w10onARM Setup batch

w10onARM_Setup_batch.bat

@echo off
Title w10onARM Setup batch

echo Blocking junk apps & echo.
reg load HKLM\DEFAULT c:\users\default\ntuser.dat
reg add "HKLM\DEFAULT\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v PreInstalledAppsEnabled /t REG_DWORD /d 0 /f 
reg add "HKLM\DEFAULT\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v OemPreInstalledAppsEnabled /t REG_DWORD /d 0 /f 
reg unload HKLM\DEFAULT

echo Removing useless windows components & echo.
dism /online /norestart /disable-feature /featurename:Printing-PrintToPDFServices-Features
dism /online /norestart /disable-feature /featurename:Printing-XPSServices-Features
dism /online /norestart /disable-feature /featurename:WorkFolders-Client
dism /online /norestart /disable-feature /featurename:WindowsMediaPlayer
dism /online /norestart /disable-feature /featurename:Printing-Foundation-Features
dism /online /norestart /disable-feature /featurename:Printing-Foundation-InternetPrinting-Client
dism /online /norestart /disable-feature /featurename:MSRDC-Infrastructure

REM Small changes
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v EnableFirstLogonAnimation /t REG_DWORD /d 0 /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\InternetExplorer\Main" /v DisableFirstRunCustomize /t REG_DWORD /d 1 /f

echo Disable NTFS Last Access Timestamps & echo.
reg add "HKLM\SYSTEM\CurrentControlSet\Control\FileSystem" /v NtfsDisableLastAccessUpdate /t REG_DWORD /d 1 /f

echo Disable Memory Dump Creation & echo.
reg add "HKLM\SYSTEM\CurrentControlSet\Control\CrashControl" /v CrashDumpEnabled /t REG_DWORD /d 0 /f
reg add "HKLM\SYSTEM\CurrentControlSet\Control\CrashControl" /v LogEvent /t REG_DWORD /d 0 /f
reg add "HKLM\SYSTEM\CurrentControlSet\Control\CrashControl" /v SendAlert /t REG_DWORD /d 0 /f

echo Minor Changes.
reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v NoLowDiskSpaceChecks /t REG_DWORD /d 1 /f
reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v LinkResolveIgnoreLinkInfo /t REG_DWORD /d 1 /f"
reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v NoResolveSearch /t REG_DWORD /d 1 /f"
reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v NoResolveTrack /t REG_DWORD /d 1 /f"
reg add "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v NoInternetOpenWith /t REG_DWORD /d 1 /f"
reg add "HKEY_CURRENT_USER\Control Panel\Desktop" /v MenuShowDelay /t REG_DWORD /d 0 /f"

taskkill /f /im OneDrive.exe
%SystemRoot%\SysWOW64\OneDriveSetup.exe /uninstall
takeown /R /F %SystemRoot%\SysWOW64\OneDriveSetup.*
icacls %SystemRoot%\SysWOW64\OneDriveSetup.exe /grant %username%:F
del /f %SystemRoot%\SysWOW64\OneDriveSetup.exe

echo Disabling Geolocation services & echo.
sc config "lfsvc" start= disabled
sc stop "lfsvc"

echo Disabling Auto Time Zone Updatery & echo.
sc config "tzautoupdate" start= disabled
sc stop "tzautoupdate"

echo Setting OpenSSH Authentication Agent to DEMAND & echo.
sc config "ssh-agent" start= demand
sc stop "ssh-agent"

echo Disabling Phone Service & echo.
sc config "PhoneSvc" start= disabled
sc stop "PhoneSvc"

