{"id":124,"date":"2017-08-26T08:44:13","date_gmt":"2017-08-26T08:44:13","guid":{"rendered":"https:\/\/d1m0.com\/?p=124"},"modified":"2017-09-11T12:04:37","modified_gmt":"2017-09-11T12:04:37","slug":"privacy-please","status":"publish","type":"post","link":"https:\/\/d1m0.com\/?p=124","title":{"rendered":"Privacy …please"},"content":{"rendered":"

Tl;dr – \u00a0Download Powershell script<\/a> .Open Powershell as admin.Navigate to your download directory. Mark it as executable with\u00a0 ‘ Set-ExecutionPolicy RemoteSigned\u00a0 ‘ and execute the script.<\/p>\n

“DisableTelemetry”, # “EnableTelemetry”,
\n“DisableWiFiSense”, # “EnableWiFiSense”,
\n# “DisableSmartScreen”, # “EnableSmartScreen”,
\n“DisableWebSearch”, # “EnableWebSearch”,
\n“DisableStartSuggestions”, # “EnableStartSuggestions”,
\n“DisableLocationTracking”, # “EnableLocationTracking”,
\n“DisableFeedback”, # “EnableFeedback”,
\n“DisableAdvertisingID”, # “EnableAdvertisingID”,
\n“DisableCortana”, # “EnableCortana”,
\n“DisableErrorReporting”, # “EnableErrorReporting”,
\n“RestrictUpdateP2P”, # “UnrestrictUpdateP2P”,
\n“DisableAutoLogger”, # “EnableAutoLogger”,
\n“DisableDiagTrack”, # “EnableDiagTrack”,
\n“DisableWAPPush”, # “EnableWAPPush”,<\/p>\n

<\/p>\n

### Service Tweaks ###
\n# “LowerUAC”, # “RaiseUAC”,
\n# “EnableSharingMappedDrives”, # “DisableSharingMappedDrives”,
\n# “DisableAdminShares”, # “EnableAdminShares”,
\n“DisableSMB1”, # “EnableSMB1”,
\n“SetCurrentNetworkPrivate”, # “SetCurrentNetworkPublic”,
\n# “SetUnknownNetworksPrivate”, # “SetUnknownNetworksPublic”,
\n# “DisableFirewall”, # “EnableFirewall”,
\n# “DisableDefender”, # “EnableDefender”,
\n# “DisableUpdateMSRT”, # “EnableUpdateMSRT”,
\n# “DisableUpdateDriver”, # “EnableUpdateDriver”,
\n“DisableUpdateRestart”, # “EnableUpdateRestart”,
\n“DisableHomeGroups”, # “EnableHomeGroups”,
\n# “DisableRemoteAssistance”, # “EnableRemoteAssistance”,
\n“EnableRemoteDesktop”, # “DisableRemoteDesktop”,
\n“DisableAutoplay”, # “EnableAutoplay”,
\n“DisableAutorun”, # “EnableAutorun”,
\n# “DisableDefragmentation”, # “EnableDefragmentation”,
\n# “SetBIOSTimeUTC”, # “SetBIOSTimeLocal”,<\/p>\n

### UI Tweaks ###
\n# “DisableActionCenter”, # “EnableActionCenter”,
\n# “DisableLockScreen”, # “EnableLockScreen”,
\n# “DisableLockScreenRS1”, # “EnableLockScreenRS1”,
\n# “DisableStickyKeys”, # “EnableStickyKeys”,
\n# “ShowTaskManagerDetails” # “HideTaskManagerDetails”,
\n“ShowFileOperationsDetails”, # “HideFileOperationsDetails”,
\n# “HideTaskbarSearchBox”, # “ShowTaskbarSearchBox”,
\n# “HideTaskView”, # “ShowTaskView”,
\n# “ShowSmallTaskbarIcons”, # “ShowLargeTaskbarIcons”,
\n# “ShowTaskbarTitles”, # “HideTaskbarTitles”,
\n# “HideTaskbarPeopleIcon”, # “ShowTaskbarPeopleIcon”,
\n# “ShowTrayIcons”, # “HideTrayIcons”,
\n“ShowKnownExtensions”, # “HideKnownExtensions”,
\n# “ShowHiddenFiles”, # “HideHiddenFiles”,
\n# “HideSyncNotifications” # “ShowSyncNotifications”,
\n# “HideRecentShortcuts”, # “ShowRecentShortcuts”,
\n“ExplorerThisPC”, # “ExplorerQuickAccess”,
\n“ShowThisPCOnDesktop”, # “HideThisPCFromDesktop”,
\n# “HideDesktopFromThisPC”, # “ShowDesktopInThisPC”,
\n# “HideDocumentsFromThisPC”, # “ShowDocumentsInThisPC”,
\n# “HideDownloadsFromThisPC”, # “ShowDownloadsInThisPC”,
\n# “HideMusicFromThisPC”, # “ShowMusicInThisPC”,
\n# “HidePicturesFromThisPC”, # “ShowPicturesInThisPC”,
\n# “HideVideosFromThisPC”, # “ShowVideosInThisPC”,
\n# “AddENKeyboard”, # “RemoveENKeyboard”,
\n# “EnableNumlock”, # “DisableNumlock”,<\/p>\n

### Application Tweaks ###
\n# “DisableOneDrive”, # “EnableOneDrive”,
\n# “UninstallOneDrive”, # “InstallOneDrive”,
\n# “UninstallMsftBloat”, # “InstallMsftBloat”,
\n“UninstallThirdPartyBloat”, # “InstallThirdPartyBloat”,
\n# “UninstallWindowsStore”, # “InstallWindowsStore”,
\n# “DisableConsumerApps”, # “EnableConsumerApps”,
\n# “DisableXboxFeatures”, # “EnableXboxFeatures”,
\n# “UninstallMediaPlayer”, # “InstallMediaPlayer”,
\n# “UninstallWorkFolders”, # “InstallWorkFolders”,
\n# “InstallLinuxSubsystem”, # “UninstallLinuxSubsystem”,
\n# “InstallHyperV”, # “UninstallHyperV”,
\n# “SetPhotoViewerAssociation”, # “UnsetPhotoViewerAssociation”,
\n# “AddPhotoViewerOpenWith”, # “RemovePhotoViewerOpenWith”,
\n# “DisableSearchAppInStore”, # “EnableSearchAppInStore”,
\n“DisableNewAppPrompt”, # “EnableNewAppPrompt”,
\n“EnableF8BootMenu”, # “DisableF8BootMenu”,
\n# “SetDEPOptOut”, # “SetDEPOptIn”,<\/p>\n

### Server Specific Tweaks ###
\n# “HideServerManagerOnLogin”, # “ShowServerManagerOnLogin”,
\n# “DisableShutdownTracker”, # “EnableShutdownTracker”,
\n# “DisablePasswordPolicy”, # “EnablePasswordPolicy”,
\n# “DisableCtrlAltDelLogin”, # “EnableCtrlAltDelLogin”,
\n# “DisableIEEnhancedSecurity”, # “EnableIEEnhancedSecurity”,<\/p>\n

# Disable Telemetry
\nFunction DisableTelemetry {
\nWrite-Host “Disabling Telemetry…”
\nSet-ItemProperty -Path “HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\DataCollection” -Name “AllowTelemetry” -Type DWord -Value 0
\nSet-ItemProperty -Path “HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows\\DataCollection” -Name “AllowTelemetry” -Type DWord -Value 0
\nSet-ItemProperty -Path “HKLM:\\SOFTWARE\\Wow6432Node\\Microsoft\\Windows\\CurrentVersion\\Policies\\DataCollection” -Name “AllowTelemetry” -Type DWord -Value 0
\n}<\/p>\n

