23.07

- revert TrayIconVisibility - reconfigured update policies - disabled tasks - updates root certificates - revert section - allow Edge to be uninstalled
meetrevision · Jul 16, 2023 · deb0a48 · deb0a48
1 parent 910d561
commit deb0a48
Show file tree

Hide file tree

Showing 10 changed files with 70 additions and 46 deletions.
diff --git a/src/Configuration/custom.yml b/src/Configuration/custom.yml
@@ -10,4 +10,5 @@ features:
 - features\revision\components.yml
 - features\revision\packages.yml
 - features\revision\registry.yml
+- features\revision\revert.yml
 - features\revision\config.yml
diff --git a/src/Configuration/features/revision/config.yml b/src/Configuration/features/revision/config.yml
@@ -21,6 +21,9 @@ actions:
   - !run: {exe: 'schtasks', args: '/change /tn "\Microsoft\Windows\MemoryDiagnostic\ProcessMemoryDiagnosticEvents" /disable', showOutput: false}
   - !run: {exe: 'schtasks', args: '/change /tn "\Microsoft\Windows\MemoryDiagnostic\RunFullMemoryDiagnostic" /disable', showOutput: false}
   - !run: {exe: 'schtasks', args: '/change /tn "\Microsoft\Windows\WindowsUpdate\Scheduled Start" /disable', showOutput: false}
+  - !run: {exe: 'schtasks', args: '/change /tn "\Microsoft\Windows\Windows Error Reporting\QueueReporting" /disable', showOutput: false}
+  - !run: {exe: 'schtasks', args: '/change /tn "\Microsoft\Windows\Application Experience\AitAgent" /disable', showOutput: false}
+  - !run: {exe: 'schtasks', args: '/change /tn "\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector" /disable', showOutput: false}
   - !run: {exe: 'wevtutil', args: 'sl Microsoft-Windows-SleepStudy/Diagnostic /e:false', showOutput: false}
   - !run: {exe: 'wevtutil', args: 'sl Microsoft-Windows-Kernel-Processor-Power/Diagnostic /e:false', showOutput: false}
   - !run: {exe: 'wevtutil', args: 'sl Microsoft-Windows-UserModePowerService/Diagnostic /e:false', showOutput: false}

