value: 'AllowPinnedFolderNetwork_ProviderSet', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Start', value: 'AllowPinnedFolderPersonalFolder', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Start', value: 'AllowPinnedFolderPersonalFolder_ProviderSet', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Start', value: 'AllowPinnedFolderPictures', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Start', value: 'AllowPinnedFolderPictures_ProviderSet', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Start', value: 'AllowPinnedFolderSettings', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Start', value: 'AllowPinnedFolderSettings_ProviderSet', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Start', value: 'AllowPinnedFolderVideos', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Start', value: 'AllowPinnedFolderVideos_ProviderSet', type: REG_DWORD, data: '0'} + + # === Do not use the search-based method when resolving shell shortcuts - Enabled + # ------> https://admx.help/?Category=Windows_11_2022&Policy=Microsoft.Policies.StartMenu::NoResolveSearch + - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer', value: 'NoResolveSearch', type: REG_DWORD, data: '1'} \ No newline at end of file diff --git a/src/Configuration/Tasks/registry/explorer/taskbar.yml b/src/Configuration/Tasks/registry/explorer/taskbar.yml new file mode 100644 index 00000000..08032530 --- /dev/null +++ b/src/Configuration/Tasks/registry/explorer/taskbar.yml @@ -0,0 +1,34 @@ +--- +title: Configure Explorer -> Taskbar +description: Configure Taskbar +privilege: TrustedInstaller +actions: + + # === Show Search Icon + - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Search', value: 'SearchboxTaskbarMode', type: REG_DWORD, data: '1'} + + # === Show Task View button - Disabled + - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'ShowTaskViewButton', type: REG_DWORD, data: '0'} + + # === Disable the new Weather and News widgets + # ------> Other parts of it can be found in ifeo + - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Feeds', value: 'EnableFeeds', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Feeds', value: 'ShellFeedsTaskbarViewMode', type: REG_DWORD, data: '2', errorAction: Ignore} + - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'TaskbarDa', type: REG_DWORD, data: '0', errorAction: Ignore} + + # ------> since 22621.1343 builds, Windows 11 tries to reinstall WebExperience even if it is removed and stored in deprovisioned apps list + - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Dsh', value: 'AllowNewsAndInterests', type: REG_DWORD, data: '0'} + + # === Remove the People Bar from the taskbar - Enabled + - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows\Explorer', value: 'HidePeopleBar', type: REG_DWORD, data: '1'} + + # === Remove the Meet Now icon - Enabled + - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer', value: 'HideSCAMeetNow', type: REG_DWORD, data: '1'} + + # === Configures the Chat icon on the taskbar - Disabled + - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Chat', value: 'ChatIcon', type: REG_DWORD, data: '3'} + + - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'TaskbarMn', type: REG_DWORD, data: '0'} + + # === Remove the Meet Now icon - Enabled + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer', value: 'HideSCAMeetNow', type: REG_DWORD, data: '1'} \ No newline at end of file diff --git a/src/Configuration/Tasks/registry/explorer/view.yml b/src/Configuration/Tasks/registry/explorer/view.yml new file mode 100644 index 00000000..4142b8f3 --- /dev/null +++ b/src/Configuration/Tasks/registry/explorer/view.yml @@ -0,0 +1,21 @@ +--- +title: Configure Explorer View +description: Configure Explorer View +privilege: TrustedInstaller +actions: + + # ============ + # === View === + # ============ + # === Display the full path in title bar - Enabled + - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\CabinetState', value: 'FullPath', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Explorer\CabinetState', value: 'FullPath', type: REG_DWORD, data: '1'} + + # === Hide extensions for known file types - Disabled + # ------> Disabled for Security reasons + - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'HideFileExt', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'HideFileExt', type: REG_DWORD, data: '0'} + + # === Show sync provider notifications (ads) - Disabled + - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'ShowSyncProviderNotifications', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'ShowSyncProviderNotifications', type: REG_DWORD, data: '0'} \ No newline at end of file diff --git a/src/Configuration/features/revision/registry/configure-windows-settings.yml b/src/Configuration/Tasks/registry/explorer/win-settings.yml similarity index 59% rename from src/Configuration/features/revision/registry/configure-windows-settings.yml rename to src/Configuration/Tasks/registry/explorer/win-settings.yml index fdeb0d18..c2c3998c 100644 --- a/src/Configuration/features/revision/registry/configure-windows-settings.yml +++ b/src/Configuration/Tasks/registry/explorer/win-settings.yml @@ -1,99 +1,127 @@ --- -title: configure-windows-settings -description: configure-windows-settings +title: Configure Windows Settings +description: Configure Windows Settings privilege: TrustedInstaller actions: - # === Hide stripped components from Settings - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer', value: 'SettingsPageVisibility', type: REG_SZ, data: 'hide:cortana;privacy-automaticfiledownloads;privacy-feedback;windowsinsider;home'} + # === Hide stripped components from Settings + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer', value: 'SettingsPageVisibility', type: REG_SZ, data: 'hide:cortana;privacy-feedback;windowsinsider;home'} # === Hide Insider page from Settings --> Windows Updates - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\WindowsSelfHost\UI\Visibility', value: 'HideInsiderPage', type: REG_DWORD, data: '1'} - # - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer', value: 'IsWUHidden', type: REG_DWORD, data: '1'} - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\WindowsUpdate\UX\Settings', value: 'TrayIconVisibility', type: REG_DWORD, data: '0'} - # ============== - # === System === - # ============== - # ======> Display -> Graphics settings - # === Hardware-accelerated GPU scheduling - On - # ------> Requires build 20H1+ - # ------> https://www.tenforums.com/tutorials/150440-turn-off-hardware-accelerated-gpu-scheduling-windows-10-a.html - # ------> One of our users had Hardware Acceleration issues, therefore discarded - # [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\GraphicsDrivers] - # "HwSchMode"=dword:00000002 - # ======> Notifications & actions - # === Add or remove quick actions -> Removes all pinned quick actions. - # [-HKEY_CURRENT_USER\Control Panel\Quick Actions\Pinned] - # ======> Storage - # === Allow Storage Sense - Disabled - # ------> Storage Sense is turned off the machine. Users cannot enable Storage Sense + + # ============== + # === System === + # ============== + + # ======> Display -> Graphics settings + + # === Hardware-accelerated GPU scheduling - On + # ------> Requires build 20H1+ + # ------> https://www.tenforums.com/tutorials/150440-turn-off-hardware-accelerated-gpu-scheduling-windows-10-a.html + # ------> One of our users had Hardware Acceleration issues, therefore discarded + # [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\GraphicsDrivers] + # "HwSchMode"=dword:00000002 + + # ======> Notifications & actions + + # === Add or remove quick actions -> Removes all pinned quick actions. + # [-HKEY_CURRENT_USER\Control Panel\Quick Actions\Pinned] + + # ======> Storage + + # === Allow Storage Sense - Disabled + # ------> Storage Sense is turned off the machine. Users cannot enable Storage Sense # - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\StorageSense', value: 'AllowStorageSenseGlobal', type: REG_DWORD, data: '0'} - # ======> Tablet mode - # === Adjust Tablet mode to always desktop mode. - # ------> When I sign in - Use desktop mode. - # ------> When this device automatically switches tablet mode on or off - Don't ask me and don't switch. + + # ======> Tablet mode + + # === Adjust Tablet mode to always desktop mode. + # ------> When I sign in - Use desktop mode. + # ------> When this device automatically switches tablet mode on or off - Don't ask me and don't switch. - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ImmersiveShell', value: 'SignInMode', type: REG_DWORD, data: '1'} - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ImmersiveShell', value: 'TabletMode', type: REG_DWORD, data: '0'} - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ImmersiveShell', value: 'ConvertibleSlateModePromptPreference', type: REG_DWORD, data: '2'} - # === Hide app icons on the taskbar in tablet mode - Off + + # === Hide app icons on the taskbar in tablet mode - Off - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'TaskbarAppsVisibleInTabletMode', type: REG_DWORD, data: '1'} - # === Automatically hide the taskbar in tablet mode - Off + + # === Automatically hide the taskbar in tablet mode - Off - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'TaskbarAutoHideInTabletMode', type: REG_DWORD, data: '0'} - # ======> Multitasking - # === Show suggestions occasionally in your timeline - Off + + # ======> Multitasking + # === Show suggestions occasionally in your timeline - Off - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SubscribedContent-353698Enabled', type: REG_DWORD, data: '0'} - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SystemPaneSuggestionsEnabled', type: REG_DWORD, data: '0'} - # ======> Clipboard - # === Clipboard History - Off + + # ======> Clipboard + # === Clipboard History - Off - !registryValue: {path: 'HKCU\Software\Microsoft\Clipboard', value: 'EnableClipboardHistory', type: REG_DWORD, data: '0'} - # === Allow Clipboard History - Enabled (default) - # ------> Clipboard won't work if disabled. + + # === Allow Clipboard History - Enabled (default) + # ------> Clipboard won't work if disabled. - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\System', value: 'AllowClipboardHistory', type: REG_DWORD, data: '1'} - # === Allow Clipboard synchronization across devices - Enabled (default) - # ------> Clipboard synchronization won't work if disabled. + + # === Allow Clipboard synchronization across devices - Enabled (default) + # ------> Clipboard synchronization won't work if disabled. - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\System', value: 'AllowCrossDeviceClipboard', type: REG_DWORD, data: '1'} - # =============== - # === Devices === - # =============== - # ======> Typing - # === Autocorrect misspelled words - Off + + # =============== + # === Devices === + # =============== + + # ======> Typing + + # === Autocorrect misspelled words - Off - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\TabletTip\1.7', value: 'EnableAutocorrection', type: REG_DWORD, data: '0'} - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\TabletTip\1.7', value: 'EnableAutocorrection', type: REG_DWORD, data: '0'} - # === Highlight misspelled words - Off + + # === Highlight misspelled words - Off - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\TabletTip\1.7', value: 'EnableSpellchecking', type: REG_DWORD, data: '0'} - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\TabletTip\1.7', value: 'EnableSpellchecking', type: REG_DWORD, data: '0'} - # === Show text suggestions as I type on the software keyboard - Off + + # === Show text suggestions as I type on the software keyboard - Off - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\TabletTip\1.7', value: 'EnableTextPrediction', type: REG_DWORD, data: '0'} - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\TabletTip\1.7', value: 'EnableTextPrediction', type: REG_DWORD, data: '0'} - # === Add a space after I choose text suggestion - Off + + # === Add a space after I choose text suggestion - Off - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\TabletTip\1.7', value: 'EnablePredictionSpaceInsertion', type: REG_DWORD, data: '0'} - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\TabletTip\1.7', value: 'EnablePredictionSpaceInsertion', type: REG_DWORD, data: '0'} - # === Add a full stop after I double-tap the spacebar - Off + + # === Add a full stop after I double-tap the spacebar - Off - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\TabletTip\1.7', value: 'EnableDoubleTapSpace', type: REG_DWORD, data: '0'} - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\TabletTip\1.7', value: 'EnableDoubleTapSpace', type: REG_DWORD, data: '0'} - # === Typing insights - Off + + # === Typing insights - Off - !registryValue: {path: 'HKCU\Software\Microsoft\Input\Settings', value: 'InsightsEnabled', type: REG_DWORD, data: '0'} - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Input\Settings', value: 'InsightsEnabled', type: REG_DWORD, data: '0'} - # === Show text suggestions as I type - Off - # ------> Hardware keyboard + + # === Show text suggestions as I type - Off + # ------> Hardware keyboard - !registryValue: {path: 'HKCU\Software\Microsoft\Input\Settings', value: 'EnableHwkbTextPrediction', type: REG_DWORD, data: '0'} - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Input\Settings', value: 'EnableHwkbTextPrediction', type: REG_DWORD, data: '0'} - # === Autocorrect misspelled words I type - Off - # ------> Hardware keyboard + + # === Autocorrect misspelled words I type - Off + # ------> Hardware keyboard - !registryValue: {path: 'HKCU\Software\Microsoft\Input\Settings', value: 'EnableHwkbAutocorrection', type: REG_DWORD, data: '0'} - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Input\Settings', value: 'EnableHwkbAutocorrection', type: REG_DWORD, data: '0'} - # === Show text suggestions based on the recognized languages that you are typing - Off + + # === Show text suggestions based on the recognized languages that you are typing - Off - !registryValue: {path: 'HKCU\Software\Microsoft\Input\Settings', value: 'MultilingualEnabled', type: REG_DWORD, data: '0'} - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Input\Settings', value: 'MultilingualEnabled', type: REG_DWORD, data: '0'} - # ======> AutoPlay - # === Use AutoPlay for all media and devices - Off + + # ======> AutoPlay + # === Use AutoPlay for all media and devices - Off - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers', value: 'DisableAutoplay', type: REG_DWORD, data: '1'} - # ======================= - # === Personalization === - # ======================= - # ======> Colors - # === Choose your color - Custom colors (designed for UI) + + # ======================= + # === Personalization === + # ======================= + + # ======> Colors + # === Choose your color - Custom colors (designed for UI) - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Accents\0\Theme0', value: 'Color', type: REG_DWORD, data: '4279374354'} - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Accents\0\Theme1', value: 'Color', type: REG_DWORD, data: '4278190294'} - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Accents\1\Theme0', value: 'Color', type: REG_DWORD, data: '4294926889'} @@ -102,7 +130,8 @@ actions: - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Accents\2\Theme1', value: 'Color', type: REG_DWORD, data: '4283680768'} - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Accents\3\Theme0', value: 'Color', type: REG_DWORD, data: '4294901930'} - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Accents\3\Theme1', value: 'Color', type: REG_DWORD, data: '4294967064'} - # === Choose your default app mode - Dark (theme) + + # === Choose your default app mode - Dark (theme) - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize', value: 'AppsUseLightTheme', type: REG_DWORD, data: '0', option: "configure-darkmode", weight: 70} - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize', value: 'SystemUsesLightTheme', type: REG_DWORD, data: '0', option: "configure-darkmode", weight: 50} @@ -111,220 +140,292 @@ actions: - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize', value: 'SystemUsesLightTheme', type: REG_DWORD, data: '1', option: "!configure-darkmode", weight: 50} ## - # ======> Start - # === Show suggestions occasionally in Start - Off + + # ======> Start + # === Show suggestions occasionally in Start - Off - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SubscribedContent-338388Enabled', type: REG_DWORD, data: '0'} - # ============ - # === Apps === - # ============ - # ======> Offline maps - # === Metered connections - Off - # ------> If this is turned off, maps only download over free WLAN or unlimited mobile date. (You might incur additional charges if you turn it on.) + + # ============ + # === Apps === + # ============ + + # ======> Offline maps + + # === Metered connections - Off + # ------> If this is turned off, maps only download over free WLAN or unlimited mobile date. (You might incur additional charges if you turn it on.) - !registryValue: {path: 'HKLM\SYSTEM\Maps', value: 'UpdateOnlyOnWifi', type: REG_DWORD, data: '1'} - # === Automatically update maps - Off + + # === Automatically update maps - Off - !registryValue: {path: 'HKLM\SYSTEM\Maps', value: 'AutoUpdateEnabled', type: REG_DWORD, data: '0'} - # ================ - # === Accounts === - # ================ - # ======> Sync your settings - # === Do not sync app settings - Enabled + + # ================ + # === Accounts === + # ================ + + # ======> Sync your settings + + # === Do not sync app settings - Enabled - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\SettingSync', value: 'DisableApplicationSettingSync', type: REG_DWORD, data: '2'} - # === Allow users to turn "app settings" syncing on - Enabled + + # === Allow users to turn "app settings" syncing on - Enabled - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\SettingSync', value: 'DisableApplicationSettingSyncUserOverride', type: REG_DWORD, data: '1'} - # === Do not sync - Enabled + + # === Do not sync - Enabled - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\SettingSync', value: 'DisableSettingSync', type: REG_DWORD, data: '2'} - # === Allow users to turn syncing on - Enabled + + # === Allow users to turn syncing on - Enabled - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\SettingSync', value: 'DisableSettingSyncUserOverride', type: REG_DWORD, data: '1'} - # === Do not sync browser settings - Enabled + + # === Do not sync browser settings - Enabled - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\SettingSync', value: 'DisableWebBrowserSettingSync', type: REG_DWORD, data: '2'} - # === Allow users to turn "browser" syncing on - Enabled + + # === Allow users to turn "browser" syncing on - Enabled - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\SettingSync', value: 'DisableWebBrowserSettingSyncUserOverride', type: REG_DWORD, data: '1'} - # === Do not sync desktop personalization - Enabled + + # === Do not sync desktop personalization - Enabled - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\SettingSync', value: 'DisableDesktopThemeSettingSync', type: REG_DWORD, data: '2'} - # === Allow users to turn "desktop personalization" syncing on - Enabled + + # === Allow users to turn "desktop personalization" syncing on - Enabled - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\SettingSync', value: 'DisableDesktopThemeSettingSyncUserOverride', type: REG_DWORD, data: '1'} - # === Do not sync - Enabled - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\SettingSync', value: 'DisableSettingSync', type: REG_DWORD, data: '2'} - # === Allow users to turn syncing on - Enabled - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\SettingSync', value: 'DisableSettingSyncUserOverride', type: REG_DWORD, data: '1'} - # === Do not sync on metered connections - Enabled + + # === Do not sync on metered connections - Enabled - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\SettingSync', value: 'DisableSyncOnPaidNetwork', type: REG_DWORD, data: '1'} - # === Do not sync other Windows settings - Enabled + + # === Do not sync other Windows settings - Enabled - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\SettingSync', value: 'DisableWindowsSettingSync', type: REG_DWORD, data: '2'} - # === Allow users to turn "other Windows settings" syncing on - Enabled + + # === Allow users to turn "other Windows settings" syncing on - Enabled - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\SettingSync', value: 'DisableWindowsSettingSyncUserOverride', type: REG_DWORD, data: '1'} - # === Do not sync passwords - Enabled + + # === Do not sync passwords - Enabled - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\SettingSync', value: 'DisableCredentialsSettingSync', type: REG_DWORD, data: '2'} - # === Allow users to turn "passwords" syncing on - Enabled + + # === Allow users to turn "passwords" syncing on - Enabled - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\SettingSync', value: 'DisableCredentialsSettingSyncUserOverride', type: REG_DWORD, data: '1'} - # === Do not sync personalize - Enabled + + # === Do not sync personalize - Enabled - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\SettingSync', value: 'DisablePersonalizationSettingSync', type: REG_DWORD, data: '2'} - # === Allow users to turn "personalize" syncing on - Enabled + + # === Allow users to turn "personalize" syncing on - Enabled - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\SettingSync', value: 'DisablePersonalizationSettingSyncUserOverride', type: REG_DWORD, data: '1'} - # === Do not sync start settings - Enabled + + # === Do not sync start settings - Enabled - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\SettingSync', value: 'DisableStartLayoutSettingSync', type: REG_DWORD, data: '2'} - # === Allow users to turn "start layout" syncing on - Enabled + + # === Allow users to turn "start layout" syncing on - Enabled - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\SettingSync', value: 'DisableStartLayoutSettingSyncUserOverride', type: REG_DWORD, data: '1'} - # ============== - # === Gaming === - # ============== - # ======> Game bar - # === Record game clips, screenshots and broadcast using Game bar - Off + + # ============== + # === Gaming === + # ============== + + # ======> Game bar + + # === Record game clips, screenshots and broadcast using Game bar - Off - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\GameDVR', value: 'AppCaptureEnabled', type: REG_DWORD, data: '0', option: 'remove-appx-xbox'} - !registryValue: {path: 'HKCU\System\GameConfigStore', value: 'GameDVR_Enabled', type: REG_DWORD, data: '0'} - # =============== - # === Privacy === - # =============== - # ======> General - # === Let apps use advertising ID to make ads more interesting to you based on your app activity - Off + + # =============== + # === Privacy === + # =============== + + # ======> General + + # === Let apps use advertising ID to make ads more interesting to you based on your app activity - Off - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\AdvertisingInfo', value: 'Enabled', type: REG_DWORD, data: '0'} - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AdvertisingInfo', value: 'Enabled', type: REG_DWORD, data: '0'} - # === Turn off the advertising ID - Enabled + + - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\AdvertisingInfo', value: 'Id', operation: delete} + - !registryValue: {path: 'HKLM\Software\Microsoft\Windows\CurrentVersion\AdvertisingInfo', value: 'Id', operation: delete} + + # === Turn off the advertising ID - Enabled - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\AdvertisingInfo', value: 'DisabledByGroupPolicy', type: REG_DWORD, data: '1'} - # === Allow webistes to provide locally relevant content by accessing my language list - Off - # ------> Do not let websites access local language list - Enabled + + # === Allow webistes to provide locally relevant content by accessing my language list - Off + # ------> Do not let websites access local language list - Enabled - !registryValue: {path: 'HKCU\Control Panel\International\User Profile', value: 'HttpAcceptLanguageOptOut', type: REG_DWORD, data: '1', weight: 50} - # === Allow Windows to track app launches to improve Start and search - Off - # ------> Let Windows track app launches to improve Start and search results - Disabled - # [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced] - # "Start_TrackProgs"=dword:00000000 - # === Show me notifications in the Settings app - Off - # ------> Found in 22631.3527 + # === Allow Windows to track app launches to improve Start and search - Off + # [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced] + # "Start_TrackProgs"=dword:00000000 + + + # === Show me notifications in the Settings app - Off + # ------> Found in 22631.3527 - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\SystemSettings\AccountNotifications', value: 'EnableAccountNotifications', type: REG_DWORD, data: '1', weight: 50} - # ======> Speech - # === Online speech recognition - Off + + # ======> Speech + # === Online speech recognition - Off - !registryValue: {path: 'HKCU\Software\Microsoft\Speech_OneCore\Settings\OnlineSpeechPrivacy', value: 'HasAccepted', type: REG_DWORD, data: '0'} - # ======> Inking & typing personalization - # === Getting to know you - Off - # ------> https://www.tenforums.com/tutorials/118127-turn-off-inking-typing-personalization-windows-10-a.html + + # ======> Inking & typing personalization + # === Getting to know you - Off + # ------> https://www.tenforums.com/tutorials/118127-turn-off-inking-typing-personalization-windows-10-a.html - !registryValue: {path: 'HKCU\Software\Microsoft\InputPersonalization', value: 'RestrictImplicitInkCollection', type: REG_DWORD, data: '1'} - !registryValue: {path: 'HKCU\Software\Microsoft\InputPersonalization', value: 'RestrictImplicitTextCollection', type: REG_DWORD, data: '1'} - !registryValue: {path: 'HKCU\Software\Microsoft\InputPersonalization\TrainedDataStore', value: 'HarvestContacts', type: REG_DWORD, data: '0'} - !registryValue: {path: 'HKCU\Software\Microsoft\Personalization\Settings', value: 'AcceptedPrivacyPolicy', type: REG_DWORD, data: '0'} - # === Turn off automatic learning - Enabled + + # === Turn off automatic learning - Enabled - !registryValue: {path: 'HKCU\SOFTWARE\Policies\Microsoft\InputPersonalization', value: 'RestrictImplicitInkCollection', type: REG_DWORD, data: '1'} - !registryValue: {path: 'HKCU\SOFTWARE\Policies\Microsoft\InputPersonalization', value: 'RestrictImplicitTextCollection', type: REG_DWORD, data: '1'} - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\InputPersonalization', value: 'RestrictImplicitInkCollection', type: REG_DWORD, data: '1'} - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\InputPersonalization', value: 'RestrictImplicitTextCollection', type: REG_DWORD, data: '1'} - # === Allow users to enable online speech recognition services - Disabled - # ------> If this policy is disabled, speech services will be disabled, and users cannot enable speech services via settings. + + # === Allow users to enable online speech recognition services - Disabled + # ------> If this policy is disabled, speech services will be disabled, and users cannot enable speech services via settings. # - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\InputPersonalization', value: 'AllowInputPersonalization', type: REG_DWORD, data: '0'} - # ======> Diagnostics & feedback - # === Diagnostic data - Disabled - # ------> Disable Telemetry - Enabled - - !registryValue: {path: 'HKCU\SOFTWARE\Policies\Microsoft\Windows\DataCollection', value: 'AllowTelemetry', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\DataCollection', value: 'AllowTelemetry', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\DataCollection', value: 'AllowTelemetry', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\DataCollection', value: 'AllowTelemetry', type: REG_DWORD, data: '0'} - - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\default\System\AllowTelemetry', value: 'value', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CPSS\DevicePolicy\AllowTelemetry', value: 'DefaultValue', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CPSS\Store\AllowTelemetry', value: 'Value', type: REG_DWORD, data: '0'} - # === Improve inking and typing recognition - Disabled + # ======> Diagnostics & feedback + + # === Diagnostic data - Disabled + # ------> Disable Telemetry - Enabled + # Can be found in src/Configuration/Tasks/registry/privacy/telemetry.yml + + # === Improve inking and typing recognition - Disabled - !registryValue: {path: 'HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\TextInput', value: 'AllowLinguisticDataCollection', type: REG_DWORD, data: '0'} - # === Improve inking and typing recognition - Disabled + + # === Improve inking and typing recognition - Disabled - !registryValue: {path: 'HKCU\Software\Microsoft\Input\TIPC', value: 'Enabled', type: REG_DWORD, data: '0'} - # === Tailored experiences - Off + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Input\TIPC', value: 'Enabled', type: REG_DWORD, data: '0'} + + # === Tailored experiences - Off - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Privacy', value: 'TailoredExperiencesWithDiagnosticDataEnabled', type: REG_DWORD, data: '0'} - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CPSS\DevicePolicy\TailoredExperiencesWithDiagnosticDataEnabled', value: 'DefaultValue', type: REG_DWORD, data: '0'} - # === View diagnostic data - Off + # === View diagnostic data - Off - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\EventTranscriptKey', value: 'EnableEventTranscript', type: REG_DWORD, data: '0'} - # === Feedback frequency - Never + + # === Feedback frequency - Never - !registryValue: {path: 'HKCU\Software\Microsoft\Siuf\Rules', value: 'NumberOfSIUFInPeriod', type: REG_DWORD, data: '0'} - # ======> Activity history - # === Allow upload of User Activities - Disabled + - !registryValue: {path: 'HKCU\Software\Microsoft\Siuf\Rules', value: 'PeriodInNanoSeconds', operation: delete} + + # ======> Activity history + # === Allow upload of User Activities - Disabled - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\System', value: 'UploadUserActivities', type: REG_DWORD, data: '0'} - # === Allow publishing of User Activities - Disabled + + # === Allow publishing of User Activities - Disabled - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\System', value: 'PublishUserActivities', type: REG_DWORD, data: '0'} - # === Enables Activity Feed - Disabled + + # === Enables Activity Feed - Disabled - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\System', value: 'EnableActivityFeed', type: REG_DWORD, data: '0'} - # ======> App permissions - # ------> https://www.joseespitia.com/2019/07/24/registry-keys-for-windows-10-application-privacy-settings/ - # === Location - Off + + # ======> App permissions + # ------> https://www.joseespitia.com/2019/07/24/registry-keys-for-windows-10-application-privacy-settings/ + + # === Location - Off - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\location', value: 'Value', type: REG_SZ, data: 'Deny'} - # REMINDER - # [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\location] - # "Value"="Deny" - # === Camera - On + # REMINDER + # [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\location] + # "Value"="Deny" + + # === Camera - On - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\webcam', value: 'Value', type: REG_SZ, data: 'Allow'} - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\webcam', value: 'Value', type: REG_SZ, data: 'Allow'} - # === Microphone - On + + # === Microphone - On - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\microphone', value: 'Value', type: REG_SZ, data: 'Allow'} - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\microphone', value: 'Value', type: REG_SZ, data: 'Allow'} - # === Notifications - Off + + # === Notifications - Off - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\userNotificationListener', value: 'Value', type: REG_SZ, data: 'Deny'} - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\userNotificationListener', value: 'Value', type: REG_SZ, data: 'Deny'} - # === Motion - Off + + # === Motion - Off - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\activity', value: 'Value', type: REG_SZ, data: 'Deny'} - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\activity', value: 'Value', type: REG_SZ, data: 'Deny'} - # === Account info - Off + + # === Account info - Off - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\userAccountInformation', value: 'Value', type: REG_SZ, data: 'Deny'} - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\userAccountInformation', value: 'Value', type: REG_SZ, data: 'Deny'} - # === Contacts - Off - # --------> Needed for Mail & Calendar app - # [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\contacts] - # "Value"="Deny" - # [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\contacts] - # "Value"="Deny" - # === Calendar - Off + + # === Contacts - Off + # --------> Needed for Mail & Calendar app + # [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\contacts] + # "Value"="Deny" + # [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\contacts] + # "Value"="Deny" + + # === Calendar - Off - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\appointments', value: 'Value', type: REG_SZ, data: 'Deny'} - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\appointments', value: 'Value', type: REG_SZ, data: 'Deny'} - # === Call history - Off - # [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\phoneCallHistory] - # "Value"="Deny" - # [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\phoneCallHistory] - # "Value"="Deny" - # === Email - Off - # [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\email] - # "Value"="Deny" - # [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\email] - # "Value"="Deny" - # === Tasks - Off + + # === Call history - Off + # [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\phoneCallHistory] + # "Value"="Deny" + # [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\phoneCallHistory] + # "Value"="Deny" + + # === Email - Off + # [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\email] + # "Value"="Deny" + # [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\email] + # "Value"="Deny" + + # === Tasks - Off - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\userDataTasks', value: 'Value', type: REG_SZ, data: 'Deny'} - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\userDataTasks', value: 'Value', type: REG_SZ, data: 'Deny'} - # === Messaging - Off + + # === Messaging - Off - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\chat', value: 'Value', type: REG_SZ, data: 'Deny'} - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\chat', value: 'Value', type: REG_SZ, data: 'Deny'} - # === Radios - Off + + # === Radios - Off - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\radios', value: 'Value', type: REG_SZ, data: 'Deny'} - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\radios', value: 'Value', type: REG_SZ, data: 'Deny'} - # === Other devices - Off + + # === Other devices - Off - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\bluetoothSync', value: 'Value', type: REG_SZ, data: 'Deny'} - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\bluetoothSync', value: 'Value', type: REG_SZ, data: 'Deny'} - # === Background apps - Off + + # === Background apps - Off - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Search', value: 'BackgroundAppGlobalToggle', type: REG_DWORD, data: '0'} - !registryValue: {path: 'HKLM\Software\Microsoft\Windows\CurrentVersion\Search', value: 'BackgroundAppGlobalToggle', type: REG_DWORD, data: '0'} - # === App diagnostics - Off + + # === App diagnostics - Off - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\appDiagnostics', value: 'Value', type: REG_SZ, data: 'Deny'} - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\appDiagnostics', value: 'Value', type: REG_SZ, data: 'Deny'} - # === Documents - Off + + # === Documents - Off - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\documentsLibrary', value: 'Value', type: REG_SZ, data: 'Deny'} - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\documentsLibrary', value: 'Value', type: REG_SZ, data: 'Deny'} - # === Pictures - Off + + # === Pictures - Off - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\picturesLibrary', value: 'Value', type: REG_SZ, data: 'Deny'} - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\picturesLibrary', value: 'Value', type: REG_SZ, data: 'Deny'} - # === Videos - Off + + # === Videos - Off - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\videosLibrary', value: 'Value', type: REG_SZ, data: 'Deny'} - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\videosLibrary', value: 'Value', type: REG_SZ, data: 'Deny'} - # === File system - Off + + # === File system - Off - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\broadFileSystemAccess', value: 'Value', type: REG_SZ, data: 'Deny'} - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\broadFileSystemAccess', value: 'Value', type: REG_SZ, data: 'Deny'} - # =================== - # === Wi-Fi Sense === - # =================== - # === Disable Wi-Fi Sense - Enabled + + # =================== + # === Wi-Fi Sense === + # =================== + + # === Disable Wi-Fi Sense - Enabled - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\WcmSvc\wifinetworkmanager\config', value: 'AutoConnectAllowedOEM', type: REG_DWORD, data: '0'} - # === Disable Wi-Fi Sense telemetry + + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\WcmSvc\wifinetworkmanager\features', value: 'PaidWifi', type: REG_DWORD, data: '0'} + + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\WcmSvc\wifinetworkmanager\features', value: 'WiFiSenseOpen', type: REG_DWORD, data: '0'} + + # === Disable Wi-Fi Sense telemetry - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\default\WiFi\AllowWiFiHotSpotReporting', value: 'value', type: REG_DWORD, data: '0'} - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\default\WiFi\AllowAutoConnectToWiFiSenseHotspots', value: 'value', type: REG_DWORD, data: '0'} - - # === Disable ValueBanners in Windows 11 Settings (Requires TrustedInstaller permissions) - # ------> Credits to @he3als for finding more reliable method. + + + # ============= + # === Extra === + # ============= + + # === Disable ValueBanners in Windows 11 Settings (Requires TrustedInstaller permissions) + # ------> Credits to @he3als for finding more reliable method. - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\WindowsRuntime\ActivatableClassId\ValueBanner.IdealStateFeatureControlProvider', value: 'ActivationType', type: REG_DWORD, data: '0'} # === Disable Recall snapshots (24H2) @@ -333,40 +434,40 @@ actions: # === Enable Sudo - On (Inline) - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Sudo', value: 'Enabled', type: REG_DWORD, data: '3'} - # ======================== - # === Discarded Tweaks === - # ======================== - # === Block Cortana connections via Firewall - # ------> Cortana gets removed either way, so these are discarded from integration for compatibility reasons + not to flood the Firewall registry entry. - # [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] - # "Block Cortana ActionUriServer.exe"="v2.26|Action=Block|Active=TRUE|Dir=Out|RA42=IntErnet|RA62=IntErnet|App=C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\ActionUriServer.exe|Name=Block Cortana ActionUriServer.exe|Desc=Block Cortana Outbound UDP/TCP Traffic|" - # [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] - # "Block Cortana PlacesServer.exe"="v2.26|Action=Block|Active=TRUE|Dir=Out|RA42=IntErnet|RA62=IntErnet|App=C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\PlacesServer.exe|Name=Block Cortana PlacesServer.exe|Desc=Block Cortana Outbound UDP/TCP Traffic|" - # [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] - # "Block Cortana RemindersServer.exe"="v2.26|Action=Block|Active=TRUE|Dir=Out|RA42=IntErnet|RA62=IntErnet|App=C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe|Name=Block Cortana RemindersServer.exe|Desc=Block Cortana Outbound UDP/TCP Traffic|" - # [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] - # "Block Cortana RemindersShareTargetApp.exe"="v2.26|Action=Block|Active=TRUE|Dir=Out|RA42=IntErnet|RA62=IntErnet|App=C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersShareTargetApp.exe|Name=Block Cortana RemindersShareTargetApp.exe|Desc=Block Cortana Outbound UDP/TCP Traffic|" - # [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] - # "Block Cortana SearchUI.exe"="v2.26|Action=Block|Active=TRUE|Dir=Out|RA42=IntErnet|RA62=IntErnet|App=C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe|Name=Block Cortana SearchUI.exe|Desc=Block Cortana Outbound UDP/TCP Traffic|" - # [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] - # "Block Cortana Package"="v2.26|Action=Block|Active=TRUE|Dir=Out|RA42=IntErnet|RA62=IntErnet|Name=Block Cortana Package|Desc=Block Cortana Outbound UDP/TCP Traffic|AppPkgId=S-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742|Platform=2:6:2|Platform2=GTEQ|" - # === Disable DeliveryOptimization - # ------> May conflict with Microsoft Store functions. - # HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization] - # "DODownloadMode"=dword:00000100 - # === Enable backup for Apps - Disabled - # ------> Only present on Windows 8 and 8.1, therefore discarded. - # [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\SettingSync] - # "EnableBackupForWin8Apps"=dword:00000000 - # === Autocorrect misspelled words I type (?) - # ------> Undocumented, therefore discarded. - # ------> Hardware keyboard - # [HKEY_CURRENT_USER\Software\Microsoft\Input\Settings] - # "EnableHwkbAutocorrection2"=dword:00000000 - # [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Input\Settings] - # "EnableHwkbAutocorrection2"=dword:00000000 - # === Disable Speech - # ------> Undocumented, discarded. - # ------> https://github.com/CHEF-KOCH/Windows-Redstone-4-1803-Data-Analysis/blob/master/Registry/ModelDownloadAllowed.reg - # [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Speech_OneCore\Preferences] - # "VoiceActivationDefaultOn"=dword:00000000 + + # ======================== + # === Discarded Tweaks === + # ======================== + + # === Block Cortana connections via Firewall + # ------> Cortana gets removed either way, so these are discarded from integration for compatibility reasons + not to flood the Firewall registry entry. + # [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] + # "Block Cortana ActionUriServer.exe"="v2.26|Action=Block|Active=TRUE|Dir=Out|RA42=IntErnet|RA62=IntErnet|App=C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\ActionUriServer.exe|Name=Block Cortana ActionUriServer.exe|Desc=Block Cortana Outbound UDP/TCP Traffic|" + # [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] + # "Block Cortana PlacesServer.exe"="v2.26|Action=Block|Active=TRUE|Dir=Out|RA42=IntErnet|RA62=IntErnet|App=C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\PlacesServer.exe|Name=Block Cortana PlacesServer.exe|Desc=Block Cortana Outbound UDP/TCP Traffic|" + # [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] + # "Block Cortana RemindersServer.exe"="v2.26|Action=Block|Active=TRUE|Dir=Out|RA42=IntErnet|RA62=IntErnet|App=C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe|Name=Block Cortana RemindersServer.exe|Desc=Block Cortana Outbound UDP/TCP Traffic|" + # [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] + # "Block Cortana RemindersShareTargetApp.exe"="v2.26|Action=Block|Active=TRUE|Dir=Out|RA42=IntErnet|RA62=IntErnet|App=C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersShareTargetApp.exe|Name=Block Cortana RemindersShareTargetApp.exe|Desc=Block Cortana Outbound UDP/TCP Traffic|" + # [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] + # "Block Cortana SearchUI.exe"="v2.26|Action=Block|Active=TRUE|Dir=Out|RA42=IntErnet|RA62=IntErnet|App=C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe|Name=Block Cortana SearchUI.exe|Desc=Block Cortana Outbound UDP/TCP Traffic|" + # [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules] + # "Block Cortana Package"="v2.26|Action=Block|Active=TRUE|Dir=Out|RA42=IntErnet|RA62=IntErnet|Name=Block Cortana Package|Desc=Block Cortana Outbound UDP/TCP Traffic|AppPkgId=S-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742|Platform=2:6:2|Platform2=GTEQ|" + + # === Disable DeliveryOptimization + # ------> May conflict with Microsoft Store functions. + # HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization] + # "DODownloadMode"=dword:00000100 + + # === Autocorrect misspelled words I type (?) + # ------> Undocumented, therefore discarded. + # ------> Hardware keyboard + # [HKEY_CURRENT_USER\Software\Microsoft\Input\Settings] + # "EnableHwkbAutocorrection2"=dword:00000000 + # [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Input\Settings] + # "EnableHwkbAutocorrection2"=dword:00000000 + + # === Disable Speech + # ------> Undocumented, discarded. + # [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Speech_OneCore\Preferences] + # "VoiceActivationDefaultOn"=dword:00000000 diff --git a/src/Configuration/features/revision/registry/restore-windows-photo-viewer-all-users.yml b/src/Configuration/Tasks/registry/misc/classic-photo-viewer.yml similarity index 80% rename from src/Configuration/features/revision/registry/restore-windows-photo-viewer-all-users.yml rename to src/Configuration/Tasks/registry/misc/classic-photo-viewer.yml index f94fc93a..b8b4d64b 100644 --- a/src/Configuration/features/revision/registry/restore-windows-photo-viewer-all-users.yml +++ b/src/Configuration/Tasks/registry/misc/classic-photo-viewer.yml @@ -1,13 +1,9 @@ --- -title: restore-windows-photo-viewer-all-users -description: restore-windows-photo-viewer-all-users +title: Restore classic Windows Photo Viewer +description: Restore classic Windows Photo Viewer privilege: TrustedInstaller actions: - # Created by: Shawn Brink - # Created on: August 8th 2015 - # Updated on: August 5th 2018 - # Tutorial: https://www.tenforums.com/tutorials/14312-restore-windows-photo-viewer-windows-10-a.html - !registryValue: {path: 'HKCR\Applications\photoviewer.dll\shell\open', value: 'MuiVerb', type: REG_SZ, data: '@photoviewer.dll,-3043', option: "configure-lpv"} - !registryValue: {path: 'HKCR\Applications\photoviewer.dll\shell\open\command', value: '', type: REG_EXPAND_SZ, data: '%SystemRoot%\System32\rundll32.exe "%ProgramFiles%\Windows Photo Viewer\PhotoViewer.dll", ImageView_Fullscreen %1', option: "configure-lpv"} - !registryValue: {path: 'HKCR\Applications\photoviewer.dll\shell\open\DropTarget', value: 'Clsid', type: REG_SZ, data: '{FFE2A43C-56B9-4bf5-9A79-CC6D4285608A}', option: "configure-lpv"} @@ -67,9 +63,28 @@ actions: - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations', value: '.tif', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations', value: '.tiff', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - !registryValue: {path: 'HKCU\Software\Classes\.jpg', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} + - !registryValue: {path: 'HKU\S-1-5-18\Software\Classes\.jpg', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - !registryValue: {path: 'HKCU\Software\Classes\.jpeg', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} + - !registryValue: {path: 'HKU\S-1-5-18\Software\Classes\.jpeg', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - !registryValue: {path: 'HKCU\Software\Classes\.gif', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} + - !registryValue: {path: 'HKU\S-1-5-18\Software\Classes\.gif', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - !registryValue: {path: 'HKCU\Software\Classes\.png', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} + - !registryValue: {path: 'HKU\S-1-5-18\Software\Classes\.png', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - !registryValue: {path: 'HKCU\Software\Classes\.bmp', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} + - !registryValue: {path: 'HKU\S-1-5-18\Software\Classes\.bmp', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - !registryValue: {path: 'HKCU\Software\Classes\.tiff', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} + - !registryValue: {path: 'HKU\S-1-5-18\Software\Classes\.tiff', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - !registryValue: {path: 'HKCU\Software\Classes\.ico', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} + - !registryValue: {path: 'HKU\S-1-5-18\Software\Classes\.ico', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} + - !registryValue: {path: 'HKCU\Software\Classes\.tif', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} + - !registryValue: {path: 'HKU\S-1-5-18\Software\Classes\.tif', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} + - !registryValue: {path: 'HKCU\Software\Classes\.wdp', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Wdp', option: "configure-lpv"} + - !registryValue: {path: 'HKU\S-1-5-18\Software\Classes\.wdp', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Wdp', option: "configure-lpv"} + - !registryValue: {path: 'HKCU\Software\Classes\.jfif', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} + - !registryValue: {path: 'HKU\S-1-5-18\Software\Classes\.jfif', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} + - !registryValue: {path: 'HKCU\Software\Classes\.dib', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} + - !registryValue: {path: 'HKU\S-1-5-18\Software\Classes\.dib', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} + - !registryValue: {path: 'HKCU\Software\Classes\.jpe', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} + - !registryValue: {path: 'HKU\S-1-5-18\Software\Classes\.jpe', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} + - !registryValue: {path: 'HKCU\Software\Classes\.jxr', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} + - !registryValue: {path: 'HKU\S-1-5-18\Software\Classes\.jxr', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} diff --git a/src/Configuration/features/revision/registry/configure-deprovisioned-apps.yml b/src/Configuration/Tasks/registry/misc/deprovisioned-apps.yml similarity index 99% rename from src/Configuration/features/revision/registry/configure-deprovisioned-apps.yml rename to src/Configuration/Tasks/registry/misc/deprovisioned-apps.yml index 54258543..0f4cb8f5 100644 --- a/src/Configuration/features/revision/registry/configure-deprovisioned-apps.yml +++ b/src/Configuration/Tasks/registry/misc/deprovisioned-apps.yml @@ -1,5 +1,5 @@ --- -title: configure-deprovisioned-apps +title: Configure Deprovisioned Apps description: Prevents some UWP packages from installing after updating Windows privilege: TrustedInstaller actions: diff --git a/src/Configuration/features/revision/registry/disable-installing-teams.yml b/src/Configuration/Tasks/registry/misc/disable-installing-teams.yml similarity index 100% rename from src/Configuration/features/revision/registry/disable-installing-teams.yml rename to src/Configuration/Tasks/registry/misc/disable-installing-teams.yml diff --git a/src/Configuration/features/revision/registry/disable-logging.yml b/src/Configuration/Tasks/registry/misc/disable-logging.yml similarity index 69% rename from src/Configuration/features/revision/registry/disable-logging.yml rename to src/Configuration/Tasks/registry/misc/disable-logging.yml index 3b5ac545..1b21d971 100644 --- a/src/Configuration/features/revision/registry/disable-logging.yml +++ b/src/Configuration/Tasks/registry/misc/disable-logging.yml @@ -4,9 +4,10 @@ description: disable-logging privilege: TrustedInstaller actions: - # === Disable Office logging on background when installed + # === Disable Office logging on background when installed - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\ClickToRun\OverRide', value: 'DisableLogManagement', type: REG_DWORD, data: '1'} - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Office\ClickToRun\Configuration', value: 'TimerInterval', type: REG_SZ, data: '900000'} - # === Disable RSoP Logging (Group policy) - # ------> It's enabled by default; disabling it might improve boot times and reduce disk io overhead + + # === Disable RSoP Logging (Group policy) + # ------> It's enabled by default; disabling it might improve boot times and reduce disk io overhead - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\System', value: 'RSoPLogging', type: REG_DWORD, data: '0'} diff --git a/src/Configuration/features/revision/registry/disable-system-restore-pre-defined-config.yml b/src/Configuration/Tasks/registry/misc/disable-system-restore-pre-defined-config.yml similarity index 100% rename from src/Configuration/features/revision/registry/disable-system-restore-pre-defined-config.yml rename to src/Configuration/Tasks/registry/misc/disable-system-restore-pre-defined-config.yml diff --git a/src/Configuration/features/revision/registry/enable-audio-communications-do-nothing.yml b/src/Configuration/Tasks/registry/misc/enable-audio-communications-do-nothing.yml similarity index 100% rename from src/Configuration/features/revision/registry/enable-audio-communications-do-nothing.yml rename to src/Configuration/Tasks/registry/misc/enable-audio-communications-do-nothing.yml diff --git a/src/Configuration/features/revision/registry/fixes.yml b/src/Configuration/Tasks/registry/misc/fixes.yml similarity index 60% rename from src/Configuration/features/revision/registry/fixes.yml rename to src/Configuration/Tasks/registry/misc/fixes.yml index 305a0ed3..06a4f9cd 100644 --- a/src/Configuration/features/revision/registry/fixes.yml +++ b/src/Configuration/Tasks/registry/misc/fixes.yml @@ -4,55 +4,68 @@ description: fixes privilege: TrustedInstaller actions: - # === Fix certain windows (mmc.exe, device manager, etc) from becoming blurry due to improper scaling in Windows 10. - # ------> 8.1 specific fixes, they are fixed in latest updates - # [HKEY_CURRENT_USER\Control Panel\Desktop] - # "Win8DpiScaling"=dword:00000000 - # "DpiScalingVer"=dword:00001000 - # "LogPixels"=dword:00000096 - # === Some builds had issue with registry hive not existing and thus not saving volume mixer per application settings. - # === Touchpad fix. - # [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\PrecisionTouchPad] - # "AAPThreshold"=dword:00000000 - # [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\PrecisionTouchPad] - # "AAPThreshold"=dword:00000000 - # === Changes Time zone configuration from local time to UTC (Coordinated Universal Time). - # ------> Sets default time to UTC to fix Windows and Linux showing different Times when dual booting and to provide a more universal Time configuration. Most Linux distros use UTC by default. - # ------> https://www.howtogeek.com/323390/how-to-fix-windows-and-linux-showing-different-times-when-dual-booting/ + + # === Fix certain windows (mmc.exe, device manager, etc) from becoming blurry due to improper scaling in Windows 10. + # ------> 8.1 specific fixes, they are fixed in latest updates + # [HKEY_CURRENT_USER\Control Panel\Desktop] + # "Win8DpiScaling"=dword:00000000 + # "DpiScalingVer"=dword:00001000 + # "LogPixels"=dword:00000096 + + # === Some builds had issue with registry hive not existing and thus not saving volume mixer per application settings. + + # === Touchpad fix. + # [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\PrecisionTouchPad] + # "AAPThreshold"=dword:00000000 + # [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\PrecisionTouchPad] + # "AAPThreshold"=dword:00000000 + + # === Changes Time zone configuration from local time to UTC (Coordinated Universal Time). + # ------> Sets default time to UTC to fix Windows and Linux showing different Times when dual booting and to provide a more universal Time configuration. Most Linux distros use UTC by default. + # ------> https://www.howtogeek.com/323390/how-to-fix-windows-and-linux-showing-different-times-when-dual-booting/ - !registryKey: {path: 'HKCU\Software\Microsoft\Internet Explorer\LowRegistry\Audio\PolicyConfig\PropertyStore', operation: add} - !registryValue: {path: 'HKLM\System\CurrentControlSet\Control\TimeZoneInformation', value: 'RealTimeIsUniversal', type: REG_DWORD, data: '1'} - # === Workaround and fix for Mapped Network Drives and UAC. - # ------> https://docs.microsoft.com/en-us/troubleshoot/windows-client/networking/mapped-drives-not-available-from-elevated-command#workaround---method-2 - # ------> https://serverfault.com/q/182758 + + # === Workaround and fix for Mapped Network Drives and UAC. + # ------> https://docs.microsoft.com/en-us/troubleshoot/windows-client/networking/mapped-drives-not-available-from-elevated-command#workaround---method-2 + # ------> https://serverfault.com/q/182758 - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System', value: 'EnableLinkedConnections', type: REG_DWORD, data: '1'} - # === Enable CFG mitigation for Valorant + + # === Enable CFG mitigation for Valorant - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vgc.exe', value: 'MitigationOptions', type: REG_BINARY, data: '000000000001000000000000000000000000000000000000'} - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vgc.exe', value: 'MitigationAuditOptions', type: REG_BINARY, data: '000000000000000000000000000000000000000000000000'} - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\vgc.exe', value: 'EAFModules', type: REG_SZ, data: ''} - # === Enable ASLR mitigation for osu! + + # === Enable ASLR mitigation for osu! - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\osu!.exe', value: 'MitigationOptions', type: REG_BINARY, data: '000021000000000000000000000000000000000000000000'} - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\osu!.exe', value: 'MitigationAuditOptions', type: REG_BINARY, data: '000000000000000000000000000000000000000000000000'} - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\osu!.exe', value: 'EAFModules', type: REG_SZ, data: ''} - # === ctfmon is needed to type something in search bar or WiFi password section, Snip & Sketch, etc. - # ------> ctfmon depends on TabletInputService - # ------> https://answers.microsoft.com/en-us/windows/forum/all/ctfmonexe-or-ctf-loader-not-automaticly-starting/4b6b91b3-e363-43cb-9715-92a1976e270f - # [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] - # "ctfmon"="C:\Windows\System32\ctfmon.exe" - # === Fix WU Taskbar + + # === ctfmon is needed to type something in search bar or WiFi password section, Snip & Sketch, etc. + # ------> ctfmon depends on TabletInputService + # ------> https://answers.microsoft.com/en-us/windows/forum/all/ctfmonexe-or-ctf-loader-not-automaticly-starting/4b6b91b3-e363-43cb-9715-92a1976e270f + # [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run] + # "ctfmon"="C:\Windows\System32\ctfmon.exe" + + # === Fix WU Taskbar # - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\WindowsUpdate\UX\Settings', value: 'TrayIconVisibility', type: REG_DWORD, data: '0'} - # === Stop indexing src and Licenses folders + + # === Stop indexing src and Licenses folders # - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\PreventIndexingCertainPaths', value: 'file:///C:\Users\Default\Documents\Workspace\Revision-Tool\bin\*', type: REG_SZ, data: 'file:///C:\Users\Default\Documents\Workspace\Revision-Tool\bin\*'} # - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\PreventIndexingCertainPaths', value: 'file:///%userprofile%\Documents\Workspace\Revision-Tool\bin\*', type: REG_SZ, data: 'file:///%userprofile%\Documents\Workspace\Revision-Tool\bin\*'} # - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\PreventIndexingCertainPaths', value: 'file:///C:\Windows\src\*', type: REG_SZ, data: 'file:///C:\Windows\src\*'} # - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\PreventIndexingCertainPaths', value: 'file:///C:\Licenses\*', type: REG_SZ, data: 'file:///C:\Licenses\*'} - # === Prevent MS Edge Chromium being installed after updates (Legacy Edge still gets installed) - # === Fix for VS not being allowed to install WebView2 - # ------> Credits to https://github.com/AveYo + + # === Prevent MS Edge Chromium being installed after updates (Legacy Edge still gets installed) + + # === Fix for VS not being allowed to install WebView2 + # ------> Credits to https://github.com/AveYo - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\EdgeUpdate', value: 'InstallDefault', type: REG_DWORD, data: '0'} - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\EdgeUpdate', value: 'Install{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}', type: REG_DWORD, data: '0'} - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\EdgeUpdate', value: 'Install{F3017226-FE2A-4295-8BDF-00C3A9A7E4C5}', type: REG_DWORD, data: '1'} - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\EdgeUpdate', value: 'DoNotUpdateToEdgeWithChromium', type: REG_DWORD, data: '1'} - # === Disable WPBT - # ------> https://github.com/Jamesits/dropWPBT + + # === Disable WPBT + # ------> https://github.com/Jamesits/dropWPBT - !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Control\Session Manager', value: 'DisableWpbtExecution', type: REG_DWORD, data: '1'} diff --git a/src/Configuration/features/revision/registry/make-msi-installer-work-in-safe-mode.yml b/src/Configuration/Tasks/registry/misc/msi-installer-in-safe-mode.yml similarity index 74% rename from src/Configuration/features/revision/registry/make-msi-installer-work-in-safe-mode.yml rename to src/Configuration/Tasks/registry/misc/msi-installer-in-safe-mode.yml index 183aca39..dad7c8ae 100644 --- a/src/Configuration/features/revision/registry/make-msi-installer-work-in-safe-mode.yml +++ b/src/Configuration/Tasks/registry/misc/msi-installer-in-safe-mode.yml @@ -1,9 +1,8 @@ --- -title: make-msi-installer-work-in-safe-mode +title: Make MSI installer work in safe mode description: make-msi-installer-work-in-safe-mode privilege: TrustedInstaller actions: - # --- Make MSI installer work in safe mode (and with networking) - !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Control\SafeBoot\Minimal\MSIServer', value: '', type: REG_SZ, data: 'Service'} - - !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Control\SafeBoot\Network\MSIServer', value: '', type: REG_SZ, data: 'Service'} + - !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Control\SafeBoot\Network\MSIServer', value: '', type: REG_SZ, data: 'Service'} \ No newline at end of file diff --git a/src/Configuration/Tasks/registry/os-info/edition.yml b/src/Configuration/Tasks/registry/os-info/edition.yml new file mode 100644 index 00000000..0a0c0e57 --- /dev/null +++ b/src/Configuration/Tasks/registry/os-info/edition.yml @@ -0,0 +1,14 @@ +--- +title: revision-static-edition +description: revision-static-edition +privilege: TrustedInstaller +actions: + + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion', value: 'EditionSubManufacturer', type: REG_SZ, data: 'MeetRevision'} + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion', value: 'EditionSubstring', type: REG_SZ, data: 'Revision'} + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion', value: 'EditionSubVersion', type: REG_SZ, data: 'ReviOS'} + + + # === Causes Network Sharing/Computer Name issues + # - !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Control\ComputerName\ComputerName', value: 'ComputerName', type: REG_SZ, data: 'Revision-PC'} + # - !