# Disable Wi-Fi Sense
\nFunction DisableWiFiSense {
\nWrite-Host “Disabling Wi-Fi Sense…”
\nIf (!(Test-Path “HKLM:\\SOFTWARE\\Microsoft\\PolicyManager\\default\\WiFi\\AllowWiFiHotSpotReporting”)) {
\nNew-Item -Path “HKLM:\\SOFTWARE\\Microsoft\\PolicyManager\\default\\WiFi\\AllowWiFiHotSpotReporting” -Force | Out-Null
\n}
\nSet-ItemProperty -Path “HKLM:\\SOFTWARE\\Microsoft\\PolicyManager\\default\\WiFi\\AllowWiFiHotSpotReporting” -Name “Value” -Type DWord -Value 0
\nSet-ItemProperty -Path “HKLM:\\SOFTWARE\\Microsoft\\PolicyManager\\default\\WiFi\\AllowAutoConnectToWiFiSenseHotspots” -Name “Value” -Type DWord -Value 0
\n}<\/p>\n

# Disable SmartScreen Filter
\nFunction DisableSmartScreen {
\nWrite-Host “Disabling SmartScreen Filter…”
\nSet-ItemProperty -Path “HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer” -Name “SmartScreenEnabled” -Type String -Value “Off”
\nSet-ItemProperty -Path “HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\AppHost” -Name “EnableWebContentEvaluation” -Type DWord -Value 0
\n$edge = (Get-AppxPackage -AllUsers “Microsoft.MicrosoftEdge”).PackageFamilyName
\nIf (!(Test-Path “HKCU:\\SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\$edge\\MicrosoftEdge\\PhishingFilter”)) {
\nNew-Item -Path “HKCU:\\SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\$edge\\MicrosoftEdge\\PhishingFilter” -Force | Out-Null
\n}
\nSet-ItemProperty -Path “HKCU:\\SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\$edge\\MicrosoftEdge\\PhishingFilter” -Name “EnabledV9” -Type DWord -Value 0
\nSet-ItemProperty -Path “HKCU:\\SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\$edge\\MicrosoftEdge\\PhishingFilter” -Name “PreventOverride” -Type DWord -Value 0
\n}<\/p>\n

# Disable Web Search in Start Menu
\nFunction DisableWebSearch {
\nWrite-Host “Disabling Bing Search in Start Menu…”
\nSet-ItemProperty -Path “HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Search” -Name “BingSearchEnabled” -Type DWord -Value 0
\nIf (!(Test-Path “HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows\\Windows Search”)) {
\nNew-Item -Path “HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows\\Windows Search” -Force | Out-Null
\n}
\nSet-ItemProperty -Path “HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows\\Windows Search” -Name “DisableWebSearch” -Type DWord -Value 1
\n}<\/p>\n

# Disable Start Menu suggestions
\nFunction DisableStartSuggestions {
\nWrite-Host “Disabling Start Menu suggestions…”
\nSet-ItemProperty -Path “HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ContentDeliveryManager” -Name “SystemPaneSuggestionsEnabled” -Type DWord -Value 0
\nSet-ItemProperty -Path “HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ContentDeliveryManager” -Name “SilentInstalledAppsEnabled” -Type DWord -Value 0
\n}<\/p>\n

# Disable Location Tracking
\nFunction DisableLocationTracking {
\nWrite-Host “Disabling Location Tracking…”
\nSet-ItemProperty -Path “HKLM:\\SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Sensor\\Overrides\\{BFA794E4-F964-4FDB-90F6-51056BFE4B44}” -Name “SensorPermissionState” -Type DWord -Value 0
\nSet-ItemProperty -Path “HKLM:\\SYSTEM\\CurrentControlSet\\Services\\lfsvc\\Service\\Configuration” -Name “Status” -Type DWord -Value 0
\n}<\/p>\n

# Disable Feedback
\nFunction DisableFeedback {
\nWrite-Host “Disabling Feedback…”
\nIf (!(Test-Path “HKCU:\\SOFTWARE\\Microsoft\\Siuf\\Rules”)) {
\nNew-Item -Path “HKCU:\\SOFTWARE\\Microsoft\\Siuf\\Rules” -Force | Out-Null
\n}
\nSet-ItemProperty -Path “HKCU:\\SOFTWARE\\Microsoft\\Siuf\\Rules” -Name “NumberOfSIUFInPeriod” -Type DWord -Value 0
\n}<\/p>\n

# Disable Advertising ID
\nFunction DisableAdvertisingID {
\nWrite-Host “Disabling Advertising ID…”
\nIf (!(Test-Path “HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\AdvertisingInfo”)) {
\nNew-Item -Path “HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\AdvertisingInfo” | Out-Null
\n}
\nSet-ItemProperty -Path “HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\AdvertisingInfo” -Name “Enabled” -Type DWord -Value 0
\n}<\/p>\n

# Disable Cortana
\nFunction DisableCortana {
\nWrite-Host “Disabling Cortana…”
\nIf (!(Test-Path “HKCU:\\SOFTWARE\\Microsoft\\Personalization\\Settings”)) {
\nNew-Item -Path “HKCU:\\SOFTWARE\\Microsoft\\Personalization\\Settings” -Force | Out-Null
\n}
\nSet-ItemProperty -Path “HKCU:\\SOFTWARE\\Microsoft\\Personalization\\Settings” -Name “AcceptedPrivacyPolicy” -Type DWord -Value 0
\nIf (!(Test-Path “HKCU:\\SOFTWARE\\Microsoft\\InputPersonalization”)) {
\nNew-Item -Path “HKCU:\\SOFTWARE\\Microsoft\\InputPersonalization” -Force | Out-Null
\n}
\nSet-ItemProperty -Path “HKCU:\\SOFTWARE\\Microsoft\\InputPersonalization” -Name “RestrictImplicitTextCollection” -Type DWord -Value 1
\nSet-ItemProperty -Path “HKCU:\\SOFTWARE\\Microsoft\\InputPersonalization” -Name “RestrictImplicitInkCollection” -Type DWord -Value 1
\nIf (!(Test-Path “HKCU:\\SOFTWARE\\Microsoft\\InputPersonalization\\TrainedDataStore”)) {
\nNew-Item -Path “HKCU:\\SOFTWARE\\Microsoft\\InputPersonalization\\TrainedDataStore” -Force | Out-Null
\n}
\nSet-ItemProperty -Path “HKCU:\\SOFTWARE\\Microsoft\\InputPersonalization\\TrainedDataStore” -Name “HarvestContacts” -Type DWord -Value 0
\nIf (!(Test-Path “HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows\\Windows Search”)) {
\nNew-Item -Path “HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows\\Windows Search” -Force | Out-Null
\n}
\nSet-ItemProperty -Path “HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows\\Windows Search” -Name “AllowCortana” -Type DWord -Value 0
\n}<\/p>\n

# Disable Error reporting
\nFunction DisableErrorReporting {
\nWrite-Host “Disabling Error reporting…”
\nSet-ItemProperty -Path “HKLM:\\SOFTWARE\\Microsoft\\Windows\\Windows Error Reporting” -Name “Disabled” -Type DWord -Value 1
\n}<\/p>\n

# Enable Error reporting
\nFunction EnableErrorReporting {
\nWrite-Host “Enabling Error reporting…”
\nRemove-ItemProperty -Path “HKLM:\\SOFTWARE\\Microsoft\\Windows\\Windows Error Reporting” -Name “Disabled” -ErrorAction SilentlyContinue
\n}<\/p>\n

# Restrict Windows Update P2P only to local network
\nFunction RestrictUpdateP2P {
\nWrite-Host “Restricting Windows Update P2P only to local network…”
\nIf (!(Test-Path “HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\DeliveryOptimization\\Config”)) {
\nNew-Item -Path “HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\DeliveryOptimization\\Config” | Out-Null
\n}
\nSet-ItemProperty -Path “HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\DeliveryOptimization\\Config” -Name “DODownloadMode” -Type DWord -Value 1
\nIf (!(Test-Path “HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\DeliveryOptimization”)) {
\nNew-Item -Path “HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\DeliveryOptimization” | Out-Null
\n}
\nSet-ItemProperty -Path “HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\DeliveryOptimization” -Name “SystemSettingsDownloadMode” -Type DWord -Value 3
\n}<\/p>\n

