None... But I do stop the cloud thingy starting when Windows starts. I do turn off all those Live Tiles too.
Code: CertPropSvc CDPSvc CDPUserSvc CscService DiagTrack DoSvc DevicesFlow DevicesFlowUserSvc DevQueryBroker DsmSvc DusmSvc DPS diagnosticshub.standardcollector.service dmwappushservice MapsBroker MessagingService OneSyncSvc PimIndexMaintenanceSvc PrintWorkflowUserSvc PcaSvc RemoteRegistry SmsRouter Spooler TrkWks StiSvc SecurityHealthService Sense UnistoreSvc UserDataSvc WpnUserService WerSvc WMPNetworkSvc WSearch WdNisDrv WdNisSvc WinDefend
$services = @( "CDPSvc", "DiagTrack", "diagnosticshub.standardcollector.service", "dmwappushservice", "DusmSvc", "lfsvc", "MapsBroker", "NcbService", "SSDPSRV", "tiledatamodelsvc", "wcncsvc") Foreach ($service In $services) { Get-Service $service | Stop-Service -ErrorAction SilentlyContinue Get-Service $service | Set-Service -StartupType Disabled -ErrorAction SilentlyContinue } Remove-Variable services Script for Win 10 1709. I disable only these on any new PC at work.
You mean like this? Spoiler: specialize.cmd Code: @echo off reg add HKLM\SOFTWARE\Classes\CLSID\{031E4825-7B94-4dc3-B131-E946B44C8DD5}\ShellFolder /f /v Attributes /t REG_DWORD /d 2962227469 reg add HKLM\SOFTWARE\Classes\CLSID\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}\ShellFolder /f /v Attributes /t REG_DWORD /d 2962489444 reg add HKLM\SOFTWARE\Classes\CLSID\{B4FB3F98-C1EA-428d-A78A-D1F5659CBA93}\ShellFolder /f /v Attributes /t REG_DWORD /d 2962489612 reg add HKLM\SOFTWARE\Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\ShellFolder /f /v Attributes /t REG_DWORD /d 4035969101 reg add HKLM\SOFTWARE\Microsoft\WindowsSelfHost\UI\Visibility /v HideInsiderPage /t REG_DWORD /d 1 /f reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ConnectedSearch /v ConnectedSearchUseWeb /t REG_DWORD /d 0 /f reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OOBE /v DisableVoice /t REG_DWORD /d 1 /f reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System /v EnableFirstLogonAnimation /t REG_DWORD /d 0 /f reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System /v PromptOnSecureDesktop /t REG_DWORD /d 0 /f reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System /v ConsentPromptBehaviorAdmin /t REG_DWORD /d 0 /f reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack /v DiagTrackAuthorization /t REG_DWORD /d 0 /f reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsStore\WindowsUpdate /v AutoDownload /t REG_DWORD /d 5 /f reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU /v AUOptions /t REG_DWORD /d 2 /f reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU /v NoAutoUpdate /t REG_DWORD /d 0 /f reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate /v ExcludeWUDriversInQualityUpdate /t REG_DWORD /d 1 /f reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\OneDrive /v DisableFileSyncNGSC /t REG_DWORD /d 1 /f reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization /v DODownloadMode /t REG_DWORD /d 100 /f reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\CloudContent /v DisableWindowsConsumerFeatures /t REG_DWORD /d 1 /f reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\CloudContent /v DisableSoftLanding /t REG_DWORD /d 1 /f reg add HKLM\SOFTWARE\Policies\Microsoft\MRT /v DontOfferThroughWUAU /t REG_DWORD /d 1 /f reg add HKLM\SOFTWARE\Policies\Microsoft\MRT /v DontReportInfectionInformation /t REG_DWORD /d 1 /f reg add HKLM\SOFTWARE\Policies\Microsoft\SQMClient\Windows /v CEIPEnable /t