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Control\ComputerName\ActiveComputerName', value: 'ComputerName', type: REG_SZ, data: 'Revision-PC'} \ No newline at end of file diff --git a/src/Configuration/features/revision/registry/revision-static-oem-information.yml b/src/Configuration/Tasks/registry/os-info/oem-info.yml similarity index 90% rename from src/Configuration/features/revision/registry/revision-static-oem-information.yml rename to src/Configuration/Tasks/registry/os-info/oem-info.yml index 963321cf..712cb9af 100644 --- a/src/Configuration/features/revision/registry/revision-static-oem-information.yml +++ b/src/Configuration/Tasks/registry/os-info/oem-info.yml @@ -1,6 +1,6 @@ --- -title: revision-static-oem-information -description: revision-static-oem-information +title: OEM Information +description: Configure OEM Information privilege: TrustedInstaller actions: diff --git a/src/Configuration/Tasks/registry/privacy/app-compat.yml b/src/Configuration/Tasks/registry/privacy/app-compat.yml new file mode 100644 index 00000000..dd6b26b9 --- /dev/null +++ b/src/Configuration/Tasks/registry/privacy/app-compat.yml @@ -0,0 +1,23 @@ +--- +title: Configure Privacy -> Application Compatibility +description: Configure Application Compatibility +privilege: TrustedInstaller +actions: + + # === Turn off Application Compatibility Engine - Enabled + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\AppCompat', value: 'DisableEngine', type: REG_DWORD, data: '1'} + + # === Turn off Application Telemetry - Enabled + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\AppCompat', value: 'AITEnable', type: REG_DWORD, data: '0'} + + # === Turn off Problem Steps Recorder - Enabled + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\AppCompat', value: 'DisableUAR', type: REG_DWORD, data: '1'} + + # === Turn off Program Compatibility Assistant - Enabled + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\AppCompat', value: 'DisablePCA', type: REG_DWORD, data: '1'} + + # === Turn off Program Inventory - Enabled + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\AppCompat', value: 'DisableInventory', type: REG_DWORD, data: '1'} + + # === Turn off SwitchBack Compatibility Engine - Enabled + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\AppCompat', value: 'SbEnable', type: REG_DWORD, data: '1'} \ No newline at end of file diff --git a/src/Configuration/Tasks/registry/privacy/cdm.yml b/src/Configuration/Tasks/registry/privacy/cdm.yml new file mode 100644 index 00000000..1d861fad --- /dev/null +++ b/src/Configuration/Tasks/registry/privacy/cdm.yml @@ -0,0 +1,54 @@ +--- +title: Configure Privacy -> Content Delivery Manager +description: Configure Content Delivery Manager +privilege: TrustedInstaller +actions: + + # === Content Delivery - Off + - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'ContentDeliveryAllowed', type: REG_DWORD, data: '0'} + + # === Subscribed Content - Off + - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SubscribedContentEnabled', type: REG_DWORD, data: '0'} + + # === Windows Welcome Experience after Updates - Off + - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SubscribedContent-310093Enabled', type: REG_DWORD, data: '0'} + + # === Get tips, tricks and suggestions as you use Windows - Off + - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SoftLandingEnabled', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SubscribedContent-338389Enabled', type: REG_DWORD, data: '0'} + + # === Automatically Install Suggested and Pre-installed Apps - Off + - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SilentInstalledAppsEnabled', type: REG_DWORD, data: '0'} + + - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'PreInstalledAppsEnabled', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'PreInstalledAppsEverEnabled', type: REG_DWORD, data: '0'} + + + # === Pre-installed vendor apps - Off + - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'OemPreInstalledAppsEnabled', type: REG_DWORD, data: '0'} + + # === Prevent Content Delivery Manager from reverting feature configuration + - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'FeatureManagementEnabled', type: REG_DWORD, data: '0'} + + # === Remove Content Delivery Subcsriptions + - !registryKey: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Subscriptions'} + + # === Remove Suggested Apps from Content Delivery + - !registryKey: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\SuggestedApps'} + + + - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'RemediationRequired', type: REG_DWORD, data: '0'} + + # === Turn Off Showing App Suggestions + - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SubscribedContent-314559Enabled', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SubscribedContent-280815Enabled', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SubscribedContent-314563Enabled', type: REG_DWORD, data: '0'} # My People + - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SubscribedContent-202914Enabled', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SubscribedContent-338387Enabled', type: REG_DWORD, data: '0'} # Facts, Tips and Tricks on Lock Screen + - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SubscribedContent-280810Enabled', type: REG_DWORD, data: '0'} # OneDrive SyncProviders + - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SubscribedContent-280811Enabled', type: REG_DWORD, data: '0'} # OneDrive + + + # === Disable Spotlight on Lock Screen + - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'RotatingLockScreenEnabled', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'RotatingLockScreenOverlayEnabled', type: REG_DWORD, data: '0'} \ No newline at end of file diff --git a/src/Configuration/Tasks/registry/privacy/ceip.yml b/src/Configuration/Tasks/registry/privacy/ceip.yml new file mode 100644 index 00000000..0b08cbfa --- /dev/null +++ b/src/Configuration/Tasks/registry/privacy/ceip.yml @@ -0,0 +1,22 @@ +--- +title: Configure Privacy -> Customer Experience Improvement Program (CEIP) +description: Configure CEIP +privilege: TrustedInstaller +actions: + + # ------> https://admx.help/?Category=Windows_11_2022&Policy=Microsoft.Policies.InternetCommunicationManagement::CEIPEnable + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\SQMClient\Windows', value: 'CEIPEnable', type: REG_DWORD, data: '0'} + + # === App-V + - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\AppV\CEIP', value: 'CEIPEnable', type: REG_DWORD, data: '0'} + + # === Internet Explorer Prevent participation in the Customer Experience Improvement Program - Enabled + # ------> https://admx.help/?Category=Windows_11_2022&Policy=Microsoft.Policies.InternetExplorer::SQM_DisableCEIP + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Internet Explorer\SQM', value: 'DisableCustomerImprovementProgram', type: REG_DWORD, data: '1'} + + # === Windows Messenger CEIP + # ------> https://admx.help/?Category=Windows_11_2022&Policy=Microsoft.Policies.InternetCommunicationManagement::WinMSG_NoInstrumentation_1 + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Messenger\Client', value: 'CEIP', type: REG_DWORD, data: '2'} + + # === Found in WinSxS + - !registryValue: {path: 'HKLM\Software\Microsoft\Windows NT\CurrentVersion\UnattendSettings\SQMClient', value: 'CEIPEnabled', type: REG_DWORD, data: '0'} diff --git a/src/Configuration/Tasks/registry/privacy/cloud-content.yml b/src/Configuration/Tasks/registry/privacy/cloud-content.yml new file mode 100644 index 00000000..b32f11e1 --- /dev/null +++ b/src/Configuration/Tasks/registry/privacy/cloud-content.yml @@ -0,0 +1,42 @@ +--- +title: Configure Privacy -> Cloud Content +description: Configure Cloud Content +privilege: TrustedInstaller +actions: + + # === Do not show Windows Tips - Enabled + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\CloudContent', value: 'DisableSoftLanding', type: REG_DWORD, data: '1'} + + # === Turn off Microsoft consumer experiences - Enabled + # ------> Breaks Your Phone + # ------> https://superuser.com/a/1409309 + # [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CloudContent] + # "DisableWindowsConsumerFeatures"=dword:00000001 + + # === Configure Windows spotlight on lock screen - Disabled + - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows\CloudContent', value: 'ConfigureWindowsSpotlight', type: REG_DWORD, data: '2'} + + # === Include content from Enterprise spotlight - Disabled + - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows\CloudContent', value: 'IncludeEnterpriseSpotlight', type: REG_DWORD, data: '0'} + + # === Do not suggest third-party content in Windows spotlight - Enabled + - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows\CloudContent', value: 'DisableThirdPartySuggestions', type: REG_DWORD, data: '1'} + + # === Do not use diagnostic data for tailored experiences - Enabled + - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows\CloudContent', value: 'DisableTailoredExperiencesWithDiagnosticData', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\CloudContent', value: 'DisableTailoredExperiencesWithDiagnosticData', type: REG_DWORD, data: '1'} + + # === Turn off all Windows spotlight features - Enabled + - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows\CloudContent', value: 'DisableWindowsSpotlightFeatures', type: REG_DWORD, data: '1'} + + # === Turn off the Windows Welcome Experience - Enabled + - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows\CloudContent', value: 'DisableWindowsSpotlightWindowsWelcomeExperience', type: REG_DWORD, data: '1'} + + # === Turn off Windows Spotlight on Action Center - Enabled + - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows\CloudContent', value: 'DisableWindowsSpotlightOnActionCenter', type: REG_DWORD, data: '1'} + + # === Turn off Windows Spotlight on Settings - Enabled + - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows\CloudContent', value: 'DisableWindowsSpotlightOnSettings', type: REG_DWORD, data: '1'} + + # === Turn off cloud optimized content - Enabled + - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\CloudContent', value: 'DisableCloudOptimizedContent', type: REG_DWORD, data: '1'} \ No newline at end of file diff --git a/src/Configuration/Tasks/registry/privacy/privacy.yml b/src/Configuration/Tasks/registry/privacy/privacy.yml new file mode 100644 index 00000000..fefcb82a --- /dev/null +++ b/src/Configuration/Tasks/registry/privacy/privacy.yml @@ -0,0 +1,106 @@ +--- +title: configure-privacy +description: configure-privacy +privilege: TrustedInstaller +actions: + + + # =================== + # === App runtime === + # =================== + + # === Allow Microsoft accounts to be optional - Enabled + - !registryValue: {path: 'HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System', value: 'MSAOptional', type: REG_DWORD, data: '1'} + + + # ================= + # === Messaging === + # ================= + + # === Allow Message Service Cloud Sync - Disabled + # ------> Disables backup and restore of cellular text messages to Microsoft's cloud service + # ------> https://admx.help/?Category=Windows_11_2022&Policy=Microsoft.Policies.Messaging::AllowMessageSync + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\Messaging', value: 'AllowMessageSync', type: REG_DWORD, data: '0'} + + + # =============== + # === Edge UI === + # =============== + + # === Disable help tips - Enabled + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\EdgeUI', value: 'DisableHelpSticker', type: REG_DWORD, data: '1'} + + # === Turn off tracking of app usage - Enabled + - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows\EdgeUI', value: 'DisableMFUTracking', type: REG_DWORD, data: '1'} + + # =========================================================== + # === Restrict Internet communication (HKEY_CURRENT_USER) === + # =========================================================== + # ------> https://admx.help/?Category=Windows_11_2022&Policy=Microsoft.Policies.InternetCommunicationManagement::InternetManagement_RestrictCommunication_1 + - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer', value: 'NoPublishingWizard', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer', value: 'NoWebServices', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows NT\CurrentVersion\Software Protection Platform', value: 'NoGenTicket', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer', value: 'NoOnlinePrintsWizard', type: REG_DWORD, data: '1'} + # - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Messenger\Client', value: 'CEIP', type: REG_DWORD, data: '2'} + - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer', value: 'NoInternetOpenWith', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows NT\Printers', value: 'DisableHTTPPrinting', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows NT\Printers', value: 'DisableWebPnPDownload', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows\HandwritingErrorReports', value: 'PreventHandwritingErrorReports', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows\TabletPC', value: 'PreventHandwritingDataSharing', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Assistance\Client\1.0', value: 'NoOnlineAssist', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Assistance\Client\1.0', value: 'NoExplicitFeedback', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Assistance\Client\1.0', value: 'NoImplicitFeedback', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\WindowsMovieMaker', value: 'WebHelp', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\WindowsMovieMaker', value: 'CodecDownload', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\WindowsMovieMaker', value: 'WebPublish', type: REG_DWORD, data: '1'} + + # ============================================================ + # === Restrict Internet communication (HKEY_LOCAL_MACHINE) === + # ============================================================ + # ------> https://admx.help/?Category=Windows_11_2022&Policy=Microsoft.Policies.InternetCommunicationManagement::InternetManagement_RestrictCommunication_2 + - !registryValue: {path: 'HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer', value: 'NoPublishingWizard', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer', value: 'NoWebServices', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows NT\CurrentVersion\Software Protection Platform', value: 'NoGenTicket', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer', value: 'NoOnlinePrintsWizard', type: REG_DWORD, data: '1'} + # - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Messenger\Client', value: 'CEIP', type: REG_DWORD, data: '2'} + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\PCHealth\HelpSvc', value: 'Headlines', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\PCHealth\HelpSvc', value: 'MicrosoftKBSearch', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting', value: 'DoReport', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\Windows Error Reporting', value: 'Disabled', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer', value: 'NoInternetOpenWith', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\Internet Connection Wizard', value: 'ExitOnMSICW', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\EventViewer', value: 'MicrosoftEventVwrDisableLinks', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\Registration Wizard Control', value: 'NoRegistration', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\SearchCompanion', value: 'DisableContentFileUpdates', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows NT\Printers', value: 'DisableHTTPPrinting', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows NT\Printers', value: 'DisableWebPnPDownload', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\DriverSearching', value: 'DontSearchWindowsUpdate', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\HandwritingErrorReports', value: 'PreventHandwritingErrorReports', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\TabletPC', value: 'PreventHandwritingDataSharing', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\WindowsMovieMaker', value: 'WebHelp', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\WindowsMovieMaker', value: 'CodecDownload', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\WindowsMovieMaker', value: 'WebPublish', type: REG_DWORD, data: '1'} + # - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\SQMClient\Windows', value: 'CEIPEnable', type: REG_DWORD, data: '0'} + + # === NVIDIA Telemetry - Disabled + - !registryValue: {path: 'HKCU\Software\NVIDIA Corporation\NVControlPanel2\Client', value: 'OptInOrOutPreference', type: REG_DWORD, data: '0'} + + # [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\NetworkConnectivityStatusIndicator] + # "NoActiveProbe"=dword:00000001 + # ---> Block CEIP, Telemetry Client and Windows Insider via Firewall + # "Block Cortana ActionUriServer.exe"="v2.26|Action=Block|Active=TRUE|Dir=Out|RA42=IntErnet|RA62=IntErnet|App=C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\ActionUriServer.exe|Name=Block Cortana ActionUriServer.exe|Desc=Block Cortana Outbound UDP/TCP Traffic|" + - !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Services\SharedAccess\Defaults\FirewallPolicy\FirewallRules', value: 'Block-Unified-Telemetry-Client', type: REG_SZ, data: 'v2.31|Action=Block|Active=TRUE|Dir=Out|RA42=IntErnet|RA62=IntErnet|App=%SystemRoot%\system32\svchost.exe|Svc=DiagTrack|Name=Block-Unified-Telemetry-Client|Desc=Block-Unified-Telemetry-Client|EmbedCtxt=DiagTrack|'} + - !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Services\SharedAccess\Defaults\FirewallPolicy\FirewallRules', value: 'Block-Windows-Error-Reporting', type: REG_SZ, data: 'v2.31|Action=Block|Active=TRUE|Dir=Out|RA42=IntErnet|RA62=IntErnet|App=%SystemRoot%\system32\svchost.exe|Svc=WerSvc|Name=Block-Unified-Error-Reporting|Desc=Block-Windows-Error-Reporting|EmbedCtxt=WerSvc|'} + # Breaks Xbox + # - !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Services\SharedAccess\Defaults\FirewallPolicy\FirewallRules', value: 'Block-Windows-Insider', type: REG_SZ, data: 'v2.31|Action=Block|Active=TRUE|Dir=Out|RA42=IntErnet|RA62=IntErnet|App=%SystemRoot%\system32\svchost.exe|Svc=wisvc|Name=Block-Windows-Insider|Desc=Block-Windows-Insider|EmbedCtxt=wisvc|'} + # "Block-Windows-Error-Reporting-2"="v2.31|Action=Block|Active=TRUE|Dir=Out|RA42=IntErnet|RA62=IntErnet|App=%SystemRoot%\system32\WerFaultSecure.exe|Name=Block-Windows-Error-Reporting-2|Desc=Block-Windows-Error-Reporting-2" + # "Block-Windows-Error-Reporting-3"="v2.31|Action=Block|Active=TRUE|Dir=Out|RA42=IntErnet|RA62=IntErnet|App=%SystemRoot%\system32\dmclient.exe|Name=Block-Windows-Error-Reporting-3|Desc=Block-Windows-Error-Reporting-3" + # "Block-Windows-Error-Reporting-4"="v2.31|Action=Block|Active=TRUE|Dir=Out|RA42=IntErnet|RA62=IntErnet|App=%SystemRoot%\system32\DWWIN.exe|Name=Block-Windows-Error-Reporting-4|Desc=Block-Windows-Error-Reporting-4" + # "Block-Windows-Error-Reporting-5"="v2.31|Action=Block|Active=TRUE|Dir=Out|RA42=IntErnet|RA62=IntErnet|App=%SystemRoot%\SysWOW64\svchost.exe|Svc=WerSvc|Name=Block-Unified-Telemetry-Client|Desc=Block-Windows-Error-Reporting-5|EmbedCtxt=WerSvc|" + # "Block-Windows-Error-Reporting-6"="v2.31|Action=Block|Active=TRUE|Dir=Out|RA42=IntErnet|RA62=IntErnet|App=%SystemRoot%\SysWOW64\WerFaultSecure.exe|Name=Block-Windows-Error-Reporting-2|Desc=Block-Windows-Error-Reporting-6" + # "Block-Windows-Error-Reporting-7"="v2.31|Action=Block|Active=TRUE|Dir=Out|RA42=IntErnet|RA62=IntErnet|App=%SystemRoot%\SysWOW64\dmclient.exe|Name=Block-Windows-Error-Reporting-3|Desc=Block-Windows-Error-Reporting-7" + # "Block-Windows-Error-Reporting-8"="v2.31|Action=Block|Active=TRUE|Dir=Out|RA42=IntErnet|RA62=IntErnet|App=%SystemRoot%\SysWOW64\DWWIN.exe|Name=Block-Windows-Error-Reporting-4|Desc=Block-Windows-Error-Reporting-8" + - !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules', value: 'Block-Unified-Telemetry-Client', type: REG_SZ, data: 'v2.31|Action=Block|Active=TRUE|Dir=Out|RA42=IntErnet|RA62=IntErnet|App=%SystemRoot%\system32\svchost.exe|Svc=DiagTrack|Name=Block-Unified-Telemetry-Client|Desc=Block-Unified-Telemetry-Client|EmbedCtxt=DiagTrack|'} + - !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules', value: 'Block-Windows-Error-Reporting', type: REG_SZ, data: 'v2.31|Action=Block|Active=TRUE|Dir=Out|RA42=IntErnet|RA62=IntErnet|App=%SystemRoot%\system32\svchost.exe|Svc=WerSvc|Name=Block-Unified-Telemetry-Client|Desc=Block-Windows-Error-Reporting|EmbedCtxt=WerSvc|'} + # Breaks Xbox + # - !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules', value: 'Block-Windows-Insider', type: REG_SZ, data: 'v2.31|Action=Block|Active=TRUE|Dir=Out|RA42=IntErnet|RA62=IntErnet|App=%SystemRoot%\system32\svchost.exe|Svc=wisvc|Name=Block-Windows-Insider|Desc=Block-Windows-Insider|EmbedCtxt=wisvc|'} diff --git a/src/Configuration/Tasks/registry/privacy/telemetry.yml b/src/Configuration/Tasks/registry/privacy/telemetry.yml new file mode 100644 index 00000000..6a4c1d33 --- /dev/null +++ b/src/Configuration/Tasks/registry/privacy/telemetry.yml @@ -0,0 +1,55 @@ +--- +title: Configure Privacy -> Data Collection +description: Configure Data Collection, Telemetry +privilege: TrustedInstaller +actions: + + # === Allow Telemetry - Disabled + - !registryValue: {path: 'HKCU\SOFTWARE\Policies\Microsoft\Windows\DataCollection', value: 'AllowTelemetry', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\DataCollection', value: 'AllowTelemetry', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\DataCollection', value: 'AllowTelemetry', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\DataCollection', value: 'AllowTelemetry', type: REG_DWORD, data: '0'} + + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\default\System\AllowTelemetry', value: 'value', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CPSS\DevicePolicy\AllowTelemetry', value: 'DefaultValue', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CPSS\Store\AllowTelemetry', value: 'Value', type: REG_DWORD, data: '0'} + + # === Allow commercial data pipeline - Disabled + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\DataCollection', value: 'AllowCommercialDataPipeline', type: REG_DWORD, data: '0'} + + # === Allow device name to be sent in Windows diagnostic data - Disabled + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\DataCollection', value: 'AllowDeviceNameInTelemetry', type: REG_DWORD, data: '0'} + + # === Configure Authenticated Proxy usage for the Connected User Experience and Telemetry service - Disabled + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\DataCollection', value: 'DisableEnterpriseAuthProxy', type: REG_DWORD, data: '1'} + + # === Configure collection of browsing data for Desktop Analytics - Do not allow sending intranet or internet history (Disabled) + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\DataCollection', value: 'MicrosoftEdgeDataOptIn', type: REG_DWORD, data: '0'} + + # === Configure telemetry opt-in change notifications - Disable telemetry change notifications + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\DataCollection', value: 'DisableTelemetryOptInChangeNotification', type: REG_DWORD, data: '1'} + + # === Configure telemetry opt-in setting user interface - Disable telemetry opt-in Settings + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\DataCollection', value: 'DisableTelemetryOptInSettingsUx', type: REG_DWORD, data: '1'} + + # === Disable pre-release features or settings - Enabled + # ------> If you disable this policy setting, all experimentations will be turned off. + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\PreviewBuilds', value: 'EnableConfigFlighting', type: REG_DWORD, data: '0'} + + # === Do not show feedback notifications - Enabled + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\DataCollection', value: 'DoNotShowFeedbackNotifications', type: REG_DWORD, data: '1'} + + # === Limit Enhanced diagnostic data to the minimum required by Windows Analytics - Disable Windows Analytics collection + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\DataCollection', value: 'LimitEnhancedDiagnosticDataWindowsAnalytics', type: REG_DWORD, data: '0'} + + # === Toggle user control over Insider builds - Disabled + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\DataCollection', value: 'AllowBuildPreview', type: REG_DWORD, data: '0'} + + # === Limit Diagnostic Log Collection - Enabled + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\DataCollection', value: 'LimitDiagnosticLogCollection', type: REG_DWORD, data: '1'} + + # === Limit Dump Collection - Enabled + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\DataCollection', value: 'LimitDumpCollection', type: REG_DWORD, data: '1'} + + # === Allow Experimentation - Disabled + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\System', value: 'AllowExperimentation', type: REG_DWORD, data: '0'} \ No newline at end of file diff --git a/src/Configuration/Tasks/registry/privacy/wer.yml b/src/Configuration/Tasks/registry/privacy/wer.yml new file mode 100644 index 00000000..b01558f5 --- /dev/null +++ b/src/Configuration/Tasks/registry/privacy/wer.yml @@ -0,0 +1,30 @@ +--- +title: Configure Privacy -> Windows Error Reporting +description: Configure Windows Error Reporting +privilege: TrustedInstaller +actions: + + # === Automatically send memory dumps for OS-generated error reports - Disabled + - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting', value: 'AutoApproveOSDumps', type: REG_DWORD, data: '0'} + + # === Disable logging - Enabled + - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting', value: 'LoggingDisabled', type: REG_DWORD, data: '1'} + + # === Disable Windows Error Reporting - Enabled + - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting', value: 'Disabled', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\Windows Error Reporting', value: 'Disabled', type: REG_DWORD, data: '1'} + + # === DefaultConsent + - !registryValue: {path: 'HKLM\Software\Microsoft\Windows\Windows Error Reporting\Consent', value: 'DefaultConsent', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKLM\Software\Microsoft\Windows\Windows Error Reporting\Consent', value: 'DefaultOverrideBehavior', type: REG_DWORD, data: '1'} + + # === Do not send additional data - Enabled + - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting', value: 'DontSendAdditionalData', type: REG_DWORD, data: '1'} + + # === Prevent display of the user interface for critical errors - Enabled + - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting', value: 'DontShowUI', type: REG_DWORD, data: '1'} + + # ======> Consent + # === Customize consent settings - (Disable) Windows Error Reporting sends no data to Microsoft for this event type + # ------> https://admx.help/?Category=Windows_11_2022&Policy=Microsoft.Policies.WindowsErrorReporting::WerConsentCustomize_2 + - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting\Consent', value: '0', type: REG_SZ, data: ''} \ No newline at end of file diff --git a/src/Configuration/Tasks/registry/security/bitlocker.yml b/src/Configuration/Tasks/registry/security/bitlocker.yml new file mode 100644 index 00000000..fe766295 --- /dev/null +++ b/src/Configuration/Tasks/registry/security/bitlocker.yml @@ -0,0 +1,9 @@ +--- +title: Configure Security -> BitLocker +description: Configure BitLocker settings +privilege: TrustedInstaller +actions: + + # === Disable Automatic Device Encryption (BitLocker) + # https://learn.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-device-encryption-overview-windows-10#bitlocker-device-encryption + - !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Control\BitLocker', value: 'PreventDeviceEncryption', type: REG_DWORD, data: '1'} \ No newline at end of file diff --git a/src/Configuration/Tasks/registry/security/security.yml b/src/Configuration/Tasks/registry/security/security.yml new file mode 100644 index 00000000..f5fe815c --- /dev/null +++ b/src/Configuration/Tasks/registry/security/security.yml @@ -0,0 +1,86 @@ +--- +title: Configure Security +description: Configure security settings +privilege: TrustedInstaller +actions: + + # === Hide the Account Protection page in Defender + # ------> Everything it provides redirects to the Windows Settings anyway. Done for annoyance reduction. + - !registryValue: {path: 'HKCU\Software\Microsoft\Windows Security Health\State', value: 'AccountProtection_MicrosoftAccount_Disconnected', type: REG_DWORD, data: '0'} + + # === Windows Defender Antivirus + # In early days of ReviOS, Defender used to disabled via registry. We now use a different method and makes most of policies & registries obsolete. Therefore, we've removed most of the comments. + + # ============================================== + # === Windows Defender Antivirus - Reporting === + # ============================================== + + # === Configure Watson events - Disabled + # ------> https://docs.microsoft.com/en-us/windows/privacy/configure-windows-diagnostic-data-in-your-organization + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows Defender\Reporting', value: 'DisableGenericRePorts', type: REG_DWORD, data: '1'} + + # === Turn off enhanced notifications - Enabled + # [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Reporting] + # "DisableEnhancedNotifications"=dword:00000001 + + # ================================================================== + # === Windows Defender Antivirus - Security Intelligence Updates === + # ================================================================== + + # === Allow security intelligence updates when running on battery power - Disabled + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows Defender\Signature Updates', value: 'DisableScheduledSignatureUpdateOnBattery', type: REG_DWORD, data: '1'} + + + # ==================================== + # === Windows Defender SmartScreen === + # ==================================== + + # === Configure App Install Control - Enabled + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows Defender\SmartScreen', value: 'ConfigureAppInstallControlEnabled', type: REG_DWORD, data: '1'} + + # === Pick one of the following settings - Turn off app recommendations + # ------> https://admx.help/?Category=Windows_11_2022&Policy=Microsoft.Policies.SmartScreen::ConfigureAppInstallControl + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows Defender\SmartScreen', value: 'ConfigureAppInstallControl', type: REG_SZ, data: 'Anywhere'} + + - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\AppHost', value: 'EnableWebContentEvaluation', type: REG_DWORD, data: '0'} + + # === Configure Windows Defender SmartScreen - Disabled + # - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\System', value: 'EnableSmartScreen', type: REG_DWORD, data: '0'} + # - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\smartscreen.exe', value: 'Debugger', type: REG_SZ, data: '%windir%\System32\taskkill.exe'} + + # === Configure Windows Defender SmartScreen (Microsoft Edge) - Disabled + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\MicrosoftEdge\PhishingFilter', value: 'EnabledV9', type: REG_DWORD, data: '0'} + + + # ======================== + # === Windows Security === + # ======================== + + # === Hide Windows Security Systray - Enabled + # ------> https://www.tenforums.com/tutorials/11974-hide-show-windows-security-notification-area-icon-windows-10-a.html + - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Systray', value: 'HideSystray', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run', value: 'SecurityHealth', operation: delete} + + # Discarded: + + # ============================ + # === Spectre and Meltdown === + # ============================ + + # === Spectre and Meltdown Mitigations + # ------> While disabling it could potentially increase performance on older hardware, some users have reported that it causes system instability. + # ------> FeatureSettings has to be set to 1 hexadecimal to fully disable these security protections. + # - !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Control\Session Manager\Memory Management', value: 'FeatureSettings', type: REG_DWORD, data: '1'} + # - !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Control\Session Manager\Memory Management', value: 'FeatureSettingsOverride', type: REG_DWORD, data: '3'} + # - !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Control\Session Manager\Memory Management', value: 'FeatureSettingsOverrideMask', type: REG_DWORD, data: '3'} + + # ============================================================= + # === Service Control Manager Settings -> Security Settings === + # ============================================================= + + # === Enable svchost.exe mitigation options - Disabled + # ------> Don't enforce stricter svchost.exe services policy. + # [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SCMConfig] + # "EnableSvchostMitigationPolicy"=dword:00000000 + # [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SCMConfig] + # "EnableSvchostMitigationPolicy"=dword:00000000 \ No newline at end of file diff --git a/src/Configuration/Tasks/registry/security/vbs.yml b/src/Configuration/Tasks/registry/security/vbs.yml new file mode 100644 index 00000000..2f67712b --- /dev/null +++ b/src/Configuration/Tasks/registry/security/vbs.yml @@ -0,0 +1,30 @@ +--- +title: Configure Security -> Virtualization Based Security +description: Configure VBS +privilege: TrustedInstaller +actions: + + # Disabling VBS improves gaming performance + # https://support.microsoft.com/en-us/windows/options-to-optimize-gaming-performance-in-windows-11-a255f612-2949-4373-a566-ff6f3f474613 + + - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard', value: 'EnableVirtualizationBasedSecurity', type: REG_DWORD, data: '0'} + + - !registryValue: {path: 'HKLM\SYSTEM\Policies\Microsoft\Windows\DeviceGuard', value: 'HVCIMATRequired', type: REG_DWORD, data: '0'} + + - !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Control\DeviceGuard', value: 'Locked', type: REG_DWORD, data: '0'} + + - !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Control\DeviceGuard', value: 'RequirePlatformSecurityFeatures', type: REG_DWORD, data: '0'} + + - !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Control\DeviceGuard', value: 'EnableVirtualizationBasedSecurity', type: REG_DWORD, data: '0'} + + - !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity', value: 'Enabled', type: REG_DWORD, data: '0'} + + - !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity', value: 'ChangedInBootCycle', operation: delete} + + - !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity', value: 'HVCIMATRequired', type: REG_DWORD, data: '0'} + + - !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity', value: 'Locked', type: REG_DWORD, data: '0'} + + - !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity', value: 'WasEnabledBy', operation: delete} + + - !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Control\Lsa', value: 'LsaCfgFlags', type: REG_DWORD, data: '0'} \ No newline at end of file diff --git a/src/Configuration/features/revision/registry/disable-disk-checking.yml b/src/Configuration/Tasks/registry/system/boot.yml similarity index 64% rename from src/Configuration/features/revision/registry/disable-disk-checking.yml rename to src/Configuration/Tasks/registry/system/boot.yml index 8fe38bf5..524fcb58 100644 --- a/src/Configuration/features/revision/registry/disable-disk-checking.yml +++ b/src/Configuration/Tasks/registry/system/boot.yml @@ -1,8 +1,8 @@ --- -title: disable-disk-checking -description: disable-disk-checking +title: Configure boot +description: Configure boot settings privilege: TrustedInstaller actions: - # === autocheck autochk /k:C* + # === Disable automatic disk checking on boot - !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Control\Session Manager', value: 'BootExecute', type: REG_MULTI_SZ, data: 'autocheck autochk /k:C*'} diff --git a/src/Configuration/features/revision/registry/bypass-requirements.yml b/src/Configuration/Tasks/registry/system/bypass-requirements.yml similarity index 90% rename from src/Configuration/features/revision/registry/bypass-requirements.yml rename to src/Configuration/Tasks/registry/system/bypass-requirements.yml index fa5d0efa..f8cde552 100644 --- a/src/Configuration/features/revision/registry/bypass-requirements.yml +++ b/src/Configuration/Tasks/registry/system/bypass-requirements.yml @@ -1,6 +1,6 @@ --- -title: bypass-requirements -description: bypass-requirements +title: Bypass requirements +description: Bypass requirements for Windows 11 installation, most of them are only for boot.wim privilege: TrustedInstaller actions: diff --git a/src/Configuration/features/revision/registry/configure-crash-control.yml b/src/Configuration/Tasks/registry/system/crash-control.yml similarity index 89% rename from src/Configuration/features/revision/registry/configure-crash-control.yml rename to src/Configuration/Tasks/registry/system/crash-control.yml index 6c8156a1..7f346b9c 100644 --- a/src/Configuration/features/revision/registry/configure-crash-control.yml +++ b/src/Configuration/Tasks/registry/system/crash-control.yml @@ -1,6 +1,6 @@ --- -title: configure-crash-control -description: configure-crash-control +title: Configure Crash Control +description: Configure general settings for crash control privilege: TrustedInstaller actions: diff --git a/src/Configuration/features/revision/registry/disable-automatic-maintenance.yml b/src/Configuration/Tasks/registry/system/disable-automatic-maintenance.yml similarity index 92% rename from src/Configuration/features/revision/registry/disable-automatic-maintenance.yml rename to src/Configuration/Tasks/registry/system/disable-automatic-maintenance.yml index f5f8d7c1..a3e9789e 100644 --- a/src/Configuration/features/revision/registry/disable-automatic-maintenance.yml +++ b/src/Configuration/Tasks/registry/system/disable-automatic-maintenance.yml @@ -9,5 +9,5 @@ actions: # ------> https://www.tenforums.com/tutorials/40119-enable-disable-automatic-maintenance-windows-10-a.html - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Maintenance', value: 'MaintenanceDisabled', type: REG_DWORD, data: '1'} # === Configure Scheduled Maintenance Behavior - Disabled - # ------> https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.ScheduledDiagnostics::ScheduledDiagnosticsExecutionPolicy + # ------> https://admx.help/?Category=Windows_11_2022&Policy=Microsoft.Policies.ScheduledDiagnostics::ScheduledDiagnosticsExecutionPolicy - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\ScheduledDiagnostics', value: 'EnabledExecution', type: REG_DWORD, data: '0'} diff --git a/src/Configuration/features/revision/registry/configure-ifeo.yml b/src/Configuration/Tasks/registry/system/ifeo.yml similarity index 98% rename from src/Configuration/features/revision/registry/configure-ifeo.yml rename to src/Configuration/Tasks/registry/system/ifeo.yml index 6fef06c8..75f994f5 100644 --- a/src/Configuration/features/revision/registry/configure-ifeo.yml +++ b/src/Configuration/Tasks/registry/system/ifeo.yml @@ -4,11 +4,11 @@ description: configure-ifeo privilege: TrustedInstaller actions: - # === CEIP + # === CEIP - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\CompatTelRunner.exe', value: 'Debugger', type: REG_SZ, data: '%windir%\System32\taskkill.exe'} - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\AggregatorHost.exe', value: 'Debugger', type: REG_SZ, data: '%windir%\System32\taskkill.exe'} - # === Webcam Telemetry + # === Webcam Telemetry - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DeviceCensus.exe', value: 'Debugger', type: REG_SZ, data: '%windir%\System32\taskkill.exe'} # === Microsoft PC Manager spread diff --git a/src/Configuration/features/revision/registry/configure-kernel.yml b/src/Configuration/Tasks/registry/system/kernel.yml similarity index 100% rename from src/Configuration/features/revision/registry/configure-kernel.yml rename to src/Configuration/Tasks/registry/system/kernel.yml diff --git a/src/Configuration/Tasks/registry/system/logon.yml b/src/Configuration/Tasks/registry/system/logon.yml new file mode 100644 index 00000000..679c5d4c --- /dev/null +++ b/src/Configuration/Tasks/registry/system/logon.yml @@ -0,0 +1,35 @@ +--- +title: Configure System -> Logon +description: Configure logon settings +privilege: TrustedInstaller +actions: + + # ============= + # === Logon === + # ============= + # === Always use classic logon - Disabled + # ------> Outdated tweak + # [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] + # "LogonType"=dword:00000001 + + # === Show first sign-in animation - Disabled + - !registryValue: {path: 'HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System', value: 'EnableFirstLogonAnimation', type: REG_DWORD, data: '0'} + + # === Turn off Windows Startup sound - Enabled + - !registryValue: {path: 'HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System', value: 'DisableStartupSound', type: REG_DWORD, data: '1'} + + # ======================================== + # === Control Panel -> Personalization === + # ======================================== + # === Do not display the lock screen - Enabled + # ------> This won't skip the password/pin screen. + # [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Personalizaion] + # "NoLockScreen"=dword:00000001 + + # ============================= + # === Windows Logon Options === + # ============================= + + # === Sign-in and lock last interactive user automatically after a restart - Disabled + # ------> Prevents apps from automatically reopening after a restart or an update. + - !registryValue: {path: 'HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System', value: 'DisableAutomaticRestartSignOn', type: REG_DWORD, data: '1'} diff --git a/src/Configuration/features/revision/registry/configure-multimedia.yml b/src/Configuration/Tasks/registry/system/multimedia.yml similarity index 61% rename from src/Configuration/features/revision/registry/configure-multimedia.yml rename to src/Configuration/Tasks/registry/system/multimedia.yml index fdea0da1..fd9dc133 100644 --- a/src/Configuration/features/revision/registry/configure-multimedia.yml +++ b/src/Configuration/Tasks/registry/system/multimedia.yml @@ -4,4 +4,6 @@ description: configure-multimedia privilege: TrustedInstaller actions: + # === NetworkThrottlingIndex - 10 (default) + # -----> https://github.com/djdallmann/GamingPCSetup/blob/master/CONTENT/RESEARCH/NETWORK/README.md#networkthrottlingindex - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Multimedia\SystemProfile', value: 'NetworkThrottlingIndex', type: REG_DWORD, data: '10'} diff --git a/src/Configuration/features/revision/registry/configure-oobe.yml b/src/Configuration/Tasks/registry/system/oobe.yml similarity index 59% rename from src/Configuration/features/revision/registry/configure-oobe.yml rename to src/Configuration/Tasks/registry/system/oobe.yml index ce6fa4b7..e420217e 100644 --- a/src/Configuration/features/revision/registry/configure-oobe.yml +++ b/src/Configuration/Tasks/registry/system/oobe.yml @@ -4,45 +4,59 @@ description: configure-oobe privilege: TrustedInstaller actions: - # === Specifies whether the user will be required to sign-in during OOBE - True (uses local non-online account) + + # === Specifies whether the user will be required to sign-in during OOBE - True (uses local non-online account) - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OOBE', value: 'HideOnlineAccountScreens', type: REG_DWORD, data: '1'} - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\OOBE', value: 'HideOnlineAccountScreens', type: REG_DWORD, data: '1'} - # === Specifies whether to hide the Microsoft Software License Terms page of Windows Welcome - True (hidden) + + # === Specifies whether to hide the Microsoft Software License Terms page of Windows Welcome - True (hidden) - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OOBE', value: 'HideEULAPage', type: REG_DWORD, data: '1'} - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\OOBE', value: 'HideEULAPage', type: REG_DWORD, data: '1'} - # === Specifies that Welcome Center is shown - False (doesn't skip OOBE setup) + + # === Specifies that Welcome Center is shown - False (doesn't skip OOBE setup) - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OOBE', value: 'SkipMachineOOBE', type: REG_DWORD, data: '0'} - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\OOBE', value: 'SkipMachineOOBE', type: REG_DWORD, data: '0'} - # === Specifies that Welcome Center is shown - False (doesn't skip OOBE setup) + + # === Specifies that Welcome Center is shown - False (doesn't skip OOBE setup) - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OOBE', value: 'SkipUserOOBE', type: REG_DWORD, data: '0'} - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\OOBE', value: 'SkipUserOOBE', type: REG_DWORD, data: '0'} - # === Specifies whether to hide the Join Wireless Network screen that appears during Windows Welcome - True (hidden) + + # === Specifies whether to hide the Join Wireless Network screen that appears during Windows Welcome - True (hidden) - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OOBE', value: 'HideWirelessSetupInOOBE', type: REG_DWORD, data: '1'} - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\OOBE', value: 'HideWirelessSetupInOOBE', type: REG_DWORD, data: '1'} - # === Specifies the location of the network if the computer is connected to a network when a user first logs on - Home (keeps Network discovery enabled out of box) + + # === Specifies the location of the network if the computer is connected to a network when a user first logs on - Home (keeps Network discovery enabled out of box) - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OOBE', value: 'NetworkLocation', type: REG_SZ, data: 'Home'} - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\OOBE', value: 'NetworkLocation', type: REG_SZ, data: 'Home'} - # === Turns off the things listed below: - # • Personalize speech, typing, and inking input by sending contacts and calendar details, along with other associated input data to Microsoft. - # • Let Windows and apps request the user's localization, including location history, and use the advertising ID to personalize experiences on the device. - # • Turn on protection from malicious web content and use page prediction to pre-load sites in Windows browsers, which sends the browsing history to Microsoft. - # • Automatically connect to suggested open and shared networks. - # • Send problem reports to Microsoft. - # ------> https://docs.microsoft.com/en-us/windows-hardware/customize/desktop/unattend/microsoft-windows-shell-setup-oobe-protectyourpc + + # === Turns off the things listed below: + # • Personalize speech, typing, and inking input by sending contacts and calendar details, along with other associated input data to Microsoft. + # • Let Windows and apps request the user's localization, including location history, and use the advertising ID to personalize experiences on the device. + # • Turn on protection from malicious web content and use page prediction to pre-load sites in Windows browsers, which sends the browsing history to Microsoft. + # • Automatically connect to suggested open and shared networks. + # • Send problem reports to Microsoft. + # ------> https://docs.microsoft.com/en-us/windows-hardware/customize/desktop/unattend/microsoft-windows-shell-setup-oobe-protectyourpc - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OOBE', value: 'ProtectYourPC', type: REG_DWORD, data: '3'} - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\OOBE', value: 'ProtectYourPC', type: REG_DWORD, data: '3'} - # === Specifies whether end users must set the Administrator password screen that appears during OOBE - False (default) + + # === Specifies whether end users must set the Administrator password screen that appears during OOBE - False (default) - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OOBE', value: 'HideLocalAccountScreen', type: REG_DWORD, data: '0'} - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\OOBE', value: 'HideLocalAccountScreen', type: REG_DWORD, data: '0'} - # === Privacy settings page in OOBE - Disabled - # ------> https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.OOBE%20%20::DisablePrivacyExperience + + # === Privacy settings page in OOBE - Disabled + # ------> https://admx.help/?Category=Windows_11_2022&Policy=Microsoft.Policies.OOBE%20%20::DisablePrivacyExperience - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OOBE', value: 'DisablePrivacyExperience', type: REG_DWORD, data: '1'} - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\OOBE', value: 'DisablePrivacyExperience', type: REG_DWORD, data: '1'} - # === Specifies whether the OEM registration page appears during OOBE - True (hidden) + + # === Specifies whether the OEM registration page appears during OOBE - True (hidden) - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OOBE', value: 'HideOEMRegistrationScreen', type: REG_DWORD, data: '1'} - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\OOBE', value: 'HideOEMRegistrationScreen', type: REG_DWORD, data: '1'} - # === Use this setting to control whether Cortana voice-over is enabled during OOBE - False (does not use Cortana voice during OOBE) + + # === Use this setting to control whether Cortana voice-over is enabled during OOBE - False (does not use Cortana voice during OOBE) - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OOBE', value: 'EnableCortanaVoice', type: REG_DWORD, data: '0'} - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\OOBE', value: 'EnableCortanaVoice', type: REG_DWORD, data: '0'} - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OOBE', value: 'DisableVoice', type: REG_DWORD, data: '1'} - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\OOBE', value: 'DisableVoice', type: REG_DWORD, data: '1'} + + # Let Skype (if installed) help you connect with friends in your address book and verify your mobile number - Disabled + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OOBE\AppSettings', value: 'Skype-UserConsentAccepted', type: REG_DWORD, data: '0'} \ No newline at end of file diff --git a/src/Configuration/Tasks/registry/system/power.yml b/src/Configuration/Tasks/registry/system/power.yml new file mode 100644 index 00000000..ccc9be65 --- /dev/null +++ b/src/Configuration/Tasks/registry/system/power.yml @@ -0,0 +1,32 @@ +--- +title: configure-power-control +description: configure-power-control +privilege: TrustedInstaller +actions: + + # === Require use of fast startup - Disabled + # ------> Enhances compatibility with Linux dual boot. + # ------> https://admx.help/?Category=Windows_11_2022&Policy=Microsoft.Policies.WindowsInitialization::Hiberboot + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\System', value: 'HiberbootEnabled', type: REG_DWORD, data: '0'} + + # === Disable Fast startup. + # ------> Enhances compatibility with Linux dual boot. + # ------> https://support.bromium.com/s/article/Disabling-Windows-10-Fast-Startup?language=en_US + - !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Control\Session Manager\Power', value: 'HiberbootEnabled', type: REG_DWORD, data: '0'} + + # === Shutdown Menu - Hibernate - Disabled + # ------> https://www.tenforums.com/tutorials/7445-add-remove-hibernate-power-menu-windows-10-a.html + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FlyoutMenuSettings', value: 'ShowHibernateOption', type: REG_DWORD, data: '0'} + + # === Shutdown Menu - Sleep - Enabled + # ------> https://www.tenforums.com/tutorials/7445-add-remove-hibernate-power-menu-windows-10-a.html + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FlyoutMenuSettings', value: 'ShowSleepOption', type: REG_DWORD, data: '1'} + + # === Allow system to be shut down without having to log on - Enabled + # ------> https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/shutdown-allow-system-to-be-shut-down-without-having-to-log-on + # ------> https://www.stigviewer.com/stig/windows_server_2012_member_server/2014-01-07/finding/V-1075 + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System', value: 'ShutdownWithoutLogon', type: REG_DWORD, data: '1'} + + # === Hibernation - Disabled + # ------> https://www.tenforums.com/tutorials/2859-enable-disable-hibernate-windows-10-a.html + - !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Control\Power', value: 'HibernateEnabled', type: REG_DWORD, data: '0'} diff --git a/src/Configuration/features/revision/registry/configure-win32priorityseparation.yml b/src/Configuration/Tasks/registry/system/win32ps.yml similarity index 81% rename from src/Configuration/features/revision/registry/configure-win32priorityseparation.yml rename to src/Configuration/Tasks/registry/system/win32ps.yml index dacf074b..d9affb31 100644 --- a/src/Configuration/features/revision/registry/configure-win32priorityseparation.yml +++ b/src/Configuration/Tasks/registry/system/win32ps.yml @@ -1,6 +1,6 @@ --- -title: configure-win32priorityseparation -description: configure-win32priorityseparation +title: Configure System -> Win32PrioritySeparation +description: Configure Win32PrioritySeparation privilege: TrustedInstaller actions: diff --git a/src/Configuration/Tasks/registry/updates/drivers.yml b/src/Configuration/Tasks/registry/updates/drivers.yml new file mode 100644 index 00000000..ea904d8c --- /dev/null +++ b/src/Configuration/Tasks/registry/updates/drivers.yml @@ -0,0 +1,25 @@ +--- +title: Configure Updates -> Drivers +description: Configure Windows Update settings for device drivers +privilege: TrustedInstaller +actions: + + # === Turn off Windows Update device driver searching - Enabled + - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\DriverSearching', value: 'DontSearchWindowsUpdate', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\DriverSearching', value: 'DriverUpdateWizardWuSearchEnabled', type: REG_DWORD, data: '0'} + + - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate', value: 'ExcludeWUDriversInQualityUpdate', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\WindowsUpdate\UX\Settings', value: 'ExcludeWUDriversInQualityUpdate', type: REG_DWORD, data: '1'} + + # === Turn off Windows Update device driver search prompt - Enabled + # ------> https://admx.help/?Category=Windows_11_2022&Policy=Microsoft.Policies.DeviceSoftwareSetup::DriverSearchPlaces_DontPromptForWindowsUpdate_1 + - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows\DriverSearching', value: 'DontPromptForWindowsUpdate', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\DriverSearching', value: 'DontPromptForWindowsUpdate', type: REG_DWORD, data: '1'} + + # === Prevent device metadata retrieval from the Internet - Enabled + # ------> https://admx.help/?Category=Windows_11_2022&Policy=Microsoft.Policies.DeviceSoftwareSetup::DeviceMetadata_PreventDeviceMetadataFromNetwork + - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Device Metadata', value: 'PreventDeviceMetadataFromNetwork', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Device Metadata', value: 'PreventDeviceMetadataFromNetwork', type: REG_DWORD, data: '1'} + + # === Specify search order for device driver source locations - Do not search Windows Update + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\DriverSearching', value: 'SearchOrderConfig', type: REG_DWORD, data: '0'} \ No newline at end of file diff --git a/src/Configuration/Tasks/registry/updates/internet-explorer.yml b/src/Configuration/Tasks/registry/updates/internet-explorer.yml new file mode 100644 index 00000000..314c4e02 --- /dev/null +++ b/src/Configuration/Tasks/registry/updates/internet-explorer.yml @@ -0,0 +1,287 @@ +--- +title: configure-internet-explorer +description: configure-internet-explorer +privilege: TrustedInstaller +actions: + + + # =============== + # === Updates === + # =============== + + # === Disable Periodic Check for Internet Explorer software updates - Enabled + - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer\InfoDelivery\Restrictions', value: 'NoUpdateCheck', type: REG_DWORD, data: '1'} + + + # === Install new versions of Internet Explorer automatically - Disabled + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Internet Explorer\Main', value: 'EnableAutoUpgrade', type: REG_DWORD, data: '0'} + + + # =============== + # === General === + # =============== + + + # === Disable changing home page settings - Enabled + # ------> https://admx.help/?Category=Windows_11_2022&Policy=Microsoft.Policies.InternetExplorer::RestrictHomePage + - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel', value: 'HomePage', type: REG_DWORD, data: '1'} + + + # === Home Page - https://www.revi.cc/ + - !registryValue: {path: 'HKCU\Software\Microsoft\Internet Explorer\Main', value: 'Start Page', type: REG_SZ, data: 'https://www.revi.cc/'} + + + # === Notify users if Internet Explorer is not the default web browser - Disabled + - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\Main', value: 'Check_Associations', type: REG_SZ, data: 'no'} + + + # === Warn user about Home Page changes - Disabled + # ------> https://stackoverflow.com/a/39092291 + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_EUPP_GLOBAL_FORCE_DISABLE', value: 'iexplore.exe', type: REG_DWORD, data: '1'} + + + # === Changes default search engine to "https://duckduckgo.com/". + # ------> Uses Google search suggestions in the search bar. + # ------> https://duckduckgo.com/params + - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes', value: 'DefaultScope', type: REG_SZ, data: '{0633EE93-D776-472f-A0FF-E1416B8B2E3A}'} + - !registryKey: {path: 'HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}'} + - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}', value: 'DisplayName', type: REG_SZ, data: 'DuckDuckGo'} + - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}', value: 'URL', type: REG_SZ, data: 'https://duckduckgo.com/?kae=t&q={searchTerms}'} + - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}', value: 'ShowSearchSuggestions', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}', value: 'FaviconURL', type: REG_SZ, data: 'https://duckduckgo.com/?kf=1'} + - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}', value: 'SuggestionsURL', type: REG_SZ, data: 'http://clients5.google.com/complete/search?q={searchTerms}&client=ie8&mw={ie:maxWidth}&sh={ie:sectionHeight}&rh={ie:rowHeight}&inputencoding={inputEncoding}&outputencoding={outputEncoding}'} + + + # === Disables the welcome window that pops up the first time you start Internet Explorer. + - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\Main', value: 'DisableFirstRunCustomize', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Internet Explorer\Main', value: 'DisableFirstRunCustomize', type: REG_DWORD, data: '1'} + + # === Specify default behavior for a new tab - Home Page + # ------> https://admx.help/?Category=Windows_11_2022&Policy=Microsoft.Policies.InternetExplorer::NewTabAction + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Internet Explorer\TabbedBrowsing', value: 'NewTabPageShow', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\TabbedBrowsing', value: 'NewTabPageShow', type: REG_DWORD, data: '1'} + + # === Display tabs on a separate row - Enabled + # ------> https://admx.help/?Category=Windows_11_2022&Policy=Microsoft.Policies.InternetExplorer::MoveTabBand + - !registryValue: {path: 'HKCU\Software\Microsoft\Internet Explorer\MINIE', value: 'ShowTabsBelowAddressBar', type: REG_DWORD, data: '0'} + + # === Prevent Internet Explorer Search box from appearing - Enabled + - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer', value: 'NoSearchBox', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Internet Explorer', value: 'NoSearchBox', type: REG_DWORD, data: '1'} + + # === Help menu: Remove 'Send Feedback' menu option - Enabled + # ------> Disable Feedback/'Smiley' on Internet Explorer Toolbar + # ------> https://www.tenforums.com/browsers-email/9420-how-remove-send-smile-frown-internet-explorer-11-a-post685594.html#post685594 + - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions', value: 'NoHelpItemSendFeedback', type: REG_DWORD, data: '1'} + + # === Show entire link/url in address bar - Enabled + # ------> https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-gppref/3fb5c89d-d9c2-41e2-9749-f5cac492121e + - !registryValue: {path: 'HKCU\Software\Microsoft\Internet Explorer\Main', value: 'Show_FullURL', type: REG_SZ, data: 'yes'} + + # === Disables Background Sounds in Internet Explorer. + - !registryValue: {path: 'HKCU\Software\Microsoft\Internet Explorer\Main', value: 'Play_Background_Sounds', type: REG_SZ, data: 'no'} + + # === Turn on Suggested Sites - Disabled + - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer\Suggested Sites', value: 'Enabled', type: REG_DWORD, data: '0'} + + # === Hide the button (next to the New Tab button) that opens Microsoft Edge - Enabled + - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\Main', value: 'HideNewEdgeButton', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Internet Explorer\Main', value: 'HideNewEdgeButton', type: REG_DWORD, data: '1'} + + # === Immediately close iexplore.exe process after closing a tab in Internet Explorer - Enabled + # ------> https://docs.microsoft.com/en-us/archive/blogs/askie/closing-an-ie-8-tab-does-not-immediately-close-the-spawned-iexplore-exe-process + - !registryValue: {path: 'HKCU\Software\Microsoft\Internet Explorer\Main', value: 'TabShutdownDelay', type: REG_DWORD, data: '0'} + + # ============================ + + # === Security and Privacy === + + # ============================ + + # === Prevent participation in the Customer Experience Improvement Program - Enabled + # ------> https://admx.help/?Category=Windows_11_2022&Policy=Microsoft.Policies.InternetExplorer::SQM_DisableCEIP + # - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\SQM', value: 'DisableCustomerImprovementProgram', type: REG_DWORD, data: '1'} + # - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Internet Explorer\SQM', value: 'DisableCustomerImprovementProgram', type: REG_DWORD, data: '1'} + + # === Turn off Adobe Flash in Internet Explorer and prevent applications from using Internet Explorer technology to instantiate Flash objects - Enabled + # ------> https://admx.help/?Category=Windows_11_2022&Policy=Microsoft.Policies.InternetExplorer::DisableFlashInIE + - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer', value: 'DisableFlashInIE', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Internet Explorer', value: 'DisableFlashInIE', type: REG_DWORD, data: '1'} + + # === Turn off the Security Settings Check feature - Enabled + # ------> Disables the bottom bar saying "Your current security settings put your computer at risk." + # - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\Security', value: 'DisableSecuritySettingsCheck', type: REG_DWORD, data: '1'} + # - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Internet Explorer\Security', value: 'DisableSecuritySettingsCheck', type: REG_DWORD, data: '1'} + + # === Turn off the Security Settings Check feature - Enabled + # ------> Disables the bottom bar saying "Your current security settings put your computer at risk." + # - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\Security', value: 'DisableFixSecuritySettings', type: REG_DWORD, data: '1'} + # - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Internet Explorer\Security', value: 'DisableFixSecuritySettings', type: REG_DWORD, data: '1'} + + # === Check for signatures on downloaded programs - Disabled + # - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\Download', value: 'CheckExeSignatures', type: REG_SZ, data: 'no'} + + # === Allow software to run or install even if the signature is invalid - Disabled + - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\Download', value: 'RunInvalidSignatures', type: REG_DWORD, data: '0'} + + # === Always send Do Not Track header - Enabled + - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\Main', value: 'DoNotTrack', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Internet Explorer\Main', value: 'DoNotTrack', type: REG_DWORD, data: '1'} + + # === Prevent automatic discovery of feeds and Web Slices - Enabled + # ------> https://admx.help/?Category=Windows_11_2022&Policy=Microsoft.Policies.InternetExplorer::Disable_Feed_Discovery + # ------> https://admx.help/?Category=Windows_7_2008R2&Policy=Microsoft.Policies.InternetExplorer::Disable_Feed_Discovery_2 + - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\Feed Discovery', value: 'Enabled', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Internet Explorer\Feed Discovery', value: 'Enabled', type: REG_DWORD, data: '0'} + + # === Prevent managing SmartScreen Filter - Enabled + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Internet Explorer\PhishingFilter', value: 'EnabledV9', type: REG_DWORD, data: '0'} + + # === Turn off Crash Detection - Enabled + - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions', value: 'NoCrashDetection', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions', value: 'NoCrashDetection', type: REG_DWORD, data: '1'} + + # === Turn off Automatic Crash Recovery - Enabled + - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\Recovery', value: 'AutoRecover', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Internet Explorer\Recovery', value: 'AutoRecover', type: REG_DWORD, data: '0'} + + # === Turn off Reopen Last Browsing Session - Enabled + - !registryValue: {path: 'HKCU\Software\Microsoft\Internet Explorer\Recovery', value: 'NoReopenLastSession', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKLM\Software\Microsoft\Internet Explorer\Recovery', value: 'NoReopenLastSession', type: REG_DWORD, data: '1'} + + # === Disable Password Caching - Enabled + # ------> https://support.honeywellaidc.com/s/article/How-to-disable-password-caching-in-IE + - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings', value: 'DisablePasswordCaching', type: REG_DWORD, data: '1'} + + # === Allow Microsoft services to provide enhanced suggestions as the user types in the Address Bar - Disabled + - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer', value: 'AllowServicePoweredQSA', type: REG_DWORD, data: '0'} + + # === Turn off the auto-complete feature for web addresses - Enabled + - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Explorer\AutoComplete', value: 'AutoSuggest', type: REG_SZ, data: 'no'} + + # === Turn off browser geolocation - Enabled + - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer\Geolocation', value: 'PolicyDisableGeolocation', type: REG_DWORD, data: '1'} + + # === Include updated website lists from Microsoft - Disabled + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Internet Explorer\BrowserEmulation', value: 'MSCompatibilityMode', type: REG_DWORD, data: '0'} + + # === Turn off the flip ahead with page prediction feature - Enabled + # ------> The following is disabled: Microsoft collects your browsing history to improve how flip ahead with page prediction works. + # ------> https://admx.help/?Category=Windows_11_2022&Policy=Microsoft.Policies.InternetExplorer::Advanced_DisableFlipAhead + - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer\FlipAhead', value: 'Enabled', type: REG_DWORD, data: '0'} + + # === Turn off background synchronization for feeds and Web Slices - Enabled + - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer\Feeds', value: 'BackgroundSyncStatus', type: REG_DWORD, data: '0'} + + # === Turn off URL Suggestions - Enabled + - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\DomainSuggestion', value: 'Enabled', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Internet Explorer\DomainSuggestion', value: 'Enabled', type: REG_DWORD, data: '0'} + + # === Disable AutoComplete for forms - Enabled + - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\Main', value: 'Use FormSuggest', type: REG_SZ, data: 'no'} + + # === Turn on the auto-complete feature for user names and passwords on forms - Disabled + # ------> https://admx.help/?Category=Windows_11_2022&Policy=Microsoft.Policies.InternetExplorer::RestrictFormSuggestPW + - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\Main', value: 'FormSuggest Passwords', type: REG_SZ, data: 'no'} + - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\Main', value: 'FormSuggest PW Ask', type: REG_SZ, data: 'no'} + + # === Turn off InPrivate Browsing - Disabled + - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\Privacy', value: 'EnableInPrivateBrowsing', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Internet Explorer\Privacy', value: 'EnableInPrivateBrowsing', type: REG_DWORD, data: '1'} + + # === Allow deleting browsing history on exit - Enabled + # - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\Privacy', value: 'ClearBrowsingHistoryOnExit', type: REG_DWORD, data: '1'} + # - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Internet Explorer\Privacy', value: 'ClearBrowsingHistoryOnExit', type: REG_DWORD, data: '1'} + + # === Empty Temporary Internet Files folder when browser is closed - Enabled + # ------> https://admx.help/?Category=Windows_11_2022&Policy=Microsoft.Policies.InternetExplorer::Advanced_TemporaryInternetFiles + - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Cache', value: 'Persistent', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Cache', value: 'Persistent', type: REG_DWORD, data: '0'} + + # ======================== + # === Discarded Tweaks === + # ======================== + + # === Undocumented, seemingly connected to SmartScreen and PhisingFilter. + # ------> https://srkcitrix.wordpress.com/2011/07/28/disable-phishing-filter-in-ie/ + # [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PhishingFilter] + # "ShownVerifyBalloon"=dword:00000003 + # [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\PhishingFilter] + # "ShownVerifyBalloon"=dword:00000003 + + # === Turn off Managing SmartScreen Filter for Internet Explorer 8 - Enabled + # ------> Obsolete, superseded by a newer policy setting. + # [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\PhishingFilter] + # "EnabledV8"=dword:00000000 + + # === Turn off Managing Phishing filter - Enabled + # ------> Obsolete, superseded by a newer policy setting. + # [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\PhishingFilter] + # "Enabled"=dword:00000000 + + # === Prevent bypassing SmartScreen Filter warnings about files that are not commonly downloaded from the Internet - Disabled + # ------> Obsolete. + # [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\PhishingFilter] + # "PreventOverrideAppRepUnknown"=dword:00000000 + + # === Prevent bypassing SmartScreen Filter warnings - Disabled + # ------> Obsolete. + # [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\PhishingFilter] + # "PreventOverride"=dword:00000000 + + # === Makes Internet Explorer available to temporary users and disables any compatibility limitations/issues. + # ------> https://kb.cameyo.com/system-configuration/ie-firstrun-removal + # ------> Not needed, undocumented. + # [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] + # "OperationalData"=hex(b):0d,00,00,00,00,00,00,00 + # "CompatibilityFlags"=dword:00000000 + # "SearchBandMigrationVersion"=dword:00000001 + + # === Disables Animations and ClearType in Internet Explorer. + # ------> Makes Internet Explorer dull, obsolete. + # [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] + # "Play_Animations"="no" + # "UseClearType"="no" + + # === Disable “Speed up Browsing by Disabling Add-ons” Popup + # ------> https://www.askvg.com/how-to-disable-speed-up-browsing-by-disabling-add-ons-popup-notification-message-in-internet-explorer/ + # ------> Obsolete. + # [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MAO Settings] + # "AddonLoadTimeThreshold"=dword:00002710 + + # === Disable blocked content. "Allow active content to run in files on My Computer" - Disabled + # ------> Undocumented. + # [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN] + # "iexplore.exe"=dword:00000000 + + # === Prevent users from accessing Accelerators. + # ------> https://admx.help/?Category=InternetExplorer&Policy=Microsoft.Policies.InternetExplorer::TurnOffAccelerators + # ------> Lack of documentation. Undocumented. + # [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Services] + # "SelectionActivityButtonDisable"=dword:00000001 + + # === Delete stored Accelerator activities. - helps privacy + # ------> https://community.spiceworks.com/topic/1787003-can-i-mass-remove-bing-translator-from-ie11 + # ------> Obsolete and poorly documented. + # [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\Email\live.com] + # "Deleted"=dword:00000001 + # [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\Map\bing.com] + # "Deleted"=dword:00000001 + # [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\Translate\microsofttranslator.com] + # "Deleted"=dword:00000001 + + # === Configures Tabbed Browsing. + # ------> https://admx.help/HKCU/Software/Policies/Microsoft/Internet%20Explorer/TabbedBrowsing + # ------> Unwanted and forced lockdown for the user. This is personal preference and is therefore discarded. + # [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\TabbedBrowsing] + # "Enabled"=dword:00000001 + # "Groups"=dword:00000000 + # "NewTabNextToCurrent"=dword:00000001 + # "NewTabPageShow"=dword:00000001 + # "OpenAllHomePages"=dword:00000000 + # "OpenInForeground"=dword:00000000 + # "PopupsUseNewWindow"=dword:00000002 + # "QuickTabsThreshold"=dword:00000000 + # "ShortcutBehavior"=dword:00000001 + # "ThumbnailBehavior"=dword:00000000 + # "WarnOnClose"=dword:00000000 diff --git a/src/Configuration/Tasks/registry/updates/ms-store.yml b/src/Configuration/Tasks/registry/updates/ms-store.yml new file mode 100644 index 00000000..3cf9a485 --- /dev/null +++ b/src/Configuration/Tasks/registry/updates/ms-store.yml @@ -0,0 +1,12 @@ +--- +title: Configure Updates -> Microsoft Store +description: Configure Update settings for Microsoft Store +privilege: TrustedInstaller +actions: + + # === Turn off Automatic Download and Install of updates - Disabled + # ------> https://admx.help/?Category=Windows_11_2022&Policy=Microsoft.Policies.WindowsStore::DisableAutoInstall + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\WindowsStore', value: 'AutoDownload', type: REG_DWORD, data: '4'} + + # === Turn off the offer to update to the latest version of Windows - Enabled + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\WindowsStore', value: 'DisableOSUpgrade', type: REG_DWORD, data: '1'} diff --git a/src/Configuration/features/revision/registry/configure-windows-update-and-install.yml b/src/Configuration/Tasks/registry/updates/updates.yml similarity index 59% rename from src/Configuration/features/revision/registry/configure-windows-update-and-install.yml rename to src/Configuration/Tasks/registry/updates/updates.yml index 665e8083..23b9770f 100644 --- a/src/Configuration/features/revision/registry/configure-windows-update-and-install.yml +++ b/src/Configuration/Tasks/registry/updates/updates.yml @@ -1,15 +1,17 @@ --- -title: configure-windows-update-and-install -description: configure-windows-update-and-install +title: Configure general updates settings +description: Configure general updates settings privilege: TrustedInstaller actions: - # ====================== - # === Windows Update === - # ====================== - # === Configure Automatic Updates - Disabled - # ------> NOTE: Used to break Xbox Sign-in + # ====================== + # === Windows Update === + # ====================== + + + # === Configure Automatic Updates - Disabled + # ------> NOTE: Used to break Xbox Sign-in in older Windows 10 versions # - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'NoAutoUpdate', type: REG_DWORD, data: '1'} # === Pause Windows Updates to 2038 January 19 @@ -36,14 +38,17 @@ actions: # # === Turn on recommended updates via Automatic Updates - Disabled # - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'IncludeRecommendedUpdates', type: REG_DWORD, data: '0'} - # === Windows Update Notifications - Disabled - # ------> https://www.askvg.com/fix-how-to-stop-automatic-forced-upgrade-to-feature-updates-in-windows-10/ + + # === Windows Update Notifications - Disabled + # ------> https://www.askvg.com/fix-how-to-stop-automatic-forced-upgrade-to-feature-updates-in-windows-10/ - !registryValue: {path: 'HKLM\SYSTEM\Setup\UpgradeNotification', value: 'UpgradeAvailable', type: REG_DWORD, data: '0'} - # =================================== - # === Windows Update for Business === - # =================================== - # ======> Preview builds - # === Manage preview builds - Enabled + + # =================================== + # === Windows Update for Business === + # =================================== + # ======> Preview builds + + # === Manage preview builds - Enabled # - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate', value: 'ManagePreviewBuilds', type: REG_DWORD, data: '1'} # # === Set the behavior for receiving preview builds - Disable preview builds # - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate', value: 'ManagePreviewBuildsPolicyValue', type: REG_DWORD, data: '0'} @@ -59,82 +64,89 @@ actions: # - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate', value: 'DeferQualityUpdates', type: REG_DWORD, data: '1'} # # === After a quality update is released, defer receiving it for this many days - Enabled # - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate', value: 'DeferQualityUpdatesPeriodInDays', type: REG_DWORD, data: '4'} - # ========================================= - # === Malicious Software Reporting Tool === - # ========================================= - # === Prevent Malicious Software Removal Tool from installing - Enabled - # ------> https://winaero.com/blog/disable-malicious-software-removal-tool/ - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\MRT', value: 'DontOfferThroughWUAU', type: REG_DWORD, data: '1'} - # === Disable Malicious Software Reporting tool diagnostic data - Enabled - # ------> https://admx.help/?Category=Windows10_Telemetry&Policy=Microsoft.Policies.Win10Privacy::DontReportInfection + + # ========================================= + # === Malicious Software Reporting Tool === + # ========================================= + # === Prevent Malicious Software Removal Tool from installing - Enabled + # ------> https://winaero.com/blog/disable-malicious-software-removal-tool/ + # - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\MRT', value: 'DontOfferThroughWUAU', type: REG_DWORD, data: '1'} + + # === Disable Malicious Software Reporting tool diagnostic data - Enabled + # ------> https://admx.help/?Category=Windows10_Telemetry&Policy=Microsoft.Policies.Win10Privacy::DontReportInfection - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\MRT', value: 'DontReportInfectionInformation', type: REG_DWORD, data: '0'} - # ========================= - # === Update & Security === - # ========================= - # ======> Delivery Optimization - # === Allow downloads from other PCs - Off - # ------> https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.DeliveryOptimization::DownloadMode + + # ========================= + # === Update & Security === + # ========================= + + # ======> Delivery Optimization + + # === Allow downloads from other PCs - Off + # ------> https://admx.help/?Category=Windows_11_2022&Policy=Microsoft.Policies.DeliveryOptimization::DownloadMode - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\DeliveryOptimization\Settings', value: 'DownloadMode', type: REG_SZ, data: '0'} - # ======> Windows Insider Program - # === Windows Insider Program - Disabled - # ------> For Version 1703 and below. + + # ======> Windows Insider Program + + # === Windows Insider Program - Disabled + # ------> For Version 1703 and below. - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\PreviewBuilds', value: 'AllowBuildPreview', type: REG_DWORD, data: '0'} - # =========================== - # === Driver Installation === - # =========================== - # === Turn off Windows Update device driver search prompt - Enabled - # ------> https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.DeviceSoftwareSetup::DriverSearchPlaces_DontPromptForWindowsUpdate_1 - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows\DriverSearching', value: 'DontPromptForWindowsUpdate', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\DriverSearching', value: 'DontPromptForWindowsUpdate', type: REG_DWORD, data: '1'} - # =========================== - # === Device Installation === - # =========================== - # === Prevent device metadata retrieval from the Internet - Enabled - # ------> https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.DeviceSoftwareSetup::DeviceMetadata_PreventDeviceMetadataFromNetwork - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Device Metadata', value: 'PreventDeviceMetadataFromNetwork', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Device Metadata', value: 'PreventDeviceMetadataFromNetwork', type: REG_DWORD, data: '1'} - # === Specify search order for device driver source locations - Do not search Windows Update - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\DriverSearching', value: 'SearchOrderConfig', type: REG_DWORD, data: '0'} - # ============= - # === Extra === - # ============= - # === Download repair content and optional features directly from Windows Update instead of Windows Server Update Services (WSUS) - True - # ------> Enable WSUS Fondue. - # ------> https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.Servicing::Servicing + + + + # ============= + # === Extra === + # ============= + + # === Download repair content and optional features directly from Windows Update instead of Windows Server Update Services (WSUS) - True + # ------> Enable WSUS Fondue. + # ------> https://admx.help/?Category=Windows_11_2022&Policy=Microsoft.Policies.Servicing::Servicing # - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Servicing', value: 'RepairContentServerSource', type: REG_DWORD, data: '2'} - # --- Reserved Storage (for updates) - Disabled - # ------> https://www.howtogeek.com/425563/how-to-disable-reserved-storage-on-windows-10/ + + # === Reserved Storage (for updates) - Disabled + # ------> https://www.howtogeek.com/425563/how-to-disable-reserved-storage-on-windows-10/ - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ReserveManager', value: 'ShippedWithReserves', type: REG_DWORD, data: '0'} - # --- Prevent Automatic Updates - Enabled - # ------> Media Player Updates auto update disabled. - # ------> https://admx.help/?Category=Windows_8.1_2012R2&Policy=Microsoft.Policies.MediaPlayer::DisableAutoUpdate + + # === Prevent Automatic Updates - Enabled + # ------> Media Player Updates auto update disabled. + # ------> https://admx.help/?Category=Windows_11_2022&Policy=Microsoft.Policies.MediaPlayer::DisableAutoUpdate - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\WindowsMediaPlayer', value: 'DisableAutoUpdate', type: REG_DWORD, data: '0'} - # --- Prevent Windows Update Orchestrator automatically instaling unwanted updates: - # ------> DevHome, Outlook + # --- Prevent Windows Update Orchestrator automatically instaling unwanted updates: + # ------> DevHome, Outlook - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\WindowsUpdate\Orchestrator\UScheduler_Oobe\DevHomeUpdate', operation: 'delete'} - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Orchestrator\UScheduler\DevHomeUpdate', value: 'workCompleted', type: REG_DWORD, data: '1'} - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\WindowsUpdate\Orchestrator\UScheduler_Oobe\OutlookUpdate', operation: 'delete'} - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Orchestrator\UScheduler\OutlookUpdate', value: 'workCompleted', type: REG_DWORD, data: '1'} + + # === Disable Windows Upgrade notice + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\WindowsUpdate\UX\Settings', value: 'HideMCTLink', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\WindowsUpdate\UX\Settings', value: 'RestartNotificationsAllowed2', type: REG_DWORD, data: '0'} + - # ======================== - # === Discarded Tweaks === - # ======================== - # === Do not connect to any Windows Update Internet locations - Disabled - # ------> Breaks Store and Update if Enabled, therefore discarded. - # [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate] - # "DoNotConnectToWindowsUpdateInternetLocations"=dword:00000000 - # === Defer/delay Quality (Security) for a few days to avoid day one bugs - https://gpsearch.azurewebsites.net/#13436 - # [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate] - # "DeferUpgrade"=dword:00000001 - # "DeferUpgradePeriod"=dword:00000001 - # === Allow Automatic Updates immediate installation - Disabled + + # ======================== + # === Discarded Tweaks === + # ======================== + + # === Do not connect to any Windows Update Internet locations - Disabled + # ------> Breaks Store and Update if Enabled, therefore discarded. + # [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate] + # "DoNotConnectToWindowsUpdateInternetLocations"=dword:00000000 + + # === Defer/delay Quality (Security) for a few days to avoid day one bugs - https://gpsearch.azurewebsites.net/#13436 + # [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate] + # "DeferUpgrade"=dword:00000001 + # "DeferUpgradePeriod"=dword:00000001 + # === Allow Automatic Updates immediate installation - Disabled # - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'AUOptions', type: REG_DWORD, data: '2'} - # === Allow Automatic Updates immediate installation - Disabled (Not supported anymore) + + # === Allow Automatic Updates immediate installation - Disabled (Not supported anymore) # - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'AutoInstallMinorUpdates', type: REG_DWORD, data: '0'} - # === Do not adjust default option to 'Install Updates and Shut Down' in Shut Down Windows dialog box - Enabled (Not supported anymore) + + # === Do not adjust default option to 'Install Updates and Shut Down' in Shut Down Windows dialog box - Enabled (Not supported anymore) # - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'NoAUAsDefaultShutdownOption', type: REG_DWORD, data: '1'} # - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'NoAUAsDefaultShutdownOption', type: REG_DWORD, data: '1'} # === Do not display 'Install Updates and Shut Down' option in Shut Down Windows dialog box - Enabled (Not supported anymore) diff --git a/src/Configuration/features/revision/revert.yml b/src/Configuration/Tasks/revert.yml similarity index 73% rename from src/Configuration/features/revision/revert.yml rename to src/Configuration/Tasks/revert.yml index 597c5f91..0c0c3267 100644 --- a/src/Configuration/features/revision/revert.yml +++ b/src/Configuration/Tasks/revert.yml @@ -23,11 +23,11 @@ actions: # https://github.com/meetrevision/playbook/pull/31 - !registryValue: { path: 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion', value: 'RegisteredOrganisation', operation: delete } - # Previously used as detection purpose - - !registryValue: { path: 'HKLM\Software\Classes\CLSID', value: 'IsModernRCEnabled', operation: delete } + # Previously used as detection purpose + - !registryValue: {path: 'HKLM\Software\Classes\CLSID', value: 'IsModernRCEnabled', operation: delete} # Breaks XboxGipSvc - https://github.com/meetrevision/playbook/issues/34 - - !registryValue: { path: 'HKLM\SYSTEM\ControlSet001\Control', value: 'SvcHostSplitThresholdInKB', type: REG_DWORD, data: '3670016' } + - !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Control', value: 'SvcHostSplitThresholdInKB', type: REG_DWORD, data: '3670016'} # Breaks Efficiency Mode in Task Manager - !service: {name: 'bam', operation: change, startup: 1} @@ -69,6 +69,7 @@ actions: # Revert Windows Updates policies - !registryKey: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate', operation: delete} + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Servicing', value: 'RepairContentServerSource', operation: delete} # Breaks 'defrag c: -b' and cores parking on some AMD CPUs @@ -86,4 +87,25 @@ actions: # Speech Recognition - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\InputPersonalization', value: 'AllowInputPersonalization', operation: delete} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Speech_OneCore\Preferences', value: 'ModelDownloadAllowed', operation: delete} \ No newline at end of file + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Speech_OneCore\Preferences', value: 'ModelDownloadAllowed', operation: delete} + + # OneDrive workaround + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\OneDrive', value: 'DisableFileSyncNGSC', operation: delete} + + # We manually disable all the things that RestrictCommunication does (except DisableRootAutoUpdate and AllowWindowsEntitlementReactivation, DisableWindowsUpdateAccess) + - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\InternetManagement', value: 'RestrictCommunication', operation: delete} + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\InternetManagement', value: 'RestrictCommunication', operation: delete} + + - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\SystemCertificates\AuthRoot', value: 'DisableRootAutoUpdate', operation: delete} # Needed for MS Store to work. (31/07/2020) + - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows NT\CurrentVersion\Software Protection Platform', value: 'AllowWindowsEntitlementReactivation', operation: delete} + + # Revert Windows Defender Antivirus - Security Intelligence Updates policies + - !registryKey: {path: 'HKLM\Software\Policies\Microsoft\Windows Defender\Signature Updates', operation: delete} + + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows Defender\Signature Updates', value: 'DisableScheduledSignatureUpdateOnBattery', type: REG_DWORD, data: '1'} + + # Default Auto Tray behavior + - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer', value: 'EnableAutoTray', operation: delete} + + # Allow users to log on using biometrics + - !registryKey: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Biometrics', operation: delete} \ No newline at end of file diff --git a/src/Configuration/features/revision/services.yml b/src/Configuration/Tasks/services.yml similarity index 62% rename from src/Configuration/features/revision/services.yml rename to src/Configuration/Tasks/services.yml index 3908f15f..33b9d661 100644 --- a/src/Configuration/features/revision/services.yml +++ b/src/Configuration/Tasks/services.yml @@ -5,44 +5,62 @@ privilege: TrustedInstaller actions: - !writeStatus: {status: "Configuring services"} - # === Beep - Disabled + + # === Beep - Disabled # - !service: {name: 'Beep', operation: change, startup: 4} - # === GraphicsPerfSvc - Disabled + + # === GraphicsPerfSvc - Disabled # - !service: {name: 'GraphicsPerfSvc', operation: change, startup: 4} - # === Desktop Activity Moderator Driver - Disabled + + # === Desktop Activity Moderator Driver - Disabled - !service: {name: 'dam', operation: change, startup: 4} - # === Background Activity Moderator Driver - Disabled + + # === Background Activity Moderator Driver - Disabled # - !service: {name: 'bam', operation: change, startup: 4} - # === GPU Energy Driver - Disabled + + # === GPU Energy Driver - Disabled - !service: {name: 'GpuEnergyDrv', operation: change, startup: 4} - # === NetBT - Disabled + + # === NetBT - Disabled - !service: {name: 'NetBT', operation: change, startup: 4} - # === Intel(R) Telemetry Service - Disabled + + # === Intel(R) Telemetry Service - Disabled - !service: {name: 'Telemetry', operation: change, startup: 4} - # === Windows Network Data Usage Monitoring Driver - Disabled + + # === Windows Network Data Usage Monitoring Driver - Disabled # - !service: {name: 'Ndu', operation: change, startup: 4} - # === Microsoft (R) Diagnostics Hub Standard Collector Service - Disabled + + # === Microsoft (R) Diagnostics Hub Standard Collector Service - Disabled - !service: {name: 'diagnosticshub.standardcollector.service', operation: change, startup: 4} - # === Windows Error Reporting Service - Disabled + + # === Windows Error Reporting Service - Disabled - !service: {name: 'WerSvc', operation: change, startup: 4} - # === Unified Telemetry Client - Disabled + + # === Unified Telemetry Client - Disabled - !service: {name: 'DiagTrack', operation: change, startup: 4} - # === Windows Insider Service - Disabled + + # === Windows Insider Service - Disabled - !service: {name: 'wisvc', operation: change, startup: 4} - # === Program Compatibility Assistant Service - Disabled + + # === Program Compatibility Assistant Service - Disabled - !service: {name: 'PcaSvc', operation: change, startup: 4} - # === Diagnostic Policy Service - Disabled - # ------> Needed for Data usage and troubleshooting, but the Troubleshooter automatically activates the service itself when needed + + # === Diagnostic Policy Service - Disabled + # ------> Needed for Data usage and troubleshooting, but the Troubleshooter automatically activates the service itself when needed - !service: {name: 'DPS', operation: change, startup: 4} - # === Diagnostic Service Host - Disabled + + # === Diagnostic Service Host - Disabled - !service: {name: 'WdiServiceHost', operation: change, startup: 4} - # === Diagnostic System Host - Disabled + + # === Diagnostic System Host - Disabled - !service: {name: 'WdiSystemHost', operation: change, startup: 4} - # == Tcpipreg (experimental) + #===== Tcpipreg (experimental) - !service: {name: 'tcpipreg', operation: change, startup: 4} - # == EdgeUpdate - Manual (Disabled breaks WebView installation via Visual Studio) + + # === EdgeUpdate - Manual + # ------> Disabling it breaks WebView installation via Visual Studio) - !service: {name: 'edgeupdate', operation: change, startup: 3} # == Windows Event Collector - Disabled diff --git a/src/Configuration/features/revision/software.yml b/src/Configuration/Tasks/software.yml similarity index 100% rename from src/Configuration/features/revision/software.yml rename to src/Configuration/Tasks/software.yml diff --git a/src/Configuration/features/revision/start.yml b/src/Configuration/Tasks/start.yml similarity index 96% rename from src/Configuration/features/revision/start.yml rename to src/Configuration/Tasks/start.yml index 0cca8316..6992e388 100644 --- a/src/Configuration/features/revision/start.yml +++ b/src/Configuration/Tasks/start.yml @@ -1,12 +1,12 @@ --- -title: Start +title: Initialization description: Copies Revision folders/files, and configures some initial settings privilege: TrustedInstaller actions: - !writeStatus: {status: "Initializing"} - # Prevent annoying notifications during deployment + # Prevent annoying notifications during deployment - !registryValue: path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Notifications\Settings\Windows.SystemToast.SecurityAndMaintenance' value: 'Enabled' @@ -24,7 +24,7 @@ actions: command: 'copy /y "hosts" "%WINDIR%\System32\drivers\etc\hosts"' weight: 20 - # Necessary to clean DNS Cache after modifying hosts + # Necessary to clean DNS Cache after modifying hosts - !cmd: command: 'ipconfig /flushdns' diff --git a/src/Configuration/custom.yml b/src/Configuration/custom.yml deleted file mode 100644 index 6ca23f3f..00000000 --- a/src/Configuration/custom.yml +++ /dev/null @@ -1,25 +0,0 @@ ---- -title: Custom -description: Custom Revision configuration -privilege: Admin -actions: - - !task: {path: 'features\revision\registry\aaa-edit-ISO-version-and-edition.yml'} - - !task: {path: 'features\revision\start.yml'} - - !task: {path: 'features\revision\components.yml'} - - - !task: {path: 'features\revision\packages.yml'} - - !taskKill: {name: "explorer", errorAction: Ignore} - - !taskKill: {name: "SearchApp", errorAction: Ignore} - - !taskKill: {name: "SearchHost", errorAction: Ignore} - - !taskKill: {name: "RuntimeBroker", errorAction: Ignore} - - !taskKill: {name: "TextInputHost", errorAction: Ignore} - - !taskKill: {name: "ShellExperienceHost", errorAction: Ignore} - - !taskKill: {name: "backgroundTaskHost", errorAction: Ignore} - - !taskKill: {name: "Widgets", errorAction: Ignore} - - - !task: {path: 'features\revision\software.yml'} - - !task: {path: 'features\revision\services.yml'} - - !task: {path: 'features\revision\appx.yml'} - - !task: {path: 'features\revision\registry.yml'} - - !task: {path: 'features\revision\revert.yml'} - - !task: {path: 'features\revision\config.yml'} \ No newline at end of file diff --git a/src/Configuration/features/revision/registry.yml b/src/Configuration/features/revision/registry.yml deleted file mode 100644 index fca999e1..00000000 --- a/src/Configuration/features/revision/registry.yml +++ /dev/null @@ -1,45 +0,0 @@ ---- -title: Registry -description: Revision registry configuration -privilege: TrustedInstaller -actions: - - !writeStatus: {status: "Tweaking registry"} - - !task: {path: 'features\revision\registry\ntlite-settings.yml'} - - !task: {path: 'features\revision\registry\add-take-ownership-in-context-menu.yml'} - - !task: {path: 'features\revision\registry\bypass-requirements.yml'} - - !task: {path: 'features\revision\registry\configure-crash-control.yml'} - - !task: {path: 'features\revision\registry\configure-deprovisioned-apps.yml'} - - !task: {path: 'features\revision\registry\configure-explorer-folder-view.yml'} - - !task: {path: 'features\revision\registry\configure-explorer-settings.yml'} - - !task: {path: 'features\revision\registry\configure-ifeo.yml'} - - !task: {path: 'features\revision\registry\configure-internet-explorer.yml'} - - !task: {path: 'features\revision\registry\configure-kernel.yml'} - - !task: {path: 'features\revision\registry\configure-logon.yml'} - - !task: {path: 'features\revision\registry\configure-microsoft-store.yml'} - - !task: {path: 'features\revision\registry\configure-multimedia.yml'} - - !task: {path: 'features\revision\registry\configure-oobe.yml'} - - !task: {path: 'features\revision\registry\configure-power-control.yml'} - - !task: {path: 'features\revision\registry\configure-privacy.yml'} - - !task: {path: 'features\revision\registry\configure-search-and-cortana.yml'} - - !task: {path: 'features\revision\registry\configure-security.yml'} - - !task: {path: 'features\revision\registry\configure-start-menu-and-taskbar-notifications).yml'} - - !task: {path: 'features\revision\registry\configure-win32priorityseparation.yml'} - - !task: {path: 'features\revision\registry\configure-windows-settings.yml'} - - !task: {path: 'features\revision\registry\configure-windows-update-and-install.yml'} - # - features\revision\registry\disable-disk-defragmentation.yml'} - - !task: {path: 'features\revision\registry\disable-automatic-maintenance.yml'} - - !task: {path: 'features\revision\registry\disable-disk-checking.yml'} - - !task: {path: 'features\revision\registry\disable-ease-of-access-features.yml'} - - !task: {path: 'features\revision\registry\disable-installing-teams.yml'} - - !task: {path: 'features\revision\registry\disable-logging.yml'} - # - features\revision\registry\disable-prefetcher-superfetch-and-readyboost.yml'} - - !task: {path: 'features\revision\registry\disable-system-restore-pre-defined-config.yml'} - # - features\revision\registry\disable-user-account-control-uac.yml'} - - !task: {path: 'features\revision\registry\enable-audio-communications-do-nothing.yml'} - - !task: {path: 'features\revision\registry\fixes.yml'} - - !task: {path: 'features\revision\registry\make-msi-installer-work-in-safe-mode.yml'} - - !task: {path: 'features\revision\registry\mouse-tweaks.yml'} - - !task: {path: 'features\revision\registry\old-rightclick-menu.yml'} - - !task: {path: 'features\revision\registry\restore-windows-photo-viewer-all-users.yml'} - - !task: {path: 'features\revision\registry\revision-static-edition.yml'} - - !task: {path: 'features\revision\registry\revision-static-oem-information.yml'} diff --git a/src/Configuration/features/revision/registry/aaa-edit-ISO-version-and-edition.yml b/src/Configuration/features/revision/registry/aaa-edit-ISO-version-and-edition.yml deleted file mode 100644 index 88d51c2f..00000000 --- a/src/Configuration/features/revision/registry/aaa-edit-ISO-version-and-edition.yml +++ /dev/null @@ -1,19 +0,0 @@ ---- -title: aaa-edit-ISO-version-and-edition -description: aaa-edit-ISO-version-and-edition -privilege: TrustedInstaller -actions: - - - # ------> This will be visible in Windows Settings -> System -> About - # - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OEMInformation', value: 'Model', type: REG_SZ, data: 'ReviOS 23.04'} - # - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion', value: 'RegisteredOrganisation', type: REG_SZ, data: 'ReviOS 23.04'} - - # === Causes Network Sharing/Computer Name issues - # - !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Control\ComputerName\ComputerName', value: 'ComputerName', type: REG_SZ, data: 'Revision-PC'} - # - !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Control\ComputerName\ActiveComputerName', value: 'ComputerName', type: REG_SZ, data: 'Revision-PC'} - # =================== - # === DON'T TOUCH === - # =================== - # === Edition info: UnifyOS, AmendOS, ReviOS etc. - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion', value: 'EditionSubVersion', type: REG_SZ, data: 'ReviOS'} diff --git a/src/Configuration/features/revision/registry/configure-explorer-folder-view.yml b/src/Configuration/features/revision/registry/configure-explorer-folder-view.yml deleted file mode 100644 index 0acb37f3..00000000 --- a/src/Configuration/features/revision/registry/configure-explorer-folder-view.yml +++ /dev/null @@ -1,608 +0,0 @@ ---- -title: configure-explorer-folder-view -description: configure-explorer-folder-view -privilege: TrustedInstaller -option: configure-explorer-folder-view -actions: - - # === Customized folder view, only relevant information ( Name / Size / Date modified / Date created ) - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU', value: 'NodeSlots', type: REG_BINARY, data: '020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202020202'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU', value: 'MRUListEx', type: REG_BINARY, data: '0000000004000000020000000100000003000000ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU', value: '0', type: REG_BINARY, data: '14001f50e04fd020ea3a6910a2d808002b30309d0000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU', value: '1', type: REG_BINARY, data: '3a001f44471a0359723fa74489c55595fe6b30ee260001002600efbe10000000d578e948f5d6d50126fb3049f5d6d50126fb3049f5d6d50114000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU', value: '2', type: REG_BINARY, data: '50003100000000003d5032b61000546f6f6c73003c0009000400efbe3d502bb63d5032b62e00000081790100000002000000000000000000000000000000977ab00054006f006f006c007300000014000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU', value: '3', type: REG_BINARY, data: '14001f706806ee260aa0d7449371beb064c986830000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU', value: 'NodeSlot', type: REG_DWORD, data: '46'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU', value: '4', type: REG_BINARY, data: '92003100000000003e507c911000466f6c64657220566965772053657474696e6773204261636b757000680009000400efbe3e507c913e507c912e0000001d5902000000020000000000000000000000000000009a63ed0046006f006c00640065007200200056006900650077002000530065007400740069006e006700730020004200610063006b007500700000002a000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0', value: 'NodeSlot', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0', value: 'MRUListEx', type: REG_BINARY, data: '01000000020000000000000003000000050000000400000006000000ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0', value: '0', type: REG_BINARY, data: '19002f473a5c000000000000000000000000000000000000000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0', value: '1', type: REG_BINARY, data: '19002f583a5c000000000000000000000000000000000000000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0', value: '2', type: REG_BINARY, data: '19002f433a5c000000000000000000000000000000000000000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0', value: '3', type: REG_BINARY, data: '3a002e803accbfb42cdb4c42b0297fe99a87c641260001002600efbe11000000d578e948f5d6d50139556aa1f6d6d50139556aa1f6d6d50114000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0', value: '4', type: REG_BINARY, data: '14002e80922b16d365937a46956b92703aca08af0000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0', value: '5', type: REG_BINARY, data: '19002f453a5c000000000000000000000000000000000000000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0', value: '6', type: REG_BINARY, data: '19002f443a5c000000000000000000000000000000000000000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0', value: 'NodeSlot', type: REG_DWORD, data: '2'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0', value: 'MRUListEx', type: REG_BINARY, data: '0000000001000000ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0', value: '0', type: REG_BINARY, data: '56003100000000003d5048b31000234261636b757000400009000400efbe285020733d5048b32e0000002a0000000000440000000000000000000000000000002189800023004200610063006b0075007000000016000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0', value: '1', type: REG_BINARY, data: '74003100000000003550a4883000235669727475616c204d616368696e657300540009000400efbe4e4dea003b50f9002e000000250000000000020000000000000000000000000000006979970023005600690072007400750061006c0020004d0061006300680069006e0065007300000020000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0', value: 'NodeSlot', type: REG_DWORD, data: '3'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0', value: 'MRUListEx', type: REG_BINARY, data: '0000000001000000ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0', value: '0', type: REG_BINARY, data: '78003100000000003d5065b31100557365727300640009000400efbe3d5048b33d506ab32e0000006f3100000000050000000000000000003a0000000000059f180055007300650072007300000040007300680065006c006c00330032002e0064006c006c002c002d0032003100380031003300000014000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0', value: '1', type: REG_BINARY, data: 'a2003100000000003d5048b3110050726f6772616d2046696c657320287838362900800009000400efbe3d5044b33d506ab32e0000008714000000000500000000000000000056000000000085eb8200500072006f006700720061006d002000460069006c0065007300200028007800380036002900000040007300680065006c006c00330032002e0064006c006c002c002d0032003100380031003700000022000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0\0', value: 'NodeSlot', type: REG_DWORD, data: '4'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0\0', value: 'MRUListEx', type: REG_BINARY, data: '00000000ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0\0', value: '0', type: REG_BINARY, data: '68003100000000003d5065b3100041646d696e6973747261746f72004c0009000400efbe3d5048b33d5065b32e0000007131000000000500000000000000000000000000000036ba2700410064006d0069006e006900730074007200610074006f00720000001c000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0\0\0', value: 'NodeSlot', type: REG_DWORD, data: '5'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0\0\0', value: 'MRUListEx', type: REG_BINARY, data: '0000000001000000ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0\0\0', value: '0', type: REG_BINARY, data: '56003100000000003b50a80912004170704461746100400009000400efbe3d5048b33d5048b32e0000007831000000000500000000000000000000000000000023d892004100700070004400610074006100000016000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0\0\0', value: '1', type: REG_BINARY, data: '7e003100000000003d505db311004465736b746f7000680009000400efbe3d505db33d505db32e000000e60001000000010000000000000000003e0000000000ca9ca5004400650073006b0074006f007000000040007300680065006c006c00330032002e0064006c006c002c002d0032003100370036003900000016000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0\0\0\0', value: 'NodeSlot', type: REG_DWORD, data: '6'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0\0\0\0', value: 'MRUListEx', type: REG_BINARY, data: '0100000000000000ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0\0\0\0', value: '0', type: REG_BINARY, data: '56003100000000003d50f9881000526f616d696e6700400009000400efbe3d5055b33d5055b32e000000c3ca0000000003000000000000000000000000000000f70a080052006f0061006d0069006e006700000016000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0\0\0\0', value: '1', type: REG_BINARY, data: '50003100000000003c505cb710004c6f63616c003c0009000400efbe3d5048b33d5048b32e000000793100000000050000000000000000000000000000004ded1f004c006f00630061006c00000014000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0\0\0\0\0', value: 'NodeSlot', type: REG_DWORD, data: '7'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0\0\0\0\0', value: 'MRUListEx', type: REG_BINARY, data: 'ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0\0\0\0\1', value: 'NodeSlot', type: REG_DWORD, data: '84'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0\0\0\0\1', value: 'MRUListEx', type: REG_BINARY, data: 'ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0\0\0\1', value: 'NodeSlot', type: REG_DWORD, data: '19'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0\0\0\1', value: 'MRUListEx', type: REG_BINARY, data: 'ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0\1', value: 'NodeSlot', type: REG_DWORD, data: '22'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\0\1', value: 'MRUListEx', type: REG_BINARY, data: 'ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\1', value: 'NodeSlot', type: REG_DWORD, data: '78'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\1', value: 'MRUListEx', type: REG_BINARY, data: '00000000ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\1', value: '0', type: REG_BINARY, data: '56003100000000003d50aeb330004e6577426f743100400009000400efbe4e4df6003d50aeb32e00000050010000000001000000000000000000000000000000bdbac1004e006500770042006f0074003100000016000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\1\0', value: 'NodeSlot', type: REG_DWORD, data: '83'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\1\0', value: 'MRUListEx', type: REG_BINARY, data: 'ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1', value: 'NodeSlot', type: REG_DWORD, data: '11'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1', value: 'MRUListEx', type: REG_BINARY, data: '020000000100000000000000ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1', value: '0', type: REG_BINARY, data: '5600310000000000904f242710002353797374656d00400009000400efbe8f4f199a3a5014bd2e000000ab6c010000000100000000000000000000000000000020f70a002300530079007300740065006d00000016000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1', value: '1', type: REG_BINARY, data: '5000310000000000934f5bae10002354656d70003c0009000400efbe904f8a283a50bcb02e000000c5090200000001000000000000000000000000000000361be9002300540065006d007000000014000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1', value: '2', type: REG_BINARY, data: '54003100000000003250298c1000234d7573696300003e0009000400efbe8f4f1d933950590c2e000000240000000000010000000000000000000000000000001718930023004d007500730069006300000016000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0', value: 'NodeSlot', type: REG_DWORD, data: '12'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0', value: 'MRUListEx', type: REG_BINARY, data: '0200000003000000040000000000000001000000ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0', value: '0', type: REG_BINARY, data: '7a0031000000000039506206100053797374656d204f7074696d697a6174696f6e00580009000400efbe904f24273a50bda92e0000007ab301000000010000000000000000000000000000004d96de00530079007300740065006d0020004f007000740069006d0069007a006100740069006f006e00000022000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0', value: '1', type: REG_BINARY, data: '56003100000000009e4f117d10004472697665727300400009000400efbe8f4f649a395099052e000000a88c01000000010000000000000000000000000000000bb6a7004400720069007600650072007300000016000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0', value: '2', type: REG_BINARY, data: '66003100000000003250199210004170706c69636174696f6e7300004a0009000400efbe8f4f199a3b50c5002e000000ad6c0100000001000000000000000000000000000000ff5e18014100700070006c00690063006100740069006f006e00730000001c000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0', value: '3', type: REG_BINARY, data: '54003100000000003c50a5a21000496d6167657300003e0009000400efbe904fa4243c50a5a22e000000efa50100000001000000000000000000000000000000f53db30049006d006100670065007300000016000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0', value: '4', type: REG_BINARY, data: '7e003100000000002f503d1d10004e6574776f726b204f7074696d697a6174696f6e00005a0009000400efbe904f12273a50e3052e00000070ac0100000001000000000000000000000000000000dab5e1004e006500740077006f0072006b0020004f007000740069006d0069007a006100740069006f006e00000024000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\0', value: 'NodeSlot', type: REG_DWORD, data: '13'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\0', value: 'MRUListEx', type: REG_BINARY, data: 'ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\1', value: 'NodeSlot', type: REG_DWORD, data: '14'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\1', value: 'MRUListEx', type: REG_BINARY, data: '00000000ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\1', value: '0', type: REG_BINARY, data: '54003100000000003c503bb810004e766964696100003e0009000400efbe8f4f859a3c503bb82e000000309c01000000010000000000000000000000000000002a91ab004e0076006900640069006100000016000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\1\0', value: 'NodeSlot', type: REG_DWORD, data: '15'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\1\0', value: 'MRUListEx', type: REG_BINARY, data: '00000000ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\1\0', value: '0', type: REG_BINARY, data: '6c003100000000008f4fdd9a10004e56536c696d6d65725f76302e3700004e0009000400efbe8f4fdd9a39509a052e0000005d9c01000000010000000000000000000000000000006ba013014e00560053006c0069006d006d00650072005f00760030002e00370000001e000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\1\0\0', value: 'NodeSlot', type: REG_DWORD, data: '16'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\1\0\0', value: 'MRUListEx', type: REG_BINARY, data: 'ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\2', value: 'NodeSlot', type: REG_DWORD, data: '17'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\2', value: 'MRUListEx', type: REG_BINARY, data: '00000000ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\2', value: '0', type: REG_BINARY, data: '560031000000000032509991100057696e646f777300400009000400efbe8f4f3c9a3b50c6002e000000d5880100000001000000000000000000000000000000f535e400570069006e0064006f0077007300000016000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\2\0', value: 'NodeSlot', type: REG_DWORD, data: '18'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\2\0', value: 'MRUListEx', type: REG_BINARY, data: '00000000ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\2\0', value: '0', type: REG_BINARY, data: 'b6003100000000008f4f619a1000564d776172652d776f726b73746174696f6e2d66756c6c2d31352e352e302d313436363538363400800009000400efbe8f4f619a3b50c7002e0000005c8c01000000010000000000000000000000000000008251980056004d0077006100720065002d0077006f0072006b00730074006100740069006f006e002d00660075006c006c002d00310035002e0035002e0030002d0031003400360036003500380036003400000036000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\2\0\0', value: 'NodeSlot', type: REG_DWORD, data: '76'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\2\0\0', value: 'MRUListEx', type: REG_BINARY, data: 'ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\3', value: 'NodeSlot', type: REG_DWORD, data: '32'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\3', value: 'MRUListEx', type: REG_BINARY, data: '0100000000000000ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\3', value: '0', type: REG_BINARY, data: '80003100000000003950db05100052756e74696d65204c696272617279205061636b73005c0009000400efbe904fc1243950db052e0000007ea701000000010000000000000000000000000000002d781b01520075006e00740069006d00650020004c0069006200720061007200790020005000610063006b007300000024000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\3', value: '1', type: REG_BINARY, data: '98003100000000003c50aea2100057696e646f7773203130202831383039292036342d626974204c545343006c0009000400efbe904fa8253c50aea22e000000f2a7010000000100000000000000000000000000000002a39700570069006e0064006f007700730020003100300020002800310038003000390029002000360034002d0062006900740020004c0054005300430000002c000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\3\0', value: 'NodeSlot', type: REG_DWORD, data: '33'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\3\0', value: 'MRUListEx', type: REG_BINARY, data: '0100000000000000ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\3\0', value: '0', type: REG_BINARY, data: 'b000310000000000904fc124100056697375616c2d432d52756e74696d65732d416c6c2d696e2d4f6e652d5365702d32303139007c0009000400efbe904fc124395099052e0000008da70100000001000000000000000000000000000000d7791600560069007300750061006c002d0043002d00520075006e00740069006d00650073002d0041006c006c002d0069006e002d004f006e0065002d005300650070002d003200300031003900000034000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\3\0', value: '1', type: REG_BINARY, data: '7e00310000000000904fbd24100044582052756e74696d65204a756e65203230313000005a0009000400efbe904fbc243950d2052e00000003a60100000001000000000000000000000000000000eb070800440058002000520075006e00740069006d00650020004a0075006e00650020003200300031003000000024000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\3\0\0', value: 'NodeSlot', type: REG_DWORD, data: '34'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\3\0\0', value: 'MRUListEx', type: REG_BINARY, data: 'ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\3\0\1', value: 'NodeSlot', type: REG_DWORD, data: '41'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\3\0\1', value: 'MRUListEx', type: REG_BINARY, data: 'ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\3\1', value: 'NodeSlot', type: REG_DWORD, data: '40'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\3\1', value: 'MRUListEx', type: REG_BINARY, data: '00000000010000000200000003000000ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\3\1', value: '0', type: REG_BINARY, data: '5a003100000000003950a6b9100052656769737472790000420009000400efbe3850628f3b50c7032e000000a8a60100000002000000000000000000000000000000eddede0052006500670069007300740072007900000018000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\3\1', value: '1', type: REG_BINARY, data: '86003100000000003c50e1a210004d79206f776e206272616e63682028666f72206e6f772900600009000400efbe3c50a9a23c50e1a22e000000f97800000000030000000000000000000000000000006151c8004d00790020006f0077006e0020006200720061006e00630068002000280066006f00720020006e006f0077002900000026000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\3\1', value: '2', type: REG_BINARY, data: '7a003100000000003b50300810004c5453432076302e392e342d686f746669783100580009000400efbe3a50c0963b5030082e000000a611000000000400000000000000000000000000000047fc00004c005400530043002000760030002e0039002e0034002d0068006f0074006600690078003100000022000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\3\1', value: '3', type: REG_BINARY, data: '4a00310000000000395062a910004f6c6400380009000400efbe904f1d263a5091aa2e000000ffa7010000000100000000000000000000000000000045006c004f006c006400000012000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\3\1\0', value: 'NodeSlot', type: REG_DWORD, data: '56'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\3\1\0', value: 'MRUListEx', type: REG_BINARY, data: 'ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\3\1\1', value: 'NodeSlot', type: REG_DWORD, data: '57'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\3\1\1', value: 'MRUListEx', type: REG_BINARY, data: '00000000ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\3\1\1', value: '0', type: REG_BINARY, data: '5a003100000000003c50dca2100052656769737472790000420009000400efbe3c50dca23c50dca22e000000027900000000030000000000000000000000000000003070050052006500670069007300740072007900000018000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\3\1\1\0', value: 'NodeSlot', type: REG_DWORD, data: '58'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\3\1\1\0', value: 'MRUListEx', type: REG_BINARY, data: 'ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\3\1\2', value: 'NodeSlot', type: REG_DWORD, data: '59'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\3\1\2', value: 'MRUListEx', type: REG_BINARY, data: '020000000100000000000000ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\3\1\2', value: '0', type: REG_BINARY, data: '66003100000000003a50e89610005265676973747279506f737400004a0009000400efbe3a50e8963b5015042e0000001e4600000000030000000000000000000000000000005df616005200650067006900730074007200790050006f007300740000001c000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\3\1\2', value: '1', type: REG_BINARY, data: '6e003200b70901003750610820004c5453432076302e392e312e7a697000500009000400efbe375061083b5015042e000000a2a601000000120000000000000000000000000000000d4c8c004c005400530043002000760030002e0039002e0031002e007a006900700000001e000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\3\1\2', value: '2', type: REG_BINARY, data: '6e003200d20005003a50a7b020004c5453432076302e392e342e7a697000500009000400efbe3a50a6b03b5015042e000000964a00000000030000000000000000000000000000003c1a1c014c005400530043002000760030002e0039002e0034002e007a006900700000001e000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\3\1\2\0', value: 'NodeSlot', type: REG_DWORD, data: '60'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\3\1\2\0', value: 'MRUListEx', type: REG_BINARY, data: 'ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\3\1\2\1', value: 'NodeSlot', type: REG_DWORD, data: '61'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\3\1\2\1', value: 'MRUListEx', type: REG_BINARY, data: '00000000ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\3\1\2\1', value: '0', type: REG_BINARY, data: '7a003a005c00550000000000000000000000000000000000000000000000000010000100300031002f00320032002f00320030003200300020002000320031003a00300037003a003100360000000000000000000b000000000000004c005400530043002000760030002e0039002e00310000000000630065000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\3\1\2\1\0', value: 'NodeSlot', type: REG_DWORD, data: '62'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\3\1\2\1\0', value: 'MRUListEx', type: REG_BINARY, data: '0100000000000000ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\3\1\2\1\0', value: '0', type: REG_BINARY, data: '94003a005c00230000000000000000000000000000000000000000000000000010000100300031002f00320032002f00320030003200300020002000320031003a00300037003a003100360000000000040000000c0000000c0000005200650067006900730074007200790050006f007300740000004c005400530043002000760030002e0039002e0031002f000000000000000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\3\1\2\1\0', value: '1', type: REG_BINARY, data: '8c003a005c00230000000000000000000000000000000000000000000000000010000100300031002f00320032002f00320030003200300020002000320031003a00300037003a00310036000000000003000000080000000c0000005200650067006900730074007200790000004c005400530043002000760030002e0039002e0031002f000000000000000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\3\1\2\1\0\0', value: 'NodeSlot', type: REG_DWORD, data: '63'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\3\1\2\1\0\0', value: 'MRUListEx', type: REG_BINARY, data: 'ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\3\1\2\1\0\1', value: 'NodeSlot', type: REG_DWORD, data: '67'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\3\1\2\1\0\1', value: 'MRUListEx', type: REG_BINARY, data: 'ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\3\1\2\2', value: 'NodeSlot', type: REG_DWORD, data: '68'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\3\1\2\2', value: 'MRUListEx', type: REG_BINARY, data: '00000000ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\3\1\2\2', value: '0', type: REG_BINARY, data: '7a0077070000000000000000000000000000000000000000000000000000000010000100300031002f00320036002f00320030003200300020002000310039003a00350035003a003100360000000000000000000b000000000000004c005400530043002000760030002e0039002e003400000000000000f0360000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\3\1\2\2\0', value: 'NodeSlot', type: REG_DWORD, data: '69'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\3\1\2\2\0', value: 'MRUListEx', type: REG_BINARY, data: '00000000ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\3\1\2\2\0', value: '0', type: REG_BINARY, data: '8c009b47f97f000000000000000000000000000000000000000000000000000010000100300031002f00320036002f00320030003200300020002000310039003a00350035003a00300036000000000005000000080000000c0000005200650067006900730074007200790000004c005400530043002000760030002e0039002e0034002f0000002f0000000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\3\1\2\2\0\0', value: 'NodeSlot', type: REG_DWORD, data: '70'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\3\1\2\2\0\0', value: 'MRUListEx', type: REG_BINARY, data: 'ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\3\1\3', value: 'NodeSlot', type: REG_DWORD, data: '65'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\3\1\3', value: 'MRUListEx', type: REG_BINARY, data: '00000000ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\3\1\3', value: '0', type: REG_BINARY, data: '6c00310000000000904f5d26100052656769737472794f6c644f6c6400004e0009000400efbe904f5d263a50a57e2e00000005a8010000000100000000000000000000000000000012c55900520065006700690073007400720079004f006c0064004f006c00640000001e000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\3\1\3\0', value: 'NodeSlot', type: REG_DWORD, data: '66'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\3\1\3\0', value: 'MRUListEx', type: REG_BINARY, data: 'ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\4', value: 'NodeSlot', type: REG_DWORD, data: '86'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\0\4', value: 'MRUListEx', type: REG_BINARY, data: 'ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\1', value: 'NodeSlot', type: REG_DWORD, data: '87'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\1', value: 'MRUListEx', type: REG_BINARY, data: 'ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\2', value: 'NodeSlot', type: REG_DWORD, data: '89'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\1\2', value: 'MRUListEx', type: REG_BINARY, data: 'ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\2', value: 'NodeSlot', type: REG_DWORD, data: '23'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\2', value: 'MRUListEx', type: REG_BINARY, data: '03000000020000000100000000000000ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\2', value: '0', type: REG_BINARY, data: '98003100000000003d5073b6110050524f4752417e320000800009000400efbe2f4d3a3c3d5073b62e000000b1000000000001000000000000000000560000000000137e2900500072006f006700720061006d002000460069006c0065007300200028007800380036002900000040007300680065006c006c00330032002e0064006c006c002c002d0032003100380031003700000018000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\2', value: '1', type: REG_BINARY, data: '8c003100000000003d50fcb5110050524f4752417e310000740009000400efbe2f4d3a3c3d50fcb52e000000420000000000010000000000000000004a00000000004b30ee00500072006f006700720061006d002000460069006c0065007300000040007300680065006c006c00330032002e0064006c006c002c002d0032003100370038003100000018000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\2', value: '2', type: REG_BINARY, data: '60003100000000003e504c7f120050524f4752417e330000480009000400efbe2f4d3a3c3e504c7f2e00000014010000000001000000000000000000000000000000e51e8b00500072006f006700720061006d004400610074006100000018000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\2', value: '3', type: REG_BINARY, data: '78003100000000003d506db51100557365727300640009000400efbe2f4d2e313d506db52e000000590100000000010000000000000000003a0000000000fa24210155007300650072007300000040007300680065006c006c00330032002e0064006c006c002c002d0032003100380031003300000014000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\2\0', value: 'NodeSlot', type: REG_DWORD, data: '24'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\2\0', value: 'MRUListEx', type: REG_BINARY, data: 'ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\2\1', value: 'NodeSlot', type: REG_DWORD, data: '35'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\2\1', value: 'MRUListEx', type: REG_BINARY, data: '0100000000000000ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\2\1', value: '0', type: REG_BINARY, data: '5e003100000000002f4d513d100057494e444f577e330000460009000400efbe2f4d3a3c2f4d513d2e0000007200000000000100000000000000000000000000000012f35700770069006e0064006f007700730020006e007400000018000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\2\1', value: '1', type: REG_BINARY, data: '62003100000000002f4d513d1000434f4d4d4f4e7e3100004a0009000400efbe2f4d3a3c2f4d513d2e0000004300000000000100000000000000000000000000000012f3570043006f006d006d006f006e002000460069006c0065007300000018000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\2\1\0', value: 'NodeSlot', type: REG_DWORD, data: '36'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\2\1\0', value: 'MRUListEx', type: REG_BINARY, data: 'ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\2\1\1', value: 'NodeSlot', type: REG_DWORD, data: '37'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\2\1\1', value: 'MRUListEx', type: REG_BINARY, data: '00000000ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\2\1\1', value: '0', type: REG_BINARY, data: '6a003100000000003d5036b710004d4943524f537e310000520009000400efbe2f4d3a3c3d5036b72e000000440000000000010000000000000000000000000000005f231f006d006900630072006f0073006f00660074002000730068006100720065006400000018000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\2\1\1\0', value: 'NodeSlot', type: REG_DWORD, data: '38'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\2\1\1\0', value: 'MRUListEx', type: REG_BINARY, data: '00000000ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\2\1\1\0', value: '0', type: REG_BINARY, data: '48003100000000003d5036b7100056430000360009000400efbe3d5036b73d5036b72e0000003fa601000000040000000000000000000000000000005f231f0056004300000012000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\2\1\1\0\0', value: 'NodeSlot', type: REG_DWORD, data: '39'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\2\1\1\0\0', value: 'MRUListEx', type: REG_BINARY, data: 'ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\2\2', value: 'NodeSlot', type: REG_DWORD, data: '88'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\2\2', value: 'MRUListEx', type: REG_BINARY, data: 'ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\2\3', value: 'NodeSlot', type: REG_DWORD, data: '90'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\2\3', value: 'MRUListEx', type: REG_BINARY, data: 'ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\3', value: 'NodeSlot', type: REG_DWORD, data: '42'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\3', value: 'MRUListEx', type: REG_BINARY, data: 'ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\4', value: 'NodeSlot', type: REG_DWORD, data: '45'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\4', value: 'MRUListEx', type: REG_BINARY, data: '00000000ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\4', value: '0', type: REG_BINARY, data: '5c003100000000003e503b0010004361704672616d655800440009000400efbe3e503b003e503b002e000000c0ae0100000006000000000000000000000000000000a4d1bf004300610070004600720061006d0065005800000018000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\4\0', value: 'NodeSlot', type: REG_DWORD, data: '77'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\4\0', value: 'MRUListEx', type: REG_BINARY, data: 'ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\5', value: 'NodeSlot', type: REG_DWORD, data: '50'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\5', value: 'MRUListEx', type: REG_BINARY, data: '0100000000000000ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\5', value: '0', type: REG_BINARY, data: '50003100000000003e5034031000537465616d003c0009000400efbe8e4f64a83e5038032e000000643c00000000010000000000000000000000000000001e063c0053007400650061006d00000014000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\5', value: '1', type: REG_BINARY, data: '7400310000000000355097881000235669727475616c204d616368696e657300540009000400efbe35503d873a5017bd2e00000023000000000030000000000000000000000000000000b9d8f40023005600690072007400750061006c0020004d0061006300680069006e0065007300000020000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\5\0', value: 'NodeSlot', type: REG_DWORD, data: '51'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\5\0', value: 'MRUListEx', type: REG_BINARY, data: '0100000000000000ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\5\0', value: '0', type: REG_BINARY, data: '5a003100000000003e504303100061707063616368650000420009000400efbe3d5033bf3e5043032e000000cb01000000002e0000000000000000000000000000003b07410061007000700063006100630068006500000018000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\5\0', value: '1', type: REG_BINARY, data: '5c003100000000003b50aa141000737465616d6170707300440009000400efbe8e4f6da83b50aa142e0000003d4a0000000001000000000000000000000000000000262f2a0173007400650061006d006100700070007300000018000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\5\0\0', value: 'NodeSlot', type: REG_DWORD, data: '52'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\5\0\0', value: 'MRUListEx', type: REG_BINARY, data: 'ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\5\0\1', value: 'NodeSlot', type: REG_DWORD, data: '53'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\5\0\1', value: 'MRUListEx', type: REG_BINARY, data: '00000000ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\5\0\1', value: '0', type: REG_BINARY, data: '54003100000000003a500b8f1000636f6d6d6f6e00003e0009000400efbe8e4f6da83a50aea82e000000444a0000000001000000000000000000000000000000d26ed80063006f006d006d006f006e00000016000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\5\0\1\0', value: 'NodeSlot', type: REG_DWORD, data: '54'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\5\0\1\0', value: 'MRUListEx', type: REG_BINARY, data: '00000000ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\5\0\1\0', value: '0', type: REG_BINARY, data: '9e003100000000003d504dbf1000436f756e7465722d537472696b6520476c6f62616c204f6666656e7369766500700009000400efbe8e4f6da83d504dbf2e000000454a00000000010000000000000000000000000000004faf1b0043006f0075006e007400650072002d0053007400720069006b006500200047006c006f00620061006c0020004f006600660065006e00730069007600650000002e000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\5\0\1\0\0', value: 'NodeSlot', type: REG_DWORD, data: '55'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\5\0\1\0\0', value: 'MRUListEx', type: REG_BINARY, data: 'ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\5\1', value: 'NodeSlot', type: REG_DWORD, data: '79'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\5\1', value: 'MRUListEx', type: REG_BINARY, data: '0100000000000000ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\5\1', value: '0', type: REG_BINARY, data: '74003100000000003d50aeb310004e544c697465204465706c6f796d656e7400540009000400efbe834ed0b93d50aeb32e0000002c3f00000000160000000000000000000000000000007b71c8004e0054004c0069007400650020004400650070006c006f0079006d0065006e007400000020000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\5\1', value: '1', type: REG_BINARY, data: '6c003100000000003d5034b4100057696e646f77732031302078363400004e0009000400efbe345084163d5034b42e000000e844000000001000000000000000000000000000000088242300570069006e0064006f0077007300200031003000200078003600340000001e000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\5\1\0', value: 'NodeSlot', type: REG_DWORD, data: '80'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\5\1\0', value: 'MRUListEx', type: REG_BINARY, data: 'ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\5\1\1', value: 'NodeSlot', type: REG_DWORD, data: '85'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\5\1\1', value: 'MRUListEx', type: REG_BINARY, data: 'ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\6', value: 'NodeSlot', type: REG_DWORD, data: '72'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\6', value: 'MRUListEx', type: REG_BINARY, data: '00000000ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\6', value: '0', type: REG_BINARY, data: '5a003100000000003c504d1c100023546f7272656e740000420009000400efbe9e4f78143c504d1c2e00000038010000000001000000000000000000000000000000efc7f100230054006f007200720065006e007400000018000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\6\0', value: 'NodeSlot', type: REG_DWORD, data: '73'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\6\0', value: 'MRUListEx', type: REG_BINARY, data: '0000000001000000ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\6\0', value: '0', type: REG_BINARY, data: 'c6003100000000003c50271d10004d722e526f626f742e5330334531302e31303830702e5745422e683236342d434f4e564f595b72617262675d00008a0009000400efbe3c509b1a3c50271d2e000000160500000000010000000000000000000000000000003ea027004d0072002e0052006f0062006f0074002e005300300033004500310030002e00310030003800300070002e005700450042002e0068003200360034002d0043004f004e0056004f0059005b00720061007200620067005d0000003c000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\6\0', value: '1', type: REG_BINARY, data: 'c6003100000000003b50401f10004d722e526f626f742e5330334530392e31303830702e5745422e483236342d5354526946455b72617262675d00008a0009000400efbe3b505a1c3b50401f2e000000080500000000010000000000000000000000000000009a0e02004d0072002e0052006f0062006f0074002e005300300033004500300039002e00310030003800300070002e005700450042002e0048003200360034002d005300540052006900460045005b00720061007200620067005d0000003c000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\6\0\0', value: 'NodeSlot', type: REG_DWORD, data: '74'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\6\0\0', value: 'MRUListEx', type: REG_BINARY, data: 'ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\6\0\1', value: 'NodeSlot', type: REG_DWORD, data: '75'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\6\0\1', value: 'MRUListEx', type: REG_BINARY, data: 'ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1', value: 'NodeSlot', type: REG_DWORD, data: '8'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1', value: 'MRUListEx', type: REG_BINARY, data: '00000000ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1', value: '0', type: REG_BINARY, data: '820074001c004346534616003100000000003d5037b5120041707044617461000000741a595e96dfd3488d671733bcee28bac5cdfadf9f6756418947c5c76bc0b67f400009000400efbe3d5037b53d5037b52e00000042720100000001000000000000000000000000000000aff339004100700070004400610074006100000042000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\0', value: 'NodeSlot', type: REG_DWORD, data: '9'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\0', value: 'MRUListEx', type: REG_BINARY, data: '00000000ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\0', value: '0', type: REG_BINARY, data: '56003100000000002f4d513d1000526f616d696e6700400009000400efbe3d5037b53d5037b52e0000004372010000000100000000000000000000000000000012f3570052006f0061006d0069006e006700000016000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\0\0', value: 'NodeSlot', type: REG_DWORD, data: '10'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\0\0', value: 'MRUListEx', type: REG_BINARY, data: 'ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2', value: 'NodeSlot', type: REG_DWORD, data: '20'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2', value: 'MRUListEx', type: REG_BINARY, data: '0300000007000000000000000200000006000000040000000500000001000000ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2', value: '0', type: REG_BINARY, data: '56003100000000003d5060b310006372752d312e3400400009000400efbe3d502db63d502db62e000000df840100000001000000000000000000000000000000f6ff2b006300720075002d0031002e003400000016000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2', value: '1', type: REG_BINARY, data: '72003100000000003d5063b3100054696d657242656e636820312e332e330000520009000400efbe3d5032b63d5032b62e0000002898010000000100000000000000000000000000000014225d00540069006d0065007200420065006e0063006800200031002e0033002e003300000020000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2', value: '2', type: REG_BINARY, data: '78003100000000003d5062b310004d6f7573655465737465725f76312e352e330000560009000400efbe3d502fb63d502fb62e000000ea90010000000100000000000000000000000000000079e08e004d006f007500730065005400650073007400650072005f00760031002e0035002e003300000022000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2', value: '3', type: REG_BINARY, data: '74003100000000003d5063b31000537973696e7465726e616c73537569746500540009000400efbe3d5031b63d5031b62e0000004797010000000100000000000000000000000000000014fd770053007900730069006e007400650072006e0061006c00730053007500690074006500000020000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2', value: '4', type: REG_BINARY, data: '62003100000000003d5062b310004d53495f7574696c5f763200480009000400efbe3d502fb63d502fb62e000000f090010000000100000000000000000000000000000051928e004d00530049005f007500740069006c005f007600320000001a000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2', value: '5', type: REG_BINARY, data: '92003100000000003d5061b310004372797374616c4469736b4d61726b365f305f325368697a756b7500680009000400efbe3d502db63d502db62e000000a788010000000100000000000000000000000000000000759c004300720079007300740061006c004400690073006b004d00610072006b0036005f0030005f0032005300680069007a0075006b00750000002a000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2', value: '6', type: REG_BINARY, data: '9c003100000000003d502db61000496e7465727275707420416666696e69747920506f6c69637920546f6f6c00006e0009000400efbe3d502db63d502db62e000000ef8b010000000100000000000000000000000000000013a4460049006e007400650072007200750070007400200041006600660069006e00690074007900200050006f006c00690063007900200054006f006f006c0000002e000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2', value: '7', type: REG_BINARY, data: '66003100000000003d5032b610005443504f7074696d697a657200004a0009000400efbe3d5032b63d5032b62e000000eb970100000001000000000000000000000000000000370b2a015400430050004f007000740069006d0069007a006500720000001c000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\0', value: 'NodeSlot', type: REG_DWORD, data: '21'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\0', value: 'MRUListEx', type: REG_BINARY, data: 'ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\1', value: 'NodeSlot', type: REG_DWORD, data: '31'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\1', value: 'MRUListEx', type: REG_BINARY, data: 'ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\2', value: 'NodeSlot', type: REG_DWORD, data: '43'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\2', value: 'MRUListEx', type: REG_BINARY, data: 'ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\3', value: 'NodeSlot', type: REG_DWORD, data: '44'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\3', value: 'MRUListEx', type: REG_BINARY, data: 'ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\4', value: 'NodeSlot', type: REG_DWORD, data: '47'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\4', value: 'MRUListEx', type: REG_BINARY, data: 'ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\5', value: 'NodeSlot', type: REG_DWORD, data: '64'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\5', value: 'MRUListEx', type: REG_BINARY, data: 'ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\6', value: 'NodeSlot', type: REG_DWORD, data: '71'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\6', value: 'MRUListEx', type: REG_BINARY, data: 'ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\7', value: 'NodeSlot', type: REG_DWORD, data: '81'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\2\7', value: 'MRUListEx', type: REG_BINARY, data: 'ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\3', value: '0', type: REG_BINARY, data: '0c0001008421de39000000000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\3', value: 'MRUListEx', type: REG_BINARY, data: '0000000001000000ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\3', value: '1', type: REG_BINARY, data: '0c0001008421de39030000000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\3\0', value: 'NodeSlot', type: REG_DWORD, data: '25'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\3\0', value: 'MRUListEx', type: REG_BINARY, data: '02000000010000000000000003000000ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\3\0', value: '0', type: REG_BINARY, data: '1e0071800000000000000000000037595a02bea68646a84436fe4bec8b6d0000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\3\0', value: '1', type: REG_BINARY, data: '1e00718000000000000000000000c98f908eccbef640915bf4ca0e70d03d0000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\3\0', value: '2', type: REG_BINARY, data: '1e00718000000000000000000000e4c006bb93d2754f8a90cb05b6477eee0000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\3\0', value: '3', type: REG_BINARY, data: '1e007180000000000000000000006abe817b2bce7646a29eeb907a5126c50000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\3\0\0', value: 'NodeSlot', type: REG_DWORD, data: '26'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\3\0\0', value: 'MRUListEx', type: REG_BINARY, data: '0100000000000000ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\3\0\0', value: '0', type: REG_BINARY, data: '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'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\3\0\0', value: '1', type: REG_BINARY, data: '07010000010100eeebbef3000400020000005500000031535053537def0c64fad111a2030000f81fedee3900000005000000001f00000013000000700061006700650047006c006f00620061006c00530065007400740069006e006700730000000000000000004d0000003153505330f125b7ef471a10a5f102608c9eebac310000000a000000001f00000010000000530079007300740065006d002000530065007400740069006e00670073000000000000004d000000315350538727bf5ccf480842b90eee5e5d4202943100000019000000001f0000001000000070006f00770065007200630070006c002e0064006c006c002c002d0031000000000000000000000000000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\3\0\0\0', value: 'NodeSlot', type: REG_DWORD, data: '27'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\3\0\0\0', value: 'MRUListEx', type: REG_BINARY, data: 'ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\3\0\0\1', value: 'NodeSlot', type: REG_DWORD, data: '82'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\3\0\0\1', value: 'MRUListEx', type: REG_BINARY, data: 'ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\3\0\1', value: 'NodeSlot', type: REG_DWORD, data: '28'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\3\0\1', value: 'MRUListEx', type: REG_BINARY, data: '00000000ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\3\0\1', value: '0', type: REG_BINARY, data: '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'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\3\0\1\0', value: 'NodeSlot', type: REG_DWORD, data: '30'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\3\0\1\0', value: 'MRUListEx', type: REG_BINARY, data: 'ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\3\0\2', value: 'NodeSlot', type: REG_DWORD, data: '48'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\3\0\2', value: 'MRUListEx', type: REG_BINARY, data: 'ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\3\0\3', value: 'NodeSlot', type: REG_DWORD, data: '49'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\3\0\3', value: 'MRUListEx', type: REG_BINARY, data: 'ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\3\1', value: '0', type: REG_BINARY, data: '1e00718000000000000000000000c7ac07700232d111aad200805fc1270e0000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\3\1', value: 'MRUListEx', type: REG_BINARY, data: '00000000ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\3\1\0', value: 'NodeSlot', type: REG_DWORD, data: '29'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\3\1\0', value: 'MRUListEx', type: REG_BINARY, data: 'ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\4', value: 'NodeSlot', type: REG_DWORD, data: '87'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\4', value: 'MRUListEx', type: REG_BINARY, data: 'ffffffff'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'Mode', type: REG_DWORD, data: '6'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'LogicalViewMode', type: REG_DWORD, data: '2'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'FFlags', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'IconSize', type: REG_DWORD, data: '48'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'Sort', type: REG_BINARY, data: '000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'ColInfo', type: REG_BINARY, data: '00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a000000a000000030f125b7ef471a10a5f102608c9eebac04000000c8000000354b179bff40d211a27e00c04fc308710300000080000000354b179bff40d211a27e00c04fc308710200000080000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupCollapseState', type: REG_BINARY, data: '00000000000000000000000000000000000000000000000000000000000000000100000008000000010000000800000046006f006c0064006500720073000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupView', type: REG_DWORD, data: '4294967295'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupByKey:FMTID', type: REG_SZ, data: '{B725F130-47EF-101A-A5F1-02608C9EEBAC}'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupByKey:PID', type: REG_DWORD, data: '4'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupByDirection', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'Rev', type: REG_DWORD, data: '5'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'FFlags', type: REG_DWORD, data: '1092616209'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'Vid', type: REG_SZ, data: '{65F125E5-7BE1-4810-BA9D-D271C8432CE3}'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'Mode', type: REG_DWORD, data: '6'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'LogicalViewMode', type: REG_DWORD, data: '2'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'IconSize', type: REG_DWORD, data: '48'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'Sort', type: REG_BINARY, data: '000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'ColInfo', type: REG_BINARY, data: '00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a000000a000000030f125b7ef471a10a5f102608c9eebac04000000c8000000354b179bff40d211a27e00c04fc308710300000080000000354b179bff40d211a27e00c04fc308710200000080000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupView', type: REG_DWORD, data: '4294967295'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupByKey:FMTID', type: REG_SZ, data: '{B725F130-47EF-101A-A5F1-02608C9EEBAC}'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupByKey:PID', type: REG_DWORD, data: '4'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupByDirection', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\10\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\11\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'Mode', type: REG_DWORD, data: '4'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\11\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'LogicalViewMode', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\11\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'FFlags', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\11\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'IconSize', type: REG_DWORD, data: '16'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\11\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'Sort', type: REG_BINARY, data: '000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\11\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'ColInfo', type: REG_BINARY, data: '00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000007800000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\11\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupView', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\11\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupByKey:FMTID', type: REG_SZ, data: '{00000000-0000-0000-0000-000000000000}'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\11\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupByKey:PID', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\11\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupByDirection', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\11\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\12\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\13\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\14\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\15\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'Mode', type: REG_DWORD, data: '4'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\15\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'LogicalViewMode', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\15\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'FFlags', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\15\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'IconSize', type: REG_DWORD, data: '16'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\15\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'Sort', type: REG_BINARY, data: '000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\15\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'ColInfo', type: REG_BINARY, data: '00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001802000030f125b7ef471a10a5f102608c9eebac0e0000007800000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\15\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupView', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\15\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupByKey:FMTID', type: REG_SZ, data: '{00000000-0000-0000-0000-000000000000}'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\15\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupByKey:PID', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\15\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupByDirection', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\15\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\16\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'Mode', type: REG_DWORD, data: '4'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\16\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'LogicalViewMode', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\16\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'FFlags', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\16\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'IconSize', type: REG_DWORD, data: '16'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\16\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'Sort', type: REG_BINARY, data: '000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\16\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'ColInfo', type: REG_BINARY, data: '00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000007800000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\16\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupView', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\16\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupByKey:FMTID', type: REG_SZ, data: '{00000000-0000-0000-0000-000000000000}'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\16\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupByKey:PID', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\16\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupByDirection', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\16\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\17\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\18\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\19\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'Mode', type: REG_DWORD, data: '4'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'LogicalViewMode', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'FFlags', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'IconSize', type: REG_DWORD, data: '16'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'Sort', type: REG_BINARY, data: '000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'ColInfo', type: REG_BINARY, data: '00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000007800000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupView', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupByKey:FMTID', type: REG_SZ, data: '{00000000-0000-0000-0000-000000000000}'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupByKey:PID', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupByDirection', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\20\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\21\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\22\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\23\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\23\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'Rev', type: REG_DWORD, data: '5'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\23\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'FFlags', type: REG_DWORD, data: '1092616193'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\23\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'Vid', type: REG_SZ, data: '{137E7700-3573-11CF-AE69-08002B2E1262}'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\23\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'Mode', type: REG_DWORD, data: '4'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\23\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'LogicalViewMode', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\23\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'IconSize', type: REG_DWORD, data: '16'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\23\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'Sort', type: REG_BINARY, data: '000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\23\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'ColInfo', type: REG_BINARY, data: '00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a000000a701000030f125b7ef471a10a5f102608c9eebac0c0000007a00000030f125b7ef471a10a5f102608c9eebac0e0000008100000030f125b7ef471a10a5f102608c9eebac0f00000083000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\23\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupView', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\23\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupByKey:FMTID', type: REG_SZ, data: '{00000000-0000-0000-0000-000000000000}'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\23\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupByKey:PID', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\23\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupByDirection', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\24\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryKey: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\25\Shell', operation: add} - - !registryKey: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\26\Shell', operation: add} - - !registryKey: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\27\Shell', operation: add} - - !registryKey: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\28\Shell', operation: add} - - !registryKey: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\29\Shell', operation: add} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\3\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryKey: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\30\Shell', operation: add} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\31\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\32\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\33\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\34\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\35\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\36\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\37\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\38\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\39\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\4\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\40\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\41\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\42\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'Mode', type: REG_DWORD, data: '4'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\42\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'LogicalViewMode', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\42\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'FFlags', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\42\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'IconSize', type: REG_DWORD, data: '16'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\42\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'Sort', type: REG_BINARY, data: '000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\42\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'ColInfo', type: REG_BINARY, data: '00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000007800000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\42\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupView', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\42\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupByKey:FMTID', type: REG_SZ, data: '{00000000-0000-0000-0000-000000000000}'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\42\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupByKey:PID', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\42\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupByDirection', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\42\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\43\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\44\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\45\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'Mode', type: REG_DWORD, data: '4'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\45\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'LogicalViewMode', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\45\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'FFlags', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\45\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'IconSize', type: REG_DWORD, data: '16'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\45\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'Sort', type: REG_BINARY, data: '000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\45\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'ColInfo', type: REG_BINARY, data: '00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000007800000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\45\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupView', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\45\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupByKey:FMTID', type: REG_SZ, data: '{00000000-0000-0000-0000-000000000000}'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\45\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupByKey:PID', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\45\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupByDirection', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\45\ComDlgLegacy\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'Mode', type: REG_DWORD, data: '4'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\45\ComDlgLegacy\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'LogicalViewMode', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\45\ComDlgLegacy\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'FFlags', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\45\ComDlgLegacy\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'IconSize', type: REG_DWORD, data: '16'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\45\ComDlgLegacy\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'Sort', type: REG_BINARY, data: '000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\45\ComDlgLegacy\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'ColInfo', type: REG_BINARY, data: '00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000007800000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\45\ComDlgLegacy\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupView', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\45\ComDlgLegacy\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupByKey:FMTID', type: REG_SZ, data: '{00000000-0000-0000-0000-000000000000}'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\45\ComDlgLegacy\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupByKey:PID', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\45\ComDlgLegacy\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupByDirection', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\45\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\46\ComDlgLegacy\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'Mode', type: REG_DWORD, data: '6'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\46\ComDlgLegacy\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'LogicalViewMode', type: REG_DWORD, data: '2'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\46\ComDlgLegacy\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'FFlags', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\46\ComDlgLegacy\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'IconSize', type: REG_DWORD, data: '48'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\46\ComDlgLegacy\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'Sort', type: REG_BINARY, data: '000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\46\ComDlgLegacy\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'ColInfo', type: REG_BINARY, data: '00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a000000a000000030f125b7ef471a10a5f102608c9eebac0c00000050000000a66a63283d95d211b5d600c04fd918d00b0000007800000030f125b7ef471a10a5f102608c9eebac0e00000078000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\46\ComDlgLegacy\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupView', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\46\ComDlgLegacy\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupByKey:FMTID', type: REG_SZ, data: '{00000000-0000-0000-0000-000000000000}'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\46\ComDlgLegacy\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupByKey:PID', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\46\ComDlgLegacy\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupByDirection', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\47\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryKey: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\48\Shell', operation: add} - - !registryKey: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\49\Shell', operation: add} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\5\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\50\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'Mode', type: REG_DWORD, data: '4'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\50\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'LogicalViewMode', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\50\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'FFlags', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\50\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'IconSize', type: REG_DWORD, data: '16'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\50\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'Sort', type: REG_BINARY, data: '000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\50\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'ColInfo', type: REG_BINARY, data: '00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000007800000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\50\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupView', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\50\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupByKey:FMTID', type: REG_SZ, data: '{00000000-0000-0000-0000-000000000000}'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\50\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupByKey:PID', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\50\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupByDirection', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\50\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\51\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\52\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\53\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\54\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\55\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\56\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\57\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\58\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\59\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\6\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\60\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryKey: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\61\Shell', operation: add} - - !registryKey: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\62\Shell', operation: add} - - !registryKey: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\63\Shell', operation: add} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\64\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\65\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\66\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryKey: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\67\Shell', operation: add} - - !registryKey: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\68\Shell', operation: add} - - !registryKey: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\69\Shell', operation: add} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\7\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryKey: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\70\Shell', operation: add} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\71\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\72\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\73\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\74\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\75\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\76\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\77\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'Mode', type: REG_DWORD, data: '4'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\77\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'LogicalViewMode', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\77\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'FFlags', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\77\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'IconSize', type: REG_DWORD, data: '16'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\77\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'Sort', type: REG_BINARY, data: '000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\77\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'ColInfo', type: REG_BINARY, data: '00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000007800000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\77\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupView', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\77\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupByKey:FMTID', type: REG_SZ, data: '{00000000-0000-0000-0000-000000000000}'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\77\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupByKey:PID', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\77\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupByDirection', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\77\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\78\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'Mode', type: REG_DWORD, data: '4'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\78\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'LogicalViewMode', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\78\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'FFlags', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\78\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'IconSize', type: REG_DWORD, data: '16'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\78\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'Sort', type: REG_BINARY, data: '000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\78\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'ColInfo', type: REG_BINARY, data: '00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000007800000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\78\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupView', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\78\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupByKey:FMTID', type: REG_SZ, data: '{00000000-0000-0000-0000-000000000000}'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\78\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupByKey:PID', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\78\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupByDirection', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\78\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\79\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'Mode', type: REG_DWORD, data: '4'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\79\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'LogicalViewMode', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\79\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'FFlags', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\79\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'IconSize', type: REG_DWORD, data: '16'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\79\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'Sort', type: REG_BINARY, data: '000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\79\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'ColInfo', type: REG_BINARY, data: '00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000007800000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\79\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupView', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\79\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupByKey:FMTID', type: REG_SZ, data: '{00000000-0000-0000-0000-000000000000}'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\79\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupByKey:PID', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\79\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupByDirection', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\79\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryKey: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\8\Shell', operation: add} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\80\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'Mode', type: REG_DWORD, data: '4'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\80\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'LogicalViewMode', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\80\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'FFlags', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\80\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'IconSize', type: REG_DWORD, data: '16'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\80\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'Sort', type: REG_BINARY, data: '000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\80\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'ColInfo', type: REG_BINARY, data: '00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000007800000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\80\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupView', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\80\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupByKey:FMTID', type: REG_SZ, data: '{00000000-0000-0000-0000-000000000000}'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\80\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupByKey:PID', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\80\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupByDirection', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\80\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\81\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryKey: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\82\Shell', operation: add} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\83\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'Mode', type: REG_DWORD, data: '4'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\83\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'LogicalViewMode', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\83\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'FFlags', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\83\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'IconSize', type: REG_DWORD, data: '16'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\83\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'Sort', type: REG_BINARY, data: '000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\83\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'ColInfo', type: REG_BINARY, data: '00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000007800000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\83\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupView', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\83\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupByKey:FMTID', type: REG_SZ, data: '{00000000-0000-0000-0000-000000000000}'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\83\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupByKey:PID', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\83\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupByDirection', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\83\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\84\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\85\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'Mode', type: REG_DWORD, data: '4'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\85\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'LogicalViewMode', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\85\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'FFlags', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\85\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'IconSize', type: REG_DWORD, data: '16'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\85\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'Sort', type: REG_BINARY, data: '000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\85\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'ColInfo', type: REG_BINARY, data: '00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000007800000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\85\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupView', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\85\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupByKey:FMTID', type: REG_SZ, data: '{00000000-0000-0000-0000-000000000000}'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\85\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupByKey:PID', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\85\ComDlg\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupByDirection', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\85\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\86\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\87\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\88\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\89\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\89\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'Rev', type: REG_DWORD, data: '3'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\89\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'FFlags', type: REG_DWORD, data: '1092616193'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\89\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'Vid', type: REG_SZ, data: '{137E7700-3573-11CF-AE69-08002B2E1262}'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\89\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'Mode', type: REG_DWORD, data: '4'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\89\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'LogicalViewMode', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\89\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'IconSize', type: REG_DWORD, data: '16'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\89\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'Sort', type: REG_BINARY, data: '000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\89\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'ColInfo', type: REG_BINARY, data: '00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a000000a701000030f125b7ef471a10a5f102608c9eebac0c0000007a00000030f125b7ef471a10a5f102608c9eebac0e0000008100000030f125b7ef471a10a5f102608c9eebac0f00000083000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\89\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupView', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\89\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupByKey:FMTID', type: REG_SZ, data: '{00000000-0000-0000-0000-000000000000}'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\89\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupByKey:PID', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\89\Shell\{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', value: 'GroupByDirection', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\9\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\90\Shell', value: 'SniffedFolderType', type: REG_SZ, data: 'Generic'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\AllFolders\Shell', value: 'FolderType', type: REG_SZ, data: 'NotSpecified'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\AllFolders\Shell', value: 'MinPos3440x1440x96(1).x', type: REG_DWORD, data: '4294967295'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\AllFolders\Shell', value: 'MinPos3440x1440x96(1).y', type: REG_DWORD, data: '4294967295'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\AllFolders\Shell', value: 'MaxPos3440x1440x96(1).x', type: REG_DWORD, data: '4294967295'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\AllFolders\Shell', value: 'MaxPos3440x1440x96(1).y', type: REG_DWORD, data: '4294967295'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\AllFolders\Shell', value: 'WinPos3440x1440x96(1).left', type: REG_DWORD, data: '531'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\AllFolders\Shell', value: 'WinPos3440x1440x96(1).top', type: REG_DWORD, data: '569'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\AllFolders\Shell', value: 'WinPos3440x1440x96(1).right', type: REG_DWORD, data: '1614'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\AllFolders\Shell', value: 'WinPos3440x1440x96(1).bottom', type: REG_DWORD, data: '1278'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\AllFolders\Shell', value: 'WFlags', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\AllFolders\Shell', value: 'ShowCmd', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\AllFolders\Shell', value: 'HotKey', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\AllFolders\Shell', value: 'NavBar', type: REG_BINARY, data: '000000000000000000000000000000008b000000870000003153505305d5cdd59c2e1b10939708002b2cf9ae6b0000005a000000007b00360044003800420042003300440033002d0039004400380037002d0034004100390031002d0041004200350036002d003400460033003000430046004600450046004500390046007d005f0057006900640074006800000013000000cc0000000000000000000000'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\AllFolders\Shell\Microsoft.Windows.ControlPanel', value: 'MinPos3440x1440x96(1).x', type: REG_DWORD, data: '4294935296'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\AllFolders\Shell\Microsoft.Windows.ControlPanel', value: 'MinPos3440x1440x96(1).y', type: REG_DWORD, data: '4294935296'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\AllFolders\Shell\Microsoft.Windows.ControlPanel', value: 'MaxPos3440x1440x96(1).x', type: REG_DWORD, data: '4294967295'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\AllFolders\Shell\Microsoft.Windows.ControlPanel', value: 'MaxPos3440x1440x96(1).y', type: REG_DWORD, data: '4294967295'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\AllFolders\Shell\Microsoft.Windows.ControlPanel', value: 'WinPos3440x1440x96(1).left', type: REG_DWORD, data: '766'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\AllFolders\Shell\Microsoft.Windows.ControlPanel', value: 'WinPos3440x1440x96(1).top', type: REG_DWORD, data: '361'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\AllFolders\Shell\Microsoft.Windows.ControlPanel', value: 'WinPos3440x1440x96(1).right', type: REG_DWORD, data: '1905'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\AllFolders\Shell\Microsoft.Windows.ControlPanel', value: 'WinPos3440x1440x96(1).bottom', type: REG_DWORD, data: '1002'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\AllFolders\Shell\Microsoft.Windows.ControlPanel', value: 'WFlags', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\AllFolders\Shell\Microsoft.Windows.ControlPanel', value: 'ShowCmd', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\AllFolders\Shell\Microsoft.Windows.ControlPanel', value: 'HotKey', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Streams\Defaults', value: '{5C4F28B5-F869-4E84-8E60-F11DB97C5CC7}', type: REG_BINARY, data: '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'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\Shell\BagMRU', value: 'NodeSlots', type: REG_BINARY, data: '02'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\Shell\BagMRU', value: 'MRUListEx', type: REG_BINARY, data: 'ffffffff'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\Shell\BagMRU', value: 'NodeSlot', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\Shell\Bags\1\Desktop', value: 'FFlags', type: REG_DWORD, data: '1075839524'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\Shell\Bags\1\Desktop', value: 'Mode', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\Shell\Bags\1\Desktop', value: 'LogicalViewMode', type: REG_DWORD, data: '3'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\Shell\Bags\1\Desktop', value: 'IconSize', type: REG_DWORD, data: '48'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\Shell\Bags\1\Desktop', value: 'Sort', type: REG_BINARY, data: '0000000000000000000000000000000000000000'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\Shell\Bags\1\Desktop', value: 'GroupView', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\Shell\Bags\1\Desktop', value: 'GroupByKey:FMTID', type: REG_SZ, data: '{00000000-0000-0000-0000-000000000000}'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\Shell\Bags\1\Desktop', value: 'GroupByKey:PID', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\Shell\Bags\1\Desktop', value: 'GroupByDirection', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\Shell\Bags\1\Desktop', value: 'IconLayouts', type: REG_BINARY, data: '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'} diff --git a/src/Configuration/features/revision/registry/configure-explorer-settings.yml b/src/Configuration/features/revision/registry/configure-explorer-settings.yml deleted file mode 100644 index 14eb8528..00000000 --- a/src/Configuration/features/revision/registry/configure-explorer-settings.yml +++ /dev/null @@ -1,202 +0,0 @@ ---- -title: configure-explorer-settings -description: configure-explorer-settings -privilege: TrustedInstaller -actions: - - # =============== - # === General === - # =============== - # === Open File Exlporer to - This PC (instead of Quick Access) - # [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced] - # "LaunchTo"=dword:00000001 - # === Show recently used files in Quick Access - Enabled - # [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer] - # "ShowRecent"=dword:00000001 - # === Show frequently used files in Quick Access - Enabled - # [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer] - # "ShowFrequent"=dword:00000001 - # ============ - # === View === - # ============ - # === Display the full path in title bar - Enabled - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\CabinetState', value: 'FullPath', type: REG_DWORD, data: '1'} - # === Hide extensions for known file types - Disabled - # ------> Disabled for Security reasons - - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'HideFileExt', type: REG_DWORD, data: '0'} - # === Show sync provider notifications (ads) - Disabled - - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'ShowSyncProviderNotifications', type: REG_DWORD, data: '0'} - # ============= - # === Extra === - # ============= - # === Increased context options time threshold - # ------> If selecting and right clicking more than x amount of items, some context options disappear (i.e. Take ownership), this will increase the threshold. - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer', value: 'MultipleInvokePromptMinimum', type: REG_DWORD, data: '100'} - - !registryValue: {path: 'HKCU\Software\Winaero.com\Winaero Tweaker\Changes', value: 'pageContextMenuSelectionLimit', type: REG_DWORD, data: '1'} - # === Disable Wallpaper JPEG (.jpg) image Compression. - - !registryValue: {path: 'HKCU\Control Panel\Desktop', value: 'JPEGImportQuality', type: REG_DWORD, data: '100'} - # === Disable system beeps. - - !registryValue: {path: 'HKCU\Control Panel\Sound', value: 'Beep', type: REG_SZ, data: 'no'} - # === Disable ' - Shortcut.' text on shortcut creation. - - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer', value: 'link', type: REG_BINARY, data: '00000000'} - # === Always show all icons and notifications on the taskbar - Disabled - # ------> The default for this can be set under HKEY_LOCAL_MACHINE. - # ------> Defaulted due to removal of subjective changes. - # [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer] - # "EnableAutoTray"=dword:00000001 - # === Always show more details in a file copy dialog - Enabled - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\OperationStatusManager', value: 'EnthusiastMode', type: REG_DWORD, data: '1'} - # === AutoPlay - Disabled - # ------> Auto play is the notification that pops up when you insert an external storage device, like a USB. - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers', value: 'DisableAutoplay', type: REG_DWORD, data: '1'} - # === AutoRun - Disabled - # ------> Disable autorun will limit the functionality of autorun.inf on all disks. - # ------> https://learn.microsoft.com/en-us/windows/win32/shell/autoplay-reg - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer', value: 'NoDriveTypeAutoRun', type: REG_DWORD, data: '255'} - - !registryValue: {path: 'HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer', value: 'NoDriveTypeAutoRun', type: REG_DWORD, data: '255'} - # === Show Task View button in taskbar - Enabled - # ------> Defaulted due to removal of subjective changes. - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'ShowTaskViewButton', type: REG_DWORD, data: '1'} - # === Windows low disk space checking - Disabled - # ------> (Also prevents idle hard disks from going into standby) - - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer', value: 'NoLowDiskSpaceChecks', type: REG_DWORD, data: '1'} - # === Changes the time (milliseconds) it takes for the tooltips to pop up when hovering your mouse over elements to 30 ms. (default = 400 ms) - - !registryValue: {path: 'HKCU\Control Panel\Mouse', value: 'MouseHoverTime', type: REG_SZ, data: '30'} - # === Makes the Start Menu appear almost instantly when you click on the Windows icon in the Taskbar. - - !registryValue: {path: 'HKCU\Control Panel\Desktop', value: 'MenuShowDelay', type: REG_SZ, data: '0'} - # === Specifies time (in milliseconds) that the mouse needs to remain over a window before the window is activated. (current setting is 10 ms) - - !registryValue: {path: 'HKCU\Control Panel\Desktop', value: 'ActiveWndTrkTimeout', type: REG_DWORD, data: '10'} - # === Do not track Shell shortcuts during roaming - Enabled - # ------> https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.WindowsExplorer::LinkResolveIgnoreLinkInfo - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer', value: 'LinkResolveIgnoreLinkInfo', type: REG_DWORD, data: '1'} - # === Do not use the search-based method when resolving shell shortcuts - Enabled - # ------> https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.StartMenu::NoResolveSearch - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer', value: 'NoResolveSearch', type: REG_DWORD, data: '1'} - # === Do not use the tracking-based method when resolving shell shortcuts - Enabled - # ------> Disables NTFS tracking features. - # ------> https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.StartMenu::NoResolveTrack - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer', value: 'NoResolveTrack', type: REG_DWORD, data: '1'} - # === Disables the blue screen that pops up when you're trying to shutdown or restart, asking you to save your work. - - !registryValue: {path: 'HKCU\Control Panel\Desktop', value: 'AutoEndTasks', type: REG_SZ, data: '0'} - - !registryValue: {path: 'HKU\.DEFAULT\Control Panel\Desktop', value: 'AutoEndTasks', type: REG_SZ, data: '0'} - # === HungAppTimeout also specifies how long (5 seconds by default) the system waits for user processes to end after the user clicks/taps on the End task button in Task Manager. - # ------> Changed 2 seconds (2000), default is 5 seconds (5000). - # ------> https://www.tenforums.com/tutorials/97842-change-hungapptimeout-value-windows-10-a.html - - !registryValue: {path: 'HKCU\Control Panel\Desktop', value: 'HungAppTimeout', type: REG_SZ, data: '2000'} - - !registryValue: {path: 'HKU\.DEFAULT\Control Panel\Desktop', value: 'HungAppTimeout', type: REG_SZ, data: '2000'} - # === The WaitToKillAppTimeout value determines how long the system waits for user processes to end after the user attempts to sign out, restart, or shut down Windows. - # ------> Changed to 2 seconds (2000), default is 20 seconds (20000). - # ------> https://www.eightforums.com/threads/waittokillapptimeout-specify-for-shutdown-in-windows.37424/ - - !registryValue: {path: 'HKCU\Control Panel\Desktop', value: 'WaitToKillAppTimeout', type: REG_SZ, data: '2000'} - - !registryValue: {path: 'HKU\.DEFAULT\Control Panel\Desktop', value: 'WaitToKillAppTimeout', type: REG_SZ, data: '2000'} - # === This value controls the timeout period in milliseconds for all low-level hooks. - # ------> https://www.registryrecycler.com/blog/2013/07/speed-up-your-windows-pc-through-registry/ - # ------> https://www.quickmacros.com/au/help/api/Au.AHookWin.LowLevelHooksTimeout.html#Au_AHookWin_LowLevelHooksTimeout_remarks - # ------> https://bit.ly/300Dqwh - - !registryValue: {path: 'HKCU\Control Panel\Desktop', value: 'LowLevelHooksTimeout', type: REG_SZ, data: '1000'} - - !registryValue: {path: 'HKU\.DEFAULT\Control Panel\Desktop', value: 'LowLevelHooksTimeout', type: REG_SZ, data: '1000'} - # === Speed up shutdown time by lowering the amount of time it takes the OS to close/kill background Services. - # ------> Changed to 1.5 seconds (1500), default is 5 seconds (5000). - # ------> https://www.sevenforums.com/tutorials/717-shut-down-speed-up.html - - !