update
This commit is contained in:
242
Windows 10/Debloat/scripts/block-telemetry.ps1
Normal file
242
Windows 10/Debloat/scripts/block-telemetry.ps1
Normal file
@ -0,0 +1,242 @@
|
||||
# Description:
|
||||
# This script blocks telemetry related domains via the hosts file and related
|
||||
# IPs via Windows Firewall.
|
||||
#
|
||||
# Please note that adding these domains may break certain software like iTunes
|
||||
# or Skype. As this issue is location dependent for some domains, they are not
|
||||
# commented by default. The domains known to cause issues marked accordingly.
|
||||
# Please see the related issue:
|
||||
# <https://github.com/W4RH4WK/Debloat-Windows-10/issues/79>
|
||||
|
||||
Import-Module -DisableNameChecking $PSScriptRoot\..\lib\New-FolderForced.psm1
|
||||
|
||||
Write-Output "Disabling telemetry via Group Policies"
|
||||
New-FolderForced -Path "HKLM:\SOFTWARE\Policies\Microsoft\Windows\DataCollection"
|
||||
Set-ItemProperty -Path "HKLM:\SOFTWARE\Policies\Microsoft\Windows\DataCollection" "AllowTelemetry" 0
|
||||
|
||||
# Entries related to Akamai have been reported to cause issues with Widevine
|
||||
# DRM.
|
||||
|
||||
Write-Output "Adding telemetry domains to hosts file"
|
||||
$hosts_file = "$env:systemroot\System32\drivers\etc\hosts"
|
||||
$domains = @(
|
||||
"184-86-53-99.deploy.static.akamaitechnologies.com"
|
||||
"a-0001.a-msedge.net"
|
||||
"a-0002.a-msedge.net"
|
||||
"a-0003.a-msedge.net"
|
||||
"a-0004.a-msedge.net"
|
||||
"a-0005.a-msedge.net"
|
||||
"a-0006.a-msedge.net"
|
||||
"a-0007.a-msedge.net"
|
||||
"a-0008.a-msedge.net"
|
||||
"a-0009.a-msedge.net"
|
||||
"a1621.g.akamai.net"
|
||||
"a1856.g2.akamai.net"
|
||||
"a1961.g.akamai.net"
|
||||
#"a248.e.akamai.net" # makes iTunes download button disappear (#43)
|
||||
"a978.i6g1.akamai.net"
|
||||
"a.ads1.msn.com"
|
||||
"a.ads2.msads.net"
|
||||
"a.ads2.msn.com"
|
||||
"ac3.msn.com"
|
||||
"ad.doubleclick.net"
|
||||
"adnexus.net"
|
||||
"adnxs.com"
|
||||
"ads1.msads.net"
|
||||
"ads1.msn.com"
|
||||
"ads.msn.com"
|
||||
"aidps.atdmt.com"
|
||||
"aka-cdn-ns.adtech.de"
|
||||
"a-msedge.net"
|
||||
"any.edge.bing.com"
|
||||
"a.rad.msn.com"
|
||||
"az361816.vo.msecnd.net"
|
||||
"az512334.vo.msecnd.net"
|
||||
"b.ads1.msn.com"
|
||||
"b.ads2.msads.net"
|
||||
"bingads.microsoft.com"
|
||||
"b.rad.msn.com"
|
||||
"bs.serving-sys.com"
|
||||
"c.atdmt.com"
|
||||
"cdn.atdmt.com"
|
||||
"cds26.ams9.msecn.net"
|
||||
"choice.microsoft.com"
|
||||
"choice.microsoft.com.nsatc.net"
|
||||
"compatexchange.cloudapp.net"
|
||||
"corpext.msitadfs.glbdns2.microsoft.com"
|
||||
"corp.sts.microsoft.com"
|
||||
"cs1.wpc.v0cdn.net"
|
||||
"db3aqu.atdmt.com"
|
||||
"df.telemetry.microsoft.com"
|
||||
"diagnostics.support.microsoft.com"
|
||||
"e2835.dspb.akamaiedge.net"
|
||||
"e7341.g.akamaiedge.net"
|
||||
"e7502.ce.akamaiedge.net"
|
||||
"e8218.ce.akamaiedge.net"
|
||||
"ec.atdmt.com"
|
||||
"fe2.update.microsoft.com.akadns.net"
|
||||
"feedback.microsoft-hohm.com"
|
||||
"feedback.search.microsoft.com"
|
||||
"feedback.windows.com"
|
||||
"flex.msn.com"
|
||||
"g.msn.com"
|
||||
"h1.msn.com"
|
||||
"h2.msn.com"
|
||||
"hostedocsp.globalsign.com"
|
||||
"i1.services.social.microsoft.com"
|
||||
"i1.services.social.microsoft.com.nsatc.net"
|
||||
#"ipv6.msftncsi.com" # Issues may arise where Windows 10 thinks it doesn't have internet
|
||||
#"ipv6.msftncsi.com.edgesuite.net" # Issues may arise where Windows 10 thinks it doesn't have internet
|
||||
"lb1.www.ms.akadns.net"
|
||||
"live.rads.msn.com"
|
||||
"m.adnxs.com"
|
||||
"msedge.net"
|
||||
#"msftncsi.com"
|
||||
"msnbot-65-55-108-23.search.msn.com"
|
||||
"msntest.serving-sys.com"
|
||||
"oca.telemetry.microsoft.com"
|
||||
"oca.telemetry.microsoft.com.nsatc.net"
|
||||
"onesettings-db5.metron.live.nsatc.net"
|
||||
"pre.footprintpredict.com"
|
||||
"preview.msn.com"
|
||||
"rad.live.com"
|
||||
"rad.msn.com"
|
||||
"redir.metaservices.microsoft.com"
|
||||
"reports.wes.df.telemetry.microsoft.com"
|
||||
"schemas.microsoft.akadns.net"
|
||||
"secure.adnxs.com"
|
||||
"secure.flashtalking.com"
|
||||
"services.wes.df.telemetry.microsoft.com"
|
||||
"settings-sandbox.data.microsoft.com"
|
||||
#"settings-win.data.microsoft.com" # may cause issues with Windows Updates
|
||||
"sls.update.microsoft.com.akadns.net"
|
||||
#"sls.update.microsoft.com.nsatc.net" # may cause issues with Windows Updates
|
||||
"sqm.df.telemetry.microsoft.com"
|
||||
"sqm.telemetry.microsoft.com"
|
||||
"sqm.telemetry.microsoft.com.nsatc.net"
|
||||
"ssw.live.com"