REG_DWORD /d 0 /f reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\DataCollection /v DoNotShowFeedbackNotifications /t REG_DWORD /d 1 /f reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\System /v EnableCdp /t REG_DWORD /d 0 /f reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\DriverSearching /v SearchOrderConfig /t REG_DWORD /d 0 /f reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Device Metadata" /v PreventDeviceMetadataFromNetwork /t REG_DWORD /d 1 /f reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /v AllowCortana /t REG_DWORD /d 0 /f reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /v AllowSearchToUseLocation /t REG_DWORD /d 0 /f reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender" /v DisableAntiSpyware /t REG_DWORD /d 1 /f reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" /v DisableRealtimeMonitoring /t REG_DWORD /d 1 /f reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" /v DisableOnAccessProtection /t REG_DWORD /d 1 /f reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" /v DisableScanOnRealtimeEnable /t REG_DWORD /d 1 /f reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\UX Configuration" /v Notification_Suppress /t REG_DWORD /d 1 /f reg add "HKLM\SOFTWARE\Microsoft\Windows Defender\Spynet" /v SpyNetReporting /t REG_DWORD /d 0 /f reg add "HKLM\SOFTWARE\Microsoft\Windows Defender\Spynet" /v SubmitSamplesConsent /t REG_DWORD /d 2 /f reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkList\DefaultMediaCost" /v Default /t REG_DWORD /d 2 /f reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkList\DefaultMediaCost" /v Ethernet /t REG_DWORD /d 2 /f reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkList\DefaultMediaCost" /v WiFi /t REG_DWORD /d 2 /f reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkList\DefaultMediaCost" /v 3G /t REG_DWORD /d 2 /f reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkList\DefaultMediaCost" /v 4G /t REG_DWORD /d 2 /f reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing" /v DisableRemovePayload /t REG_DWORD /d 0 /f reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing" /v EnableDpxLog /t REG_DWORD /d 0 /f reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Configuration /v DisableComponentBackups /t REG_DWORD /d 1 /f reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Configuration /v DisableResetbase /t REG_DWORD /d 0 /f reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Configuration /v CBSLogCompress /t REG_DWORD /d 1 /f reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Configuration /v NumCBSPersistLogs /t REG_DWORD /d 1 /f reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Configuration /v LatentActions /t REG_DWORD /d 1 /f reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Configuration /v SupersededActions /t REG_DWORD /d 1 /f reg add HKLM\SYSTEM\ControlSet001\Control\Diagnostics\Performance /f /v DisableDiagnosticTracing /t REG_DWORD /d 1 reg add HKLM\SYSTEM\ControlSet001\Control\Diagnostics\Performance\BootCKCLSettings /f /v Start /t REG_DWORD /d 0 reg add HKLM\SYSTEM\ControlSet001\Control\Diagnostics\Performance\SecondaryLogonCKCLSettings /f /v Start /t REG_DWORD /d 0 reg add HKLM\SYSTEM\ControlSet001\Control\Diagnostics\Performance\ShutdownCKCLSettings /f /v Start /t REG_DWORD /d 0 reg add HKLM\SYSTEM\ControlSet001\Control\Network\NewNetworkWindowOff /f reg add HKLM\SYSTEM\ControlSet001\Services\FontCache\Parameters /f /v DisableFontProviders /t REG_DWORD /d 1 regsvr32 /u /s "%ProgramFiles%\Windows Defender\shellext.dll" reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v WindowsDefender /f reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v SecurityHealth /f reg add HKLM\SYSTEM\ControlSet001\Services\LanmanServer\Parameters /v SMB1 /t REG_DWORD /d 0 /f sc config lanmanworkstation depend= bowser/mrxsmb20/nsi sc config mrxsmb10 start= disabled for /d %%G in (CertPropSvc,CDPSvc,CDPUserSvc,CscService,DiagTrack,DoSvc,DevicesFlow,DevicesFlowUserSvc,DevQueryBroker,DsmSvc,DusmSvc,DPS,diagnosticshub.standardcollector.service,dmwappushservice,MapsBroker,MessagingService,OneSyncSvc,PimIndexMaintenanceSvc,PrintWorkflowUserSvc,PcaSvc,RemoteRegistry,SmsRouter,Spooler,TrkWks,StiSvc,SecurityHealthService,Sense,UnistoreSvc,UserDataSvc,WpnUserService,WerSvc,WMPNetworkSvc,WSearch,WdNisDrv,WdNisSvc,WinDefend) do ( sc config %%G start= disabled ) for /d %%G in (AITEventLog,AppModel,AppPlat,Audio,BluetoothSession,DataMarket,DefenderApiLogger,DefenderAuditLogger,DiagLog,FaceRecoTel,FaceUnlock,HolographicDevice,LwtNetLog,Mellanox-Kernel,Microsoft-Windows-CloudFiles-Filter-Log,Microsoft-Windows-CloudFiles-Filter-Trace,Microsoft-Windows-Setup,NBSMBLOGGER,NetCore,NetCfgTrace,NtfsLog,PEAuthLog,ReadyBoot,RdrLog,SCM,SetupPlatform,SetupPlatformTel,SHS-12112016-172924-3-1,SpoolerLogger,SQMLogger,TCPIPLOGGER,Tpm,UserNotPresentTraceSession,WdiContextLog) do ( reg delete "HKLM\SYSTEM\ControlSet001\Control\WMI\AutoLogger\%%G" /f ) reg delete "HKLM\SYSTEM\ControlSet001\Control\WMI\AutoLogger\AutoLogger-Diagtrack-Listener" /f reg delete "HKLM\SYSTEM\ControlSet001\Control\WMI\AutoLogger\Diagtrack-Listener" /f reg delete "HKLM\SYSTEM\ControlSet001\Control\WMI\AutoLogger\Circular Kernel Context Logger" /f reg delete "HKLM\SYSTEM\ControlSet001\Control\WMI\AutoLogger\WFP-IPsec Trace" /f reg delete "HKLM\SYSTEM\ControlSet001\Control\WMI\AutoLogger\WPR_initiated_DiagTrackMiniLogger_WPR System Collector" /f reg import PhotoViewer.reg set key=HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\InboxApplications FOR %%i IN ( MicrosoftEdge holocamera holoitemplayerapp HoloShell PPIProjection AppRep.ChxApp ContentDeliveryManager Holograms HolographicFirstRun ParentalControls SecHealthUI SecureAssessmentBrowser XboxGameCallableUI ) DO ( FOR /F %%a IN ('reg query %key% /s /f %%i /k 2^>nul ^| find /i "InboxApplications"') DO IF NOT ERRORLEVEL 1 (reg delete %%a /f 2>nul) ) during installation through answer file autounattend.xml specialize > Microsoft-Windows-Deployment > RunSynchronousCommand point to specialize.cmd path
Well, I set these to manual: Connected User Experiences and Telemetry (To turn off Telemetry and Data Collection) Diagnostic Policy Service Distributed Link Tracking Client (If your computer is not connected to any network) dmwappushsvc (To turn off Telemetry and Data Collection) Downloaded Maps Manager (If you don't use Maps app) IP Helper (If you don't use IPv6 connection) Program Compatibility Assistant Service Remote Registry (You can set it to DISABLED for Security purposes) Secondary Logon TCP/IP NetBIOS Helper (If you are not in a workgroup network) Windows Error Reporting Service Windows Search (If you don't use Windows Search feature frequently)
The only downside to disabling dmwappushsvc is that WU will take a lot more time to finish a search. It's very noticeable under WUMT.
dmwappushservice is also required by some Windows notifications (Security Center). Do not disable "Distributed Link Tracking Client", it might break system shortcuts.
