349 lines
31 KiB
YAML
349 lines
31 KiB
YAML
---
|
|
title: configure-windows-settings
|
|
description: configure-windows-settings
|
|
privilege: TrustedInstaller
|
|
actions:
|
|
|
|
# === Hide stripped components from Settings - Windows Updates
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer', value: 'SettingsPageVisibility', type: REG_SZ, data: 'hide:cortana;privacy-automaticfiledownloads;privacy-feedback;windowsinsider;windowsupdate'}
|
|
|
|
# === Hide Insider page from Settings --> Windows Updates
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\WindowsSelfHost\UI\Visibility', value: 'HideInsiderPage', type: REG_DWORD, data: '1'}
|
|
|
|
# - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer', value: 'IsWUHidden', type: REG_DWORD, data: '1'}
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\WindowsUpdate\UX\Settings', value: 'TrayIconVisibility', type: REG_DWORD, data: '0'}
|
|
# ==============
|
|
# === System ===
|
|
# ==============
|
|
# ======> Display -> Graphics settings
|
|
# === Hardware-accelerated GPU scheduling - On
|
|
# ------> Requires build 20H1+
|
|
# ------> https://www.tenforums.com/tutorials/150440-turn-off-hardware-accelerated-gpu-scheduling-windows-10-a.html
|
|
# ------> One of our users had Hardware Acceleration issues, therefore discarded
|
|
# [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\GraphicsDrivers]
|
|
# "HwSchMode"=dword:00000002
|
|
# ======> Notifications & actions
|
|
# === Add or remove quick actions -> Removes all pinned quick actions.
|
|
# [-HKEY_CURRENT_USER\Control Panel\Quick Actions\Pinned]
|
|
# ======> Storage
|
|
# === Allow Storage Sense - Disabled
|
|
# ------> Storage Sense is turned off the machine. Users cannot enable Storage Sense
|
|
# - !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\StorageSense', value: 'AllowStorageSenseGlobal', type: REG_DWORD, data: '0'}
|
|
# ======> Tablet mode
|
|
# === Adjust Tablet mode to always desktop mode.
|
|
# ------> When I sign in - Use desktop mode.
|
|
# ------> When this device automatically switches tablet mode on or off - Don't ask me and don't switch.
|
|
- !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ImmersiveShell', value: 'SignInMode', type: REG_DWORD, data: '1'}
|
|
- !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ImmersiveShell', value: 'TabletMode', type: REG_DWORD, data: '0'}
|
|
- !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ImmersiveShell', value: 'ConvertibleSlateModePromptPreference', type: REG_DWORD, data: '2'}
|
|
# === Hide app icons on the taskbar in tablet mode - Off
|
|
- !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'TaskbarAppsVisibleInTabletMode', type: REG_DWORD, data: '1'}
|
|
# === Automatically hide the taskbar in tablet mode - Off
|
|
- !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'TaskbarAutoHideInTabletMode', type: REG_DWORD, data: '0'}
|
|
# ======> Multitasking
|
|
# === Show suggestions occasionally in your timeline - Off
|
|
- !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SubscribedContent-353698Enabled', type: REG_DWORD, data: '0'}
|
|
- !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SystemPaneSuggestionsEnabled', type: REG_DWORD, data: '0'}
|
|
# ======> Clipboard
|
|
# === Clipboard History - Off
|
|
- !registryValue: {path: 'HKCU\Software\Microsoft\Clipboard', value: 'EnableClipboardHistory', type: REG_DWORD, data: '0'}
|
|
# === Allow Clipboard History - Enabled (default)
|
|
# ------> Clipboard won't work if disabled.
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\System', value: 'AllowClipboardHistory', type: REG_DWORD, data: '1'}