REM These are all Windows out-of-the-box bloatware, not 3rd party
echo.
echo Removing Non 3rd party bloatware/useless apps
echo.
echo Removing BingFinance
powershell -command " get-appxpackage -allusers 'Microsoft.BingFinance' | remove-appxpackage "
echo.
echo Removing BingFoodAndDrink
powershell -command " get-appxpackage -allusers 'Microsoft.BingFoodAndDrink' | remove-appxpackage "
echo.
echo Removing BingHealthAndFitness
powershell -command " get-appxpackage -allusers 'Microsoft.BingHealthAndFitness' | remove-appxpackage "
echo.
echo Removing BingMaps
powershell -command " get-appxpackage -allusers 'Microsoft.BingMaps' | remove-appxpackage "
echo.
echo Removing BingNews
powershell -command " get-appxpackage -allusers 'Microsoft.BingNews' | remove-appxpackage "
echo.
echo Removing BingSports
powershell -command " get-appxpackage -allusers 'Microsoft.BingSports' | remove-appxpackage "
echo.
echo Removing BingTranslator
powershell -command " get-appxpackage -allusers 'Microsoft.BingTranslator' | remove-appxpackage "
echo.
echo Removing BingTravel
powershell -command " get-appxpackage -allusers 'Microsoft.BingTravel' | remove-appxpackage "
echo.
echo Removing ConnectivityStore
powershell -command " get-appxpackage -allusers 'Microsoft.ConnectivityStore' | remove-appxpackage "
echo.
echo Removing DiagnosticDataViewer
powershell -command " get-appxpackage -allusers 'Microsoft.DiagnosticDataViewer' | remove-appxpackage "
echo.
echo Removing GetHelp
powershell -command " get-appxpackage -allusers 'Microsoft.GetHelp' | remove-appxpackage "
echo.
echo Removing Getstarted
powershell -command " get-appxpackage -allusers 'Microsoft.Getstarted' | remove-appxpackage "
echo.
echo Removing HelpAndTips
powershell -command " get-appxpackage -allusers 'Microsoft.HelpAndTips' | remove-appxpackage "
echo.
echo Removing HoganThreshold
powershell -command " get-appxpackage -allusers 'Microsoft.HoganThreshold' | remove-appxpackage "
echo.
echo Removing Language Experience Packs
powershell -command " get-appxpackage -allusers 'Microsoft.LanguageExperiencePacken-GB' | remove-appxpackage "
powershell -command " get-appxpackage -allusers 'Microsoft.LanguageExperiencePacken-es' | remove-appxpackage "
powershell -command " get-appxpackage -allusers 'Microsoft.LanguageExperiencePacken-mx' | remove-appxpackage "
powershell -command " get-appxpackage -allusers 'Microsoft.LanguageExperiencePacken-lt' | remove-appxpackage "
powershell -command " get-appxpackage -allusers 'Microsoft.LanguageExperiencePacken-nl' | remove-appxpackage "
powershell -command " get-appxpackage -allusers 'Microsoft.LanguageExperiencePacken-BR' | remove-appxpackage "
echo.
echo Removing Messaging
powershell -command " get-appxpackage -allusers 'Microsoft.Messaging' | remove-appxpackage "
echo.
echo Removing MicrosoftJackpot
powershell -command " get-appxpackage -allusers 'Microsoft.MicrosoftJackpot' | remove-appxpackage "
echo.
echo Removing MicrosoftJigsaw
powershell -command " get-appxpackage -allusers 'Microsoft.MicrosoftJigsaw' | remove-appxpackage "
echo.
echo Removing MicrosoftMahjong
powershell -command " get-appxpackage -allusers 'Microsoft.MicrosoftMahjong' | remove-appxpackage "
echo.
echo Removing MicrosoftOfficeHub
powershell -command " get-appxpackage -allusers 'Microsoft.MicrosoftOfficeHub' | remove-appxpackage "
echo.
echo Removing MicrosoftPowerBIForWindows
powershell -command " get-appxpackage -allusers 'Microsoft.MicrosoftPowerBIForWindows' | remove-appxpackage "
echo.
echo Removing MicrosoftRewards
powershell -command " get-appxpackage -allusers 'Microsoft.MicrosoftRewards' | remove-appxpackage "
echo.
echo Removing MicrosoftSudoku
powershell -command " get-appxpackage -allusers 'Microsoft.MicrosoftSudoku' | remove-appxpackage "
echo.
echo Removing MovieMoments
powershell -command " get-appxpackage -allusers 'Microsoft.MovieMoments' | remove-appxpackage "
echo.
echo Removing NetworkSpeedTest
powershell -command " get-appxpackage -allusers 'Microsoft.NetworkSpeedTest' | remove-appxpackage "
echo.
echo Removing Office.Sway
powershell -command " get-appxpackage -allusers 'Microsoft.Office.Sway' | remove-appxpackage "
echo.
echo Removing OneConnect
powershell -command " get-appxpackage -allusers 'Microsoft.OneConnect' | remove-appxpackage "
echo.
echo Removing People
powershell -command " get-appxpackage -allusers 'Microsoft.People' | remove-appxpackage "
echo.
echo Removing SeaofThieves
powershell -command " get-appxpackage -allusers 'Microsoft.SeaofThieves' | remove-appxpackage "
echo.
echo Removing SkypeApp
powershell -command " get-appxpackage -allusers 'Microsoft.SkypeApp' | remove-appxpackage "
echo.
echo Removing SkypeWiFi
powershell -command " get-appxpackage -allusers 'Microsoft.SkypeWiFi' | remove-appxpackage "
echo.
echo Removing SkypeWiFi
powershell -command " get-appxpackage -allusers 'Microsoft.SkypeWiFi' | remove-appxpackage "
echo.
echo Removing Wordament
powershell -command " get-appxpackage -allusers 'Microsoft.Wordament' | remove-appxpackage "
echo.
echo Removing FeatureOnDemand.InsiderHub
powershell -command " get-appxpackage -allusers 'Microsoft.FeatureOnDemand.InsiderHub' | remove-appxpackage "
echo.
echo Removing WindowsReadingList
powershell -command " get-appxpackage -allusers 'Microsoft.WindowsReadingList' | remove-appxpackage "
echo.
echo Removing WorldNationalParks
powershell -command " get-appxpackage -allusers 'Microsoft.WorldNationalParks' | remove-appxpackage "
echo.
echo Removing ContactSupport
powershell -command " get-appxpackage -allusers 'Windows.ContactSupport' | remove-appxpackage "
echo.
echo Completely Removing Cortana. Finally.
powershell -command " Remove-AppxProvisionedPackage -Online -PackageName Microsoft.549981C3F5F10_1.1911.21713.0_neutral_ ~ _8wekyb3d8bbwe "
powershell -command " get-appxpackage -allusers 'Microsoft.Advertising.Xaml' | remove-appxpackage "

