490 lines
29 KiB
PowerShell
490 lines
29 KiB
PowerShell
Start-Job -Name "Install and Configure Chocolatey" -ScriptBlock {
|
||
Write-Host "Installing Chocolatey"
|
||
# Setting up directories for values
|
||
Set-ExecutionPolicy Bypass -Scope Process -Force
|
||
[System.Net.ServicePointManager]::SecurityProtocol = [System.Net.ServicePointManager]::SecurityProtocol -bor 3072
|
||
Invoke-Expression ((New-Object System.Net.WebClient).DownloadString('https://chocolatey.org/install.ps1'))
|
||
choco feature enable -n=allowGlobalConfirmation
|
||
choco feature enable -n=useFipsCompliantChecksums
|
||
choco feature enable -n=useEnhancedExitCodes
|
||
choco config set commandExecutionTimeoutSeconds 14400
|
||
choco config set --name="'cacheLocation'" --value="'C:\temp\chococache'"
|
||
choco config set --name="'proxyBypassOnLocal'" --value="'true'"
|
||
choco upgrade all
|
||
refreshenv
|
||
Start-Job -Name "Installing Windows Updates" -ScriptBlock {
|
||
Write-Host "Install Latest Windows Updates"
|
||
choco install pswindowsupdate
|
||
Set-Executionpolicy -ExecutionPolicy RemoteSigned -Force
|
||
Import-Module PSWindowsUpdate -Force
|
||
Add-WUServiceManager -ServiceID 7971f918-a847-4430-9279-4a52d1efe18d -Confirm:$false
|
||
Install-WindowsUpdate -MicrosoftUpdate -AcceptAll -Install
|
||
Get-WuInstall -AcceptAll -IgnoreReboot -IgnoreUserInput -nottitle 'preview'
|
||
Get-WindowsUpdate –Install
|
||
}
|
||
}
|
||
|
||
Start-Job -Name "Installing Optional Windows Features" -ScriptBlock {
|
||
#https://www.ghacks.net/2017/07/14/use-windows-powershell-to-install-optional-features/
|
||
#Enable-WindowsOptionalFeature -Online -FeatureName "" -All
|
||
ForEach ($OptionalFeature in ("Client-ProjFS", "ClientForNFS-Infrastructure", "DataCenterBridging", "DirectoryServices-ADAM-Client", "Microsoft-Windows-Subsystem-Linux", "NFS-Administration", "ServicesForNFS-ClientOnly", "SimpleTCP", "WindowsMediaPlayer")) {
|
||
Enable-WindowsOptionalFeature -Online -FeatureName "$OptionalFeature" -All -NoRestart -WarningAction SilentlyContinue | Out-Null
|
||
}
|
||
|
||
#https://docs.microsoft.com/en-us/powershell/scripting/gallery/installing-psget?view=powershell-7.1
|
||
Install-PackageProvider -Name "NuGet -Force
|
||
|
||
#https://github.com/PowerShell/PowerShellGetv2/issues/303
|
||
Set-PSRepository -Name "PSGallery -InstallationPolicy Trusted
|
||
Install-PackageProvider -Name "PowerShellGet -Force -Scope CurrentUser
|
||
|
||
#https://github.com/PowerShell/PowerShellGetv2/issues/295
|
||
Invoke-WebRequest -Uri https://aka.ms/psget-nugetexe -OutFile "$env:ProgramData\Microsoft\Windows\PowerShell\PowerShellGet\NuGet.exe"
|
||
|
||
#https://www.powershellgallery.com/packages/AnonUpload/1.2
|
||
#https://www.powershellgallery.com/packages/Carbon/2.9.4
|
||
#https://www.powershellgallery.com/packages/PoshInternals/1.0.34
|
||
#https://www.powershellgallery.com/packages/powershellprotools/5.7.2
|
||
#https://www.powershellgallery.com/packages/PSWindowsUpdate/2.2.0.2
|
||
#https://www.powershellgallery.com/packages/SpeculationControl/1.0.14
|
||
#https://www.powershellgallery.com/packages/xCertificate/3.2.0.0
|
||
ForEach ($module in ("AnonUpload", "Carbon", "PoshInternals", "PowerShellGet", "PowerShellProTools", "PSWindowsUpdate", "ReportHTML", "xCertificate")) {
|
||
Update-Module -Name "$module -Force
|
||
Install-Module -Name "$module -Force
|
||
Import-Module -Name "$module -Force
|
||
}
|
||
refreshenv
|
||
|
||
Start-Job -Name "Installing Software" -Scriptblock {
|
||