|
||||
"static.2mdn.net"
|
||||
"statsfe1.ws.microsoft.com"
|
||||
"statsfe2.update.microsoft.com.akadns.net"
|
||||
"statsfe2.ws.microsoft.com"
|
||||
"survey.watson.microsoft.com"
|
||||
"telecommand.telemetry.microsoft.com"
|
||||
"telecommand.telemetry.microsoft.com.nsatc.net"
|
||||
"telemetry.appex.bing.net"
|
||||
"telemetry.microsoft.com"
|
||||
"telemetry.urs.microsoft.com"
|
||||
"vortex-bn2.metron.live.com.nsatc.net"
|
||||
"vortex-cy2.metron.live.com.nsatc.net"
|
||||
"vortex.data.microsoft.com"
|
||||
"vortex-sandbox.data.microsoft.com"
|
||||
"vortex-win.data.microsoft.com"
|
||||
"cy2.vortex.data.microsoft.com.akadns.net"
|
||||
"watson.live.com"
|
||||
"watson.microsoft.com"
|
||||
"watson.ppe.telemetry.microsoft.com"
|
||||
"watson.telemetry.microsoft.com"
|
||||
"watson.telemetry.microsoft.com.nsatc.net"
|
||||
"wes.df.telemetry.microsoft.com"
|
||||
"win10.ipv6.microsoft.com"
|
||||
"www.bingads.microsoft.com"
|
||||
"www.go.microsoft.akadns.net"
|
||||
#"www.msftncsi.com" # Issues may arise where Windows 10 thinks it doesn't have internet
|
||||
"client.wns.windows.com"
|
||||
#"wdcp.microsoft.com" # may cause issues with Windows Defender Cloud-based protection
|
||||
#"dns.msftncsi.com" # This causes Windows to think it doesn't have internet
|
||||
#"storeedgefd.dsx.mp.microsoft.com" # breaks Windows Store
|
||||
"wdcpalt.microsoft.com"
|
||||
"settings-ssl.xboxlive.com"
|
||||
"settings-ssl.xboxlive.com-c.edgekey.net"
|
||||
"settings-ssl.xboxlive.com-c.edgekey.net.globalredir.akadns.net"
|
||||
"e87.dspb.akamaidege.net"
|
||||
"insiderservice.microsoft.com"
|
||||
"insiderservice.trafficmanager.net"
|
||||
"e3843.g.akamaiedge.net"
|
||||
"flightingserviceweurope.cloudapp.net"
|
||||
#"sls.update.microsoft.com" # may cause issues with Windows Updates
|
||||
"static.ads-twitter.com" # may cause issues with Twitter login
|
||||
"www-google-analytics.l.google.com"
|
||||
"p.static.ads-twitter.com" # may cause issues with Twitter login
|
||||
"hubspot.net.edge.net"
|
||||
"e9483.a.akamaiedge.net"
|
||||
|
||||
#"www.google-analytics.com"
|
||||
#"padgead2.googlesyndication.com"
|
||||
#"mirror1.malwaredomains.com"
|
||||
#"mirror.cedia.org.ec"
|
||||
"stats.g.doubleclick.net"
|
||||
"stats.l.doubleclick.net"
|
||||
"adservice.google.de"
|
||||
"adservice.google.com"
|
||||
"googleads.g.doubleclick.net"
|
||||
"pagead46.l.doubleclick.net"
|
||||
"hubspot.net.edgekey.net"
|
||||
"insiderppe.cloudapp.net" # Feedback-Hub
|
||||
"livetileedge.dsx.mp.microsoft.com"
|
||||
|
||||
# extra
|
||||
"fe2.update.microsoft.com.akadns.net"
|
||||
"s0.2mdn.net"
|
||||
"statsfe2.update.microsoft.com.akadns.net"
|
||||
"survey.watson.microsoft.com"
|
||||
"view.atdmt.com"
|
||||
"watson.microsoft.com"
|
||||
"watson.ppe.telemetry.microsoft.com"
|
||||
"watson.telemetry.microsoft.com"
|
||||
"watson.telemetry.microsoft.com.nsatc.net"
|
||||
"wes.df.telemetry.microsoft.com"
|
||||
"m.hotmail.com"
|
||||
|
||||
# can cause issues with Skype (#79) or other services (#171)
|
||||
"apps.skype.com"
|
||||
"c.msn.com"
|
||||
# "login.live.com" # prevents login to outlook and other live apps
|
||||
"pricelist.skype.com"
|
||||
"s.gateway.messenger.live.com"
|
||||
"ui.skype.com"
|
||||
)
|
||||
Write-Output "" | Out-File -Encoding ASCII -Append $hosts_file
|
||||
foreach ($domain in $domains) {
|
||||
if (-Not (Select-String -Path $hosts_file -Pattern $domain)) {
|
||||
Write-Output "0.0.0.0 $domain" | Out-File -Encoding ASCII -Append $hosts_file
|
||||
}
|
||||
}
|
||||
|
||||
Write-Output "Adding telemetry ips to firewall"
|
||||
$ips = @(
|
||||
# Windows telemetry
|
||||
"134.170.30.202"
|
||||
"137.116.81.24"
|
||||
"157.56.106.189"
|
||||
"184.86.53.99"
|
||||
"2.22.61.43"
|
||||
"2.22.61.66"
|
||||
"204.79.197.200"
|
||||
"23.218.212.69"
|
||||
"65.39.117.230"
|
||||
"65.52.108.33" # Causes problems with Microsoft Store
|
||||
"65.55.108.23"
|
||||
"64.4.54.254"
|
||||
|
||||
# NVIDIA telemetry
|
||||
"8.36.80.197"
|
||||
"8.36.80.224"
|
||||
"8.36.80.252"
|
||||
"8.36.113.118"
|
||||
"8.36.113.141"
|
||||
"8.36.80.230"
|
||||
"8.36.80.231"
|
||||
"8.36.113.126"
|
||||
"8.36.80.195"
|
||||
"8.36.80.217"
|
||||
"8.36.80.237"
|
||||
"8.36.80.246"
|
||||
"8.36.113.116"
|
||||
"8.36.113.139"
|
||||
"8.36.80.244"
|
||||
"216.228.121.209"
|
||||
)
|
||||
Remove-NetFirewallRule -DisplayName "Block Telemetry IPs" -ErrorAction SilentlyContinue
|
||||
New-NetFirewallRule -DisplayName "Block Telemetry IPs" -Direction Outbound `
|
||||
-Action Block -RemoteAddress ([string[]]$ips)
|
||||
32
Windows 10/Debloat/scripts/disable-services.ps1
Normal file
32
Windows 10/Debloat/scripts/disable-services.ps1
Normal file
@ -0,0 +1,32 @@
|
||||
# Description:
|
||||
# This script disables unwanted Windows services. If you do not want to disable
|
||||
# certain services comment out the corresponding lines below.
|
||||
|
||||
$services = @(
|
||||
"diagnosticshub.standardcollector.service" # Microsoft (R) Diagnostics Hub Standard Collector Service
|
||||
"DiagTrack" # Diagnostics Tracking Service
|
||||
"dmwappushservice" # WAP Push Message Routing Service (see known issues)
|
||||
"lfsvc" # Geolocation Service
|
||||
"MapsBroker" # Downloaded Maps Manager
|
||||
"NetTcpPortSharing" # Net.Tcp Port Sharing Service
|
||||
"RemoteAccess" # Routing and Remote Access
|
||||
"RemoteRegistry" # Remote Registry
|
||||
"SharedAccess" # Internet Connection Sharing (ICS)
|
||||
"TrkWks" # Distributed Link Tracking Client
|
||||
"WbioSrvc" # Windows Biometric Service (required for Fingerprint reader / facial detection)
|
||||
#"WlanSvc" # WLAN AutoConfig (Disabling this can cause issues with wifi connectivity)
|
||||
"WMPNetworkSvc" # Windows Media Player Network Sharing Service
|
||||
#"wscsvc" # Windows Security Center Service
|
||||
#"WSearch" # Windows Search
|
||||
"XblAuthManager" # Xbox Live Auth Manager
|
||||
"XblGameSave" # Xbox Live Game Save Service
|
||||
"XboxNetApiSvc" # Xbox Live Networking Service
|
||||
"ndu" # Windows Network Data Usage Monitor
|
||||
# Services which cannot be disabled
|
||||
#"WdNisSvc"
|
||||
)
|
||||
|
||||
foreach ($service in $services) {
|
||||
Write-Output "Trying to disable $service"
|
||||
Get-Service -Name $service | Set-Service -StartupType Disabled
|
||||
}
|
||||
48
Windows 10/Debloat/scripts/disable-windows-defender.ps1
Normal file
48
Windows 10/Debloat/scripts/disable-windows-defender.ps1
Normal file
@ -0,0 +1,48 @@
|
||||
# Description:
|
||||
# This script disables Windows Defender. Run it once (will throw errors), then
|
||||
# reboot, run it again (this time no errors should occur) followed by another
|
||||
# reboot.
|
||||
|
||||
Import-Module -DisableNameChecking $PSScriptRoot\..\lib\New-FolderForced.psm1
|
||||
Import-Module -DisableNameChecking $PSScriptRoot\..\lib\take-own.psm1
|
||||
|
||||
Write-Output "Elevating priviledges for this process"
|
||||
do {} until (Elevate-Privileges SeTakeOwnershipPrivilege)
|
||||
|
||||
$tasks = @(
|
||||
"\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance"
|
||||
"\Microsoft\Windows\Windows Defender\Windows Defender Cleanup"
|
||||
"\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan"
|
||||
"\Microsoft\Windows\Windows Defender\Windows Defender Verification"
|
||||
)
|
||||
|
||||
foreach ($task in $tasks) {
|
||||
$parts = $task.split('\')
|
||||
$name = $parts[-1]
|
||||
$path = $parts[0..($parts.length-2)] -join '\'
|
||||
|
||||
Write-Output "Trying to disable scheduled task $name"
|
||||
Disable-ScheduledTask -TaskName "$name" -TaskPath "$path"
|
||||
}
|
||||
|
||||
Write-Output "Disabling Windows Defender via Group Policies"
|
||||
New-FolderForced -Path "HKLM:\SOFTWARE\Wow6432Node\Policies\Microsoft\Windows Defender"
|
||||
Set-ItemProperty -Path "HKLM:\SOFTWARE\Wow6432Node\Policies\Microsoft\Windows Defender" "DisableAntiSpyware" 1
|
||||
Set-ItemProperty -Path "HKLM:\SOFTWARE\Wow6432Node\Policies\Microsoft\Windows Defender" "DisableRoutinelyTakingAction" 1
|
||||
New-FolderForced -Path "HKLM:\SOFTWARE\Wow6432Node\Policies\Microsoft\Windows Defender\Real-Time Protection"
|
||||
Set-ItemProperty -Path "HKLM:\SOFTWARE\Wow6432Node\Policies\Microsoft\Windows Defender\Real-Time Protection" "DisableRealtimeMonitoring" 1
|
||||
|
||||
Write-Output "Disabling Windows Defender Services"
|
||||
Takeown-Registry("HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WinDefend")
|
||||
Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Services\WinDefend" "Start" 4
|
||||
Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Services\WinDefend" "AutorunsDisabled" 3
|
||||
Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Services\WdNisSvc" "Start" 4
|
||||
Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Services\WdNisSvc" "AutorunsDisabled" 3
|
||||
Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Services\Sense" "Start" 4
|
||||
Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Services\Sense" "AutorunsDisabled" 3
|
||||
|
||||
Write-Output "Removing Windows Defender context menu item"
|
||||
Set-Item "HKLM:\SOFTWARE\Classes\CLSID\{09A47860-11B0-4DA5-AFA5-26D86198A780}\InprocServer32" ""
|
||||
|
||||
Write-Output "Removing Windows Defender GUI / tray from autorun"
|
||||
Remove-ItemProperty "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" "WindowsDefender" -ea 0
|
||||
50
Windows 10/Debloat/scripts/experimental_unfuckery.ps1
Normal file
50
Windows 10/Debloat/scripts/experimental_unfuckery.ps1
Normal file
@ -0,0 +1,50 @@
|
||||
# Description:
|
||||
# This script remove strang looking stuff which will probably result in a break
|
||||
# of your system. It should not be used unless you want to test out a few
|
||||
# things. It is named `experimental_unfuckery.ps1` for a reason.
|
||||
|
||||
Import-Module -DisableNameChecking $PSScriptRoot\..\lib\take-own.psm1
|
||||
|
||||
Write-Output "Elevating priviledges for this process"
|
||||
do {} until (Elevate-Privileges SeTakeOwnershipPrivilege)
|
||||
|
||||
Write-Output "Force removing system apps"
|
||||
$needles = @(
|
||||
#"Anytime"
|
||||
"BioEnrollment"
|
||||
#"Browser"
|
||||
"ContactSupport"
|
||||
#"Cortana" # This will disable startmenu search.