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Control', value: 'WaitToKillServiceTimeout', type: REG_SZ, data: '1500'} - # === Disable Taskbar Animations. (prevents the pop up windows in the taskbar from getting stuck too) - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'TaskbarAnimations', type: REG_DWORD, data: '0', option: 'configure-explorer-taskbar-animations'} - - - !registryValue: { path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'TaskbarAnimations', operation: delete, option: '!configure-explorer-taskbar-animations' } - - - # === Turn off display of recent search entries in the File Explorer search box - Enabled - # ------> Additionally this also disables Bing in the Start Menu in Windows 10's May 2020 update (20H1). - # ------> https://www.howtogeek.com/224159/how-to-disable-bing-in-the-windows-10-start-menu/ - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows\Explorer', value: 'DisableSearchBoxSuggestions', type: REG_DWORD, data: '1'} - - # === Disable the new Weather and News widgets - # ------> Other parts of it can be found in configure-ifeo - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Feeds', value: 'EnableFeeds', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Feeds', value: 'ShellFeedsTaskbarViewMode', type: REG_DWORD, data: '2', errorAction: Ignore} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'TaskbarDa', type: REG_DWORD, data: '0', errorAction: Ignore} - # ------> since 22621.1343 builds, Windows 11 tries to reinstall WebExperience even if it is removed and stored in deprovisioned apps list - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Dsh', value: 'AllowNewsAndInterests', type: REG_DWORD, data: '0'} - - - # ========================== - # === Attachment Manager === - # ========================== - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer', value: 'SmartScreenEnabled', type: REG_SZ, data: 'Off'} - # === Default risk level for file attachments - Disable the warning The Publisher could not be verified - # ------> https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.AttachmentManager::AM_SetFileRiskLevel - # ------> https://www.tenforums.com/antivirus-firewalls-system-security/17588-disabling-smartscreen-windows-10-does-not-actually-disable.html - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Associations', value: 'DefaultFileTypeRisk', type: REG_DWORD, data: '1808'} - # === Do not preserve zone information in file attachments - Enabled - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments', value: 'SaveZoneInformation', type: REG_DWORD, data: '1'} - # === Inclusion list for low file types - Enabled (list found below) - # - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Associations', value: 'LowRiskFileTypes', type: REG_SZ, data: '.avi;.bat;.com;.cmd;.exe;.htm;.html;.lnk;.mpg;.mpeg;.mov;.mp3;.msi;.m3u;.rar;.reg;.txt;.vbs;.wav;.zip;'} - # === Inclusion list for moderate risk file types - Enabled (list found below) - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Associations', value: 'ModRiskFileTypes', type: REG_SZ, data: '.bat;.exe;.reg;.vbs;.chm;.msi;.js;.cmd'} - # === Notify antivirus programs when opening attachments - Disabled - # ------> Default is 3 - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments', value: 'ScanWithAntiVirus', type: REG_DWORD, data: '1'} - - - # === Disables Automatic Folder Type Discovery - # ------> Disabling it fixes the 'folder always loading' issue when a folder contains a lot of media files. - # ------> https://www.windowslatest.com/2024/03/04/windows-11-can-open-big-folders-in-file-explorer-faster-if-you-turn-off-folder-discovery/ - - !registryValue: {path: 'HKCU\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\AllFolders\Shell', value: 'FolderType', type: REG_SZ, data: 'NotSpecified'} - - # === Force explorer to use high performance GPU - - !registryValue: { path: 'HKCU\Software\Microsoft\DirectX\UserGpuPreferences', value: 'C:\Windows\explorer.exe', type: REG_SZ, data: 'GpuPreference=2;' } - - # === Disable "Include account-based insights, recent, favorite and recommended" for OneDrive in File Explorer - - !registryValue: { path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Explorer', value: 'DisableGraphRecentItems', type: REG_DWORD, data: '1' } - - # === Disable Group By in the Downloads folder to avoid unnecessary dates comparison - - !powerShell: - runas: trustedInstaller - command: | - $folderTypesKey = 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderTypes' - $downloadsFolderID = '{885a186e-a440-4ada-812b-db871b942259}' - - $path = Join-Path -Path $folderTypesKey -ChildPath $downloadsFolderID - Get-ChildItem -Path $path -Recurse | ForEach-Object { - if ((Get-ItemProperty -Path $_.PSPath).GroupBy) { - Set-ItemProperty -Path $_.PSPath -Name GroupBy -Value '' - } - } - - # Necesarry to refresh 'Bags' to have an - - !powerShell: - runas: currentUserElevated - command: | - $downloadsFolderID = '{885a186e-a440-4ada-812b-db871b942259}' - $bagsPath = 'HKCU:\Software\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags' - Get-ChildItem -Path $bagsPath | ForEach-Object { - $fullPath = Join-Path -Path $_.PSPath -ChildPath 'Shell\{885A186E-A440-4ADA-812B-DB871B942259}' - if (Test-Path -Path $fullPath) { - Remove-Item -Path $fullPath -Recurse - } - } - - - # === Disable the new Spotlight icon on Desktop - - !registryValue: { path: 'HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel', value: '{2cc5ca98-6485-489a-920e-b3e88a6ccce3}', type: REG_DWORD, data: '1' } - - # ======================== - # === Discarded Tweaks === - # ======================== - # === Remove "Give access to" from context menu. - # ------> (Discarded due to insignificance) - # [-HKEY_CLASSES_ROOT\*\shellex\ContextMenuHandlers\Sharing] - # [-HKEY_CLASSES_ROOT\Directory\Background\shellex\ContextMenuHandlers\Sharing] - # [-HKEY_CLASSES_ROOT\Directory\shellex\ContextMenuHandlers\Sharing] - # [-HKEY_CLASSES_ROOT\Directory\shellex\CopyHookHandlers\Sharing] - # [-HKEY_CLASSES_ROOT\Directory\shellex\PropertySheetHandlers\Sharing] - # [-HKEY_CLASSES_ROOT\Drive\shellex\ContextMenuHandlers\Sharing] - # [-HKEY_CLASSES_ROOT\Drive\shellex\PropertySheetHandlers\Sharing] - # [-HKEY_CLASSES_ROOT\LibraryFolder\background\shellex\ContextMenuHandlers\Sharing] - # [-HKEY_CLASSES_ROOT\UserLibraryFolder\shellex\ContextMenuHandlers\Sharing] - # === Disables useless Explorer items/features. - # ------> (Discarded due to conflictions with Quick Access and file/folder history) - # [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced] - # "Start_ShowRun"=dword:00000001 - # "Start_TrackDocs"=dword:00000000 - # "Start_JumpListItems"=dword:00000000 diff --git a/src/Configuration/features/revision/registry/configure-internet-explorer.yml b/src/Configuration/features/revision/registry/configure-internet-explorer.yml deleted file mode 100644 index 88f21ac5..00000000 --- a/src/Configuration/features/revision/registry/configure-internet-explorer.yml +++ /dev/null @@ -1,219 +0,0 @@ ---- -title: configure-internet-explorer -description: configure-internet-explorer -privilege: TrustedInstaller -actions: - - # =============== - # === Updates === - # =============== - # === Disable Periodic Check for Internet Explorer software updates - Enabled - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer\InfoDelivery\Restrictions', value: 'NoUpdateCheck', type: REG_DWORD, data: '1'} - # === Install new versions of Internet Explorer automatically - Disabled - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Internet Explorer\Main', value: 'EnableAutoUpgrade', type: REG_DWORD, data: '0'} - # =============== - # === General === - # =============== - # === Disable changing home page settings - Enabled - # ------> https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.InternetExplorer::RestrictHomePage - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel', value: 'HomePage', type: REG_DWORD, data: '1'} - # === Home Page - https://www.revi.cc/ - - !registryValue: {path: 'HKCU\Software\Microsoft\Internet Explorer\Main', value: 'Start Page', type: REG_SZ, data: 'https://www.revi.cc/'} - # === Notify users if Internet Explorer is not the default web browser - Disabled - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\Main', value: 'Check_Associations', type: REG_SZ, data: 'no'} - # === Warn user about Home Page changes - Disabled - # ------> https://stackoverflow.com/a/39092291 - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_EUPP_GLOBAL_FORCE_DISABLE', value: 'iexplore.exe', type: REG_DWORD, data: '1'} - # === Changes default search engine to "https://duckduckgo.com/". - # ------> Uses Google search suggestions in the search bar. - # ------> https://duckduckgo.com/params - - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes', value: 'DefaultScope', type: REG_SZ, data: '{0633EE93-D776-472f-A0FF-E1416B8B2E3A}'} - - !registryKey: {path: 'HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}'} - - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}', value: 'DisplayName', type: REG_SZ, data: 'DuckDuckGo'} - - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}', value: 'URL', type: REG_SZ, data: 'https://duckduckgo.com/?kae=t&q={searchTerms}'} - - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}', value: 'ShowSearchSuggestions', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}', value: 'FaviconURL', type: REG_SZ, data: 'https://duckduckgo.com/?kf=1'} - - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}', value: 'SuggestionsURL', type: REG_SZ, data: 'http://clients5.google.com/complete/search?q={searchTerms}&client=ie8&mw={ie:maxWidth}&sh={ie:sectionHeight}&rh={ie:rowHeight}&inputencoding={inputEncoding}&outputencoding={outputEncoding}'} - # === Disables the welcome window that pops up the first time you start Internet Explorer. - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\Main', value: 'DisableFirstRunCustomize', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Internet Explorer\Main', value: 'DisableFirstRunCustomize', type: REG_DWORD, data: '1'} - # === Specify default behavior for a new tab - Home Page - # ------> https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.InternetExplorer::NewTabAction - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Internet Explorer\TabbedBrowsing', value: 'NewTabPageShow', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\TabbedBrowsing', value: 'NewTabPageShow', type: REG_DWORD, data: '1'} - # === Display tabs on a separate row - Enabled - # ------> https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.InternetExplorer::MoveTabBand - - !registryValue: {path: 'HKCU\Software\Microsoft\Internet Explorer\MINIE', value: 'ShowTabsBelowAddressBar', type: REG_DWORD, data: '0'} - # === Prevent Internet Explorer Search box from appearing - Enabled - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer', value: 'NoSearchBox', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Internet Explorer', value: 'NoSearchBox', type: REG_DWORD, data: '1'} - # === Help menu: Remove 'Send Feedback' menu option - Enabled - # ------> Disable Feedback/'Smiley' on Internet Explorer Toolbar - # ------> https://www.tenforums.com/browsers-email/9420-how-remove-send-smile-frown-internet-explorer-11-a-post685594.html#post685594 - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions', value: 'NoHelpItemSendFeedback', type: REG_DWORD, data: '1'} - # === Show entire link/url in address bar - Enabled - # ------> https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-gppref/3fb5c89d-d9c2-41e2-9749-f5cac492121e - - !registryValue: {path: 'HKCU\Software\Microsoft\Internet Explorer\Main', value: 'Show_FullURL', type: REG_SZ, data: 'yes'} - # === Disables Background Sounds in Internet Explorer. - - !registryValue: {path: 'HKCU\Software\Microsoft\Internet Explorer\Main', value: 'Play_Background_Sounds', type: REG_SZ, data: 'no'} - # === Turn on Suggested Sites - Disabled - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer\Suggested Sites', value: 'Enabled', type: REG_DWORD, data: '0'} - # === Hide the button (next to the New Tab button) that opens Microsoft Edge - Enabled - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\Main', value: 'HideNewEdgeButton', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Internet Explorer\Main', value: 'HideNewEdgeButton', type: REG_DWORD, data: '1'} - # === Immediately close iexplore.exe process after closing a tab in Internet Explorer - Enabled - # ------> https://docs.microsoft.com/en-us/archive/blogs/askie/closing-an-ie-8-tab-does-not-immediately-close-the-spawned-iexplore-exe-process - - !registryValue: {path: 'HKCU\Software\Microsoft\Internet Explorer\Main', value: 'TabShutdownDelay', type: REG_DWORD, data: '0'} - # ============================ - # === Security and Privacy === - # ============================ - # === Prevent participation in the Customer Experience Improvement Program - Enabled - # ------> https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.InternetExplorer::SQM_DisableCEIP - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\SQM', value: 'DisableCustomerImprovementProgram', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Internet Explorer\SQM', value: 'DisableCustomerImprovementProgram', type: REG_DWORD, data: '1'} - # === Turn off Adobe Flash in Internet Explorer and prevent applications from using Internet Explorer technology to instantiate Flash objects - Enabled - # ------> https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.InternetExplorer::DisableFlashInIE - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer', value: 'DisableFlashInIE', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Internet Explorer', value: 'DisableFlashInIE', type: REG_DWORD, data: '1'} - # === Turn off the Security Settings Check feature - Enabled - # ------> Disables the bottom bar saying "Your current security settings put your computer at risk." - # - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\Security', value: 'DisableSecuritySettingsCheck', type: REG_DWORD, data: '1'} - # - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Internet Explorer\Security', value: 'DisableSecuritySettingsCheck', type: REG_DWORD, data: '1'} - # === Turn off the Security Settings Check feature - Enabled - # ------> Disables the bottom bar saying "Your current security settings put your computer at risk." - # - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\Security', value: 'DisableFixSecuritySettings', type: REG_DWORD, data: '1'} - # - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Internet Explorer\Security', value: 'DisableFixSecuritySettings', type: REG_DWORD, data: '1'} - # === Check for signatures on downloaded programs - Disabled - # - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\Download', value: 'CheckExeSignatures', type: REG_SZ, data: 'no'} - # === Allow software to run or install even if the signature is invalid - Disabled - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\Download', value: 'RunInvalidSignatures', type: REG_DWORD, data: '0'} - # === Always send Do Not Track header - Enabled - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\Main', value: 'DoNotTrack', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Internet Explorer\Main', value: 'DoNotTrack', type: REG_DWORD, data: '1'} - # === Prevent automatic discovery of feeds and Web Slices - Enabled - # ------> https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.InternetExplorer::Disable_Feed_Discovery - # ------> https://admx.help/?Category=Windows_7_2008R2&Policy=Microsoft.Policies.InternetExplorer::Disable_Feed_Discovery_2 - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\Feed Discovery', value: 'Enabled', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Internet Explorer\Feed Discovery', value: 'Enabled', type: REG_DWORD, data: '0'} - # === Prevent managing SmartScreen Filter - Enabled - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Internet Explorer\PhishingFilter', value: 'EnabledV9', type: REG_DWORD, data: '0'} - # === Turn off Crash Detection - Enabled - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions', value: 'NoCrashDetection', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions', value: 'NoCrashDetection', type: REG_DWORD, data: '1'} - # === Turn off Automatic Crash Recovery - Enabled - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\Recovery', value: 'AutoRecover', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Internet Explorer\Recovery', value: 'AutoRecover', type: REG_DWORD, data: '0'} - # === Turn off Reopen Last Browsing Session - Enabled - - !registryValue: {path: 'HKCU\Software\Microsoft\Internet Explorer\Recovery', value: 'NoReopenLastSession', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\Software\Microsoft\Internet Explorer\Recovery', value: 'NoReopenLastSession', type: REG_DWORD, data: '1'} - # === Disable Password Caching - Enabled - # ------> https://support.honeywellaidc.com/s/article/How-to-disable-password-caching-in-IE - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings', value: 'DisablePasswordCaching', type: REG_DWORD, data: '1'} - # === Allow Microsoft services to provide enhanced suggestions as the user types in the Address Bar - Disabled - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer', value: 'AllowServicePoweredQSA', type: REG_DWORD, data: '0'} - # === Turn off the auto-complete feature for web addresses - Enabled - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Explorer\AutoComplete', value: 'AutoSuggest', type: REG_SZ, data: 'no'} - # === Turn off browser geolocation - Enabled - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer\Geolocation', value: 'PolicyDisableGeolocation', type: REG_DWORD, data: '1'} - # === Include updated website lists from Microsoft - Disabled - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Internet Explorer\BrowserEmulation', value: 'MSCompatibilityMode', type: REG_DWORD, data: '0'} - # === Turn off the flip ahead with page prediction feature - Enabled - # ------> The following is disabled: Microsoft collects your browsing history to improve how flip ahead with page prediction works. - # ------> https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.InternetExplorer::Advanced_DisableFlipAhead - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer\FlipAhead', value: 'Enabled', type: REG_DWORD, data: '0'} - # === Turn off background synchronization for feeds and Web Slices - Enabled - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer\Feeds', value: 'BackgroundSyncStatus', type: REG_DWORD, data: '0'} - # === Turn off URL Suggestions - Enabled - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\DomainSuggestion', value: 'Enabled', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Internet Explorer\DomainSuggestion', value: 'Enabled', type: REG_DWORD, data: '0'} - # === Disable AutoComplete for forms - Enabled - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\Main', value: 'Use FormSuggest', type: REG_SZ, data: 'no'} - # === Turn on the auto-complete feature for user names and passwords on forms - Disabled - # ------> https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.InternetExplorer::RestrictFormSuggestPW - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\Main', value: 'FormSuggest Passwords', type: REG_SZ, data: 'no'} - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\Main', value: 'FormSuggest PW Ask', type: REG_SZ, data: 'no'} - # === Turn off InPrivate Browsing - Disabled - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\Privacy', value: 'EnableInPrivateBrowsing', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Internet Explorer\Privacy', value: 'EnableInPrivateBrowsing', type: REG_DWORD, data: '1'} - # === Allow deleting browsing history on exit - Enabled - # - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\Privacy', value: 'ClearBrowsingHistoryOnExit', type: REG_DWORD, data: '1'} - # - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Internet Explorer\Privacy', value: 'ClearBrowsingHistoryOnExit', type: REG_DWORD, data: '1'} - # === Empty Temporary Internet Files folder when browser is closed - Enabled - # ------> https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.InternetExplorer::Advanced_TemporaryInternetFiles - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Cache', value: 'Persistent', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Cache', value: 'Persistent', type: REG_DWORD, data: '0'} - # ======================== - # === Discarded Tweaks === - # ======================== - # === Undocumented, seemingly connected to SmartScreen and PhisingFilter. - # ------> https://srkcitrix.wordpress.com/2011/07/28/disable-phishing-filter-in-ie/ - # [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PhishingFilter] - # "ShownVerifyBalloon"=dword:00000003 - # [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\PhishingFilter] - # "ShownVerifyBalloon"=dword:00000003 - # === Turn off Managing SmartScreen Filter for Internet Explorer 8 - Enabled - # ------> Obsolete, superseded by a newer policy setting. - # [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\PhishingFilter] - # "EnabledV8"=dword:00000000 - # === Turn off Managing Phishing filter - Enabled - # ------> Obsolete, superseded by a newer policy setting. - # [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\PhishingFilter] - # "Enabled"=dword:00000000 - # === Prevent bypassing SmartScreen Filter warnings about files that are not commonly downloaded from the Internet - Disabled - # ------> Obsolete. - # [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\PhishingFilter] - # "PreventOverrideAppRepUnknown"=dword:00000000 - # === Prevent bypassing SmartScreen Filter warnings - Disabled - # ------> Obsolete. - # [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\PhishingFilter] - # "PreventOverride"=dword:00000000 - # === Makes Internet Explorer available to temporary users and disables any compatibility limitations/issues. - # ------> https://kb.cameyo.com/system-configuration/ie-firstrun-removal - # ------> Not needed, undocumented. - # [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] - # "OperationalData"=hex(b):0d,00,00,00,00,00,00,00 - # "CompatibilityFlags"=dword:00000000 - # "SearchBandMigrationVersion"=dword:00000001 - # === Disables Animations and ClearType in Internet Explorer. - # ------> Makes Internet Explorer dull, obsolete. - # [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] - # "Play_Animations"="no" - # "UseClearType"="no" - # === Disable “Speed up Browsing by Disabling Add-ons” Popup - # ------> https://www.askvg.com/how-to-disable-speed-up-browsing-by-disabling-add-ons-popup-notification-message-in-internet-explorer/ - # ------> Obsolete. - # [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MAO Settings] - # "AddonLoadTimeThreshold"=dword:00002710 - # === Disable blocked content. "Allow active content to run in files on My Computer" - Disabled - # ------> Undocumented. - # [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN] - # "iexplore.exe"=dword:00000000 - # === Prevent users from accessing Accelerators. - # ------> https://admx.help/?Category=InternetExplorer&Policy=Microsoft.Policies.InternetExplorer::TurnOffAccelerators - # ------> Lack of documentation. Undocumented. - # [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Services] - # "SelectionActivityButtonDisable"=dword:00000001 - # === Delete stored Accelerator activities. - helps privacy - # ------> https://community.spiceworks.com/topic/1787003-can-i-mass-remove-bing-translator-from-ie11 - # ------> Obsolete and poorly documented. - # [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\Email\live.com] - # "Deleted"=dword:00000001 - # [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\Map\bing.com] - # "Deleted"=dword:00000001 - # [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\Translate\microsofttranslator.com] - # "Deleted"=dword:00000001 - # === Configures Tabbed Browsing. - # ------> https://admx.help/HKCU/Software/Policies/Microsoft/Internet%20Explorer/TabbedBrowsing - # ------> Unwanted and forced lockdown for the user. This is personal preference and is therefore discarded. - # [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\TabbedBrowsing] - # "Enabled"=dword:00000001 - # "Groups"=dword:00000000 - # "NewTabNextToCurrent"=dword:00000001 - # "NewTabPageShow"=dword:00000001 - # "OpenAllHomePages"=dword:00000000 - # "OpenInForeground"=dword:00000000 - # "PopupsUseNewWindow"=dword:00000002 - # "QuickTabsThreshold"=dword:00000000 - # "ShortcutBehavior"=dword:00000001 - # "ThumbnailBehavior"=dword:00000000 - # "WarnOnClose"=dword:00000000 diff --git a/src/Configuration/features/revision/registry/configure-logon.yml b/src/Configuration/features/revision/registry/configure-logon.yml deleted file mode 100644 index cf831023..00000000 --- a/src/Configuration/features/revision/registry/configure-logon.yml +++ /dev/null @@ -1,40 +0,0 @@ ---- -title: configure-logon -description: configure-logon -privilege: TrustedInstaller -actions: - - # ============= - # === Logon === - # ============= - # === Always use classic logon - Disabled - # ------> Outdated tweak - # [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System] - # "LogonType"=dword:00000001 - # === Show first sign-in animation - Disabled - - !registryValue: {path: 'HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System', value: 'EnableFirstLogonAnimation', type: REG_DWORD, data: '0'} - # === Turn off app notifications on the lock screen - Disabled - # ------> Defaulted due to removal of subjective changes. - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\System', value: 'DisableLockScreenAppNotifications', type: REG_DWORD, data: '0'} - # === Turn off Windows Startup sound - Enabled - - !registryValue: {path: 'HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System', value: 'DisableStartupSound', type: REG_DWORD, data: '1'} - # ======================================== - # === Control Panel -> Personalization === - # ======================================== - # === Do not display the lock screen - Enabled - # ------> This won't skip the password/pin screen. - # [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Personalization] - # "NoLockScreen"=dword:00000001 - # ============================= - # === Windows Logon Options === - # ============================= - # === Sign-in and lock last interactive user automatically after a restart - Disabled - # ------> Prevents apps from automatically reopening after a restart or an update. - - !registryValue: {path: 'HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System', value: 'DisableAutomaticRestartSignOn', type: REG_DWORD, data: '1'} - # ============== - # === System === - # ============== - # === Display highly detailed status messages - Disabled - # ------> Makes it easier to debug when running into reboot/shutdown/startup errors. - # ------> Defaulted due to removal of subjective changes. - - !registryValue: {path: 'HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System', value: 'VerboseStatus', type: REG_DWORD, data: '0'} diff --git a/src/Configuration/features/revision/registry/configure-microsoft-store.yml b/src/Configuration/features/revision/registry/configure-microsoft-store.yml deleted file mode 100644 index 4939998a..00000000 --- a/src/Configuration/features/revision/registry/configure-microsoft-store.yml +++ /dev/null @@ -1,12 +0,0 @@ ---- -title: configure-microsoft-store -description: configure-microsoft-store -privilege: TrustedInstaller -actions: - - # === Turn off Automatic Download and Install of updates - Disabled - # ------> https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.WindowsStore::DisableAutoInstall - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\WindowsStore', value: 'AutoDownload', type: REG_DWORD, data: '4'} - # === Turn off the offer to update to the latest version of Windows - Enabled - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\WindowsStore', value: 'DisableOSUpgrade', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\WindowsStore', value: 'DisableOSUpgrade', type: REG_DWORD, data: '1'} diff --git a/src/Configuration/features/revision/registry/configure-power-control.yml b/src/Configuration/features/revision/registry/configure-power-control.yml deleted file mode 100644 index d4e4df01..00000000 --- a/src/Configuration/features/revision/registry/configure-power-control.yml +++ /dev/null @@ -1,34 +0,0 @@ ---- -title: configure-power-control -description: configure-power-control -privilege: TrustedInstaller -actions: - - # ============ - # === Main === - # ============ - # === Require use of fast startup - Disabled - # ------> Enhances compatibility with Linux dual boot. - # ------> https://admx.help/?Category=Windows_8.1_2012R2&Policy=Microsoft.Policies.WindowsInitialization::Hiberboot - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\System', value: 'HiberbootEnabled', type: REG_DWORD, data: '0'} - # === Disable Fast startup. - # ------> Enhances compatibility with Linux dual boot. - # ------> https://support.bromium.com/s/article/Disabling-Windows-10-Fast-Startup?language=en_US - - !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Control\Session Manager\Power', value: 'HiberbootEnabled', type: REG_DWORD, data: '0'} - # === Shutdown Menu - Hibernate - Disabled - # ------> https://www.tenforums.com/tutorials/7445-add-remove-hibernate-power-menu-windows-10-a.html - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FlyoutMenuSettings', value: 'ShowHibernateOption', type: REG_DWORD, data: '0'} - # === Shutdown Menu - Sleep - Enabled - # ------> https://www.tenforums.com/tutorials/7445-add-remove-hibernate-power-menu-windows-10-a.html - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FlyoutMenuSettings', value: 'ShowSleepOption', type: REG_DWORD, data: '1'} - # === Allow system to be shut down without having to log on - Enabled - # ------> https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/shutdown-allow-system-to-be-shut-down-without-having-to-log-on - # ------> https://www.stigviewer.com/stig/windows_server_2012_member_server/2014-01-07/finding/V-1075 - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System', value: 'ShutdownWithoutLogon', type: REG_DWORD, data: '1'} - # ============= - # === Extra === - # ============= - # === Hibernation - Disabled - # ------> Hibernate is a power-saving state designed primarily for laptops. - # ------> https://www.tenforums.com/tutorials/2859-enable-disable-hibernate-windows-10-a.html - - !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Control\Power', value: 'HibernateEnabled', type: REG_DWORD, data: '0'} diff --git a/src/Configuration/features/revision/registry/configure-privacy.yml b/src/Configuration/features/revision/registry/configure-privacy.yml deleted file mode 100644 index 6d635585..00000000 --- a/src/Configuration/features/revision/registry/configure-privacy.yml +++ /dev/null @@ -1,238 +0,0 @@ ---- -title: configure-privacy -description: configure-privacy -privilege: TrustedInstaller -actions: - - # =================== - # === App runtime === - # =================== - # === Allow Microsoft accounts to be optional - Enabled - - !registryValue: {path: 'HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System', value: 'MSAOptional', type: REG_DWORD, data: '1'} - # ============================ - # === Location and Sensors === - # ============================ - # === Turn off Windows Location Provider - Enabled - # [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\LocationAndSensors] - # "DisableWindowsLocationProvider"=dword:00000001 - # === Turn off location - Enabled - # [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\LocationAndSensors] - # "DisableLocation"=dword:00000001 - # === Turn off location scripting - Enabled - # [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\LocationAndSensors] - # "DisableLocationScripting"=dword:00000001 - # ===================== - # === Cloud Content === - # ===================== - # === Do not show Windows Tips - Enabled - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\CloudContent', value: 'DisableSoftLanding', type: REG_DWORD, data: '1'} - # === Turn off Microsoft consumer experiences - Enabled - # ------> Breaks Your Phone - # ------> https://superuser.com/a/1409309 - # [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\CloudContent] - # "DisableWindowsConsumerFeatures"=dword:00000001 - # === Configure Windows spotlight on lock screen - Disabled - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows\CloudContent', value: 'ConfigureWindowsSpotlight', type: REG_DWORD, data: '2'} - # === Include content from Enterprise spotlight - Disabled/False - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows\CloudContent', value: 'IncludeEnterpriseSpotlight', type: REG_DWORD, data: '0'} - # === Do not suggest third-party content in Windows spotlight - Enabled - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows\CloudContent', value: 'DisableThirdPartySuggestions', type: REG_DWORD, data: '1'} - # === Do not use diagnostic data for tailored experiences - Enabled - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows\CloudContent', value: 'DisableTailoredExperiencesWithDiagnosticData', type: REG_DWORD, data: '1'} - # === Turn off all Windows spotlight features - Enabled - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows\CloudContent', value: 'DisableWindowsSpotlightFeatures', type: REG_DWORD, data: '1'} - # === Turn off the Windows Welcome Experience - Enabled - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows\CloudContent', value: 'DisableWindowsSpotlightWindowsWelcomeExperience', type: REG_DWORD, data: '1'} - # === Turn off Windows Spotlight on Action Center - Enabled - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows\CloudContent', value: 'DisableWindowsSpotlightOnActionCenter', type: REG_DWORD, data: '1'} - # === Turn off Windows Spotlight on Settings - Enabled - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows\CloudContent', value: 'DisableWindowsSpotlightOnSettings', type: REG_DWORD, data: '1'} - # === Turn off cloud optimized content - Enabled - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\CloudContent', value: 'DisableCloudOptimizedContent', type: REG_DWORD, data: '1'} - # ================= - # === Messaging === - # ================= - # === Allow Message Service Cloud Sync - Disabled - # ------> https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.Messaging::AllowMessageSync - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\Messaging', value: 'AllowMessageSync', type: REG_DWORD, data: '0'} - # =============================== - # === Windows Error Reporting === - # =============================== - # ------> https://admx.help/?Category=Windows_8.1_2012R2&Policy=Microsoft.Policies.WindowsErrorReporting::WerAutoApproveOSDumps_1 - # ------> https://admx.help/?Category=Windows_8.1_2012R2&Policy=Microsoft.Policies.WindowsErrorReporting::WerAutoApproveOSDumps_2 - # === Automatically send memory dumps for OS-generated error reports - Disabled - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting', value: 'AutoApproveOSDumps', type: REG_DWORD, data: '0'} - # === Disable logging - Enabled - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting', value: 'LoggingDisabled', type: REG_DWORD, data: '1'} - # === Disable Windows Error Reporting - Enabled - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting', value: 'Disabled', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\Windows Error Reporting', value: 'Disabled', type: REG_DWORD, data: '1'} - # === DefaultConsent - - !registryValue: {path: 'HKLM\Software\Microsoft\Windows\Windows Error Reporting\Consent', value: 'DefaultConsent', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\Software\Microsoft\Windows\Windows Error Reporting\Consent', value: 'DefaultOverrideBehavior', type: REG_DWORD, data: '1'} - # === Do not send additional data - Enabled - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting', value: 'DontSendAdditionalData', type: REG_DWORD, data: '1'} - # === Prevent display of the user interface for critical errors - Enabled - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting', value: 'DontShowUI', type: REG_DWORD, data: '1'} - # ======> Consent - # === Customize consent settings - (Disable) Windows Error Reporting sends no data to Microsoft for this event type - # ------> https://admx.help/?Category=Windows_8.1_2012R2&Policy=Microsoft.Policies.WindowsErrorReporting::WerConsentCustomize_2 - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting\Consent', value: '0', type: REG_SZ, data: ''} - # ===================== - # === Control Panel === - # ===================== - # === Allow Online Tips - Disabled - # ------> If disabled, Settings will not contact Microsoft content services to retrieve tips and help content. - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer', value: 'AllowOnlineTips', type: REG_DWORD, data: '0'} - # ========================================== - # === Data Collection and Preview Builds === - # ========================================== - # === Allow commercial data pipeline - Disabled - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\DataCollection', value: 'AllowCommercialDataPipeline', type: REG_DWORD, data: '0'} - # === Allow device name to be sent in Windows diagnostic data - Disabled - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\DataCollection', value: 'AllowDeviceNameInTelemetry', type: REG_DWORD, data: '0'} - # === Allow Telemetry - Disabled - # ------> Can be found in (Configure_Windows_Settings.reg) - # [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\DataCollection] - # "AllowTelemetry"=dword:00000000 - # === Configure Authenticated Proxy usage for the Connected User Experience and Telemetry service - Disabled - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\DataCollection', value: 'DisableEnterpriseAuthProxy', type: REG_DWORD, data: '1'} - # === Configure collection of browsing data for Desktop Analytics - Do not allow sending intranet or internet history (Disabled) - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\DataCollection', value: 'MicrosoftEdgeDataOptIn', type: REG_DWORD, data: '0'} - # === Configure telemetry opt-in change notifications - Disable telemetry change notifications - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\DataCollection', value: 'DisableTelemetryOptInChangeNotification', type: REG_DWORD, data: '1'} - # === Configure telemetry opt-in setting user interface - Disable telemetry opt-in Settings - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\DataCollection', value: 'DisableTelemetryOptInSettingsUx', type: REG_DWORD, data: '1'} - # === Disable pre-release features or settings - Enabled - # ------> If you disable this policy setting, all experimentations will be turned off. - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\PreviewBuilds', value: 'EnableConfigFlighting', type: REG_DWORD, data: '0'} - # === Do not show feedback notifications - Enabled - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\DataCollection', value: 'DoNotShowFeedbackNotifications', type: REG_DWORD, data: '1'} - # === Limit Enhanced diagnostic data to the minimum required by Windows Analytics - Disable Windows Analytics collection - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\DataCollection', value: 'LimitEnhancedDiagnosticDataWindowsAnalytics', type: REG_DWORD, data: '0'} - # === Toggle user control over Insider builds - Disabled - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\DataCollection', value: 'AllowBuildPreview', type: REG_DWORD, data: '0'} - # === Limit Diagnostic Log Collection - Enabled - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\DataCollection', value: 'LimitDiagnosticLogCollection', type: REG_DWORD, data: '1'} - # === Limit Dump Collection - Enabled - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\DataCollection', value: 'LimitDumpCollection', type: REG_DWORD, data: '1'} - - # =============== - # === Edge UI === - # =============== - # === Disable help tips - Enabled - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\EdgeUI', value: 'DisableHelpSticker', type: REG_DWORD, data: '1'} - # === Turn off tracking of app usage - Enabled - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows\EdgeUI', value: 'DisableMFUTracking', type: REG_DWORD, data: '1'} - # ================================ - # === Content Delivery Manager === - # ================================ - # ------> https://www.tenforums.com/tutorials/68217-turn-off-automatic-installation-suggested-apps-windows-10-a-post1122916.html#post1122916 - # === Content Delivery - Off - - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'ContentDeliveryAllowed', type: REG_DWORD, data: '0'} - # === Subscribed Content - Off - - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SubscribedContentEnabled', type: REG_DWORD, data: '0'} - # === Windows Welcome Experience after Updates - Off - - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SubscribedContent-310093Enabled', type: REG_DWORD, data: '0'} - # === Get tips, tricks and suggestions as you use Windows - Off - - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SoftLandingEnabled', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SubscribedContent-338389Enabled', type: REG_DWORD, data: '0'} - # === Automatically Install Suggested and Pre-installed Apps - Off - - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SilentInstalledAppsEnabled', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'PreInstalledAppsEnabled', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'PreInstalledAppsEverEnabled', type: REG_DWORD, data: '0'} - # === Pre-installed vendor apps - Off - - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'OemPreInstalledAppsEnabled', type: REG_DWORD, data: '0'} - # === Prevent Content Delivery Manager from reverting feature configuration - - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'FeatureManagementEnabled', type: REG_DWORD, data: '0'} - # === Remove Content Delivery Subcsriptions - - !registryKey: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Subscriptions'} - # === Remove Suggested Apps from Content Delivery - - !registryKey: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\SuggestedApps'} - # ================================= - # === Application Compatibility === - # ================================= - # ------> https://admx.help/?Category=Windows_7_2008R2&Policy=Microsoft.Policies.ApplicationCompatibility::AppCompatTurnOffEngine - # === Turn off Application Compatibility Engine - Enabled - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\AppCompat', value: 'DisableEngine', type: REG_DWORD, data: '1'} - # === Turn off Application Telemetry - Enabled - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\AppCompat', value: 'AITEnable', type: REG_DWORD, data: '0'} - # === Turn off Problem Steps Recorder - Enabled - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\AppCompat', value: 'DisableUAR', type: REG_DWORD, data: '1'} - # === Turn off Program Compatibility Assistant - Enabled - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\AppCompat', value: 'DisablePCA', type: REG_DWORD, data: '1'} - # === Turn off Program Inventory - Enabled - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\AppCompat', value: 'DisableInventory', type: REG_DWORD, data: '1'} - # === Turn off SwitchBack Compatibility Engine - Enabled - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\AppCompat', value: 'SbEnable', type: REG_DWORD, data: '1'} - # =========================================================== - # === Restrict Internet communication (HKEY_CURRENT_USER) === - # =========================================================== - # ------> https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.InternetCommunicationManagement::InternetManagement_RestrictCommunication_1 - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\InternetManagement', value: 'RestrictCommunication', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer', value: 'NoPublishingWizard', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer', value: 'NoWebServices', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows NT\CurrentVersion\Software Protection Platform', value: 'NoGenTicket', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer', value: 'NoOnlinePrintsWizard', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Messenger\Client', value: 'CEIP', type: REG_DWORD, data: '2'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer', value: 'NoInternetOpenWith', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows NT\Printers', value: 'DisableHTTPPrinting', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows NT\Printers', value: 'DisableWebPnPDownload', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows\HandwritingErrorReports', value: 'PreventHandwritingErrorReports', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows\TabletPC', value: 'PreventHandwritingDataSharing', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Assistance\Client\1.0', value: 'NoOnlineAssist', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Assistance\Client\1.0', value: 'NoExplicitFeedback', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Assistance\Client\1.0', value: 'NoImplicitFeedback', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\WindowsMovieMaker', value: 'WebHelp', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\WindowsMovieMaker', value: 'CodecDownload', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\WindowsMovieMaker', value: 'WebPublish', type: REG_DWORD, data: '1'} - # ============================================================ - # === Restrict Internet communication (HKEY_LOCAL_MACHINE) === - # ============================================================ - # ------> https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.InternetCommunicationManagement::InternetManagement_RestrictCommunication_2 - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\InternetManagement', value: 'RestrictCommunication', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer', value: 'NoPublishingWizard', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer', value: 'NoWebServices', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows NT\CurrentVersion\Software Protection Platform', value: 'NoGenTicket', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer', value: 'NoOnlinePrintsWizard', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Messenger\Client', value: 'CEIP', type: REG_DWORD, data: '2'} - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\PCHealth\HelpSvc', value: 'Headlines', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\PCHealth\HelpSvc', value: 'MicrosoftKBSearch', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\PCHealth\ErrorReporting', value: 'DoReport', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\Windows Error Reporting', value: 'Disabled', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer', value: 'NoInternetOpenWith', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\Internet Connection Wizard', value: 'ExitOnMSICW', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\EventViewer', value: 'MicrosoftEventVwrDisableLinks', type: REG_DWORD, data: '1'} - # ------> Needs to be enabled for Microsoft Store to work. (31/07/2020) - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\SystemCertificates\AuthRoot', value: 'DisableRootAutoUpdate', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\Registration Wizard Control', value: 'NoRegistration', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\SearchCompanion', value: 'DisableContentFileUpdates', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows NT\Printers', value: 'DisableHTTPPrinting', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows NT\Printers', value: 'DisableWebPnPDownload', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\DriverSearching', value: 'DontSearchWindowsUpdate', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate', value: 'DisableWindowsUpdateAccess', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\HandwritingErrorReports', value: 'PreventHandwritingErrorReports', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\TabletPC', value: 'PreventHandwritingDataSharing', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\WindowsMovieMaker', value: 'WebHelp', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\WindowsMovieMaker', value: 'CodecDownload', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\WindowsMovieMaker', value: 'WebPublish', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\SQMClient\Windows', value: 'CEIPEnable', type: REG_DWORD, data: '0'} - # [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\NetworkConnectivityStatusIndicator] - # "NoActiveProbe"=dword:00000001 - # ---> Block CEIP, Telemetry Client and Windows Insider via Firewall - # "Block Cortana ActionUriServer.exe"="v2.26|Action=Block|Active=TRUE|Dir=Out|RA42=IntErnet|RA62=IntErnet|App=C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\ActionUriServer.exe|Name=Block Cortana ActionUriServer.exe|Desc=Block Cortana Outbound UDP/TCP Traffic|" - - !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Services\SharedAccess\Defaults\FirewallPolicy\FirewallRules', value: 'Block-Unified-Telemetry-Client', type: REG_SZ, data: 'v2.31|Action=Block|Active=TRUE|Dir=Out|RA42=IntErnet|RA62=IntErnet|App=%SystemRoot%\system32\svchost.exe|Svc=DiagTrack|Name=Block-Unified-Telemetry-Client|Desc=Block-Unified-Telemetry-Client|EmbedCtxt=DiagTrack|'} - - !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Services\SharedAccess\Defaults\FirewallPolicy\FirewallRules', value: 'Block-Windows-Error-Reporting', type: REG_SZ, data: 'v2.31|Action=Block|Active=TRUE|Dir=Out|RA42=IntErnet|RA62=IntErnet|App=%SystemRoot%\system32\svchost.exe|Svc=WerSvc|Name=Block-Unified-Error-Reporting|Desc=Block-Windows-Error-Reporting|EmbedCtxt=WerSvc|'} - # Breaks Xbox - # - !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Services\SharedAccess\Defaults\FirewallPolicy\FirewallRules', value: 'Block-Windows-Insider', type: REG_SZ, data: 'v2.31|Action=Block|Active=TRUE|Dir=Out|RA42=IntErnet|RA62=IntErnet|App=%SystemRoot%\system32\svchost.exe|Svc=wisvc|Name=Block-Windows-Insider|Desc=Block-Windows-Insider|EmbedCtxt=wisvc|'} - # "Block-Windows-Error-Reporting-2"="v2.31|Action=Block|Active=TRUE|Dir=Out|RA42=IntErnet|RA62=IntErnet|App=%SystemRoot%\system32\WerFaultSecure.exe|Name=Block-Windows-Error-Reporting-2|Desc=Block-Windows-Error-Reporting-2" - # "Block-Windows-Error-Reporting-3"="v2.31|Action=Block|Active=TRUE|Dir=Out|RA42=IntErnet|RA62=IntErnet|App=%SystemRoot%\system32\dmclient.exe|Name=Block-Windows-Error-Reporting-3|Desc=Block-Windows-Error-Reporting-3" - # "Block-Windows-Error-Reporting-4"="v2.31|Action=Block|Active=TRUE|Dir=Out|RA42=IntErnet|RA62=IntErnet|App=%SystemRoot%\system32\DWWIN.exe|Name=Block-Windows-Error-Reporting-4|Desc=Block-Windows-Error-Reporting-4" - # "Block-Windows-Error-Reporting-5"="v2.31|Action=Block|Active=TRUE|Dir=Out|RA42=IntErnet|RA62=IntErnet|App=%SystemRoot%\SysWOW64\svchost.exe|Svc=WerSvc|Name=Block-Unified-Telemetry-Client|Desc=Block-Windows-Error-Reporting-5|EmbedCtxt=WerSvc|" - # "Block-Windows-Error-Reporting-6"="v2.31|Action=Block|Active=TRUE|Dir=Out|RA42=IntErnet|RA62=IntErnet|App=%SystemRoot%\SysWOW64\WerFaultSecure.exe|Name=Block-Windows-Error-Reporting-2|Desc=Block-Windows-Error-Reporting-6" - # "Block-Windows-Error-Reporting-7"="v2.31|Action=Block|Active=TRUE|Dir=Out|RA42=IntErnet|RA62=IntErnet|App=%SystemRoot%\SysWOW64\dmclient.exe|Name=Block-Windows-Error-Reporting-3|Desc=Block-Windows-Error-Reporting-7" - # "Block-Windows-Error-Reporting-8"="v2.31|Action=Block|Active=TRUE|Dir=Out|RA42=IntErnet|RA62=IntErnet|App=%SystemRoot%\SysWOW64\DWWIN.exe|Name=Block-Windows-Error-Reporting-4|Desc=Block-Windows-Error-Reporting-8" - - !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules', value: 'Block-Unified-Telemetry-Client', type: REG_SZ, data: 'v2.31|Action=Block|Active=TRUE|Dir=Out|RA42=IntErnet|RA62=IntErnet|App=%SystemRoot%\system32\svchost.exe|Svc=DiagTrack|Name=Block-Unified-Telemetry-Client|Desc=Block-Unified-Telemetry-Client|EmbedCtxt=DiagTrack|'} - - !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules', value: 'Block-Windows-Error-Reporting', type: REG_SZ, data: 'v2.31|Action=Block|Active=TRUE|Dir=Out|RA42=IntErnet|RA62=IntErnet|App=%SystemRoot%\system32\svchost.exe|Svc=WerSvc|Name=Block-Unified-Telemetry-Client|Desc=Block-Windows-Error-Reporting|EmbedCtxt=WerSvc|'} - # Breaks Xbox - # - !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules', value: 'Block-Windows-Insider', type: REG_SZ, data: 'v2.31|Action=Block|Active=TRUE|Dir=Out|RA42=IntErnet|RA62=IntErnet|App=%SystemRoot%\system32\svchost.exe|Svc=wisvc|Name=Block-Windows-Insider|Desc=Block-Windows-Insider|EmbedCtxt=wisvc|'} diff --git a/src/Configuration/features/revision/registry/configure-search-and-cortana.yml b/src/Configuration/features/revision/registry/configure-search-and-cortana.yml deleted file mode 100644 index e20fd11f..00000000 --- a/src/Configuration/features/revision/registry/configure-search-and-cortana.yml +++ /dev/null @@ -1,59 +0,0 @@ ---- -title: configure-search-and-cortana -description: configure-search-and-cortana -privilege: TrustedInstaller -actions: - - # ============ - # === Main === - # ============ - # === Add primary intranet search location - https://www.google.com/ - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search', value: 'PrimaryIntranetSearchScopeUrl', type: REG_SZ, data: 'http://www.google.com/search?q={searchTerms}'} - # === Add secondary intranet search locations - https://duckduckgo.com/ - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search', value: 'SecondaryIntranetSearchScopeUrl', type: REG_SZ, data: 'https://duckduckgo.com/?kae=t&q={searchTerms}'} - # === Allow Cloud Search - User Selected - # ------> https://admx.help/?Category=Windows_10_2016&Policy=FullArmor.Policies.3B9EA2B5_A1D1_4CD5_9EDE_75B22990BC21::AllowCloudSearch - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search', value: 'AllowCloudSearch', type: REG_DWORD, data: '2'} - # === Allow Cortana above lock screen - Disabled - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search', value: 'AllowCortanaAboveLock', type: REG_DWORD, data: '0'} - # === Allow Cortana - Disabled - # ------> Once again 1 = Enabled; 0 = enabled - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search', value: 'AllowCortana', type: REG_DWORD, data: '1'} - # === Allow Cortana Page in OOBE on an AAD account - Disabled - # ------> https://admx.help/?Category=Windows_10_2016&Policy=FullArmor.Policies.3B9EA2B5_A1D1_4CD5_9EDE_75B22990BC21::AllowCortanaInAAD - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search', value: 'AllowCortanaInAAD', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search', value: 'AllowCortanaInAADPathOOBE', type: REG_DWORD, data: '0'} - # === Allow search and Cortana to use location - Disabled - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search', value: 'AllowSearchToUseLocation', type: REG_DWORD, data: '0'} - # === Don't search the web or display web results in Search - Enabled - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search', value: 'ConnectedSearchUseWeb', type: REG_DWORD, data: '0'} - # === Don't search the web or display web results in Search over metered connections - Enabled - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search', value: 'ConnectedSearchUseWebOverMeteredConnections', type: REG_DWORD, data: '0'} - # === Do not allow web search - Enabled - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search', value: 'DisableWebSearch', type: REG_DWORD, data: '1'} - # === Set the SafeSearch setting for Search - Off (Disabled) - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search', value: 'ConnectedSearchSafeSearch', type: REG_DWORD, data: '3'} - # === Set what information is shared in Search - Anonymous info - # ------> Anonymous info: Share usage information but don't share search history, Microsoft account info or specific location. - # ------> https://admx.help/?Category=Windows_10_2016&Policy=FullArmor.Policies.3B9EA2B5_A1D1_4CD5_9EDE_75B22990BC21::SearchPrivacy - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search', value: 'ConnectedSearchPrivacy', type: REG_DWORD, data: '3'} - # ============= - # === Extra === - # ============= - # === Disable Bing Integration in the Start Menu - # ------> Only applies to 1909 and lower. - # ------> https://www.howtogeek.com/224159/how-to-disable-bing-in-the-windows-10-start-menu/ - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Search', value: 'CortanaConsent', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Search', value: 'BingSearchEnabled', type: REG_DWORD, data: '0'} - # === Automatic Update of Speech Data - Off - # ------> https://www.howto-connect.com/enable-disable-automatic-update-speech-data-windows-10/ - # - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Speech_OneCore\Preferences', value: 'ModelDownloadAllowed', type: REG_DWORD, data: '0'} - # === Cortana on Lock Screen - Disabled - # ------> https://winaero.com/blog/how-to-enable-cortana-on-lock-screen/ - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Speech_OneCore\Preferences', value: 'VoiceActivationEnableAboveLockscreen', type: REG_DWORD, data: '0'} - # === Respect Power Settings when Indexing - Enabled - # ------> https://www.elevenforum.com/t/turn-on-or-off-respect-power-settings-when-indexing-in-windows-11.2960/ - - !registryValue: {path: 'HKLM\Software\Microsoft\Windows Search\Gather\Windows\SystemIndex', value: 'RespectPowerModes', type: REG_DWORD, data: '1'} - # === Prevent indexing when running on battery power to conserve energy - Enabled - # ------> https://winaero.com/disable-search-indexing-battery-windows-10/ - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search', value: 'PreventIndexOnBattery', type: REG_DWORD, data: '1'} \ No newline at end of file diff --git a/src/Configuration/features/revision/registry/configure-security.yml b/src/Configuration/features/revision/registry/configure-security.yml deleted file mode 100644 index bfb0023a..00000000 --- a/src/Configuration/features/revision/registry/configure-security.yml +++ /dev/null @@ -1,199 +0,0 @@ ---- -title: configure-security -description: configure-security -privilege: TrustedInstaller -actions: - - # ============================ - # === Spectre and Meltdown === - # ============================ - # === Spectre and Meltdown Mitigations - # ------> While disabling it could potentially increase performance on older hardware, some users have reported that it causes system instability. - # ------> FeatureSettings has to be set to 1 hexadecimal to fully disable these security protections. - # - !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Control\Session Manager\Memory Management', value: 'FeatureSettings', type: REG_DWORD, data: '1'} - # - !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Control\Session Manager\Memory Management', value: 'FeatureSettingsOverride', type: REG_DWORD, data: '3'} - # - !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Control\Session Manager\Memory Management', value: 'FeatureSettingsOverrideMask', type: REG_DWORD, data: '3'} - # ============================================================= - # === Service Control Manager Settings -> Security Settings === - # ============================================================= - # === Enable svchost.exe mitigation options - Disabled - # ------> Don't enforce stricter svchost.exe services policy. - # [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SCMConfig] - # "EnableSvchostMitigationPolicy"=dword:00000000 - # [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SCMConfig] - # "EnableSvchostMitigationPolicy"=dword:00000000 - # ================================== - # === Windows Defender Antivirus === - # ================================== - # === Allow antimalware service to remain running always - Disabled - # [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender] - # "ServiceKeepAlive"=dword:00000000 - # === Allow antimalware service to startup with normal priority - Disabled - # [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender] - # "AllowFastServiceStartup"=dword:00000000 - # === Configure detection for potentially unwanted applications - Disabled - # [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender] - # "PUAProtection"=dword:00000000 - # === Turn off routine remediation - Enabled - # [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender] - # "DisableRoutinelyTakingAction"=dword:00000001 - # === Turn off Windows Defender Antivirus - Enabled - # [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender] - # "DisableAntiSpyware"=dword:00000001 - # [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender] - # "DisableAntiVirus"=dword:00000001 - # === Turn on spyware definitions - Disabled - # [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Microsoft Antimalware] - # "DisableAntiSpyware"=dword:00000001 - # === Turn on virus definitions - Disabled - # [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Microsoft Antimalware] - # "DisableAntiVirus"=dword:00000001 - # ===================================================== - # === Windows Defender Antivirus - Client Interface === - # ===================================================== - # ------> https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.WindowsDefender::UX_Configuration_Notification_Suppress - # === Suppress all notifications - Enabled - # [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\UX Configuration] - # "Notification_Suppress"=dword:00000001 - # === Suppresses reboot notifications - Enabled - # [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\UX Configuration] - # "SuppressRebootNotification"=dword:00000001 - # ========================================= - # === Windows Defender Antivirus - MAPS === - # ========================================= - # === Configure the 'Block at First Sight' feature - Disabled - # [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Spynet] - # "DisableBlockAtFirstSeen"=dword:00000001 - # === Join Microsoft MAPS - Disabled - # [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Spynet] - # "SpynetReporting"=dword:00000000 - # === Send file samples when further analysis is required - Disabled (Never Send) - # [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Spynet] - # "SubmitSamplesConsent"=dword:00000002 - # ============================================================== - # === Windows Defender Antivirus - Network Inspection System === - # ============================================================== - # === Turn on definition retirement - Disabled - # [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\NIS\Consumers\IPS] - # "DisableSignatureRetirement"=dword:00000001 - # === Turn on protocol recognition - Disabled - # [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\NIS] - # "DisableProtocolRecognition"=dword:00000001 - # =============================================== - # === Windows Defender Antivirus - Quarantine === - # =============================================== - # === Configure removal of items from Quarantine folder - Disabled - # ------> If you disable or do not configure this setting, items will be kept in the quarantine folder indefinitely and will not be automatically removed. - # ------> The user can manually remove it, also prevents the system from accidentally removing false positives. - # [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Quarantine] - # "PurgeItemsAfterDelay"=dword:00000000 - # ========================================================= - # === Windows Defender Antivirus - Real-time Protection === - # ========================================================= - # === Monitor file and program activity on your computer - Disabled - # [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Real-Time Protection] - # "DisableOnAccessProtection"=dword:00000001 - # === Scan all downloaded files and attachments - Disabled - # [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Real-Time Protection] - # "DisableIOAVProtection"=dword:00000001 - # === Turn off real-time protection - Disabled - # [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Real-Time Protection] - # "DisableRealtimeMonitoring"=dword:00000001 - # === Turn on behavior monitoring - Disabled - # [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Real-Time Protection] - # "DisableBehaviorMonitoring"=dword:00000001 - # === Turn on Information Protection Control - Disabled - # [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Real-Time Protection] - # "DisableInformationProtectionControl"=dword:00000001 - # === Turn on network protection against exploits of known vulnerabilities - Disabled - # [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Real-Time Protection] - # "DisableIntrusionPreventionSystem"=dword:00000001 - # === Turn on process scanning whenever real-time protection is enabled - Disabled - # [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Real-Time Protection] - # "DisableScanOnRealtimeEnable"=dword:00000001 - # === Turn on raw volume write notifications - Disabled - # - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows Defender\Real-Time Protection', value: 'DisableRawWriteNotification', type: REG_DWORD, data: '1'} - # === Turn on raw volume write notifications - Disabled - # [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Real-Time Protection] - # "DisableRawWriteNotification"=dword:00000001 - # ============================================== - # === Windows Defender Antivirus - Reporting === - # ============================================== - # === Configure Watson events - Disabled - # ------> https://docs.microsoft.com/en-us/windows/privacy/configure-windows-diagnostic-data-in-your-organization - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows Defender\Reporting', value: 'DisableGenericRePorts', type: REG_DWORD, data: '1'} - # === Turn off enhanced notifications - Enabled - # [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Reporting] - # "DisableEnhancedNotifications"=dword:00000001 - # ================================================================== - # === Windows Defender Antivirus - Security Intelligence Updates === - # ================================================================== - # === Allow notifications to disable security intelligence based reports to Microsoft MAPS - Disabled - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows Defender\Signature Updates', value: 'SignatureDisableNotification', type: REG_DWORD, data: '0'} - # === Allow real-time security intelligence updates based on reports to Microsoft MAPS - Disabled - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows Defender\Signature Updates', value: 'RealtimeSignatureDelivery', type: REG_DWORD, data: '0'} - # === Allow security intelligence updates from Microsoft Update - Disabled - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows Defender\Signature Updates', value: 'ForceUpdateFromMU', type: REG_DWORD, data: '0'} - # === Allow security intelligence updates when running on battery power - Disabled - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows Defender\Signature Updates', value: 'DisableScheduledSignatureUpdateOnBattery', type: REG_DWORD, data: '1'} - # === Check for the latest virus and spyware security intelligence on startup - Disabled - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows Defender\Signature Updates', value: 'UpdateOnStartUp', type: REG_DWORD, data: '0'} - # === Initiate security intelligence update on startup - Disabled - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows Defender\Signature Updates', value: 'DisableUpdateOnStartupWithoutEngine', type: REG_DWORD, data: '1'} - # === Turn on scan after security intelligence update - Disabled - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows Defender\Signature Updates', value: 'DisableScanOnUpdate', type: REG_DWORD, data: '1'} - # ========================================== - # === Windows Defender Application Guard === - # ========================================== - # === Allow auditing events in Windows Defender Application Guard - Disabled - # [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\AppHVSI] - # "AuditApplicationGuard"=dword:00000000 - # === Turn on Windows Defender Application Guard in Managed Mode - Disabled - # ------> https://docs.microsoft.com/en-us/windows/security/threat-protection/microsoft-defender-application-guard/test-scenarios-md-app-guard - # [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\AppHVSI] - # "AllowAppHVSI_ProviderSet"=dword:00000000 - # ==================================== - # === Windows Defender SmartScreen === - # ==================================== - # === Configure App Install Control - Enabled - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows Defender\SmartScreen', value: 'ConfigureAppInstallControlEnabled', type: REG_DWORD, data: '1'} - # === Pick one of the following settings - Turn off app recommendations - # ------> https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.SmartScreen::ConfigureAppInstallControl - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows Defender\SmartScreen', value: 'ConfigureAppInstallControl', type: REG_SZ, data: 'Anywhere'} - # === Configure Windows Defender SmartScreen - Disabled - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\System', value: 'EnableSmartScreen', type: REG_DWORD, data: '0'} - # - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\smartscreen.exe', value: 'Debugger', type: REG_SZ, data: '%windir%\System32\taskkill.exe'} - # === Configure Windows Defender SmartScreen (Microsoft Edge) - Disabled - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\MicrosoftEdge\PhishingFilter', value: 'EnabledV9', type: REG_DWORD, data: '0'} - # ============================== - # === System -> Device Guard === - # ============================== - # === Turn On Virtualization Based Security - Disabled - # ------> https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Windows.DeviceGuard::VirtualizationBasedSecurity - # [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard] - # "EnableVirtualizationBasedSecurity"=dword:00000000 - # === Virtualization Based Protection of Code Integrity - Disabled - # [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard] - # "HypervisorEnforcedCodeIntegrity"=dword:00000000 - # === Credential Guard Configuration - Disabled - # [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard] - # "LsaCfgFlags"=dword:00000000 - # === Secure Launch Configuration - Disabled - # [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard] - # "ConfigureSystemGuardLaunch"=dword:00000002 - # === Deploy Windows Defender Application Control - Disabled - # ------> https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Windows.DeviceGuard::ConfigCIPolicy - # [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard] - # "DeployConfigCIPolicy"=dword:00000000 - # ======================== - # === Windows Security === - # ======================== - # === Hide Windows Security Systray - Enabled - # ------> https://www.tenforums.com/tutorials/11974-hide-show-windows-security-notification-area-icon-windows-10-a.html - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Systray', value: 'HideSystray', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run', value: 'SecurityHealth', operation: delete} - - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run', operation: add} - - - # === https://learn.microsoft.com/en-us/windows/security/information-protection/bitlocker/bitlocker-device-encryption-overview-windows-10#bitlocker-device-encryption - - !