$chocopackages = @("googlechrome", "firefox", "chromium", "microsoft-edge", "tor-Browser", "putty", "winscp.install", "teamviewer", "anydesk.install", "sysinternals", "driverbooster", "sdio", "etcher", "rufus.install", "veracrypt", "windirstat", "mysql.workbench", "rsat", "sql-server-management-studio", "laps", "wumt", "openvpn", "wireguard", "wireshark", "nmap", "winbox", "tor", "cheatengine", "sleuthkit", "hxd", "ida-free", "ghidra", "ossec-client", "burp-suite-free-edition", "zap", "openstego", "accessenum", "accesschk", "sysmon", "powershell4", "powershell", "powershellhere-elevated", "powershell.portable", "microsoft-windows-terminal", "carbon", "jre8", "openjdk", "openjdk.portable", "hugo", "hugo-extended", "nodejs", "vscode", "vscodium", "vscode-ansible", "vscode-python", "chocolatey-vscode", "vscode-prettier", "vscode-java", "vscode-yaml", "vscode-haskell", "vscode-mongo", "vscode-beautify", "vscode-intellicode", "vscode-pull-request-github", "vscode-kubernetes-tools", "vscode-autofilename", "vscode-codespellchecker", "vscode-icons", "vscode-csharp", "dsc.powershellcommunity", "notepadplusplus.install", "python", "pip", "github-desktop", "gh", "git.install", "git-lfx", "gnupg", "gpg4win", "openssh", "wsl", "wsl2", "adb", "universal-adb-drivers", "windows-adk-all", "dotnetfx", "vcredist-all", "microsoft-visual-cpp-build-tools", "patch-my-pc", "rocketchat", "discord", "pidgin", "signal", "steam", "obs-studio", "obs-ndi", "vlc", "gimp", "k-litecodecpackfull", "audacity", "audacity-lame", "screentogif", "adobereader", "installroot", "7zip.install", "curl", "autohotkey", "teracopy", "cpu-z.install", "eraser", "openstego")
|
||
|
||
$PSversion = $PSVersionTable.PSVersion.Major
|
||
If ($PSversion -ge "7"){
|
||
Write-Output $chocopackages | ForEach-Object -Parallel {
|
||
Write-Host "Installing $_" -ForegroundColor White -BackgroundColor Black
|
||
Try {
|
||
Choco install $_ --ignore-checksums | Out-Null
|
||
}
|
||
Catch {
|
||
Write-Host "Failed to install $_" -ForegroundColor Red -BackgroundColor Black
|
||
}
|
||
}
|
||
} Else {
|
||
Write-Output $chocopackages | ForEach {
|
||
Write-Host "Installing $_" -ForegroundColor White -BackgroundColor Black
|
||
Try {
|
||
Choco install $_ --ignore-checksums | Out-Null
|
||
}
|
||
Catch {
|
||
Write-Host "Failed to install $_" -ForegroundColor Red -BackgroundColor Black
|
||
}
|
||
}
|
||
}
|
||
|
||
#Packages that down't work while installing others
|
||
Choco install vmwareworkstation vmware-horizon-client vmware-powercli-psmodule vmrc --ignore-checksums --force| Out-Null
|
||
|
||
|
||
<# Optional Packages
|
||
Write-Host "Installing Logging Tools"
|
||
#choco install splunk-universalforwarder winlogbeat
|
||
|
||
Write-Host "Installing Terminals"
|
||
#choco install docker-desktop docker-compose docker-cli azure-cli awstools.powershell awscli kubernetes-cli
|
||
|
||
Write-Host "Installing Java"
|
||
#choco install jdk11 javaruntime
|
||
|
||
Write-Host "Installing IDE and Dev Tools"
|
||
#choco install visualstudio2019enterprise visualstudio2017-powershelltools arduino vscode-arduino vscode-puppet vscode-ruby
|
||
|
||
Write-Host "Installing GIT Tools"
|
||
#choco install postman markdownmonster
|
||
|
||
Write-Host "Installing Windows Subsystem for Linux"
|
||
#choco install wsl-ubuntu-2004 wsl-debiangnulinux wsl-kalilinux
|
||
|
||
Write-Host "Installing Chat Clients"
|
||
#choco install microsoft-teams.install
|
||
|
||
Write-Host "Installing Document Readers"
|
||
#choco install officeproplus2013
|
||
|
||
Write-Host "Installing Misc."