diff --git a/src/Configuration/features/revision/registry/configure-windows-update-and-install.yml b/src/Configuration/features/revision/registry/configure-windows-update-and-install.yml
@@ -7,37 +7,24 @@ actions:
     # ======================
     # === Windows Update ===
     # ======================
-    # === Allow Automatic Updates immediate installation - Disabled
-  - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'AUOptions', type: REG_DWORD, data: '2'}
-    # === Allow Automatic Updates immediate installation - Disabled
-  - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'AutoInstallMinorUpdates', type: REG_DWORD, data: '0'}
-    # === Allow updates to be downloaded automatically over metered connections - Disabled
-    # [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate]
-    # "AllowAutoWindowsUpdateDownloadOverMeteredNetwork"=dword:00000001
+
     # === Configure Automatic Updates - Disabled
-    # === Breaks Xbox Sign-in
-    # [HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\WindowsUpdate\AU]
-    # "NoAutoUpdate"=dword:00000001
-    # === Do not adjust default option to 'Install Updates and Shut Down' in Shut Down Windows dialog box - Enabled
-  - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'NoAUAsDefaultShutdownOption', type: REG_DWORD, data: '1'}
-  - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'NoAUAsDefaultShutdownOption', type: REG_DWORD, data: '1'}
+    # === Used to break Xbox Sign-in
+  - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'NoAutoUpdate', type: REG_DWORD, data: '1'}
+
     # === Do not allow update deferral policies to cause scans against Windows Update - Enabled
-  - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate', value: 'DisableDualScan', type: REG_DWORD, data: '1'}
-    # === Do not display 'Install Updates and Shut Down' option in Shut Down Windows dialog box - Enabled
-  - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'NoAUShutdownOption', type: REG_DWORD, data: '1'}
-  - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'NoAUShutdownOption', type: REG_DWORD, data: '1'}
+  - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate', value: 'DisableDualScan', type: REG_DWORD, data: '1'}  
+
     # === Do not include drivers with Windows Updates - Enabled
   - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate', value: 'ExcludeWUDriversInQualityUpdate', type: REG_DWORD, data: '1'}
     # === Enabling Windows Update Power Management to automatically wake up the system to install scheduled updates - Disabled
   - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate', value: 'AUPowerManagement', type: REG_DWORD, data: '0'}
-    # === No auto-restart with logged on users for scheduled automatic updates installations - Enabled
-  - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'NoAutoRebootWithLoggedOnUsers', type: REG_DWORD, data: '1'}
+
     # === Turn off auto-restart notifications for update installations - Enabled
   - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate', value: 'SetAutoRestartNotificationDisable', type: REG_DWORD, data: '1'}
     # === Turn on recommended updates via Automatic Updates - Disabled
   - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'IncludeRecommendedUpdates', type: REG_DWORD, data: '0'}
-    # === Turn on Software Notifications - Disabled
-  - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'EnableFeaturedSoftware', type: REG_DWORD, data: '0'}
+
     # === Windows Update Notifications - Disabled
     # ------> https://www.askvg.com/fix-how-to-stop-automatic-forced-upgrade-to-feature-updates-in-windows-10/
   - !registryValue: {path: 'HKLM\SYSTEM\Setup\UpgradeNotification', value: 'UpgradeAvailable', type: REG_DWORD, data: '0'}
@@ -111,6 +98,8 @@ actions:
     # ------> Media Player Updates auto update disabled.
     # ------> https://admx.help/?Category=Windows_8.1_2012R2&Policy=Microsoft.Policies.MediaPlayer::DisableAutoUpdate
   - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\WindowsMediaPlayer', value: 'DisableAutoUpdate', type: REG_DWORD, data: '0'}
+
+
     # ========================
     # === Discarded Tweaks ===
     # ========================
@@ -134,3 +123,18 @@ actions:
     # "value"=dword:00000001
     # [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsUpdate\UX\Settings]
     # "ExcludeWUDriversInQualityUpdate"=dword:00000001
+
+   # === Allow Automatic Updates immediate installation - Disabled
+  # - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'AUOptions', type: REG_DWORD, data: '2'}
+    # === Allow Automatic Updates immediate installation - Disabled (Not supported anymore)
+  # - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'AutoInstallMinorUpdates', type: REG_DWORD, data: '0'}
+     # === Do not adjust default option to 'Install Updates and Shut Down' in Shut Down Windows dialog box - Enabled (Not supported anymore)
+  # - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'NoAUAsDefaultShutdownOption', type: REG_DWORD, data: '1'}
+  # - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'NoAUAsDefaultShutdownOption', type: REG_DWORD, data: '1'}
+  # === Do not display 'Install Updates and Shut Down' option in Shut Down Windows dialog box - Enabled (Not supported anymore)
+  # - !registryValue: {path: 'HKCU\Software\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'NoAUShutdownOption', type: REG_DWORD, data: '1'}
+  # - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'NoAUShutdownOption', type: REG_DWORD, data: '1'}
+  # === No auto-restart with logged on users for scheduled automatic updates installations - Enabled
+  # - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'NoAutoRebootWithLoggedOnUsers', type: REG_DWORD, data: '1'}
+  # === Turn on Software Notifications - Disabled
+  # - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'EnableFeaturedSoftware', type: REG_DWORD, data: '0'}
diff --git a/src/Configuration/features/revision/registry/fixes.yml b/src/Configuration/features/revision/registry/fixes.yml
@@ -39,7 +39,7 @@ actions:
     # [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run]
     # "ctfmon"="C:\Windows\System32\ctfmon.exe"
     # === Fix WU Taskbar
-  - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\WindowsUpdate\UX\Settings', value: 'TrayIconVisibility', type: REG_DWORD, data: '0'}
+  # - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\WindowsUpdate\UX\Settings', value: 'TrayIconVisibility', type: REG_DWORD, data: '0'}
     # === Stop indexing src and Licenses folders
   # - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\PreventIndexingCertainPaths', value: 'file:///C:\Users\Default\Documents\Workspace\Revision-Tool\bin\*', type: REG_SZ, data: 'file:///C:\Users\Default\Documents\Workspace\Revision-Tool\bin\*'}
   # - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\PreventIndexingCertainPaths', value: 'file:///%userprofile%\Documents\Workspace\Revision-Tool\bin\*', type: REG_SZ, data: 'file:///%userprofile%\Documents\Workspace\Revision-Tool\bin\*'}