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Control\BitLocker', value: 'PreventDeviceEncryption', type: REG_DWORD, data: '1'} \ No newline at end of file diff --git a/src/Configuration/features/revision/registry/configure-start-menu-and-taskbar-notifications).yml b/src/Configuration/features/revision/registry/configure-start-menu-and-taskbar-notifications).yml deleted file mode 100644 index 79b79652..00000000 --- a/src/Configuration/features/revision/registry/configure-start-menu-and-taskbar-notifications).yml +++ /dev/null @@ -1,115 +0,0 @@ ---- -title: configure-start-menu-and-taskbar-notifications) -description: configure-start-menu-and-taskbar-notifications) -privilege: TrustedInstaller -actions: - - # ============================== - # === Start Menu and Taskbar === - # ============================== - # === Configure StartMenu pins - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Start', value: 'ConfigureStartPins', type: REG_SZ, data: '{"pinnedList":[{"packagedAppId":"Microsoft.WindowsStore_8wekyb3d8bbwe!App"},{"packagedAppId":"windows.immersivecontrolpanel_cw5n1h2txyewy!microsoft.windows.immersivecontrolpanel"},{"packagedAppId":"Microsoft.WindowsNotepad_8wekyb3d8bbwe!App"},{"packagedAppId":"Microsoft.Paint_8wekyb3d8bbwe!App"},{"desktopAppLink":"%APPDATA%\\Microsoft\\Windows\\Start Menu\\Programs\\File Explorer.lnk"},{"packagedAppId":"Microsoft.WindowsCalculator_8wekyb3d8bbwe!App"}]}'} - # === Choose which folders appear on Start - # ------> "_ProviderSet"=dword:00000000 == Allows User Toggle - # ------> "_ProviderSet"=dword:00000001 == Blocks User Toggle - # ------> "AllowPinnedFolderXXXXXXXXXXXX"=dword:00000001 == Show - # ------> "AllowPinnedFolderXXXXXXXXXXXX"=dword:00000000 == Hide - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Start', value: 'AllowPinnedFolderDocuments', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Start', value: 'AllowPinnedFolderDocuments_ProviderSet', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Start', value: 'AllowPinnedFolderDownloads', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Start', value: 'AllowPinnedFolderDownloads_ProviderSet', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Start', value: 'AllowPinnedFolderFileExplorer', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Start', value: 'AllowPinnedFolderFileExplorer_ProviderSet', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Start', value: 'AllowPinnedFolderHomeGroup', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Start', value: 'AllowPinnedFolderHomeGroup_ProviderSet', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Start', value: 'AllowPinnedFolderMusic', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Start', value: 'AllowPinnedFolderMusic_ProviderSet', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Start', value: 'AllowPinnedFolderNetwork', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Start', value: 'AllowPinnedFolderNetwork_ProviderSet', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Start', value: 'AllowPinnedFolderPersonalFolder', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Start', value: 'AllowPinnedFolderPersonalFolder_ProviderSet', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Start', value: 'AllowPinnedFolderPictures', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Start', value: 'AllowPinnedFolderPictures_ProviderSet', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Start', value: 'AllowPinnedFolderSettings', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Start', value: 'AllowPinnedFolderSettings_ProviderSet', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Start', value: 'AllowPinnedFolderVideos', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Start', value: 'AllowPinnedFolderVideos_ProviderSet', type: REG_DWORD, data: '0'} - # === Disable showing balloon notifications as toasts - Disabled - # ------> Bring back old school school Windows 7 balloon traytip notifications. - - !registryValue: {path: 'HKCU\SOFTWARE\Policies\Microsoft\Windows\Explorer', value: 'EnableLegacyBalloonNotifications', type: REG_DWORD, data: '1'} - # === Remove Notifications and Action Center - Enabled - # [HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows\Explorer] - # "DisableNotificationCenter"=dword:00000001 - - # === Remove the People Bar from the taskbar - Enabled - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows\Explorer', value: 'HidePeopleBar', type: REG_DWORD, data: '1'} - # === Remove the Security and Maintenance icon - Enabled - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows\Explorer', value: 'HideSCAHealth', type: REG_DWORD, data: '1'} - # === Turn off feature advertisement balloon notifications - Enabled - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows\Explorer', value: 'NoBalloonFeatureAdvertisements', type: REG_DWORD, data: '1'} - # === Turn off notification area cleanup - Enabled - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows\Explorer', value: 'NoAutoTrayNotify', type: REG_DWORD, data: '1'} - # === Turn off user tracking - Enabled - # ------> Can be found in (Configure_Privacy.reg) - # [HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Explorer] - # "NoInstrumentation"=dword:00000001 - # === Remove the Meet Now icon - Enabled - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer', value: 'HideSCAMeetNow', type: REG_DWORD, data: '1'} - # =============================================== - # === Start Menu and Taskbar -> Notifications === - # =============================================== - # === Turn off tile notifications - Enabled - # [HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\PushNotifications] - # "NoTileApplicationNotification"=dword:00000001 - # === Turn off notifications network usage - Enabled - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\PushNotifications', value: 'NoCloudApplicationNotification', type: REG_DWORD, data: '1'} - # === Turn off toast notifications - Enabled - # [HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\PushNotifications] - # "NoToastApplicationNotification"=dword:00000001 - # === Turn off toast notifications on the lock screen - Enabled - # [HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CurrentVersion\PushNotifications] - # "NoToastApplicationNotificationOnLockScreen"=dword:00000001 - # === Enable news and interests on the taskbar - Disabled - # -------> It is integrated in SearchApp.exe - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Feeds', value: 'EnableFeeds', type: REG_DWORD, data: '0'} - # ============================= - # === Windows Ink Workspace === - # ============================= - # === Allow Windows Ink Workspace - Enabled (On, but disallow access above lock) - # ------> https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.WindowsInkWorkspace::AllowSuggestedAppsInWindowsInkWorkspace - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\WindowsInkWorkspace', value: 'AllowWindowsInkWorkspace', type: REG_DWORD, data: '1'} - # === Allow suggested apps in Windows Ink Workspace - Disabled - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\WindowsInkWorkspace', value: 'AllowSuggestedAppsInWindowsInkWorkspace', type: REG_DWORD, data: '0'} - # ============= - # === Extra === - # ============= - # === Notifications from Apps and Other Senders - Disabled - # ------> https://www.tenforums.com/tutorials/4111-turn-off-notifications-apps-senders-windows-10-a.html - # [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\PushNotifications] - # "ToastEnabled"=dword:00000000 - # === (Windows Defender) Disable Non Critical Notifications - Enabled - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications', value: 'DisableEnhancedNotifications', type: REG_DWORD, data: '1'} - # === (Windows Update) Display options for update notifications - # === 2 – Disable all notifications, including restart warnings - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate', value: 'UpdateNotificationLevel', type: REG_DWORD, data: '2'} - # === Show Notifications on Lock Screen - Disabled - # ------> https://www.tenforums.com/tutorials/31116-turn-off-lock-screen-notifications-windows-10-a.html - # [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Notifications\Settings] - # "NOC_GLOBAL_SETTING_ALLOW_TOASTS_ABOVE_LOCK"=dword:00000000 - # === Lock Screen Reminder and VoIP calls Notifications - Disabled - # ------> https://www.tenforums.com/tutorials/31107-turn-off-lock-screen-reminders-voip-calls-windows-10-a.html - # [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Notifications\Settings] - # "NOC_GLOBAL_SETTING_ALLOW_CRITICAL_TOASTS_ABOVE_LOCK"=dword:00000000 - # === Removes the annoying notification that pops up after disabling Action Center - # ------> https://www.tenforums.com/tutorials/6004-enable-disable-action-center-windows-10-a-post321932.html#post321932 - # [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Notifications\Settings] - # "NOC_GLOBAL_SETTING_TOASTS_ENABLED"=dword:00000000 - - # === 'Show recommendations for tips, shortcuts, new apps, and more' - Disabled - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'Start_IrisRecommendations', type: REG_DWORD, data: '0'} - - # === 'Show account related notifications occasionally in Start' - Disabled - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'Start_AccountNotifications', type: REG_DWORD, data: '0'} - - # === 'End Task' - Enabled - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\TaskbarDeveloperSettings', value: 'TaskbarEndTask', type: REG_DWORD, data: '1'} \ No newline at end of file diff --git a/src/Configuration/features/revision/registry/disable-disk-defragmentation.yml b/src/Configuration/features/revision/registry/disable-disk-defragmentation.yml deleted file mode 100644 index 496bb8fd..00000000 --- a/src/Configuration/features/revision/registry/disable-disk-defragmentation.yml +++ /dev/null @@ -1,12 +0,0 @@ ---- -title: disable-disk-defragmentation -description: disable-disk-defragmentation -privilege: TrustedInstaller -actions: - - # ------> https://docs.microsoft.com/en-us/previous-versions/windows/embedded/ms932871(v=winembedded.5)?redirectedfrom=MSDN - # ------> https://www.tenforums.com/performance-maintenance/103072-defragsvc-keeps-starting-up-automatically-post1290728.html#post1290728 - # === Disable Background disk defragmentation. - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Dfrg\BootOptimizeFunction', value: 'Enable', type: REG_SZ, data: 'N'} - # === Disable Background auto-layout - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OptimalLayout', value: 'EnableAutoLayout', type: REG_DWORD, data: '0'} diff --git a/src/Configuration/features/revision/registry/disable-ease-of-access-features.yml b/src/Configuration/features/revision/registry/disable-ease-of-access-features.yml deleted file mode 100644 index 3c3ca137..00000000 --- a/src/Configuration/features/revision/registry/disable-ease-of-access-features.yml +++ /dev/null @@ -1,68 +0,0 @@ ---- -title: disable-ease-of-access-features -description: disable-ease-of-access-features -privilege: TrustedInstaller -actions: - - # ================================================= - # === Remove Ease of Access hives from Registry === - # ================================================= - # === Remove and clean up Ease of Access registry entries and keys (HKEY_CURRENT_USER) - - !registryKey: {path: 'HKCU\Control Panel\Accessibility\AudioDescription'} - - !registryKey: {path: 'HKCU\Control Panel\Accessibility\Blind Access'} - - !registryKey: {path: 'HKCU\Control Panel\Accessibility\HighContrast'} - - !registryKey: {path: 'HKCU\Control Panel\Accessibility\Keyboard Preference'} - - !registryKey: {path: 'HKCU\Control Panel\Accessibility\Keyboard Response'} - - !registryKey: {path: 'HKCU\Control Panel\Accessibility\MouseKeys'} - - !registryKey: {path: 'HKCU\Control Panel\Accessibility\On'} - - !registryKey: {path: 'HKCU\Control Panel\Accessibility\ShowSounds'} - - !registryKey: {path: 'HKCU\Control Panel\Accessibility\SlateLaunch'} - - !registryKey: {path: 'HKCU\Control Panel\Accessibility\SoundSentry'} - - !registryKey: {path: 'HKCU\Control Panel\Accessibility\StickyKeys'} - - !registryKey: {path: 'HKCU\Control Panel\Accessibility\TimeOut'} - - !registryKey: {path: 'HKCU\Control Panel\Accessibility\ToggleKeys'} - # === Remove and clean up Ease of Access registry entries and keys (HKEY_USERS\.DEFAULT) - - !registryKey: {path: 'HKU\.DEFAULT\Control Panel\Accessibility\AudioDescription'} - - !registryKey: {path: 'HKU\.DEFAULT\Control Panel\Accessibility\Blind Access'} - - !registryKey: {path: 'HKU\.DEFAULT\Control Panel\Accessibility\HighContrast'} - - !registryKey: {path: 'HKU\.DEFAULT\Control Panel\Accessibility\Keyboard Preference'} - - !registryKey: {path: 'HKU\.DEFAULT\Control Panel\Accessibility\Keyboard Response'} - - !registryKey: {path: 'HKU\.DEFAULT\Control Panel\Accessibility\MouseKeys'} - - !registryKey: {path: 'HKU\.DEFAULT\Control Panel\Accessibility\On'} - - !registryKey: {path: 'HKU\.DEFAULT\Control Panel\Accessibility\ShowSounds'} - - !registryKey: {path: 'HKU\.DEFAULT\Control Panel\Accessibility\SlateLaunch'} - - !registryKey: {path: 'HKU\.DEFAULT\Control Panel\Accessibility\SoundSentry'} - - !registryKey: {path: 'HKU\.DEFAULT\Control Panel\Accessibility\StickyKeys'} - - !registryKey: {path: 'HKU\.DEFAULT\Control Panel\Accessibility\TimeOut'} - - !registryKey: {path: 'HKU\.DEFAULT\Control Panel\Accessibility\ToggleKeys'} - # =================================================== - # === Disable Ease of Access features in Registry === - # =================================================== - # === Disable Ease of Access features (HKEY_CURRENT_USER) - - !registryValue: {path: 'HKCU\Control Panel\Accessibility\AudioDescription', value: 'Flags', type: REG_SZ, data: '0'} - - !registryValue: {path: 'HKCU\Control Panel\Accessibility\Blind Access', value: 'Flags', type: REG_SZ, data: '0'} - - !registryValue: {path: 'HKCU\Control Panel\Accessibility\HighContrast', value: 'Flags', type: REG_SZ, data: '0'} - - !registryValue: {path: 'HKCU\Control Panel\Accessibility\Keyboard Preference', value: 'Flags', type: REG_SZ, data: '0'} - - !registryValue: {path: 'HKCU\Control Panel\Accessibility\Keyboard Response', value: 'Flags', type: REG_SZ, data: '0'} - - !registryValue: {path: 'HKCU\Control Panel\Accessibility\MouseKeys', value: 'Flags', type: REG_SZ, data: '0'} - - !registryValue: {path: 'HKCU\Control Panel\Accessibility\On', value: 'Flags', type: REG_SZ, data: '0'} - - !registryValue: {path: 'HKCU\Control Panel\Accessibility\ShowSounds', value: 'Flags', type: REG_SZ, data: '0'} - - !registryValue: {path: 'HKCU\Control Panel\Accessibility\SlateLaunch', value: 'Flags', type: REG_SZ, data: '0'} - - !registryValue: {path: 'HKCU\Control Panel\Accessibility\SoundSentry', value: 'Flags', type: REG_SZ, data: '0'} - - !registryValue: {path: 'HKCU\Control Panel\Accessibility\StickyKeys', value: 'Flags', type: REG_SZ, data: '0'} - - !registryValue: {path: 'HKCU\Control Panel\Accessibility\TimeOut', value: 'Flags', type: REG_SZ, data: '0'} - - !registryValue: {path: 'HKCU\Control Panel\Accessibility\ToggleKeys', value: 'Flags', type: REG_SZ, data: '0'} - # === Disable Ease of Access features (HKEY_USERS\.DEFAULT) - - !registryValue: {path: 'HKU\.DEFAULT\Control Panel\Accessibility\AudioDescription', value: 'Flags', type: REG_SZ, data: '0'} - - !registryValue: {path: 'HKU\.DEFAULT\Control Panel\Accessibility\Blind Access', value: 'Flags', type: REG_SZ, data: '0'} - - !registryValue: {path: 'HKU\.DEFAULT\Control Panel\Accessibility\HighContrast', value: 'Flags', type: REG_SZ, data: '0'} - - !registryValue: {path: 'HKU\.DEFAULT\Control Panel\Accessibility\Keyboard Preference', value: 'Flags', type: REG_SZ, data: '0'} - - !registryValue: {path: 'HKU\.DEFAULT\Control Panel\Accessibility\Keyboard Response', value: 'Flags', type: REG_SZ, data: '0'} - - !registryValue: {path: 'HKU\.DEFAULT\Control Panel\Accessibility\MouseKeys', value: 'Flags', type: REG_SZ, data: '0'} - - !registryValue: {path: 'HKU\.DEFAULT\Control Panel\Accessibility\On', value: 'Flags', type: REG_SZ, data: '0'} - - !registryValue: {path: 'HKU\.DEFAULT\Control Panel\Accessibility\ShowSounds', value: 'Flags', type: REG_SZ, data: '0'} - - !registryValue: {path: 'HKU\.DEFAULT\Control Panel\Accessibility\SlateLaunch', value: 'Flags', type: REG_SZ, data: '0'} - - !registryValue: {path: 'HKU\.DEFAULT\Control Panel\Accessibility\SoundSentry', value: 'Flags', type: REG_SZ, data: '0'} - - !registryValue: {path: 'HKU\.DEFAULT\Control Panel\Accessibility\StickyKeys', value: 'Flags', type: REG_SZ, data: '0'} - - !registryValue: {path: 'HKU\.DEFAULT\Control Panel\Accessibility\TimeOut', value: 'Flags', type: REG_SZ, data: '0'} - - !registryValue: {path: 'HKU\.DEFAULT\Control Panel\Accessibility\ToggleKeys', value: 'Flags', type: REG_SZ, data: '0'} diff --git a/src/Configuration/features/revision/registry/disable-user-account-control-uac.yml b/src/Configuration/features/revision/registry/disable-user-account-control-uac.yml deleted file mode 100644 index aeeb8182..00000000 --- a/src/Configuration/features/revision/registry/disable-user-account-control-uac.yml +++ /dev/null @@ -1,38 +0,0 @@ ---- -title: disable-user-account-control-uac -description: disable-user-account-control-uac -privilege: TrustedInstaller -actions: - - # ------> https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-gpsb/12867da0-2e4e-4a4f-9dc4-84a7f354c8d9 - # ------> https://docs.microsoft.com/en-us/windows/security/identity-protection/user-account-control/user-account-control-group-policy-and-registry-key-settings - # === Run all administrators in Admin Approval Mode - Disabled - # ------> Main switch for User Account Control (UAC) - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System', value: 'EnableLUA', type: REG_DWORD, data: '0'} - # === Detect application installations and prompt for elevation - Disabled - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System', value: 'EnableInstallerDetection', type: REG_DWORD, data: '0'} - # === Switch to the secure desktop when prompting for elevation - Disabled - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System', value: 'PromptOnSecureDesktop', type: REG_DWORD, data: '0'} - # === Only elevate UIAccess applications that are installed in secure locations - Disabled - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System', value: 'EnableSecureUIAPaths', type: REG_DWORD, data: '0'} - # === Behavior of the elevation prompt for administrators in Admin Approval Mode - Elevate without prompting - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System', value: 'ConsentPromptBehaviorAdmin', type: REG_DWORD, data: '0'} - # === Allow UIAccess applications to prompt for elevation without using the secure desktop - Enabled - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System', value: 'EnableUIADesktopToggle', type: REG_DWORD, data: '0'} - # === Only elevate executables that are signed and validated - Disabled - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System', value: 'ValidateAdminCodeSignatures', type: REG_DWORD, data: '0'} - # ======================== - # === Discarded Tweaks === - # ======================== - # === Virtualize file and registry write failures to per-user locations - Disabled - # ------> Can potentially break stuff therefore discarded. - # [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] - # "EnableVirtualization"=dword:00000000 - # === Behavior of the elevation prompt for standard users - Automatically deny elevation requests - # ------> Discarded, can break secondary User account elevation prompts in case of troubleshooting. - # [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] - # "ConsentPromptBehaviorUser"=dword:00000000 - # === Admin Approval Mode for the built-in Administrator account - Disabled - # ------> Unneeded, this is the default behavior and the Built-in Administrator will not be used either way. - # [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] - # "FilterAdministratorToken"=dword:00000000 diff --git a/src/Configuration/features/revision/registry/mouse-tweaks.yml b/src/Configuration/features/revision/registry/mouse-tweaks.yml deleted file mode 100644 index f2484996..00000000 --- a/src/Configuration/features/revision/registry/mouse-tweaks.yml +++ /dev/null @@ -1,73 +0,0 @@ ---- -title: mouse-tweaks -description: mouse-tweaks -privilege: TrustedInstaller -actions: - - # === Removes Ease of Access -> MouseKeys features tied to alteration of Sensitivity, so that it'll never change even when using MouseKeys. - - !registryValue: {path: 'HKCU\Control Panel\Accessibility\MouseKeys', value: 'MaximumSpeed', operation: delete} - - !registryValue: {path: 'HKCU\Control Panel\Accessibility\MouseKeys', value: 'TimeToMaximumSpeed', operation: delete} - # === Faster mouse cursor refresh speed. (According to n1kobg) - # [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Input\Settings\ControllerProcessor\CursorSpeed] - # "CursorUpdateInterval"=dword:00000001 - # ========================= - # === MarkC Mouse Stuff === - # ========================= - # ------> http://donewmouseaccel.blogspot.com/2010/03/markc-windows-7-mouse-acceleration-fix.html - # === 1 to 1 Mouse Sensitivity (10/20). - # [HKEY_CURRENT_USER\Control Panel\Mouse] - # "MouseSensitivity"="10" - # [HKEY_USERS\.DEFAULT\Control Panel\Mouse] - # "MouseSensitivity"="10" - # === Applies MarkC flatline mouse curve. - # ------> Disables mouse acceleration even if Enhance Pointer Precision is On. - # ------> Update - We shouldn't use markc fix by default for the following reason: - # ------> The fix is only for 96 DPI, so using it on higher DPI might introduce new problems - # [HKEY_CURRENT_USER\Control Panel\Mouse] - # "SmoothMouseXCurve"=hex:\ - # 00,00,00,00,00,00,00,00,\ - # C0,CC,0C,00,00,00,00,00,\ - # 80,99,19,00,00,00,00,00,\ - # 40,66,26,00,00,00,00,00,\ - # 00,33,33,00,00,00,00,00 - # "SmoothMouseYCurve"=hex:\ - # 00,00,00,00,00,00,00,00,\ - # 00,00,38,00,00,00,00,00,\ - # 00,00,70,00,00,00,00,00,\ - # 00,00,A8,00,00,00,00,00,\ - # 00,00,E0,00,00,00,00,00 - # [HKEY_USERS\.DEFAULT\Control Panel\Mouse] - # "SmoothMouseXCurve"=hex:\ - # 00,00,00,00,00,00,00,00,\ - # C0,CC,0C,00,00,00,00,00,\ - # 80,99,19,00,00,00,00,00,\ - # 40,66,26,00,00,00,00,00,\ - # 00,33,33,00,00,00,00,00 - # "SmoothMouseYCurve"=hex:\ - # 00,00,00,00,00,00,00,00,\ - # 00,00,38,00,00,00,00,00,\ - # 00,00,70,00,00,00,00,00,\ - # 00,00,A8,00,00,00,00,00,\ - # 00,00,E0,00,00,00,00,00 - # === Unticks Enhance Pointer Precision in Control Panel -> Mouse -> Pointer Options - - !registryKey: {path: 'HKCU\Control Panel\Accessibility\MouseKeys', operation: add} - - !registryValue: {path: 'HKCU\Control Panel\Mouse', value: 'MouseSpeed', type: REG_SZ, data: '0'} - - !registryValue: {path: 'HKCU\Control Panel\Mouse', value: 'MouseThreshold1', type: REG_SZ, data: '0'} - - !registryValue: {path: 'HKCU\Control Panel\Mouse', value: 'MouseThreshold2', type: REG_SZ, data: '0'} - - !registryValue: {path: 'HKU\.DEFAULT\Control Panel\Mouse', value: 'MouseSpeed', type: REG_SZ, data: '0'} - - !registryValue: {path: 'HKU\.DEFAULT\Control Panel\Mouse', value: 'MouseThreshold1', type: REG_SZ, data: '0'} - - !registryValue: {path: 'HKU\.DEFAULT\Control Panel\Mouse', value: 'MouseThreshold2', type: REG_SZ, data: '0'} - # ======================== - # === Discarded Tweaks === - # ======================== - # === Mouse and input related parameter changes for speed/responsiveness. - # ------> Undocumented, probably placebo. - # [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\mouhid\Parameters] - # "UseOnlyMice"=dword:00000001 - # "TreatAbsolutePointerAsAbsolute"=dword:00000001 - # "TreatAbsoluteAsRelative"=dword:00000000 - # === Mouse and input related parameter changes for speed/responsiveness. - # ------> Undocumented, probably placebo. - # [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\mouhid\Parameters] - # "HidP_SetUsageValue"="999999999999999999" - # "HidP_SetUsageValue"=dword:99999999 diff --git a/src/Configuration/features/revision/registry/ntlite-settings.yml b/src/Configuration/features/revision/registry/ntlite-settings.yml deleted file mode 100644 index 1ea27acd..00000000 --- a/src/Configuration/features/revision/registry/ntlite-settings.yml +++ /dev/null @@ -1,280 +0,0 @@ ---- -title: NTLite Settings -description: Integration of modified settings in NTLite > Settings -privilege: TrustedInstaller -actions: - # - !scheduledTask: {path: '\Microsoft\Windows\Application Experience\AitAgent', operation: delete} - # - !scheduledTask: {path: '\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector', operation: delete} - - - !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Control\CrashControl', value: 'AutoReboot', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Control\CrashControl', value: 'CrashDumpEnabled', type: REG_DWORD, data: '3'} - # - !registryValue: {path: 'HKCU\Software\Classes\CLSID\{86ca1aa0-34aa-4e8b-a509-50c905bae2a2}\InprocServer32', value: '', type: REG_SZ, data: ''} - # - !registryValue: {path: 'HKU\S-1-5-18\Software\Classes\CLSID\{86ca1aa0-34aa-4e8b-a509-50c905bae2a2}\InprocServer32', value: '', type: REG_SZ, data: ''} - # - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize', value: 'AppsUseLightTheme', type: REG_DWORD, data: '0'} - # - !registryValue: {path: 'HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize', value: 'AppsUseLightTheme', type: REG_DWORD, data: '0'} - # - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize', value: 'SystemUsesLightTheme', type: REG_DWORD, data: '0'} - # - !registryValue: {path: 'HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize', value: 'SystemUsesLightTheme', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\PushNotifications', value: 'NoCloudApplicationNotification', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Control Panel\Desktop', value: 'ScreenSaverIsSecure', type: REG_SZ, data: '1'} - - !registryValue: {path: 'HKU\S-1-5-18\Control Panel\Desktop', value: 'ScreenSaverIsSecure', type: REG_SZ, data: '1'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Search', value: 'SearchboxTaskbarMode', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Search', value: 'SearchboxTaskbarMode', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'TaskbarMn', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'TaskbarMn', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Chat', value: 'ChatIcon', type: REG_DWORD, data: '3'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer', value: 'HideSCAMeetNow', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Communications', value: 'ConfigureChatAutoInstall', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer', value: 'EnableAutoTray', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Explorer', value: 'EnableAutoTray', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\OperationStatusManager', value: 'EnthusiastMode', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Explorer\OperationStatusManager', value: 'EnthusiastMode', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers', value: 'DisableAutoplay', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers', value: 'DisableAutoplay', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'FolderContentsInfoTip', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'FolderContentsInfoTip', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'LaunchTo', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'LaunchTo', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows Photo Viewer\Capabilities', value: 'ApplicationDescription', type: REG_SZ, data: '@%ProgramFiles%\Windows Photo Viewer\photoviewer.dll,-3069', option: "configure-lpv"} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows Photo Viewer\Capabilities', value: 'ApplicationName', type: REG_SZ, data: '@%ProgramFiles%\Windows Photo Viewer\photoviewer.dll,-3009', option: "configure-lpv"} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations', value: '.tif', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations', value: '.tiff', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations', value: '.jpg', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations', value: '.wdp', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Wdp', option: "configure-lpv"} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations', value: '.jfif', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations', value: '.dib', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations', value: '.png', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations', value: '.bmp', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations', value: '.jpe', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations', value: '.jpeg', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations', value: '.gif', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations', value: '.jxr', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - - !registryValue: {path: 'HKCU\Software\Classes\.jpg', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Classes\.jpg', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - - !registryValue: {path: 'HKCU\Software\Classes\.jpeg', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Classes\.jpeg', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - - !registryValue: {path: 'HKCU\Software\Classes\.gif', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Classes\.gif', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - - !registryValue: {path: 'HKCU\Software\Classes\.png', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Classes\.png', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - - !registryValue: {path: 'HKCU\Software\Classes\.bmp', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Classes\.bmp', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - - !registryValue: {path: 'HKCU\Software\Classes\.tiff', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Classes\.tiff', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - - !registryValue: {path: 'HKCU\Software\Classes\.ico', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Classes\.ico', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - - !registryValue: {path: 'HKCU\Software\Classes\.tif', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Classes\.tif', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - - !registryValue: {path: 'HKCU\Software\Classes\.wdp', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Wdp', option: "configure-lpv"} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Classes\.wdp', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Wdp', option: "configure-lpv"} - - !registryValue: {path: 'HKCU\Software\Classes\.jfif', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Classes\.jfif', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - - !registryValue: {path: 'HKCU\Software\Classes\.dib', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Classes\.dib', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - - !registryValue: {path: 'HKCU\Software\Classes\.jpe', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Classes\.jpe', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - - !registryValue: {path: 'HKCU\Software\Classes\.jxr', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Classes\.jxr', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'ShowInfoTip', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'ShowInfoTip', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'ShowSyncProviderNotifications', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'ShowSyncProviderNotifications', type: REG_DWORD, data: '0'} -# - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'ShowTaskViewButton', type: REG_DWORD, data: '0'} -# - !registryValue: {path: 'HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'ShowTaskViewButton', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'HideFileExt', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'HideFileExt', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Control\Session Manager\Power', value: 'HiberbootEnabled', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FlyoutMenuSettings', value: 'ShowHibernateOption', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System', value: 'ShutdownWithoutLogon', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\NVIDIA Corporation\NVControlPanel2\Client', value: 'OptInOrOutPreference', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKU\S-1-5-18\Software\NVIDIA Corporation\NVControlPanel2\Client', value: 'OptInOrOutPreference', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\System', value: 'AllowExperimentation', type: REG_DWORD, data: '0'} - # - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\CloudContent', value: 'DisableWindowsConsumerFeatures', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\WcmSvc\wifinetworkmanager\features', value: 'PaidWifi', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\WcmSvc\wifinetworkmanager\features', value: 'WiFiSenseOpen', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SilentInstalledAppsEnabled', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SilentInstalledAppsEnabled', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\AppCompat', value: 'DisableInventory', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Microsoft\InputPersonalization\TrainedDataStore', value: 'HarvestContacts', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Microsoft\InputPersonalization\TrainedDataStore', value: 'HarvestContacts', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\InputPersonalization', value: 'RestrictImplicitTextCollection', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Policies\Microsoft\InputPersonalization', value: 'RestrictImplicitTextCollection', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\InputPersonalization', value: 'RestrictImplicitInkCollection', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Policies\Microsoft\InputPersonalization', value: 'RestrictImplicitInkCollection', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System', value: 'DontDisplayLastUserName', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Siuf\Rules', value: 'NumberOfSIUFInPeriod', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Microsoft\Siuf\Rules', value: 'NumberOfSIUFInPeriod', type: REG_DWORD, data: '0'} - - - !registryValue: {path: 'HKCU\Software\Microsoft\Siuf\Rules', value: 'PeriodInNanoSeconds', operation: delete} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Microsoft\Siuf\Rules', value: 'PeriodInNanoSeconds', operation: delete} - - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\BackgroundAccessApplications', value: 'GlobalUserDisabled', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\BackgroundAccessApplications', value: 'GlobalUserDisabled', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Search', value: 'BackgroundAppGlobalToggle', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Search', value: 'BackgroundAppGlobalToggle', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\AdvertisingInfo', value: 'Enabled', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\AdvertisingInfo', value: 'Enabled', type: REG_DWORD, data: '0'} - - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\AdvertisingInfo', value: 'Id', operation: delete} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\AdvertisingInfo', value: 'Id', operation: delete} - - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\AdvertisingInfo', value: 'DisabledByGroupPolicy', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Privacy', value: 'TailoredExperiencesWithDiagnosticDataEnabled', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Privacy', value: 'TailoredExperiencesWithDiagnosticDataEnabled', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\CloudContent', value: 'DisableTailoredExperiencesWithDiagnosticData', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OOBE\AppSettings', value: 'Skype-UserConsentAccepted', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Control Panel\International\User Profile', value: 'HttpAcceptLanguageOptOut', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKU\S-1-5-18\Control Panel\International\User Profile', value: 'HttpAcceptLanguageOptOut', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\System', value: 'EnableActivityFeed', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\System', value: 'PublishUserActivities', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\System', value: 'UploadUserActivities', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SystemPaneSuggestionsEnabled', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SystemPaneSuggestionsEnabled', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SubscribedContent-338388Enabled', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SubscribedContent-338388Enabled', type: REG_DWORD, data: '0'} - # - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\InputPersonalization', value: 'AllowInputPersonalization', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Personalization\Settings', value: 'AcceptedPrivacyPolicy', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Microsoft\Personalization\Settings', value: 'AcceptedPrivacyPolicy', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\TextInput', value: 'AllowLinguisticDataCollection', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'PreInstalledAppsEnabled', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'PreInstalledAppsEnabled', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'PreInstalledAppsEverEnabled', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'PreInstalledAppsEverEnabled', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'RemediationRequired', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'RemediationRequired', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SubscribedContent-314559Enabled', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SubscribedContent-314559Enabled', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SubscribedContent-280815Enabled', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SubscribedContent-280815Enabled', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SubscribedContent-314563Enabled', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SubscribedContent-314563Enabled', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'OemPreInstalledAppsEnabled', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'OemPreInstalledAppsEnabled', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Search', value: 'BingSearchEnabled', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Search', value: 'BingSearchEnabled', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Microsoft\input\TIPC', value: 'Enabled', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Microsoft\Input\TIPC', value: 'Enabled', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Input\TIPC', value: 'Enabled', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer', value: 'ShowFrequent', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Explorer', value: 'ShowFrequent', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SubscribedContent-310093Enabled', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SubscribedContent-310093Enabled', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer', value: 'ShowRecent', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Explorer', value: 'ShowRecent', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\UserProfileEngagement', value: 'ScoobeSystemSettingEnabled', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\UserProfileEngagement', value: 'ScoobeSystemSettingEnabled', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Context\CloudExperienceHostIntent\Wireless', value: 'ScoobeCheckCompleted', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Context\CloudExperienceHostIntent\Wireless', value: 'ScoobeCheckCompleted', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\AppHost', value: 'EnableWebContentEvaluation', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\AppHost', value: 'EnableWebContentEvaluation', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\WlanSvc\AnqpCache', value: 'OsuRegistrationStatus', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Internet Explorer\FlipAhead', value: 'FPEnabled', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\PhishingFilter', value: 'Enabledv9', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\PhishingFilter', value: 'Enabledv9', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\PhishingFilter', value: 'PreventOverride', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\PhishingFilter', value: 'PreventOverride', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Internet Explorer\PhishingFilter', value: 'Enabledv9', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer', value: 'SmartScreenEnabled', type: REG_SZ, data: 'Off'} - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows\CloudContent', value: 'DisableWindowsSpotlightFeatures', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Policies\Microsoft\Windows\CloudContent', value: 'DisableWindowsSpotlightFeatures', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows\CloudContent', value: 'ConfigureWindowsSpotlight', type: REG_DWORD, data: '2'} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Policies\Microsoft\Windows\CloudContent', value: 'ConfigureWindowsSpotlight', type: REG_DWORD, data: '2'} - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows\CloudContent', value: 'IncludeEnterpriseSpotlight', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Policies\Microsoft\Windows\CloudContent', value: 'IncludeEnterpriseSpotlight', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows\CloudContent', value: 'DisableWindowsSpotlightFeatures', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Policies\Microsoft\Windows\CloudContent', value: 'DisableWindowsSpotlightFeatures', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows\CloudContent', value: 'DisableWindowsSpotlightWindowsWelcomeExperience', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Policies\Microsoft\Windows\CloudContent', value: 'DisableWindowsSpotlightWindowsWelcomeExperience', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows\CloudContent', value: 'DisableWindowsSpotlightOnActionCenter', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Policies\Microsoft\Windows\CloudContent', value: 'DisableWindowsSpotlightOnActionCenter', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows\CloudContent', value: 'DisableWindowsSpotlightOnSettings', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Policies\Microsoft\Windows\CloudContent', value: 'DisableWindowsSpotlightOnSettings', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\CloudContent', value: 'DisableThirdPartySuggestions', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\CloudContent', value: 'DisableSoftLanding', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SoftLandingEnabled', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SoftLandingEnabled', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'RotatingLockScreenEnabled', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'RotatingLockScreenEnabled', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'RotatingLockScreenOverlayEnabled', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'RotatingLockScreenOverlayEnabled', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SubscribedContent-202914Enabled', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SubscribedContent-202914Enabled', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SubscribedContent-338387Enabled', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SubscribedContent-338387Enabled', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SubscribedContent-338389Enabled', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SubscribedContent-338389Enabled', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SubscribedContent-353698Enabled', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SubscribedContent-353698Enabled', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Start', value: 'AllowPinnedFolderDocuments', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Start', value: 'AllowPinnedFolderDocuments_ProviderSet', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Start', value: 'AllowPinnedFolderDownloads', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Start', value: 'AllowPinnedFolderDownloads_ProviderSet', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Start', value: 'AllowPinnedFolderFileExplorer', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Start', value: 'AllowPinnedFolderFileExplorer_ProviderSet', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Start', value: 'AllowPinnedFolderHomeGroup', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Start', value: 'AllowPinnedFolderHomeGroup_ProviderSet', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Start', value: 'AllowPinnedFolderMusic', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Start', value: 'AllowPinnedFolderMusic_ProviderSet', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Start', value: 'AllowPinnedFolderNetwork', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Start', value: 'AllowPinnedFolderNetwork_ProviderSet', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Start', value: 'AllowPinnedFolderPersonalFolder', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Start', value: 'AllowPinnedFolderPersonalFolder_ProviderSet', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Start', value: 'AllowPinnedFolderPictures', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Start', value: 'AllowPinnedFolderPictures_ProviderSet', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Start', value: 'AllowPinnedFolderSettings', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Start', value: 'AllowPinnedFolderSettings_ProviderSet', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Start', value: 'AllowPinnedFolderVideos', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Start', value: 'AllowPinnedFolderVideos_ProviderSet', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System', value: 'EnableFirstLogonAnimation', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\System\GameConfigStore', value: 'GameDVR_FSEBehavior', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKU\S-1-5-18\System\GameConfigStore', value: 'GameDVR_FSEBehavior', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OOBE', value: 'BypassNRO', type: REG_DWORD, data: '1'} - # - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\OneDrive', value: 'DisableFileSyncNGSC', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SubscribedContent-280810Enabled', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SubscribedContent-280810Enabled', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SubscribedContent-280811Enabled', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SubscribedContent-280811Enabled', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SYSTEM\Setup\LabConfig', value: 'BypassTPMCheck', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\SYSTEM\Setup\LabConfig', value: 'BypassCPUCheck', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\SYSTEM\Setup\LabConfig', value: 'BypassSecureBootCheck', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\SYSTEM\Setup\MoSetup', value: 'AllowUpgradesWithUnsupportedTPMOrCPU', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Control Panel\UnsupportedHardwareNotificationCache', value: 'SV1', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKU\S-1-5-18\Control Panel\UnsupportedHardwareNotificationCache', value: 'SV1', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Control Panel\UnsupportedHardwareNotificationCache', value: 'SV2', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKU\S-1-5-18\Control Panel\UnsupportedHardwareNotificationCache', value: 'SV2', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\DeviceGuard', value: 'EnableVirtualizationBasedSecurity', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SYSTEM\Policies\Microsoft\Windows\DeviceGuard', value: 'HVCIMATRequired', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Control\DeviceGuard', value: 'Locked', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Control\DeviceGuard', value: 'RequirePlatformSecurityFeatures', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Control\DeviceGuard', value: 'EnableVirtualizationBasedSecurity', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity', value: 'Enabled', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity', value: 'ChangedInBootCycle', operation: delete} - - !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity', value: 'HVCIMATRequired', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity', value: 'Locked', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity', value: 'WasEnabledBy', operation: delete} - - !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Control\Lsa', value: 'LsaCfgFlags', type: REG_DWORD, data: '0'} - # - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System', value: 'FilterAdministratorToken', type: REG_DWORD, data: '0'} - # - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System', value: 'EnableInstallerDetection', type: REG_DWORD, data: '0'} - # - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System', value: 'PromptOnSecureDesktop', type: REG_DWORD, data: '0'} - # - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System', value: 'ConsentPromptBehaviorAdmin', type: REG_DWORD, data: '0'} - # - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System', value: 'EnableSecureUIAPaths', type: REG_DWORD, data: '0'} - # - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System', value: 'EnableVirtualization', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows Security Health\State', value: 'AccountProtection_MicrosoftAccount_Disconnected', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Microsoft\Windows Security Health\State', value: 'AccountProtection_MicrosoftAccount_Disconnected', type: REG_DWORD, data: '0'} - # - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows Defender Security Center\Notifications', value: 'DisableNotifications', type: REG_DWORD, data: '1'} - # - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows Defender Security Center\Notifications', value: 'DisableEnhancedNotifications', type: REG_DWORD, data: '1'} - # - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\DriverSearching', value: 'SearchOrderConfig', type: REG_DWORD, data: '0'} - - # - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\DriverSearching', value: 'SearchOrderConfig', operation: delete} - # - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\DriverSearching'} - - # - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Speech_OneCore\Preferences', value: 'ModelDownloadAllowed', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Device Metadata', value: 'PreventDeviceMetadataFromNetwork', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\DriverSearching', value: 'DontSearchWindowsUpdate', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\DriverSearching', value: 'DriverUpdateWizardWuSearchEnabled', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Services\Pending\7971f918-a847-4430-9279-4a52d1efe18d', value: 'RegisterWithAU', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate', value: 'ExcludeWUDriversInQualityUpdate', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\WindowsUpdate\UX\Settings', value: 'ExcludeWUDriversInQualityUpdate', type: REG_DWORD, data: '1'} - # - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\MRT', value: 'DontOfferThroughWUAU', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\WindowsUpdate\UX\Settings', value: 'HideMCTLink', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\WindowsUpdate\UX\Settings', value: 'RestartNotificationsAllowed2', type: REG_DWORD, data: '0'} - # - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'AUOptions', type: REG_DWORD, data: '2'} diff --git a/src/Configuration/features/revision/registry/old-rightclick-menu.yml b/src/Configuration/features/revision/registry/old-rightclick-menu.yml deleted file mode 100644 index fd7cc7eb..00000000 --- a/src/Configuration/features/revision/registry/old-rightclick-menu.yml +++ /dev/null @@ -1,7 +0,0 @@ ---- -title: old-rightclick-menu -description: old-rightclick-menu -privilege: TrustedInstaller -actions: - - - !registryValue: {path: 'HKCU\Software\Classes\CLSID\{86ca1aa0-34aa-4e8b-a509-50c905bae2a2}\InprocServer32', value: '', type: REG_SZ, data: '', option: "configure-lcm"} diff --git a/src/Configuration/features/revision/registry/revision-static-edition.yml b/src/Configuration/features/revision/registry/revision-static-edition.yml deleted file mode 100644 index 856ee537..00000000 --- a/src/Configuration/features/revision/registry/revision-static-edition.yml +++ /dev/null @@ -1,8 +0,0 @@ ---- -title: revision-static-edition -description: revision-static-edition -privilege: TrustedInstaller -actions: - - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion', value: 'EditionSubManufacturer', type: REG_SZ, data: 'MeetRevision'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion', value: 'EditionSubstring', type: REG_SZ, data: 'Revision'} diff --git a/src/Configuration/main.yml b/src/Configuration/main.yml new file mode 100644 index 00000000..3aeb9fc0 --- /dev/null +++ b/src/Configuration/main.yml @@ -0,0 +1,34 @@ +--- +title: Custom +description: Custom Revision configuration +privilege: Admin +actions: + + # OS Info + - !task: {path: 'Tasks\registry\os-info\edition.yml'} + - !task: {path: 'Tasks\registry\os-info\oem-info.yml'} + + - !task: {path: 'Tasks\start.yml'} + + - !task: {path: 'Tasks\packages\app-win32.yml'} + # Uninstalling WinSxS packages before app-win32 could leave leftovers + - !task: {path: 'Tasks\packages\win-sxs.yml'} + - !task: {path: 'Tasks\packages\appx.yml'} + + + # Defender requires explorer to be running to disable certain protections, so that's why Explorer is terminated afterward + - !taskKill: {name: "explorer", errorAction: Ignore} + - !taskKill: {name: "SearchApp", errorAction: Ignore} + - !taskKill: {name: "SearchHost", errorAction: Ignore} + - !taskKill: {name: "RuntimeBroker", errorAction: Ignore} + - !taskKill: {name: "TextInputHost", errorAction: Ignore} + - !taskKill: {name: "ShellExperienceHost", errorAction: Ignore} + - !taskKill: {name: "backgroundTaskHost", errorAction: Ignore} + - !taskKill: {name: "Widgets", errorAction: Ignore} + + - !task: {path: 'Tasks\software.yml'} + - !task: {path: 'Tasks\services.yml'} + + - !task: {path: 'Tasks\registry.yml'} + - !task: {path: 'Tasks\revert.yml'} + - !task: {path: 'Tasks\final.yml'} \ No newline at end of file diff --git a/src/Executables/FINALIZE.cmd b/src/Executables/FINALIZE.cmd index 07376a63..b11656ae 100644 --- a/src/Executables/FINALIZE.cmd +++ b/src/Executables/FINALIZE.cmd @@ -58,6 +58,7 @@ schtasks /change /tn "\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDi schtasks /change /tn "\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser" /disable >NUL 2>nul schtasks /change /tn "\Microsoft\Windows\Customer Experience Improvement Program\Consolidator" /disable >NUL 2>nul schtasks /change /tn "\Microsoft\Windows\Customer Experience Improvement Program\UsbCeip" /disable >NUL 2>nul +schtasks /change /tn "\Microsoft\Windows\Customer Experience Improvement Program\KernelCeipTask" /disable >NUL 2>nul schtasks /change /tn "\Microsoft\Windows\WindowsUpdate\Scheduled Start" /disable >NUL 2>nul schtasks /change /tn "\Microsoft\Windows\UpdateOrchestrator\StartOobeAppsScanAfterUpdate" /disable >NUL 2>nul diff --git a/src/playbook.conf b/src/playbook.conf index c140979f..d8813f24 100644 --- a/src/playbook.conf +++ b/src/playbook.conf @@ -143,10 +143,6 @@ - - Custom Explorer Folder View - configure-explorer-folder-view - Remove pinned items in Start Menu remove-pinned-items-startmenu From d6e66af835f36cb8242f15ed5cc5e588b9c1bc2e Mon Sep 17 00:00:00 2001 From: Stasium <41346624+StasiumDev@users.noreply.github.com> Date: Mon, 23 Sep 2024 11:17:18 +0200 Subject: [PATCH 22/47] Update README.md Updated FAQ link --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index e68bfa97..b89e7d9c 100644 --- a/README.md +++ b/README.md @@ -57,7 +57,7 @@ Explore our documentation for more information: - [Playbook](https://www.revi.cc/docs/playbook/general) - [Installing Windows](https://www.revi.cc/docs/playbook/installwindows) - [Installing & Updating ReviOS](https://www.revi.cc/docs/playbook/install) -- [Frequently Asked Questions](https://www.revi.cc/docs/faq) +- [Frequently Asked Questions](https://www.revi.cc/docs/category/faq) ## 📝 License From b68749b51396103079bf2d9c73dfcdbabd5c92e9 Mon Sep 17 00:00:00 2001 From: h3r0 <50238852+melo936@users.noreply.github.com> Date: Mon, 23 Sep 2024 13:35:24 +0000 Subject: [PATCH 23/47] block DiagTrack endpoints in hosts --- src/Executables/hosts | 13 +++++++++++++ 1 file changed, 13 insertions(+) diff --git a/src/Executables/hosts b/src/Executables/hosts index f335a45f..0d2fbbbc 100644 --- a/src/Executables/hosts +++ b/src/Executables/hosts @@ -43,6 +43,19 @@ 0.0.0.0 weus2watcab01.blob.core.windows.net 0.0.0.0 weus2watcab02.blob.core.windows.net +# DiagTrack/Telemetry +0.0.0.0 events.data.microsoft.com +0.0.0.0 eu-v20.events.data.microsoft.com +0.0.0.0 au-v20.events.data.microsoft.com +0.0.0.0 uk-v20.events.data.microsoft.com +0.0.0.0 v10.events.data.microsoft.com +0.0.0.0 us-v20.events.data.microsoft.com +0.0.0.0 v20.events.data.microsoft.com +0.0.0.0 events-sandbox.data.microsoft.com +0.0.0.0 pipe.dev.trafficmanager.net +0.0.0.0 v10c.events.data.microsoft.com +0.0.0.0 v10.vortex-win.data.microsoft.com + # Brave 0.0.0.0 p3a.brave.com 0.0.0.0 p2a.brave.com From 0adec87994efd76d08223d4c1fc19ff4ab604e7d Mon Sep 17 00:00:00 2001 From: h3r0 <50238852+melo936@users.noreply.github.com> Date: Thu, 26 Sep 2024 10:28:32 +0000 Subject: [PATCH 24/47] update registry for default user --- .../Tasks/registry/explorer/control-panel.yml | 50 +++++++++++++++++-- .../Tasks/registry/explorer/explorer.yml | 19 ++++++- .../Tasks/registry/explorer/notifications.yml | 6 ++- .../Tasks/registry/explorer/search.yml | 3 ++ .../Tasks/registry/explorer/start-menu.yml | 3 +- .../Tasks/registry/explorer/taskbar.yml | 7 +++ .../Tasks/registry/explorer/view.yml | 6 +-- .../Tasks/registry/explorer/win-settings.yml | 29 +++++++++++ ...enable-audio-communications-do-nothing.yml | 1 + .../Tasks/registry/privacy/cdm.yml | 29 +++++++++-- .../Tasks/registry/privacy/cloud-content.yml | 7 +++ .../Tasks/registry/privacy/privacy.yml | 1 + .../Tasks/registry/security/security.yml | 1 + .../registry/system/bypass-requirements.yml | 6 ++- 14 files changed, 152 insertions(+), 16 deletions(-) diff --git a/src/Configuration/Tasks/registry/explorer/control-panel.yml b/src/Configuration/Tasks/registry/explorer/control-panel.yml index 5a41b8e8..bf3f21af 100644 --- a/src/Configuration/Tasks/registry/explorer/control-panel.yml +++ b/src/Configuration/Tasks/registry/explorer/control-panel.yml @@ -6,18 +6,23 @@ actions: # === Disable Wallpaper JPEG (.jpg) image Compression. - !registryValue: {path: 'HKCU\Control Panel\Desktop', value: 'JPEGImportQuality', type: REG_DWORD, data: '100'} + - !registryValue: {path: 'HKU\.DEFAULT\Control Panel\Desktop', value: 'JPEGImportQuality', type: REG_DWORD, data: '100'} # === Disable system beeps. - !registryValue: {path: 'HKCU\Control Panel\Sound', value: 'Beep', type: REG_SZ, data: 'no'} + - !registryValue: {path: 'HKU\.DEFAULT\Control Panel\Sound', value: 'Beep', type: REG_SZ, data: 'no'} # === Changes the time (milliseconds) it takes for the tooltips to pop up when hovering your mouse over elements to 30 ms. (default = 400 ms) - !registryValue: {path: 'HKCU\Control Panel\Mouse', value: 'MouseHoverTime', type: REG_SZ, data: '30'} + - !registryValue: {path: 'HKU\.DEFAULT\Control Panel\Mouse', value: 'MouseHoverTime', type: REG_SZ, data: '30'} # === Makes the Start Menu appear almost instantly when you click on the Windows icon in the Taskbar. - !registryValue: {path: 'HKCU\Control Panel\Desktop', value: 'MenuShowDelay', type: REG_SZ, data: '0'} + - !registryValue: {path: 'HKU\.DEFAULT\Control Panel\Desktop', value: 'MenuShowDelay', type: REG_SZ, data: '0'} # === Specifies time (in milliseconds) that the mouse needs to remain over a window before the window is activated. (current setting is 10 ms) - !registryValue: {path: 'HKCU\Control Panel\Desktop', value: 'ActiveWndTrkTimeout', type: REG_DWORD, data: '10'} + - !registryValue: {path: 'HKU\.DEFAULT\Control Panel\Desktop', value: 'ActiveWndTrkTimeout', type: REG_DWORD, data: '10'} # === Disables the blue screen that pops up when you're trying to shutdown or restart, asking you to save your work. - !registryValue: {path: 'HKCU\Control Panel\Desktop', value: 'AutoEndTasks', type: REG_SZ, data: '0'} @@ -44,7 +49,14 @@ actions: # === Removes Ease of Access -> MouseKeys features tied to alteration of Sensitivity, so that it'll never change even when using MouseKeys. - !registryValue: {path: 'HKCU\Control Panel\Accessibility\MouseKeys', value: 'MaximumSpeed', operation: delete} + - !registryValue: {path: 'HKCU\Control Panel\Accessibility\MouseKeys', value: 'MaximumSpeed', operation: delete} + - !registryValue: {path: 'HKCU\Control Panel\Accessibility\MouseKeys', value: 'TimeToMaximumSpeed', operation: delete} - !registryValue: {path: 'HKCU\Control Panel\Accessibility\MouseKeys', value: 'TimeToMaximumSpeed', operation: delete} + # DEFAULT USER + - !registryValue: {path: 'HKU\.DEFAULT\Control Panel\Accessibility\MouseKeys', value: 'MaximumSpeed', operation: delete} + - !registryValue: {path: 'HKU\.DEFAULT\Control Panel\Accessibility\MouseKeys', value: 'MaximumSpeed', operation: delete} + - !registryValue: {path: 'HKU\.DEFAULT\Control Panel\Accessibility\MouseKeys', value: 'TimeToMaximumSpeed', operation: delete} + - !registryValue: {path: 'HKU\.DEFAULT\Control Panel\Accessibility\MouseKeys', value: 'TimeToMaximumSpeed', operation: delete} # === Unticks Enhance Pointer Precision in Control Panel -> Mouse -> Pointer Options @@ -61,10 +73,10 @@ actions: - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer', value: 'AllowOnlineTips', type: REG_DWORD, data: '0'} - # ================================================= - # === Remove Ease of Access hives from Registry === - # ================================================= - # === Remove and clean up Ease of Access registry entries and keys (HKEY_CURRENT_USER) + # ================================================= + # === Remove Ease of Access hives from Registry === + # ================================================= + # === Remove and clean up Ease of Access registry entries and keys (HKEY_CURRENT_USER) - !registryKey: {path: 'HKCU\Control Panel\Accessibility\AudioDescription'} - !registryKey: {path: 'HKCU\Control Panel\Accessibility\Blind Access'} - !registryKey: {path: 'HKCU\Control Panel\Accessibility\HighContrast'} @@ -78,6 +90,20 @@ actions: - !registryKey: {path: 'HKCU\Control Panel\Accessibility\StickyKeys'} - !registryKey: {path: 'HKCU\Control Panel\Accessibility\TimeOut'} - !registryKey: {path: 'HKCU\Control Panel\Accessibility\ToggleKeys'} + # DEFAULT USER + - !registryKey: {path: 'HKU\.DEFAULT\Control Panel\Accessibility\AudioDescription'} + - !registryKey: {path: 'HKU\.DEFAULT\Control Panel\Accessibility\Blind Access'} + - !registryKey: {path: 'HKU\.DEFAULT\Control Panel\Accessibility\HighContrast'} + - !registryKey: {path: 'HKU\.DEFAULT\Control Panel\Accessibility\Keyboard Preference'} + - !registryKey: {path: 'HKU\.DEFAULT\Control Panel\Accessibility\Keyboard Response'} + - !registryKey: {path: 'HKU\.DEFAULT\Control Panel\Accessibility\MouseKeys'} + - !registryKey: {path: 'HKU\.DEFAULT\Control Panel\Accessibility\On'} + - !registryKey: {path: 'HKU\.DEFAULT\Control Panel\Accessibility\ShowSounds'} + - !registryKey: {path: 'HKU\.DEFAULT\Control Panel\Accessibility\SlateLaunch'} + - !registryKey: {path: 'HKU\.DEFAULT\Control Panel\Accessibility\SoundSentry'} + - !registryKey: {path: 'HKU\.DEFAULT\Control Panel\Accessibility\StickyKeys'} + - !registryKey: {path: 'HKU\.DEFAULT\Control Panel\Accessibility\TimeOut'} + - !registryKey: {path: 'HKU\.DEFAULT\Control