echo.
echo ----------------------------------------------------------------------------------------------------------------------------------------------
echo Following commands are from the script named "Tron" and will  be used to disable telemetry and serverices for better performance and security.
echo ----------------------------------------------------------------------------------------------------------------------------------------------
timeout -t 6 > nul
echo.
echo Blocking/deleting telemetry tasks
REM All commands below are from Tron, I take no credit for this and all credit goes to the taltented people behind the Tron script. https://github.com/bmrf/tron
	schtasks /delete /F /TN "\Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser"
	schtasks /delete /F /TN "\Microsoft\Windows\Application Experience\ProgramDataUpdater"
	schtasks /delete /F /TN "\Microsoft\Windows\Autochk\Proxy"
	schtasks /delete /F /TN "\Microsoft\Windows\Customer Experience Improvement Program\Consolidator"
	schtasks /delete /F /TN "\Microsoft\Windows\Customer Experience Improvement Program\KernelCeipTask"
	schtasks /delete /F /TN "\Microsoft\Windows\Customer Experience Improvement Program\UsbCeip"
	schtasks /delete /F /TN "\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector"
	schtasks /delete /F /TN "\Microsoft\Windows\PI\Sqm-Tasks"
	schtasks /delete /F /TN "\Microsoft\Windows\Power Efficiency Diagnostics\AnalyzeSystem"
	schtasks /delete /F /TN "\Microsoft\Windows\Windows Error Reporting\QueueReporting"
	schtasks /delete /f /tn "\Microsoft\Windows\application experience\Microsoft compatibility appraiser"
	schtasks /delete /f /tn "\Microsoft\Windows\application experience\aitagent"
	schtasks /delete /f /tn "\Microsoft\Windows\application experience\programdataupdater"
	schtasks /delete /f /tn "\Microsoft\Windows\autochk\proxy"
	schtasks /delete /f /tn "\Microsoft\Windows\customer experience improvement program\consolidator"
	schtasks /delete /f /tn "\Microsoft\Windows\customer experience improvement program\kernelceiptask"
	schtasks /delete /f /tn "\Microsoft\Windows\customer experience improvement program\usbceip"
	schtasks /delete /f /tn "\Microsoft\Windows\diskdiagnostic\Microsoft-Windows-diskdiagnosticdatacollector"
	schtasks /delete /f /tn "\Microsoft\Windows\maintenance\winsat"
	schtasks /delete /f /tn "\Microsoft\Windows\media center\activateWindowssearch"
	schtasks /delete /f /tn "\Microsoft\Windows\media center\configureinternettimeservice"
	schtasks /delete /f /tn "\Microsoft\Windows\media center\dispatchrecoverytasks"
	schtasks /delete /f /tn "\Microsoft\Windows\media center\ehdrminit"
	schtasks /delete /f /tn "\Microsoft\Windows\media center\installplayready"
	schtasks /delete /f /tn "\Microsoft\Windows\media center\mcupdate"
	schtasks /delete /f /tn "\Microsoft\Windows\media center\mediacenterrecoverytask"
	schtasks /delete /f /tn "\Microsoft\Windows\media center\objectstorerecoverytask"
	schtasks /delete /f /tn "\Microsoft\Windows\media center\ocuractivate"
	schtasks /delete /f /tn "\Microsoft\Windows\media center\ocurdiscovery"
	schtasks /delete /f /tn "\Microsoft\Windows\media center\pbdadiscovery">nul 2>&1
	schtasks /delete /f /tn "\Microsoft\Windows\media center\pbdadiscoveryw1"
	schtasks /delete /f /tn "\Microsoft\Windows\media center\pbdadiscoveryw2"
	schtasks /delete /f /tn "\Microsoft\Windows\media center\pvrrecoverytask"
	schtasks /delete /f /tn "\Microsoft\Windows\media center\pvrscheduletask"
	schtasks /delete /f /tn "\Microsoft\Windows\media center\registersearch"
	schtasks /delete /f /tn "\Microsoft\Windows\media center\reindexsearchroot"
	schtasks /delete /f /tn "\Microsoft\Windows\media center\sqlliterecoverytask"
	schtasks /delete /f /tn "\Microsoft\Windows\media center\updaterecordpath"