# Remove AutoLogger file and restrict directory
\nFunction DisableAutoLogger {
\nWrite-Host “Removing AutoLogger file and restricting directory…”
\n$autoLoggerDir = “$env:PROGRAMDATA\\Microsoft\\Diagnosis\\ETLLogs\\AutoLogger”
\nIf (Test-Path “$autoLoggerDir\\AutoLogger-Diagtrack-Listener.etl”) {
\nRemove-Item “$autoLoggerDir\\AutoLogger-Diagtrack-Listener.etl”
\n}
\nicacls $autoLoggerDir \/deny SYSTEM:`(OI`)`(CI`)F | Out-Null
\n}<\/p>\n

# Stop and disable Diagnostics Tracking Service
\nFunction DisableDiagTrack {
\nWrite-Host “Stopping and disabling Diagnostics Tracking Service…”
\nStop-Service “DiagTrack” -WarningAction SilentlyContinue
\nSet-Service “DiagTrack” -StartupType Disabled
\n}<\/p>\n

# Stop and disable WAP Push Service
\nFunction DisableWAPPush {
\nWrite-Host “Stopping and disabling WAP Push Service…”
\nStop-Service “dmwappushservice” -WarningAction SilentlyContinue
\nSet-Service “dmwappushservice” -StartupType Disabled
\n}<\/p>\n

# Lower UAC level
\nFunction LowerUAC {
\nWrite-Host “Lowering UAC level…”
\nSet-ItemProperty -Path “HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System” -Name “ConsentPromptBehaviorAdmin” -Type DWord -Value 0
\nSet-ItemProperty -Path “HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System” -Name “PromptOnSecureDesktop” -Type DWord -Value 0
\n}<\/p>\n

# Enable sharing mapped drives between users
\nFunction EnableSharingMappedDrives {
\nWrite-Host “Enabling sharing mapped drives between users…”
\nSet-ItemProperty -Path “HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System” -Name “EnableLinkedConnections” -Type DWord -Value 1
\n}<\/p>\n

# Disable sharing mapped drives between users
\nFunction DisableSharingMappedDrives {
\nWrite-Host “Disabling sharing mapped drives between users…”
\nRemove-ItemProperty -Path “HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System” -Name “EnableLinkedConnections” -ErrorAction SilentlyContinue
\n}<\/p>\n

# Disable implicit administrative shares
\nFunction DisableAdminShares {
\nWrite-Host “Disabling implicit administrative shares…”
\nSet-ItemProperty -Path “HKLM:\\SYSTEM\\CurrentControlSet\\Services\\LanmanServer\\Parameters” -Name “AutoShareWks” -Type DWord -Value 0
\n}<\/p>\n

# Disable obsolete SMB 1.0 protocol
\nFunction DisableSMB1 {
\nWrite-Host “Disabling SMB 1.0 protocol…”
\nSet-SmbServerConfiguration -EnableSMB1Protocol $false -Force
\n}<\/p>\n

# Set current network profile to private (allow file sharing, device discovery, etc.)
\nFunction SetCurrentNetworkPrivate {
\nWrite-Host “Setting current network profile to private…”
\nSet-NetConnectionProfile -NetworkCategory Private
\n}<\/p>\n

# Set unknown networks profile to private (allow file sharing, device discovery, etc.)
\nFunction SetUnknownNetworksPrivate {
\nWrite-Host “Setting unknown networks profile to private…”
\nIf (!(Test-Path “HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows NT\\CurrentVersion\\NetworkList\\Signatures\\010103000F0000F0010000000F0000F0C967A3643C3AD745950DA7859209176EF5B87C875FA20DF21951640E807D7C24”)) {
\nNew-Item -Path “HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows NT\\CurrentVersion\\NetworkList\\Signatures\\010103000F0000F0010000000F0000F0C967A3643C3AD745950DA7859209176EF5B87C875FA20DF21951640E807D7C24” -Force | Out-Null
\n}
\nSet-ItemProperty -Path “HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows NT\\CurrentVersion\\NetworkList\\Signatures\\010103000F0000F0010000000F0000F0C967A3643C3AD745950DA7859209176EF5B87C875FA20DF21951640E807D7C24” -Name “Category” -Type DWord -Value 1
\n}<\/p>\n

# Disable Firewall
\nFunction DisableFirewall {
\nWrite-Host “Disabling Firewall…”
\nIf (!(Test-Path “HKLM:\\SOFTWARE\\Policies\\Microsoft\\WindowsFirewall\\StandardProfile”)) {
\nNew-Item -Path “HKLM:\\SOFTWARE\\Policies\\Microsoft\\WindowsFirewall\\StandardProfile” -Force | Out-Null
\n}
\nSet-ItemProperty -Path “HKLM:\\SOFTWARE\\Policies\\Microsoft\\WindowsFirewall\\StandardProfile” -Name “EnableFirewall” -Type DWord -Value 0
\n}<\/p>\n

# Disable Windows Defender
\nFunction DisableDefender {
\nWrite-Host “Disabling Windows Defender…”
\nIf (!(Test-Path “HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows Defender”)) {
\nNew-Item -Path “HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows Defender” -Force | Out-Null
\n}
\nSet-ItemProperty -Path “HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows Defender” -Name “DisableAntiSpyware” -Type DWord -Value 1
\nRemove-ItemProperty -Path “HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run” -Name “SecurityHealth” -ErrorAction SilentlyContinue
\n}<\/p>\n

# Enable Windows Defender
\nFunction EnableDefender {
\nWrite-Host “Enabling Windows Defender…”
\nRemove-ItemProperty -Path “HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows Defender” -Name “DisableAntiSpyware” -ErrorAction SilentlyContinue
\nSet-ItemProperty -Path “HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run” -Name “SecurityHealth” -Type ExpandString -Value “`”%ProgramFiles%\\Windows Defender\\MSASCuiL.exe`””
\n}<\/p>\n

# Disable offering of Malicious Software Removal Tool through Windows Update
\nFunction DisableUpdateMSRT {
\nWrite-Host “Disabling Malicious Software Removal Tool offering…”
\nIf (!(Test-Path “HKLM:\\SOFTWARE\\Policies\\Microsoft\\MRT”)) {
\nNew-Item -Path “HKLM:\\SOFTWARE\\Policies\\Microsoft\\MRT” | Out-Null
\n}
\nSet-ItemProperty -Path “HKLM:\\SOFTWARE\\Policies\\Microsoft\\MRT” -Name “DontOfferThroughWUAU” -Type DWord -Value 1
\n}<\/p>\n

# Disable offering of drivers through Windows Update
\nFunction DisableUpdateDriver {
\nWrite-Host “Disabling driver offering through Windows Update…”
\nSet-ItemProperty -Path “HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\DriverSearching” -Name “SearchOrderConfig” -Type DWord -Value 0
\nIf (!(Test-Path “HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate”)) {
\nNew-Item -Path “HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate” | Out-Null
\n}
\nSet-ItemProperty -Path “HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate” -Name “ExcludeWUDriversInQualityUpdate” -Type DWord -Value 1
\n}<\/p>\n

# Disable Windows Update automatic restart
\nFunction DisableUpdateRestart {
\nWrite-Host “Disabling Windows Update automatic restart…”
\nSet-ItemProperty -Path “HKLM:\\SOFTWARE\\Microsoft\\WindowsUpdate\\UX\\Settings” -Name “UxOption” -Type DWord -Value 1
\nIf (!(Test-Path “HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate\\AU”)) {
\nNew-Item -Path “HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate\\AU” -Force | Out-Null
\n}
\nSet-ItemProperty -Path “HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsUpdate\\AU” -Name “NoAutoRebootWithLoggedOnUsers” -Type DWord -Value 1
\n}<\/p>\n