|
||
#choco install greenshot
|
||
|
||
#Write-Host "Installing Baseline Tools"
|
||
#choco install winsecuritybaseline mbsa
|
||
|
||
#Write-Host "Installing AntiVirus"
|
||
#choco install immunet clamav
|
||
|
||
#Write-Host "Installing Smart Card Tools"
|
||
#choco install opensc
|
||
|
||
#Write-Host "Installing YubiKey Tools"
|
||
#choco install yubikey-personalization-tool yubikey-manager yubikey-piv-manager
|
||
#>
|
||
}
|
||
|
||
Start-Job -Name "Configuring Windows - Optimizations, Debloating, and Hardening" -ScriptBlock {
|
||
Start-Sleep 120
|
||
Write-Host "Configuring Windows - Optimizations, Debloating, and Hardening"
|
||
New-Item "C:\" -Name "temp" -ItemType "directory" -Force
|
||
iwr -useb 'https://simeononsecurity.ch/scripts/windowsoptimizeandharden.ps1' | iex
|
||
#Start-Job -Name "System Wide Ad and Tracker Blocking" -ScriptBlock {
|
||
# iwr -useb 'https://simeononsecurity.ch/scripts/soswindowsadblocker.ps1' | iex
|
||
#}
|
||
#Start-Job -Name "SoS Branding" -ScriptBlock {
|
||
# iwr -useb 'https://simeononsecurity.ch/scripts/sosbranding.ps1' | iex
|
||
#}
|
||
#Start-Job -Name "SoS Sysmon" -ScriptBlock {
|
||
# iwr -useb 'https://simeononsecurity.ch/scripts/sosautomatesysmon.ps1'|iex
|
||
#}
|
||
|
||
#Fix high performance timers to get better performance from Windows 10.
|
||
bcdedit /deletevalue useplatformclock
|
||
bcdedit /set useplatformclock false
|
||
bcdedit /set useplatformtick yes
|
||
bcdedit /set disabledynamictick yes
|
||
bcdedit /set tscsyncpolicy Enhanced
|
||
|
||
#Enable UDP offloading.
|
||
#https://sites.google.com/view/melodystweaks/basictweaks#h.u4nrzzr3bd2q
|
||
netsh int udp set global uro=enabled
|
||
|
||
#Enable WH send and WH receive.
|
||
#https://sites.google.com/view/melodystweaks/basictweaks#h.zb7ur84z9fzw
|
||
#Get-NetAdapter -IncludeHidden | Set-NetIPInterface -WeakHostSend Enabled -WeakHostReceive Enabled -ErrorAction SilentlyContinue
|
||
|
||
#Enable Winsock Send Autotuning (dynamic send-buffer)
|
||
#https://sites.google.com/view/melodystweaks/basictweaks#h.wky682g85fbo
|
||
netsh winsock set autotuning on
|
||
|
||
#Disable 57-bits 5-level paging, also known as "Linear Address 57". Only 100% effective on 10th gen Intel. 256 TB of virtual memory per-disk is way much more than enough anyway.
|
||
#https://sites.google.com/view/melodystweaks/basictweaks#h.j5c33bevlruo
|
||
bcdedit /set linearaddress57 OptOut
|
||
bcdedit /set increaseuserva 268435328
|
||
|
||
#Avoid the use of uncontiguous portions of low-memory from the OS. Boosts memory performance and improves microstuttering at least 80% of the cases. Also fixes the command buffer stutter after disabling 5-level paging on 10th gen Intel. Causes system freeze on unstable memory sticks.
|
||
#https://sites.google.com/view/melodystweaks/basictweaks#h.buwzs4hstahz
|
||
bcdedit /set firstmegabytepolicy UseAll
|
||
bcdedit /set avoidlowmemory 0x8000000
|
||
bcdedit /set nolowmem Yes
|
||
|
||
#Disable RAM compression.