|
||||
#"Defender"
|
||||
"Feedback"
|
||||
"Flash"
|
||||
"Gaming"
|
||||
#"Holo"
|
||||
#"InternetExplorer"
|
||||
#"Maps"
|
||||
#"MiracastView"
|
||||
"OneDrive"
|
||||
#"SecHealthUI"
|
||||
#"Wallet"
|
||||
#"Xbox" # This will result in a bootloop since upgrade 1511
|
||||
)
|
||||
|
||||
foreach ($needle in $needles) {
|
||||
Write-Output "Trying to remove all packages containing $needle"
|
||||
|
||||
$pkgs = (Get-ChildItem "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Component Based Servicing\Packages" |
|
||||
Where-Object Name -Like "*$needle*")
|
||||
|
||||
foreach ($pkg in $pkgs) {
|
||||
$pkgname = $pkg.Name.split('\')[-1]
|
||||
|
||||
Takeown-Registry($pkg.Name)
|
||||
Takeown-Registry($pkg.Name + "\Owners")
|
||||
|
||||
Set-ItemProperty -Path ("HKLM:" + $pkg.Name.Substring(18)) -Name Visibility -Value 1
|
||||
New-ItemProperty -Path ("HKLM:" + $pkg.Name.Substring(18)) -Name DefVis -PropertyType DWord -Value 2
|
||||
Remove-Item -Path ("HKLM:" + $pkg.Name.Substring(18) + "\Owners")
|
||||
|
||||
dism.exe /Online /Remove-Package /PackageName:$pkgname /NoRestart
|
||||
}
|
||||
}
|
||||
115
Windows 10/Debloat/scripts/fix-privacy-settings.ps1
Normal file
115
Windows 10/Debloat/scripts/fix-privacy-settings.ps1
Normal file
@ -0,0 +1,115 @@
|
||||
# Description:
|
||||
# This script will try to fix many of the privacy settings for the user. This
|
||||
# is work in progress!
|
||||
|
||||
Import-Module -DisableNameChecking $PSScriptRoot\..\lib\New-FolderForced.psm1
|
||||
Import-Module -DisableNameChecking $PSScriptRoot\..\lib\take-own.psm1
|
||||
|
||||
Write-Output "Elevating priviledges for this process"
|
||||
do {} until (Elevate-Privileges SeTakeOwnershipPrivilege)
|
||||
|
||||
Write-Output "Defuse Windows search settings"
|
||||
Set-WindowsSearchSetting -EnableWebResultsSetting $false
|
||||
|
||||
Write-Output "Set general privacy options"
|
||||
# "Let websites provide locally relevant content by accessing my language list"
|
||||
Set-ItemProperty -Path "HKCU:\Control Panel\International\User Profile" "HttpAcceptLanguageOptOut" 1
|
||||
# Locaton aware printing (changes default based on connected network)
|
||||
New-FolderForced -Path "HKCU:\Printers\Defaults"
|
||||
Set-ItemProperty -Path "HKCU:\Printers\Defaults" "NetID" "{00000000-0000-0000-0000-000000000000}"
|
||||
# "Send Microsoft info about how I write to help us improve typing and writing in the future"
|
||||
New-FolderForced -Path "HKCU:\SOFTWARE\Microsoft\Input\TIPC"
|
||||
Set-ItemProperty -Path "HKCU:\SOFTWARE\Microsoft\Input\TIPC" "Enabled" 0
|
||||
# "Let apps use my advertising ID for experiencess across apps"
|
||||
New-FolderForced -Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\AdvertisingInfo"
|
||||
Set-ItemProperty -Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\AdvertisingInfo" "Enabled" 0
|
||||
# "Turn on SmartScreen Filter to check web content"
|
||||
Set-ItemProperty -Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\AppHost" "EnableWebContentEvaluation" 0
|
||||
|
||||
Write-Output "Disable synchronisation of settings"
|
||||
# These only apply if you log on using Microsoft account
|
||||
Set-ItemProperty -Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\SettingSync" "BackupPolicy" 0x3c
|
||||
Set-ItemProperty -Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\SettingSync" "DeviceMetadataUploaded" 0
|
||||
Set-ItemProperty -Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\SettingSync" "PriorLogons" 1
|
||||
$groups = @(
|
||||
"Accessibility"
|
||||
"AppSync"
|
||||
"BrowserSettings"
|
||||
"Credentials"
|
||||
"DesktopTheme"
|
||||
"Language"
|
||||
"PackageState"
|
||||
"Personalization"
|
||||
"StartLayout"
|
||||
"Windows"
|
||||
)
|
||||
foreach ($group in $groups) {
|
||||
New-FolderForced -Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\SettingSync\Groups\$group"
|
||||
Set-ItemProperty -Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\SettingSync\Groups\$group" "Enabled" 0
|
||||
}
|
||||
|
||||
Write-Output "Set privacy policy accepted state to 0"
|
||||
# Prevents sending speech, inking and typing samples to MS (so Cortana
|
||||
# can learn to recognise you)
|
||||
New-FolderForced -Path "HKCU:\SOFTWARE\Microsoft\Personalization\Settings"
|
||||
Set-ItemProperty -Path "HKCU:\SOFTWARE\Microsoft\Personalization\Settings" "AcceptedPrivacyPolicy" 0
|
||||
|
||||
Write-Output "Do not scan contact informations"
|
||||
# Prevents sending contacts to MS (so Cortana can compare speech etc samples)
|
||||
New-FolderForced -Path "HKCU:\SOFTWARE\Microsoft\InputPersonalization\TrainedDataStore"
|
||||
Set-ItemProperty -Path "HKCU:\SOFTWARE\Microsoft\InputPersonalization\TrainedDataStore" "HarvestContacts" 0
|
||||
|
||||
Write-Output "Inking and typing settings"
|
||||
# Handwriting recognition personalization
|
||||
New-FolderForced -Path "HKCU:\SOFTWARE\Microsoft\InputPersonalization"
|
||||
Set-ItemProperty -Path "HKCU:\SOFTWARE\Microsoft\InputPersonalization" "RestrictImplicitInkCollection" 1
|
||||
Set-ItemProperty -Path "HKCU:\SOFTWARE\Microsoft\InputPersonalization" "RestrictImplicitTextCollection" 1
|
||||
|
||||
Write-Output "Microsoft Edge settings"
|
||||
New-FolderForced -Path "HKCU:\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Main"
|
||||
Set-ItemProperty -Path "HKCU:\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\Main" "DoNotTrack" 1
|
||||
New-FolderForced -Path "HKCU:\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\User\Default\SearchScopes"
|
||||
Set-ItemProperty -Path "HKCU:\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\User\Default\SearchScopes" "ShowSearchSuggestionsGlobal" 0
|
||||
New-FolderForced -Path "HKCU:\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\FlipAhead"
|
||||
Set-ItemProperty -Path "HKCU:\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\FlipAhead" "FPEnabled" 0
|
||||
New-FolderForced -Path "HKCU:\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\PhishingFilter"
|
||||
Set-ItemProperty -Path "HKCU:\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\MicrosoftEdge\PhishingFilter" "EnabledV9" 0
|
||||
|
||||
Write-Output "Disable background access of default apps"
|
||||
foreach ($key in (Get-ChildItem "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\BackgroundAccessApplications")) {
|
||||
Set-ItemProperty -Path ("HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\BackgroundAccessApplications\" + $key.PSChildName) "Disabled" 1
|
||||
}
|
||||
|
||||
Write-Output "Denying device access"
|
||||
# Disable sharing information with unpaired devices
|
||||
Set-ItemProperty -Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\DeviceAccess\Global\LooselyCoupled" "Type" "LooselyCoupled"
|
||||
Set-ItemProperty -Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\DeviceAccess\Global\LooselyCoupled" "Value" "Deny"
|
||||
Set-ItemProperty -Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\DeviceAccess\Global\LooselyCoupled" "InitialAppValue" "Unspecified"
|
||||
foreach ($key in (Get-ChildItem "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\DeviceAccess\Global")) {
|
||||
if ($key.PSChildName -EQ "LooselyCoupled") {
|
||||
continue
|
||||
}
|
||||
Set-ItemProperty -Path ("HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\DeviceAccess\Global\" + $key.PSChildName) "Type" "InterfaceClass"
|
||||
Set-ItemProperty -Path ("HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\DeviceAccess\Global\" + $key.PSChildName) "Value" "Deny"
|
||||
Set-ItemProperty -Path ("HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\DeviceAccess\Global\" + $key.PSChildName) "InitialAppValue" "Unspecified"
|
||||
}
|
||||
|
||||
Write-Output "Disable location sensor"
|
||||
New-FolderForced -Path "HKCU:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Sensor\Permissions\{BFA794E4-F964-4FDB-90F6-51056BFE4B44}"
|
||||
Set-ItemProperty -Path "HKCU:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Sensor\Permissions\{BFA794E4-F964-4FDB-90F6-51056BFE4B44}" "SensorPermissionState" 0
|
||||
|
||||
Write-Output "Disable submission of Windows Defender findings (w/ elevated privileges)"
|
||||
Takeown-Registry("HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Spynet")
|
||||
Set-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows Defender\Spynet" "SpyNetReporting" 0 # write-protected even after takeown ?!
|
||||
Set-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows Defender\Spynet" "SubmitSamplesConsent" 0
|
||||
|
||||
# The following section can cause problems with network / internet connectivity
|
||||
# in generel. See the corresponding issue:
|
||||
# https://github.com/W4RH4WK/Debloat-Windows-10/issues/270
|
||||
#Write-Output "Do not share wifi networks"
|
||||
#$user = New-Object System.Security.Principal.NTAccount($env:UserName)
|
||||
#$sid = $user.Translate([System.Security.Principal.SecurityIdentifier]).value
|
||||
#New-FolderForced -Path ("HKLM:\SOFTWARE\Microsoft\WcmSvc\wifinetworkmanager\features\" + $sid)
|
||||
#Set-ItemProperty -Path ("HKLM:\SOFTWARE\Microsoft\WcmSvc\wifinetworkmanager\features\" + $sid) "FeatureStates" 0x33c
|
||||
#Set-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\WcmSvc\wifinetworkmanager\features" "WiFiSenseCredShared" 0
|
||||
#Set-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\WcmSvc\wifinetworkmanager\features" "WiFiSenseOpen" 0
|
||||
93
Windows 10/Debloat/scripts/optimize-user-interface.ps1
Normal file
93
Windows 10/Debloat/scripts/optimize-user-interface.ps1
Normal file
@ -0,0 +1,93 @@
|
||||
# Description
|
||||
# This script will apply MarkC's mouse acceleration fix (for 100% DPI) and
|
||||
# disable some accessibility features regarding keyboard input. Additional
|
||||
# some UI elements will be changed.
|
||||
|
||||
Import-Module -DisableNameChecking $PSScriptRoot\..\lib\New-FolderForced.psm1
|
||||
Import-Module -DisableNameChecking $PSScriptRoot\..\lib\take-own.psm1
|
||||
|
||||
Write-Output "Elevating priviledges for this process"
|
||||
do {} until (Elevate-Privileges SeTakeOwnershipPrivilege)
|
||||
|
||||
Write-Output "Apply MarkC's mouse acceleration fix"
|
||||
Set-ItemProperty -Path "HKCU:\Control Panel\Mouse" "MouseSensitivity" "10"
|
||||
Set-ItemProperty -Path "HKCU:\Control Panel\Mouse" "MouseSpeed" "0"
|
||||
Set-ItemProperty -Path "HKCU:\Control Panel\Mouse" "MouseThreshold1" "0"
|
||||
Set-ItemProperty -Path "HKCU:\Control Panel\Mouse" "MouseThreshold2" "0"
|
||||
Set-ItemProperty -Path "HKCU:\Control Panel\Mouse" "SmoothMouseXCurve" ([byte[]](0x00, 0x00, 0x00,
|
||||
0x00, 0x00, 0x00, 0x00, 0x00, 0xC0, 0xCC, 0x0C, 0x00, 0x00, 0x00, 0x00, 0x00,
|
||||
0x80, 0x99, 0x19, 0x00, 0x00, 0x00, 0x00, 0x00, 0x40, 0x66, 0x26, 0x00, 0x00,
|
||||
0x00, 0x00, 0x00, 0x00, 0x33, 0x33, 0x00, 0x00, 0x00, 0x00, 0x00))
|
||||
Set-ItemProperty -Path "HKCU:\Control Panel\Mouse" "SmoothMouseYCurve" ([byte[]](0x00, 0x00, 0x00,
|
||||
0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x38, 0x00, 0x00, 0x00, 0x00, 0x00,
|
||||
0x00, 0x00, 0x70, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0x00, 0xA8, 0x00, 0x00,
|
||||
0x00, 0x00, 0x00, 0x00, 0x00, 0xE0, 0x00, 0x00, 0x00, 0x00, 0x00))
|
||||
|
||||
Write-Output "Disable mouse pointer hiding"
|
||||
Set-ItemProperty -Path "HKCU:\Control Panel\Desktop" "UserPreferencesMask" ([byte[]](0x9e,
|
||||
0x1e, 0x06, 0x80, 0x12, 0x00, 0x00, 0x00))
|
||||
|
||||
Write-Output "Disable Game DVR and Game Bar"
|
||||
New-FolderForced -Path "HKLM:\SOFTWARE\Policies\Microsoft\Windows\GameDVR"
|
||||
Set-ItemProperty -Path "HKLM:\SOFTWARE\Policies\Microsoft\Windows\GameDVR" "AllowgameDVR" 0
|
||||
|
||||
Write-Output "Disable easy access keyboard stuff"
|
||||
Set-ItemProperty -Path "HKCU:\Control Panel\Accessibility\StickyKeys" "Flags" "506"
|
||||
Set-ItemProperty -Path "HKCU:\Control Panel\Accessibility\Keyboard Response" "Flags" "122"
|
||||
Set-ItemProperty -Path "HKCU:\Control Panel\Accessibility\ToggleKeys" "Flags" "58"
|
||||
|
||||
Write-Output "Disable Edge desktop shortcut on new profiles"
|
||||
New-ItemProperty -Path "HKLM:\Software\Microsoft\Windows\CurrentVersion\Explorer" -Name DisableEdgeDesktopShortcutCreation -PropertyType DWORD -Value 1
|
||||
|
||||
Write-Output "Restoring old volume slider"
|
||||
New-FolderForced -Path "HKLM:\Software\Microsoft\Windows NT\CurrentVersion\MTCUVC"
|
||||
Set-ItemProperty -Path "HKLM:\Software\Microsoft\Windows NT\CurrentVersion\MTCUVC" "EnableMtcUvc" 0
|
||||
|
||||
Write-Output "Setting folder view options"
|
||||
Set-ItemProperty -Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" "Hidden" 1
|
||||
Set-ItemProperty -Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" "HideFileExt" 0
|
||||
Set-ItemProperty -Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" "HideDrivesWithNoMedia" 0
|
||||
Set-ItemProperty -Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" "ShowSyncProviderNotifications" 0
|
||||
|
||||
Write-Output "Disable Aero-Shake Minimize feature"
|
||||
Set-ItemProperty -Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" "DisallowShaking" 1
|
||||
|
||||
Write-Output "Setting default explorer view to This PC"
|
||||
Set-ItemProperty -Path "HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" "LaunchTo" 1
|
||||
|
||||
Write-Output "Removing user folders under This PC"
|
||||
# Remove Desktop from This PC
|
||||
Remove-Item -Path "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}"
|
||||
Remove-Item -Path "HKLM:\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}"
|
||||
# Remove Documents from This PC
|
||||
Remove-Item -Path "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}"
|
||||
Remove-Item -Path "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{d3162b92-9365-467a-956b-92703aca08af}"
|
||||
Remove-Item -Path "HKLM:\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}"
|
||||
Remove-Item -Path "HKLM:\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{d3162b92-9365-467a-956b-92703aca08af}"
|
||||
# Remove Downloads from This PC
|
||||
Remove-Item -Path "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{374DE290-123F-4565-9164-39C4925E467B}"
|
||||
Remove-Item -Path "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{088e3905-0323-4b02-9826-5d99428e115f}"
|
||||
Remove-Item -Path "HKLM:\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{374DE290-123F-4565-9164-39C4925E467B}"
|
||||
Remove-Item -Path "HKLM:\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{088e3905-0323-4b02-9826-5d99428e115f}"
|
||||
# Remove Music from This PC
|
||||
Remove-Item -Path "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{1CF1260C-4DD0-4ebb-811F-33C572699FDE}"
|
||||
Remove-Item -Path "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{3dfdf296-dbec-4fb4-81d1-6a3438bcf4de}"
|
||||
Remove-Item -Path "HKLM:\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{1CF1260C-4DD0-4ebb-811F-33C572699FDE}"
|
||||
Remove-Item -Path "HKLM:\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{3dfdf296-dbec-4fb4-81d1-6a3438bcf4de}"
|
||||
# Remove Pictures from This PC
|
||||
Remove-Item -Path "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{3ADD1653-EB32-4cb0-BBD7-DFA0ABB5ACCA}"
|
||||
Remove-Item -Path "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{24ad3ad4-a569-4530-98e1-ab02f9417aa8}"
|
||||
Remove-Item -Path "HKLM:\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{3ADD1653-EB32-4cb0-BBD7-DFA0ABB5ACCA}"
|
||||
Remove-Item -Path "HKLM:\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{24ad3ad4-a569-4530-98e1-ab02f9417aa8}"
|
||||
# Remove Videos from This PC
|
||||
Remove-Item -Path "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{A0953C92-50DC-43bf-BE83-3742FED03C9C}"
|
||||
Remove-Item -Path "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{f86fa3ab-70d2-4fc7-9c99-fcbf05467f3a}"
|
||||
Remove-Item -Path "HKLM:\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{A0953C92-50DC-43bf-BE83-3742FED03C9C}"
|
||||
Remove-Item -Path "HKLM:\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{f86fa3ab-70d2-4fc7-9c99-fcbf05467f3a}"
|
||||
# Remove 3D Objects from This PC
|
||||
Remove-Item -Path "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{0DB7E03F-FC29-4DC6-9020-FF41B59E513A}"
|
||||
Remove-Item -Path "HKLM:\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{0DB7E03F-FC29-4DC6-9020-FF41B59E513A}"
|
||||
|
||||
#echo "Disabling tile push notification"
|
||||
#New-FolderForced -Path "HKCU:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\PushNotifications"
|
||||
#sp "HKCU:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\PushNotifications" "NoTileApplicationNotification" 1
|
||||
30
Windows 10/Debloat/scripts/optimize-windows-update.ps1
Normal file
30
Windows 10/Debloat/scripts/optimize-windows-update.ps1
Normal file
@ -0,0 +1,30 @@
|
||||
# Description:
|
||||
# This script optimizes Windows updates by disabling automatic download and
|
||||
# seeding updates to other computers.
|
||||
#
|
||||
Import-Module -DisableNameChecking $PSScriptRoot\..\lib\New-FolderForced.psm1
|
||||
|
||||
Write-Output "Disable automatic download and installation of Windows updates"
|
||||
New-FolderForced -Path "HKLM:\SOFTWARE\Wow6432Node\Policies\Microsoft\Windows\WindowsUpdate\AU"
|
||||
Set-ItemProperty -Path "HKLM:\SOFTWARE\Wow6432Node\Policies\Microsoft\Windows\WindowsUpdate\AU" "NoAutoUpdate" 1
|
||||
Set-ItemProperty -Path "HKLM:\SOFTWARE\Wow6432Node\Policies\Microsoft\Windows\WindowsUpdate\AU" "AUOptions" 2
|
||||
Set-ItemProperty -Path "HKLM:\SOFTWARE\Wow6432Node\Policies\Microsoft\Windows\WindowsUpdate\AU" "ScheduledInstallDay" 0
|
||||
Set-ItemProperty -Path "HKLM:\SOFTWARE\Wow6432Node\Policies\Microsoft\Windows\WindowsUpdate\AU" "ScheduledInstallTime" 3
|
||||
|
||||
Write-Output "Disable seeding of updates to other computers via Group Policies"
|
||||
New-FolderForced -Path "HKLM:\SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization"
|
||||
Set-ItemProperty -Path "HKLM:\SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization" "DODownloadMode" 0
|
||||
|
||||
#echo "Disabling automatic driver update"
|
||||
#sp "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\DriverSearching" "SearchOrderConfig" 0
|
||||
|
||||
$objSID = New-Object System.Security.Principal.SecurityIdentifier "S-1-1-0"
|
||||
$EveryOne = $objSID.Translate( [System.Security.Principal.NTAccount]).Value
|
||||
|
||||
|
||||
Write-Output "Disable 'Updates are available' message"
|
||||
|
||||
takeown /F "$env:WinDIR\System32\MusNotification.exe"
|
||||
icacls "$env:WinDIR\System32\MusNotification.exe" /deny "$($EveryOne):(X)"
|
||||
takeown /F "$env:WinDIR\System32\MusNotificationUx.exe"
|
||||
icacls "$env:WinDIR\System32\MusNotificationUx.exe" /deny "$($EveryOne):(X)"
