Which windows 10 services you guys disable ?!

Discussion in 'Windows 10' started by xhemal1325, Sep 26, 2017.

  1. xhemal1325

    xhemal1325 MDL Member

    May 24, 2014
    124
    10
    10
    So anyone would like to share a list :D :D
     
  2. tnx

    tnx MDL Expert

    Sep 2, 2008
    1,695
    267
    60
    None...

    But I do stop the cloud thingy starting when Windows starts.

    I do turn off all those Live Tiles too.
     
  3. jeff69dini

    jeff69dini MDL Expert

    Nov 22, 2008
    1,015
    234
    60
    I always turn off downloaded maps manager.....always downloading maps while I am on the net, crap!@!
     
  4. abbodi1406

    abbodi1406 MDL KB0000001

    Feb 19, 2011
    16,141
    84,319
    340
    Code:
    CertPropSvc
    CDPSvc
    CDPUserSvc
    CscService
    DiagTrack
    DoSvc
    DevicesFlow
    DevicesFlowUserSvc
    DevQueryBroker
    DsmSvc
    DusmSvc
    DPS
    diagnosticshub.standardcollector.service
    dmwappushservice
    MapsBroker
    MessagingService
    OneSyncSvc
    PimIndexMaintenanceSvc
    PrintWorkflowUserSvc
    PcaSvc
    RemoteRegistry
    SmsRouter
    Spooler
    TrkWks
    StiSvc
    SecurityHealthService
    Sense
    UnistoreSvc
    UserDataSvc
    WpnUserService
    WerSvc
    WMPNetworkSvc
    WSearch
    WdNisDrv
    WdNisSvc
    WinDefend
     
  5. TairikuOkami

    TairikuOkami MDL Expert

    Mar 15, 2014
    1,171
    1,052
    60
    #6 TairikuOkami, Sep 26, 2017
    Last edited: Oct 1, 2017
    I have got only those running, the rest is disabled. EDITed to fix.
     

    Attached Files:

  6. farag

    farag MDL Member

    Apr 1, 2014
    238
    352
    10
    #7 farag, Sep 26, 2017
    Last edited: Jan 11, 2018
    $services = @(
    "CDPSvc",
    "DiagTrack",
    "diagnosticshub.standardcollector.service",
    "dmwappushservice",
    "DusmSvc",
    "lfsvc",
    "MapsBroker",
    "NcbService",
    "SSDPSRV",
    "tiledatamodelsvc",
    "wcncsvc")
    Foreach ($service In $services)
    {
    Get-Service $service | Stop-Service -ErrorAction SilentlyContinue
    Get-Service $service | Set-Service -StartupType Disabled -ErrorAction SilentlyContinue
    }
    Remove-Variable services

    Script for Win 10 1709.

    I disable only these on any new PC at work.
     
  7. hunzhang

    hunzhang MDL Novice

    Aug 4, 2009
    8
    3
    0
    Wish you could make a script for disabling these things.:D
     
  8. abbodi1406

    abbodi1406 MDL KB0000001

    Feb 19, 2011
    16,141
    84,319
    340
    You mean like this? :biggrin:


    Code:
    @echo off
    reg add HKLM\SOFTWARE\Classes\CLSID\{031E4825-7B94-4dc3-B131-E946B44C8DD5}\ShellFolder /f /v Attributes /t REG_DWORD /d 2962227469
    reg add HKLM\SOFTWARE\Classes\CLSID\{F02C1A0D-BE21-4350-88B0-7367FC96EF3C}\ShellFolder /f /v Attributes /t REG_DWORD /d 2962489444
    reg add HKLM\SOFTWARE\Classes\CLSID\{B4FB3F98-C1EA-428d-A78A-D1F5659CBA93}\ShellFolder /f /v Attributes /t REG_DWORD /d 2962489612
    reg add HKLM\SOFTWARE\Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\ShellFolder /f /v Attributes /t REG_DWORD /d 4035969101
    reg add HKLM\SOFTWARE\Microsoft\WindowsSelfHost\UI\Visibility /v HideInsiderPage /t REG_DWORD /d 1 /f
    reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ConnectedSearch /v ConnectedSearchUseWeb /t REG_DWORD /d 0 /f
    reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OOBE /v DisableVoice /t REG_DWORD /d 1 /f
    reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System /v EnableFirstLogonAnimation /t REG_DWORD /d 0 /f
    reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System /v PromptOnSecureDesktop /t REG_DWORD /d 0 /f
    reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System /v ConsentPromptBehaviorAdmin /t REG_DWORD /d 0 /f
    reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack /v DiagTrackAuthorization /t REG_DWORD /d 0 /f
    reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsStore\WindowsUpdate /v AutoDownload /t REG_DWORD /d 5 /f
    reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU /v AUOptions /t REG_DWORD /d 2 /f
    reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU /v NoAutoUpdate /t REG_DWORD /d 0 /f
    reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate /v ExcludeWUDriversInQualityUpdate /t REG_DWORD /d 1 /f
    reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\OneDrive /v DisableFileSyncNGSC /t REG_DWORD /d 1 /f
    reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization /v DODownloadMode /t REG_DWORD /d 100 /f
    reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\CloudContent /v DisableWindowsConsumerFeatures /t REG_DWORD /d 1 /f
    reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\CloudContent /v DisableSoftLanding /t REG_DWORD /d 1 /f
    reg add HKLM\SOFTWARE\Policies\Microsoft\MRT /v DontOfferThroughWUAU /t REG_DWORD /d 1 /f
    reg add HKLM\SOFTWARE\Policies\Microsoft\MRT /v DontReportInfectionInformation /t REG_DWORD /d 1 /f
    reg add HKLM\SOFTWARE\Policies\Microsoft\SQMClient\Windows /v CEIPEnable /t REG_DWORD /d 0 /f
    reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\DataCollection /v DoNotShowFeedbackNotifications /t REG_DWORD /d 1 /f
    reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\System /v EnableCdp /t REG_DWORD /d 0 /f
    reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\DriverSearching /v SearchOrderConfig /t REG_DWORD /d 0 /f
    reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Device Metadata" /v PreventDeviceMetadataFromNetwork /t REG_DWORD /d 1 /f
    reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /v AllowCortana /t REG_DWORD /d 0 /f
    reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /v AllowSearchToUseLocation /t REG_DWORD /d 0 /f
    reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender" /v DisableAntiSpyware /t REG_DWORD /d 1 /f
    reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" /v DisableRealtimeMonitoring /t REG_DWORD /d 1 /f
    reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" /v DisableOnAccessProtection /t REG_DWORD /d 1 /f
    reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" /v DisableScanOnRealtimeEnable /t REG_DWORD /d 1 /f
    reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\UX Configuration" /v Notification_Suppress /t REG_DWORD /d 1 /f
    reg add "HKLM\SOFTWARE\Microsoft\Windows Defender\Spynet" /v SpyNetReporting /t REG_DWORD /d 0 /f
    reg add "HKLM\SOFTWARE\Microsoft\Windows Defender\Spynet" /v SubmitSamplesConsent /t REG_DWORD /d 2 /f
    reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkList\DefaultMediaCost" /v Default /t REG_DWORD /d 2 /f
    reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkList\DefaultMediaCost" /v Ethernet /t REG_DWORD /d 2 /f
    reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkList\DefaultMediaCost" /v WiFi /t REG_DWORD /d 2 /f
    reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkList\DefaultMediaCost" /v 3G /t REG_DWORD /d 2 /f
    reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkList\DefaultMediaCost" /v 4G /t REG_DWORD /d 2 /f
    reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing" /v DisableRemovePayload /t REG_DWORD /d 0 /f
    reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing" /v EnableDpxLog /t REG_DWORD /d 0 /f
    reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Configuration /v DisableComponentBackups /t REG_DWORD /d 1 /f
    reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Configuration /v DisableResetbase /t REG_DWORD /d 0 /f
    reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Configuration /v CBSLogCompress /t REG_DWORD /d 1 /f
    reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Configuration /v NumCBSPersistLogs /t REG_DWORD /d 1 /f
    reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Configuration /v LatentActions /t REG_DWORD /d 1 /f
    reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\SideBySide\Configuration /v SupersededActions /t REG_DWORD /d 1 /f
    reg add HKLM\SYSTEM\ControlSet001\Control\Diagnostics\Performance /f /v DisableDiagnosticTracing /t REG_DWORD /d 1
    reg add HKLM\SYSTEM\ControlSet001\Control\Diagnostics\Performance\BootCKCLSettings /f /v Start /t REG_DWORD /d 0
    reg add HKLM\SYSTEM\ControlSet001\Control\Diagnostics\Performance\SecondaryLogonCKCLSettings /f /v Start /t REG_DWORD /d 0
    reg add HKLM\SYSTEM\ControlSet001\Control\Diagnostics\Performance\ShutdownCKCLSettings /f /v Start /t REG_DWORD /d 0
    reg add HKLM\SYSTEM\ControlSet001\Control\Network\NewNetworkWindowOff /f
    reg add HKLM\SYSTEM\ControlSet001\Services\FontCache\Parameters /f /v DisableFontProviders  /t REG_DWORD /d 1
    regsvr32 /u /s "%ProgramFiles%\Windows Defender\shellext.dll"
    reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v WindowsDefender /f
    reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v SecurityHealth /f
    reg add HKLM\SYSTEM\ControlSet001\Services\LanmanServer\Parameters /v SMB1 /t REG_DWORD /d 0 /f
    sc config lanmanworkstation depend= bowser/mrxsmb20/nsi
    sc config mrxsmb10 start= disabled
    for /d %%G in (CertPropSvc,CDPSvc,CDPUserSvc,CscService,DiagTrack,DoSvc,DevicesFlow,DevicesFlowUserSvc,DevQueryBroker,DsmSvc,DusmSvc,DPS,diagnosticshub.standardcollector.service,dmwappushservice,MapsBroker,MessagingService,OneSyncSvc,PimIndexMaintenanceSvc,PrintWorkflowUserSvc,PcaSvc,RemoteRegistry,SmsRouter,Spooler,TrkWks,StiSvc,SecurityHealthService,Sense,UnistoreSvc,UserDataSvc,WpnUserService,WerSvc,WMPNetworkSvc,WSearch,WdNisDrv,WdNisSvc,WinDefend) do (
    sc config %%G start= disabled
    )
    for /d %%G in (AITEventLog,AppModel,AppPlat,Audio,BluetoothSession,DataMarket,DefenderApiLogger,DefenderAuditLogger,DiagLog,FaceRecoTel,FaceUnlock,HolographicDevice,LwtNetLog,Mellanox-Kernel,Microsoft-Windows-CloudFiles-Filter-Log,Microsoft-Windows-CloudFiles-Filter-Trace,Microsoft-Windows-Setup,NBSMBLOGGER,NetCore,NetCfgTrace,NtfsLog,PEAuthLog,ReadyBoot,RdrLog,SCM,SetupPlatform,SetupPlatformTel,SHS-12112016-172924-3-1,SpoolerLogger,SQMLogger,TCPIPLOGGER,Tpm,UserNotPresentTraceSession,WdiContextLog) do (
    reg delete "HKLM\SYSTEM\ControlSet001\Control\WMI\AutoLogger\%%G" /f
    )
    reg delete "HKLM\SYSTEM\ControlSet001\Control\WMI\AutoLogger\AutoLogger-Diagtrack-Listener" /f
    reg delete "HKLM\SYSTEM\ControlSet001\Control\WMI\AutoLogger\Diagtrack-Listener" /f
    reg delete "HKLM\SYSTEM\ControlSet001\Control\WMI\AutoLogger\Circular Kernel Context Logger" /f
    reg delete "HKLM\SYSTEM\ControlSet001\Control\WMI\AutoLogger\WFP-IPsec Trace" /f
    reg delete "HKLM\SYSTEM\ControlSet001\Control\WMI\AutoLogger\WPR_initiated_DiagTrackMiniLogger_WPR System Collector" /f
    