# Stop and disable Home Groups services – Not applicable to Server
\nFunction DisableHomeGroups {
\nWrite-Host “Stopping and disabling Home Groups services…”
\nStop-Service “HomeGroupListener” -WarningAction SilentlyContinue
\nSet-Service “HomeGroupListener” -StartupType Disabled
\nStop-Service “HomeGroupProvider” -WarningAction SilentlyContinue
\nSet-Service “HomeGroupProvider” -StartupType Disabled
\n}<\/p>\n

# Enable and start Home Groups services – Not applicable to Server
\nFunction EnableHomeGroups {
\nWrite-Host “Starting and enabling Home Groups services…”
\nSet-Service “HomeGroupListener” -StartupType Manual
\nSet-Service “HomeGroupProvider” -StartupType Manual
\nStart-Service “HomeGroupProvider” -WarningAction SilentlyContinue
\n}<\/p>\n

# Disable Remote Assistance – Not applicable to Server (unless Remote Assistance is explicitly installed)
\nFunction DisableRemoteAssistance {
\nWrite-Host “Disabling Remote Assistance…”
\nSet-ItemProperty -Path “HKLM:\\SYSTEM\\CurrentControlSet\\Control\\Remote Assistance” -Name “fAllowToGetHelp” -Type DWord -Value 0
\n}<\/p>\n

# Disable Autoplay
\nFunction DisableAutoplay {
\nWrite-Host “Disabling Autoplay…”
\nSet-ItemProperty -Path “HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\AutoplayHandlers” -Name “DisableAutoplay” -Type DWord -Value 1
\n}<\/p>\n

# Disable Autorun for all drives
\nFunction DisableAutorun {
\nWrite-Host “Disabling Autorun for all drives…”
\nIf (!(Test-Path “HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer”)) {
\nNew-Item -Path “HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer” | Out-Null
\n}
\nSet-ItemProperty -Path “HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer” -Name “NoDriveTypeAutoRun” -Type DWord -Value 255
\n}<\/p>\n

# Disable scheduled defragmentation task
\nFunction DisableDefragmentation {
\nWrite-Host “Disabling scheduled defragmentation…”
\nDisable-ScheduledTask -TaskName “\\Microsoft\\Windows\\Defrag\\ScheduledDefrag” | Out-Null
\n}<\/p>\n

# Stop and disable Superfetch service – Not applicable to Server
\nFunction DisableSuperfetch {
\nWrite-Host “Stopping and disabling Superfetch service…”
\nStop-Service “SysMain” -WarningAction SilentlyContinue
\nSet-Service “SysMain” -StartupType Disabled
\n}<\/p>\n

# Start and enable Superfetch service – Not applicable to Server
\nFunction EnableSuperfetch {
\nWrite-Host “Starting and enabling Superfetch service…”
\nSet-Service “SysMain” -StartupType Automatic
\nStart-Service “SysMain” -WarningAction SilentlyContinue
\n}<\/p>\n

# Stop and disable Windows Search indexing service
\nFunction DisableIndexing {
\nWrite-Host “Stopping and disabling Windows Search indexing service…”
\nStop-Service “WSearch” -WarningAction SilentlyContinue
\nSet-Service “WSearch” -StartupType Disabled
\n}<\/p>\n

# Disable Action Center
\nFunction DisableActionCenter {
\nWrite-Host “Disabling Action Center…”
\nIf (!(Test-Path “HKCU:\\SOFTWARE\\Policies\\Microsoft\\Windows\\Explorer”)) {
\nNew-Item -Path “HKCU:\\SOFTWARE\\Policies\\Microsoft\\Windows\\Explorer” | Out-Null
\n}
\nSet-ItemProperty -Path “HKCU:\\SOFTWARE\\Policies\\Microsoft\\Windows\\Explorer” -Name “DisableNotificationCenter” -Type DWord -Value 1
\nSet-ItemProperty -Path “HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\PushNotifications” -Name “ToastEnabled” -Type DWord -Value 0
\n}<\/p>\n

# Enable Action Center
\nFunction EnableActionCenter {
\nWrite-Host “Enabling Action Center…”
\nRemove-ItemProperty -Path “HKCU:\\SOFTWARE\\Policies\\Microsoft\\Windows\\Explorer” -Name “DisableNotificationCenter” -ErrorAction SilentlyContinue
\nRemove-ItemProperty -Path “HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\PushNotifications” -Name “ToastEnabled” -ErrorAction SilentlyContinue
\n}<\/p>\n

# Disable Lock screen
\nFunction DisableLockScreen {
\nWrite-Host “Disabling Lock screen…”
\nIf (!(Test-Path “HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows\\Personalization”)) {
\nNew-Item -Path “HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows\\Personalization” | Out-Null
\n}
\nSet-ItemProperty -Path “HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows\\Personalization” -Name “NoLockScreen” -Type DWord -Value 1
\n}<\/p>\n

# Disable NumLock after startup
\nFunction DisableNumlock {
\nWrite-Host “Disabling NumLock after startup…”
\nIf (!(Test-Path “HKU:”)) {
\nNew-PSDrive -Name HKU -PSProvider Registry -Root HKEY_USERS | Out-Null
\n}
\nSet-ItemProperty -Path “HKU:\\.DEFAULT\\Control Panel\\Keyboard” -Name “InitialKeyboardIndicators” -Type DWord -Value 2147483648
\nAdd-Type -AssemblyName System.Windows.Forms
\nIf ([System.Windows.Forms.Control]::IsKeyLocked(‘NumLock’)) {
\n$wsh = New-Object -ComObject WScript.Shell
\n$wsh.SendKeys(‘{NUMLOCK}’)
\n}
\n}<\/p>\n

# Disable OneDrive
\nFunction DisableOneDrive {
\nWrite-Host “Disabling OneDrive…”
\nIf (!(Test-Path “HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows\\OneDrive”)) {
\nNew-Item -Path “HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows\\OneDrive” | Out-Null
\n}
\nSet-ItemProperty -Path “HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows\\OneDrive” -Name “DisableFileSyncNGSC” -Type DWord -Value 1
\n}<\/p>\n

