168 lines
13 KiB
Batchfile
168 lines
13 KiB
Batchfile
@echo off
|
|
|
|
echo ####### %0 #######
|
|
|
|
rem BeforeRebootCleanup.bat:
|
|
|
|
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer" /v SmartScreenEnabled /t REG_SZ /d "Off" /f
|
|
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\AppHost" /v "EnableWebContentEvaluation" /t REG_DWORD /d "0" /f
|
|
reg add "HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\PhishingFilter" /v "EnabledV9" /t REG_DWORD /d "0" /f
|
|
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender" /v DisableAntiSpyware /t REG_DWORD /d 1 /f
|
|
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Spynet" /v SpyNetReporting /t REG_DWORD /d 0 /f
|
|
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Spynet" /v SubmitSamplesConsent /t REG_DWORD /d 2 /f
|
|
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Spynet" /v DontReportInfectionInformation /t REG_DWORD /d 1 /f
|
|
sc delete PushToInstall
|
|
sc delete XblAuthManager
|
|
sc delete XblGameSave
|
|
sc delete XboxNetApiSvc
|
|
sc delete XboxGipSvc
|
|
reg delete "HKLM\SYSTEM\CurrentControlSet\Services\xbgm" /f
|
|
schtasks /Change /TN "Microsoft\XblGameSave\XblGameSaveTask" /disable
|
|
schtasks /Change /TN "Microsoft\XblGameSave\XblGameSaveTaskLogon" /disable
|
|
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\GameDVR" /v AllowGameDVR /t REG_DWORD /d 0 /f
|
|
sc delete MapsBroker
|
|
sc delete lfsvc
|
|
schtasks /Change /TN "\Microsoft\Windows\Maps\MapsUpdateTask" /disable
|
|
schtasks /Change /TN "\Microsoft\Windows\Maps\MapsToastTask" /disable
|
|
install_wim_tweak /o /c Microsoft-Windows-Internet-Browser /r
|
|
install_wim_tweak /o /c Adobe-Flash /r
|
|
install_wim_tweak /o /c Microsoft-Windows-ContactSupport /r
|
|
reg delete "HKLM\SYSTEM\CurrentControlSet\Services\Sense" /f
|
|
reg delete "HKLM\SYSTEM\CurrentControlSet\Services\SecurityHealthService" /f
|
|
reg add "HKLM\SOFTWARE\Policies\Microsoft\MRT" /v "DontReportInfectionInformation" /t REG_DWORD /d 1 /f
|
|
reg add "HKLM\SOFTWARE\Policies\Microsoft\MRT" /v "DontOfferThroughWUAU" /t REG_DWORD /d 1 /f
|
|
reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "SecurityHealth" /f
|
|
reg delete "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run" /v "SecurityHealth" /f
|
|
reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\SecHealthUI.exe" /v Debugger /t REG_SZ /d "%windir%\System32\taskkill.exe" /f
|
|
install_wim_tweak /o /c Windows-Defender /r
|
|
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings\Windows.SystemToast.SecurityAndMaintenance" /v "Enabled" /t REG_DWORD /d 0 /f
|
|
install_wim_tweak /o /c Microsoft-Windows-ContentDeliveryManager /r
|
|
install_wim_tweak /o /c Microsoft-Windows-Store /r
|
|
reg add "HKLM\Software\Policies\Microsoft\WindowsStore" /v RemoveWindowsStore /t REG_DWORD /d 1 /f
|
|
reg add "HKLM\Software\Policies\Microsoft\WindowsStore" /v DisableStoreApps /t REG_DWORD /d 1 /f
|
|
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\AppHost" /v "EnableWebContentEvaluation" /t REG_DWORD /d 0 /f
|
|
reg add "HKLM\SOFTWARE\Policies\Microsoft\PushToInstall" /v DisablePushToInstall /t REG_DWORD /d 1 /f
|
|
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v SilentInstalledAppsEnabled /t REG_DWORD /d 0 /f
|
|
install_wim_tweak /o /c Microsoft-PPIProjection-Package /r
|
|