|
|
# === Allow Clipboard synchronization across devices - Enabled (default)
|
|
# ------> Clipboard synchronization won't work if disabled.
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\System', value: 'AllowCrossDeviceClipboard', type: REG_DWORD, data: '1'}
|
|
# ===============
|
|
# === Devices ===
|
|
# ===============
|
|
# ======> Typing
|
|
# === Autocorrect misspelled words - Off
|
|
- !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\TabletTip\1.7', value: 'EnableAutocorrection', type: REG_DWORD, data: '0'}
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\TabletTip\1.7', value: 'EnableAutocorrection', type: REG_DWORD, data: '0'}
|
|
# === Highlight misspelled words - Off
|
|
- !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\TabletTip\1.7', value: 'EnableSpellchecking', type: REG_DWORD, data: '0'}
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\TabletTip\1.7', value: 'EnableSpellchecking', type: REG_DWORD, data: '0'}
|
|
# === Show text suggestions as I type on the software keyboard - Off
|
|
- !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\TabletTip\1.7', value: 'EnableTextPrediction', type: REG_DWORD, data: '0'}
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\TabletTip\1.7', value: 'EnableTextPrediction', type: REG_DWORD, data: '0'}
|
|
# === Add a space after I choose text suggestion - Off
|
|
- !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\TabletTip\1.7', value: 'EnablePredictionSpaceInsertion', type: REG_DWORD, data: '0'}
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\TabletTip\1.7', value: 'EnablePredictionSpaceInsertion', type: REG_DWORD, data: '0'}
|
|
# === Add a full stop after I double-tap the spacebar - Off
|
|
- !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\TabletTip\1.7', value: 'EnableDoubleTapSpace', type: REG_DWORD, data: '0'}
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\TabletTip\1.7', value: 'EnableDoubleTapSpace', type: REG_DWORD, data: '0'}
|
|
# === Typing insights - Off
|
|
- !registryValue: {path: 'HKCU\Software\Microsoft\Input\Settings', value: 'InsightsEnabled', type: REG_DWORD, data: '0'}
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Input\Settings', value: 'InsightsEnabled', type: REG_DWORD, data: '0'}
|
|
# === Show text suggestions as I type - Off
|
|
# ------> Hardware keyboard
|
|
- !registryValue: {path: 'HKCU\Software\Microsoft\Input\Settings', value: 'EnableHwkbTextPrediction', type: REG_DWORD, data: '0'}
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Input\Settings', value: 'EnableHwkbTextPrediction', type: REG_DWORD, data: '0'}
|
|
# === Autocorrect misspelled words I type - Off
|
|
# ------> Hardware keyboard
|
|
- !registryValue: {path: 'HKCU\Software\Microsoft\Input\Settings', value: 'EnableHwkbAutocorrection', type: REG_DWORD, data: '0'}
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Input\Settings', value: 'EnableHwkbAutocorrection', type: REG_DWORD, data: '0'}
|
|
# === Show text suggestions based on the recognized languages that you are typing - Off
|
|
- !registryValue: {path: 'HKCU\Software\Microsoft\Input\Settings', value: 'MultilingualEnabled', type: REG_DWORD, data: '0'}
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Input\Settings', value: 'MultilingualEnabled', type: REG_DWORD, data: '0'}
|
|
# ======> AutoPlay
|
|
# === Use AutoPlay for all media and devices - Off
|
|
- !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers', value: 'DisableAutoplay', type: REG_DWORD, data: '1'}
|
|
# =======================
|
|
# === Personalization ===
|
|
# =======================
|
|
# ======> Colors
|
|
# === Choose your color - Custom colors (designed for UI)
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Accents\0\Theme0', value: 'Color', type: REG_DWORD, data: '4279374354'}
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Accents\0\Theme1', value: 'Color', type: REG_DWORD, data: '4278190294'}
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Accents\1\Theme0', value: 'Color', type: REG_DWORD, data: '4294926889'}
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Accents\1\Theme1', value: 'Color', type: REG_DWORD, data: '4282117119'}
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Accents\2\Theme0', value: 'Color', type: REG_DWORD, data: '4278229247'}
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Accents\2\Theme1', value: 'Color', type: REG_DWORD, data: '4283680768'}