# Uninstall default Microsoft applications
\nFunction UninstallMsftBloat {
\nWrite-Host “Uninstalling default Microsoft applications…”
\nGet-AppxPackage “Microsoft.3DBuilder” | Remove-AppxPackage
\nGet-AppxPackage “Microsoft.BingFinance” | Remove-AppxPackage
\nGet-AppxPackage “Microsoft.BingNews” | Remove-AppxPackage
\nGet-AppxPackage “Microsoft.BingSports” | Remove-AppxPackage
\nGet-AppxPackage “Microsoft.BingWeather” | Remove-AppxPackage
\nGet-AppxPackage “Microsoft.Getstarted” | Remove-AppxPackage
\nGet-AppxPackage “Microsoft.MicrosoftOfficeHub” | Remove-AppxPackage
\nGet-AppxPackage “Microsoft.MicrosoftSolitaireCollection” | Remove-AppxPackage
\nGet-AppxPackage “Microsoft.Office.OneNote” | Remove-AppxPackage
\nGet-AppxPackage “Microsoft.People” | Remove-AppxPackage
\nGet-AppxPackage “Microsoft.SkypeApp” | Remove-AppxPackage
\nGet-AppxPackage “Microsoft.Windows.Photos” | Remove-AppxPackage
\nGet-AppxPackage “Microsoft.WindowsAlarms” | Remove-AppxPackage
\nGet-AppxPackage “Microsoft.WindowsCamera” | Remove-AppxPackage
\nGet-AppxPackage “microsoft.windowscommunicationsapps” | Remove-AppxPackage
\nGet-AppxPackage “Microsoft.WindowsMaps” | Remove-AppxPackage
\nGet-AppxPackage “Microsoft.WindowsPhone” | Remove-AppxPackage
\nGet-AppxPackage “Microsoft.WindowsSoundRecorder” | Remove-AppxPackage
\nGet-AppxPackage “Microsoft.ZuneMusic” | Remove-AppxPackage
\nGet-AppxPackage “Microsoft.ZuneVideo” | Remove-AppxPackage
\nGet-AppxPackage “Microsoft.AppConnector” | Remove-AppxPackage
\nGet-AppxPackage “Microsoft.ConnectivityStore” | Remove-AppxPackage
\nGet-AppxPackage “Microsoft.Office.Sway” | Remove-AppxPackage
\nGet-AppxPackage “Microsoft.Messaging” | Remove-AppxPackage
\nGet-AppxPackage “Microsoft.CommsPhone” | Remove-AppxPackage
\nGet-AppxPackage “Microsoft.MicrosoftStickyNotes” | Remove-AppxPackage
\nGet-AppxPackage “Microsoft.OneConnect” | Remove-AppxPackage
\nGet-AppxPackage “Microsoft.WindowsFeedbackHub” | Remove-AppxPackage
\nGet-AppxPackage “Microsoft.MinecraftUWP” | Remove-AppxPackage
\nGet-AppxPackage “Microsoft.MicrosoftPowerBIForWindows” | Remove-AppxPackage
\nGet-AppxPackage “Microsoft.NetworkSpeedTest” | Remove-AppxPackage
\nGet-AppxPackage “Microsoft.MSPaint” | Remove-AppxPackage
\nGet-AppxPackage “Microsoft.Microsoft3DViewer” | Remove-AppxPackage
\nGet-AppxPackage “Microsoft.RemoteDesktop” | Remove-AppxPackage
\n}<\/p>\n

# Install default Microsoft applications
\nFunction InstallMsftBloat {
\nWrite-Host “Installing default Microsoft applications…”
\nGet-AppxPackage -AllUsers “Microsoft.3DBuilder” | ForEach {Add-AppxPackage -DisableDevelopmentMode -Register “$($_.InstallLocation)\\AppXManifest.xml”}
\nGet-AppxPackage -AllUsers “Microsoft.BingFinance” | ForEach {Add-AppxPackage -DisableDevelopmentMode -Register “$($_.InstallLocation)\\AppXManifest.xml”}
\nGet-AppxPackage -AllUsers “Microsoft.BingNews” | ForEach {Add-AppxPackage -DisableDevelopmentMode -Register “$($_.InstallLocation)\\AppXManifest.xml”}
\nGet-AppxPackage -AllUsers “Microsoft.BingSports” | ForEach {Add-AppxPackage -DisableDevelopmentMode -Register “$($_.InstallLocation)\\AppXManifest.xml”}
\nGet-AppxPackage -AllUsers “Microsoft.BingWeather” | ForEach {Add-AppxPackage -DisableDevelopmentMode -Register “$($_.InstallLocation)\\AppXManifest.xml”}
\nGet-AppxPackage -AllUsers “Microsoft.Getstarted” | ForEach {Add-AppxPackage -DisableDevelopmentMode -Register “$($_.InstallLocation)\\AppXManifest.xml”}
\nGet-AppxPackage -AllUsers “Microsoft.MicrosoftOfficeHub” | ForEach {Add-AppxPackage -DisableDevelopmentMode -Register “$($_.InstallLocation)\\AppXManifest.xml”}
\nGet-AppxPackage -AllUsers “Microsoft.MicrosoftSolitaireCollection” | ForEach {Add-AppxPackage -DisableDevelopmentMode -Register “$($_.InstallLocation)\\AppXManifest.xml”}
\nGet-AppxPackage -AllUsers “Microsoft.Office.OneNote” | ForEach {Add-AppxPackage -DisableDevelopmentMode -Register “$($_.InstallLocation)\\AppXManifest.xml”}
\nGet-AppxPackage -AllUsers “Microsoft.People” | ForEach {Add-AppxPackage -DisableDevelopmentMode -Register “$($_.InstallLocation)\\AppXManifest.xml”}
\nGet-AppxPackage -AllUsers “Microsoft.SkypeApp” | ForEach {Add-AppxPackage -DisableDevelopmentMode -Register “$($_.InstallLocation)\\AppXManifest.xml”}
\nGet-AppxPackage -AllUsers “Microsoft.Windows.Photos” | ForEach {Add-AppxPackage -DisableDevelopmentMode -Register “$($_.InstallLocation)\\AppXManifest.xml”}
\nGet-AppxPackage -AllUsers “Microsoft.WindowsAlarms” | ForEach {Add-AppxPackage -DisableDevelopmentMode -Register “$($_.InstallLocation)\\AppXManifest.xml”}
\nGet-AppxPackage -AllUsers “Microsoft.WindowsCamera” | ForEach {Add-AppxPackage -DisableDevelopmentMode -Register “$($_.InstallLocation)\\AppXManifest.xml”}
\nGet-AppxPackage -AllUsers “Microsoft.windowscommunicationsapps” | ForEach {Add-AppxPackage -DisableDevelopmentMode -Register “$($_.InstallLocation)\\AppXManifest.xml”}
\nGet-AppxPackage -AllUsers “Microsoft.WindowsMaps” | ForEach {Add-AppxPackage -DisableDevelopmentMode -Register “$($_.InstallLocation)\\AppXManifest.xml”}
\nGet-AppxPackage -AllUsers “Microsoft.WindowsPhone” | ForEach {Add-AppxPackage -DisableDevelopmentMode -Register “$($_.InstallLocation)\\AppXManifest.xml”}
\nGet-AppxPackage -AllUsers “Microsoft.WindowsSoundRecorder” | ForEach {Add-AppxPackage -DisableDevelopmentMode -Register “$($_.InstallLocation)\\AppXManifest.xml”}
\nGet-AppxPackage -AllUsers “Microsoft.ZuneMusic” | ForEach {Add-AppxPackage -DisableDevelopmentMode -Register “$($_.InstallLocation)\\AppXManifest.xml”}
\nGet-AppxPackage -AllUsers “Microsoft.ZuneVideo” | ForEach {Add-AppxPackage -DisableDevelopmentMode -Register “$($_.InstallLocation)\\AppXManifest.xml”}
\nGet-AppxPackage -AllUsers “Microsoft.AppConnector” | ForEach {Add-AppxPackage -DisableDevelopmentMode -Register “$($_.InstallLocation)\\AppXManifest.xml”}
\nGet-AppxPackage -AllUsers “Microsoft.ConnectivityStore” | ForEach {Add-AppxPackage -DisableDevelopmentMode -Register “$($_.InstallLocation)\\AppXManifest.xml”}
\nGet-AppxPackage -AllUsers “Microsoft.Office.Sway” | ForEach {Add-AppxPackage -DisableDevelopmentMode -Register “$($_.InstallLocation)\\AppXManifest.xml”}
\nGet-AppxPackage -AllUsers “Microsoft.Messaging” | ForEach {Add-AppxPackage -DisableDevelopmentMode -Register “$($_.InstallLocation)\\AppXManifest.xml”}
\nGet-AppxPackage -AllUsers “Microsoft.CommsPhone” | ForEach {Add-AppxPackage -DisableDevelopmentMode -Register “$($_.InstallLocation)\\AppXManifest.xml”}
\nGet-AppxPackage -AllUsers “Microsoft.MicrosoftStickyNotes” | ForEach {Add-AppxPackage -DisableDevelopmentMode -Register “$($_.InstallLocation)\\AppXManifest.xml”}
\nGet-AppxPackage -AllUsers “Microsoft.OneConnect” | ForEach {Add-AppxPackage -DisableDevelopmentMode -Register “$($_.InstallLocation)\\AppXManifest.xml”}
\nGet-AppxPackage -AllUsers “Microsoft.WindowsFeedbackHub” | ForEach {Add-AppxPackage -DisableDevelopmentMode -Register “$($_.InstallLocation)\\AppXManifest.xml”}
\nGet-AppxPackage -AllUsers “Microsoft.MinecraftUWP” | ForEach {Add-AppxPackage -DisableDevelopmentMode -Register “$($_.InstallLocation)\\AppXManifest.xml”}
\nGet-AppxPackage -AllUsers “Microsoft.MicrosoftPowerBIForWindows” | ForEach {Add-AppxPackage -DisableDevelopmentMode -Register “$($_.InstallLocation)\\AppXManifest.xml”}
\nGet-AppxPackage -AllUsers “Microsoft.NetworkSpeedTest” | ForEach {Add-AppxPackage -DisableDevelopmentMode -Register “$($_.InstallLocation)\\AppXManifest.xml”}
\nGet-AppxPackage -AllUsers “Microsoft.MSPaint” | ForEach {Add-AppxPackage -DisableDevelopmentMode -Register “$($_.InstallLocation)\\AppXManifest.xml”}
\nGet-AppxPackage -AllUsers “Microsoft.Microsoft3DViewer” | ForEach {Add-AppxPackage -DisableDevelopmentMode -Register “$($_.InstallLocation)\\AppXManifest.xml”}
\nGet-AppxPackage -AllUsers “Microsoft.RemoteDesktop” | ForEach {Add-AppxPackage -DisableDevelopmentMode -Register “$($_.InstallLocation)\\AppXManifest.xml”}
\n}<\/p>\n