schtasks /Change /TN "\Microsoft\Windows\HelloFace\FODCleanupTask" /Disable
|
|
pause
|
|
|
|
rem BeforeRebootCleanup.ps1
|
|
|
|
Write-Host "Beginning Removal of Telemetry. Please Ignore all errors"
|
|
Get-WindowsPackage -Online | Where PackageName -like *MediaPlayer* | Remove-WindowsPackage -Online -NoRestart
|
|
Get-WindowsPackage -Online | Where PackageName -like *InternetExplorer* | Remove-WindowsPackage -Online -NoRestart
|
|
Get-WindowsPackage -Online | Where PackageName -like *QuickAssist* | Remove-WindowsPackage -Online -NoRestart
|
|
Get-WindowsPackage -Online | Where PackageName -like *Hello-Face* | Remove-WindowsPackage -Online -NoRestart
|
|
Disable-ComputerRestore -Drive "C:\"
|
|
vssadmin delete shadows /all /Quiet
|
|
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore" /v "DisableConfig" /t "REG_DWORD" /d "1" /f
|
|
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\SystemRestore" /v "DisableSR " /t "REG_DWORD" /d "1" /f
|
|
reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore" /v "DisableConfig" /t "REG_DWORD" /d "1" /f
|
|
reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore" /v "DisableSR " /t "REG_DWORD" /d "1" /f
|
|
schtasks /Change /TN "\Microsoft\Windows\SystemRestore\SR" /disable
|
|
|
|
|
|
rem DISABLE Cortana:
|
|
|
|
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /v AllowCortana /t REG_DWORD /d 0 /f
|
|
reg add "HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules" /v "{2765E0F4-2918-4A46-B9C9-43CDD8FCBA2B}" /t REG_SZ /d "BlockCortana|Action=Block|Active=TRUE|Dir=Out|App=C:\windows\systemapps\microsoft.windows.cortana_cw5n1h2txyewy\searchui.exe|Name=Search and Cortana application|AppPkgId=S-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742|" /f
|
|
|
|
|
|
rem postReboot.bat:
|
|
|
|
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting" /v Disabled /t REG_DWORD /d 1 /f
|
|
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" /v NoAutoUpdate /t REG_DWORD /d 0 /f
|
|
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" /v AUOptions /t REG_DWORD /d 2 /f
|
|
reg add "HKLM\Software\Policies\Microsoft\Windows\CloudContent" /v DisableSoftLanding /t REG_DWORD /d 1 /f
|
|
reg add "HKLM\Software\Policies\Microsoft\Windows\CloudContent" /v DisableWindowsSpotlightFeatures /t REG_DWORD /d 1 /f
|
|
sc delete DiagTrack
|
|
sc delete dmwappushservice
|
|
sc delete WerSvc
|
|
sc delete OneSyncSvc
|
|
sc delete MessagingService
|
|
sc delete wercplsupport
|
|
sc delete PcaSvc
|
|
sc config wlidsvc start=demand
|
|
sc delete wisvc
|
|
sc delete RetailDemo
|
|
sc delete diagsvc
|
|
sc delete shpamsvc
|
|
sc delete TermService
|
|
sc delete UmRdpService
|
|
sc delete SessionEnv
|
|
schtasks /Change /TN "Microsoft\Windows\AppID\SmartScreenSpecific" /disable
|
|
schtasks /Change /TN "Microsoft\Windows\Application Experience\AitAgent" /disable
|
|
schtasks /Change /TN "Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser" /disable
|
|
schtasks /Change /TN "Microsoft\Windows\Application Experience\ProgramDataUpdater" /disable
|
|
schtasks /Change /TN "Microsoft\Windows\Application Experience\StartupAppTask" /disable
|
|
schtasks /Change /TN "Microsoft\Windows\Autochk\Proxy" /disable
|
|
schtasks /Change /TN "Microsoft\Windows\CloudExperienceHost\CreateObjectTask" /disable
|
|
schtasks /Change /TN "Microsoft\Windows\Customer Experience Improvement Program\BthSQM" /disable
