120 lines
4.9 KiB
Reg
120 lines
4.9 KiB
Reg
|
Windows Registry Editor Version 5.00
|
||
|
|
|
||
|
|
[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\MTCUVC]
|
||
|
|
; http://winaero.com/blog/enable-old-volume-control-in-windows-10/
|
||
|
|
"EnableMtcUvc"=dword:00000000
|
||
|
|
|
||
|
|
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer]
|
||
|
|
"DisableEdgeDesktopShortcutCreation"=dword:00000001
|
||
|
|
|
||
|
|
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\DataCollection]
|
||
|
|
"AllowTelemetry"=dword:00000000
|
||
|
|
"DiagTrackAuthorization"=dword:00000000
|
||
|
|
|
||
|
|
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection]
|
||
|
|
"AllowTelemetry"=dword:00000000
|
||
|
|
|
||
|
|
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search]
|
||
|
|
"AllowCortana"=dword:00000000
|
||
|
|
"ExplainAllowCortana"=dword:00000000
|
||
|
|
"DisableWebSearch"=dword:00000001
|
||
|
|
"AllowCloudSearch"=dword:00000000
|
||
|
|
"AllowSearchToUseLocation"=dword:00000000
|
||
|
|
"ConnectedSearchUseWeb"=dword:00000000
|
||
|
|
|
||
|
|
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Search]
|
||
|
|
"DeviceHistoryEnabled"=dword:00000000
|
||
|
|
"AllowSearchToUseLocation"=dword:00000000
|
||
|
|
"BingSearchEnabled"=dword:00000000
|
||
|
|
|
||
|
|
|
||
|
|
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System]
|
||
|
|
"PublishUserActivities"=dword:00000000
|
||
|
|
|
||
|
|
;; ;disable communication with microsoft account servers
|
||
|
|
;; ;FIXME: Does this break Teams or something?
|
||
|
|
;; ;https://docs.microsoft.com/en-us/windows/configuration/manage-connections-from-windows-operating-system-components-to-microsoft-services
|
||
|
|
;; [Registry_hklm_wlid]
|
||
|
|
;; openkey [HKLM\SYSTEM\CurrentControlSet\Services\wlidsvc]
|
||
|
|
;; set "Start"=dword:4
|
||
|
|
|
||
|
|
|
||
|
|
;https://msdn.microsoft.com/en-us/library/dd405474(v=vs.85).aspx
|
||
|
|
; https://www.windowsmanagementexperts.com/disabling-windows-10-consumer-experience/disabling-windows-10-consumer-experience.htm
|
||
|
|
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SQMClient]
|
||
|
|
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\SQMClient\Windows]
|
||
|
|
"CEIPEnable"=dword:00000000
|
||
|
|
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CloudContent]
|
||
|
|
"DisableWindowsConsumerFeatures"=dword:00000001
|
||
|
|
|
||
|
|
|
||
|
|
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\PushToInstall]
|
||
|
|
"DisablePushToInstall"=dword:00000000
|
||
|
|
|
||
|
|
|
||
|
|
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\OOBE]
|
||
|
|
"DisablePrivacyExperience"=dword:00000001
|
||
|
|
|
||
|
|
;https://www.stigviewer.com/stig/windows_7/2012-08-22/finding/V-15704
|
||
|
|
;https://www.windows-security.org/c60f66da12d91f4f0be57445a827e366/turn-off-handwriting-personalization-data-sharing
|
||
|
|
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\TabletPC]
|
||
|
|
"PreventHandwritingDataSharing"=dword:00000001
|
||
|
|
[HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\HandwritingErrorReports]
|
||
|
|
"PreventHandwritingErrorReports"=dword:00000001
|
||
|
|
|
||
|
|
|
||
|
|
; https://translate.google.com/translate?sl=auto&tl=en&u=http://www-pc.uni-regensburg.de/systemsw/win10/settings.htm
|
||
|
|
; https://www.stigviewer.com/stig/windows_7/2014-04-02/finding/V-21971
|
||
|
|
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppCompat]
|
||
|
|
"AITEnable"=dword:00000000
|
||
|
|
"DisableUAR"=dword:00000001
|
||
|
|
"DisableInventory"=dword:00000001
|
||
|
|
|
||
|
|
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AdvertisingInfo]
|
||
|
|
"Enabled"=dword:00000000
|
||
|
|
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AdvertisingInfo]
|
||
|
|
"DisabledByGroupPolicy"=dword:00000001
|
||
|
|
|
||
|
|
|
||
|
|
[HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\PushNotifications]
|
||
|
|
"NoTileApplicationNotification"=dword:00000001
|
||
|
|
|
||
|
|
;;;; DISABLE ONEDRIVE - copied from OPSI config-win10
|
||
|
|
;https://techjourney.net/disable-or-uninstall-onedrive-completely-in-windows-10/
|
||
|
|
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows]
|
||
|
|
"DisableFileSyncNGSC"=dword:00000001
|
||
|
|
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Onedrive]
|
||
|
|
"DisableLibrariesDefaultSaveToOneDrive"=dword:00000001
|
||
|
|
"DisableFileSync"=dword:00000001
|
||
|
|
"DisableFileSynciNGSC"=dword:00000001
|
||
|
|
"DisableMeteredNetworkFileSync"=dword:00000000
|
||
|
|
[HKEY_CLASSES_ROOT\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}]
|
||
|
|
"System.IsPinnedToNameSpaceTree"=dword:00000000
|
||
|
|
[HKEY_CLASSES_ROOT\WOW6432Node\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}]
|
||
|
|
"System.IsPinnedToNameSpaceTree"=dword:00000000
|
||
|
|
;;;; / DISABLE ONEDRIVE
|
||
|
|
|
||
|
|
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Maps]
|
||
|
|
"AutoDownloadAndUpdateMapData"=dword:00000000
|
||
|
|
|
||
|
|
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System]
|
||
|
|
"EnableSmartScreen"=dword:00000000
|
||
|
|
|
||
|
|
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting]
|
||
|
|
"Disabled"=dword:00000001
|
||
|
|
|
||
|
|
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer]
|
||
|
|
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Safety]
|
||
|
|
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Safety\PrivacIE]
|
||
|
|
"DisableLogging"=dword:00000001
|
||
|
|
|
||
|
|
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\FindMyDevice]
|
||
|
|
"AllowFindMyDevice"=dword:00000000
|
||
|
|
|
||
|
|
; Disable the AppReadiness service that installs a lot of bloatware apps from MS store
|
||
|
|
; on first user login. Note that this includes important apps such as the Windows
|
||
|
|
; Settings app. These have to be installed manually.
|
||
|
|
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\AppReadiness]
|
||
|
|
"Start"=dword:00000004
|
||
|
|
|