From ef3176bcbb6462d4a99824b2132f836878a916e9 Mon Sep 17 00:00:00 2001 From: valleyofdoom Date: Tue, 9 Jul 2024 11:37:28 +0000 Subject: [PATCH] Update docs --- docs/registry-opts.md | 273 ++++++++++++++++++++++++++++-------------- 1 file changed, 181 insertions(+), 92 deletions(-) diff --git a/docs/registry-opts.md b/docs/registry-opts.md index 83f4de2..12387e1 100644 --- a/docs/registry-opts.md +++ b/docs/registry-opts.md @@ -3,32 +3,32 @@ ## Disable Windows Update ``` +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU] +"UseWUServer"=dword:00000001 +"NoAutoUpdate"=dword:00000001 + [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate] -"WUServer"=" " +"ExcludeWUDriversInQualityUpdate"=dword:00000001 ; Windows 10 10240 or later +"DisableOSUpgrade"=dword:00000001 ; Windows 8 9200 or later "WUStatusServer"=" " +"DisableWindowsUpdateAccess"=dword:00000001 "UpdateServiceUrlAlternate"=" " "SetDisableUXWUAccess"=dword:00000001 ; Windows 10 10240 or later -"ExcludeWUDriversInQualityUpdate"=dword:00000001 ; Windows 10 10240 or later -"DisableWindowsUpdateAccess"=dword:00000001 -"DisableOSUpgrade"=dword:00000001 ; Windows 8 9200 or later +"WUServer"=" " -[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DriverSearching] -"SearchOrderConfig"=dword:00000000 -"DontSearchWindowsUpdate"=dword:00000001 +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsUpdate\UX\Settings] +"ExcludeWUDriversInQualityUpdate"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\DriverSearching] "SearchOrderConfig"=dword:00000000 -[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU] -"NoAutoUpdate"=dword:00000001 -"UseWUServer"=dword:00000001 - -[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsUpdate\UX\Settings] -"ExcludeWUDriversInQualityUpdate"=dword:00000001 - [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Device Metadata] "PreventDeviceMetadataFromNetwork"=dword:00000001 +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DriverSearching] +"SearchOrderConfig"=dword:00000000 +"DontSearchWindowsUpdate"=dword:00000001 + [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update] "SetupWizardLaunchTime"=- ; Windows 8.1 9600 and earlier "AUOptions"=dword:00000001 ; Windows 8.1 9600 and earlier @@ -48,18 +48,18 @@ [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate] "ExcludeWUDriversInQualityUpdate"=dword:00000001 ; Windows 10 10240 or later -[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DriverSearching] -"SearchOrderConfig"=dword:00000000 -"DontSearchWindowsUpdate"=dword:00000001 +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsUpdate\UX\Settings] +"ExcludeWUDriversInQualityUpdate"=dword:00000001 [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\DriverSearching] "SearchOrderConfig"=dword:00000000 -[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WindowsUpdate\UX\Settings] -"ExcludeWUDriversInQualityUpdate"=dword:00000001 - [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Device Metadata] "PreventDeviceMetadataFromNetwork"=dword:00000001 + +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DriverSearching] +"SearchOrderConfig"=dword:00000000 +"DontSearchWindowsUpdate"=dword:00000001 ``` ## Disable Automatic Store App Updates @@ -72,51 +72,40 @@ ## Disable Windows Defender ``` -[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer] -"SmartScreenEnabled"="Off" ; Windows 10 10240 or later - [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WdNisDrv] "Start"=dword:00000004 ; Windows 8 9200 or later -[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] -"WindowsDefender"=- ; Windows 10 10240 or later -"SecurityHealth"=- ; Windows 10 10240 or later +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity] +"Enabled"=dword:00000000 ; Windows 10 10240 or later -[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\AppHost] -"EnableWebContentEvaluation"=dword:00000000 ; Windows 10 10240 or later +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sense] +"Start"=dword:00000004 ; Windows 10 10240 or later -[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wscsvc] -"Start"=dword:00000004 +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] +"SecurityHealth"=- ; Windows 10 10240 or later +"WindowsDefender"=- ; Windows 10 10240 or later -[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WdFilter] -"Start"=dword:00000004 ; Windows 8 9200 or later +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender] +"DisableAntiSpyware"=dword:00000001 -[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection] -"DisableScanOnRealtimeEnable"=dword:00000001 -"DisableBehaviorMonitoring"=dword:00000001 ; Windows 8 9200 or