|
||
#https://sites.google.com/view/melodystweaks/basictweaks#h.kb5elprlojt0
|
||
Disable-MMAgent -MemoryCompression
|
||
|
||
#Use realtime priority for csrss.exe
|
||
#https://sites.google.com/view/melodystweaks/basictweaks#h.ar95updq6a7j
|
||
New-Item -Force "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\csrss.exe\PerfOptions"
|
||
Set-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\csrss.exe\PerfOptions" -Name "CpuPriorityClass" -Type "DWORD" -Value "4" -Force
|
||
Set-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\csrss.exe\PerfOptions" -Name "IoPriority" -Type "DWORD" -Value "1" -Force
|
||
|
||
#Disallow drivers to get paged into virtual memory.
|
||
#https://sites.google.com/view/melodystweaks/basictweaks#h.kvyfncl7jils
|
||
Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" -Name "DisablePagingExecutive" -Type "DWORD" -Value "1" -Force
|
||
|
||
#Use big system memory caching to improve microstuttering..
|
||
#https://sites.google.com/view/melodystweaks/basictweaks#h.luvkznpp3use
|
||
Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" -Name "LargeSystemCache" -Type "DWORD" -Value "1" -Force
|
||
|
||
#Enable X2Apic and enable Memory Mapping for PCI-E devices.
|
||
#https://sites.google.com/view/melodystweaks/basictweaks#h.xm0jq1fzo2c3
|
||
bcdedit /set x2apicpolicy Enable
|
||
bcdedit /set configaccesspolicy Default
|
||
bcdedit /set MSI Default
|
||
bcdedit /set usephysicaldestination No
|
||
bcdedit /set usefirmwarepcisettings No
|
||
|
||
#Force contiguous memory allocation in the DirectX Graphics Kernel.
|
||
#https://sites.google.com/view/melodystweaks/basictweaks#h.90c0dugs7bj
|
||
Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Control\GraphicsDrivers" -Name "DpiMapIommuContiguous" -Type "DWORD" -Value "1" -Force
|
||
|
||
#Force contiguous memory allocation in the NVIDIA driver
|
||
#https://sites.google.com/view/melodystweaks/basictweaks#h.rfiwlr7de6uh
|
||
Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Control\Class\{ 4d36e968-e325-11ce-bfc1-08002be10318 }\0000" -Name "PreferSystemMemoryContiguous" -Type "DWORD" -Value "1" -Force
|
||
|
||
#Enable Experimental Autotuning and NEWRENO congestion provider.
|
||
#https://sites.google.com/view/melodystweaks/basictweaks#h.cflus4jbi8z9
|
||
netsh int tcp set global autotuning=experimental
|
||
netsh int tcp set supp internet congestionprovider=newreno
|
||
New-Item -Force "HKLM:\SOFTWARE\Policies\Microsoft\Windows\QoS"
|
||
Set-ItemProperty -Path "HKLM:\SOFTWARE\Policies\Microsoft\Windows\QoS" -Name "Tcp Autotuning Level" -Type "STRING" -Value "Experimental" -Force
|
||
Set-ItemProperty -Path "HKLM:\SOFTWARE\Policies\Microsoft\Windows\QoS" -Name "Application DSCP Marking Request" -Type "STRING" -Value "Allowed" -Force
|
||
|
||
#Enable Teredo and 6to4 (Xbox LIVE fix)
|
||
#https://sites.google.com/view/melodystweaks/basictweaks#h.94e648gkuiej
|
||
netsh int teredo set state natawareclient
|
||
netsh int 6to4 set state state=enabled
|
||
|
||
#Enable detailed startup/shutdown messages.