diff --git a/src/Configuration/features/revision/registry/ntlite-settings.yml b/src/Configuration/features/revision/registry/ntlite-settings.yml
@@ -3,8 +3,8 @@ title: NTLite Settings
 description: Integration of modified settings in NTLite > Settings
 privilege: TrustedInstaller
 actions:
-  - !scheduledTask: {path: '\Microsoft\Windows\Application Experience\AitAgent', operation: delete}
-  - !scheduledTask: {path: '\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector', operation: delete}
+  # - !scheduledTask: {path: '\Microsoft\Windows\Application Experience\AitAgent', operation: delete}
+  # - !scheduledTask: {path: '\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector', operation: delete}
 
   - !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Control\CrashControl', value: 'AutoReboot', type: REG_DWORD, data: '0'}
   - !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Control\CrashControl', value: 'CrashDumpEnabled', type: REG_DWORD, data: '3'}
@@ -260,12 +260,12 @@ actions:
   # - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System', value: 'EnableVirtualization', type: REG_DWORD, data: '0'}
   - !registryValue: {path: 'HKCU\Software\Microsoft\Windows Security Health\State', value: 'AccountProtection_MicrosoftAccount_Disconnected', type: REG_DWORD, data: '0'}
   - !registryValue: {path: 'HKU\S-1-5-18\Software\Microsoft\Windows Security Health\State', value: 'AccountProtection_MicrosoftAccount_Disconnected', type: REG_DWORD, data: '0'}
-  - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows Defender Security Center\Notifications', value: 'DisableNotifications', type: REG_DWORD, data: '1'}
-  - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows Defender Security Center\Notifications', value: 'DisableEnhancedNotifications', type: REG_DWORD, data: '1'}
-  - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\DriverSearching', value: 'SearchOrderConfig', type: REG_DWORD, data: '0'}
+  # - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows Defender Security Center\Notifications', value: 'DisableNotifications', type: REG_DWORD, data: '1'}
+  # - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows Defender Security Center\Notifications', value: 'DisableEnhancedNotifications', type: REG_DWORD, data: '1'}
+  # - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\DriverSearching', value: 'SearchOrderConfig', type: REG_DWORD, data: '0'}
 
-  - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\DriverSearching', value: 'SearchOrderConfig', operation: delete}
-  - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\DriverSearching'}
+  # - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\DriverSearching', value: 'SearchOrderConfig', operation: delete}
+  # - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\DriverSearching'}
 
   - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Speech_OneCore\Preferences', value: 'ModelDownloadAllowed', type: REG_DWORD, data: '0'}
   - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Device Metadata', value: 'PreventDeviceMetadataFromNetwork', type: REG_DWORD, data: '1'}
@@ -274,7 +274,7 @@ actions:
   - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Services\Pending\7971f918-a847-4430-9279-4a52d1efe18d', value: 'RegisterWithAU', type: REG_DWORD, data: '0'}
   - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate', value: 'ExcludeWUDriversInQualityUpdate', type: REG_DWORD, data: '1'}
   - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\WindowsUpdate\UX\Settings', value: 'ExcludeWUDriversInQualityUpdate', type: REG_DWORD, data: '1'}
-  - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\MRT', value: 'DontOfferThroughWUAU', type: REG_DWORD, data: '1'}
+  # - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\MRT', value: 'DontOfferThroughWUAU', type: REG_DWORD, data: '1'}
   - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\WindowsUpdate\UX\Settings', value: 'HideMCTLink', type: REG_DWORD, data: '1'}
   - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\WindowsUpdate\UX\Settings', value: 'RestartNotificationsAllowed2', type: REG_DWORD, data: '0'}
-  - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'AUOptions', type: REG_DWORD, data: '2'}
+  # - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'AUOptions', type: REG_DWORD, data: '2'}
diff --git a/src/Configuration/features/revision/revert.yml b/src/Configuration/features/revision/revert.yml
@@ -0,0 +1,15 @@
+---
+title: Revert configurations
+description: Revert configurations that were from previous versions
+privilege: TrustedInstaller
+actions:
+
+  - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'NoAutoUpdate', type: REG_DWORD, data: '1'}
+  - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'AUOptions', operation: delete}
+  - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'AutoInstallMinorUpdates', operation: delete}
+  - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'NoAUAsDefaultShutdownOption', operation: delete}
+  - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'NoAUShutdownOption', operation: delete}
+  - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'NoAutoRebootWithLoggedOnUsers', operation: delete}
+  - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'IncludeRecommendedUpdates', operation: delete}
+  - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU', value: 'EnableFeaturedSoftware', operation: delete}
+  - !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Control\Session Manager', value: 'HeapDeCommitFreeBlockThreshold', type: REG_DWORD, data: '0'}
diff --git a/src/Executables/BraveSoftware/Brave-Browser/Application/master_preferences b/src/Executables/BraveSoftware/Brave-Browser/Application/master_preferences
@@ -6,7 +6,8 @@
       "p3a_usage": 0
     },
     "p3a": {
-      "enabled": false
+      "enabled": false,
+      "notice_acknowledged": true
     },
     "stats": {
       "reporting_enabled": false
@@ -15,5 +16,8 @@
   "distribution": {
     "import_bookmarks_from_file": "C:\\Program Files\\BraveSoftware\\bookmarks.html",
     "import_bookmarks": true
+  },
+  "user_experience_metrics": {
+    "reporting_enabled": false
   }
 }
diff --git a/src/Executables/EDGE.bat b/src/Executables/EDGE.bat
@@ -1,6 +1,10 @@
 @echo off
 setlocal EnableDelayedExpansion
 
+reg delete "HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall\Microsoft Edge" /v "NoRemove" /f
+reg delete "HKLM\SOFTWARE\WOW6432Node\Microsoft\EdgeUpdate\ClientState\{56EB18F8-B008-4CBD-B6D2-8C97FE7E9062}" /v "experiment_control_labels" /f
+reg add "HKLM\SOFTWARE\WOW6432Node\Microsoft\EdgeUpdateDev" /v "AllowUninstall" /t REG_DWORD /d 1 /f
+
 for /f "usebackq tokens=2 delims=\" %%a in (`reg query "HKEY_USERS" ^| findstr /r /x /c:"HKEY_USERS\\S-.*" /c:"HKEY_USERS\\AME_UserHive_[^_]*"`) do (
 	reg query "HKU\%%a" | findstr /c:"Volatile Environment" /c:"AME_UserHive_" > nul 2>&1
 	if not !errorlevel! == 1 (

diff --git a/src/Executables/FINALIZE.bat b/src/Executables/FINALIZE.bat
@@ -1,5 +1,5 @@
 @echo off
-set version=23.06
+set version=23.07
 for /f "tokens=2 delims==" %%i in ('wmic os get BuildNumber /value ^| find "="') do set "build=%%i"
 if %build% gtr 19045 ( set "w11=true" )
 