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Accents\3\Theme0', value: 'Color', type: REG_DWORD, data: '4294901930'}
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Accents\3\Theme1', value: 'Color', type: REG_DWORD, data: '4294967064'}
|
|
# === Choose your default app mode - Dark (theme)
|
|
- !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize', value: 'AppsUseLightTheme', type: REG_DWORD, data: '0', option: "configure-darkmode", weight: 70}
|
|
- !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize', value: 'SystemUsesLightTheme', type: REG_DWORD, data: '0', option: "configure-darkmode", weight: 50}
|
|
|
|
## if dark mode is deselected, then revert to light mode
|
|
- !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize', value: 'AppsUseLightTheme', type: REG_DWORD, data: '0', option: "!configure-darkmode", weight: 70}
|
|
- !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize', value: 'SystemUsesLightTheme', type: REG_DWORD, data: '0', option: "!configure-darkmode", weight: 50}
|
|
##
|
|
|
|
# ======> Start
|
|
# === Show suggestions occasionally in Start - Off
|
|
- !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SubscribedContent-338388Enabled', type: REG_DWORD, data: '0'}
|
|
# ============
|
|
# === Apps ===
|
|
# ============
|
|
# ======> Offline maps
|
|
# === Metered connections - Off
|
|
# ------> If this is turned off, maps only download over free WLAN or unlimited mobile date. (You might incur additional charges if you turn it on.)
|
|
- !registryValue: {path: 'HKLM\SYSTEM\Maps', value: 'UpdateOnlyOnWifi', type: REG_DWORD, data: '1'}
|
|
# === Automatically update maps - Off
|
|
- !registryValue: {path: 'HKLM\SYSTEM\Maps', value: 'AutoUpdateEnabled', type: REG_DWORD, data: '0'}
|
|
# ================
|
|
# === Accounts ===
|
|
# ================
|
|
# ======> Sync your settings
|
|
# === Do not sync app settings - Enabled
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\SettingSync', value: 'DisableApplicationSettingSync', type: REG_DWORD, data: '2'}
|
|
# === Allow users to turn "app settings" syncing on - Enabled
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\SettingSync', value: 'DisableApplicationSettingSyncUserOverride', type: REG_DWORD, data: '1'}
|
|
# === Do not sync - Enabled
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\SettingSync', value: 'DisableSettingSync', type: REG_DWORD, data: '2'}
|
|
# === Allow users to turn syncing on - Enabled
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\SettingSync', value: 'DisableSettingSyncUserOverride', type: REG_DWORD, data: '1'}
|
|
# === Do not sync browser settings - Enabled
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\SettingSync', value: 'DisableWebBrowserSettingSync', type: REG_DWORD, data: '2'}
|
|
# === Allow users to turn "browser" syncing on - Enabled
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\SettingSync', value: 'DisableWebBrowserSettingSyncUserOverride', type: REG_DWORD, data: '1'}
|
|
# === Do not sync desktop personalization - Enabled
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\SettingSync', value: 'DisableDesktopThemeSettingSync', type: REG_DWORD, data: '2'}
|
|
# === Allow users to turn "desktop personalization" syncing on - Enabled
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\SettingSync', value: 'DisableDesktopThemeSettingSyncUserOverride', type: REG_DWORD, data: '1'}
|
|
# === Do not sync - Enabled
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\SettingSync', value: 'DisableSettingSync', type: REG_DWORD, data: '2'}
|
|
# === Allow users to turn syncing on - Enabled
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\SettingSync', value: 'DisableSettingSyncUserOverride', type: REG_DWORD, data: '1'}
|
|
# === Do not sync on metered connections - Enabled
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\SettingSync', value: 'DisableSyncOnPaidNetwork', type: REG_DWORD, data: '1'}
|
|
# === Do not sync other Windows settings - Enabled
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\SettingSync', value: 'DisableWindowsSettingSync', type: REG_DWORD, data: '2'}
|
|
# === Allow users to turn "other Windows settings" syncing on - Enabled
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\SettingSync', value: 'DisableWindowsSettingSyncUserOverride', type: REG_DWORD, data: '1'}
|
|
# === Do not sync passwords - Enabled
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\SettingSync', value: 'DisableCredentialsSettingSync', type: REG_DWORD, data: '2'}
|
|
# === Allow users to turn "passwords" syncing on - Enabled
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\SettingSync', value: 'DisableCredentialsSettingSyncUserOverride', type: REG_DWORD, data: '1'}
|
|
# === Do not sync personalize - Enabled
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\SettingSync', value: 'DisablePersonalizationSettingSync', type: REG_DWORD, data: '2'}
|
|
# === Allow users to turn "personalize" syncing on - Enabled
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\SettingSync', value: 'DisablePersonalizationSettingSyncUserOverride', type: REG_DWORD, data: '1'}
|
|
# === Do not sync start settings - Enabled
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\SettingSync', value: 'DisableStartLayoutSettingSync', type: REG_DWORD, data: '2'}
|
|
# === Allow users to turn "start layout" syncing on - Enabled
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\SettingSync', value: 'DisableStartLayoutSettingSyncUserOverride', type: REG_DWORD, data: '1'}
|
|
# ==============
|
|
# === Gaming ===
|
|
# ==============
|
|
# ======> Game bar
|
|
# === Record game clips, screenshots and broadcast using Game bar - Off
|
|
- !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\GameDVR', value: 'AppCaptureEnabled', type: REG_DWORD, data: '0'}
|
|
- !registryValue: {path: 'HKCU\System\GameConfigStore', value: 'GameDVR_Enabled', type: REG_DWORD, data: '0'}
|
|
# ===============
|
|
# === Privacy ===
|
|
# ===============
|
|
# ======> General
|
|
# === Let apps use advertising ID to make ads more interesting to you based on your app activity - Off
|
|
- !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\AdvertisingInfo', value: 'Enabled', type: REG_DWORD, data: '0'}
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AdvertisingInfo', value: 'Enabled', type: REG_DWORD, data: '0'}
|
|
# === Turn off the advertising ID - Enabled
|
|
- !registryValue: {path: 'HKLM\Software\Policies\Microsoft\Windows\AdvertisingInfo', value: 'DisabledByGroupPolicy', type: REG_DWORD, data: '1'}
|
|
# === Allow webistes to provide locally relevant content by accessing my language list - Off
|
|
# ------> Do not let websites access local language list - Enabled
|
|
- !registryValue: {path: 'HKCU\Control Panel\International\User Profile', value: 'HttpAcceptLanguageOptOut', type: REG_DWORD, data: '1', weight: 50}
|
|
# === Allow Windows to track app launches to improve Start and search - Off
|
|
# ------> Let Windows track app launches to improve Start and search results - Disabled
|
|
# [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
|
|
# "Start_TrackProgs"=dword:00000000
|
|
# ======> Speech
|
|
# === Online speech recognition - Off
|
|
- !registryValue: {path: 'HKCU\Software\Microsoft\Speech_OneCore\Settings\OnlineSpeechPrivacy', value: 'HasAccepted', type: REG_DWORD, data: '0'}
|
|
# ======> Inking & typing personalization
|
|
# === Getting to know you - Off
|
|
# ------> https://www.tenforums.com/tutorials/118127-turn-off-inking-typing-personalization-windows-10-a.html
|
|
- !registryValue: {path: 'HKCU\Software\Microsoft\InputPersonalization', value: 'RestrictImplicitInkCollection', type: REG_DWORD, data: '1'}
|
|
- !registryValue: {path: 'HKCU\Software\Microsoft\InputPersonalization', value: 'RestrictImplicitTextCollection', type: REG_DWORD, data: '1'}
|
|
- !registryValue: {path: 'HKCU\Software\Microsoft\InputPersonalization\TrainedDataStore', value: 'HarvestContacts', type: REG_DWORD, data: '0'}
|
|
- !registryValue: {path: 'HKCU\Software\Microsoft\Personalization\Settings', value: 'AcceptedPrivacyPolicy', type: REG_DWORD, data: '0'}
|
|
# === Turn off automatic learning - Enabled
|
|
- !registryValue: {path: 'HKCU\SOFTWARE\Policies\Microsoft\InputPersonalization', value: 'RestrictImplicitInkCollection', type: REG_DWORD, data: '1'}
|
|
- !registryValue: {path: 'HKCU\SOFTWARE\Policies\Microsoft\InputPersonalization', value: 'RestrictImplicitTextCollection', type: REG_DWORD, data: '1'}
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\InputPersonalization', value: 'RestrictImplicitInkCollection', type: REG_DWORD, data: '1'}
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\InputPersonalization', value: 'RestrictImplicitTextCollection', type: REG_DWORD, data: '1'}
|
|
# === Allow users to enable online speech recognition services - Disabled
|
|
# ------> If this policy is disabled, speech services will be disabled, and users cannot enable speech services via settings.
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\InputPersonalization', value: 'AllowInputPersonalization', type: REG_DWORD, data: '0'}
|
|
# ======> Diagnostics & feedback
|
|
# === Diagnostic data - Disabled
|
|
# ------> Disable Telemetry - Enabled
|
|
- !registryValue: {path: 'HKCU\SOFTWARE\Policies\Microsoft\Windows\DataCollection', value: 'AllowTelemetry', type: REG_DWORD, data: '0'}
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\DataCollection', value: 'AllowTelemetry', type: REG_DWORD, data: '0'}
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\DataCollection', value: 'AllowTelemetry', type: REG_DWORD, data: '0'}
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\DataCollection', value: 'AllowTelemetry', type: REG_DWORD, data: '0'}
|
|
# === Improve inking and typing recognition - Disabled
|
|
- !registryValue: {path: 'HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\TextInput', value: 'AllowLinguisticDataCollection', type: REG_DWORD, data: '0'}
|
|
# === Improve inking and typing recognition - Disabled
|
|
- !registryValue: {path: 'HKCU\Software\Microsoft\Input\TIPC', value: 'Enabled', type: REG_DWORD, data: '0'}
|
|
# === Tailored experiences - Off
|
|
- !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Privacy', value: 'TailoredExperiencesWithDiagnosticDataEnabled', type: REG_DWORD, data: '0'}
|
|
# === View diagnostic data - Off
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Diagnostics\DiagTrack\EventTranscriptKey', value: 'EnableEventTranscript', type: REG_DWORD, data: '0'}
|
|
# === Feedback frequency - Never
|
|
- !registryValue: {path: 'HKCU\Software\Microsoft\Siuf\Rules', value: 'NumberOfSIUFInPeriod', type: REG_DWORD, data: '0'}
|
|
# ======> Activity history
|
|
# === Allow upload of User Activities - Disabled
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\System', value: 'UploadUserActivities', type: REG_DWORD, data: '0'}
|
|
# === Allow publishing of User Activities - Disabled
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\System', value: 'PublishUserActivities', type: REG_DWORD, data: '0'}
|
|
# === Enables Activity Feed - Disabled
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\System', value: 'EnableActivityFeed', type: REG_DWORD, data: '0'}
|
|
# ======> App permissions
|
|
# ------> https://www.joseespitia.com/2019/07/24/registry-keys-for-windows-10-application-privacy-settings/
|
|
# === Location - Off
|
|
- !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\location', value: 'Value', type: REG_SZ, data: 'Deny'}
|
|
# REMINDER
|
|
# [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\location]
|
|
# "Value"="Deny"
|
|
# === Camera - On
|
|
- !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\webcam', value: 'Value', type: REG_SZ, data: 'Allow'}
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\webcam', value: 'Value', type: REG_SZ, data: 'Allow'}
|
|
# === Microphone - On
|
|
- !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\microphone', value: 'Value', type: REG_SZ, data: 'Allow'}
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\microphone', value: 'Value', type: REG_SZ, data: 'Allow'}
|
|
# === Notifications - Off
|
|
- !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\userNotificationListener', value: 'Value', type: REG_SZ, data: 'Deny'}
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\userNotificationListener', value: 'Value', type: REG_SZ, data: 'Deny'}
|
|
# === Motion - Off
|
|
- !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\activity', value: 'Value', type: REG_SZ, data: 'Deny'}
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\activity', value: 'Value', type: REG_SZ, data: 'Deny'}
|
|
# === Account info - Off
|
|
- !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\userAccountInformation', value: 'Value', type: REG_SZ, data: 'Deny'}
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\userAccountInformation', value: 'Value', type: REG_SZ, data: 'Deny'}
|
|
# === Contacts - Off
|
|
# --------> Needed for Mail & Calendar app
|
|
# [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\contacts]
|
|
# "Value"="Deny"
|
|
# [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\contacts]
|
|
# "Value"="Deny"
|
|
# === Calendar - Off
|
|
- !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\appointments', value: 'Value', type: REG_SZ, data: 'Deny'}
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\appointments', value: 'Value', type: REG_SZ, data: 'Deny'}
|
|
# === Call history - Off
|
|
# [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\phoneCallHistory]
|
|
# "Value"="Deny"
|
|
# [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\phoneCallHistory]
|
|
# "Value"="Deny"
|
|
# === Email - Off
|
|
# [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\email]
|
|
# "Value"="Deny"
|
|
# [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\email]
|
|
# "Value"="Deny"
|
|
# === Tasks - Off
|
|
- !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\userDataTasks', value: 'Value', type: REG_SZ, data: 'Deny'}
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\userDataTasks', value: 'Value', type: REG_SZ, data: 'Deny'}
|
|
# === Messaging - Off
|
|
- !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\chat', value: 'Value', type: REG_SZ, data: 'Deny'}
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\chat', value: 'Value', type: REG_SZ, data: 'Deny'}
|
|
# === Radios - Off
|
|
- !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\radios', value: 'Value', type: REG_SZ, data: 'Deny'}
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\radios', value: 'Value', type: REG_SZ, data: 'Deny'}
|
|
# === Other devices - Off
|
|
- !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\bluetoothSync', value: 'Value', type: REG_SZ, data: 'Deny'}
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\bluetoothSync', value: 'Value', type: REG_SZ, data: 'Deny'}
|
|
# === Background apps - Off
|
|
- !registryValue: {path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\Search', value: 'BackgroundAppGlobalToggle', type: REG_DWORD, data: '0'}
|
|
- !registryValue: {path: 'HKLM\Software\Microsoft\Windows\CurrentVersion\Search', value: 'BackgroundAppGlobalToggle', type: REG_DWORD, data: '0'}
|
|
# === App diagnostics - Off
|
|
- !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\appDiagnostics', value: 'Value', type: REG_SZ, data: 'Deny'}
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\appDiagnostics', value: 'Value', type: REG_SZ, data: 'Deny'}
|
|
# === Documents - Off
|
|
- !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\documentsLibrary', value: 'Value', type: REG_SZ, data: 'Deny'}
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\documentsLibrary', value: 'Value', type: REG_SZ, data: 'Deny'}
|
|
# === Pictures - Off
|
|
- !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\picturesLibrary', value: 'Value', type: REG_SZ, data: 'Deny'}
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\picturesLibrary', value: 'Value', type: REG_SZ, data: 'Deny'}
|
|
# === Videos - Off
|
|
- !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\videosLibrary', value: 'Value', type: REG_SZ, data: 'Deny'}
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\videosLibrary', value: 'Value', type: REG_SZ, data: 'Deny'}
|
|
# === File system - Off
|
|
- !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\broadFileSystemAccess', value: 'Value', type: REG_SZ, data: 'Deny'}
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\broadFileSystemAccess', value: 'Value', type: REG_SZ, data: 'Deny'}
|
|
# ===================
|
|
# === Wi-Fi Sense ===
|
|
# ===================
|
|
# === Disable Wi-Fi Sense - Enabled
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\WcmSvc\wifinetworkmanager\config', value: 'AutoConnectAllowedOEM', type: REG_DWORD, data: '0'}
|
|
# === Disable Wi-Fi Sense telemetry
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\default\WiFi\AllowWiFiHotSpotReporting', value: 'value', type: REG_DWORD, data: '0'}
|
|
- !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\PolicyManager\default\WiFi\AllowAutoConnectToWiFiSenseHotspots', value: 'value', type: REG_DWORD, data: '0'}
|
|
# ========================
|
|
# === Discarded Tweaks ===
|
|
# ========================
|
|
# === Block Cortana connections via Firewall
|
|
# ------> Cortana gets removed either way, so these are discarded from integration for compatibility reasons + not to flood the Firewall registry entry.
|
|
# [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
|
|
# "Block Cortana ActionUriServer.exe"="v2.26|Action=Block|Active=TRUE|Dir=Out|RA42=IntErnet|RA62=IntErnet|App=C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\ActionUriServer.exe|Name=Block Cortana ActionUriServer.exe|Desc=Block Cortana Outbound UDP/TCP Traffic|"
|
|
# [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
|
|
# "Block Cortana PlacesServer.exe"="v2.26|Action=Block|Active=TRUE|Dir=Out|RA42=IntErnet|RA62=IntErnet|App=C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\PlacesServer.exe|Name=Block Cortana PlacesServer.exe|Desc=Block Cortana Outbound UDP/TCP Traffic|"
|
|
# [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
|
|
# "Block Cortana RemindersServer.exe"="v2.26|Action=Block|Active=TRUE|Dir=Out|RA42=IntErnet|RA62=IntErnet|App=C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe|Name=Block Cortana RemindersServer.exe|Desc=Block Cortana Outbound UDP/TCP Traffic|"
|
|
# [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
|
|
# "Block Cortana RemindersShareTargetApp.exe"="v2.26|Action=Block|Active=TRUE|Dir=Out|RA42=IntErnet|RA62=IntErnet|App=C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersShareTargetApp.exe|Name=Block Cortana RemindersShareTargetApp.exe|Desc=Block Cortana Outbound UDP/TCP Traffic|"
|
|
# [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
|
|
# "Block Cortana SearchUI.exe"="v2.26|Action=Block|Active=TRUE|Dir=Out|RA42=IntErnet|RA62=IntErnet|App=C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe|Name=Block Cortana SearchUI.exe|Desc=Block Cortana Outbound UDP/TCP Traffic|"
|
|
# [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
|
|
# "Block Cortana Package"="v2.26|Action=Block|Active=TRUE|Dir=Out|RA42=IntErnet|RA62=IntErnet|Name=Block Cortana Package|Desc=Block Cortana Outbound UDP/TCP Traffic|AppPkgId=S-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742|Platform=2:6:2|Platform2=GTEQ|"
|
|
# === Disable DeliveryOptimization
|
|
# ------> May conflict with Microsoft Store functions.
|
|
# HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DeliveryOptimization]
|
|
# "DODownloadMode"=dword:00000100
|
|
# === Enable backup for Apps - Disabled
|
|
# ------> Only present on Windows 8 and 8.1, therefore discarded.
|
|
# [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\SettingSync]
|
|
# "EnableBackupForWin8Apps"=dword:00000000
|
|
# === Autocorrect misspelled words I type (?)
|
|
# ------> Undocumented, therefore discarded.
|
|
# ------> Hardware keyboard
|
|
# [HKEY_CURRENT_USER\Software\Microsoft\Input\Settings]
|
|
# "EnableHwkbAutocorrection2"=dword:00000000
|
|
# [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Input\Settings]
|
|
# "EnableHwkbAutocorrection2"=dword:00000000
|
|
# === Disable Speech
|
|
# ------> Undocumented, discarded.
|
|
# ------> https://github.com/CHEF-KOCH/Windows-Redstone-4-1803-Data-Analysis/blob/master/Registry/ModelDownloadAllowed.reg
|
|
# [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Speech_OneCore\Preferences]
|
|
# "VoiceActivationDefaultOn"=dword:00000000
|