    reg import PhotoViewer.reg
    
    set key=HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\InboxApplications
    FOR %%i IN (
    MicrosoftEdge
    holocamera
    holoitemplayerapp
    HoloShell
    PPIProjection
    AppRep.ChxApp
    ContentDeliveryManager
    Holograms
    HolographicFirstRun
    ParentalControls
    SecHealthUI
    SecureAssessmentBrowser
    XboxGameCallableUI
    ) DO (
        FOR /F %%a IN ('reg query %key% /s /f %%i /k 2^>nul ^| find /i "InboxApplications"') DO IF NOT ERRORLEVEL 1 (reg delete %%a /f 2>nul)
    )

    during installation through answer file autounattend.xml
    specialize > Microsoft-Windows-Deployment > RunSynchronousCommand
    point to specialize.cmd path
     
  9. armond

    armond MDL Addicted

    Jun 16, 2008
    734
    235
    30
    Well, I set these to manual:
    Connected User Experiences and Telemetry (To turn off Telemetry and Data Collection)
    Diagnostic Policy Service
    Distributed Link Tracking Client (If your computer is not connected to any network)
    dmwappushsvc (To turn off Telemetry and Data Collection)
    Downloaded Maps Manager (If you don't use Maps app)
    IP Helper (If you don't use IPv6 connection)
    Program Compatibility Assistant Service
    Remote Registry (You can set it to DISABLED for Security purposes)
    Secondary Logon
    TCP/IP NetBIOS Helper (If you are not in a workgroup network)
    Windows Error Reporting Service
    Windows Search (If you don't use Windows Search feature frequently)
     
  10. yomoma2

    yomoma2 MDL Senior Member

    Feb 27, 2010
    350
    117
    10
    The only downside to disabling dmwappushsvc is that WU will take a lot more time to finish a search. It's very noticeable under WUMT.
     
  11. TairikuOkami

    TairikuOkami MDL Expert

    Mar 15, 2014
    1,171
    1,052
    60
    dmwappushservice is also required by some Windows notifications (Security Center).
    Do not disable "Distributed Link Tracking Client", it might break system shortcuts.
     
  12. WindowsGeek

    WindowsGeek MDL Expert

    Jun 30, 2015
    1,453
    418
    60
    none
     
  13. petok

    petok MDL Senior Member

    May 4, 2009
    337
    187
    10
    #14 petok, Sep 29, 2017
    Last edited: Sep 30, 2017
    Code:
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv]
    "Start"=dword:00000004
    
    I have disable this from reg file other disable with services, if some have idea for disable please tell for others

    Code:
    Windows Registry Editor Version 5.00
    
    [HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WinDefend]
    "Start"=dword:00000004
    [HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WdBoot]
    "Start"=dword:00000004
    [HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WdFilter]
    "Start"=dword:00000004
    [HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WdNisDrv]
    "Start"=dword:00000004
    [HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\WdNisSvc]
    "Start"=dword:00000004
    
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WMPNetworkSvc]
    "Start"=dword:00000004
    
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WerSvc]
    "Start"=dword:00000004
    
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WpnUserService]
    "Start"=dword:00000004
    
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UserDataSvc]
    "Start"=dword:00000004
    
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UnistoreSvc]
    "Start"=dword:00000004
    
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sense]
    "Start"=dword:00000004
    
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CDPSvc]
    "Start"=dword:00000004
    
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CDPUserSvc]
    "Start"=dword:00000004
    
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CscService]
    "Start"=dword:00000004
    
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DiagTrack]
    "Start"=dword:00000004
    
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SmsRouter]
    "Start"=dword:00000004
    
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry]
    "Start"=dword:00000004
    
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PimIndexMaintenanceSvc]
    "Start"=dword:00000004
    
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\OneSyncSvc]
    "Start"=dword:00000004
    
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MessagingService]
    "Start"=dword:00000004
    
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MapsBroker]
    "Start"=dword:00000004
    
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\diagnosticshub.standardcollector.service]
    "Start"=dword:00000004
    

    For who need disable windows update service

    Code:
    Windows Registry Editor Version 5.00
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv]
    "Start"=dword:00000004
    
    For Xbox services disable
    Code:
    Windows Registry Editor Version 5.00
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\XboxNetApiSvc]
    "Start"=dword:00000004
    
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\xboxgip]
    "Start"=dword:00000004
    
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\XblGameSave]
    "Start"=dword:00000004
    
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\XblAuthManager]
    "Start"=dword:00000004
    
     
  14. damianfox

    damianfox MDL Senior Member

    Jan 23, 2011
    423
    308
    10
    You all forgot the most important Service to Disable "Windows Update", I Disable it in the ISO so clean installs can be peaceful. :D
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  15. TairikuOkami

    TairikuOkami MDL Expert

    Mar 15, 2014
    1,171
    1,052
    60
    Not that it matters too much, some "critical" services start even when disabled (depending on version you have), WU included.
     
  16. ruby2hora

    ruby2hora MDL Novice

    Jul 1, 2010
    16
    7
    0
    That's what my services show:


    Windows Registry Editor Version 5.00

    ;Application Layer Gateway Service
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ALG]
    "Start"=dword:00000004
    ;Connected User Experiences and Telemetry
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DiagTrack]
    "Start"=dword:00000004
    ;CDPUserSvc
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\CDPUserSvc]
    "Start"=dword:00000004
    ;Contact Data
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PimIndexMaintenanceSvc]
    "Start"=dword:00000004
    ;DataCollectionPublishingService
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DcpSvc]
    "Start"=dword:00000003
    ;DevicesFlow
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DevicesFlowUserSvc_?????]
    "Start"=dword:00000004
    ;Diagnostic Policy Service
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ DPS]
    "Start"=dword:00000003
    ;Diagnostic System Host
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WdiSystemHost]
    "Start"=dword:00000003
    ;Distributed Link Tracking Client
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TrkWks]
    "Start"=dword:00000003
    ;dmwappushsvc
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\dmwappushservice]
    "Start"=dword:00000004
    ;Downloaded Maps Manager
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MapsBroker]
    "Start"=dword:00000004
    ;Enterprise App Management Service
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\EntAppSvc]
    "Start"=dword:00000004
    ;HV Host Service
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\HVHost]
    "Start"=dword:00000004
    ;IKE and AuthIP IPsec Keying Modules
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\IKEEXT]
    "Start"=dword:00000003
    ;Internet Connection Sharing (ICS)
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess]
    "Start"=dword:00000004
    ;IP Helper
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\iphlpsvc]
    "Start"=dword:00000003
    ;MessagingService
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MessagingService]
    "Start"=dword:00000004
    ;Microsoft iSCSI Initiator Service
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MSiSCSI]
    "Start"=dword:00000004
    ;Microsoft Windows SMS Router Service
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SmsRouter]
    "Start"=dword:00000004
    ;Natural Authentication
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NaturalAuthentication]
    "Start"=dword:00000004
    ;Net.Tcp Port Sharing Service
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetTcpPortSharing]
    "Start"=dword:00000004
    ;Payments and NFC/SE Manager
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SEMgrSvc]
    "Start"=dword:00000004
    ;Phone Service
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PhoneSvc]
    "Start"=dword:00000004
    ;Print Spooler
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Spooler]
    "Start"=dword:00000003
    ;Radio Management Service
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RmSvc]
    "Start"=dword:00000004
    ;Remote Desktop Configuration
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SessionEnv]
    "Start"=dword:00000004
    ;Remote Desktop Services
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TermService]
    "Start"=dword:00000004
    ;Remote Desktop Services UserMode Port Redirector
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UmRdpService]
    "Start"=dword:00000004
    ;Remote Procedure Call (RPC) Locator
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RpcLocator]
    "Start"=dword:00000004
    ;Retail Demo Service
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RetailDemo]
    "Start"=dword:00000004
    ;Sensor Data Service
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SensorService]
    "Start"=dword:00000004
    ;Sensor Monitoring Service
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SensrSvc]
    "Start"=dword:00000004
    ;Sensor Service
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SensorService]
    "Start"=dword:00000004
    ;Smart Card Device Enumeration Service
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ScDeviceEnum]
    "Start"=dword:00000004
    ;Smart Card Removal Policy
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SCPolicySvc]
    "Start"=dword:00000004
    ;SNMP Trap
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SNMPTRAP]
    "Start"=dword:00000004
    ;Superfetch
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SysMain]
    "Start"=dword:00000004
    ;Sync Host
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\OneSyncSvc]
    "Start"=dword:00000003
    ;Touch Keyboard and Handwriting Panel Service
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TabletInputService]
    "Start"=dword:00000004
    ;Wi-Fi Direct Services Connection Manager Service
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WFDSConSvc]
    "Start"=dword:00000004
    ;Windows Biometric Service
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WbioSrvc]
    "Start"=dword:00000004
    ;Windows Camera Frame Server
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\FrameServer]
    "Start"=dword:00000004
    ;Windows Connect Now - Config Registrar
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wcncsvc]
    "Start"=dword:00000003
    ;Windows Firewall
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MpsSvc]
    "Start"=dword:00000003
    ;Windows Mobile Hotspot Service
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\icssvc]
    "Start"=dword:00000004
    ;Windows Push Notifications Service
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WpnService]
    "Start"=dword:00000003
    ;Windows Remote Management (WS-Management)
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinRM]
    "Start"=dword:00000004
    ;Windows Search
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WSearch]
    "Start"=dword:00000004
    ;Windows Update
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wuauserv]
    "Start"=dword:00000004
    ;WLAN AutoConfig
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WlanSvc]
    "Start"=dword:00000003
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  17. MonarchX

    MonarchX MDL Expert

    May 5, 2007
    1,732
    313
    60
    What about tasks and drivers?
     
  18. abbodi1406

    abbodi1406 MDL KB0000001

    Feb 19, 2011
    16,141
    84,319
    340
    What drivers?

    Code:
    @echo off
    powercfg -h off
    auditpol /set /subcategory:"Special Logon" /success:disable
    auditpol /set /subcategory:"Audit Policy Change" /success:disable
    auditpol /set /subcategory:"User Account Management" /success:disable
    
    reg import %~dp0Tweaks.reg
    reg delete "HKLM\SYSTEM\ControlSet001\Control\WMI\AutoLogger\AutoLogger-Diagtrack-Listener" /f
    reg delete "HKLM\SYSTEM\ControlSet001\Control\WMI\AutoLogger\Diagtrack-Listener" /f
    reg delete "HKLM\SYSTEM\ControlSet001\Control\WMI\AutoLogger\Circular Kernel Context Logger" /f
    reg delete "HKLM\SYSTEM\ControlSet001\Control\WMI\AutoLogger\SQMLogger" /f
    reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v WindowsDefender /f
    reg delete HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v SecurityHealth /f
    reg delete HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run /v OneDriveSetup /f
    reg add HKCU\SOFTWARE\Policies\Microsoft\Windows\CloudContent /v DisableWindowsSpotlightFeatures /t REG_DWORD /d 1 /f
    reg add HKCU\SOFTWARE\Policies\Microsoft\Windows\CloudContent /v DisableThirdPartySuggestions /t REG_DWORD /d 1 /f
    reg add HKCU\SOFTWARE\Policies\Microsoft\Windows\Explorer /v EnableLegacyBalloonNotifications /t REG_DWORD /d 1 /f
    reg add HKCU\SOFTWARE\Policies\Microsoft\Windows\Explorer /v DisableNotificationCenter /t REG_DWORD /d 1 /f
    