later +[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\SmartScreenEnabled] +@=dword:00000000 ; Windows 10 10240 or later -[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WdBoot] +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WdNisSvc] "Start"=dword:00000004 ; Windows 8 9200 or later -[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Spynet] -"SubmitSamplesConsent"=dword:00000000 ; Windows 10 10240 or later -"SpyNetReporting"=dword:00000000 ; Windows 10 10240 or later - [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Microsoft Antimalware\Real-Time Protection] "DisableScanOnRealtimeEnable"=dword:00000001 "DisableOnAccessProtection"=dword:00000001 -[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender] -"DisableAntiSpyware"=dword:00000001 - -[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sense] -"Start"=dword:00000004 ; Windows 10 10240 or later +[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\AppHost] +"EnableWebContentEvaluation"=dword:00000000 ; Windows 10 10240 or later [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MsSecCore] "Start"=dword:00000004 ; Windows 11 22000 or later -[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity] -"Enabled"=dword:00000000 ; Windows 10 10240 or later +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WdFilter] +"Start"=dword:00000004 ; Windows 8 9200 or later [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SecurityHealthService] "Start"=dword:00000004 ; Windows 10 10240 or later @@ -124,17 +113,28 @@ [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\WTDS\Components] "ServiceEnabled"=dword:00000000 ; Windows 11 22000 or later +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WdBoot] +"Start"=dword:00000004 ; Windows 8 9200 or later + [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CI\Policy] "VerifiedAndReputablePolicyState"=dword:00000000 ; Windows 11 22000 or later +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Spynet] +"SubmitSamplesConsent"=dword:00000000 ; Windows 10 10240 or later +"SpyNetReporting"=dword:00000000 ; Windows 10 10240 or later + +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection] +"DisableScanOnRealtimeEnable"=dword:00000001 +"DisableBehaviorMonitoring"=dword:00000001 ; Windows 8 9200 or later + [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinDefend] "Start"=dword:00000004 -[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Edge\SmartScreenEnabled] -@=dword:00000000 ; Windows 10 10240 or later +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer] +"SmartScreenEnabled"="Off" ; Windows 10 10240 or later -[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WdNisSvc] -"Start"=dword:00000004 ; Windows 8 9200 or later +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wscsvc] +"Start"=dword:00000004 ``` ## Disable Gamebarpresencewriter @@ -151,18 +151,18 @@ "LetAppsRunInBackground"=dword:00000002 ; Windows 10 10240 or later ``` -## Disable Notifications Network Usage +## Disable Transparency Effects ``` -[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\PushNotifications] -"NoCloudApplicationNotification"=dword:00000001 ; Windows 8 9200 or later +[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize] +"EnableTransparency"=dword:00000000 ; Windows 10 10240 or later ``` -## Disable Transparency Effects +## Disable Notifications Network Usage ``` -[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize] -"EnableTransparency"=dword:00000000 ; Windows 10 10240 or later +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\PushNotifications] +"NoCloudApplicationNotification"=dword:00000001 ; Windows 8 9200 or later ``` ## Disable Windows Marking File Attachments With Information About Their Zone of Origin @@ -190,9 +190,9 @@ ``` [HKEY_CURRENT_USER\Control Panel\Mouse] -"MouseThreshold1"="0" -"MouseThreshold2"="0" "MouseSpeed"="0" +"MouseThreshold2"="0" +"MouseThreshold1"="0" ``` ## Disable Fast Startup @@ -202,6 +202,121 @@ "HiberbootEnabled"=dword:00000000 ``` +## Disable Customer Experience Improvement Program + +``` +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Messenger\Client] +"CEIP"=dword:00000002 + +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SQMClient\Windows] +"CEIPEnable"=dword:00000000 + +[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\VSCommon\15.0\SQM] +"OptIn"=dword:00000000 + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows] +"CEIPEnable"=dword:00000000 +``` + +## Disable Windows Error Reporting + +``` +[HKEY_CURRENT_USER\Software\Microsoft\Windows\Windows Error Reporting] +"DontSendAdditionalData"=dword:00000001 + +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\PCHealth\ErrorReporting] +"DoReport"=dword:00000000 + +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting\Consent] +"DefaultConsent"=dword:00000001 ; Windows 8.1 9600 and earlier + +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting] +"Disabled"=dword:00000001 +``` + +## Disable Clipboard History + +``` +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System] +"AllowClipboardHistory"=dword:00000000 ; Windows 10 10240 or later +"AllowCrossDeviceClipboard"=dword:00000000 ; Windows 10 10240 or later +``` + +## Disable Activity Feed + +``` +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System] +"UploadUserActivities"=dword:00000000 ; Windows 10 10240 or later +"EnableActivityFeed"=dword:00000000 ; Windows 10 10240 or later +"PublishUserActivities"=dword:00000000 ; Windows 10 10240 or later +``` + +## Disable Advertising Id + +``` +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AdvertisingInfo] +"DisabledByGroupPolicy"=dword:00000001 ; Windows 8.1 9600 or later +``` + +## Disable Autoplay + +``` +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer] +"NoAutorun"=dword:00000001 +"NoDriveTypeAutoRun"=dword:000000FF + +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Explorer] +"NoAutoplayfornonVolume"=dword:00000001 + +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\MDM] +"DisableRegistration"=dword:00000001 ; Windows 10 10240 or later +``` + +## Disable Cloud Content + +``` +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CloudContent] +"DisableCloudOptimizedContent"=dword:00000001 ; Windows 10 18363 or later +"DisableWindowsConsumerFeatures"=dword:00000001 ; Windows 10 10240 or later +"DisableSoftLanding"=dword:00000001 ; Windows 10 10240 or later +"DisableConsumerAccountStateContent"=dword:00000001 ; Windows 10 18363 or later +``` + +## Disable Account-based Explorer Features + +``` +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Explorer] +"DisableGraphRecentItems"=dword:00000001 ; Windows 11 22621 or later +``` + +## Disable Mdm Enrollment + +``` +``` + +## Disable Microsoft Store Push to Install Feature + +``` +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\PushToInstall] +"DisablePushToInstall"=dword:00000001 ; Windows 10 10240 or later +``` + +## Mitigate Web-based Search Info + +``` +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search] +"AllowCortana"=dword:00000000 ; Windows 10 10240 or later +"ConnectedSearchPrivacy"=dword:00000003 ; versions Windows 8.1 9600 - Windows 8.1 9600 +"ConnectedSearchUseWeb"=dword:00000000 ; Windows 8.1 9600 or later +``` + +## Disable Sending Inking and Typing Data to Microsoft + +``` +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\TextInput] +"AllowLinguisticDataCollection"=dword:00000000 ; Windows 10 17134 or later +``` + ## Disable Automatic Maintenance ``` @@ -244,47 +359,21 @@ "AllowNewsAndInterests"=dword:00000000 ; Windows 10 10240 or later ``` -## Disable Customer Experience Improvement Program - -``` -[HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\VSCommon\15.0\SQM] -"OptIn"=dword:00000000 - -[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SQMClient\Windows] -"CEIPEnable"=dword:00000000 - -[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SQMClient\Windows] -"CEIPEnable"=dword:00000000 -``` - -## Disable Windows Error Reporting - -``` -[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting] -"Disabled"=dword:00000001 - -[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\PCHealth\ErrorReporting] -"DoReport"=dword:00000000 -``` - -## Disable Search the Web or Display Web Results in Search - -``` -[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search] -"ConnectedSearchUseWeb"=dword:00000000 ; Windows 8.1 9600 or later -``` - ## Disable Telemetry ``` +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection] +"DoNotShowFeedbackNotifications"=dword:00000001 ; Windows 10 10240 or later +"LimitDiagnosticLogCollection"=dword:00000001 ; Windows 10 18363 or later +"LimitDumpCollection"=dword:00000001 ; Windows 10 18363 or later +"LimitEnhancedDiagnosticDataWindowsAnalytics"=dword:00000000 ; Windows 10 16299 or later +"AllowTelemetry"=dword:00000000 ; Windows 10 10240 or later + [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DiagTrack] "Start"=dword:00000004 ; Windows 10 10240 or later [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Environment] "POWERSHELL_TELEMETRY_OPTOUT"="1" - -[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection] -"AllowTelemetry"=dword:00000000 ; Windows 10 10240 or later ``` ## Disable Retrieval of Online Tips and Help in the Immersive Control Panel