|
||||
170
Windows 10/Debloat/scripts/remove-default-apps.ps1
Normal file
170
Windows 10/Debloat/scripts/remove-default-apps.ps1
Normal file
@ -0,0 +1,170 @@
|
||||
# Description:
|
||||
# This script removes unwanted Apps that come with Windows. If you do not want
|
||||
# to remove certain Apps comment out the corresponding lines below.
|
||||
|
||||
Import-Module -DisableNameChecking $PSScriptRoot\..\lib\take-own.psm1
|
||||
Import-Module -DisableNameChecking $PSScriptRoot\..\lib\New-FolderForced.psm1
|
||||
|
||||
Write-Output "Elevating privileges for this process"
|
||||
do {} until (Elevate-Privileges SeTakeOwnershipPrivilege)
|
||||
|
||||
Write-Output "Uninstalling default apps"
|
||||
$apps = @(
|
||||
# default Windows 10 apps
|
||||
"Microsoft.549981C3F5F10" #Cortana
|
||||
"Microsoft.3DBuilder"
|
||||
"Microsoft.Appconnector"
|
||||
"Microsoft.BingFinance"
|
||||
"Microsoft.BingNews"
|
||||
"Microsoft.BingSports"
|
||||
"Microsoft.BingTranslator"
|
||||
"Microsoft.BingWeather"
|
||||
#"Microsoft.FreshPaint"
|
||||
"Microsoft.GamingServices"
|
||||
"Microsoft.MicrosoftOfficeHub"
|
||||
"Microsoft.MicrosoftPowerBIForWindows"
|
||||
"Microsoft.MicrosoftSolitaireCollection"
|
||||
#"Microsoft.MicrosoftStickyNotes"
|
||||
"Microsoft.MinecraftUWP"
|
||||
"Microsoft.NetworkSpeedTest"
|
||||
"Microsoft.Office.OneNote"
|
||||
"Microsoft.People"
|
||||
"Microsoft.Print3D"
|
||||
"Microsoft.SkypeApp"
|
||||
"Microsoft.Wallet"
|
||||
#"Microsoft.Windows.Photos"
|
||||
"Microsoft.WindowsAlarms"
|
||||
#"Microsoft.WindowsCalculator"
|
||||
"Microsoft.WindowsCamera"
|
||||
"microsoft.windowscommunicationsapps"
|
||||
"Microsoft.WindowsMaps"
|
||||
"Microsoft.WindowsPhone"
|
||||
"Microsoft.WindowsSoundRecorder"
|
||||
#"Microsoft.WindowsStore" # can't be re-installed
|
||||
"Microsoft.Xbox.TCUI"
|
||||
"Microsoft.XboxApp"
|
||||
"Microsoft.XboxGameOverlay"
|
||||
"Microsoft.XboxSpeechToTextOverlay"
|
||||
"Microsoft.YourPhone"
|
||||
"Microsoft.ZuneMusic"
|
||||
"Microsoft.ZuneVideo"
|
||||
|
||||
# Threshold 2 apps
|
||||
"Microsoft.CommsPhone"
|
||||
"Microsoft.ConnectivityStore"
|
||||
"Microsoft.GetHelp"
|
||||
"Microsoft.Getstarted"
|
||||
"Microsoft.Messaging"
|
||||
"Microsoft.Office.Sway"
|
||||
"Microsoft.OneConnect"
|
||||
"Microsoft.WindowsFeedbackHub"
|
||||
|
||||
# Creators Update apps
|
||||
"Microsoft.Microsoft3DViewer"
|
||||
#"Microsoft.MSPaint"
|
||||
|
||||
#Redstone apps
|
||||
"Microsoft.BingFoodAndDrink"
|
||||
"Microsoft.BingHealthAndFitness"
|
||||
"Microsoft.BingTravel"
|
||||
"Microsoft.WindowsReadingList"
|
||||
|
||||
# Redstone 5 apps
|
||||
"Microsoft.MixedReality.Portal"
|
||||
"Microsoft.ScreenSketch"
|
||||
"Microsoft.XboxGamingOverlay"
|
||||
|
||||
# non-Microsoft
|
||||
"2FE3CB00.PicsArt-PhotoStudio"
|
||||
"46928bounde.EclipseManager"
|
||||
"4DF9E0F8.Netflix"
|
||||
"613EBCEA.PolarrPhotoEditorAcademicEdition"
|
||||
"6Wunderkinder.Wunderlist"
|
||||
"7EE7776C.LinkedInforWindows"
|
||||
"89006A2E.AutodeskSketchBook"
|
||||
"9E2F88E3.Twitter"
|
||||
"A278AB0D.DisneyMagicKingdoms"
|
||||
"A278AB0D.MarchofEmpires"
|
||||
"ActiproSoftwareLLC.562882FEEB491" # next one is for the Code Writer from Actipro Software LLC
|
||||
"CAF9E577.Plex"
|
||||
"ClearChannelRadioDigital.iHeartRadio"
|
||||
"D52A8D61.FarmVille2CountryEscape"
|
||||
"D5EA27B7.Duolingo-LearnLanguagesforFree"
|
||||
"DB6EA5DB.CyberLinkMediaSuiteEssentials"
|
||||
"DolbyLaboratories.DolbyAccess"
|
||||
"DolbyLaboratories.DolbyAccess"
|
||||
"Drawboard.DrawboardPDF"
|
||||
"Facebook.Facebook"
|
||||
"Fitbit.FitbitCoach"
|
||||
"Flipboard.Flipboard"
|
||||
"GAMELOFTSA.Asphalt8Airborne"
|
||||
"KeeperSecurityInc.Keeper"
|
||||
"NORDCURRENT.COOKINGFEVER"
|
||||
"PandoraMediaInc.29680B314EFC2"
|
||||
"Playtika.CaesarsSlotsFreeCasino"
|
||||
"ShazamEntertainmentLtd.Shazam"
|
||||
"SlingTVLLC.SlingTV"
|
||||
"SpotifyAB.SpotifyMusic"
|
||||
#"TheNewYorkTimes.NYTCrossword"
|
||||
"ThumbmunkeysLtd.PhototasticCollage"
|
||||
"TuneIn.TuneInRadio"
|
||||
"WinZipComputing.WinZipUniversal"
|
||||
"XINGAG.XING"
|
||||
"flaregamesGmbH.RoyalRevolt2"
|
||||
"king.com.*"
|
||||
"king.com.BubbleWitch3Saga"
|
||||
"king.com.CandyCrushSaga"
|
||||
"king.com.CandyCrushSodaSaga"
|
||||
|
||||
# apps which cannot be removed using Remove-AppxPackage
|
||||
#"Microsoft.BioEnrollment"
|
||||
#"Microsoft.MicrosoftEdge"
|
||||
#"Microsoft.Windows.Cortana"
|
||||
#"Microsoft.WindowsFeedback"
|
||||
#"Microsoft.XboxGameCallableUI"
|
||||
#"Microsoft.XboxIdentityProvider"
|
||||
#"Windows.ContactSupport"
|
||||
|
||||
# apps which other apps depend on
|
||||
"Microsoft.Advertising.Xaml"
|
||||
)
|
||||
|
||||
$appxprovisionedpackage = Get-AppxProvisionedPackage -Online
|
||||
|
||||
foreach ($app in $apps) {
|
||||
Write-Output "Trying to remove $app"
|
||||
|
||||
Get-AppxPackage -Name $app -AllUsers | Remove-AppxPackage -AllUsers
|
||||
|
||||
($appxprovisionedpackage).Where( {$_.DisplayName -EQ $app}) |