echo.
echo Blocking serverices
REM All commands below are from Tron, I take no credit for this and all credit goes to the taltented people behind the Tron script. https://github.com/bmrf/tron
	:: Remote Registry (disable only)
	sc config remoteregistry start= disabled
	sc stop remoteregistry

	:: Retail Demo
	sc stop RetailDemo
	sc delete RetailDemo

	:: "WAP Push Message Routing Service"
	sc stop dmwappushservice
	sc config dmwappushservice start= disabled

	:: Windows Event Collector Service (disable only)
	sc stop Wecsvc
	sc config Wecsvc start= disabled

	:: Xbox Live services
	sc stop XblAuthManager
	sc stop XblGameSave
	sc stop XboxNetApiSvc
	sc stop XboxGipSvc
	sc stop xbgm
	sc config XblAuthManager start= demand
	sc config XblGameSave start= demand
	sc config XboxNetApiSvc start= demand
	sc config XboxGipSvc start= demand
	sc config xbgm start= demand
	
echo.
echo Blocking serverices
REM All commands below are from Tron, I take no credit for this and all credit goes to the taltented people behind the Tron script. https://github.com/bmrf/tron

	REM Keylogger
	REG add "HKLM\SYSTEM\CurrentControlSet\Control\WMI\AutoLogger\AutoLogger-Diagtrack-Listener" /v "Start" /t REG_DWORD /d "0" /f
	
	REM Wifi sense; this is a nasty one, privacy-wise
	REG add "HKLM\software\microsoft\wcmsvc\wifinetworkmanager" /v "wifisensecredshared" /t REG_DWORD /d "0" /f
	REG add "HKLM\software\microsoft\wcmsvc\wifinetworkmanager" /v "wifisenseopen" /t REG_DWORD /d "0" /f
	
	REM Windows Defender sample reporting
	REG add "HKLM\software\microsoft\windows defender\spynet" /v "spynetreporting" /t REG_DWORD /d "0" /f
	REG add "HKLM\software\microsoft\windows defender\spynet" /v "submitsamplesconsent" /t REG_DWORD /d "0" /f
	
	REM SkyDrive
	REG add "HKLM\software\policies\microsoft\windows\skydrive" /v "disablefilesync" /t REG_DWORD /d "1" /f
	
	REM Kill OneDrive from hooking into Explorer even when disabled
	REG add "HKCR\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}" /v "System.IsPinnedToNameSpaceTree" /t REG_DWORD /d "0" /f
	REG add "HKCR\Wow6432Node\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}" /v "System.IsPinnedToNameSpaceTree" /t REG_DWORD /d "0" /f
	
	REM DiagTrack service
	REG add "HKLM\SYSTEM\CurrentControlSet\Services\DiagTrack" /v "Start" /t REG_DWORD /d "4" /f
	
	REM "WAP Push Message Routing Service"
	REG add "HKLM\SYSTEM\CurrentControlSet\Services\dmwappushservice" /v "Start" /t REG_DWORD /d "4" /f
echo.
echo Blocking bad hosts
REM All commands below are from Tron, I take no credit for this and all credit goes to the taltented people behind the Tron script. https://github.com/bmrf/tron
:: a-0001.a-msedge.net
	route -p add 204.79.197.200/32 0.0.0.0
	:: a23-218-212-69.deploy.static.akamaitechnologies.com
	route -p add 23.218.212.69/32 0.0.0.0
	:: a.ads1.msn.com
	route -p add 204.160.124.125/32 0.0.0.0
	route -p add 8.253.14.126/32 0.0.0.0
	route -p add 8.254.25.126/32 0.0.0.0
	:: a.ads2.msads.net
	route -p add 93.184.215.200/32 0.0.0.0
	:: a.ads2.msn.com
	route -p add 198.78.194.252/32 0.0.0.0
	route -p add 198.78.209.253/32 0.0.0.0
	route -p add 8.254.23.254/32 0.0.0.0
	:: ac3.msn.com
	route -p add 131.253.14.76/32 0.0.0.0
	:: ads1.msads.net
	route -p add 23.201.58.73/32 0.0.0.0
	:: ads1.msn.com
	route -p add 204.160.124.125/32 0.0.0.0
	route -p add 8.253.14.126/32 0.0.0.0
	route -p add 8.254.25.126/32 0.0.0.0
	:: adsmockarc.azurewebsites.net
	route -p add 191.236.16.12/32 0.0.0.0
	:: ads.msn.com
	route -p add 157.56.91.82/32 0.0.0.0
	:: auth.gfx.ms
	route -p add 23.61.72.70/32 0.0.0.0
	:: b.ads1.msn.com
	route -p add 204.160.124.125/32 0.0.0.0
	route -p add 8.253.14.126/32 0.0.0.0
	route -p add 8.254.25.126/32 0.0.0.0
	:: b.ads2.msads.net
	route -p add 93.184.215.200/32 0.0.0.0
	:: df.telemetry.microsoft.com
	route -p add 65.52.100.7/32 0.0.0.0
	:: help.bingads.microsoft.com
	route -p add 207.46.202.114/32 0.0.0.0
	:: oca.telemetry.microsoft.com
	route -p add 65.55.252.63/32 0.0.0.0
	:: oca.telemetry.microsoft.com.nsatc.net
	route -p add 65.55.252.63/32 0.0.0.0
	:: pre.footprintpredict.com
	route -p add 204.79.197.200/32 0.0.0.0
	:: reports.wes.df.telemetry.microsoft.com
	route -p add 65.52.100.91/32 0.0.0.0
	:: sb.scorecardresearch.com
	route -p add 104.79.156.195/32 0.0.0.0
	:: services.wes.df.telemetry.microsoft.com
	route -p add 65.52.100.92/32 0.0.0.0
	:: settings-win.data.microsoft.com
	route -p add 65.55.44.108/32 0.0.0.0
	:: s.gateway.messenger.live.com
	route -p add 157.56.106.210/32 0.0.0.0
	:: sgmetrics.cloudapp.net
	route -p add 168.62.11.145/32 0.0.0.0
	:: spynet2.microsoft.com
	route -p add 23.96.212.225/32 0.0.0.0
	:: spynetalt.microsoft.com
	route -p add 23.96.212.225/32 0.0.0.0
	:: sqm.df.telemetry.microsoft.com
	route -p add 65.52.100.94/32 0.0.0.0
	:: sqm.telemetry.microsoft.com
	route -p add 65.55.252.93/32 0.0.0.0
	:: sqm.telemetry.microsoft.com.nsatc.net
	route -p add 65.55.252.93/32 0.0.0.0
	:: statsfe1.ws.microsoft.com
	route -p add 134.170.115.60/32 0.0.0.0
	route -p add 207.46.114.61/32 0.0.0.0
	:: statsfe2.update.microsoft.com.akadns.net
	route -p add 65.52.108.153/32 0.0.0.0
	:: statsfe2.ws.microsoft.com
	route -p add 64.4.54.22/32 0.0.0.0
	:: storeedgefd.dsx.mp.microsoft.com // Disabled for Tron, required for the Microsoft App Store to connect
	:: route -p add 104.79.153.53/32 0.0.0.0
	:: telecommand.telemetry.microsoft.com
	route -p add 65.55.252.92/32 0.0.0.0
	:: telecommand.telemetry.microsoft.com.nsatc.net
	route -p add 65.55.252.92/32 0.0.0.0
	:: telemetry.appex.bing.net
	route -p add 168.62.187.13/32 0.0.0.0
	:: telemetry.microsoft.com
	route -p add 65.52.100.9/32 0.0.0.0
	:: telemetry.urs.microsoft.com
	route -p add 131.253.40.37/32 0.0.0.0
	:: vortex.data.microsoft.com
	route -p add 64.4.54.254/32 0.0.0.0
	:: vortex-sandbox.data.microsoft.com
	route -p add 64.4.54.32/32 0.0.0.0
	:: vortex-win.data.microsoft.com
	route -p add 64.4.54.254/32 0.0.0.0
	:: watson.live.com
	route -p add 207.46.223.94/32 0.0.0.0
	:: watson.microsoft.com
	route -p add 65.55.252.71/32 0.0.0.0
	:: watson.ppe.telemetry.microsoft.com
	route -p add 65.52.100.11/32 0.0.0.0
	:: watson.telemetry.microsoft.com
	route -p add 65.52.108.29/32 0.0.0.0
	:: watson.telemetry.microsoft.com.nsatc.net
	route -p add 65.52.108.29/32 0.0.0.0
	:: wes.df.telemetry.microsoft.com
	route -p add 65.52.100.93/32 0.0.0.0
	