Panel\Accessibility\ToggleKeys'} # =================================================== # === Disable Ease of Access features in Registry === @@ -95,4 +121,18 @@ actions: - !registryValue: {path: 'HKCU\Control Panel\Accessibility\SoundSentry', value: 'Flags', type: REG_SZ, data: '0'} - !registryValue: {path: 'HKCU\Control Panel\Accessibility\StickyKeys', value: 'Flags', type: REG_SZ, data: '0'} - !registryValue: {path: 'HKCU\Control Panel\Accessibility\TimeOut', value: 'Flags', type: REG_SZ, data: '0'} - - !registryValue: {path: 'HKCU\Control Panel\Accessibility\ToggleKeys', value: 'Flags', type: REG_SZ, data: '0'} \ No newline at end of file + - !registryValue: {path: 'HKCU\Control Panel\Accessibility\ToggleKeys', value: 'Flags', type: REG_SZ, data: '0'} + # DEFAULT USER + - !registryValue: {path: 'HKU\.DEFAULT\Control Panel\Accessibility\AudioDescription', value: 'Flags', type: REG_SZ, data: '0'} + - !registryValue: {path: 'HKU\.DEFAULT\Control Panel\Accessibility\Blind Access', value: 'Flags', type: REG_SZ, data: '0'} + - !registryValue: {path: 'HKU\.DEFAULT\Control Panel\Accessibility\HighContrast', value: 'Flags', type: REG_SZ, data: '0'} + - !registryValue: {path: 'HKU\.DEFAULT\Control Panel\Accessibility\Keyboard Preference', value: 'Flags', type: REG_SZ, data: '0'} + - !registryValue: {path: 'HKU\.DEFAULT\Control Panel\Accessibility\Keyboard Response', value: 'Flags', type: REG_SZ, data: '0'} + - !registryValue: {path: 'HKU\.DEFAULT\Control Panel\Accessibility\MouseKeys', value: 'Flags', type: REG_SZ, data: '0'} + - !registryValue: {path: 'HKU\.DEFAULT\Control Panel\Accessibility\On', value: 'Flags', type: REG_SZ, data: '0'} + - !registryValue: {path: 'HKU\.DEFAULT\Control Panel\Accessibility\ShowSounds', value: 'Flags', type: REG_SZ, data: '0'} + - !registryValue: {path: 'HKU\.DEFAULT\Control Panel\Accessibility\SlateLaunch', value: 'Flags', type: REG_SZ, data: '0'} + - !registryValue: {path: 'HKU\.DEFAULT\Control Panel\Accessibility\SoundSentry', value: 'Flags', type: REG_SZ, data: '0'} + - !registryValue: {path: 'HKU\.DEFAULT\Control Panel\Accessibility\StickyKeys', value: 'Flags', type: REG_SZ, data: '0'} + - !registryValue: {path: 'HKU\.DEFAULT\Control Panel\Accessibility\TimeOut', value: 'Flags', type: REG_SZ, data: '0'} + - !registryValue: {path: 'HKU\.DEFAULT\Control Panel\Accessibility\ToggleKeys', value: 'Flags', type: REG_SZ, data: '0'} \ No newline at end of file diff --git a/src/Configuration/Tasks/registry/explorer/explorer.yml b/src/Configuration/Tasks/registry/explorer/explorer.yml index df9af7af..57db65da 100644 --- a/src/Configuration/Tasks/registry/explorer/explorer.yml +++ b/src/Configuration/Tasks/registry/explorer/explorer.yml @@ -8,9 +8,13 @@ actions: # ------> Disabling it fixes the 'folder always loading' issue when a folder contains a lot of media files. # ------> https://www.windowslatest.com/2024/03/04/windows-11-can-open-big-folders-in-file-explorer-faster-if-you-turn-off-folder-discovery/ - !registryValue: {path: 'HKCU\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\AllFolders\Shell', value: 'FolderType', type: REG_SZ, data: 'NotSpecified'} + - !registryValue: {path: 'HKU\.DEFAULT\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\AllFolders\Shell', value: 'FolderType', type: REG_SZ, data: 'NotSpecified'} + # === perf: Force explorer to use high performance GPU - !registryValue: { path: 'HKCU\Software\Microsoft\DirectX\UserGpuPreferences', value: 'C:\Windows\explorer.exe', type: REG_SZ, data: 'GpuPreference=2;' } + - !registryValue: { path: 'HKU\.DEFAULT\Software\Microsoft\DirectX\UserGpuPreferences', value: 'C:\Windows\explorer.exe', type: REG_SZ, data: 'GpuPreference=2;' } + # === perf: Disable 'Include account-based insights, recent, favorite and recommended' for OneDrive in File Explorer - !registryValue: { path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Explorer', value: 'DisableGraphRecentItems', type: REG_DWORD, data: '1' } @@ -48,17 +52,21 @@ actions: # === Increased context options time threshold # ------> If selecting and right clicking more than x amount of items, some context options disappear (i.e. Take ownership), this will increase the threshold. - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer', value: 'MultipleInvokePromptMinimum', type: REG_DWORD, data: '100'} + - !registryValue: {path: 'HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer', value: 'MultipleInvokePromptMinimum', type: REG_DWORD, data: '100'} - !registryValue: {path: 'HKCU\Software\Winaero.com\Winaero Tweaker\Changes', value: 'pageContextMenuSelectionLimit', type: REG_DWORD, data: '1'} # === Disable ' - Shortcut.' text on shortcut creation. - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer', value: 'link', type: REG_BINARY, data: '00000000'} + - !registryValue: {path: 'HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer', value: 'link', type: REG_BINARY, data: '00000000'} # === Always show more details in a file copy dialog - Enabled - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\OperationStatusManager', value: 'EnthusiastMode', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\OperationStatusManager', value: 'EnthusiastMode', type: REG_DWORD, data: '1'} # === AutoPlay - Disabled # ------> Auto play is the notification that pops up when you insert an external storage device, like a USB. - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers', value: 'DisableAutoplay', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers', value: 'DisableAutoplay', type: REG_DWORD, data: '1'} # === AutoRun - Disabled # ------> Disable autorun will limit the functionality of autorun.inf on all disks. @@ -69,6 +77,7 @@ actions: # === Windows low disk space checking - Disabled # ------> (Also prevents idle hard disks from going into standby) - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer', value: 'NoLowDiskSpaceChecks', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer', value: 'NoLowDiskSpaceChecks', type: REG_DWORD, data: '1'} # === Speed up shutdown time by lowering the amount of time it takes the OS to close/kill background Services. # ------> Changed to 1.5 seconds (1500), default is 5 seconds (5000). @@ -78,12 +87,15 @@ actions: # === Do not track Shell shortcuts during roaming - Enabled # ------> https://admx.help/?Category=Windows_11_2022&Policy=Microsoft.Policies.WindowsExplorer::LinkResolveIgnoreLinkInfo - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer', value: 'LinkResolveIgnoreLinkInfo', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer', value: 'LinkResolveIgnoreLinkInfo', type: REG_DWORD, data: '1'} # === Disable Taskbar Animations. (prevents the pop up windows in the taskbar from getting stuck too) - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'TaskbarAnimations', type: REG_DWORD, data: '0', option: 'configure-explorer-taskbar-animations'} + - !registryValue: {path: 'HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'TaskbarAnimations', type: REG_DWORD, data: '0', option: 'configure-explorer-taskbar-animations'} - !registryValue: { path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'TaskbarAnimations', operation: delete, option: '!configure-explorer-taskbar-animations' } + - !registryValue: { path: 'HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'TaskbarAnimations', operation: delete, option: '!configure-explorer-taskbar-animations' } # === Allow Windows Ink Workspace - Enabled (On, but disallow access above lock) # ------> https://admx.help/?Category=Windows_11_2022&Policy=Microsoft.Policies.WindowsInkWorkspace::AllowSuggestedAppsInWindowsInkWorkspace @@ -94,16 +106,21 @@ actions: # === 'Show recommendations for tips, shortcuts, new apps, and more' - Disabled - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'Start_IrisRecommendations', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'Start_IrisRecommendations', type: REG_DWORD, data: '0'} # === 'Show account related notifications occasionally in Start' - Disabled - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'Start_AccountNotifications', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'Start_AccountNotifications', type: REG_DWORD, data: '0'} # === 'End Task' - Enabled - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\TaskbarDeveloperSettings', value: 'TaskbarEndTask', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\TaskbarDeveloperSettings', value: 'TaskbarEndTask', type: REG_DWORD, data: '1'} # === Open File Explorer to This PC by Default - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'LaunchTo', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'LaunchTo', type: REG_DWORD, data: '1'} # === Show Pop-up Description - Hide # ------> https://www.tenforums.com/tutorials/89239-hide-show-pop-up-descriptions-windows-10-a.html - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'ShowInfoTip', type: REG_DWORD, data: '0'} \ No newline at end of file + - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'ShowInfoTip', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'ShowInfoTip', type: REG_DWORD, data: '0'} \ No newline at end of file diff --git a/src/Configuration/Tasks/registry/explorer/notifications.yml b/src/Configuration/Tasks/registry/explorer/notifications.yml index 50bf163a..ae58520d 100644 --- a/src/Configuration/Tasks/registry/explorer/notifications.yml +++ b/src/Configuration/Tasks/registry/explorer/notifications.yml @@ -6,9 +6,11 @@ actions: # === Turn off feature advertisement balloon notifications - Enabled - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows\Explorer', value: 'NoBalloonFeatureAdvertisements', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKU\.DEFAULT\Software\Policies\Microsoft\Windows\Explorer', value: 'NoBalloonFeatureAdvertisements', type: REG_DWORD, data: '1'} # === Turn off notification area cleanup - Enabled - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows\Explorer', value: 'NoAutoTrayNotify', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKU\.DEFAULT\Software\Policies\Microsoft\Windows\Explorer', value: 'NoAutoTrayNotify', type: REG_DWORD, data: '1'} # === Turn off notifications network usage - Enabled - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\PushNotifications', value: 'NoCloudApplicationNotification', type: REG_DWORD, data: '1'} @@ -19,4 +21,6 @@ actions: # === Let's finish setting up your device - Enabled - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\UserProfileEngagement', value: 'ScoobeSystemSettingEnabled', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Context\CloudExperienceHostIntent\Wireless', value: 'ScoobeCheckCompleted', type: REG_DWORD, data: '1'} \ No newline at end of file + - !registryValue: {path: 'HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\UserProfileEngagement', value: 'ScoobeSystemSettingEnabled', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Context\CloudExperienceHostIntent\Wireless', value: 'ScoobeCheckCompleted', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Context\CloudExperienceHostIntent\Wireless', value: 'ScoobeCheckCompleted', type: REG_DWORD, data: '1'} \ No newline at end of file diff --git a/src/Configuration/Tasks/registry/explorer/search.yml b/src/Configuration/Tasks/registry/explorer/search.yml index 54231b0c..a5b65695 100644 --- a/src/Configuration/Tasks/registry/explorer/search.yml +++ b/src/Configuration/Tasks/registry/explorer/search.yml @@ -18,6 +18,7 @@ actions: # ------> https://www.howtogeek.com/224159/how-to-disable-bing-in-the-windows-10-start-menu/ # ------> https://admx.help/?Category=Windows_11_2022&Policy=Microsoft.Policies.WindowsExplorer::DisableSearchBoxSuggestions - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows\Explorer', value: 'DisableSearchBoxSuggestions', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKU\.DEFAULT\Software\Policies\Microsoft\Windows\Explorer', value: 'DisableSearchBoxSuggestions', type: REG_DWORD, data: '1'} # === Allow Cloud Search - User Selected # ------> https://admx.help/?Category=Windows_11_2022&Policy=FullArmor.Policies.3B9EA2B5_A1D1_4CD5_9EDE_75B22990BC21::AllowCloudSearch @@ -58,7 +59,9 @@ actions: # ------> Only applies to 1909 and lower. # ------> https://www.howtogeek.com/224159/how-to-disable-bing-in-the-windows-10-start-menu/ - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Search', value: 'CortanaConsent', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Search', value: 'CortanaConsent', type: REG_DWORD, data: '0'} - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Search', value: 'BingSearchEnabled', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Search', value: 'BingSearchEnabled', type: REG_DWORD, data: '0'} # === Automatic Update of Speech Data - Off # ------> https://www.howto-connect.com/enable-disable-automatic-update-speech-data-windows-10/ diff --git a/src/Configuration/Tasks/registry/explorer/start-menu.yml b/src/Configuration/Tasks/registry/explorer/start-menu.yml index f633096b..363696f9 100644 --- a/src/Configuration/Tasks/registry/explorer/start-menu.yml +++ b/src/Configuration/Tasks/registry/explorer/start-menu.yml @@ -36,4 +36,5 @@ actions: # === Do not use the search-based method when resolving shell shortcuts - Enabled # ------> https://admx.help/?Category=Windows_11_2022&Policy=Microsoft.Policies.StartMenu::NoResolveSearch - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer', value: 'NoResolveSearch', type: REG_DWORD, data: '1'} \ No newline at end of file + - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer', value: 'NoResolveSearch', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer', value: 'NoResolveSearch', type: REG_DWORD, data: '1'} \ No newline at end of file diff --git a/src/Configuration/Tasks/registry/explorer/taskbar.yml b/src/Configuration/Tasks/registry/explorer/taskbar.yml index 08032530..e714e401 100644 --- a/src/Configuration/Tasks/registry/explorer/taskbar.yml +++ b/src/Configuration/Tasks/registry/explorer/taskbar.yml @@ -6,29 +6,36 @@ actions: # === Show Search Icon - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Search', value: 'SearchboxTaskbarMode', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Search', value: 'SearchboxTaskbarMode', type: REG_DWORD, data: '1'} # === Show Task View button - Disabled - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'ShowTaskViewButton', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'ShowTaskViewButton', type: REG_DWORD, data: '0'} # === Disable the new Weather and News widgets # ------> Other parts of it can be found in ifeo - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Feeds', value: 'EnableFeeds', type: REG_DWORD, data: '0'} - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Feeds', value: 'ShellFeedsTaskbarViewMode', type: REG_DWORD, data: '2', errorAction: Ignore} + - !registryValue: {path: 'HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Feeds', value: 'ShellFeedsTaskbarViewMode', type: REG_DWORD, data: '2', errorAction: Ignore} - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'TaskbarDa', type: REG_DWORD, data: '0', errorAction: Ignore} + - !registryValue: {path: 'HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'TaskbarDa', type: REG_DWORD, data: '0', errorAction: Ignore} # ------> since 22621.1343 builds, Windows 11 tries to reinstall WebExperience even if it is removed and stored in deprovisioned apps list - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Dsh', value: 'AllowNewsAndInterests', type: REG_DWORD, data: '0'} # === Remove the People Bar from the taskbar - Enabled - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows\Explorer', value: 'HidePeopleBar', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKU\.DEFAULT\Software\Policies\Microsoft\Windows\Explorer', value: 'HidePeopleBar', type: REG_DWORD, data: '1'} # === Remove the Meet Now icon - Enabled - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer', value: 'HideSCAMeetNow', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer', value: 'HideSCAMeetNow', type: REG_DWORD, data: '1'} # === Configures the Chat icon on the taskbar - Disabled - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Chat', value: 'ChatIcon', type: REG_DWORD, data: '3'} - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'TaskbarMn', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'TaskbarMn', type: REG_DWORD, data: '0'} # === Remove the Meet Now icon - Enabled - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer', value: 'HideSCAMeetNow', type: REG_DWORD, data: '1'} \ No newline at end of file diff --git a/src/Configuration/Tasks/registry/explorer/view.yml b/src/Configuration/Tasks/registry/explorer/view.yml index 4142b8f3..7c024919 100644 --- a/src/Configuration/Tasks/registry/explorer/view.yml +++ b/src/Configuration/Tasks/registry/explorer/view.yml @@ -9,13 +9,13 @@ actions: # ============ # === Display the full path in title bar - Enabled - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\CabinetState', value: 'FullPath', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Explorer\CabinetState', value: 'FullPath', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\CabinetState', value: 'FullPath', type: REG_DWORD, data: '1'} # === Hide extensions for known file types - Disabled # ------> Disabled for Security reasons - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'HideFileExt', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'HideFileExt', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'HideFileExt', type: REG_DWORD, data: '0'} # === Show sync provider notifications (ads) - Disabled - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'ShowSyncProviderNotifications', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'ShowSyncProviderNotifications', type: REG_DWORD, data: '0'} \ No newline at end of file + - !registryValue: {path: 'HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'ShowSyncProviderNotifications', type: REG_DWORD, data: '0'} \ No newline at end of file diff --git a/src/Configuration/Tasks/registry/explorer/win-settings.yml b/src/Configuration/Tasks/registry/explorer/win-settings.yml index c2c3998c..97b73c7d 100644 --- a/src/Configuration/Tasks/registry/explorer/win-settings.yml +++ b/src/Configuration/Tasks/registry/explorer/win-settings.yml @@ -44,21 +44,33 @@ actions: - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ImmersiveShell', value: 'SignInMode', type: REG_DWORD, data: '1'} - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ImmersiveShell', value: 'TabletMode', type: REG_DWORD, data: '0'} - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ImmersiveShell', value: 'ConvertibleSlateModePromptPreference', type: REG_DWORD, data: '2'} + # DEFAULT USER + - !registryValue: {path: 'HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\ImmersiveShell', value: 'SignInMode', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\ImmersiveShell', value: 'TabletMode', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\ImmersiveShell', value: 'ConvertibleSlateModePromptPreference', type: REG_DWORD, data: '2'} # === Hide app icons on the taskbar in tablet mode - Off - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'TaskbarAppsVisibleInTabletMode', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'TaskbarAppsVisibleInTabletMode', type: REG_DWORD, data: '1'} + # === Automatically hide the taskbar in tablet mode - Off - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'TaskbarAutoHideInTabletMode', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'TaskbarAutoHideInTabletMode', type: REG_DWORD, data: '0'} + # ======> Multitasking # === Show suggestions occasionally in your timeline - Off - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SubscribedContent-353698Enabled', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SubscribedContent-353698Enabled', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SystemPaneSuggestionsEnabled', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SystemPaneSuggestionsEnabled', type: REG_DWORD, data: '0'} # ======> Clipboard # === Clipboard History - Off - !registryValue: {path: 'HKCU\Software\Microsoft\Clipboard', value: 'EnableClipboardHistory', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKU\.DEFAULT\Software\Microsoft\Clipboard', value: 'EnableClipboardHistory', type: REG_DWORD, data: '0'} # === Allow Clipboard History - Enabled (default) # ------> Clipboard won't work if disabled. @@ -115,6 +127,7 @@ actions: # ======> AutoPlay # === Use AutoPlay for all media and devices - Off - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers', value: 'DisableAutoplay', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers', value: 'DisableAutoplay', type: REG_DWORD, data: '1'} # ======================= # === Personalization === @@ -135,15 +148,21 @@ actions: - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize', value: 'AppsUseLightTheme', type: REG_DWORD, data: '0', option: "configure-darkmode", weight: 70} - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize', value: 'SystemUsesLightTheme', type: REG_DWORD, data: '0', option: "configure-darkmode", weight: 50} + - !registryValue: {path: 'HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize', value: 'AppsUseLightTheme', type: REG_DWORD, data: '0', option: "configure-darkmode", weight: 70} + - !registryValue: {path: 'HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize', value: 'SystemUsesLightTheme', type: REG_DWORD, data: '0', option: "configure-darkmode", weight: 50} + ## if dark mode is deselected, then revert to light mode - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize', value: 'AppsUseLightTheme', type: REG_DWORD, data: '1', option: "!configure-darkmode", weight: 70} - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize', value: 'SystemUsesLightTheme', type: REG_DWORD, data: '1', option: "!configure-darkmode", weight: 50} + - !registryValue: {path: 'HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize', value: 'AppsUseLightTheme', type: REG_DWORD, data: '1', option: "!configure-darkmode", weight: 70} + - !registryValue: {path: 'HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize', value: 'SystemUsesLightTheme', type: REG_DWORD, data: '1', option: "!configure-darkmode", weight: 50} ## # ======> Start # === Show suggestions occasionally in Start - Off - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SubscribedContent-338388Enabled', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SubscribedContent-338388Enabled', type: REG_DWORD, data: '0'} # ============ # === Apps === @@ -224,6 +243,7 @@ actions: # === Record game clips, screenshots and broadcast using Game bar - Off - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\GameDVR', value: 'AppCaptureEnabled', type: REG_DWORD, data: '0', option: 'remove-appx-xbox'} - !registryValue: {path: 'HKCU\System\GameConfigStore', value: 'GameDVR_Enabled', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKU\.DEFAULT\System\GameConfigStore', value: 'GameDVR_Enabled', type: REG_DWORD, data: '0'} # =============== # === Privacy === @@ -244,6 +264,7 @@ actions: # === Allow webistes to provide locally relevant content by accessing my language list - Off # ------> Do not let websites access local language list - Enabled - !registryValue: {path: 'HKCU\Control Panel\International\User Profile', value: 'HttpAcceptLanguageOptOut', type: REG_DWORD, data: '1', weight: 50} + - !registryValue: {path: 'HKU\.DEFAULT\Control Panel\International\User Profile', value: 'HttpAcceptLanguageOptOut', type: REG_DWORD, data: '1', weight: 50} # === Allow Windows to track app launches to improve Start and search - Off # [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced] @@ -253,11 +274,13 @@ actions: # === Show me notifications in the Settings app - Off # ------> Found in 22631.3527 - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\SystemSettings\AccountNotifications', value: 'EnableAccountNotifications', type: REG_DWORD, data: '1', weight: 50} + - !registryValue: {path: 'HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\SystemSettings\AccountNotifications', value: 'EnableAccountNotifications', type: REG_DWORD, data: '1', weight: 50} # ======> Speech # === Online speech recognition - Off - !registryValue: {path: 'HKCU\Software\Microsoft\Speech_OneCore\Settings\OnlineSpeechPrivacy', value: 'HasAccepted', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKU\.DEFAULT\Software\Microsoft\Speech_OneCore\Settings\OnlineSpeechPrivacy', value: 'HasAccepted', type: REG_DWORD, data: '0'} # ======> Inking & typing personalization # === Getting to know you - Off @@ -293,6 +316,7 @@ actions: # === Tailored experiences - Off - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Privacy', value: 'TailoredExperiencesWithDiagnosticDataEnabled', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Privacy', value: 'TailoredExperiencesWithDiagnosticDataEnabled', type: REG_DWORD, data: '0'} - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CPSS\DevicePolicy\TailoredExperiencesWithDiagnosticDataEnabled', value: 'DefaultValue', type: REG_DWORD, data: '0'} # === View diagnostic data - Off @@ -302,6 +326,9 @@ actions: - !registryValue: {path: 'HKCU\Software\Microsoft\Siuf\Rules', value: 'NumberOfSIUFInPeriod', type: REG_DWORD, data: '0'} - !registryValue: {path: 'HKCU\Software\Microsoft\Siuf\Rules', value: 'PeriodInNanoSeconds', operation: delete} + - !registryValue: {path: 'HKU\.DEFAULT\Software\Microsoft\Siuf\Rules', value: 'NumberOfSIUFInPeriod', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKU\.DEFAULT\Software\Microsoft\Siuf\Rules', value: 'PeriodInNanoSeconds', operation: delete} + # ======> Activity history # === Allow upload of User Activities - Disabled - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\System', value: 'UploadUserActivities', type: REG_DWORD, data: '0'} @@ -317,6 +344,8 @@ actions: # === Location - Off - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\location', value: 'Value', type: REG_SZ, data: 'Deny'} + - !registryValue: {path: 'HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\location', value: 'Value', type: REG_SZ, data: 'Deny'} + # REMINDER # [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\location] # "Value"="Deny" diff --git a/src/Configuration/Tasks/registry/misc/enable-audio-communications-do-nothing.yml b/src/Configuration/Tasks/registry/misc/enable-audio-communications-do-nothing.yml index 925f34ea..c75dd600 100644 --- a/src/Configuration/Tasks/registry/misc/enable-audio-communications-do-nothing.yml +++ b/src/Configuration/Tasks/registry/misc/enable-audio-communications-do-nothing.yml @@ -6,3 +6,4 @@ actions: # === Set Sound -> Communications -> "When Windows detects communications activity" to "Do Nothing". - !registryValue: {path: 'HKCU\Software\Microsoft\Multimedia\Audio', value: 'UserDuckingPreference', type: REG_DWORD, data: '3'} + - !registryValue: {path: 'HKU\.DEFAULT\Software\Microsoft\Multimedia\Audio', value: 'UserDuckingPreference', type: REG_DWORD, data: '3'} diff --git a/src/Configuration/Tasks/registry/privacy/cdm.yml b/src/Configuration/Tasks/registry/privacy/cdm.yml index 1d861fad..fc241acd 100644 --- a/src/Configuration/Tasks/registry/privacy/cdm.yml +++ b/src/Configuration/Tasks/registry/privacy/cdm.yml @@ -6,38 +6,50 @@ actions: # === Content Delivery - Off - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'ContentDeliveryAllowed', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'ContentDeliveryAllowed', type: REG_DWORD, data: '0'} # === Subscribed Content - Off - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SubscribedContentEnabled', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SubscribedContentEnabled', type: REG_DWORD, data: '0'} # === Windows Welcome Experience after Updates - Off - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SubscribedContent-310093Enabled', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SubscribedContent-310093Enabled', type: REG_DWORD, data: '0'} # === Get tips, tricks and suggestions as you use Windows - Off - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SoftLandingEnabled', type: REG_DWORD, data: '0'} - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SubscribedContent-338389Enabled', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SoftLandingEnabled', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SubscribedContent-338389Enabled', type: REG_DWORD, data: '0'} + # === Automatically Install Suggested and Pre-installed Apps - Off - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SilentInstalledAppsEnabled', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SilentInstalledAppsEnabled', type: REG_DWORD, data: '0'} - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'PreInstalledAppsEnabled', type: REG_DWORD, data: '0'} - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'PreInstalledAppsEverEnabled', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'PreInstalledAppsEnabled', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'PreInstalledAppsEverEnabled', type: REG_DWORD, data: '0'} # === Pre-installed vendor apps - Off - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'OemPreInstalledAppsEnabled', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'OemPreInstalledAppsEnabled', type: REG_DWORD, data: '0'} # === Prevent Content Delivery Manager from reverting feature configuration - - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'FeatureManagementEnabled', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'FeatureManagementEnabled', type: REG_DWORD, data: '0'}- !registryValue: {path: 'HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'FeatureManagementEnabled', type: REG_DWORD, data: '0'} # === Remove Content Delivery Subcsriptions - !registryKey: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Subscriptions'} + - !registryKey: {path: 'HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Subscriptions'} # === Remove Suggested Apps from Content Delivery - !registryKey: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\SuggestedApps'} - + - !registryKey: {path: 'HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\SuggestedApps'} - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'RemediationRequired', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'RemediationRequired', type: REG_DWORD, data: '0'} # === Turn Off Showing App Suggestions - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SubscribedContent-314559Enabled', type: REG_DWORD, data: '0'} @@ -47,8 +59,19 @@ actions: - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SubscribedContent-338387Enabled', type: REG_DWORD, data: '0'} # Facts, Tips and Tricks on Lock Screen - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SubscribedContent-280810Enabled', type: REG_DWORD, data: '0'} # OneDrive SyncProviders - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SubscribedContent-280811Enabled', type: REG_DWORD, data: '0'} # OneDrive + # DEFAULT USER + - !registryValue: {path: 'HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SubscribedContent-314559Enabled', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SubscribedContent-280815Enabled', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SubscribedContent-314563Enabled', type: REG_DWORD, data: '0'} # My People + - !registryValue: {path: 'HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SubscribedContent-202914Enabled', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SubscribedContent-338387Enabled', type: REG_DWORD, data: '0'} # Facts, Tips and Tricks on Lock Screen + - !registryValue: {path: 'HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SubscribedContent-280810Enabled', type: REG_DWORD, data: '0'} # OneDrive SyncProviders + - !registryValue: {path: 'HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SubscribedContent-280811Enabled', type: REG_DWORD, data: '0'} # OneDrive # === Disable Spotlight on Lock Screen - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'RotatingLockScreenEnabled', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'RotatingLockScreenOverlayEnabled', type: REG_DWORD, data: '0'} \ No newline at end of file + - !registryValue: {path: 'HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'RotatingLockScreenEnabled', type: REG_DWORD, data: '0'} + + - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'RotatingLockScreenOverlayEnabled', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'RotatingLockScreenOverlayEnabled', type: REG_DWORD, data: '0'} \ No newline at end of file diff --git a/src/Configuration/Tasks/registry/privacy/cloud-content.yml b/src/Configuration/Tasks/registry/privacy/cloud-content.yml index b32f11e1..707ccdf9 100644 --- a/src/Configuration/Tasks/registry/privacy/cloud-content.yml +++ b/src/Configuration/Tasks/registry/privacy/cloud-content.yml @@ -15,12 +15,15 @@ actions: # === Configure Windows spotlight on lock screen - Disabled - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows\CloudContent', value: 'ConfigureWindowsSpotlight', type: REG_DWORD, data: '2'} + - !registryValue: {path: 'HKU\.DEFAULT\Software\Policies\Microsoft\Windows\CloudContent', value: 'ConfigureWindowsSpotlight', type: REG_DWORD, data: '2'} # === Include content from Enterprise spotlight - Disabled - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows\CloudContent', value: 'IncludeEnterpriseSpotlight', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKU\.DEFAULT\Software\Policies\Microsoft\Windows\CloudContent', value: 'IncludeEnterpriseSpotlight', type: REG_DWORD, data: '0'} # === Do not suggest third-party content in Windows spotlight - Enabled - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows\CloudContent', value: 'DisableThirdPartySuggestions', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKU\.DEFAULT\Software\Policies\Microsoft\Windows\CloudContent', value: 'DisableThirdPartySuggestions', type: REG_DWORD, data: '1'} # === Do not use diagnostic data for tailored experiences - Enabled - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows\CloudContent', value: 'DisableTailoredExperiencesWithDiagnosticData', type: REG_DWORD, data: '1'} @@ -28,15 +31,19 @@ actions: # === Turn off all Windows spotlight features - Enabled - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows\CloudContent', value: 'DisableWindowsSpotlightFeatures', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKU\.DEFAULT\Software\Policies\Microsoft\Windows\CloudContent', value: 'DisableWindowsSpotlightFeatures', type: REG_DWORD, data: '1'} # === Turn off the Windows Welcome Experience - Enabled - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows\CloudContent', value: 'DisableWindowsSpotlightWindowsWelcomeExperience', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKU\.DEFAULT\Software\Policies\Microsoft\Windows\CloudContent', value: 'DisableWindowsSpotlightWindowsWelcomeExperience', type: REG_DWORD, data: '1'} # === Turn off Windows Spotlight on Action Center - Enabled - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows\CloudContent', value: 'DisableWindowsSpotlightOnActionCenter', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKU\.DEFAULT\Software\Policies\Microsoft\Windows\CloudContent', value: 'DisableWindowsSpotlightOnActionCenter', type: REG_DWORD, data: '1'} # === Turn off Windows Spotlight on Settings - Enabled - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows\CloudContent', value: 'DisableWindowsSpotlightOnSettings', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKU\.DEFAULT\Software\Policies\Microsoft\Windows\CloudContent', value: 'DisableWindowsSpotlightOnSettings', type: REG_DWORD, data: '1'} # === Turn off cloud optimized content - Enabled - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\CloudContent', value: 'DisableCloudOptimizedContent', type: REG_DWORD, data: '1'} \ No newline at end of file diff --git a/src/Configuration/Tasks/registry/privacy/privacy.yml b/src/Configuration/Tasks/registry/privacy/privacy.yml index fefcb82a..1258099e 100644 --- a/src/Configuration/Tasks/registry/privacy/privacy.yml +++ b/src/Configuration/Tasks/registry/privacy/privacy.yml @@ -32,6 +32,7 @@ actions: # === Turn off tracking of app usage - Enabled - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows\EdgeUI', value: 'DisableMFUTracking', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKU\.DEFAULT\Software\Policies\Microsoft\Windows\EdgeUI', value: 'DisableMFUTracking', type: REG_DWORD, data: '1'} # =========================================================== # === Restrict Internet communication (HKEY_CURRENT_USER) === diff --git a/src/Configuration/Tasks/registry/security/security.yml b/src/Configuration/Tasks/registry/security/security.yml index f5fe815c..eb0e0fa8 100644 --- a/src/Configuration/Tasks/registry/security/security.yml +++ b/src/Configuration/Tasks/registry/security/security.yml @@ -7,6 +7,7 @@ actions: # === Hide the Account Protection page in Defender # ------> Everything it provides redirects to the Windows Settings anyway. Done for annoyance reduction. - !registryValue: {path: 'HKCU\Software\Microsoft\Windows Security Health\State', value: 'AccountProtection_MicrosoftAccount_Disconnected', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKU\.DEFAULT\Software\Microsoft\Windows Security Health\State', value: 'AccountProtection_MicrosoftAccount_Disconnected', type: REG_DWORD, data: '0'} # === Windows Defender Antivirus # In early days of ReviOS, Defender used to disabled via registry. We now use a different method and makes most of policies & registries obsolete. Therefore, we've removed most of the comments. diff --git a/src/Configuration/Tasks/registry/system/bypass-requirements.yml b/src/Configuration/Tasks/registry/system/bypass-requirements.yml index f8cde552..1452e146 100644 --- a/src/Configuration/Tasks/registry/system/bypass-requirements.yml +++ b/src/Configuration/Tasks/registry/system/bypass-requirements.yml @@ -4,8 +4,8 @@ description: Bypass requirements for Windows 11 installation, most of them are o privilege: TrustedInstaller actions: - # === Bypass requirements - # ------> Credits to St1cky and crypticus + # === Bypass requirements + # ------> Credits to St1cky and crypticus - !registryValue: {path: 'HKLM\SYSTEM\Setup\LabConfig', value: 'BypassSecureBootCheck', type: REG_DWORD, data: '1'} - !registryValue: {path: 'HKLM\SYSTEM\Setup\LabConfig', value: 'BypassTPMCheck', type: REG_DWORD, data: '1'} - !registryValue: {path: 'HKLM\SYSTEM\Setup\LabConfig', value: 'BypassCPUCheck', type: REG_DWORD, data: '1'} @@ -14,4 +14,6 @@ actions: - !registryValue: {path: 'HKLM\SYSTEM\Setup\MoSetup', value: 'AllowUpgradesWithUnsupportedTPMOrCPU', type: REG_DWORD, data: '1'} - !registryValue: {path: 'HKCU\Control Panel\UnsupportedHardwareNotificationCache', value: 'SV1', type: REG_DWORD, data: '0'} - !registryValue: {path: 'HKCU\Control Panel\UnsupportedHardwareNotificationCache', value: 'SV2', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKU\.DEFAULT\Control Panel\UnsupportedHardwareNotificationCache', value: 'SV1', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKU\.DEFAULT\Control Panel\UnsupportedHardwareNotificationCache', value: 'SV2', type: REG_DWORD, data: '0'} - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OOBE', value: 'BypassNRO', type: REG_DWORD, data: '1'} From 745df612d7ee669811f1d5094877e111a8265dd9 Mon Sep 17 00:00:00 2001 From: h3r0 <50238852+melo936@users.noreply.github.com> Date: Sat, 28 Sep 2024 12:38:20 +0000 Subject: [PATCH 25/47] move the processidletasks & defrag task to final.yml --- src/Configuration/Tasks/final.yml | 10 ++++++++-- src/Configuration/Tasks/registry/privacy/cdm.yml | 3 ++- src/Configuration/Tasks/revert.yml | 4 ---- 3 files changed, 10 insertions(+), 7 deletions(-) diff --git a/src/Configuration/Tasks/final.yml b/src/Configuration/Tasks/final.yml index 9c132c20..84ff7125 100644 --- a/src/Configuration/Tasks/final.yml +++ b/src/Configuration/Tasks/final.yml @@ -81,7 +81,7 @@ actions: option: "configure-wallpaper" weight: 45 - # Necessary to refresh start menu entries etc. + # Necessary to refresh start menu entries etc. - !appx: {operation: clearCache, name: '*Client.CBS*'} - !appx: {operation: clearCache, name: '*StartMenuExperienceHost*', option: "remove-pinned-items-startmenu"} - !appx: {operation: clearCache, name: '*Windows.Search*'} @@ -95,4 +95,10 @@ actions: # Force update group policy - !run: - exe: "gpupdate.exe" \ No newline at end of file + exe: "gpupdate.exe" + + # Fixes cores parking on some AMD CPUs + - !powerShell: + command: | + Start-Process -FilePath 'rundll32.exe' -ArgumentList 'advapi32.dll,ProcessIdleTasks' -Wait -NoNewWindow + Start-Process -FilePath 'defrag' -ArgumentList "$env:SystemDrive -b" -Wait -NoNewWindow \ No newline at end of file diff --git a/src/Configuration/Tasks/registry/privacy/cdm.yml b/src/Configuration/Tasks/registry/privacy/cdm.yml index fc241acd..adaf7f59 100644 --- a/src/Configuration/Tasks/registry/privacy/cdm.yml +++ b/src/Configuration/Tasks/registry/privacy/cdm.yml @@ -38,7 +38,8 @@ actions: - !registryValue: {path: 'HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'OemPreInstalledAppsEnabled', type: REG_DWORD, data: '0'} # === Prevent Content Delivery Manager from reverting feature configuration - - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'FeatureManagementEnabled', type: REG_DWORD, data: '0'}- !registryValue: {path: 'HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'FeatureManagementEnabled', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'FeatureManagementEnabled', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'FeatureManagementEnabled', type: REG_DWORD, data: '0'} # === Remove Content Delivery Subcsriptions - !registryKey: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Subscriptions'} diff --git a/src/Configuration/Tasks/revert.yml b/src/Configuration/Tasks/revert.yml index 0c0c3267..45eca446 100644 --- a/src/Configuration/Tasks/revert.yml +++ b/src/Configuration/Tasks/revert.yml @@ -78,10 +78,6 @@ actions: $path = ${env:ProgramFiles(x86)} + '\Revision Tool\data\flutter_assets\additionals\EnableSF.bat' Start-Process -FilePath $path -Wait -NoNewWindow - # Additional fixes - Start-Process -FilePath 'rundll32.exe' -ArgumentList 'advapi32.dll,ProcessIdleTasks' -Wait -NoNewWindow - Start-Process -FilePath 'defrag' -ArgumentList "$env:SystemDrive -b" -Wait -NoNewWindow - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Dfrg\BootOptimizeFunction', value: 'Enable', operation: delete} - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OptimalLayout', value: 'EnableAutoLayout', operation: delete} From 5daf0a7ccd4eccd1e0a7bd04a4168275625b4dc6 Mon Sep 17 00:00:00 2001 From: h3r0 <50238852+melo936@users.noreply.github.com> Date: Thu, 3 Oct 2024 10:20:01 +0000 Subject: [PATCH 26/47] fix Edge uninstallation due to recent Windows/Edge changes --- src/Executables/EDGE.ps1 | 48 ++++++++++++++++------------------------ 1 file changed, 19 insertions(+), 29 deletions(-) diff --git a/src/Executables/EDGE.ps1 b/src/Executables/EDGE.ps1 index 50d2d8bb..1d2a7c6b 100644 --- a/src/Executables/EDGE.ps1 +++ b/src/Executables/EDGE.ps1 @@ -15,28 +15,6 @@ function Uninstall-Process { # Set Nation to 84 (France) temporarily [microsoft.win32.registry]::SetValue('HKEY_USERS\.DEFAULT\Control Panel\International\Geo', 'Nation', 84, [Microsoft.Win32.RegistryValueKind]::String) | Out-Null - # credits to he3als for the Acl commands - $fileName = "IntegratedServicesRegionPolicySet.json" - $pathISRPS = [Environment]::SystemDirectory + "\" + $fileName - $aclISRPS = Get-Acl -Path $pathISRPS - $aclISRPSBackup = [System.Security.AccessControl.FileSecurity]::new() - $aclISRPSBackup.SetSecurityDescriptorSddlForm($acl.Sddl) - if (Test-Path -Path $pathISRPS) { - try { - $admin = [System.Security.Principal.NTAccount]$(New-Object System.Security.Principal.SecurityIdentifier('S-1-5-32-544')).Translate([System.Security.Principal.NTAccount]).Value - - $aclISRPS.SetOwner($admin) - $rule = New-Object System.Security.AccessControl.FileSystemAccessRule($admin, 'FullControl', 'Allow') - $aclISRPS.AddAccessRule($rule) - Set-Acl -Path $pathISRPS -AclObject $aclISRPS - - Rename-Item -Path $pathISRPS -NewName ($fileName + '.bak') -Force - } - catch { - Write-Error "[$Mode] Failed to set owner for $pathISRPS" - } - } - $baseKey = 'HKLM:\SOFTWARE\WOW6432Node\Microsoft\EdgeUpdate' $registryPath = $baseKey + '\ClientState\' + $Key @@ -47,6 +25,21 @@ function Uninstall-Process { Remove-ItemProperty -Path $registryPath -Name "experiment_control_labels" -ErrorAction SilentlyContinue | Out-Null + # Needed to activate BrowserReplacement + # Not needed if windir is set to an empty string, but keeping it in case Windows Updates reinstalls Edge + $folderPath = "$env:SystemRoot\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe" + + if (!(Test-Path -Path $folderPath)) { + New-Item -ItemType Directory -Path $folderPath -Force | Out-Null + } + New-Item -ItemType File -Path $folderPath -Name "MicrosoftEdge.exe" -Force | Out-Null + # + + $orignalWindir = [System.Environment]::GetEnvironmentVariable("windir","Machine") + # Setting windir to an empty string allows the Edge uninstallation to work + [microsoft.win32.registry]::SetValue('HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager\Environment', 'windir', "", [Microsoft.Win32.RegistryValueKind]::ExpandString) | Out-Null + $env:windir = [System.Environment]::GetEnvironmentVariable("windir","Machine") + $uninstallString = (Get-ItemProperty -Path $registryPath).UninstallString $uninstallArguments = (Get-ItemProperty -Path $registryPath).UninstallArguments @@ -64,18 +57,15 @@ function Uninstall-Process { } Start-Process -FilePath $uninstallString -ArgumentList $uninstallArguments -Wait -NoNewWindow -Verbose - # Restore Acl - if (Test-Path -Path ($pathISRPS + '.bak')) { - Rename-Item -Path ($pathISRPS + '.bak') -NewName $fileName -Force - Set-Acl -Path $pathISRPS -AclObject $aclISRPSBackup - } - # Restore Nation [microsoft.win32.registry]::SetValue('HKEY_USERS\.DEFAULT\Control Panel\International\Geo', 'Nation', $originalNation, [Microsoft.Win32.RegistryValueKind]::String) | Out-Null + # Restore windir + [microsoft.win32.registry]::SetValue('HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager\Environment', 'windir', $orignalWindir, [Microsoft.Win32.RegistryValueKind]::ExpandString) | Out-Null + if ((Get-ItemProperty -Path $baseKey).IsEdgeStableUninstalled -eq 1) { Write-Host "[$Mode] Edge Stable has been successfully uninstalled" - } + } } function Uninstall-Edge { From d1bc15ef2287257a799c3cff10d13ad659b364fc Mon Sep 17 00:00:00 2001 From: h3r0 <50238852+melo936@users.noreply.github.com> Date: Thu, 3 Oct 2024 11:12:18 +0000 Subject: [PATCH 27/47] apply micro patches via revitool Apply micro patches via Revision Tool in order to avoid new playbook releases for minor changes --- src/Configuration/Tasks/final.yml | 14 +++++++++++--- src/Executables/EDGE.ps1 | 3 +-- 2 files changed, 12 insertions(+), 5 deletions(-) diff --git a/src/Configuration/Tasks/final.yml b/src/Configuration/Tasks/final.yml index 84ff7125..155c3cef 100644 --- a/src/Configuration/Tasks/final.yml +++ b/src/Configuration/Tasks/final.yml @@ -98,7 +98,15 @@ actions: exe: "gpupdate.exe" # Fixes cores parking on some AMD CPUs - - !powerShell: + - !cmd: command: | - Start-Process -FilePath 'rundll32.exe' -ArgumentList 'advapi32.dll,ProcessIdleTasks' -Wait -NoNewWindow - Start-Process -FilePath 'defrag' -ArgumentList "$env:SystemDrive -b" -Wait -NoNewWindow \ No newline at end of file + rundll32.exe advapi32.dll,ProcessIdleTasks + defrag $env:SystemDrive -b + + # Apply micro patches via Revision Tool in order to avoid new playbook releases for minor changes + - !run: + path: "%ProgramFiles(x86)%\\Revision Tool" + exe: "revitool.exe" + args: "playbook-patches apply" + wait: true + runas: currentUserElevated \ No newline at end of file diff --git a/src/Executables/EDGE.ps1 b/src/Executables/EDGE.ps1 index 1d2a7c6b..7bd66c58 100644 --- a/src/Executables/EDGE.ps1 +++ b/src/Executables/EDGE.ps1 @@ -35,7 +35,6 @@ function Uninstall-Process { New-Item -ItemType File -Path $folderPath -Name "MicrosoftEdge.exe" -Force | Out-Null # - $orignalWindir = [System.Environment]::GetEnvironmentVariable("windir","Machine") # Setting windir to an empty string allows the Edge uninstallation to work [microsoft.win32.registry]::SetValue('HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager\Environment', 'windir', "", [Microsoft.Win32.RegistryValueKind]::ExpandString) | Out-Null $env:windir = [System.Environment]::GetEnvironmentVariable("windir","Machine") @@ -61,7 +60,7 @@ function Uninstall-Process { [microsoft.win32.registry]::SetValue('HKEY_USERS\.DEFAULT\Control Panel\International\Geo', 'Nation', $originalNation, [Microsoft.Win32.RegistryValueKind]::String) | Out-Null # Restore windir - [microsoft.win32.registry]::SetValue('HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager\Environment', 'windir', $orignalWindir, [Microsoft.Win32.RegistryValueKind]::ExpandString) | Out-Null + [microsoft.win32.registry]::SetValue('HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager\Environment', 'windir', '%SystemRoot%', [Microsoft.Win32.RegistryValueKind]::ExpandString) | Out-Null if ((Get-ItemProperty -Path $baseKey).IsEdgeStableUninstalled -eq 1) { Write-Host "[$Mode] Edge Stable has been successfully uninstalled" From d8a559f7fb6b29e5356e005063726f7b929d82e4 Mon Sep 17 00:00:00 2001 From: h3r0 <50238852+melo936@users.noreply.github.com> Date: Thu, 3 Oct 2024 11:41:25 +0000 Subject: [PATCH 28/47] fix defrag command --- src/Configuration/Tasks/final.yml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/src/Configuration/Tasks/final.yml b/src/Configuration/Tasks/final.yml index 155c3cef..6b488e1a 100644 --- a/src/Configuration/Tasks/final.yml +++ b/src/Configuration/Tasks/final.yml @@ -99,9 +99,10 @@ actions: # Fixes cores parking on some AMD CPUs - !cmd: + wait: true command: | rundll32.exe advapi32.dll,ProcessIdleTasks - defrag $env:SystemDrive -b + defrag %SystemDrive% -b # Apply micro patches via Revision Tool in order to avoid new playbook releases for minor changes - !run: From fcd317b4b3a67b160759119b806f40e7c6975a5b Mon Sep 17 00:00:00 2001 From: h3r0 <50238852+melo936@users.noreply.github.com> Date: Fri, 4 Oct 2024 09:04:56 +0000 Subject: [PATCH 29/47] bring back missing remove-appx-photos option --- src/Configuration/Tasks/packages/appx.yml | 11 ++++++++++- 1 file changed, 10 insertions(+), 1 deletion(-) diff --git a/src/Configuration/Tasks/packages/appx.yml b/src/Configuration/Tasks/packages/appx.yml index 5c142cb0..39e92af9 100644 --- a/src/Configuration/Tasks/packages/appx.yml +++ b/src/Configuration/Tasks/packages/appx.yml @@ -15,7 +15,6 @@ actions: .\APPX-REMOVER.ps1 -Packages @( 'Microsoft.Windows.SecureAssessmentBrowser', 'Microsoft.Windows.PeopleExperienceHost', - 'Microsoft.Windows.Photos', 'Microsoft.WindowsCamera', 'MicrosoftWindows.Client.WebExperience', 'Microsoft.WidgetsPlatformRuntime', @@ -63,6 +62,16 @@ actions: 'Microsoft.StartExperiencesApp' ) + - !writeStatus: {status: "Removing Photos"} + - !powerShell: + option: "remove-appx-photos" + wait: true + exeDir: true + errorAction: Ignore + weight: 10 + command: >- + .\APPX-REMOVER.ps1 -Packages 'Microsoft.Windows.Photos' + - !writeStatus: {status: "Removing Dev Home", option: "remove-appx-devhome"} - !powerShell: option: "remove-appx-devhome" From f91f5d00ba8ab231141f2b5bd1efd23bce28ec2d Mon Sep 17 00:00:00 2001 From: h3r0 <50238852+melo936@users.noreply.github.com> Date: Sat, 5 Oct 2024 09:56:09 +0000 Subject: [PATCH 30/47] fix registry values for AutoEndTasks --- .github/workflows/main.yml | 1 - src/Configuration/Tasks/registry/explorer/control-panel.yml | 4 ++-- 2 files changed, 2 insertions(+), 3 deletions(-) diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index 26d45041..988147c6 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -6,7 +6,6 @@ on: - '*' env: - SXSC_REPO: 'https://github.com/Atlas-OS/sxsc' FILENAME: 'Revi-PB-${{ github.ref_name }}.apbx' jobs: diff --git a/src/Configuration/Tasks/registry/explorer/control-panel.yml b/src/Configuration/Tasks/registry/explorer/control-panel.yml index bf3f21af..8f69d553 100644 --- a/src/Configuration/Tasks/registry/explorer/control-panel.yml +++ b/src/Configuration/Tasks/registry/explorer/control-panel.yml @@ -25,8 +25,8 @@ actions: - !registryValue: {path: 'HKU\.DEFAULT\Control Panel\Desktop', value: 'ActiveWndTrkTimeout', type: REG_DWORD, data: '10'} # === Disables the blue screen that pops up when you're trying to shutdown or restart, asking you to save your work. - - !registryValue: {path: 'HKCU\Control Panel\Desktop', value: 'AutoEndTasks', type: REG_SZ, data: '0'} - - !registryValue: {path: 'HKU\.DEFAULT\Control Panel\Desktop', value: 'AutoEndTasks', type: REG_SZ, data: '0'} + - !registryValue: {path: 'HKCU\Control Panel\Desktop', value: 'AutoEndTasks', type: REG_SZ, data: '1'} + - !registryValue: {path: 'HKU\.DEFAULT\Control Panel\Desktop', value: 'AutoEndTasks', type: REG_SZ, data: '1'} # === HungAppTimeout also specifies how long (5 seconds by default) the system waits for user processes to end after the user clicks/taps on the End task button in Task Manager. # ------> Changed 2 seconds (2000), default is 5 seconds (5000). From 90ca2ab77856b33936dea96e2b3e61d080da80f9 Mon Sep 17 00:00:00 2001 From: h3r0 <50238852+melo936@users.noreply.github.com> Date: Sun, 6 Oct 2024 13:14:38 +0000 Subject: [PATCH 31/47] properly disable background apps --- src/Configuration/Tasks/final.yml | 8 -------- .../Tasks/registry/explorer/win-settings.yml | 2 ++ src/Configuration/Tasks/start.yml | 7 +++++++ 3 files changed, 9 insertions(+), 8 deletions(-) diff --git a/src/Configuration/Tasks/final.yml b/src/Configuration/Tasks/final.yml index 6b488e1a..182a5bce 100644 --- a/src/Configuration/Tasks/final.yml +++ b/src/Configuration/Tasks/final.yml @@ -38,7 +38,6 @@ actions: - !writeStatus: {status: "Finalizing process"} - !registryValue: {path: 'HKCU\System\GameConfigStore', value: 'GameDVR_FSEBehaviorMode', type: REG_DWORD, data: '0', weight: 70} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\BackgroundAccessApplications', value: 'GlobalUserDisabled', type: REG_DWORD, data: '1', weight: 60} - !powerShell: {command: 'Get-ScheduledTask -TaskPath "\Microsoft\Office\*" | Disable-ScheduledTask'} @@ -97,13 +96,6 @@ actions: - !run: exe: "gpupdate.exe" - # Fixes cores parking on some AMD CPUs - - !cmd: - wait: true - command: | - rundll32.exe advapi32.dll,ProcessIdleTasks - defrag %SystemDrive% -b - # Apply micro patches via Revision Tool in order to avoid new playbook releases for minor changes - !run: path: "%ProgramFiles(x86)%\\Revision Tool" diff --git a/src/Configuration/Tasks/registry/explorer/win-settings.yml b/src/Configuration/Tasks/registry/explorer/win-settings.yml index 97b73c7d..908976d0 100644 --- a/src/Configuration/Tasks/registry/explorer/win-settings.yml +++ b/src/Configuration/Tasks/registry/explorer/win-settings.yml @@ -410,8 +410,10 @@ actions: - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\bluetoothSync', value: 'Value', type: REG_SZ, data: 'Deny'} # === Background apps - Off + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\AppPrivacy', value: 'LetAppsRunInBackground', type: REG_DWORD, data: '2'} - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Search', value: 'BackgroundAppGlobalToggle', type: REG_DWORD, data: '0'} - !registryValue: {path: 'HKLM\Software\Microsoft\Windows\CurrentVersion\Search', value: 'BackgroundAppGlobalToggle', type: REG_DWORD, data: '0'} + - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\BackgroundAccessApplications', value: 'GlobalUserDisabled', type: REG_DWORD, data: '1'} # === App diagnostics - Off - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\appDiagnostics', value: 'Value', type: REG_SZ, data: 'Deny'} diff --git a/src/Configuration/Tasks/start.yml b/src/Configuration/Tasks/start.yml index 6992e388..16907684 100644 --- a/src/Configuration/Tasks/start.yml +++ b/src/Configuration/Tasks/start.yml @@ -12,6 +12,13 @@ actions: value: 'Enabled' type: REG_DWORD data: '0' + + # Fixes cores parking on some AMD CPUs + - !cmd: + wait: false + command: | + rundll32.exe advapi32.dll,ProcessIdleTasks + defrag %SystemDrive% -b - !cmd: exeDir: true From eca7e7c7fc7cd8657ff221a7ee4dc4f89d7e37b4 Mon Sep 17 00:00:00 2001 From: h3r0 <50238852+melo936@users.noreply.github.com> Date: Sun, 6 Oct 2024 14:13:51 +0000 Subject: [PATCH 32/47] remove ProcessIdleTasks task --- src/Configuration/Tasks/start.yml | 7 ------- 1 file changed, 7 deletions(-) diff --git a/src/Configuration/Tasks/start.yml b/src/Configuration/Tasks/start.yml index 16907684..6992e388 100644 --- a/src/Configuration/Tasks/start.yml +++ b/src/Configuration/Tasks/start.yml @@ -12,13 +12,6 @@ actions: value: 'Enabled' type: REG_DWORD data: '0' - - # Fixes cores parking on some AMD CPUs - - !cmd: - wait: false - command: | - rundll32.exe advapi32.dll,ProcessIdleTasks - defrag %SystemDrive% -b - !cmd: exeDir: true From 9ae475fb3edb0c3a56272a0eb7b88bd8dbb9fa55 Mon Sep 17 00:00:00 2001 From: h3r0 <50238852+melo936@users.noreply.github.com> Date: Sat, 12 Oct 2024 10:50:06 +0000 Subject: [PATCH 33/47] move animations script to final.yml --- src/Configuration/Tasks/final.yml | 10 ++++++++++ src/Executables/FINALIZE.cmd | 13 ------------- 2 files changed, 10 insertions(+), 13 deletions(-) diff --git a/src/Configuration/Tasks/final.yml b/src/Configuration/Tasks/final.yml index 182a5bce..cc3666e2 100644 --- a/src/Configuration/Tasks/final.yml +++ b/src/Configuration/Tasks/final.yml @@ -4,6 +4,16 @@ description: Applies some Revision configurations privilege: TrustedInstaller actions: + # Disable transparency and animations for low end devices + - !powerShell: + runas: currentUserElevated + command: | + $mem = (Get-CimInstance Win32_PhysicalMemory | Measure-Object Capacity -Sum).Sum + if ($mem -lt 9000000000) { + [microsoft.win32.registry]::SetValue('HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize', 'EnableTransparency', 0, [Microsoft.Win32.RegistryValueKind]::DWord) + [microsoft.win32.registry]::SetValue('HKEY_CURRENT_USER\Control Panel\Desktop\WindowMetrics', 'MinAnimate', 0, [Microsoft.Win32.RegistryValueKind]::DWord) + } + # Disable Memory Compression - !powerShell: command: 'Disable-MMAgent -mc' diff --git a/src/Executables/FINALIZE.cmd b/src/Executables/FINALIZE.cmd index b11656ae..0e9c73c0 100644 --- a/src/Executables/FINALIZE.cmd +++ b/src/Executables/FINALIZE.cmd @@ -103,19 +103,6 @@ echo Configuring animations :: Breaks XboxGipSvc ::reg add "HKLM\SYSTEM\CurrentControlSet\Control" /v "SvcHostSplitThresholdInKB" /t REG_DWORD /d "4294967295" /f >NUL -for /f "tokens=2 delims==" %%a in ('wmic os get TotalVisibleMemorySize /format:value') do set "mem=%%a" - -for /f "usebackq tokens=2 delims=\" %%a in (`reg query "HKEY_USERS" ^| findstr /r /x /c:"HKEY_USERS\\S-.*" /c:"HKEY_USERS\\AME_UserHive_[^_]*"`) do ( - REM If the "Volatile Environment" key exists, that means it is a proper user. Built in accounts/SIDs do not have this key. - reg query "HKEY_USERS\%%a" | findstr /c:"Volatile Environment" /c:"AME_UserHive_" > nul 2>&1 - if not errorlevel 1 ( - if %mem% lss 9000000 ( - reg add "HKU\%%a\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize" /v "EnableTransparency" /t REG_DWORD /d "0" /f >NUL - reg add "HKU\%%a\Control Panel\Desktop\WindowMetrics" /v "MinAnimate" /t REG_SZ /d "0" /f >NUL 2>nul - ) - ) - ) - :: https://github.com/meetrevision/playbook/issues/15 :: Updates root certificates From 0a34e09ebb697b5c357925583a894a55f5a7afbd Mon Sep 17 00:00:00 2001 From: iPixelGalaxy Date: Tue, 15 Oct 2024 07:49:36 -0700 Subject: [PATCH 34/47] Updated Action Scripts (#135) * One Click Archive and Release from Actions Tab * Pre-Release format for Dev branch --- .github/workflows/main.yml | 43 ++++++++++++---------- .github/workflows/prerelease.yml | 63 ++++++++++++++++++++++++++++++++ 2 files changed, 87 insertions(+), 19 deletions(-) create mode 100644 .github/workflows/prerelease.yml diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index 988147c6..06d83874 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -1,12 +1,11 @@ name: Archive and Release on: - push: - tags: - - '*' + # Allow manual triggering + workflow_dispatch: env: - FILENAME: 'Revi-PB-${{ github.ref_name }}.apbx' + FILENAME: 'Revi-PB-${{ github.event.workflow_run.started_at }}.apbx' jobs: build: @@ -15,10 +14,20 @@ jobs: steps: - name: Checkout code uses: actions/checkout@v4 + with: + ref: 'main' + + - name: Set version + id: set_version + run: | + # Get current date in "YY.MM" format + CURRENT_DATE=$(date +%y.%m) + echo "VERSION=${CURRENT_DATE}" >> $GITHUB_ENV + shell: bash - name: Update version run: | - $version = "${{ github.ref_name }}" + $version = "${{ env.VERSION }}" $playbookConfPath = "src\playbook.conf" $finalizeCMDPath = "src\Executables\FINALIZE.cmd" @@ -26,35 +35,31 @@ jobs: (Get-Content -Path $finalizeCMDPath) -replace 'set version=.+', "set version=$version" | Set-Content -Path $finalizeCMDPath shell: pwsh - + - name: Archive content run: | - 7z a -pmalte -mhe=on ${{ env.FILENAME }} ./src/* + 7z a -pmalte -mhe=on "Revi-PB-${{ env.VERSION }}.apbx" ./src/* - name: Generate SHA256 run: | - $hash = (Get-FileHash -Algorithm SHA256 -Path ${{ env.FILENAME }}).Hash + $hash = (Get-FileHash -Algorithm SHA256 -Path "Revi-PB-${{ env.VERSION }}.apbx").Hash echo ("HASH=" + $hash) >> $env:GITHUB_ENV - - # - name: DevUploads - # run: | - # url=$(bash <(curl -s https://devuploads.com/upload.sh) -f "${{ env.FILENAME }}" -k "${{ secrets.DEVUPLOADS_API_KEY }}" | grep -o 'https://devuploads.com[^"]*') - # echo "DEVUPLOADS=$url" >> $GITHUB_ENV - name: Release uses: svenstaro/upload-release-action@v2 with: - repo_token: ${{ secrets.TOKEN }} - file: ${{ env.FILENAME }} - asset_name: ${{ env.FILENAME }} - tag: ${{ github.ref }} + repo_token: ${{ secrets.GITHUB_TOKEN }} # Uses GitHub token for authentication + file: "Revi-PB-${{ env.VERSION }}.apbx" + asset_name: "Revi-PB-${{ env.VERSION }}.apbx" + tag: ${{ env.VERSION }} overwrite: true + release_name: ${{ env.VERSION }} + prerelease: false # Always set to false body: | # Download Link ✨ If you would like to support Revision, kindly download the Playbook from the provided link below. 📌Link: - + SHA256: `${{ env.HASH }}` - \ No newline at end of file diff --git a/.github/workflows/prerelease.yml b/.github/workflows/prerelease.yml new file mode 100644 index 00000000..3353cf09 --- /dev/null +++ b/.github/workflows/prerelease.yml @@ -0,0 +1,63 @@ +name: Archive and Pre-Release + +on: + # Allow manual triggering + workflow_dispatch: + +env: + FILENAME: 'Revi-PB-${{ github.event.workflow_run.started_at }}.apbx' + +jobs: + build: + runs-on: windows-latest + + steps: + - name: Checkout code + uses: actions/checkout@v4 + with: + ref: 'dev' + + - name: Set version + id: set_version + run: | + # Get current date in "YY.MM.DD" format + CURRENT_DATE=$(date +%y.%m.%d) + echo "VERSION=${CURRENT_DATE}" >> $GITHUB_ENV + shell: bash + + - name: Update version + run: | + $version = "${{ env.VERSION }}" + $playbookConfPath = "src\playbook.conf" + $finalizeCMDPath = "src\Executables\FINALIZE.cmd" + + (Get-Content -Path $playbookConfPath) -replace '.*', "$version" | Set-Content -Path $playbookConfPath + + (Get-Content -Path $finalizeCMDPath) -replace 'set version=.