[Script] Windows 10 TNBT (The next big Tweak) v6.5.6 -official thread-

This is most handy tools.. Awesome!

 

good job keep it up

 

No see options

 

Yes.

 

Do you have powershell?

 

You need to login to view this posts content.

 

I tried to apply the Registry Tweaks 1/1 and things works as described but after that I apply Recover Registry 1/4 and it is not the same.
I didn't get back at the same initial state, had to do some mod in Registry for telemetry, defender, insider etc.... I am not sure some other still modified by applying the tweaks.
Is this normal that recover is not complete?
Thanks for the great job

 

FYI, I have a more up to date version of the elevation script you use, which is architecture friendly.

Code:

:: BatchGotAdmin
:-------------------------------------
REM  --> Check for permissions
    IF "%PROCESSOR_ARCHITECTURE%" EQU "amd64" (
>nul 2>&1 "%SYSTEMROOT%\SysWOW64\cacls.exe" "%SYSTEMROOT%\SysWOW64\config\system"
) ELSE (
>nul 2>&1 "%SYSTEMROOT%\System32\cacls.exe" "%SYSTEMROOT%\System32\config\system"
)

REM --> If error flag set, we do not have admin.
if '%errorlevel%' NEQ '0' (
    echo Requesting administrative privileges...
    goto UACPrompt
) else ( goto gotAdmin )

:UACPrompt
    echo Set UAC = CreateObject^("Shell.Application"^) > "%temp%\getadmin.vbs"
    set params = %*:"=""
    echo UAC.ShellExecute "cmd.exe", "/c ""%~s0"" %params%", "", "runas", 1 >> "%temp%\getadmin.vbs"

    "%temp%\getadmin.vbs"
    del "%temp%\getadmin.vbs"
    exit /B

:gotAdmin
    if exist "%temp%\getadmin.vbs" ( del "%temp%\getadmin.vbs" )
    pushd "%CD%"
    CD /D "%~dp0"

PS: I haven't checked for additional changed, I just noticed yours didn't have the entries for 64-bit architecture.

 

Windows 10 Pro Insider 14915 64 bits and no error display but example fix me in insider preview was greyed , I had to go delete a line in registry HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection
deleted AllowTelemetry

 

Okay, so I'm looking through your script here, and I'm noticing many things.
Firstly, as I stated previously, your elevation portion is not architecture friendly(I posted a couple posts back with updated script)

Spoiler

Code:

:: BatchGotAdmin
:-------------------------------------
REM  --> Check for permissions
    IF "%PROCESSOR_ARCHITECTURE%" EQU "amd64" (
>nul 2>&1 "%SYSTEMROOT%\SysWOW64\cacls.exe" "%SYSTEMROOT%\SysWOW64\config\system"
) ELSE (
>nul 2>&1 "%SYSTEMROOT%\System32\cacls.exe" "%SYSTEMROOT%\System32\config\system"
)

REM --> If error flag set, we do not have admin.
if '%errorlevel%' NEQ '0' (
    echo Requesting administrative privileges...
    goto UACPrompt
) else ( goto gotAdmin )

:UACPrompt
    echo Set UAC = CreateObject^("Shell.Application"^) > "%temp%\getadmin.vbs"
    set params = %*:"=""
    echo UAC.ShellExecute "cmd.exe", "/c ""%~s0"" %params%", "", "runas", 1 >> "%temp%\getadmin.vbs"
    "%temp%\getadmin.vbs"
    del "%temp%\getadmin.vbs"
    exit /B
:gotAdmin
    if exist "%temp%\getadmin.vbs" ( del "%temp%\getadmin.vbs" )
    pushd "%CD%"
    CD /D "%~dp0"
:--------------------------------------

Secondly, Why are you setting the build number of Windows on line 6 but not detecting it? Granted, this doesn't -matter- but it's going to be incorrect for various users.

Spoiler

This, for example, will save the windows version to the variable WIN_VER_NUM

Code:

FOR /f "tokens=4*" %%i IN ('reg query "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion" /v ProductName ^| Find "ProductName"') DO set WIN_NAME=%%j
FOR /f "tokens=4 delims=[] " %%i IN ('ver') DO set WIN_VER_NUM=%%i

Thirdly, -over- 90% of your code is not commented or detailed in any way, so there's no way to navigate the script to review functions we may or may not want to perform. I recommend grouping together all the lines for a particular feature or function of windows you're changing, and detail what you're doing and why. It's very hard to trust any script, even after reviewing the code if it's not organized and outlined.

One example of skepticism would be that you're submitting information to SpyNet on line 595, but not reporting Infection information to Windows Malicious Software Removal Tool on line 583. Since both are technically speaking SpyNet, you've contradicted your own decision on information reported.

Another example is that you're enabling cortana, but disabling web search - which is how cortana works. by searching the web.

Back to the drawing board, I think - or better yet, post it to GitHub and allow people to help contribute to it.
Clearly outline in your readme what you're trying to achieve, and allow people to fix mistakes such as those above.

PS: Why are you changing the AdobeARMservice? This is not a service present in Windows by default. Most people running this script, if any, will be running it on a freshly installed OS. That would mean before installing Adobe programs.

 

Suppose herein lies the issue with not commenting your code properly

And no, I certainly didn't say it was a replacement for any particular tool. I said it's harder to navigate so as to modify the tasks we don't wish to perform.
The problem with this type of script, is that everyone has different needs. No one set of tweaks will suit even the vast majority of people, let alone everyone.

As for the elevation bit, it's just the 'proper' way to do things.

Lastly, if you're worried about code that doesn't -have- to be there, I again bring focus to the build number variable, which in this case is absolutely pointless, but if it did have a purpose, it would be 'proper' to detect and store the correct build number.


Anyway, I hope this turns into a decent project, but my point wasn't to poke holes in it, it's to give constructive criticism to let you know it's got potential, but has a long way to come before it's very useful, or completely trustworthy.
Cheers!