My (humble) contribution

You need to login to view this posts content.

 

my bad...did without thinking that many people use wifi, might certainly be Wlan service! will check it.
try this one

Code:

@echo off
%windir%\system32\whoami.exe /USER | find /i "S-1-5-18" 1>NUL && (
goto :OK
) || (
nsudo -U:T -P:E "%~dpnx0"& exit /b >NUL 2>&1
)

:OK
set "AUTO=AudioEndpointBuilder,Audiosrv,BFE,BrokerInfrastructure,CoreMessagingRegistrar,CryptSvc,DcomLaunch,ddpvssvc,Dhcp,Dnscache,DPS,DusmSvc,EventLog,EventSystem,FontCache,gpsvc,IKEEXT,LSM,mpssvc,NlaSvc,nsi,Power,ProfSvc,RpcEptMapper,RpcSs,SamSs,Schedule,SENS,ShellHWDetection,sppsvc,SysMain,SystemEventsBroker,Themes,TrkWks,UserManager,UsoSvc,Wcmsvc,wfcs,WinDefend,Winmgmt,WlanSvc,wscsvc,WSearch"
set "DEMAND=AppIDSvc,Appinfo,AppReadiness,AppXSvc,AssignedAccessManagerSvc,AxInstSV,BDESVC,BITS,camsvc,ClipSVC,COMSysApp,ddpsvc,defragsvc,DeviceInstall,DevQueryBroker,diagsvc,DisplayEnhancementService,DmEnrollmentSvc,dot3svc,DsmSvc,DsSvc,Eaphost,EFS,embeddedmode,EntAppSvc,fdPHost,FontCache3.0.0.0,GraphicsPerfSvc,hidserv,InstallService,jhi_service,KeyIso,KtmRm,LicenseManager,lltdsvc,LMS,LxpSvc,MSDTC,msiserver,Netman,netprofm,NetSetupSvc,NgcCtnrSvc,NgcSvc,p2pimsvc,p2psvc,perceptionsimulation,PerfHost,pla,PlugPlay,PNRPAutoReg,PNRPsvc,PolicyAgent,QWAVE,seclogon,SecurityHealthService,Sense,SentinelKeysServer,SentinelProtectionServer,SentinelSecurityRuntime,smphost,spectrum,SstpSvc,StateRepository,StorSvc,svsvc,swprv,TieringEngineService,TimeBrokerSvc,TokenBroker,TrustedInstaller,VaultSvc,vds,VSS,WaaSMedicSvc,WalletService,WarpJITSvc,wbengine,WdiServiceHost,WdiSystemHost,WdNisSvc,Wecsvc,WEPHOSTSVC,wercplsupport,wlpasvc,WManSvc,wmiApSrv,WPDBusEnum,wuauserv,cbdhsvc,DevicesFlowUserSvc,WpnUserService"
set "DISABLED=AJRouter,ALG,AppMgmt,AppVClient,BTAGService,BthAvctpSvc,bthserv,CDPSvc,CertPropSvc,CscService,DeviceAssociationService,diagnosticshub.standardcollector.service,DiagTrack,dmwappushservice,DoSvc,FDResPub,fhsvc,FrameServer,HvHost,IAStorDataMgrSvc,icssvc,iphlpsvc,IpxlatCfgSvc,irmon,LanmanServer,LanmanWorkstation,lfsvc,lmhosts,MapsBroker,MSiSCSI,NaturalAuthentication,NcaSvc,NcbService,NcdAutoSetup,Netlogon,NetTcpPortSharing,PcaSvc,PeerDistSvc,PhoneSvc,PrintNotify,PushToInstall,RasAuto,RasMan,RemoteAccess,RemoteRegistry,RetailDemo,RmSvc,RpcLocator,SCardSvr,ScDeviceEnum,SCPolicySvc,SDRSVC,SEMgrSvc,SensorDataService,SensorService,SensrSvc,SessionEnv,SgrmBroker,SharedAccess,SharedRealitySvc,shpamsvc,SmsRouter,SNMPTRAP,Spooler,SSDPSRV,ssh-agent,stisvc,TabletInputService,TapiSrv,TermService,tzautoupdate,UevAgentService,UmRdpService,upnphost,VacSvc,vmicguestinterface,vmicheartbeat,vmickvpexchange,vmicrdv,vmicshutdown,vmictimesync,vmicvmsession,vmicvss,W32Time,WbioSrvc,wcncsvc,WebClient,WerSvc,WFDSConMgrSvc,WiaRpc,WinHttpAutoProxySvc,WinRM,wisvc,wlidsvc,WpcMonSvc,WpnService,WwanSvc,XblAuthManager,XblGameSave,XboxGipSvc,XboxNetApiSvc,BcastDVRUserService,BluetoothUserService,CaptureService,CDPUserSvc,ConsentUxUserSvc,DevicePickerUserSvc,MessagingService,PimIndexMaintenanceSvc,PrintWorkflowUserSvc,UnistoreSvc,UserDataSvc"

for %%G in (%AUTO%) do reg query HKLM\SYSTEM\ControlSet001\Services\%%G /v Start 1>NUL 2>NUL && reg add HKLM\SYSTEM\ControlSet001\Services\%%G /v Start /t REG_DWORD /d 2 /f
for %%G in (%DEMAND%) do reg query HKLM\SYSTEM\ControlSet001\Services\%%G /v Start 1>NUL 2>NUL && reg add HKLM\SYSTEM\ControlSet001\Services\%%G /v Start /t REG_DWORD /d 3 /f
for %%G in (%DISABLED%) do reg query HKLM\SYSTEM\ControlSet001\Services\%%G /v Start 1>NUL 2>NUL && reg add HKLM\SYSTEM\ControlSet001\Services\%%G /v Start /t REG_DWORD /d 4 /f
for %%G in (%AUTO%) do sc config %%G start= AUTO
for %%G in (%DEMAND%) do sc config %%G start= DEMAND
for %%G in (%DISABLED%) do sc config %%G start= DISABLED

echo Press any key to exit...
pause >NUL & exit /b

 

sorry thought it was obvious that script needs NSudo (for complete services optimization)...
for your case simply enable wlan service, as @angelsanges said...or run script without Nsudo for "regular" optimization...like this:

Code:

@echo off
set "AUTO=AudioEndpointBuilder,Audiosrv,BFE,BrokerInfrastructure,CoreMessagingRegistrar,CryptSvc,DcomLaunch,ddpvssvc,Dhcp,Dnscache,DPS,DusmSvc,EventLog,EventSystem,FontCache,gpsvc,IKEEXT,LSM,mpssvc,NlaSvc,nsi,Power,ProfSvc,RpcEptMapper,RpcSs,SamSs,Schedule,SENS,ShellHWDetection,sppsvc,SysMain,SystemEventsBroker,Themes,TrkWks,UserManager,UsoSvc,Wcmsvc,wfcs,WinDefend,Winmgmt,WlanSvc,wscsvc,WSearch"
set "DEMAND=AppIDSvc,Appinfo,AppReadiness,AppXSvc,AssignedAccessManagerSvc,AxInstSV,BDESVC,BITS,camsvc,ClipSVC,COMSysApp,ddpsvc,defragsvc,DeviceInstall,DevQueryBroker,diagsvc,DisplayEnhancementService,DmEnrollmentSvc,dot3svc,DsmSvc,DsSvc,Eaphost,EFS,embeddedmode,EntAppSvc,fdPHost,FontCache3.0.0.0,GraphicsPerfSvc,hidserv,InstallService,jhi_service,KeyIso,KtmRm,LicenseManager,lltdsvc,LMS,LxpSvc,MSDTC,msiserver,Netman,netprofm,NetSetupSvc,NgcCtnrSvc,NgcSvc,p2pimsvc,p2psvc,perceptionsimulation,PerfHost,pla,PlugPlay,PNRPAutoReg,PNRPsvc,PolicyAgent,QWAVE,seclogon,SecurityHealthService,Sense,SentinelKeysServer,SentinelProtectionServer,SentinelSecurityRuntime,smphost,spectrum,SstpSvc,StateRepository,StorSvc,svsvc,swprv,TieringEngineService,TimeBrokerSvc,TokenBroker,TrustedInstaller,VaultSvc,vds,VSS,WaaSMedicSvc,WalletService,WarpJITSvc,wbengine,WdiServiceHost,WdiSystemHost,WdNisSvc,Wecsvc,WEPHOSTSVC,wercplsupport,wlpasvc,WManSvc,wmiApSrv,WPDBusEnum,wuauserv,cbdhsvc,DevicesFlowUserSvc,WpnUserService"
set "DISABLED=AJRouter,ALG,AppMgmt,AppVClient,BTAGService,BthAvctpSvc,bthserv,CDPSvc,CertPropSvc,CscService,DeviceAssociationService,diagnosticshub.standardcollector.service,DiagTrack,dmwappushservice,DoSvc,FDResPub,fhsvc,FrameServer,HvHost,IAStorDataMgrSvc,icssvc,iphlpsvc,IpxlatCfgSvc,irmon,LanmanServer,LanmanWorkstation,lfsvc,lmhosts,MapsBroker,MSiSCSI,NaturalAuthentication,NcaSvc,NcbService,NcdAutoSetup,Netlogon,NetTcpPortSharing,PcaSvc,PeerDistSvc,PhoneSvc,PrintNotify,PushToInstall,RasAuto,RasMan,RemoteAccess,RemoteRegistry,RetailDemo,RmSvc,RpcLocator,SCardSvr,ScDeviceEnum,SCPolicySvc,SDRSVC,SEMgrSvc,SensorDataService,SensorService,SensrSvc,SessionEnv,SgrmBroker,SharedAccess,SharedRealitySvc,shpamsvc,SmsRouter,SNMPTRAP,Spooler,SSDPSRV,ssh-agent,stisvc,TabletInputService,TapiSrv,TermService,tzautoupdate,UevAgentService,UmRdpService,upnphost,VacSvc,vmicguestinterface,vmicheartbeat,vmickvpexchange,vmicrdv,vmicshutdown,vmictimesync,vmicvmsession,vmicvss,W32Time,WbioSrvc,wcncsvc,WebClient,WerSvc,WFDSConMgrSvc,WiaRpc,WinHttpAutoProxySvc,WinRM,wisvc,wlidsvc,WpcMonSvc,WpnService,WwanSvc,XblAuthManager,XblGameSave,XboxGipSvc,XboxNetApiSvc,BcastDVRUserService,BluetoothUserService,CaptureService,CDPUserSvc,ConsentUxUserSvc,DevicePickerUserSvc,MessagingService,PimIndexMaintenanceSvc,PrintWorkflowUserSvc,UnistoreSvc,UserDataSvc"

for %%G in (%AUTO%) do reg query HKLM\SYSTEM\ControlSet001\Services\%%G /v Start 1>NUL 2>NUL && reg add HKLM\SYSTEM\ControlSet001\Services\%%G /v Start /t REG_DWORD /d 2 /f
for %%G in (%DEMAND%) do reg query HKLM\SYSTEM\ControlSet001\Services\%%G /v Start 1>NUL 2>NUL && reg add HKLM\SYSTEM\ControlSet001\Services\%%G /v Start /t REG_DWORD /d 3 /f
for %%G in (%DISABLED%) do reg query HKLM\SYSTEM\ControlSet001\Services\%%G /v Start 1>NUL 2>NUL && reg add HKLM\SYSTEM\ControlSet001\Services\%%G /v Start /t REG_DWORD /d 4 /f
for %%G in (%AUTO%) do sc config %%G start= AUTO
for %%G in (%DEMAND%) do sc config %%G start= DEMAND
for %%G in (%DISABLED%) do sc config %%G start= DISABLED

echo Press any key to exit...
pause >NUL & exit /b

 

The optimization was intended for a single workstation (not for a computer in a network) connected in wlan...
For file sharing you need lanman workstation on "automatic"
ps: and maybe FDResPub (Function Discovery Resource Publication) on "manual" as well.(Function Discovery Resource Publication) fdPHost is already on "manual".

so...to synthetize, if you need filesharing + wifi + total optimization for LTSC, download NSudo, put it next to the script and make script like this:

Code:

@echo off
%windir%\system32\whoami.exe /USER | find /i "S-1-5-18" 1>nul && (
goto :OK
) || (
"%~dp0NSudo.exe" -U:T -P:E "%~dpnx0"&exit /b >NUL 2>&1
)
:OK
set "AUTO=AudioEndpointBuilder,Audiosrv,BFE,BrokerInfrastructure,CoreMessagingRegistrar,CryptSvc,DcomLaunch,ddpvssvc,Dhcp,Dnscache,DPS,DusmSvc,EventLog,EventSystem,FontCache,gpsvc,IKEEXT,LSM,mpssvc,NlaSvc,nsi,Power,ProfSvc,RpcEptMapper,RpcSs,SamSs,Schedule,SENS,ShellHWDetection,sppsvc,SysMain,SystemEventsBroker,Themes,TrkWks,UserManager,UsoSvc,Wcmsvc,wfcs,WinDefend,Winmgmt,wscsvc,WSearch,WlanSvc,LanmanWorkstation"
set "DEMAND=AppIDSvc,Appinfo,AppReadiness,AppXSvc,AssignedAccessManagerSvc,AxInstSV,BDESVC,BITS,camsvc,ClipSVC,COMSysApp,ddpsvc,defragsvc,DeviceInstall,DevQueryBroker,diagsvc,DisplayEnhancementService,DmEnrollmentSvc,dot3svc,DsmSvc,DsSvc,Eaphost,EFS,embeddedmode,EntAppSvc,fdPHost,FontCache3.0.0.0,GraphicsPerfSvc,hidserv,InstallService,jhi_service,KeyIso,KtmRm,LicenseManager,lltdsvc,LMS,LxpSvc,MSDTC,msiserver,Netman,netprofm,NetSetupSvc,NgcCtnrSvc,NgcSvc,p2pimsvc,p2psvc,perceptionsimulation,PerfHost,pla,PlugPlay,PNRPAutoReg,PNRPsvc,PolicyAgent,QWAVE,seclogon,SecurityHealthService,Sense,SentinelKeysServer,SentinelProtectionServer,SentinelSecurityRuntime,smphost,spectrum,SstpSvc,StateRepository,StorSvc,svsvc,swprv,TieringEngineService,TimeBrokerSvc,TokenBroker,TrustedInstaller,VaultSvc,vds,VSS,WaaSMedicSvc,WalletService,WarpJITSvc,wbengine,WdiServiceHost,WdiSystemHost,WdNisSvc,Wecsvc,WEPHOSTSVC,wercplsupport,wlpasvc,WManSvc,wmiApSrv,WPDBusEnum,wuauserv,cbdhsvc,DevicesFlowUserSvc,WpnUserService,FDResPub"
set "DISABLED=AJRouter,ALG,AppMgmt,AppVClient,BTAGService,BthAvctpSvc,bthserv,CDPSvc,CertPropSvc,CscService,DeviceAssociationService,diagnosticshub.standardcollector.service,DiagTrack,dmwappushservice,DoSvc,fhsvc,FrameServer,HvHost,IAStorDataMgrSvc,icssvc,iphlpsvc,IpxlatCfgSvc,irmon,LanmanServer,lfsvc,lmhosts,MapsBroker,MSiSCSI,NaturalAuthentication,NcaSvc,NcbService,NcdAutoSetup,Netlogon,NetTcpPortSharing,PcaSvc,PeerDistSvc,PhoneSvc,PrintNotify,PushToInstall,RasAuto,RasMan,RemoteAccess,RemoteRegistry,RetailDemo,RmSvc,RpcLocator,SCardSvr,ScDeviceEnum,SCPolicySvc,SDRSVC,SEMgrSvc,SensorDataService,SensorService,SensrSvc,SessionEnv,SgrmBroker,SharedAccess,SharedRealitySvc,shpamsvc,SmsRouter,SNMPTRAP,Spooler,SSDPSRV,ssh-agent,stisvc,TabletInputService,TapiSrv,TermService,tzautoupdate,UevAgentService,UmRdpService,upnphost,VacSvc,vmicguestinterface,vmicheartbeat,vmickvpexchange,vmicrdv,vmicshutdown,vmictimesync,vmicvmsession,vmicvss,W32Time,WbioSrvc,wcncsvc,WebClient,WerSvc,WFDSConMgrSvc,WiaRpc,WinHttpAutoProxySvc,WinRM,wisvc,wlidsvc,WpcMonSvc,WpnService,WwanSvc,XblAuthManager,XblGameSave,XboxGipSvc,XboxNetApiSvc,BcastDVRUserService,BluetoothUserService,CaptureService,CDPUserSvc,ConsentUxUserSvc,DevicePickerUserSvc,MessagingService,PimIndexMaintenanceSvc,PrintWorkflowUserSvc,UnistoreSvc,UserDataSvc"

for %%G in (%AUTO%) do reg query HKLM\SYSTEM\ControlSet001\Services\%%G /v Start 1>NUL 2>NUL && reg add HKLM\SYSTEM\ControlSet001\Services\%%G /v Start /t REG_DWORD /d 2 /f
for %%G in (%DEMAND%) do reg query HKLM\SYSTEM\ControlSet001\Services\%%G /v Start 1>NUL 2>NUL && reg add HKLM\SYSTEM\ControlSet001\Services\%%G /v Start /t REG_DWORD /d 3 /f
for %%G in (%DISABLED%) do reg query HKLM\SYSTEM\ControlSet001\Services\%%G /v Start 1>NUL 2>NUL && reg add HKLM\SYSTEM\ControlSet001\Services\%%G /v Start /t REG_DWORD /d 4 /f
for %%G in (%AUTO%) do sc config %%G start= AUTO
for %%G in (%DEMAND%) do sc config %%G start= DEMAND
for %%G in (%DISABLED%) do sc config %%G start= DISABLED

echo Press any key to exit...
pause >NUL & exit /b

 

That's exactly the point...From the start Optimization project was intended for single workstations with heavy workload, like professional sound or 3D applications (=Machines intended for a single task type)
That's why wlan, filesharing as well as any kind of notification are disabled. I should have first mentioned...
I will take your recommandations though, and surely make another one for "regular users" with wlan and notification enabled.

I already made a newer one with a "main menu" to apply things separately or reverse them if needed. I'm testing it now, I optimized services part which is way faster.
But it's a long task, lots of hits and miss (also taking in consideration that's my first attempt to do a big script/project)

About the "background apps", are you talking about the setting in "app privacy" as well ? because they are a lot of notifications settings, also in custom policies set for ex...
I'd need to test anyway...Also I personally disable action center on my machine so not easy to test everything.

all the drop.me links are dead it seems...New year present I will re-upload them...
Do you guys have a favorite site for "small" uploads like this?

 

Just uploaded a new version including your requests (and more)
Heres the changelog: Optimize NextGen v.2
-Now includes a Main Menu to apply full optimization, or only parts of the script (cf spoiler screenshots).
-Merged Server and LTSC in one unique .bat: Windows edition is detected inside the script.
-Added Power Management Settings to "Performances Settings part" (cf spoiler screenshots).
-Services backup is now (much) faster.
-Included NSudo to apply complete services optimization.
-Added Trim (as an Option), only for system drive. Note: if your C:\ drive isn't a SSD, command will simply pass, it won't run hdd defrag (so, don't worry if you pressed yes by mistake)
-Firefox Policies are now optional (requested by PsychedelicShaman ).
-Background apps, Camera and Microphone are now set to "User is in control" in Group Policy (thanks to PsychedelicShaman ).
-Few registry tweaks added (like Shutdown Event Tracer and DisableCAD).
-Resetting Group Policy Security Settings is now optional. Note: if you choose to reset, don't worry, database is also saved (cf spoiler notes).
-Added few security settings (rights delegation and password policy). Note: strong password policy is ON by default on Windows Server, not sure about LTSC.
-Backup folder with settings and scripts is now saved in script folder (instead of Desktop).
-Optimized all included apply/restore scripts, and added some more. Note: "Restore Group Policy from backup" and "Optimize Group Policy" scripts obviously require to keep the same folder structure.
-Added nice colors and title to tittle bar (cf spoiler screenshots). ANSI Escape sequences (supported since Threshold 2 Update) was fun in the beginning, but rapidely ended up a nightmare to have it set perfect in script...
-Added Powershell command to resize batch window without resizing buffer height.
-Added Ultimate Performance PowerScheme setting in Power Management, to set it or create Powerscheme if missing (and restore default GUID). There is a bug in windows, if you ever change Powerscheme through powercfg /S command, Ultimate Performance PowerScheme vanishes. You can easily recreate it with powercfg -duplicatescheme e9a42b02-d5df-448d-aa00-03f14749eb61 command, but it then creates a new GUID in registry...Too ugly! Had to fix that...You'll have Ultimate Performance with default GUID.
Link: https://forums.mydigitallife.net/threads/custom-policies-set.78129/#post-1492437

 

Just uploaded new version of Personalize Project.
Changelog:

-Added SetACL to "Required_Scripts_and_Tools": When one use WFC with Secure Profile ON, SetACL is required to change registry authorizations (together with NSudo) and "Toggle Firewall" and "Windows Update" scripts to work...
Forgot about it because I had it installed since long time and thought it was a "Windows file".
-Added NSudoG (and NSudoC) : "RunExplorerShellAsTrustedInstaller", and other scripts requiring NSudo launch faster with NsudoG.
-Replaced Setx command by pathman (from windows ressource kit 2003) to set System Environment Variables Path better when installing scripts and tools. Setx truncates the path after 1024 character limit, which means if you have a lot of paths in your "system environment variables path", the command will not append the path, and will truncate existing ones after 1024 characters. 2nd win, pathman does not append path if path already exists, making install script easier and more "robust".
-Updated NSudo Installer app and script and Windows Update script as of 08-01-2019.
-Added Optional Winrar and 7zip Context Menus to display one next to the other in context menu, (and with 7-zip logically/alphabetically first).
-Added some file types to Notepad++ context menu.
-Fixed "run Powershell as Admin" context menu commands, which were not parsed correctly to the registry, and found an even better way to get it right set.
-Changed all scripts and apps accordingly...

 

Thanks a lot! Fixed...

Optimize NextGen (v2.5) and Personalize NextGen updated again today...