+', "set version=$version" | Set-Content -Path $finalizeCMDPath + shell: pwsh + + - name: Archive content + run: | + 7z a -pmalte -mhe=on "Revi-PB-${{ env.VERSION }}.apbx" ./src/* + + - name: Generate SHA256 + run: | + $hash = (Get-FileHash -Algorithm SHA256 -Path "Revi-PB-${{ env.VERSION }}.apbx").Hash + echo ("HASH=" + $hash) >> $env:GITHUB_ENV + + - name: Release + uses: svenstaro/upload-release-action@v2 + with: + repo_token: ${{ secrets.GITHUB_TOKEN }} # Uses GitHub token for authentication + file: "Revi-PB-${{ env.VERSION }}.apbx" + asset_name: "Revi-PB-${{ env.VERSION }}.apbx" + tag: ${{ env.VERSION }} + overwrite: true + release_name: ${{ env.VERSION }} + prerelease: true # Set to true for pre-release + body: | + # Pre-release Download ✨ + + ## ⚠️ This is a pre-release version for testing purposes. Installing this can cause issues and may require you to reinstall Windows, use at your own risk. ⚠️ + + SHA256: `${{ env.HASH }}` From cc60180749df0c77376cdf887e05be886dcc43c2 Mon Sep 17 00:00:00 2001 From: NextWorks <46625863+NextWork123@users.noreply.github.com> Date: Mon, 28 Oct 2024 16:31:42 +0100 Subject: [PATCH 35/47] Add restart explorer for fix issue #133 (#136) --- src/Configuration/Tasks/final.yml | 11 ++++++++++- 1 file changed, 10 insertions(+), 1 deletion(-) diff --git a/src/Configuration/Tasks/final.yml b/src/Configuration/Tasks/final.yml index cc3666e2..b101c0e4 100644 --- a/src/Configuration/Tasks/final.yml +++ b/src/Configuration/Tasks/final.yml @@ -112,4 +112,13 @@ actions: exe: "revitool.exe" args: "playbook-patches apply" wait: true - runas: currentUserElevated \ No newline at end of file + runas: currentUserElevated + + - !powerShell: + command: | + $explorerProcess = Get-Process -Name explorer -ErrorAction SilentlyContinue + if ($explorerProcess) { + Stop-Process -Name explorer -Force + } + Start-Process explorer + runas: currentUserElevated From 09cb31a63fa8a2946dcaeec61aa5aa5a3ceefb35 Mon Sep 17 00:00:00 2001 From: h3r0 <50238852+melo936@users.noreply.github.com> Date: Mon, 28 Oct 2024 16:02:41 +0000 Subject: [PATCH 36/47] edge.ps1: set windir to empty string localy only --- src/Executables/EDGE.ps1 | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/src/Executables/EDGE.ps1 b/src/Executables/EDGE.ps1 index 7bd66c58..b7db74fe 100644 --- a/src/Executables/EDGE.ps1 +++ b/src/Executables/EDGE.ps1 @@ -36,8 +36,9 @@ function Uninstall-Process { # # Setting windir to an empty string allows the Edge uninstallation to work - [microsoft.win32.registry]::SetValue('HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager\Environment', 'windir', "", [Microsoft.Win32.RegistryValueKind]::ExpandString) | Out-Null - $env:windir = [System.Environment]::GetEnvironmentVariable("windir","Machine") + #[microsoft.win32.registry]::SetValue('HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager\Environment', 'windir', "", [Microsoft.Win32.RegistryValueKind]::ExpandString) | Out-Null + #$env:windir = [System.Environment]::GetEnvironmentVariable("windir","Machine") + $env:windir = "" $uninstallString = (Get-ItemProperty -Path $registryPath).UninstallString $uninstallArguments = (Get-ItemProperty -Path $registryPath).UninstallArguments @@ -60,7 +61,7 @@ function Uninstall-Process { [microsoft.win32.registry]::SetValue('HKEY_USERS\.DEFAULT\Control Panel\International\Geo', 'Nation', $originalNation, [Microsoft.Win32.RegistryValueKind]::String) | Out-Null # Restore windir - [microsoft.win32.registry]::SetValue('HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager\Environment', 'windir', '%SystemRoot%', [Microsoft.Win32.RegistryValueKind]::ExpandString) | Out-Null + #[microsoft.win32.registry]::SetValue('HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager\Environment', 'windir', '%SystemRoot%', [Microsoft.Win32.RegistryValueKind]::ExpandString) | Out-Null if ((Get-ItemProperty -Path $baseKey).IsEdgeStableUninstalled -eq 1) { Write-Host "[$Mode] Edge Stable has been successfully uninstalled" From 0be734afefc788407ebe2fa3c535c50977e5e125 Mon Sep 17 00:00:00 2001 From: h3r0 <50238852+melo936@users.noreply.github.com> Date: Mon, 4 Nov 2024 14:09:20 +0000 Subject: [PATCH 37/47] fix KGL mismatch in XboxGameBar by enabling background apps --- src/Configuration/Tasks/final.yml | 6 ------ .../Tasks/registry/explorer/win-settings.yml | 9 +++++---- src/Configuration/Tasks/revert.yml | 10 +++++++++- 3 files changed, 14 insertions(+), 11 deletions(-) diff --git a/src/Configuration/Tasks/final.yml b/src/Configuration/Tasks/final.yml index b101c0e4..b0b8d400 100644 --- a/src/Configuration/Tasks/final.yml +++ b/src/Configuration/Tasks/final.yml @@ -95,12 +95,6 @@ actions: - !appx: {operation: clearCache, name: '*StartMenuExperienceHost*', option: "remove-pinned-items-startmenu"} - !appx: {operation: clearCache, name: '*Windows.Search*'} - !appx: {operation: clearCache, name: '*TCUI*'} - # Workaround for KGL versions to match - - !appx: {operation: clearCache, name: '*XboxGameCallableUI*'} - - !appx: {operation: clearCache, name: '*XboxGameOverlay*'} - - !appx: {operation: clearCache, name: '*XboxGamingOverlay*'} - - !appx: {operation: clearCache, name: '*XboxIdentityProvider*'} - - !appx: {operation: clearCache, name: '*XboxSpeechToTextOverlay*'} # Force update group policy - !run: diff --git a/src/Configuration/Tasks/registry/explorer/win-settings.yml b/src/Configuration/Tasks/registry/explorer/win-settings.yml index 908976d0..df4ced83 100644 --- a/src/Configuration/Tasks/registry/explorer/win-settings.yml +++ b/src/Configuration/Tasks/registry/explorer/win-settings.yml @@ -410,10 +410,11 @@ actions: - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\bluetoothSync', value: 'Value', type: REG_SZ, data: 'Deny'} # === Background apps - Off - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\AppPrivacy', value: 'LetAppsRunInBackground', type: REG_DWORD, data: '2'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Search', value: 'BackgroundAppGlobalToggle', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\Software\Microsoft\Windows\CurrentVersion\Search', value: 'BackgroundAppGlobalToggle', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\BackgroundAccessApplications', value: 'GlobalUserDisabled', type: REG_DWORD, data: '1'} + # Causes KGL versions mismatch in Xbox Game Bar + # - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\AppPrivacy', value: 'LetAppsRunInBackground', type: REG_DWORD, data: '2'} + # - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Search', value: 'BackgroundAppGlobalToggle', type: REG_DWORD, data: '0'} + # - !registryValue: {path: 'HKLM\Software\Microsoft\Windows\CurrentVersion\Search', value: 'BackgroundAppGlobalToggle', type: REG_DWORD, data: '0'} + # - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\BackgroundAccessApplications', value: 'GlobalUserDisabled', type: REG_DWORD, data: '1'} # === App diagnostics - Off - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\appDiagnostics', value: 'Value', type: REG_SZ, data: 'Deny'} diff --git a/src/Configuration/Tasks/revert.yml b/src/Configuration/Tasks/revert.yml index 45eca446..c7f21cb9 100644 --- a/src/Configuration/Tasks/revert.yml +++ b/src/Configuration/Tasks/revert.yml @@ -104,4 +104,12 @@ actions: - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer', value: 'EnableAutoTray', operation: delete} # Allow users to log on using biometrics - - !registryKey: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Biometrics', operation: delete} \ No newline at end of file + - !registryKey: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Biometrics', operation: delete} + + # Fix KGL mismatch in Xbox Game Bar + # Disabling background apps breaks Xbox Game Bar KGL update. We remove bloat apps anyway and it can be toggled in Revision Tool + - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\AppPrivacy', value: 'LetAppsRunInBackground', operation: delete} + - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Search', value: 'BackgroundAppGlobalToggle', operation: delete} + - !registryValue: {path: 'HKLM\Software\Microsoft\Windows\CurrentVersion\Search', value: 'BackgroundAppGlobalToggle', operation: delete} + - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\BackgroundAccessApplications', value: 'GlobalUserDisabled', operation: delete} + - !appx: {operation: clearCache, name: '*XboxGamingOverlay*'} \ No newline at end of file From 456c7031ed7a931e3416c473fc6bea8a36008584 Mon Sep 17 00:00:00 2001 From: h3r0 <50238852+melo936@users.noreply.github.com> Date: Tue, 5 Nov 2024 11:41:59 +0000 Subject: [PATCH 38/47] remove IE related tweaks obsolete --- src/Configuration/Tasks/registry.yml | 1 - .../registry/updates/internet-explorer.yml | 287 ------------------ src/Configuration/Tasks/revert.yml | 14 +- 3 files changed, 13 insertions(+), 289 deletions(-) delete mode 100644 src/Configuration/Tasks/registry/updates/internet-explorer.yml diff --git a/src/Configuration/Tasks/registry.yml b/src/Configuration/Tasks/registry.yml index a38598bc..22629e8c 100644 --- a/src/Configuration/Tasks/registry.yml +++ b/src/Configuration/Tasks/registry.yml @@ -55,7 +55,6 @@ actions: - !writeStatus: {status: "Configuring Updates"} - !task: {path: 'Tasks\registry\updates\updates.yml'} - !task: {path: 'Tasks\registry\updates\drivers.yml'} - - !task: {path: 'Tasks\registry\updates\internet-explorer.yml'} - !task: {path: 'Tasks\registry\updates\ms-store.yml'} # Miscellaneous diff --git a/src/Configuration/Tasks/registry/updates/internet-explorer.yml b/src/Configuration/Tasks/registry/updates/internet-explorer.yml deleted file mode 100644 index 314c4e02..00000000 --- a/src/Configuration/Tasks/registry/updates/internet-explorer.yml +++ /dev/null @@ -1,287 +0,0 @@ ---- -title: configure-internet-explorer -description: configure-internet-explorer -privilege: TrustedInstaller -actions: - - - # =============== - # === Updates === - # =============== - - # === Disable Periodic Check for Internet Explorer software updates - Enabled - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer\InfoDelivery\Restrictions', value: 'NoUpdateCheck', type: REG_DWORD, data: '1'} - - - # === Install new versions of Internet Explorer automatically - Disabled - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Internet Explorer\Main', value: 'EnableAutoUpgrade', type: REG_DWORD, data: '0'} - - - # =============== - # === General === - # =============== - - - # === Disable changing home page settings - Enabled - # ------> https://admx.help/?Category=Windows_11_2022&Policy=Microsoft.Policies.InternetExplorer::RestrictHomePage - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel', value: 'HomePage', type: REG_DWORD, data: '1'} - - - # === Home Page - https://www.revi.cc/ - - !registryValue: {path: 'HKCU\Software\Microsoft\Internet Explorer\Main', value: 'Start Page', type: REG_SZ, data: 'https://www.revi.cc/'} - - - # === Notify users if Internet Explorer is not the default web browser - Disabled - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\Main', value: 'Check_Associations', type: REG_SZ, data: 'no'} - - - # === Warn user about Home Page changes - Disabled - # ------> https://stackoverflow.com/a/39092291 - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Internet Explorer\MAIN\FeatureControl\FEATURE_EUPP_GLOBAL_FORCE_DISABLE', value: 'iexplore.exe', type: REG_DWORD, data: '1'} - - - # === Changes default search engine to "https://duckduckgo.com/". - # ------> Uses Google search suggestions in the search bar. - # ------> https://duckduckgo.com/params - - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes', value: 'DefaultScope', type: REG_SZ, data: '{0633EE93-D776-472f-A0FF-E1416B8B2E3A}'} - - !registryKey: {path: 'HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}'} - - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}', value: 'DisplayName', type: REG_SZ, data: 'DuckDuckGo'} - - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}', value: 'URL', type: REG_SZ, data: 'https://duckduckgo.com/?kae=t&q={searchTerms}'} - - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}', value: 'ShowSearchSuggestions', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}', value: 'FaviconURL', type: REG_SZ, data: 'https://duckduckgo.com/?kf=1'} - - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}', value: 'SuggestionsURL', type: REG_SZ, data: 'http://clients5.google.com/complete/search?q={searchTerms}&client=ie8&mw={ie:maxWidth}&sh={ie:sectionHeight}&rh={ie:rowHeight}&inputencoding={inputEncoding}&outputencoding={outputEncoding}'} - - - # === Disables the welcome window that pops up the first time you start Internet Explorer. - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\Main', value: 'DisableFirstRunCustomize', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Internet Explorer\Main', value: 'DisableFirstRunCustomize', type: REG_DWORD, data: '1'} - - # === Specify default behavior for a new tab - Home Page - # ------> https://admx.help/?Category=Windows_11_2022&Policy=Microsoft.Policies.InternetExplorer::NewTabAction - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Internet Explorer\TabbedBrowsing', value: 'NewTabPageShow', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\TabbedBrowsing', value: 'NewTabPageShow', type: REG_DWORD, data: '1'} - - # === Display tabs on a separate row - Enabled - # ------> https://admx.help/?Category=Windows_11_2022&Policy=Microsoft.Policies.InternetExplorer::MoveTabBand - - !registryValue: {path: 'HKCU\Software\Microsoft\Internet Explorer\MINIE', value: 'ShowTabsBelowAddressBar', type: REG_DWORD, data: '0'} - - # === Prevent Internet Explorer Search box from appearing - Enabled - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer', value: 'NoSearchBox', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Internet Explorer', value: 'NoSearchBox', type: REG_DWORD, data: '1'} - - # === Help menu: Remove 'Send Feedback' menu option - Enabled - # ------> Disable Feedback/'Smiley' on Internet Explorer Toolbar - # ------> https://www.tenforums.com/browsers-email/9420-how-remove-send-smile-frown-internet-explorer-11-a-post685594.html#post685594 - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions', value: 'NoHelpItemSendFeedback', type: REG_DWORD, data: '1'} - - # === Show entire link/url in address bar - Enabled - # ------> https://docs.microsoft.com/en-us/openspecs/windows_protocols/ms-gppref/3fb5c89d-d9c2-41e2-9749-f5cac492121e - - !registryValue: {path: 'HKCU\Software\Microsoft\Internet Explorer\Main', value: 'Show_FullURL', type: REG_SZ, data: 'yes'} - - # === Disables Background Sounds in Internet Explorer. - - !registryValue: {path: 'HKCU\Software\Microsoft\Internet Explorer\Main', value: 'Play_Background_Sounds', type: REG_SZ, data: 'no'} - - # === Turn on Suggested Sites - Disabled - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer\Suggested Sites', value: 'Enabled', type: REG_DWORD, data: '0'} - - # === Hide the button (next to the New Tab button) that opens Microsoft Edge - Enabled - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\Main', value: 'HideNewEdgeButton', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Internet Explorer\Main', value: 'HideNewEdgeButton', type: REG_DWORD, data: '1'} - - # === Immediately close iexplore.exe process after closing a tab in Internet Explorer - Enabled - # ------> https://docs.microsoft.com/en-us/archive/blogs/askie/closing-an-ie-8-tab-does-not-immediately-close-the-spawned-iexplore-exe-process - - !registryValue: {path: 'HKCU\Software\Microsoft\Internet Explorer\Main', value: 'TabShutdownDelay', type: REG_DWORD, data: '0'} - - # ============================ - - # === Security and Privacy === - - # ============================ - - # === Prevent participation in the Customer Experience Improvement Program - Enabled - # ------> https://admx.help/?Category=Windows_11_2022&Policy=Microsoft.Policies.InternetExplorer::SQM_DisableCEIP - # - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\SQM', value: 'DisableCustomerImprovementProgram', type: REG_DWORD, data: '1'} - # - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Internet Explorer\SQM', value: 'DisableCustomerImprovementProgram', type: REG_DWORD, data: '1'} - - # === Turn off Adobe Flash in Internet Explorer and prevent applications from using Internet Explorer technology to instantiate Flash objects - Enabled - # ------> https://admx.help/?Category=Windows_11_2022&Policy=Microsoft.Policies.InternetExplorer::DisableFlashInIE - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer', value: 'DisableFlashInIE', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Internet Explorer', value: 'DisableFlashInIE', type: REG_DWORD, data: '1'} - - # === Turn off the Security Settings Check feature - Enabled - # ------> Disables the bottom bar saying "Your current security settings put your computer at risk." - # - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\Security', value: 'DisableSecuritySettingsCheck', type: REG_DWORD, data: '1'} - # - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Internet Explorer\Security', value: 'DisableSecuritySettingsCheck', type: REG_DWORD, data: '1'} - - # === Turn off the Security Settings Check feature - Enabled - # ------> Disables the bottom bar saying "Your current security settings put your computer at risk." - # - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\Security', value: 'DisableFixSecuritySettings', type: REG_DWORD, data: '1'} - # - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Internet Explorer\Security', value: 'DisableFixSecuritySettings', type: REG_DWORD, data: '1'} - - # === Check for signatures on downloaded programs - Disabled - # - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\Download', value: 'CheckExeSignatures', type: REG_SZ, data: 'no'} - - # === Allow software to run or install even if the signature is invalid - Disabled - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\Download', value: 'RunInvalidSignatures', type: REG_DWORD, data: '0'} - - # === Always send Do Not Track header - Enabled - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\Main', value: 'DoNotTrack', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Internet Explorer\Main', value: 'DoNotTrack', type: REG_DWORD, data: '1'} - - # === Prevent automatic discovery of feeds and Web Slices - Enabled - # ------> https://admx.help/?Category=Windows_11_2022&Policy=Microsoft.Policies.InternetExplorer::Disable_Feed_Discovery - # ------> https://admx.help/?Category=Windows_7_2008R2&Policy=Microsoft.Policies.InternetExplorer::Disable_Feed_Discovery_2 - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\Feed Discovery', value: 'Enabled', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Internet Explorer\Feed Discovery', value: 'Enabled', type: REG_DWORD, data: '0'} - - # === Prevent managing SmartScreen Filter - Enabled - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Internet Explorer\PhishingFilter', value: 'EnabledV9', type: REG_DWORD, data: '0'} - - # === Turn off Crash Detection - Enabled - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions', value: 'NoCrashDetection', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions', value: 'NoCrashDetection', type: REG_DWORD, data: '1'} - - # === Turn off Automatic Crash Recovery - Enabled - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\Recovery', value: 'AutoRecover', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Internet Explorer\Recovery', value: 'AutoRecover', type: REG_DWORD, data: '0'} - - # === Turn off Reopen Last Browsing Session - Enabled - - !registryValue: {path: 'HKCU\Software\Microsoft\Internet Explorer\Recovery', value: 'NoReopenLastSession', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\Software\Microsoft\Internet Explorer\Recovery', value: 'NoReopenLastSession', type: REG_DWORD, data: '1'} - - # === Disable Password Caching - Enabled - # ------> https://support.honeywellaidc.com/s/article/How-to-disable-password-caching-in-IE - - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings', value: 'DisablePasswordCaching', type: REG_DWORD, data: '1'} - - # === Allow Microsoft services to provide enhanced suggestions as the user types in the Address Bar - Disabled - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer', value: 'AllowServicePoweredQSA', type: REG_DWORD, data: '0'} - - # === Turn off the auto-complete feature for web addresses - Enabled - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Explorer\AutoComplete', value: 'AutoSuggest', type: REG_SZ, data: 'no'} - - # === Turn off browser geolocation - Enabled - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer\Geolocation', value: 'PolicyDisableGeolocation', type: REG_DWORD, data: '1'} - - # === Include updated website lists from Microsoft - Disabled - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Internet Explorer\BrowserEmulation', value: 'MSCompatibilityMode', type: REG_DWORD, data: '0'} - - # === Turn off the flip ahead with page prediction feature - Enabled - # ------> The following is disabled: Microsoft collects your browsing history to improve how flip ahead with page prediction works. - # ------> https://admx.help/?Category=Windows_11_2022&Policy=Microsoft.Policies.InternetExplorer::Advanced_DisableFlipAhead - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer\FlipAhead', value: 'Enabled', type: REG_DWORD, data: '0'} - - # === Turn off background synchronization for feeds and Web Slices - Enabled - - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer\Feeds', value: 'BackgroundSyncStatus', type: REG_DWORD, data: '0'} - - # === Turn off URL Suggestions - Enabled - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\DomainSuggestion', value: 'Enabled', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Internet Explorer\DomainSuggestion', value: 'Enabled', type: REG_DWORD, data: '0'} - - # === Disable AutoComplete for forms - Enabled - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\Main', value: 'Use FormSuggest', type: REG_SZ, data: 'no'} - - # === Turn on the auto-complete feature for user names and passwords on forms - Disabled - # ------> https://admx.help/?Category=Windows_11_2022&Policy=Microsoft.Policies.InternetExplorer::RestrictFormSuggestPW - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\Main', value: 'FormSuggest Passwords', type: REG_SZ, data: 'no'} - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\Main', value: 'FormSuggest PW Ask', type: REG_SZ, data: 'no'} - - # === Turn off InPrivate Browsing - Disabled - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\Privacy', value: 'EnableInPrivateBrowsing', type: REG_DWORD, data: '1'} - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Internet Explorer\Privacy', value: 'EnableInPrivateBrowsing', type: REG_DWORD, data: '1'} - - # === Allow deleting browsing history on exit - Enabled - # - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer\Privacy', value: 'ClearBrowsingHistoryOnExit', type: REG_DWORD, data: '1'} - # - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Internet Explorer\Privacy', value: 'ClearBrowsingHistoryOnExit', type: REG_DWORD, data: '1'} - - # === Empty Temporary Internet Files folder when browser is closed - Enabled - # ------> https://admx.help/?Category=Windows_11_2022&Policy=Microsoft.Policies.InternetExplorer::Advanced_TemporaryInternetFiles - - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Cache', value: 'Persistent', type: REG_DWORD, data: '0'} - - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings\Cache', value: 'Persistent', type: REG_DWORD, data: '0'} - - # ======================== - # === Discarded Tweaks === - # ======================== - - # === Undocumented, seemingly connected to SmartScreen and PhisingFilter. - # ------> https://srkcitrix.wordpress.com/2011/07/28/disable-phishing-filter-in-ie/ - # [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\PhishingFilter] - # "ShownVerifyBalloon"=dword:00000003 - # [HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\PhishingFilter] - # "ShownVerifyBalloon"=dword:00000003 - - # === Turn off Managing SmartScreen Filter for Internet Explorer 8 - Enabled - # ------> Obsolete, superseded by a newer policy setting. - # [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\PhishingFilter] - # "EnabledV8"=dword:00000000 - - # === Turn off Managing Phishing filter - Enabled - # ------> Obsolete, superseded by a newer policy setting. - # [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\PhishingFilter] - # "Enabled"=dword:00000000 - - # === Prevent bypassing SmartScreen Filter warnings about files that are not commonly downloaded from the Internet - Disabled - # ------> Obsolete. - # [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\PhishingFilter] - # "PreventOverrideAppRepUnknown"=dword:00000000 - - # === Prevent bypassing SmartScreen Filter warnings - Disabled - # ------> Obsolete. - # [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\PhishingFilter] - # "PreventOverride"=dword:00000000 - - # === Makes Internet Explorer available to temporary users and disables any compatibility limitations/issues. - # ------> https://kb.cameyo.com/system-configuration/ie-firstrun-removal - # ------> Not needed, undocumented. - # [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] - # "OperationalData"=hex(b):0d,00,00,00,00,00,00,00 - # "CompatibilityFlags"=dword:00000000 - # "SearchBandMigrationVersion"=dword:00000001 - - # === Disables Animations and ClearType in Internet Explorer. - # ------> Makes Internet Explorer dull, obsolete. - # [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main] - # "Play_Animations"="no" - # "UseClearType"="no" - - # === Disable “Speed up Browsing by Disabling Add-ons” Popup - # ------> https://www.askvg.com/how-to-disable-speed-up-browsing-by-disabling-add-ons-popup-notification-message-in-internet-explorer/ - # ------> Obsolete. - # [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\MAO Settings] - # "AddonLoadTimeThreshold"=dword:00002710 - - # === Disable blocked content. "Allow active content to run in files on My Computer" - Disabled - # ------> Undocumented. - # [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\FeatureControl\FEATURE_LOCALMACHINE_LOCKDOWN] - # "iexplore.exe"=dword:00000000 - - # === Prevent users from accessing Accelerators. - # ------> https://admx.help/?Category=InternetExplorer&Policy=Microsoft.Policies.InternetExplorer::TurnOffAccelerators - # ------> Lack of documentation. Undocumented. - # [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Services] - # "SelectionActivityButtonDisable"=dword:00000001 - - # === Delete stored Accelerator activities. - helps privacy - # ------> https://community.spiceworks.com/topic/1787003-can-i-mass-remove-bing-translator-from-ie11 - # ------> Obsolete and poorly documented. - # [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\Email\live.com] - # "Deleted"=dword:00000001 - # [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\Map\bing.com] - # "Deleted"=dword:00000001 - # [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Activities\Translate\microsofttranslator.com] - # "Deleted"=dword:00000001 - - # === Configures Tabbed Browsing. - # ------> https://admx.help/HKCU/Software/Policies/Microsoft/Internet%20Explorer/TabbedBrowsing - # ------> Unwanted and forced lockdown for the user. This is personal preference and is therefore discarded. - # [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Internet Explorer\TabbedBrowsing] - # "Enabled"=dword:00000001 - # "Groups"=dword:00000000 - # "NewTabNextToCurrent"=dword:00000001 - # "NewTabPageShow"=dword:00000001 - # "OpenAllHomePages"=dword:00000000 - # "OpenInForeground"=dword:00000000 - # "PopupsUseNewWindow"=dword:00000002 - # "QuickTabsThreshold"=dword:00000000 - # "ShortcutBehavior"=dword:00000001 - # "ThumbnailBehavior"=dword:00000000 - # "WarnOnClose"=dword:00000000 diff --git a/src/Configuration/Tasks/revert.yml b/src/Configuration/Tasks/revert.yml index c7f21cb9..2a888c6b 100644 --- a/src/Configuration/Tasks/revert.yml +++ b/src/Configuration/Tasks/revert.yml @@ -112,4 +112,16 @@ actions: - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Search', value: 'BackgroundAppGlobalToggle', operation: delete} - !registryValue: {path: 'HKLM\Software\Microsoft\Windows\CurrentVersion\Search', value: 'BackgroundAppGlobalToggle', operation: delete} - !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\BackgroundAccessApplications', value: 'GlobalUserDisabled', operation: delete} - - !appx: {operation: clearCache, name: '*XboxGamingOverlay*'} \ No newline at end of file + - !appx: {operation: clearCache, name: '*XboxGamingOverlay*'} + + + # Internet Explorer + - !registryKey: {path: 'HKCU\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings', operation: delete} + - !registryKey: {path: 'HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings', operation: delete} + + - !registryKey: {path: 'HKCU\Software\Policies\Microsoft\Internet Explorer', operation: delete} + - !registryKey: {path: 'HKLM\Software\Policies\Microsoft\Internet Explorer', operation: delete} + + + + \ No newline at end of file From 265a185b8dc9f0a000019fe99e70e5a30f754cd5 Mon Sep 17 00:00:00 2001 From: h3r0 <50238852+melo936@users.noreply.github.com> Date: Tue, 5 Nov 2024 12:03:06 +0000 Subject: [PATCH 39/47] apply classic photo viewer only when removing Photos appx --- src/Configuration/Tasks/registry/misc/classic-photo-viewer.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/src/Configuration/Tasks/registry/misc/classic-photo-viewer.yml b/src/Configuration/Tasks/registry/misc/classic-photo-viewer.yml index b8b4d64b..8647943f 100644 --- a/src/Configuration/Tasks/registry/misc/classic-photo-viewer.yml +++ b/src/Configuration/Tasks/registry/misc/classic-photo-viewer.yml @@ -2,6 +2,7 @@ title: Restore classic Windows Photo Viewer description: Restore classic Windows Photo Viewer privilege: TrustedInstaller +option: 'remove-appx-photos' actions: - !registryValue: {path: 'HKCR\Applications\photoviewer.dll\shell\open', value: 'MuiVerb', type: REG_SZ, data: '@photoviewer.dll,-3043', option: "configure-lpv"} From 9bf0782fcf0172831168f165aa266affe98ab37d Mon Sep 17 00:00:00 2001 From: h3r0 <50238852+melo936@users.noreply.github.com> Date: Wed, 6 Nov 2024 10:15:57 +0000 Subject: [PATCH 40/47] do not modify userNotificationListener --- src/Configuration/Tasks/final.yml | 2 +- src/Configuration/Tasks/registry/explorer/win-settings.yml | 4 ++-- src/Configuration/Tasks/registry/system/kernel.yml | 2 +- src/Configuration/Tasks/revert.yml | 2 +- 4 files changed, 5 insertions(+), 5 deletions(-) diff --git a/src/Configuration/Tasks/final.yml b/src/Configuration/Tasks/final.yml index b0b8d400..a1a96399 100644 --- a/src/Configuration/Tasks/final.yml +++ b/src/Configuration/Tasks/final.yml @@ -20,7 +20,7 @@ actions: - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Services\Pending\7971f918-a847-4430-9279-4a52d1efe18d', value: 'RegisterWithAU', type: REG_DWORD, data: '0'} - # [!] Breaks 'defrag c: -b' and cores parking on some AMD CPUs + # [!] Breaks 'defrag c: -b' # Disable Superfetch for SSDs # Detection of mediaType might not work on VMs # - !powerShell: diff --git a/src/Configuration/Tasks/registry/explorer/win-settings.yml b/src/Configuration/Tasks/registry/explorer/win-settings.yml index df4ced83..a7f51b38 100644 --- a/src/Configuration/Tasks/registry/explorer/win-settings.yml +++ b/src/Configuration/Tasks/registry/explorer/win-settings.yml @@ -359,8 +359,8 @@ actions: - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\microphone', value: 'Value', type: REG_SZ, data: 'Allow'} # === Notifications - Off - - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\userNotificationListener', value: 'Value', type: REG_SZ, data: 'Deny'} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\userNotificationListener', value: 'Value', type: REG_SZ, data: 'Deny'} + # - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\userNotificationListener', value: 'Value', type: REG_SZ, data: 'Deny'} + # - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\userNotificationListener', value: 'Value', type: REG_SZ, data: 'Deny'} # === Motion - Off - !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\activity', value: 'Value', type: REG_SZ, data: 'Deny'} diff --git a/src/Configuration/Tasks/registry/system/kernel.yml b/src/Configuration/Tasks/registry/system/kernel.yml index 53209208..501961c9 100644 --- a/src/Configuration/Tasks/registry/system/kernel.yml +++ b/src/Configuration/Tasks/registry/system/kernel.yml @@ -10,7 +10,7 @@ actions: # - !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Control\Session Manager\Kernel', value: 'DisableTsx', type: REG_DWORD, data: '0'} - !powerShell: command: | - if ((Get-WmiObject Win32_Processor).Manufacturer -eq 'GenuineIntel') { + if ((Get-CimInstance Win32_Processor).Manufacturer -eq 'GenuineIntel') { [microsoft.win32.registry]::SetValue('HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager\Kernel', 'DisableTsx', 0, [Microsoft.Win32.RegistryValueKind]::DWord) } else { Remove-ItemProperty -Path 'HKLM:\SYSTEM\ControlSet001\Control\Session Manager\Kernel' -Name 'DisableTsx' -ErrorAction SilentlyContinue | Out-Null diff --git a/src/Configuration/Tasks/revert.yml b/src/Configuration/Tasks/revert.yml index 2a888c6b..f1d43b5e 100644 --- a/src/Configuration/Tasks/revert.yml +++ b/src/Configuration/Tasks/revert.yml @@ -72,7 +72,7 @@ actions: - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Servicing', value: 'RepairContentServerSource', operation: delete} - # Breaks 'defrag c: -b' and cores parking on some AMD CPUs + # Breaks 'defrag c: -b' - !powerShell: command: | $path = ${env:ProgramFiles(x86)} + '\Revision Tool\data\flutter_assets\additionals\EnableSF.bat' From 240d25c1b3a856228fe4571d371c1c02b57a3d81 Mon Sep 17 00:00:00 2001 From: h3r0 <50238852+melo936@users.noreply.github.com> Date: Wed, 20 Nov 2024 12:24:39 +0000 Subject: [PATCH 41/47] install browsers on reboot for unknown reasons, programs from winget are installed slowly; this workaround resolves it --- src/Configuration/Tasks/software.yml | 33 +++++++++++----------------- 1 file changed, 13 insertions(+), 20 deletions(-) diff --git a/src/Configuration/Tasks/software.yml b/src/Configuration/Tasks/software.yml index ad0f7835..522618c4 100644 --- a/src/Configuration/Tasks/software.yml +++ b/src/Configuration/Tasks/software.yml @@ -13,19 +13,14 @@ actions: exeDir: true command: '.\UPDATE-APPX.ps1' - - !writeStatus: {status: 'Installing Brave', option: "browser-brave"} - - !cmd: - # command: 'winget install Brave.Brave --source winget --scope machine --silent --accept-source-agreements --accept-package-agreements' - command: 'winget install XP8C9QZMS2PC1T --source msstore --silent --accept-source-agreements --accept-package-agreements' - weight: 150 - wait: true - runas: currentUserElevated + - !writeStatus: {status: 'Installing Brave on reboot', option: "browser-brave"} + - !registryValue: + path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce' + value: 'Install Brave' + type: REG_SZ + data: 'cmd /c title BraveBrowser && winget install XP8C9QZMS2PC1T --source msstore --silent --accept-source-agreements --accept-package-agreements' option: "browser-brave" - # - !powerShell: {command: "& { Invoke-WebRequest ((Invoke-RestMethod -Uri 'https://api.github.com/repos/brave/brave-browser/releases/latest' -Method Get | ConvertTo-Json | ConvertFrom-Json).assets | where-object { $_.name -eq 'BraveBrowserStandaloneSetup.exe' }).browser_download_url -OutFile \"$env:TEMP\\BraveBrowserStandaloneSetup.exe\" }" , weight: 150, option: "browser-brave"} - # - !writeStatus: {status: 'Installing Brave', option: "browser-brave"} - # - !cmd: {command: 'call "%temp%\BraveBrowserStandaloneSetup.exe" /silent /install', runas: currentUserElevated, weight: 50, option: "browser-brave"} - - !writeStatus: {status: 'Configuring Brave', option: "browser-brave"} - !cmd: exeDir: true @@ -35,12 +30,10 @@ actions: option: "browser-brave" # Firefox - - !writeStatus: {status: 'Installing Firefox', option: "browser-firefox"} - - !cmd: - command: 'winget install Mozilla.Firefox --source winget --silent --accept-source-agreements --accept-package-agreements' - weight: 150 - runas: currentUserElevated - wait: true - option: "browser-firefox" - # - !writeStatus: {status: 'Configuring Firefox', option: "browser-firefox"} - # - !run: {exe: 'FIREFOX.cmd', exeDir: true, weight: 20, option: "browser-firefox"} \ No newline at end of file + - !writeStatus: {status: 'Installing Firefox on reboot', option: "browser-firefox"} + - !registryValue: + path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce' + value: 'Install Firefox' + type: REG_SZ + data: 'cmd /c title Firefox && winget install Mozilla.Firefox --source winget --silent --accept-source-agreements --accept-package-agreements' + option: "browser-firefox" \ No newline at end of file From 334dd20aac8c03d35c3213c55f0404210ad7e327 Mon Sep 17 00:00:00 2001 From: h3r0 <50238852+melo936@users.noreply.github.com> Date: Thu, 21 Nov 2024 09:10:47 +0000 Subject: [PATCH 42/47] override firefox winget command to not install maintenance service --- src/Configuration/Tasks/software.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/Configuration/Tasks/software.yml b/src/Configuration/Tasks/software.yml index 522618c4..8ead7f16 100644 --- a/src/Configuration/Tasks/software.yml +++ b/src/Configuration/Tasks/software.yml @@ -35,5 +35,5 @@ actions: path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce' value: 'Install Firefox' type: REG_SZ - data: 'cmd /c title Firefox && winget install Mozilla.Firefox --source winget --silent --accept-source-agreements --accept-package-agreements' + data: 'cmd /c title Firefox && winget install Mozilla.Firefox --source winget --override "/S /MaintenanceService=false" --accept-source-agreements --accept-package-agreements' option: "browser-firefox" \ No newline at end of file From 9f06f729e064cb96882236380ddb6968f94e0804 Mon Sep 17 00:00:00 2001 From: h3r0 <50238852+melo936@users.noreply.github.com> Date: Thu, 21 Nov 2024 09:20:52 +0000 Subject: [PATCH 43/47] #139 disable gamebar popup when uninstalling xbox --- src/Configuration/Tasks/packages/appx.yml | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) diff --git a/src/Configuration/Tasks/packages/appx.yml b/src/Configuration/Tasks/packages/appx.yml index 39e92af9..176858dd 100644 --- a/src/Configuration/Tasks/packages/appx.yml +++ b/src/Configuration/Tasks/packages/appx.yml @@ -84,7 +84,6 @@ actions: .\APPX-REMOVER.ps1 -Packages 'Microsoft.Windows.DevHome' - !writeStatus: {status: "Removing Xbox Apps", option: "remove-appx-xbox"} - - !appx: {name: 'Microsoft.XboxGameCallableUI*', type: family, weight: 10, option: "remove-appx-xbox"} - !powerShell: option: "remove-appx-xbox" # runas: currentUserElevated @@ -99,7 +98,14 @@ actions: 'Microsoft.GamingApp', 'Microsoft.XboxGameCallableUI' ) - + - !appx: {name: 'Microsoft.XboxGameCallableUI*', type: family, weight: 10, option: "remove-appx-xbox"} + + #139 + - !registryValue: {path: 'HKCR\ms-gamebar', value: '', type: REG_SZ, data: 'URL:ms-gamebar', option: "remove-appx-xbox"} + - !registryValue: {path: 'HKCR\ms-gamebar', value: 'URL Protocol', type: REG_SZ, data: '', option: "remove-appx-xbox"} + - !registryKey: {path: 'HKCR\ms-gamebar\shell\open\command', operation: add, option: "remove-appx-xbox"} + - !registryValue: {path: 'HKCR\ms-gamebar', value: '', type: REG_SZ, data: '%SystemRoot%\System32\systray.exe', option: "remove-appx-xbox"} + - !writeStatus: {status: "Removing Your Phone", option: "remove-appx-yourphone"} - !powerShell: option: "remove-appx-yourphone" From 044fb8f1861c7406d6f54b4d7458c0ed0702ee2b Mon Sep 17 00:00:00 2001 From: h3r0 <50238852+melo936@users.noreply.github.com> Date: Thu, 21 Nov 2024 10:26:04 +0000 Subject: [PATCH 44/47] remove 'Enable legacy Photo Viewer' option apply classic photo viewer only when removing the Photos app --- src/Configuration/Tasks/final.yml | 2 +- .../registry/misc/classic-photo-viewer.yml | 168 +++++++++--------- src/playbook.conf | 4 - 3 files changed, 85 insertions(+), 89 deletions(-) diff --git a/src/Configuration/Tasks/final.yml b/src/Configuration/Tasks/final.yml index a1a96399..35766e4c 100644 --- a/src/Configuration/Tasks/final.yml +++ b/src/Configuration/Tasks/final.yml @@ -68,7 +68,7 @@ actions: - !run: exeDir: true exe: "FILEASSOC.cmd" - option: "configure-lpv" + option: "remove-appx-photos" weight: 150 - !cmd: diff --git a/src/Configuration/Tasks/registry/misc/classic-photo-viewer.yml b/src/Configuration/Tasks/registry/misc/classic-photo-viewer.yml index 8647943f..012412fc 100644 --- a/src/Configuration/Tasks/registry/misc/classic-photo-viewer.yml +++ b/src/Configuration/Tasks/registry/misc/classic-photo-viewer.yml @@ -5,87 +5,87 @@ privilege: TrustedInstaller option: 'remove-appx-photos' actions: - - !registryValue: {path: 'HKCR\Applications\photoviewer.dll\shell\open', value: 'MuiVerb', type: REG_SZ, data: '@photoviewer.dll,-3043', option: "configure-lpv"} - - !registryValue: {path: 'HKCR\Applications\photoviewer.dll\shell\open\command', value: '', type: REG_EXPAND_SZ, data: '%SystemRoot%\System32\rundll32.exe "%ProgramFiles%\Windows Photo Viewer\PhotoViewer.dll", ImageView_Fullscreen %1', option: "configure-lpv"} - - !registryValue: {path: 'HKCR\Applications\photoviewer.dll\shell\open\DropTarget', value: 'Clsid', type: REG_SZ, data: '{FFE2A43C-56B9-4bf5-9A79-CC6D4285608A}', option: "configure-lpv"} - - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.Bitmap', value: 'ImageOptionFlags', type: REG_DWORD, data: '1', option: "configure-lpv"} - - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.Bitmap', value: 'FriendlyTypeName', type: REG_EXPAND_SZ, data: '@%ProgramFiles%\Windows Photo Viewer\PhotoViewer.dll,-3056', option: "configure-lpv"} - - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.Bitmap\DefaultIcon', value: '', type: REG_SZ, data: '%SystemRoot%\System32\imageres.dll,-70', option: "configure-lpv"} - - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.Bitmap\shell\open\command', value: '', type: REG_EXPAND_SZ, data: '%SystemRoot%\System32\rundll32.exe "%ProgramFiles%\Windows Photo Viewer\PhotoViewer.dll", ImageView_Fullscreen %1', option: "configure-lpv"} - - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.Bitmap\shell\open\DropTarget', value: 'Clsid', type: REG_SZ, data: '{FFE2A43C-56B9-4bf5-9A79-CC6D4285608A}', option: "configure-lpv"} - - !registryValue: {path: 'HKCR\Applications\photoviewer.dll\shell\print', value: 'NeverDefault', type: REG_SZ, data: '', option: "configure-lpv"} - - !registryValue: {path: 'HKCR\Applications\photoviewer.dll\shell\print\command', value: '', type: REG_EXPAND_SZ, data: '%SystemRoot%\System32\rundll32.exe "%ProgramFiles%\Windows Photo Viewer\PhotoViewer.dll", ImageView_Fullscreen %1', option: "configure-lpv"} - - !registryValue: {path: 'HKCR\Applications\photoviewer.dll\shell\print\DropTarget', value: 'Clsid', type: REG_SZ, data: '{60fd46de-f830-4894-a628-6fa81bc0190d}', option: "configure-lpv"} - - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.JFIF', value: 'EditFlags', type: REG_DWORD, data: '65536', option: "configure-lpv"} - - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.JFIF', value: 'ImageOptionFlags', type: REG_DWORD, data: '1', option: "configure-lpv"} - - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.JFIF', value: 'FriendlyTypeName', type: REG_EXPAND_SZ, data: '@%ProgramFiles%\Windows Photo Viewer\PhotoViewer.dll,-3055', option: "configure-lpv"} - - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.JFIF\DefaultIcon', value: '', type: REG_SZ, data: '%SystemRoot%\System32\imageres.dll,-72', option: "configure-lpv"} - - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.JFIF\shell\open', value: 'MuiVerb', type: REG_EXPAND_SZ, data: '@%ProgramFiles%\Windows Photo Viewer\photoviewer.dll,-3043', option: "configure-lpv"} - - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.JFIF\shell\open\command', value: '', type: REG_EXPAND_SZ, data: '%SystemRoot%\System32\rundll32.exe "%ProgramFiles%\Windows Photo Viewer\PhotoViewer.dll", ImageView_Fullscreen %1', option: "configure-lpv"} - - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.JFIF\shell\open\DropTarget', value: 'Clsid', type: REG_SZ, data: '{FFE2A43C-56B9-4bf5-9A79-CC6D4285608A}', option: "configure-lpv"} - - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.Jpeg', value: 'EditFlags', type: REG_DWORD, data: '65536', option: "configure-lpv"} - - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.Jpeg', value: 'ImageOptionFlags', type: REG_DWORD, data: '1', option: "configure-lpv"} - - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.Jpeg', value: 'FriendlyTypeName', type: REG_EXPAND_SZ, data: '@%ProgramFiles%\Windows Photo Viewer\PhotoViewer.dll,-3055', option: "configure-lpv"} - - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.Jpeg\DefaultIcon', value: '', type: REG_SZ, data: '%SystemRoot%\System32\imageres.dll,-72', option: "configure-lpv"} - - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.Jpeg\shell\open', value: 'MuiVerb', type: REG_EXPAND_SZ, data: '@%ProgramFiles%\Windows Photo Viewer\photoviewer.dll,-3043', option: "configure-lpv"} - - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.Jpeg\shell\open\command', value: '', type: REG_EXPAND_SZ, data: '%SystemRoot%\System32\rundll32.exe "%ProgramFiles%\Windows Photo Viewer\PhotoViewer.dll", ImageView_Fullscreen %1', option: "configure-lpv"} - - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.Jpeg\shell\open\DropTarget', value: 'Clsid', type: REG_SZ, data: '{FFE2A43C-56B9-4bf5-9A79-CC6D4285608A}', option: "configure-lpv"} - - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.Gif', value: 'ImageOptionFlags', type: REG_DWORD, data: '1', option: "configure-lpv"} - - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.Gif', value: 'FriendlyTypeName', type: REG_EXPAND_SZ, data: '@%ProgramFiles%\Windows Photo Viewer\PhotoViewer.dll,-3057', option: "configure-lpv"} - - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.Gif\DefaultIcon', value: '', type: REG_SZ, data: '%SystemRoot%\System32\imageres.dll,-83', option: "configure-lpv"} - - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.Gif\shell\open\command', value: '', type: REG_EXPAND_SZ, data: '%SystemRoot%\System32\rundll32.exe "%ProgramFiles%\Windows Photo Viewer\PhotoViewer.dll", ImageView_Fullscreen %1', option: "configure-lpv"} - - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.Gif\shell\open\DropTarget', value: 'Clsid', type: REG_SZ, data: '{FFE2A43C-56B9-4bf5-9A79-CC6D4285608A}', option: "configure-lpv"} - - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.Png', value: 'ImageOptionFlags', type: REG_DWORD, data: '1', option: "configure-lpv"} - - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.Png', value: 'FriendlyTypeName', type: REG_EXPAND_SZ, data: '@%ProgramFiles%\Windows Photo Viewer\PhotoViewer.dll,-3057', option: "configure-lpv"} - - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.Png\DefaultIcon', value: '', type: REG_SZ, data: '%SystemRoot%\System32\imageres.dll,-71', option: "configure-lpv"} - - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.Png\shell\open\command', value: '', type: REG_EXPAND_SZ, data: '%SystemRoot%\System32\rundll32.exe "%ProgramFiles%\Windows Photo Viewer\PhotoViewer.dll", ImageView_Fullscreen %1', option: "configure-lpv"} - - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.Png\shell\open\DropTarget', value: 'Clsid', type: REG_SZ, data: '{FFE2A43C-56B9-4bf5-9A79-CC6D4285608A}', option: "configure-lpv"} - - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.Wdp', value: 'EditFlags', type: REG_DWORD, data: '65536', option: "configure-lpv"} - - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.Wdp', value: 'ImageOptionFlags', type: REG_DWORD, data: '1', option: "configure-lpv"} - - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.Wdp\DefaultIcon', value: '', type: REG_SZ, data: '%SystemRoot%\System32\wmphoto.dll,-400', option: "configure-lpv"} - - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.Wdp\shell\open', value: 'MuiVerb', type: REG_EXPAND_SZ, data: '@%ProgramFiles%\Windows Photo Viewer\photoviewer.dll,-3043', option: "configure-lpv"} - - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.Wdp\shell\open\command', value: '', type: REG_EXPAND_SZ, data: '%SystemRoot%\System32\rundll32.exe "%ProgramFiles%\Windows Photo Viewer\PhotoViewer.dll", ImageView_Fullscreen %1', option: "configure-lpv"} - - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.Wdp\shell\open\DropTarget', value: 'Clsid', type: REG_SZ, data: '{FFE2A43C-56B9-4bf5-9A79-CC6D4285608A}', option: "configure-lpv"} - - !registryValue: {path: 'HKCR\SystemFileAssociations\image\shell\Image Preview\command', value: '', type: REG_EXPAND_SZ, data: '%SystemRoot%\System32\rundll32.exe "%ProgramFiles%\Windows Photo Viewer\PhotoViewer.dll", ImageView_Fullscreen %1', option: "configure-lpv"} - - !registryValue: {path: 'HKCR\SystemFileAssociations\image\shell\Image Preview\DropTarget', value: '{FFE2A43C-56B9-4bf5-9A79-CC6D4285608A}', type: REG_SZ, data: '', option: "configure-lpv"} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows Photo Viewer\Capabilities', value: 'ApplicationDescription', type: REG_SZ, data: '@%ProgramFiles%\Windows Photo Viewer\photoviewer.dll,-3069', option: "configure-lpv"} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows Photo Viewer\Capabilities', value: 'ApplicationName', type: REG_SZ, data: '@%ProgramFiles%\Windows Photo Viewer\photoviewer.dll,-3009', option: "configure-lpv"} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations', value: '.cr2', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations', value: '.jpg', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Jpeg', option: "configure-lpv"} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations', value: '.wdp', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Wdp', option: "configure-lpv"} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations', value: '.jfif', type: REG_SZ, data: 'PhotoViewer.FileAssoc.JFIF', option: "configure-lpv"} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations', value: '.dib', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Bitmap', option: "configure-lpv"} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations', value: '.png', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Png', option: "configure-lpv"} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations', value: '.jxr', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Wdp', option: "configure-lpv"} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations', value: '.bmp', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Bitmap', option: "configure-lpv"} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations', value: '.jpe', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Jpeg', option: "configure-lpv"} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations', value: '.jpeg', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Jpeg', option: "configure-lpv"} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations', value: '.gif', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Gif', option: "configure-lpv"} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations', value: '.tif', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations', value: '.tiff', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - - !registryValue: {path: 'HKCU\Software\Classes\.jpg', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Classes\.jpg', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - - !registryValue: {path: 'HKCU\Software\Classes\.jpeg', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Classes\.jpeg', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - - !registryValue: {path: 'HKCU\Software\Classes\.gif', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Classes\.gif', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - - !registryValue: {path: 'HKCU\Software\Classes\.png', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Classes\.png', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - - !registryValue: {path: 'HKCU\Software\Classes\.bmp', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Classes\.bmp', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - - !registryValue: {path: 'HKCU\Software\Classes\.tiff', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Classes\.tiff', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - - !registryValue: {path: 'HKCU\Software\Classes\.ico', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Classes\.ico', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - - !registryValue: {path: 'HKCU\Software\Classes\.tif', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Classes\.tif', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - - !registryValue: {path: 'HKCU\Software\Classes\.wdp', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Wdp', option: "configure-lpv"} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Classes\.wdp', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Wdp', option: "configure-lpv"} - - !registryValue: {path: 'HKCU\Software\Classes\.jfif', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Classes\.jfif', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - - !registryValue: {path: 'HKCU\Software\Classes\.dib', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Classes\.dib', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - - !registryValue: {path: 'HKCU\Software\Classes\.jpe', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Classes\.jpe', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - - !registryValue: {path: 'HKCU\Software\Classes\.jxr', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} - - !registryValue: {path: 'HKU\S-1-5-18\Software\Classes\.jxr', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff', option: "configure-lpv"} + - !registryValue: {path: 'HKCR\Applications\photoviewer.dll\shell\open', value: 'MuiVerb', type: REG_SZ, data: '@photoviewer.dll,-3043'} + - !registryValue: {path: 'HKCR\Applications\photoviewer.dll\shell\open\command', value: '', type: REG_EXPAND_SZ, data: '%SystemRoot%\System32\rundll32.exe "%ProgramFiles%\Windows Photo Viewer\PhotoViewer.dll", ImageView_Fullscreen %1'} + - !registryValue: {path: 'HKCR\Applications\photoviewer.dll\shell\open\DropTarget', value: 'Clsid', type: REG_SZ, data: '{FFE2A43C-56B9-4bf5-9A79-CC6D4285608A}'} + - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.Bitmap', value: 'ImageOptionFlags', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.Bitmap', value: 'FriendlyTypeName', type: REG_EXPAND_SZ, data: '@%ProgramFiles%\Windows Photo Viewer\PhotoViewer.dll,-3056'} + - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.Bitmap\DefaultIcon', value: '', type: REG_SZ, data: '%SystemRoot%\System32\imageres.dll,-70'} + - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.Bitmap\shell\open\command', value: '', type: REG_EXPAND_SZ, data: '%SystemRoot%\System32\rundll32.exe "%ProgramFiles%\Windows Photo Viewer\PhotoViewer.dll", ImageView_Fullscreen %1'} + - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.Bitmap\shell\open\DropTarget', value: 'Clsid', type: REG_SZ, data: '{FFE2A43C-56B9-4bf5-9A79-CC6D4285608A}'} + - !registryValue: {path: 'HKCR\Applications\photoviewer.dll\shell\print', value: 'NeverDefault', type: REG_SZ, data: ''} + - !registryValue: {path: 'HKCR\Applications\photoviewer.dll\shell\print\command', value: '', type: REG_EXPAND_SZ, data: '%SystemRoot%\System32\rundll32.exe "%ProgramFiles%\Windows Photo Viewer\PhotoViewer.dll", ImageView_Fullscreen %1'} + - !registryValue: {path: 'HKCR\Applications\photoviewer.dll\shell\print\DropTarget', value: 'Clsid', type: REG_SZ, data: '{60fd46de-f830-4894-a628-6fa81bc0190d}'} + - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.JFIF', value: 'EditFlags', type: REG_DWORD, data: '65536'} + - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.JFIF', value: 'ImageOptionFlags', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.JFIF', value: 'FriendlyTypeName', type: REG_EXPAND_SZ, data: '@%ProgramFiles%\Windows Photo Viewer\PhotoViewer.dll,-3055'} + - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.JFIF\DefaultIcon', value: '', type: REG_SZ, data: '%SystemRoot%\System32\imageres.dll,-72'} + - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.JFIF\shell\open', value: 'MuiVerb', type: REG_EXPAND_SZ, data: '@%ProgramFiles%\Windows Photo Viewer\photoviewer.dll,-3043'} + - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.JFIF\shell\open\command', value: '', type: REG_EXPAND_SZ, data: '%SystemRoot%\System32\rundll32.exe "%ProgramFiles%\Windows Photo Viewer\PhotoViewer.dll", ImageView_Fullscreen %1'} + - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.JFIF\shell\open\DropTarget', value: 'Clsid', type: REG_SZ, data: '{FFE2A43C-56B9-4bf5-9A79-CC6D4285608A}'} + - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.Jpeg', value: 'EditFlags', type: REG_DWORD, data: '65536'} + - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.Jpeg', value: 'ImageOptionFlags', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.Jpeg', value: 'FriendlyTypeName', type: REG_EXPAND_SZ, data: '@%ProgramFiles%\Windows Photo Viewer\PhotoViewer.dll,-3055'} + - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.Jpeg\DefaultIcon', value: '', type: REG_SZ, data: '%SystemRoot%\System32\imageres.dll,-72'} + - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.Jpeg\shell\open', value: 'MuiVerb', type: REG_EXPAND_SZ, data: '@%ProgramFiles%\Windows Photo Viewer\photoviewer.dll,-3043'} + - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.Jpeg\shell\open\command', value: '', type: REG_EXPAND_SZ, data: '%SystemRoot%\System32\rundll32.exe "%ProgramFiles%\Windows Photo Viewer\PhotoViewer.dll", ImageView_Fullscreen %1'} + - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.Jpeg\shell\open\DropTarget', value: 'Clsid', type: REG_SZ, data: '{FFE2A43C-56B9-4bf5-9A79-CC6D4285608A}'} + - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.Gif', value: 'ImageOptionFlags', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.Gif', value: 'FriendlyTypeName', type: REG_EXPAND_SZ, data: '@%ProgramFiles%\Windows Photo Viewer\PhotoViewer.dll,-3057'} + - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.Gif\DefaultIcon', value: '', type: REG_SZ, data: '%SystemRoot%\System32\imageres.dll,-83'} + - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.Gif\shell\open\command', value: '', type: REG_EXPAND_SZ, data: '%SystemRoot%\System32\rundll32.exe "%ProgramFiles%\Windows Photo Viewer\PhotoViewer.dll", ImageView_Fullscreen %1'} + - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.Gif\shell\open\DropTarget', value: 'Clsid', type: REG_SZ, data: '{FFE2A43C-56B9-4bf5-9A79-CC6D4285608A}'} + - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.Png', value: 'ImageOptionFlags', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.Png', value: 'FriendlyTypeName', type: REG_EXPAND_SZ, data: '@%ProgramFiles%\Windows Photo Viewer\PhotoViewer.dll,-3057'} + - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.Png\DefaultIcon', value: '', type: REG_SZ, data: '%SystemRoot%\System32\imageres.dll,-71'} + - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.Png\shell\open\command', value: '', type: REG_EXPAND_SZ, data: '%SystemRoot%\System32\rundll32.exe "%ProgramFiles%\Windows Photo Viewer\PhotoViewer.dll", ImageView_Fullscreen %1'} + - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.Png\shell\open\DropTarget', value: 'Clsid', type: REG_SZ, data: '{FFE2A43C-56B9-4bf5-9A79-CC6D4285608A}'} + - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.Wdp', value: 'EditFlags', type: REG_DWORD, data: '65536'} + - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.Wdp', value: 'ImageOptionFlags', type: REG_DWORD, data: '1'} + - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.Wdp\DefaultIcon', value: '', type: REG_SZ, data: '%SystemRoot%\System32\wmphoto.dll,-400'} + - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.Wdp\shell\open', value: 'MuiVerb', type: REG_EXPAND_SZ, data: '@%ProgramFiles%\Windows Photo Viewer\photoviewer.dll,-3043'} + - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.Wdp\shell\open\command', value: '', type: REG_EXPAND_SZ, data: '%SystemRoot%\System32\rundll32.exe "%ProgramFiles%\Windows Photo Viewer\PhotoViewer.dll", ImageView_Fullscreen %1'} + - !registryValue: {path: 'HKCR\PhotoViewer.FileAssoc.Wdp\shell\open\DropTarget', value: 'Clsid', type: REG_SZ, data: '{FFE2A43C-56B9-4bf5-9A79-CC6D4285608A}'} + - !registryValue: {path: 'HKCR\SystemFileAssociations\image\shell\Image Preview\command', value: '', type: REG_EXPAND_SZ, data: '%SystemRoot%\System32\rundll32.exe "%ProgramFiles%\Windows Photo Viewer\PhotoViewer.dll", ImageView_Fullscreen %1'} + - !registryValue: {path: 'HKCR\SystemFileAssociations\image\shell\Image Preview\DropTarget', value: '{FFE2A43C-56B9-4bf5-9A79-CC6D4285608A}', type: REG_SZ, data: ''} + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows Photo Viewer\Capabilities', value: 'ApplicationDescription', type: REG_SZ, data: '@%ProgramFiles%\Windows Photo Viewer\photoviewer.dll,-3069'} + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows Photo Viewer\Capabilities', value: 'ApplicationName', type: REG_SZ, data: '@%ProgramFiles%\Windows Photo Viewer\photoviewer.dll,-3009'} + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations', value: '.cr2', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff'} + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations', value: '.jpg', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Jpeg'} + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations', value: '.wdp', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Wdp'} + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations', value: '.jfif', type: REG_SZ, data: 'PhotoViewer.FileAssoc.JFIF'} + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations', value: '.dib', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Bitmap'} + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations', value: '.png', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Png'} + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations', value: '.jxr', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Wdp'} + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations', value: '.bmp', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Bitmap'} + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations', value: '.jpe', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Jpeg'} + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations', value: '.jpeg', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Jpeg'} + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations', value: '.gif', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Gif'} + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations', value: '.tif', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff'} + - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows Photo Viewer\Capabilities\FileAssociations', value: '.tiff', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff'} + - !registryValue: {path: 'HKCU\Software\Classes\.jpg', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff'} + - !registryValue: {path: 'HKU\S-1-5-18\Software\Classes\.jpg', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff'} + - !registryValue: {path: 'HKCU\Software\Classes\.jpeg', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff'} + - !registryValue: {path: 'HKU\S-1-5-18\Software\Classes\.jpeg', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff'} + - !registryValue: {path: 'HKCU\Software\Classes\.gif', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff'} + - !registryValue: {path: 'HKU\S-1-5-18\Software\Classes\.gif', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff'} + - !registryValue: {path: 'HKCU\Software\Classes\.png', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff'} + - !registryValue: {path: 'HKU\S-1-5-18\Software\Classes\.png', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff'} + - !registryValue: {path: 'HKCU\Software\Classes\.bmp', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff'} + - !registryValue: {path: 'HKU\S-1-5-18\Software\Classes\.bmp', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff'} + - !registryValue: {path: 'HKCU\Software\Classes\.tiff', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff'} + - !registryValue: {path: 'HKU\S-1-5-18\Software\Classes\.tiff', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff'} + - !registryValue: {path: 'HKCU\Software\Classes\.ico', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff'} + - !registryValue: {path: 'HKU\S-1-5-18\Software\Classes\.ico', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff'} + - !registryValue: {path: 'HKCU\Software\Classes\.tif', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff'} + - !registryValue: {path: 'HKU\S-1-5-18\Software\Classes\.tif', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff'} + - !registryValue: {path: 'HKCU\Software\Classes\.wdp', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Wdp'} + - !registryValue: {path: 'HKU\S-1-5-18\Software\Classes\.wdp', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Wdp'} + - !registryValue: {path: 'HKCU\Software\Classes\.jfif', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff'} + - !registryValue: {path: 'HKU\S-1-5-18\Software\Classes\.jfif', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff'} + - !registryValue: {path: 'HKCU\Software\Classes\.dib', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff'} + - !registryValue: {path: 'HKU\S-1-5-18\Software\Classes\.dib', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff'} + - !registryValue: {path: 'HKCU\Software\Classes\.jpe', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff'} + - !registryValue: {path: 'HKU\S-1-5-18\Software\Classes\.jpe', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff'} + - !registryValue: {path: 'HKCU\Software\Classes\.jxr', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff'} + - !registryValue: {path: 'HKU\S-1-5-18\Software\Classes\.jxr', value: '', type: REG_SZ, data: 'PhotoViewer.FileAssoc.Tiff'} diff --git a/src/playbook.conf b/src/playbook.conf index d8813f24..a08bfc70 100644 --- a/src/playbook.conf +++ b/src/playbook.conf @@ -135,10 +135,6 @@ Enable legacy context menu configure-lcm - - Enable legacy Photo Viewer - configure-lpv - From b0141c9a876ecf0fc56ff3f6cc70c9c80243294c Mon Sep 17 00:00:00 2001 From: h3r0 <50238852+melo936@users.noreply.github.com> Date: Thu, 28 Nov 2024 11:21:51 +0000 Subject: [PATCH 45/47] update funding.yml #142 --- .github/FUNDING.yml | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/.github/FUNDING.yml b/.github/FUNDING.yml index 9d5018a8..ba2c4d29 100644 --- a/.github/FUNDING.yml +++ b/.github/FUNDING.yml @@ -10,5 +10,5 @@ liberapay: # Replace with a single Liberapay username issuehunt: # Replace with a single IssueHunt username lfx_crowdfunding: # Replace with a single LFX Crowdfunding project-name e.g., cloud-foundry polar: # Replace with a single Polar username -buy_me_a_coffee: meetrevision -custom: # Replace with up to 4 custom sponsorship URLs e.g., ['link1', 'link2'] +buy_me_a_coffee: # meetrevision +custom: https://revi.cc/donate From 7279047175da22acf04f5f5eda9b8a26ec49a639 Mon Sep 17 00:00:00 2001 From: h3r0 <50238852+melo936@users.noreply.github.com> Date: Sat, 30 Nov 2024 10:50:43 +0000 Subject: [PATCH 46/47] update DonateLink in playbook.conf --- src/playbook.conf | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/playbook.conf b/src/playbook.conf index a08bfc70..a51eefbe 100644 --- a/src/playbook.conf +++ b/src/playbook.conf @@ -26,7 +26,7 @@ 32 https://github.com/meetrevision/playbook https://www.revi.cc - https://www.buymeacoffee.com/meetrevision + https://revi.cc/donate Date: Sun, 1 Dec 2024 07:53:05 +0000 Subject: [PATCH 47/47] prevent ms-gamingoverlay popups when removing xbox apps --- src/Configuration/Tasks/packages/appx.yml | 1 + 1 file changed, 1 insertion(+) diff --git a/src/Configuration/Tasks/packages/appx.yml b/src/Configuration/Tasks/packages/appx.yml index 176858dd..d7663dea 100644 --- a/src/Configuration/Tasks/packages/appx.yml +++ b/src/Configuration/Tasks/packages/appx.yml @@ -105,6 +105,7 @@ actions: - !registryValue: {path: 'HKCR\ms-gamebar', value: 'URL Protocol', type: REG_SZ, data: '', option: "remove-appx-xbox"} - !registryKey: {path: 'HKCR\ms-gamebar\shell\open\command', operation: add, option: "remove-appx-xbox"} - !registryValue: {path: 'HKCR\ms-gamebar', value: '', type: REG_SZ, data: '%SystemRoot%\System32\systray.exe', option: "remove-appx-xbox"} + - !registryValue: {path: 'HKCU\Software\Microsoft\GameBar', value: 'ShowStartupPanel', type: REG_DWORD, data: '0', option: "remove-appx-xbox"} - !writeStatus: {status: "Removing Your Phone", option: "remove-appx-yourphone"} - !powerShell: