@abbodi1406 Is this fine for real machines? I need network communication and file sharing, also network printing, network printers discovery, etc. Spoiler Code: @echo off reg add HKLM\SOFTWARE\Policies\Microsoft\MRT /v DontOfferThroughWUAU /t REG_DWORD /d 1 /f reg add HKLM\SOFTWARE\Policies\Microsoft\MRT /v DontReportInfectionInformation /t REG_DWORD /d 1 /f reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update" /f /v AUOptions /t REG_DWORD /d 1 reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update" /f /v ElevateNonAdmins /t REG_DWORD /d 0 reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update" /f /v IncludeRecommendedUpdates /t REG_DWORD /d 0 reg add HKLM\SYSTEM\ControlSet001\Control\Diagnostics\Performance /f /v DisableDiagnosticTracing /t REG_DWORD /d 1 reg add HKLM\SYSTEM\ControlSet001\Control\Diagnostics\Performance\BootCKCLSettings /f /v Start /t REG_DWORD /d 0 reg add HKLM\SYSTEM\ControlSet001\Control\Diagnostics\Performance\SecondaryLogonCKCLSettings /f /v Start /t REG_DWORD /d 0 reg add HKLM\SYSTEM\ControlSet001\Control\Diagnostics\Performance\ShutdownCKCLSettings /f /v Start /t REG_DWORD /d 0 reg add HKLM\SYSTEM\ControlSet001\Control\Network\NewNetworkWindowOff /f reg add HKLM\SYSTEM\ControlSet001\Services\LanmanServer\Parameters /v SMB1 /t REG_DWORD /d 0 /f sc config lanmanworkstation depend= bowser/mrxsmb20/nsi sc config mrxsmb10 start= disabled for /d %%G in (CertPropSvc,CscService,DiagTrack,DPS,PcaSvc,RemoteRegistry,SCardSvr,SCPolicySvc,Spooler,TrkWks,StiSvc,WerSvc,WMPNetworkSvc,WPCSvc,WSearch) do ( sc config %%G start= disabled ) for /d %%G in (AITEventLog,Audio,AutoLogger-Diagtrack-Listener,DiagLog,EventLog-Microsoft-RMS-MSIPC-Debug,EventLog-Microsoft-Windows-WorkFolders-WHC,FamilySafetyAOT,LwtNetLog,Microsoft-Windows-Setup,NBSMBLOGGER,PEAuthLog,RdrLog,ReadyBoot,SetupPlatform,SQMLogger,TCPIPLOGGER,Tpm,WdiContextLog) do ( reg add "HKLM\SYSTEM\ControlSet001\Control\WMI\AutoLogger\%%G" /v Start /t REG_DWORD /d 0 /f ) reg add "HKLM\SYSTEM\ControlSet001\Control\WMI\AutoLogger\Circular Kernel Context Logger" /v Start /t REG_DWORD /d 0 /f reg add "HKLM\SYSTEM\ControlSet001\Control\WMI\AutoLogger\WFP-IPsec Trace" /v Start /t REG_DWORD /d 0 /f reg delete "HKLM\SYSTEM\ControlSet001\Control\WMI\AutoLogger\AutoLogger-Diagtrack-Listener" /f reg delete "HKLM\SYSTEM\ControlSet001\Control\WMI\AutoLogger\Diagtrack-Listener" /f reg delete "HKLM\SYSTEM\ControlSet001\Control\WMI\AutoLogger\Circular Kernel Context Logger" /f reg delete "HKLM\SYSTEM\ControlSet001\Control\WMI\AutoLogger\SQMLogger" /f powercfg -h off auditpol /set /subcategory:"Special Logon" /success:disable auditpol /set /subcategory:"Audit Policy Change" /success:disable auditpol /set /subcategory:"User Account Management" /success:disable SCHTASKS /Change /TN "Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\.NET Framework\.NET Framework NGEN v4.0.30319 Critical" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\SetupSQMTask" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\AppID\SmartScreenSpecific" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Application Experience\AitAgent" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Application Experience\ProgramDataUpdater" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Application Experience\StartupAppTask" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\AppxDeploymentClient\Pre-staged app cleanup" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Autochk\Proxy" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Chkdsk\ProactiveScan" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Customer Experience Improvement Program\BthSQM" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Customer Experience Improvement Program\Consolidator" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Customer Experience Improvement Program\KernelCeipTask" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Customer Experience Improvement Program\TelTask" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Customer Experience Improvement Program\UsbCeip" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Diagnosis\Scheduled" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\DiskCleanup\SilentCleanup" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\DiskFootprint\Diagnostics" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\FileHistory\File History (maintenance mode)" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Location\Notifications" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Maintenance\WinSAT" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\MemoryDiagnostic\ProcessMemoryDiagnosticEvents" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\MemoryDiagnostic\RunFullMemoryDiagnostic" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\MUI\LPRemove" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\NetTrace\GatherNetworkInfo" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\PI\Secure-Boot-Update" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\PI\Sqm-Tasks" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Power Efficiency Diagnostics\AnalyzeSystem" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\RAC\RacTask" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Ras\MobilityManager" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\RecoveryEnvironment\VerifyWinRE" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\RemoteAssistance\RemoteAssistanceTask" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Servicing\StartComponentCleanup" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Setup\SetupCleanupTask" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\SettingSync\BackupTask" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\SettingSync\NetworkStateChangeTask" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Shell\FamilySafetyMonitor" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Shell\FamilySafetyRefresh" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Shell\IndexerAutomaticMaintenance" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\SkyDrive\Idle Sync Maintenance Task" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\SkyDrive\Routine Maintenance Task" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\SpacePort\SpaceAgentTask" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Sysmain\ResPriStaticDbSync" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Sysmain\WsSwapAssessmentTask" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\SystemRestore\SR" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\TaskScheduler\Idle Maintenance" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\TaskScheduler\Manual Maintenance" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\TaskScheduler\Regular Maintenance" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\TPM\Tpm-Maintenance" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\WDI\ResolutionHost" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Windows Error Reporting\QueueReporting" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Windows Media Sharing\UpdateLibrary" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\WOF\WIM-Hash-Management" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\WOF\WIM-Hash-Validation" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Work Folders\Work Folders Logon Synchronization" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\Work Folders\Work Folders Maintenance Work" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\WS\Badge Update" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\WS\WSRefreshBannedAppsListTask" /DISABLE SCHTASKS /Change /TN "Microsoft\Windows\WS\WSTask" /DISABLE (echo SCHTASKS /Change /TN "Microsoft\Windows\Device Setup\Metadata Refresh" /DISABLE echo SCHTASKS /Change /TN "Microsoft\Windows\SettingSync\BackgroundUploadTask" /DISABLE echo SCHTASKS /Change /TN "Microsoft\Windows\TaskScheduler\Maintenance Configurator" /DISABLE)>%windir%\SystemTasks.cmd SCHTASKS /Create /F /RU "SYSTEM" /RL HIGHEST /SC HOURLY /TN SystemTasks /TR "cmd /c %windir%\SystemTasks.cmd" SCHTASKS /Run /I /TN SystemTasks TIMEOUT /T 5 SCHTASKS /Delete /F /TN SystemTasks del /f /q %windir%\SystemTasks.cmd
It didn't. Installation of network printers was affected though. Solved enabling and starting Spooler service.
Just this to receive updates and disable Spectre/Meltdown mitigation Code: reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\QualityCompat /v cadca5fe-87d3-4b96-b7fb-a231484277cc /t REG_DWORD /d 0 /f reg add "HKLM\SYSTEM\ControlSet001\Control\Session Manager\Memory Management" /v FeatureSettingsOverride /t REG_DWORD /d 3 /f reg add "HKLM\SYSTEM\ControlSet001\Control\Session Manager\Memory Management" /v FeatureSettingsOverrideMask /t REG_DWORD /d 3 /f
I think you explained it somewhere why you use ControlSet001 instead of CurentControlSet, but it is still not right. I think the reasoning goes like this: CurrentControlSet is a pointer while ControlSet001 is a real registry key. While this is true, there is always a chance, as tiny as it is, that ControlSet002 (or ControlSet003 in some cases) to be loaded instead of ControlSet001. Using CurrentControlSet instead takes care of those few situations.
Yes, true but on clean install system, ControlSet001 will reflect CurrentControlSet and sometimes i add those registry offline prior installation, specially the mitigation Code: reg load HKLM\TEMP Z:\Windows\System32\Config\SYSTEM reg add "HKLM\TEMP\ControlSet001\Control\Session Manager\Memory Management" /v FeatureSettingsOverride /t REG_DWORD /d 3 /f reg add "HKLM\TEMP\ControlSet001\Control\Session Manager\Memory Management" /v FeatureSettingsOverrideMask /t REG_DWORD /d 3 /f reg unload HKLM\TEMP
Thanks, sometimes I am switched into Group Policy Preference mode when it comes to applying registry values. Applying the keys and values in a registry hive loaded offline in that way makes sense.
I have got W8.1 bareboned services, no networking, and W8.1 bareboned scheduled tasks. Both files must be run from Power Run because some entries need elevated permissions. Busy this week but if someone can ping me if they are not up by friday i will get them posted. There is no reset facility because i built them for my needs only. Scheduled tasks should work for everyone. Services are for information purposes only. 8.1 behaves very well when i apply them.
Services and Scheduled Tasks uploaded to pastebin, links in signature. There is no reset facility because i built them for my needs only. Scheduled tasks should work for everyone. Services are for information purposes only. 8.1 behaves very well when i apply them. You will need to run them from Sordum's Power Run because many entries need elevated permissions. Edit, Audiosrv and MMCSS services are joined at the hip, to split them run this file before or after the main service file. ;W8.1-Services-Split-Audiosrv-and-MMCSS-Services [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Audiosrv] "DependOnService"=- [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Audiosrv] "DependOnService"=hex(7):41,00,75,00,64,00,69,00,6f,00,45,00,6e,00,64,00,70,00,\ 6f,00,69,00,6e,00,74,00,42,00,75,00,69,00,6c,00,64,00,65,00,72,00,00,00,52,\ 00,70,00,63,00,53,00,73,00,00,00,00,00 [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\services\MMCSS] "Start"=dword:00000004
@Mr.X Ive got some changes to make to my 8.1 tweak pack before i share the whole lot here, bat/cmd on pastebin. Need to convert the reg files and sort them into a sensible order 1st. Be a few weeks. Ping me a reminder in 2 weeks please.
Great. I think I could try yours in the future, in a new clean install I could do. The script @abbodi1406 did I use it on a live system after running manually a Monthly Quality Rollup. Cheers!
Mine are just tweaks, nowt to do with updates. System tweaks mainly, some have hklm and hkcu entries, help cut down excessive windows logging/space hogging.