    SCHTASKS /Change /TN "Microsoft\Windows\SetupSQMTask" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\AppID\EDP Policy Manager" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\AppID\SmartScreenSpecific" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\Application Experience\ProgramDataUpdater" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\Application Experience\StartupAppTask" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\ApplicationData\appuriverifierdaily" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\ApplicationData\appuriverifierinstall" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\ApplicationData\DsSvcCleanup" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\Autochk\Proxy" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\BrokerInfrastructure\BgTaskRegistrationMaintenanceTask" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\Chkdsk\ProactiveScan" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\CloudExperienceHost\CreateObjectTask" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\Customer Experience Improvement Program\BthSQM" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\Customer Experience Improvement Program\Consolidator" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\Customer Experience Improvement Program\KernelCeipTask" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\Customer Experience Improvement Program\TelTask" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\Customer Experience Improvement Program\UsbCeip" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\Data Integrity Scan\Data Integrity Scan" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\Data Integrity Scan\Data Integrity Scan for Crash Recovery" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\Defrag\ScheduledDefrag" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\Device Information\Device" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\Diagnosis\Scheduled" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\DiskCleanup\SilentCleanup" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticResolver" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\DiskFootprint\Diagnostics" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\DiskFootprint\StorageSense" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\DUSM\dusmtask" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\ErrorDetails\EnableErrorDetailsUpdate" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\ErrorDetails\ErrorDetailsUpdate" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\Feedback\Siuf\DmClient" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\Feedback\Siuf\DmClientOnScenarioDownload" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\FileHistory\File History (maintenance mode)" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\LanguageComponentsInstaller\Installation" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\LanguageComponentsInstaller\Uninstallation" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\Location\Notifications" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\Location\WindowsActionDialog" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\Maintenance\WinSAT" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\Management\Provisioning\Cellular" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\Management\Provisioning\Logon" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\Maps\MapsToastTask" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\Maps\MapsUpdateTask" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\MemoryDiagnostic\ProcessMemoryDiagnosticEvents" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\MemoryDiagnostic\RunFullMemoryDiagnostic" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\MUI\LPRemove" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\NetTrace\GatherNetworkInfo" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\Offline Files\Synchronization" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\PI\Secure-Boot-Update" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\PI\Sqm-Tasks" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\Power Efficiency Diagnostics\AnalyzeSystem" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\Ras\MobilityManager" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\RecoveryEnvironment\VerifyWinRE" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\Servicing\StartComponentCleanup" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\SettingSync\BackupTask" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\SettingSync\NetworkStateChangeTask" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\Setup\SetupCleanupTask" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\Shell\FamilySafetyMonitor" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\Shell\FamilySafetyRefresh" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\Shell\FamilySafetyRefreshTask" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\Shell\IndexerAutomaticMaintenance" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\SpacePort\SpaceAgentTask" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\SpacePort\SpaceManagerTask" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\Speech\SpeechModelDownloadTask" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\Storage Tiers Management\Storage Tiers Management Initialization" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\Storage Tiers Management\Storage Tiers Optimization" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\Subscription\EnableLicenseAcquisition" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\Subscription\LicenseAcquisition" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\Sysmain\ResPriStaticDbSync" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\Sysmain\WsSwapAssessmentTask" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\SystemRestore\SR" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\TPM\Tpm-Maintenance" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\UpdateOrchestrator\Battery Saver Deferred Install" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\UpdateOrchestrator\Maintenance Install" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\UpdateOrchestrator\Policy Install" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\UpdateOrchestrator\Reboot" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\UpdateOrchestrator\Refresh Settings" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\UpdateOrchestrator\Resume On Boot" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\UpdateOrchestrator\Schedule Scan" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_Display" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\UpdateOrchestrator\USO_UxBroker_ReadyToReboot" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\WDI\ResolutionHost" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\Windows Defender\Windows Defender Cleanup" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\Windows Defender\Windows Defender Verification" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\Windows Error Reporting\QueueReporting" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\Windows Media Sharing\UpdateLibrary" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\WindowsUpdate\Automatic App Update" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\WindowsUpdate\Scheduled Start" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\WindowsUpdate\sih" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\WindowsUpdate\sihboot" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\WOF\WIM-Hash-Management" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\WOF\WIM-Hash-Validation" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\Work Folders\Work Folders Logon Synchronization" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\Work Folders\Work Folders Maintenance Work" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\WS\WSTask" /DISABLE
    SCHTASKS /Change /TN "Microsoft\Windows\WwanSvc\NotificationTask" /DISABLE
    SCHTASKS /Change /TN "Microsoft\XblGameSave\XblGameSaveTask" /DISABLE
    SCHTASKS /Change /TN "Microsoft\XblGameSave\XblGameSaveTaskLogon" /DISABLE
    
