win11x-playbook/src/Executables/FINALIZE.bat

84 lines
7.1 KiB
Batchfile

@echo off
set version=23.06
for /f "tokens=2 delims==" %%i in ('wmic os get BuildNumber /value ^| find "="') do set "build=%%i"
if %build% gtr 19045 ( set "w11=true" )
::WebThreatDefSvc
for /f %%i in ('reg query "HKLM\SYSTEM\ControlSet001\Services" /s /k "webthreatdefusersvc" /f 2^>nul ^| find /i "webthreatdefusersvc" ') do (
reg add "%%i" /v "Start" /t REG_DWORD /d "4" /f >NUL 2>nul
)
if not defined w11 (
bcdedit /set description "ReviOS 10 %version%" >NUL 2>nul
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OEMInformation" /v "Model" /t REG_SZ /d "ReviOS 10 %version%" /f >NUL 2>nul
reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion" /v "RegisteredOrganisation" /t REG_SZ /d "ReviOS 10 %version%" /f >NUL 2>nul
) else (
bcdedit /set description "ReviOS 11 %version%" >NUL 2>nul
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OEMInformation" /v "Model" /t REG_SZ /d "ReviOS 11 %version%" /f >NUL 2>nul
reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion" /v "RegisteredOrganisation" /t REG_SZ /d "ReviOS 11 %version%" /f >NUL 2>nul
::FileExplorerTabs
@REM reg add "HKLM\SYSTEM\ControlSet001\Control\FeatureManagement\Overrides\8\1931258509" /v "EnabledState" /t REG_DWORD /d "2" /f >NUL
@REM reg add "HKLM\SYSTEM\ControlSet001\Control\FeatureManagement\Overrides\8\1931258509" /v "EnabledStateOptions" /t REG_DWORD /d "0" /f >NUL
@REM reg add "HKLM\SYSTEM\ControlSet001\Control\FeatureManagement\Overrides\8\1931258509" /v "Variant" /t REG_DWORD /d "0" /f >NUL
@REM reg add "HKLM\SYSTEM\ControlSet001\Control\FeatureManagement\Overrides\8\1931258509" /v "VariantPayload" /t REG_DWORD /d "0" /f >NUL
@REM reg add "HKLM\SYSTEM\ControlSet001\Control\FeatureManagement\Overrides\8\1931258509" /v "VariantPayloadKind" /t REG_DWORD /d "0" /f >NUL
@REM reg add "HKLM\SYSTEM\ControlSet001\Control\FeatureManagement\Overrides\8\2733408908" /v "EnabledState" /t REG_DWORD /d "2" /f >NUL
@REM reg add "HKLM\SYSTEM\ControlSet001\Control\FeatureManagement\Overrides\8\2733408908" /v "EnabledStateOptions" /t REG_DWORD /d "0" /f >NUL
@REM reg add "HKLM\SYSTEM\ControlSet001\Control\FeatureManagement\Overrides\8\2733408908" /v "Variant" /t REG_DWORD /d "0" /f >NUL
@REM reg add "HKLM\SYSTEM\ControlSet001\Control\FeatureManagement\Overrides\8\2733408908" /v "VariantPayload" /t REG_DWORD /d "0" /f >NUL
@REM reg add "HKLM\SYSTEM\ControlSet001\Control\FeatureManagement\Overrides\8\2733408908" /v "VariantPayloadKind" /t REG_DWORD /d "0" /f >NUL
)
PowerShell -NonInteractive -NoLogo -NoP -C "& {$cpu = Get-CimInstance Win32_Processor; $cpuName = $cpu.Name; if ($cpu.Manufacturer -eq 'GenuineIntel') { if ($cpuName.Substring(0, 2) -eq 'In') { Write-Host 'Detected Intel CPU older than 10th generation.' } else { $cpuGen = [int]($cpuName.Substring(0, 2)); if ($cpuGen -gt 11) { Write-Host 'Optimizing Revision''s Ultra powerplan for 12th generation or later Intel CPUs'; powercfg -changename 3ff9831b-6f80-4830-8178-736cd4229e7b 'Ultra Performance' 'Windows''s Ultimate Performance with optimized settings for newer Intel CPUs.'; powercfg -s 3ff9831b-6f80-4830-8178-736cd4229e7b; powercfg -setacvalueindex scheme_current sub_processor HETEROPOLICY 0; powercfg -setacvalueindex scheme_current sub_processor SCHEDPOLICY 2; powercfg /setactive scheme_current }}};}"
echo Configuring Superfetch for HDD...