Get-AppxPackage “9E2F88E3.Twitter” | Remove-AppxPackage
\nGet-AppxPackage “king.com.CandyCrushSodaSaga” | Remove-AppxPackage
\nGet-AppxPackage “4DF9E0F8.Netflix” | Remove-AppxPackage
\nGet-AppxPackage “Drawboard.DrawboardPDF” | Remove-AppxPackage
\nGet-AppxPackage “D52A8D61.FarmVille2CountryEscape” | Remove-AppxPackage
\nGet-AppxPackage “GAMELOFTSA.Asphalt8Airborne” | Remove-AppxPackage
\nGet-AppxPackage “flaregamesGmbH.RoyalRevolt2” | Remove-AppxPackage
\nGet-AppxPackage “AdobeSystemsIncorporated.AdobePhotoshopExpress” | Remove-AppxPackage
\nGet-AppxPackage “ActiproSoftwareLLC.562882FEEB491” | Remove-AppxPackage
\nGet-AppxPackage “D5EA27B7.Duolingo-LearnLanguagesforFree” | Remove-AppxPackage
\nGet-AppxPackage “Facebook.Facebook” | Remove-AppxPackage
\nGet-AppxPackage “46928bounde.EclipseManager” | Remove-AppxPackage
\nGet-AppxPackage “A278AB0D.MarchofEmpires” | Remove-AppxPackage
\n}<\/p>\n

# Install default third party applications
\nFunction InstallThirdPartyBloat {
\nGet-AppxPackage -AllUsers “9E2F88E3.Twitter” | ForEach {Add-AppxPackage -DisableDevelopmentMode -Register “$($_.InstallLocation)\\AppXManifest.xml”}
\nGet-AppxPackage -AllUsers “king.com.CandyCrushSodaSaga” | ForEach {Add-AppxPackage -DisableDevelopmentMode -Register “$($_.InstallLocation)\\AppXManifest.xml”}
\nGet-AppxPackage -AllUsers “4DF9E0F8.Netflix” | ForEach {Add-AppxPackage -DisableDevelopmentMode -Register “$($_.InstallLocation)\\AppXManifest.xml”}
\nGet-AppxPackage -AllUsers “Drawboard.DrawboardPDF” | ForEach {Add-AppxPackage -DisableDevelopmentMode -Register “$($_.InstallLocation)\\AppXManifest.xml”}
\nGet-AppxPackage -AllUsers “D52A8D61.FarmVille2CountryEscape” | ForEach {Add-AppxPackage -DisableDevelopmentMode -Register “$($_.InstallLocation)\\AppXManifest.xml”}
\nGet-AppxPackage -AllUsers “GAMELOFTSA.Asphalt8Airborne” | ForEach {Add-AppxPackage -DisableDevelopmentMode -Register “$($_.InstallLocation)\\AppXManifest.xml”}
\nGet-AppxPackage -AllUsers “flaregamesGmbH.RoyalRevolt2” | ForEach {Add-AppxPackage -DisableDevelopmentMode -Register “$($_.InstallLocation)\\AppXManifest.xml”}
\nGet-AppxPackage -AllUsers “AdobeSystemsIncorporated.AdobePhotoshopExpress” | ForEach {Add-AppxPackage -DisableDevelopmentMode -Register “$($_.InstallLocation)\\AppXManifest.xml”}
\nGet-AppxPackage -AllUsers “ActiproSoftwareLLC.562882FEEB491” | ForEach {Add-AppxPackage -DisableDevelopmentMode -Register “$($_.InstallLocation)\\AppXManifest.xml”}
\nGet-AppxPackage -AllUsers “D5EA27B7.Duolingo-LearnLanguagesforFree” | ForEach {Add-AppxPackage -DisableDevelopmentMode -Register “$($_.InstallLocation)\\AppXManifest.xml”}
\nGet-AppxPackage -AllUsers “Facebook.Facebook” | ForEach {Add-AppxPackage -DisableDevelopmentMode -Register “$($_.InstallLocation)\\AppXManifest.xml”}
\nGet-AppxPackage -AllUsers “46928bounde.EclipseManager” | ForEach {Add-AppxPackage -DisableDevelopmentMode -Register “$($_.InstallLocation)\\AppXManifest.xml”}
\nGet-AppxPackage -AllUsers “A278AB0D.MarchofEmpires” | ForEach {Add-AppxPackage -DisableDevelopmentMode -Register “$($_.InstallLocation)\\AppXManifest.xml”}
\n}<\/p>\n

# Uninstall Windows Store
\nFunction UninstallWindowsStore {
\nWrite-Host “Uninstalling Windows Store…”
\nGet-AppxPackage “Microsoft.DesktopAppInstaller” | Remove-AppxPackage
\nGet-AppxPackage “Microsoft.WindowsStore” | Remove-AppxPackage
\n}<\/p>\n

# Install Windows Store
\nFunction InstallWindowsStore {
\nWrite-Host “Installing Windows Store…”
\nGet-AppxPackage -AllUsers “Microsoft.DesktopAppInstaller” | ForEach {Add-AppxPackage -DisableDevelopmentMode -Register “$($_.InstallLocation)\\AppXManifest.xml”}
\nGet-AppxPackage -AllUsers “Microsoft.WindowsStore” | ForEach {Add-AppxPackage -DisableDevelopmentMode -Register “$($_.InstallLocation)\\AppXManifest.xml”}
\n}<\/p>\n

# Disable installation of consumer experience applications
\nFunction DisableConsumerApps {
\nWrite-Host “Disabling installation of consumer experience applications…”
\nIf (!(Test-Path “HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows\\CloudContent”)) {
\nNew-Item -Path “HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows\\CloudContent” -Force | Out-Null
\n}
\nSet-ItemProperty -Path “HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows\\CloudContent” -Name “DisableWindowsConsumerFeatures” -Type DWord -Value 1
\n}<\/p>\n

# Enable installation of consumer experience applications
\nFunction EnableConsumerApps {
\nWrite-Host “Enabling installation of consumer experience applications…”
\nRemove-ItemProperty -Path “HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows\\CloudContent” -Name “DisableWindowsConsumerFeatures” -ErrorAction SilentlyContinue
\n}<\/p>\n