|
|
schtasks /Change /TN "Microsoft\Windows\Customer Experience Improvement Program\Consolidator" /disable
|
|
schtasks /Change /TN "Microsoft\Windows\Customer Experience Improvement Program\KernelCeipTask" /disable
|
|
schtasks /Change /TN "Microsoft\Windows\Customer Experience Improvement Program\Uploader" /disable
|
|
schtasks /Change /TN "Microsoft\Windows\Customer Experience Improvement Program\UsbCeip" /disable
|
|
schtasks /Change /TN "Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector" /disable
|
|
schtasks /Change /TN "Microsoft\Windows\DiskFootprint\Diagnostics" /disable
|
|
schtasks /Change /TN "Microsoft\Windows\FileHistory\File History (maintenance mode)" /disable
|
|
schtasks /Change /TN "Microsoft\Windows\Maintenance\WinSAT" /disable
|
|
schtasks /Change /TN "Microsoft\Windows\PI\Sqm-Tasks" /disable
|
|
schtasks /Change /TN "Microsoft\Windows\Power Efficiency Diagnostics\AnalyzeSystem" /disable
|
|
schtasks /Change /TN "Microsoft\Windows\Shell\FamilySafetyMonitor" /disable
|
|
schtasks /Change /TN "Microsoft\Windows\Shell\FamilySafetyRefresh" /disable
|
|
schtasks /Change /TN "Microsoft\Windows\Shell\FamilySafetyUpload" /disable
|
|
schtasks /Change /TN "Microsoft\Windows\Windows Error Reporting\QueueReporting" /disable
|
|
schtasks /Change /TN "Microsoft\Windows\WindowsUpdate\Automatic App Update" /disable
|
|
schtasks /Change /TN "Microsoft\Windows\License Manager\TempSignedLicenseExchange" /disable
|
|
schtasks /Change /TN "Microsoft\Windows\Clip\License Validation" /disable
|
|
schtasks /Change /TN "\Microsoft\Windows\ApplicationData\DsSvcCleanup" /disable
|
|
schtasks /Change /TN "\Microsoft\Windows\Power Efficiency Diagnostics\AnalyzeSystem" /disable
|
|
schtasks /Change /TN "\Microsoft\Windows\PushToInstall\LoginCheck" /disable
|
|
schtasks /Change /TN "\Microsoft\Windows\PushToInstall\Registration" /disable
|
|
schtasks /Change /TN "\Microsoft\Windows\Shell\FamilySafetyMonitor" /disable
|
|
schtasks /Change /TN "\Microsoft\Windows\Shell\FamilySafetyMonitorToastTask" /disable
|
|
schtasks /Change /TN "\Microsoft\Windows\Shell\FamilySafetyRefreshTask" /disable
|
|
schtasks /Change /TN "\Microsoft\Windows\Subscription\EnableLicenseAcquisition" /disable
|
|
schtasks /Change /TN "\Microsoft\Windows\Subscription\LicenseAcquisition" /disable
|
|
schtasks /Change /TN "\Microsoft\Windows\Diagnosis\RecommendedTroubleshootingScanner" /disable
|
|
schtasks /Change /TN "\Microsoft\Windows\Diagnosis\Scheduled" /disable
|
|
schtasks /Change /TN "\Microsoft\Windows\NetTrace\GatherNetworkInfo" /disable
|
|
del /F /Q "C:\Windows\System32\Tasks\Microsoft\Windows\SettingSync\*"
|
|
sc delete TroubleshootingSvc
|
|
for /f "tokens=1" %I in ('reg query "HKLM\SYSTEM\CurrentControlSet\Services" /k /f "wscsvc" ^| find /i "wscsvc"') do (reg delete %I /f)
|
|
for /f "tokens=1" %I in ('reg query "HKLM\SYSTEM\CurrentControlSet\Services" /k /f "OneSyncSvc" ^| find /i "OneSyncSvc"') do (reg delete %I /f)
|
|
for /f "tokens=1" %I in ('reg query "HKLM\SYSTEM\CurrentControlSet\Services" /k /f "MessagingService" ^| find /i "MessagingService"') do (reg delete %I /f)
|
|
for /f "tokens=1" %I in ('reg query "HKLM\SYSTEM\CurrentControlSet\Services" /k /f "PimIndexMaintenanceSvc" ^| find /i "PimIndexMaintenanceSvc"') do (reg delete %I /f)
|
|