    (echo SCHTASKS /Change /TN "Microsoft\Windows\BitLocker\BitLocker MDM policy Refresh" /DISABLE
    echo SCHTASKS /Change /TN "Microsoft\Windows\EDP\EDP App Launch Task" /DISABLE
    echo SCHTASKS /Change /TN "Microsoft\Windows\EDP\EDP Auth Task" /DISABLE
    echo SCHTASKS /Change /TN "Microsoft\Windows\EDP\EDP Inaccessible Credentials Task" /DISABLE
    echo SCHTASKS /Change /TN "Microsoft\Windows\EDP\StorageCardEncryption Task" /DISABLE
    echo SCHTASKS /Change /TN "Microsoft\Windows\Device Setup\Metadata Refresh" /DISABLE
    echo SCHTASKS /Change /TN "Microsoft\Windows\DeviceDirectoryClient\HandleCommand" /DISABLE
    echo SCHTASKS /Change /TN "Microsoft\Windows\DeviceDirectoryClient\HandleWnsCommand" /DISABLE
    echo SCHTASKS /Change /TN "Microsoft\Windows\DeviceDirectoryClient\IntegrityCheck" /DISABLE
    echo SCHTASKS /Change /TN "Microsoft\Windows\DeviceDirectoryClient\LocateCommandUserSession" /DISABLE
    echo SCHTASKS /Change /TN "Microsoft\Windows\DeviceDirectoryClient\RegisterDeviceAccountChange" /DISABLE
    echo SCHTASKS /Change /TN "Microsoft\Windows\DeviceDirectoryClient\RegisterDeviceConnectedToNetwork" /DISABLE
    echo SCHTASKS /Change /TN "Microsoft\Windows\DeviceDirectoryClient\RegisterDeviceLocationRightsChange" /DISABLE
    echo SCHTASKS /Change /TN "Microsoft\Windows\DeviceDirectoryClient\RegisterDevicePeriodic1" /DISABLE
    echo SCHTASKS /Change /TN "Microsoft\Windows\DeviceDirectoryClient\RegisterDevicePeriodic24" /DISABLE
    echo SCHTASKS /Change /TN "Microsoft\Windows\DeviceDirectoryClient\RegisterDevicePeriodic6" /DISABLE
    echo SCHTASKS /Change /TN "Microsoft\Windows\DeviceDirectoryClient\RegisterDevicePolicyChange" /DISABLE
    echo SCHTASKS /Change /TN "Microsoft\Windows\DeviceDirectoryClient\RegisterDeviceProtectionStateChanged" /DISABLE
    echo SCHTASKS /Change /TN "Microsoft\Windows\DeviceDirectoryClient\RegisterDeviceScreenOnOff" /DISABLE
    echo SCHTASKS /Change /TN "Microsoft\Windows\DeviceDirectoryClient\RegisterDeviceSettingChange" /DISABLE
    echo SCHTASKS /Change /TN "Microsoft\Windows\DeviceDirectoryClient\RegisterUserDevice" /DISABLE
    echo SCHTASKS /Change /TN "Microsoft\Windows\SettingSync\BackgroundUploadTask" /DISABLE)>%windir%\SystemTasks.cmd
    SCHTASKS /Create /F /RU "SYSTEM" /RL HIGHEST /SC HOURLY /TN SystemTasks /TR "cmd /c %windir%\SystemTasks.cmd"
    SCHTASKS /Run /I /TN SystemTasks
    TIMEOUT /T 5
    SCHTASKS /Delete /F /TN SystemTasks
    
    del /f /q %windir%\SystemTasks.cmd
    del /f /q %ProgramData%\Microsoft\Diagnosis\*.rbs
    del /f /q /s %ProgramData%\Microsoft\Diagnosis\ETLLogs\*
    del /f /q /s "%ProgramData%\Microsoft\Windows Defender\Scans\*"
     
  19. MonarchX

    MonarchX MDL Expert

    May 5, 2007
    1,732
    313
    60