# Disable Xbox features
\nFunction DisableXboxFeatures {
\nWrite-Host “Disabling Xbox features…”
\nGet-AppxPackage “Microsoft.XboxApp” | Remove-AppxPackage
\nGet-AppxPackage “Microsoft.XboxIdentityProvider” | Remove-AppxPackage
\nGet-AppxPackage “Microsoft.XboxSpeechToTextOverlay” | Remove-AppxPackage
\nGet-AppxPackage “Microsoft.XboxGameOverlay” | Remove-AppxPackage
\nSet-ItemProperty -Path “HKCU:\\System\\GameConfigStore” -Name “GameDVR_Enabled” -Type DWord -Value 0
\nIf (!(Test-Path “HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows\\GameDVR”)) {
\nNew-Item -Path “HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows\\GameDVR” | Out-Null
\n}
\nSet-ItemProperty -Path “HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows\\GameDVR” -Name “AllowGameDVR” -Type DWord -Value 0
\n}<\/p>\n

# Enable Xbox features
\nFunction EnableXboxFeatures {
\nWrite-Host “Enabling Xbox features…”
\nGet-AppxPackage -AllUsers “Microsoft.XboxApp” | ForEach {Add-AppxPackage -DisableDevelopmentMode -Register “$($_.InstallLocation)\\AppXManifest.xml”}
\nGet-AppxPackage -AllUsers “Microsoft.XboxIdentityProvider” | ForEach {Add-AppxPackage -DisableDevelopmentMode -Register “$($_.InstallLocation)\\AppXManifest.xml”}
\nGet-AppxPackage -AllUsers “Microsoft.XboxSpeechToTextOverlay” | ForEach {Add-AppxPackage -DisableDevelopmentMode -Register “$($_.InstallLocation)\\AppXManifest.xml”}
\nGet-AppxPackage -AllUsers “Microsoft.XboxGameOverlay” | ForEach {Add-AppxPackage -DisableDevelopmentMode -Register “$($_.InstallLocation)\\AppXManifest.xml”}
\nSet-ItemProperty -Path “HKCU:\\System\\GameConfigStore” -Name “GameDVR_Enabled” -Type DWord -Value 1
\nRemove-ItemProperty -Path “HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows\\GameDVR” -Name “AllowGameDVR” -ErrorAction SilentlyContinue
\n}<\/p>\n

# Uninstall Windows Media Player
\nFunction UninstallMediaPlayer {
\nWrite-Host “Uninstalling Windows Media Player…”
\nDisable-WindowsOptionalFeature -Online -FeatureName “WindowsMediaPlayer” -NoRestart -WarningAction SilentlyContinue | Out-Null
\n}<\/p>\n

# Uninstall Work Folders Client – Not applicable to Server
\nFunction UninstallWorkFolders {
\nWrite-Host “Uninstalling Work Folders Client…”
\nDisable-WindowsOptionalFeature -Online -FeatureName “WorkFolders-Client” -NoRestart -WarningAction SilentlyContinue | Out-Null
\n}<\/p>\n

# Install Linux Subsystem – Applicable to RS1 or newer, not applicable to Server yet
\nFunction InstallLinuxSubsystem {
\nWrite-Host “Installing Linux Subsystem…”
\nSet-ItemProperty -Path “HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\AppModelUnlock” -Name “AllowDevelopmentWithoutDevLicense” -Type DWord -Value 1
\nSet-ItemProperty -Path “HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\AppModelUnlock” -Name “AllowAllTrustedApps” -Type DWord -Value 1
\nEnable-WindowsOptionalFeature -Online -FeatureName “Microsoft-Windows-Subsystem-Linux” -NoRestart -WarningAction SilentlyContinue | Out-Null
\n}<\/p>\n

# Uninstall Linux Subsystem – Applicable to RS1 or newer, not applicable to Server yet
\nFunction UninstallLinuxSubsystem {
\nWrite-Host “Uninstalling Linux Subsystem…”
\nSet-ItemProperty -Path “HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\AppModelUnlock” -Name “AllowDevelopmentWithoutDevLicense” -Type DWord -Value 0
\nSet-ItemProperty -Path “HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\AppModelUnlock” -Name “AllowAllTrustedApps” -Type DWord -Value 0
\nDisable-WindowsOptionalFeature -Online -FeatureName “Microsoft-Windows-Subsystem-Linux” -NoRestart -WarningAction SilentlyContinue | Out-Null
\n}<\/p>\n

# Set Photo Viewer association for bmp, gif, jpg, png and tif
\nFunction SetPhotoViewerAssociation {
\nWrite-Host “Setting Photo Viewer association for bmp, gif, jpg, png and tif…”
\nIf (!(Test-Path “HKCR:”)) {
\nNew-PSDrive -Name HKCR -PSProvider Registry -Root HKEY_CLASSES_ROOT | Out-Null
\n}
\nForEach ($type in @(“Paint.Picture”, “giffile”, “jpegfile”, “pngfile”)) {
\nNew-Item -Path $(“HKCR:\\$type\\shell\\open”) -Force | Out-Null
\nNew-Item -Path $(“HKCR:\\$type\\shell\\open\\command”) | Out-Null
\nSet-ItemProperty -Path $(“HKCR:\\$type\\shell\\open”) -Name “MuiVerb” -Type ExpandString -Value “@%ProgramFiles%\\Windows Photo Viewer\\photoviewer.dll,-3043”
\nSet-ItemProperty -Path $(“HKCR:\\$type\\shell\\open\\command”) -Name “(Default)” -Type ExpandString -Value “%SystemRoot%\\System32\\rundll32.exe `”%ProgramFiles%\\Windows Photo Viewer\\PhotoViewer.dll`”, ImageView_Fullscreen %1″
\n}
\n}<\/p>\n

# Unset Photo Viewer association for bmp, gif, jpg, png and tif
\nFunction UnsetPhotoViewerAssociation {
\nWrite-Host “Unsetting Photo Viewer association for bmp, gif, jpg, png and tif…”
\nIf (!(Test-Path “HKCR:”)) {
\nNew-PSDrive -Name HKCR -PSProvider Registry -Root HKEY_CLASSES_ROOT | Out-Null
\n}
\nRemove-Item -Path “HKCR:\\Paint.Picture\\shell\\open” -Recurse -ErrorAction SilentlyContinue
\nRemove-ItemProperty -Path “HKCR:\\giffile\\shell\\open” -Name “MuiVerb” -ErrorAction SilentlyContinue
\nSet-ItemProperty -Path “HKCR:\\giffile\\shell\\open” -Name “CommandId” -Type String -Value “IE.File”
\nSet-ItemProperty -Path “HKCR:\\giffile\\shell\\open\\command” -Name “(Default)” -Type String -Value “`”$env:SystemDrive\\Program Files\\Internet Explorer\\iexplore.exe`” %1″
\nSet-ItemProperty -Path “HKCR:\\giffile\\shell\\open\\command” -Name “DelegateExecute” -Type String -Value “{17FE9752-0B5A-4665-84CD-569794602F5C}”
\nRemove-Item -Path “HKCR:\\jpegfile\\shell\\open” -Recurse -ErrorAction SilentlyContinue
\nRemove-Item -Path “HKCR:\\pngfile\\shell\\open” -Recurse -ErrorAction SilentlyContinue
\n}<\/p>\n