for /f "tokens=1" %I in ('reg query "HKLM\SYSTEM\CurrentControlSet\Services" /k /f "UserDataSvc" ^| find /i "UserDataSvc"') do (reg delete %I /f)
|
|
for /f "tokens=1" %I in ('reg query "HKLM\SYSTEM\CurrentControlSet\Services" /k /f "UnistoreSvc" ^| find /i "UnistoreSvc"') do (reg delete %I /f)
|
|
for /f "tokens=1" %I in ('reg query "HKLM\SYSTEM\CurrentControlSet\Services" /k /f "BcastDVRUserService" ^| find /i "BcastDVRUserService"') do (reg delete %I /f)
|
|
for /f "tokens=1" %I in ('reg query "HKLM\SYSTEM\CurrentControlSet\Services" /k /f "Sgrmbroker" ^| find /i "Sgrmbroker"') do (reg delete %I /f)
|
|
for /f "tokens=1" %I in ('reg query "HKLM\SYSTEM\CurrentControlSet\Services" /k /f "ClipSVC" ^| find /i "ClipSVC"') do (reg delete %I /f)
|
|
sc delete diagnosticshub.standardcollector.service
|
|
reg add "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Siuf\Rules" /v "NumberOfSIUFInPeriod" /t REG_DWORD /d 0 /f
|
|
reg delete "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Siuf\Rules" /v "PeriodInNanoSeconds" /f
|
|
reg add "HKLM\SYSTEM\ControlSet001\Control\WMI\AutoLogger\AutoLogger-Diagtrack-Listener" /v Start /t REG_DWORD /d 0 /f
|
|
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppCompat" /v AITEnable /t REG_DWORD /d 0 /f
|
|
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppCompat" /v DisableInventory /t REG_DWORD /d 1 /f
|
|
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppCompat" /v DisablePCA /t REG_DWORD /d 1 /f
|
|
reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppCompat" /v DisableUAR /t REG_DWORD /d 1 /f
|
|
reg add "HKLM\SOFTWARE\Policies\Microsoft\MicrosoftEdge\PhishingFilter" /v "EnabledV9" /t REG_DWORD /d 0 /f
|
|
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\System" /v "EnableSmartScreen" /t REG_DWORD /d 0 /f
|
|
reg add "HKCU\Software\Microsoft\Internet Explorer\PhishingFilter" /v "EnabledV9" /t REG_DWORD /d 0 /f
|
|
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v "NoRecentDocsHistory" /t REG_DWORD /d 1 /f
|
|
reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\CompatTelRunner.exe" /v Debugger /t REG_SZ /d "%windir%\System32\taskkill.exe" /f
|
|
reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\DeviceCensus.exe" /v Debugger /t REG_SZ /d "%windir%\System32\taskkill.exe" /f
|
|
reg add "HKLM\Software\Policies\Microsoft\Windows\CloudContent" /v DisableWindowsConsumerFeatures /t REG_DWORD /d 1 /f
|
|
reg add "HKLM\Software\Policies\Microsoft\Windows\DataCollection" /v DoNotShowFeedbackNotifications /t REG_DWORD /d 1 /f
|
|
reg add "HKLM\Software\Policies\Microsoft\WindowsInkWorkspace" /v AllowSuggestedAppsInWindowsInkWorkspace /t REG_DWORD /d 0 /f
|
|
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" /v ScheduledInstallDay /t REG_DWORD /d 0 /f
|
|
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" /v ScheduledInstallTime /t REG_DWORD /d 3 /f
|
|
reg add "HKLM\SOFTWARE\Microsoft\Windows\Windows Error Reporting" /v Disabled /t REG_DWORD /d 1 /f
|
|
reg add "HKLM\Software\Policies\Microsoft\Windows NT\CurrentVersion\Software Protection Platform" /v NoGenTicket /t REG_DWORD /d 1 /f
|
|
reg add "HKLM\Software\Policies\Microsoft\Windows\SettingSync" /v DisableSettingSync /t REG_DWORD /d 2 /f
|
|
reg add "HKLM\Software\Policies\Microsoft\Windows\SettingSync" /v DisableSettingSyncUserOverride /t REG_DWORD /d 1 /f
|
|
|
|
echo ####### %0 #######
|
|
|