|
||||
Remove-AppxProvisionedPackage -Online
|
||||
}
|
||||
|
||||
# Prevents Apps from re-installing
|
||||
$cdm = @(
|
||||
"ContentDeliveryAllowed"
|
||||
"FeatureManagementEnabled"
|
||||
"OemPreInstalledAppsEnabled"
|
||||
"PreInstalledAppsEnabled"
|
||||
"PreInstalledAppsEverEnabled"
|
||||
"SilentInstalledAppsEnabled"
|
||||
"SubscribedContent-314559Enabled"
|
||||
"SubscribedContent-338387Enabled"
|
||||
"SubscribedContent-338388Enabled"
|
||||
"SubscribedContent-338389Enabled"
|
||||
"SubscribedContent-338393Enabled"
|
||||
"SubscribedContentEnabled"
|
||||
"SystemPaneSuggestionsEnabled"
|
||||
)
|
||||
|
||||
New-FolderForced -Path "HKCU:\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager"
|
||||
foreach ($key in $cdm) {
|
||||
Set-ItemProperty -Path "HKCU:\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" $key 0
|
||||
}
|
||||
|
||||
New-FolderForced -Path "HKLM:\SOFTWARE\Policies\Microsoft\WindowsStore"
|
||||
Set-ItemProperty -Path "HKLM:\SOFTWARE\Policies\Microsoft\WindowsStore" "AutoDownload" 2
|
||||
|
||||
# Prevents "Suggested Applications" returning
|
||||
New-FolderForced -Path "HKLM:\SOFTWARE\Policies\Microsoft\Windows\CloudContent"
|
||||
Set-ItemProperty -Path "HKLM:\SOFTWARE\Policies\Microsoft\Windows\CloudContent" "DisableWindowsConsumerFeatures" 1
|
||||
63
Windows 10/Debloat/scripts/remove-onedrive.ps1
Normal file
63
Windows 10/Debloat/scripts/remove-onedrive.ps1
Normal file
@ -0,0 +1,63 @@
|
||||
# Description:
|
||||
# This script will remove and disable OneDrive integration.
|
||||
|
||||
Import-Module -DisableNameChecking $PSScriptRoot\..\lib\New-FolderForced.psm1
|
||||
Import-Module -DisableNameChecking $PSScriptRoot\..\lib\take-own.psm1
|
||||
|
||||
Write-Output "Kill OneDrive process"
|
||||
taskkill.exe /F /IM "OneDrive.exe"
|
||||
taskkill.exe /F /IM "explorer.exe"
|
||||
|
||||
Write-Output "Remove OneDrive"
|
||||
if (Test-Path "$env:systemroot\System32\OneDriveSetup.exe") {
|
||||
& "$env:systemroot\System32\OneDriveSetup.exe" /uninstall
|
||||
}
|
||||
if (Test-Path "$env:systemroot\SysWOW64\OneDriveSetup.exe") {
|
||||
& "$env:systemroot\SysWOW64\OneDriveSetup.exe" /uninstall
|
||||
}
|
||||
|
||||
Write-Output "Removing OneDrive leftovers"
|
||||
Remove-Item -Recurse -Force -ErrorAction SilentlyContinue "$env:localappdata\Microsoft\OneDrive"
|
||||
Remove-Item -Recurse -Force -ErrorAction SilentlyContinue "$env:programdata\Microsoft OneDrive"
|
||||
Remove-Item -Recurse -Force -ErrorAction SilentlyContinue "$env:systemdrive\OneDriveTemp"
|
||||
# check if directory is empty before removing:
|
||||
If ((Get-ChildItem "$env:userprofile\OneDrive" -Recurse | Measure-Object).Count -eq 0) {
|
||||
Remove-Item -Recurse -Force -ErrorAction SilentlyContinue "$env:userprofile\OneDrive"
|
||||
}
|
||||
|
||||
Write-Output "Disable OneDrive via Group Policies"
|
||||
New-FolderForced -Path "HKLM:\SOFTWARE\Wow6432Node\Policies\Microsoft\Windows\OneDrive"
|
||||
Set-ItemProperty -Path "HKLM:\SOFTWARE\Wow6432Node\Policies\Microsoft\Windows\OneDrive" "DisableFileSyncNGSC" 1
|
||||
|
||||
Write-Output "Remove Onedrive from explorer sidebar"
|
||||
New-PSDrive -PSProvider "Registry" -Root "HKEY_CLASSES_ROOT" -Name "HKCR"
|
||||
mkdir -Force "HKCR:\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}"
|
||||
Set-ItemProperty -Path "HKCR:\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}" "System.IsPinnedToNameSpaceTree" 0
|
||||
mkdir -Force "HKCR:\Wow6432Node\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}"
|
||||
Set-ItemProperty -Path "HKCR:\Wow6432Node\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}" "System.IsPinnedToNameSpaceTree" 0
|
||||
Remove-PSDrive "HKCR"
|
||||
|
||||
# Thank you Matthew Israelsson
|
||||
Write-Output "Removing run hook for new users"
|
||||
reg load "hku\Default" "C:\Users\Default\NTUSER.DAT"
|
||||
reg delete "HKEY_USERS\Default\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /v "OneDriveSetup" /f
|
||||
reg unload "hku\Default"
|
||||
|
||||
Write-Output "Removing startmenu entry"
|
||||
Remove-Item -Force -ErrorAction SilentlyContinue "$env:userprofile\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk"
|
||||
|
||||
Write-Output "Removing scheduled task"
|
||||
Get-ScheduledTask -TaskPath '\' -TaskName 'OneDrive*' -ea SilentlyContinue | Unregister-ScheduledTask -Confirm:$false
|
||||
|
||||
Write-Output "Restarting explorer"
|
||||
Start-Process "explorer.exe"
|
||||
|
||||
Write-Output "Waiting for explorer to complete loading"
|
||||
Start-Sleep 10
|
||||
|
||||
# This can break Windows Update and some system utilities, see #297.
|
||||
#Write-Output "Removing additional OneDrive leftovers"
|
||||
#foreach ($item in (Get-ChildItem "$env:WinDir\WinSxS\*onedrive*")) {
|
||||
# Takeown-Folder $item.FullName
|
||||
# Remove-Item -Recurse -Force $item.FullName
|
||||
#}
|
||||
Reference in New Issue
Block a user