for /f %%i in ('PowerShell -NonInteractive -NoLogo -NoP -C "(Get-PhysicalDisk -SerialNumber (Get-Disk -Number (Get-Partition -DriveLetter $env:SystemDrive.Substring(0, 1)).DiskNumber).SerialNumber.TrimStart()).MediaType"') do set "hardDrive=%%i"
if "%hardDrive%"=="HDD" (
reg add "HKLM\SYSTEM\ControlSet001\Control\Class\{71a27cdd-812a-11d0-bec7-08002be2092f}" /v "LowerFilters" /t REG_MULTI_SZ /d "fvevol\0iorate\0rdyboost" /f >NUL 2>nul
reg add "HKLM\SYSTEM\ControlSet001\Services\rdyboost" /v "Start" /t REG_DWORD /d "0" /f >NUL 2>nul
reg add "HKLM\SYSTEM\ControlSet001\Services\SysMain" /v "Start" /t REG_DWORD /d "2" /f >NUL 2>nul
reg add "HKLM\SYSTEM\ControlSet001\Control\Session Manager\Memory Management\PrefetchParameters" /v "EnablePrefetcher" /t REG_DWORD /d "3" /f >NUL 2>nul
reg add "HKLM\SYSTEM\ControlSet001\Control\Session Manager\Memory Management\PrefetchParameters" /v "EnableSuperfetch" /t REG_DWORD /d "3" /f >NUL 2>nul
reg delete "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\EMDMgmt" /v "GroupPolicyDisallowCaches" /f >NUL 2>nul
reg delete "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\EMDMgmt" /v "AllowNewCachesByDefault" /f >NUL 2>nul
)
echo Configuring memory...
for /f "tokens=2 delims==" %%a in ('wmic os get TotalVisibleMemorySize /format:value') do set "memTemp=%%a"
set /a "mem=%memTemp% + 1024000"
reg add "HKLM\SYSTEM\CurrentControlSet\Control" /v "SvcHostSplitThresholdInKB" /t REG_DWORD /d "%mem%" /f >NUL
reg add "HKLM\SOFTWARE\Policies\Microsoft\InputPersonalization" /v "AllowInputPersonalization" /t REG_DWORD /d "0" /f >NUL
for /f "usebackq tokens=2 delims=\" %%a in (`reg query "HKEY_USERS" ^| findstr /r /x /c:"HKEY_USERS\\S-.*" /c:"HKEY_USERS\\AME_UserHive_[^_]*"`) do (
REM If the "Volatile Environment" key exists, that means it is a proper user. Built in accounts/SIDs do not have this key.
reg query "HKEY_USERS\%%a" | findstr /c:"Volatile Environment" /c:"AME_UserHive_" > nul 2>&1
if not errorlevel 1 (
if %mem% lss 9000000 (
reg add "HKU\%%a\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize" /v "EnableTransparency" /t REG_DWORD /d "0" /f >NUL
reg add "HKU\%%a\Control Panel\Desktop\WindowMetrics" /v "MinAnimate" /t REG_SZ /d "0" /f >NUL 2>nul
)
)
)
@REM echo Configuring UAC...
@REM for /f "tokens=3*" %%i in ('reg query "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableLUA"') do (
@REM if %%i==0x1 (
@REM goto :lastpart
@REM ) else (
@REM reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableVirtualization" /t REG_DWORD /d "1" /f >NUL
@REM reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableInstallerDetection" /t REG_DWORD /d "1" /f >NUL
@REM reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v "PromptOnSecureDesktop" /t REG_DWORD /d "1" /f >NUL
@REM reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableLUA" /t REG_DWORD /d "1" /f >NUL
@REM reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableSecureUIAPaths" /t REG_DWORD /d "1" /f >NUL
@REM reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v "ConsentPromptBehaviorAdmin" /t REG_DWORD /d "5" /f >NUL
@REM reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v "ValidateAdminCodeSignatures" /t REG_DWORD /d "0" /f >NUL
@REM reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableUIADesktopToggle" /t REG_DWORD /d "0" /f >NUL
@REM reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v "ConsentPromptBehaviorUser" /t REG_DWORD /d "3" /f >NUL
@REM reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v "FilterAdministratorToken" /t REG_DWORD /d "0" /f >NUL
@REM )
@REM )