Code: [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv] "Start"=dword:00000004 I have disable this from reg file other disable with services, if some have idea for disable please tell for others Spoiler: Disable some services Code: Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinDefend] "Start"=dword:00000004 [HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WdBoot] "Start"=dword:00000004 [HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WdFilter] "Start"=dword:00000004 [HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WdNisDrv] "Start"=dword:00000004 [HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WdNisSvc] "Start"=dword:00000004 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WMPNetworkSvc] "Start"=dword:00000004 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WerSvc] "Start"=dword:00000004 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WpnUserService] "Start"=dword:00000004 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UserDataSvc] "Start"=dword:00000004 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UnistoreSvc] "Start"=dword:00000004 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sense] "Start"=dword:00000004 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CDPSvc] "Start"=dword:00000004 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CDPUserSvc] "Start"=dword:00000004 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CscService] "Start"=dword:00000004 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DiagTrack] "Start"=dword:00000004 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SmsRouter] "Start"=dword:00000004 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry] "Start"=dword:00000004 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PimIndexMaintenanceSvc] "Start"=dword:00000004 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\OneSyncSvc] "Start"=dword:00000004 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MessagingService] "Start"=dword:00000004 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MapsBroker] "Start"=dword:00000004 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\diagnosticshub.standardcollector.service] "Start"=dword:00000004 For who need disable windows update service Code: Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv] "Start"=dword:00000004 For Xbox services disable Code: Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\XboxNetApiSvc] "Start"=dword:00000004 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xboxgip] "Start"=dword:00000004 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\XblGameSave] "Start"=dword:00000004 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\XblAuthManager] "Start"=dword:00000004
You all forgot the most important Service to Disable "Windows Update", I Disable it in the ISO so clean installs can be peaceful.
Not that it matters too much, some "critical" services start even when disabled (depending on version you have), WU included.
That's what my services show: Windows Registry Editor Version 5.00 ;Application Layer Gateway Service [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ALG] "Start"=dword:00000004 ;Connected User Experiences and Telemetry [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DiagTrack] "Start"=dword:00000004 ;CDPUserSvc [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CDPUserSvc] "Start"=dword:00000004 ;Contact Data [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PimIndexMaintenanceSvc] "Start"=dword:00000004 ;DataCollectionPublishingService [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DcpSvc] "Start"=dword:00000003 ;DevicesFlow [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DevicesFlowUserSvc_?????] "Start"=dword:00000004 ;Diagnostic Policy Service [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ DPS] "Start"=dword:00000003 ;Diagnostic System Host [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WdiSystemHost] "Start"=dword:00000003 ;Distributed Link Tracking Client [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TrkWks] "Start"=dword:00000003 ;dmwappushsvc [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dmwappushservice] "Start"=dword:00000004 ;Downloaded Maps Manager [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MapsBroker] "Start"=dword:00000004 ;Enterprise App Management Service [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EntAppSvc] "Start"=dword:00000004 ;HV Host Service [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\HVHost] "Start"=dword:00000004 ;IKE and AuthIP IPsec Keying Modules [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\IKEEXT] "Start"=dword:00000003 ;Internet Connection Sharing (ICS) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess] "Start"=dword:00000004 ;IP Helper [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\iphlpsvc] "Start"=dword:00000003 ;MessagingService [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MessagingService] "Start"=dword:00000004 ;Microsoft iSCSI Initiator Service [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSiSCSI] "Start"=dword:00000004 ;Microsoft Windows SMS Router Service [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SmsRouter] "Start"=dword:00000004 ;Natural Authentication [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NaturalAuthentication] "Start"=dword:00000004 ;Net.Tcp Port Sharing Service [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetTcpPortSharing] "Start"=dword:00000004 ;Payments and NFC/SE Manager [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SEMgrSvc] "Start"=dword:00000004 ;Phone Service [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PhoneSvc] "Start"=dword:00000004 ;Print Spooler [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Spooler] "Start"=dword:00000003 ;Radio Management Service [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RmSvc] "Start"=dword:00000004 ;Remote Desktop Configuration [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SessionEnv] "Start"=dword:00000004 ;Remote Desktop Services [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TermService] "Start"=dword:00000004 ;Remote Desktop Services UserMode Port Redirector [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UmRdpService] "Start"=dword:00000004 ;Remote Procedure Call (RPC) Locator [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RpcLocator] "Start"=dword:00000004 ;Retail Demo Service [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RetailDemo] "Start"=dword:00000004 ;Sensor Data Service [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SensorService] "Start"=dword:00000004 ;Sensor Monitoring Service [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SensrSvc] "Start"=dword:00000004 ;Sensor Service [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SensorService] "Start"=dword:00000004 ;Smart Card Device Enumeration Service [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ScDeviceEnum] "Start"=dword:00000004 ;Smart Card Removal Policy [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SCPolicySvc] "Start"=dword:00000004 ;SNMP Trap [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SNMPTRAP] "Start"=dword:00000004 ;Superfetch [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SysMain] "Start"=dword:00000004 ;Sync Host [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\OneSyncSvc] "Start"=dword:00000003 ;Touch Keyboard and Handwriting Panel Service [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TabletInputService] "Start"=dword:00000004 ;Wi-Fi Direct Services Connection Manager Service [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WFDSConSvc] "Start"=dword:00000004 ;Windows Biometric Service [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WbioSrvc] "Start"=dword:00000004 ;Windows Camera Frame Server [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\FrameServer] "Start"=dword:00000004 ;Windows Connect Now - Config Registrar [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wcncsvc] "Start"=dword:00000003 ;Windows Firewall [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MpsSvc] "Start"=dword:00000003 ;Windows Mobile Hotspot Service [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\icssvc] "Start"=dword:00000004 ;Windows Push Notifications Service [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WpnService] "Start"=dword:00000003 ;Windows Remote Management (WS-Management) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinRM] "Start"=dword:00000004 ;Windows Search [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WSearch] "Start"=dword:00000004 ;Windows Update [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv] "Start"=dword:00000004 ;WLAN AutoConfig [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WlanSvc] "Start"=dword:00000003
What drivers? Spoiler: setupcomplete.cmd Code: @echo off powercfg -h off auditpol /set /subcategory:"Special Logon" /success:disable auditpol /set /subcategory:"Audit Policy Change" /success:disable auditpol /set /subcategory:"User Account Management" /success:disable reg import %~dp0Tweaks.reg reg delete "HKLM\SYSTEM\ControlSet001\Control\WMI\AutoLogger\AutoLogger-Diagtrack-Listener" /f reg delete "HKLM\SYSTEM\ControlSet001\Control\WMI\AutoLogger\Diagtrack-Listener" /f reg delete "HKLM\SYSTEM\ControlSet001\Control\WMI\AutoLogger\Circular Kernel Context Logger" /f reg delete "HKLM\SYSTEM\ControlSet001\Control\WMI\AutoLogger\SQMLogger" /f reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v WindowsDefender /f reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v SecurityHealth /f reg delete HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v OneDriveSetup /f reg add HKCU\SOFTWARE\Policies\Microsoft\Windows\CloudContent /v DisableWindowsSpotlightFeatures /t REG_DWORD /d 1 /f reg add HKCU\SOFTWARE\Policies\Microsoft\Windows\CloudContent /v DisableThirdPartySuggestions /t REG_DWORD /d 1 /f reg add HKCU\SOFTWARE\Policies\Microsoft\Windows\Explorer /v EnableLegacyBalloonNotifications /t REG_DWORD /d 1 /f reg add HKCU\SOFTWARE\Policies\Microsoft\Windows\Explorer /v DisableNotificationCenter /t REG_DWORD /d 1 /f SCHTASKS /Change /TN "Microsoft\Windows\SetupSQMTask" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\AppID\EDP Policy Manager" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\AppID\SmartScreenSpecific" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Application