@@ -16,18 +16,7 @@ if not defined w11 (
 	bcdedit /set description "ReviOS 11 %version%" >NUL 2>nul
   reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OEMInformation" /v "Model"  /t REG_SZ /d "ReviOS 11 %version%" /f >NUL 2>nul
   reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion" /v "RegisteredOrganisation" /t REG_SZ /d "ReviOS 11 %version%" /f >NUL 2>nul
-	::FileExplorerTabs
-	@REM reg add "HKLM\SYSTEM\ControlSet001\Control\FeatureManagement\Overrides\8\1931258509" /v "EnabledState" /t REG_DWORD /d "2" /f >NUL
-	@REM reg add "HKLM\SYSTEM\ControlSet001\Control\FeatureManagement\Overrides\8\1931258509" /v "EnabledStateOptions" /t REG_DWORD /d "0" /f >NUL
-	@REM reg add "HKLM\SYSTEM\ControlSet001\Control\FeatureManagement\Overrides\8\1931258509" /v "Variant" /t REG_DWORD /d "0" /f >NUL
-	@REM reg add "HKLM\SYSTEM\ControlSet001\Control\FeatureManagement\Overrides\8\1931258509" /v "VariantPayload" /t REG_DWORD /d "0" /f >NUL
-	@REM reg add "HKLM\SYSTEM\ControlSet001\Control\FeatureManagement\Overrides\8\1931258509" /v "VariantPayloadKind" /t REG_DWORD /d "0" /f >NUL
-	@REM reg add "HKLM\SYSTEM\ControlSet001\Control\FeatureManagement\Overrides\8\2733408908" /v "EnabledState" /t REG_DWORD /d "2" /f >NUL
-	@REM reg add "HKLM\SYSTEM\ControlSet001\Control\FeatureManagement\Overrides\8\2733408908" /v "EnabledStateOptions" /t REG_DWORD /d "0" /f >NUL
-	@REM reg add "HKLM\SYSTEM\ControlSet001\Control\FeatureManagement\Overrides\8\2733408908" /v "Variant" /t REG_DWORD /d "0" /f >NUL
-	@REM reg add "HKLM\SYSTEM\ControlSet001\Control\FeatureManagement\Overrides\8\2733408908" /v "VariantPayload" /t REG_DWORD /d "0" /f >NUL
-	@REM reg add "HKLM\SYSTEM\ControlSet001\Control\FeatureManagement\Overrides\8\2733408908" /v "VariantPayloadKind" /t REG_DWORD /d "0" /f >NUL
-)
+	)
 
 PowerShell -NonInteractive -NoLogo -NoP -C "& {$cpu = Get-CimInstance Win32_Processor; $cpuName = $cpu.Name; if ($cpu.Manufacturer -eq 'GenuineIntel') { if ($cpuName.Substring(0, 2) -eq 'In') { Write-Host 'Detected Intel CPU older than 10th generation.' } else { $cpuGen = [int]($cpuName.Substring(0, 2)); if ($cpuGen -gt 11) { Write-Host 'Optimizing Revision''s Ultra powerplan for 12th generation or later Intel CPUs'; powercfg -changename 3ff9831b-6f80-4830-8178-736cd4229e7b 'Ultra Performance' 'Windows''s Ultimate Performance with optimized settings for newer Intel CPUs.'; powercfg -s 3ff9831b-6f80-4830-8178-736cd4229e7b; powercfg -setacvalueindex scheme_current sub_processor HETEROPOLICY 0; powercfg -setacvalueindex scheme_current sub_processor SCHEDPOLICY 2; powercfg /setactive scheme_current }}};}"
 
@@ -63,6 +52,10 @@ for /f "usebackq tokens=2 delims=\" %%a in (`reg query "HKEY_USERS" ^| findstr /
     )
   )
 
+:: https://github.com/meetrevision/playbook/issues/15
+:: Updates root certificates
+PowerShell -NonInteractive -NoLogo -NoP -C "& {$tmp = (New-TemporaryFile).FullName; CertUtil -generateSSTFromWU -f $tmp; if ( (Get-Item $tmp | Measure-Object -Property Length -Sum).sum -gt 0 ) { $SST_File = Get-ChildItem -Path $tmp; $SST_File | Import-Certificate -CertStoreLocation "Cert:\LocalMachine\Root"; $SST_File | Import-Certificate -CertStoreLocation "Cert:\LocalMachine\AuthRoot" } Remove-Item -Path $tmp}" >NUL 2>nul
+
 
 @REM echo Configuring UAC...
 

diff --git a/src/playbook.conf b/src/playbook.conf
@@ -6,7 +6,7 @@
 	<ShortDescription>Playbook for Windows 10 and 11</ShortDescription>
 	<Description>This Playbook will help you quickly&#xD;&#xA;deploy ReviOS with the default configuration.</Description>
 	<Details>Experience an ideal lightweight and stable system, designed to enhance performance and privacy while ensuring compatibility.</Details>
-	<Version>23.05</Version>
+	<Version>23.07</Version>
 	<SupportedBuilds>
 		<string>19044</string>
 		<string>19045</string>