|
||
#https://sites.google.com/view/melodystweaks/basictweaks#h.tr2jz1iwx8e9
|
||
Set-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" -Name "VerboseStatus" -Type "DWORD" -Value "1" -Force
|
||
|
||
#Set Screen Timeout to 15 Minutes
|
||
powercfg -change -monitor-timeout-ac 15
|
||
|
||
#Enable Num Lock on logon and lock screen
|
||
Set-ItemProperty "HKU:\.DEFAULT\Control Panel\Keyboard" "InitialKeyboardIndicators" 2
|
||
|
||
#Enable Darkmode
|
||
New-Item -Path "HKLM:\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize" -Force | Out-Null
|
||
New-ItemProperty -Path "HKLM:\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize" -Name "AppsUseLightTheme" -Type "DWORD" -Value "00000000" -Force
|
||
New-ItemProperty -Path "HKLM:\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize" -Name "SystemUsesLightTheme" -Type "DWORD" -Value "00000000" -Force
|
||
New-ItemProperty -Path "HKLM:\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize" -Name "ColorPrevalence" -Type "DWORD" -Value "00000000" -Force
|
||
New-ItemProperty -Path "HKLM:\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize" -Name "EnableTransparency" -Type "DWORD" -Value "00000001" -Force
|
||
Set-ItemProperty -Path "HKCU:\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize" -Name "AppsUseLightTheme" -Type "DWORD" -Value "00000000" -Force
|
||
Set-ItemProperty -Path "HKCU:\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize" -Name "SystemUsesLightTheme" -Type "DWORD" -Value "00000000" -Force
|
||
Set-ItemProperty -Path "HKCU:\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize" -Name "ColorPrevalence" -Type "DWORD" -Value "00000000" -Force
|
||
Set-ItemProperty -Path "HKCU:\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize" -Name "EnableTransparency" -Type "DWORD" -Value "00000001" -Force
|
||
|
||
#Clear Start Menu
|
||
#https://github.com/builtbybel/privatezilla/blob/master/scripts/Unpin%20Startmenu%20Tiles.ps1
|
||
$START_MENU_LAYOUT = @"
|
||
<LayoutModificationTemplate xmlns:defaultlayout="http://schemas.microsoft.com/Start/2014/FullDefaultLayout" xmlns:start="http://schemas.microsoft.com/Start/2014/StartLayout" Version="1" xmlns:taskbar="http://schemas.microsoft.com/Start/2014/TaskbarLayout" xmlns="http://schemas.microsoft.com/Start/2014/LayoutModification">
|
||
<LayoutOptions StartTileGroupCellWidth="6" />
|
||
<DefaultLayoutOverride>
|
||
<StartLayoutCollection>
|
||
<defaultlayout:StartLayout GroupCellWidth="6" />
|
||
</StartLayoutCollection>
|
||
</DefaultLayoutOverride>
|
||
</LayoutModificationTemplate>
|
||
"@
|
||
$layoutFile = "C:\Windows\StartMenuLayout.xml"
|
||
|
||
#Delete layout file if it already exists
|
||
If (Test-Path $layoutFile) {
|
||
Remove-Item $layoutFile
|
||
}
|
||
#Creates the blank layout file
|
||
$START_MENU_LAYOUT | Out-File $layoutFile -Encoding ASCII
|
||
$regAliases = @("HKLM", "HKCU")
|
||
#Assign the start layout and force it to apply with "LockedStartLayout" at both the machine and user level
|
||
foreach ($regAlias in $regAliases) {
|
||
$basePath = $regAlias + ":\SOFTWARE\Policies\Microsoft\Windows"
|
||
$keyPath = $basePath + "\Explorer"
|
||
IF (!(Test-Path -Path $keyPath)) {
|
||
New-Item -Path $basePath -Name "Explorer"
|
||
}
|
||
Set-ItemProperty -Path $keyPath -Name "LockedStartLayout" -Value 1
|
||
Set-ItemProperty -Path $keyPath -Name "StartLayoutFile" -Value $layoutFile
|
||
}
|
||
#Restart Explorer, open the start menu (necessary to load the new layout), and give it a few seconds to process
|
||
Stop-Process -Force -name explorer
|
||
Start-Sleep -s 5
|
||
$wshell = New-Object -ComObject wscript.shell; $wshell.SendKeys('^{ESCAPE}')
|
||
Start-Sleep -s 5
|
||