Experience\ProgramDataUpdater" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Application Experience\StartupAppTask" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\ApplicationData\appuriverifierdaily" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\ApplicationData\appuriverifierinstall" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\ApplicationData\DsSvcCleanup" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Autochk\Proxy" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\BrokerInfrastructure\BgTaskRegistrationMaintenanceTask" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Chkdsk\ProactiveScan" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\CloudExperienceHost\CreateObjectTask" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Customer Experience Improvement Program\BthSQM" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Customer Experience Improvement Program\Consolidator" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Customer Experience Improvement Program\KernelCeipTask" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Customer Experience Improvement Program\TelTask" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Customer Experience Improvement Program\UsbCeip" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Data Integrity Scan\Data Integrity Scan" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Data Integrity Scan\Data Integrity Scan for Crash Recovery" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Defrag\ScheduledDefrag" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Device Information\Device" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Diagnosis\Scheduled" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\DiskCleanup\SilentCleanup" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticResolver" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\DiskFootprint\Diagnostics" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\DiskFootprint\StorageSense" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\DUSM\dusmtask" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\ErrorDetails\EnableErrorDetailsUpdate" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\ErrorDetails\ErrorDetailsUpdate" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Feedback\Siuf\DmClient" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Feedback\Siuf\DmClientOnScenarioDownload" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\FileHistory\File History (maintenance mode)" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\LanguageComponentsInstaller\Installation" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\LanguageComponentsInstaller\Uninstallation" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Location\Notifications" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Location\WindowsActionDialog" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Maintenance\WinSAT" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Management\Provisioning\Cellular" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Management\Provisioning\Logon" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Maps\MapsToastTask" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Maps\MapsUpdateTask" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\MemoryDiagnostic\ProcessMemoryDiagnosticEvents" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\MemoryDiagnostic\RunFullMemoryDiagnostic" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\MUI\LPRemove" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\NetTrace\GatherNetworkInfo" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Offline Files\Synchronization" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\PI\Secure-Boot-Update" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\PI\Sqm-Tasks" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Power Efficiency Diagnostics\AnalyzeSystem" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Ras\MobilityManager" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\RecoveryEnvironment\VerifyWinRE" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Servicing\StartComponentCleanup" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\SettingSync\BackupTask" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\SettingSync\NetworkStateChangeTask" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Setup\SetupCleanupTask" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Shell\FamilySafetyMonitor" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Shell\FamilySafetyRefresh" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Shell\FamilySafetyRefreshTask" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Shell\IndexerAutomaticMaintenance" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\SpacePort\SpaceAgentTask" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\SpacePort\SpaceManagerTask" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Speech\SpeechModelDownloadTask" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Storage Tiers Management\Storage Tiers Management Initialization" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Storage Tiers Management\Storage Tiers