# Add Photo Viewer to “Open with…”
\nFunction AddPhotoViewerOpenWith {
\nWrite-Host “Adding Photo Viewer to `”Open with…`””
\nIf (!(Test-Path “HKCR:”)) {
\nNew-PSDrive -Name HKCR -PSProvider Registry -Root HKEY_CLASSES_ROOT | Out-Null
\n}
\nNew-Item -Path “HKCR:\\Applications\\photoviewer.dll\\shell\\open\\command” -Force | Out-Null
\nNew-Item -Path “HKCR:\\Applications\\photoviewer.dll\\shell\\open\\DropTarget” -Force | Out-Null
\nSet-ItemProperty -Path “HKCR:\\Applications\\photoviewer.dll\\shell\\open” -Name “MuiVerb” -Type String -Value “@photoviewer.dll,-3043”
\nSet-ItemProperty -Path “HKCR:\\Applications\\photoviewer.dll\\shell\\open\\command” -Name “(Default)” -Type ExpandString -Value “%SystemRoot%\\System32\\rundll32.exe `”%ProgramFiles%\\Windows Photo Viewer\\PhotoViewer.dll`”, ImageView_Fullscreen %1″
\nSet-ItemProperty -Path “HKCR:\\Applications\\photoviewer.dll\\shell\\open\\DropTarget” -Name “Clsid” -Type String -Value “{FFE2A43C-56B9-4bf5-9A79-CC6D4285608A}”
\n}<\/p>\n

# Remove Photo Viewer from “Open with…”
\nFunction RemovePhotoViewerOpenWith {
\nWrite-Host “Removing Photo Viewer from `”Open with…`””
\nIf (!(Test-Path “HKCR:”)) {
\nNew-PSDrive -Name HKCR -PSProvider Registry -Root HKEY_CLASSES_ROOT | Out-Null
\n}
\nRemove-Item -Path “HKCR:\\Applications\\photoviewer.dll\\shell\\open” -Recurse -ErrorAction SilentlyContinue
\n}<\/p>\n

# Enable F8 boot menu options
\nFunction EnableF8BootMenu {
\nWrite-Host “Enabling F8 boot menu options…”
\nbcdedit \/set `{current`} bootmenupolicy Legacy | Out-Null
\n}<\/p>\n

# Disable F8 boot menu options
\nFunction DisableF8BootMenu {
\nWrite-Host “Disabling F8 boot menu options…”
\nbcdedit \/set `{current`} bootmenupolicy Standard | Out-Null
\n}<\/p>\n

# Set Data Execution Prevention (DEP) policy to OptOut
\nFunction SetDEPOptOut {
\nWrite-Host “Setting Data Execution Prevention (DEP) policy to OptOut…”
\nbcdedit \/set `{current`} nx OptOut | Out-Null
\n}<\/p>\n

# Set Data Execution Prevention (DEP) policy to OptIn
\nFunction SetDEPOptIn {
\nWrite-Host “Setting Data Execution Prevention (DEP) policy to OptIn…”
\nbcdedit \/set `{current`} nx OptIn | Out-Null
\n}<\/p>\n

##########
\n# Server specific Tweaks
\n##########<\/p>\n

# Hide Server Manager after login
\nFunction HideServerManagerOnLogin {
\nWrite-Host “Hiding Server Manager after login…”
\nIf (!(Test-Path “HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows\\Server\\ServerManager”)) {
\nNew-Item -Path “HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows\\Server\\ServerManager” -Force | Out-Null
\n}
\nSet-ItemProperty -Path “HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows\\Server\\ServerManager” -Name “DoNotOpenAtLogon” -Type DWord -Value 1
\n}<\/p>\n

# Hide Server Manager after login
\nFunction ShowServerManagerOnLogin {
\nWrite-Host “Showing Server Manager after login…”
\nRemove-ItemProperty -Path “HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows\\Server\\ServerManager” -Name “DoNotOpenAtLogon” -ErrorAction SilentlyContinue
\n}<\/p>\n

# Disable Shutdown Event Tracker
\nFunction DisableShutdownTracker {
\nWrite-Host “Disabling Shutdown Event Tracker…”
\nIf (!(Test-Path “HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows NT\\Reliability”)) {
\nNew-Item -Path “HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows NT\\Reliability” -Force | Out-Null
\n}
\nSet-ItemProperty -Path “HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows NT\\Reliability” -Name “ShutdownReasonOn” -Type DWord -Value 0
\n}<\/p>\n

# Enable password complexity and maximum age requirements
\nFunction EnablePasswordPolicy {
\nWrite-Host “Enabling password complexity and maximum age requirements…”
\n$tmpfile = New-TemporaryFile
\nsecedit \/export \/cfg $tmpfile \/quiet
\n(Get-Content $tmpfile).Replace(“PasswordComplexity = 0”, “PasswordComplexity = 1”).Replace(“MaximumPasswordAge = -1”, “MaximumPasswordAge = 42”) | Out-File $tmpfile
\nsecedit \/configure \/db “$env:SYSTEMROOT\\security\\database\\local.sdb” \/cfg $tmpfile \/areas SECURITYPOLICY | Out-Null
\nRemove-Item -Path $tmpfile
\n}<\/p>\n

# Disable Ctrl+Alt+Del requirement before login
\nFunction DisableCtrlAltDelLogin {
\nWrite-Host “Disabling Ctrl+Alt+Del requirement before login…”
\nSet-ItemProperty -Path “HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System” -Name “DisableCAD” -Type DWord -Value 1
\n}<\/p>\n

# Enable Ctrl+Alt+Del requirement before login
\nFunction EnableCtrlAltDelLogin {
\nWrite-Host “Enabling Ctrl+Alt+Del requirement before login…”
\nSet-ItemProperty -Path “HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System” -Name “DisableCAD” -Type DWord -Value 0
\n}<\/p>\n

# Disable Internet Explorer Enhanced Security Configuration (IE ESC)
\nFunction DisableIEEnhancedSecurity {
\nWrite-Host “Disabling Internet Explorer Enhanced Security Configuration (IE ESC)…”
\nSet-ItemProperty -Path “HKLM:\\SOFTWARE\\Microsoft\\Active Setup\\Installed Components\\{A509B1A7-37EF-4b3f-8CFC-4F3A74704073}” -Name “IsInstalled” -Type DWord -Value 0
\nSet-ItemProperty -Path “HKLM:\\SOFTWARE\\Microsoft\\Active Setup\\Installed Components\\{A509B1A8-37EF-4b3f-8CFC-4F3A74704073}” -Name “IsInstalled” -Type DWord -Value 0
\n}<\/p>\n","protected":false},"excerpt":{"rendered":"

Tl;dr – \u00a0Download Powershell script .Open Powershell as admin.Navigate to your download directory. Mark it as executable with\u00a0 ‘ Set-ExecutionPolicy RemoteSigned\u00a0 ‘ and execute the script. “DisableTelemetry”, # “EnableTelemetry”, “DisableWiFiSense”, # “EnableWiFiSense”, # “DisableSmartScreen”, # “EnableSmartScreen”, “DisableWebSearch”, # “EnableWebSearch”, “DisableStartSuggestions”, # “EnableStartSuggestions”, “DisableLocationTracking”, # “EnableLocationTracking”, “DisableFeedback”, # “EnableFeedback”, “DisableAdvertisingID”, # “EnableAdvertisingID”, “DisableCortana”, # “EnableCortana”, “DisableErrorReporting”, …<\/p>\n

Continue reading ‘Privacy …please’ »<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"aside","meta":{"footnotes":""},"categories":[5],"tags":[],"class_list":["post-124","post","type-post","status-publish","format-aside","hentry","category-windows","post_format-post-format-aside"],"_links":{"self":[{"href":"https:\/\/d1m0.com\/index.php?rest_route=\/wp\/v2\/posts\/124","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/d1m0.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/d1m0.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/d1m0.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/d1m0.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=124"}],"version-history":[{"count":10,"href":"https:\/\/d1m0.com\/index.php?rest_route=\/wp\/v2\/posts\/124\/revisions"}],"predecessor-version":[{"id":300,"href":"https:\/\/d1m0.com\/index.php?rest_route=\/wp\/v2\/posts\/124\/revisions\/300"}],"wp:attachment":[{"href":"https:\/\/d1m0.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=124"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/d1m0.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=124"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/d1m0.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=124"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}