#Enable the ability to pin items again by disabling "LockedStartLayout"
|
||
foreach ($regAlias in $regAliases) {
|
||
$basePath = $regAlias + ":\SOFTWARE\Policies\Microsoft\Windows"
|
||
$keyPath = $basePath + "\Explorer"
|
||
Set-ItemProperty -Path $keyPath -Name "LockedStartLayout" -Value 0
|
||
}
|
||
#Restart Explorer and delete the layout file
|
||
Stop-Process -Force -name explorer
|
||
#Uncomment the next line to make clean start menu default for all new users
|
||
Import-StartLayout -LayoutPath $layoutFile -MountPath $env:SystemDrive\
|
||
Remove-Item $layoutFile
|
||
|
||
#https://notes.ponderworthy.com/fsutil-tweaks-for-ntfs-performance-and-reliability
|
||
fsutil behavior set memoryusage 2
|
||
#fsutil behavior set disablelastaccess 1
|
||
fsutil behavior set mftzone 2
|
||
$DriveLetters = (Get-WmiObject -Class Win32_Volume).DriveLetter
|
||
ForEach ($Drive in $DriveLetters) {
|
||
If (-not ([string]::IsNullOrEmpty($Drive))) {
|
||
Write-Host Optimizing "$Drive" Drive
|
||
fsutil resource setavailable "$Drive"
|
||
fsutil resource setlog shrink 10 "$Drive"
|
||
fsutil repair set "$Drive" 0x01
|
||
fsutil resource setautoreset true "$Drive"
|
||
fsutil resource setconsistent "$Drive"
|
||
}
|
||
}
|
||
|
||
#https://docs.microsoft.com/en-us/windows-server/administration/openssh/openssh_server_configuration
|
||
New-ItemProperty -Path "HKLM:\SOFTWARE\OpenSSH" -Name "DefaultShell" -Value "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -PropertyType "String" -Force
|
||
|
||
Write-Host "Hiding Taskbar Search icon / box..."
|
||
Set-ItemProperty -Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Search" -Name "SearchboxTaskbarMode" -Type "DWORD" -Value 0
|
||
|
||
#Removes Paint3D stuff from context menu
|
||
$Paint3Dstuff = @(
|
||
"HKCR:\SystemFileAssociations\.3mf\Shell\3D Edit"
|
||
"HKCR:\SystemFileAssociations\.bmp\Shell\3D Edit"
|
||
"HKCR:\SystemFileAssociations\.fbx\Shell\3D Edit"
|
||
"HKCR:\SystemFileAssociations\.gif\Shell\3D Edit"
|
||
"HKCR:\SystemFileAssociations\.jfif\Shell\3D Edit"
|
||
"HKCR:\SystemFileAssociations\.jpe\Shell\3D Edit"
|
||
"HKCR:\SystemFileAssociations\.jpeg\Shell\3D Edit"
|
||
"HKCR:\SystemFileAssociations\.jpg\Shell\3D Edit"
|
||
"HKCR:\SystemFileAssociations\.png\Shell\3D Edit"
|
||
"HKCR:\SystemFileAssociations\.tif\Shell\3D Edit"
|
||
"HKCR:\SystemFileAssociations\.tiff\Shell\3D Edit"
|
||
)
|
||
#Rename reg key to remove it, so it's revertible
|
||
foreach ($Paint3D in $Paint3Dstuff) {
|
||
If (Test-Path $Paint3D) {
|
||
$rmPaint3D = $Paint3D + "_"
|
||
Set-Item $Paint3D $rmPaint3D
|
||
}
|
||
}
|
||
|
||
Write-Host "Disabling Action Center..."
|
||
If (!(Test-Path "HKCU:\SOFTWARE\Policies\Microsoft\Windows\Explorer")) {
|
||
New-Item -Path "HKCU:\SOFTWARE\Policies\Microsoft\Windows\Explorer" | Out-Null
|
||
}
|
||
Set-ItemProperty -Path "HKCU:\SOFTWARE\Policies\Microsoft\Windows\Explorer" -Name "DisableNotificationCenter" -Type "DWORD" -Value 1
|
||
Set-ItemProperty -Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\PushNotifications" -Name "ToastEnabled" -Type "DWORD" -Value 0
|
||
|
||
#Do not suggest ways I can finish setting up my device to get the most out of Windows
|
||
if (-not (Test-Path -Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\UserProfileEngagement")) {
|
||
New-Item -Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\UserProfileEngagement" -Force
|
||
}
|
||
New-ItemProperty -Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\UserProfileEngagement" -Name "ScoobeSystemSettingEnabled" -PropertyType "DWORD" -Value "0" -Force
|
||
|
||
#Do not offer tailored experiences based on the diagnostic data setting
|
||