Optimization" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Subscription\EnableLicenseAcquisition" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Subscription\LicenseAcquisition" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Sysmain\ResPriStaticDbSync" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Sysmain\WsSwapAssessmentTask" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\SystemRestore\SR" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\TPM\Tpm-Maintenance" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\UpdateOrchestrator\Battery Saver Deferred Install" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\UpdateOrchestrator\Maintenance Install" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\UpdateOrchestrator\Policy Install" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\UpdateOrchestrator\Reboot" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\UpdateOrchestrator\Refresh Settings" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\UpdateOrchestrator\Resume On Boot" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\UpdateOrchestrator\Schedule Scan" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_Display" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_ReadyToReboot" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\WDI\ResolutionHost" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Windows Defender\Windows Defender Cleanup" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Windows Defender\Windows Defender Verification" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Windows Error Reporting\QueueReporting" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Windows Media Sharing\UpdateLibrary" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\WindowsUpdate\Automatic App Update" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\WindowsUpdate\Scheduled Start" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\WindowsUpdate\sih" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\WindowsUpdate\sihboot" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\WOF\WIM-Hash-Management" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\WOF\WIM-Hash-Validation" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Work Folders\Work Folders Logon Synchronization" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Work Folders\Work Folders Maintenance Work" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\WS\WSTask" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\WwanSvc\NotificationTask" /DISABLE SCHTASKS /Change /TN "Microsoft\XblGameSave\XblGameSaveTask" /DISABLE SCHTASKS /Change /TN "Microsoft\XblGameSave\XblGameSaveTaskLogon" /DISABLE (echo SCHTASKS /Change /TN "Microsoft\Windows\BitLocker\BitLocker MDM policy Refresh" /DISABLE echo SCHTASKS /Change /TN "Microsoft\Windows\EDP\EDP App Launch Task" /DISABLE echo SCHTASKS /Change /TN "Microsoft\Windows\EDP\EDP Auth Task" /DISABLE echo SCHTASKS /Change /TN "Microsoft\Windows\EDP\EDP Inaccessible Credentials Task" /DISABLE echo SCHTASKS /Change /TN "Microsoft\Windows\EDP\StorageCardEncryption Task" /DISABLE echo SCHTASKS /Change /TN "Microsoft\Windows\Device Setup\Metadata Refresh" /DISABLE echo SCHTASKS /Change /TN "Microsoft\Windows\DeviceDirectoryClient\HandleCommand" /DISABLE echo SCHTASKS /Change /TN "Microsoft\Windows\DeviceDirectoryClient\HandleWnsCommand" /DISABLE echo SCHTASKS /Change /TN "Microsoft\Windows\DeviceDirectoryClient\IntegrityCheck" /DISABLE echo SCHTASKS /Change /TN "Microsoft\Windows\DeviceDirectoryClient\LocateCommandUserSession" /DISABLE echo SCHTASKS /Change /TN "Microsoft\Windows\DeviceDirectoryClient\RegisterDeviceAccountChange" /DISABLE echo SCHTASKS /Change /TN "Microsoft\Windows\DeviceDirectoryClient\RegisterDeviceConnectedToNetwork" /DISABLE echo SCHTASKS /Change /TN "Microsoft\Windows\DeviceDirectoryClient\RegisterDeviceLocationRightsChange" /DISABLE echo SCHTASKS /Change /TN "Microsoft\Windows\DeviceDirectoryClient\RegisterDevicePeriodic1" /DISABLE echo SCHTASKS /Change /TN "Microsoft\Windows\DeviceDirectoryClient\RegisterDevicePeriodic24" /DISABLE echo SCHTASKS /Change /TN "Microsoft\Windows\DeviceDirectoryClient\RegisterDevicePeriodic6" /DISABLE echo SCHTASKS /Change /TN "Microsoft\Windows\DeviceDirectoryClient\RegisterDevicePolicyChange" /DISABLE echo SCHTASKS /Change /TN "Microsoft\Windows\DeviceDirectoryClient\RegisterDeviceProtectionStateChanged" /DISABLE echo SCHTASKS /Change /TN "Microsoft\Windows\DeviceDirectoryClient\RegisterDeviceScreenOnOff" /DISABLE echo SCHTASKS /Change /TN "Microsoft\Windows\DeviceDirectoryClient\RegisterDeviceSettingChange" /DISABLE echo SCHTASKS /Change /TN "Microsoft\Windows\DeviceDirectoryClient\RegisterUserDevice" /DISABLE echo SCHTASKS /Change /TN "Microsoft\Windows\SettingSync\BackgroundUploadTask" /DISABLE)>%windir%\SystemTasks.cmd SCHTASKS /Create /F /RU "SYSTEM" /RL HIGHEST /SC HOURLY /TN SystemTasks /TR "cmd /c %windir%\SystemTasks.cmd" SCHTASKS /Run /I /TN SystemTasks TIMEOUT /T 5 SCHTASKS /Delete /F /TN SystemTasks del /f /q %windir%\SystemTasks.cmd del /f /q %ProgramData%\Microsoft\Diagnosis\*.rbs del /f /q /s %ProgramData%\Microsoft\Diagnosis\ETLLogs\* del /f /q /s "%ProgramData%\Microsoft\Windows Defender\Scans\*"