New-ItemProperty -Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Privacy" -Name "TailoredExperiencesWithDiagnosticDataEnabled" -PropertyType "DWORD" -Value "0" -Force
|
||
|
||
#Show hidden items in explorer
|
||
New-ItemProperty -Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" -Name "Hidden" -PropertyType "DWORD" -Value "1" -Force
|
||
|
||
#Show file extentions in explorer
|
||
New-ItemProperty -Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" -Name "HideFileExt" -PropertyType "DWORD" -Value "0" -Force
|
||
|
||
#Open to "this pc" in explorer
|
||
New-ItemProperty -Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" -Name "LaunchTo" -PropertyType "DWORD" -Value "1" -Force
|
||
|
||
#Hide cortana taskbar button
|
||
New-ItemProperty -Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" -Name "ShowCortanaButton" -PropertyType "DWORD" -Value "0" -Force
|
||
|
||
#Hide task view button in explorer
|
||
New-ItemProperty -Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" -Name "ShowTaskViewButton" -PropertyType "DWORD" -Value "0" -Force
|
||
|
||
#Hide people button in taskbar
|
||
if (-not (Test-Path -Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\People")) {
|
||
New-Item -Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\People" -Force
|
||
}
|
||
New-ItemProperty -Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\People" -Name "PeopleBand" -PropertyType "DWORD" -Value "0" -Force
|
||
|
||
#Hide "3D Objects" in explorer
|
||
if (-not (Test-Path -Path "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{ 31C0DD25-9439-4F12-BF41-7FF4EDA38722 }\PropertyBag")) {
|
||
New-Item -Path "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{ 31C0DD25-9439-4F12-BF41-7FF4EDA38722 }\PropertyBag" -Force
|
||
}
|
||
New-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FolderDescriptions\{ 31C0DD25-9439-4F12-BF41-7FF4EDA38722 }\PropertyBag" -Name "ThisPCPolicy" -PropertyType "String" -Value "Hide" -Force
|
||
|
||
#Disable First Logon Animation
|
||
New-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" -Name "EnableFirstLogonAnimation" -PropertyType "DWord" -Value "0" -Force
|
||
|
||
#Remove Path Limit
|
||
New-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Control\FileSystem" -Name "LongPathsEnabled" -PropertyType "DWORD" -Value "1" -Force
|
||
|
||
#Verbose BSoD
|
||
New-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Control\CrashControl" -Name "DisplayParameters" -PropertyType "DWORD" -Value "1" -Force
|
||
|
||
#Use only latest .Net
|
||
New-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\.NETFramework" -Name "OnlyUseLatestCLR" -PropertyType "DWORD" -Value "1" -Force
|
||
New-ItemProperty -Path "HKLM:\SOFTWARE\Wow6432Node\Microsoft\.NETFramework" -Name "OnlyUseLatestCLR" -PropertyType "DWORD" -Value "1" -Force
|
||
|
||
#Enable Windows Reserved Storage
|
||
Set-WindowsReservedStorageState -State Enabled
|
||
|
||
#Enable Restartable Apps
|
||
New-ItemProperty -Path "HKCU:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" -Name "RestartApps" -Value "1" -Force
|
||
|
||
#Install HVEC Video Extention
|
||
# Check whether the extension is already installed
|
||
if (-not (Get-AppxPackage -Name "Microsoft.HEVCVideoExtension") -and (Get-AppxPackage -Name "Microsoft.Windows.Photos")) {
|
||
try {
|
||
# Check the internet connection
|
||
if ((Invoke-WebRequest -Uri https://www.google.com -UseBasicParsing -DisableKeepAlive -Method Head).StatusDescription) {
|
||
try {
|
||
# Check whether the https://store.rg-adguard.net site is alive
|
||
if ((Invoke-WebRequest -Uri https://store.rg-adguard.net/api/GetFiles -UseBasicParsing -DisableKeepAlive -Method Head).StatusDescription) {
|
||
$API = "https://store.rg-adguard.net/api/GetFiles"
|
||
# HEVC Video Extensions from Device Manufacturer
|
||
$ProductURL = "https://www.microsoft.com/store/productId/9n4wgh0z6vhq"
|
||
|
||
$Body = @{
|
||
type = "url"
|
||
url = $ProductURL
|
||
ring = "Retail"
|
||
lang = "en-US"
|
||
}
|
||
$Raw = Invoke-RestMethod -Method Post -Uri $API -ContentType 'application/x-www-form-urlencoded' -Body $Body
|
||
|
||
# Parsing the page
|
||
$Raw | Select-String -Pattern '<tr style.*<a href=\"(?<url>.*)"\s.*>(?<text>.*)<\/a>' -AllMatches | ForEach-Object -Process { $_.Matches } | ForEach-Object -Process {
|
||
$TempURL = $_.Groups[1].Value
|
||
$Package = $_.Groups[2].Value
|
||
|
||
if ($Package -like "Microsoft.HEVCVideoExtension_*_x64__8wekyb3d8bbwe.appx") {
|
||
Write-Verbose -Message $Localization.HEVCDownloading -Verbose
|
||
|
||
[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12
|
||
|
||
$DownloadsFolder = Get-ItemPropertyValue -Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders" -Name "{ 374DE290-123F-4565-9164-39C4925E467B }"
|
||
$Parameters = @{
|
||
Uri = $TempURL
|
||
OutFile = "$DownloadsFolder\$Package"
|
||
Verbose = [switch]::Present
|
||
}
|
||
Invoke-WebRequest @Parameters
|
||
|
||
# Installing "HEVC Video Extensions from Device Manufacturer"
|
||
Add-AppxPackage -Path "$DownloadsFolder\$Package" -Verbose
|
||
|
||
Remove-Item -Path "$DownloadsFolder\$Package" -Force
|
||
}
|
||
}
|
||
}
|
||
}
|
||
catch [System.Net.WebException] {
|
||
Write-Warning -Message $Localization.NoResponse
|
||
Write-Error -Message $Localization.NoResponse -ErrorAction SilentlyContinue
|
||
return
|
||
}
|
||
}
|
||
}
|
||
catch [System.Net.WebException] {
|
||
Write-Warning -Message $Localization.NoInternetConnection
|
||
Write-Error -Message $Localization.NoInternetConnection -ErrorAction SilentlyContinue
|
||
return
|
||
}
|
||
}
|
||
|
||
#Enable Sandboxing for Windows Defender
|
||
setx /M MP_FORCE_USE_SANDBOX 1
|
||
|
||
# Dismiss Microsoft Defender offer in the Windows Security about signing in Microsoft account
|
||
New-ItemProperty -Path "HKCU:\SOFTWARE\Microsoft\Windows Security Health\State" -Name "AccountProtection_MicrosoftAccount_Disconnected" -PropertyType "DWORD" -Value "1" -Force
|
||
|
||
#Enable PowerShell Module Logging
|
||
if (-not (Test-Path -Path "HKLM:\SOFTWARE\Policies\Microsoft\Windows\PowerShell\ModuleLogging\ModuleNames")) {
|
||
New-Item -Path "HKLM:\SOFTWARE\Policies\Microsoft\Windows\PowerShell\ModuleLogging\ModuleNames" -Force
|
||
}
|
||
New-ItemProperty -Path "HKLM:\SOFTWARE\Policies\Microsoft\Windows\PowerShell\ModuleLogging" -Name "EnableModuleLogging" -PropertyType "DWORD" -Value "1" -Force
|
||
New-ItemProperty -Path "HKLM:\SOFTWARE\Policies\Microsoft\Windows\PowerShell\ModuleLogging\ModuleNames" -Name "*" -PropertyType "String" -Value "*" -Force
|
||
|
||
#Enable Windows Sandbox
|
||
if (Get-WindowsEdition -Online | Where-Object -FilterScript { $_.Edition -eq "Professional" -or $_.Edition -like "Enterprise*" }) {
|
||
# Checking whether x86 virtualization is enabled in the firmware
|
||
if ((Get-CimInstance -ClassName CIM_Processor).VirtualizationFirmwareEnabled -eq $true) {
|
||
Enable-WindowsOptionalFeature -FeatureName Containers-DisposableClientVM -All -Online -NoRestart
|
||
}
|
||
else {
|
||
try {
|
||
# Determining whether Hyper-V is enabled
|
||
if ((Get-CimInstance -ClassName CIM_ComputerSystem).HypervisorPresent -eq $true) {
|
||
Enable-WindowsOptionalFeature -FeatureName Containers-DisposableClientVM -All -Online -NoRestart
|
||
}
|
||
}
|
||
catch [System.Exception] {
|
||
Write-Error -Message $Localization.EnableHardwareVT -ErrorAction SilentlyContinue
|
||
}
|
||
}
|
||
}
|
||
}
|