echo.
echo Other tasks
REM All commands below are from Tron, I take no credit for this and all credit goes to the taltented people behind the Tron script. https://github.com/bmrf/tron
	setacl.exe -on "hkey_local_machine\software\microsoft\wcmsvc\wifinetworkmanager" -ot reg -actn setowner -ownr n:administrators
	setacl.exe -on "hkey_local_machine\software\microsoft\wcmsvc\wifinetworkmanager" -ot reg -actn ace -ace "n:administrators;p:full"
	setacl.exe -on "hkey_local_machine\software\microsoft\windows\currentversion\windowsupdate\auto update" -ot reg -actn setowner -ownr n:administrators
	setacl.exe -on "hkey_local_machine\software\microsoft\windows\currentversion\windowsupdate\auto update" -ot reg -actn ace -ace "n:administrators;p:full"
	setacl.exe -on "hkey_local_machine\software\microsoft\windows defender\spynet" -ot reg -actn setowner -ownr n:administrators
	setacl.exe -on "hkey_local_machine\software\microsoft\windows defender\spynet" -ot reg -actn ace -ace "n:administrators;p:full"
	setacl.exe -on "hkey_local_machine\software\policies\microsoft\windows\datacollection" -ot reg -actn setowner -ownr n:administrators
	setacl.exe -on "hkey_local_machine\software\policies\microsoft\windows\datacollection" -ot reg -actn ace -ace "n:administrators;p:full"
	setacl.exe -on "hkey_local_machine\software\policies\microsoft\windows\gwx" -ot reg -actn setowner -ownr n:administrators
	setacl.exe -on "hkey_local_machine\software\policies\microsoft\windows\gwx" -ot reg -actn ace -ace "n:administrators;p:full"
	setacl.exe -on "hkey_local_machine\software\policies\microsoft\windows\skydrive" -ot reg -actn setowner -ownr n:administrators
	setacl.exe -on "hkey_local_machine\software\policies\microsoft\windows\skydrive" -ot reg -actn ace -ace "n:administrators;p:full"
		
		
:: Kill pending tracking reports
if not exist %ProgramData%\Microsoft\Diagnosis\ETLLogs\AutoLogger\ mkdir %ProgramData%\Microsoft\Diagnosis\ETLLogs\AutoLogger\ >NUL 2>&1
echo. > %ProgramData%\Microsoft\Diagnosis\ETLLogs\AutoLogger\AutoLogger-Diagtrack-Listener.etl 2>NUL
echo y|cacls.exe "%programdata%\Microsoft\Diagnosis\ETLLogs\AutoLogger\AutoLogger-Diagtrack-Listener.etl" /d SYSTEM >NUL 2>&1

:: Kill "show fun tips, hints and tricks" on the lock screen
REG load HKLM\defuser %USERPROFILES%\default\ntuser.dat >NUL 2>&1
REG add "HKLM\defuser\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /V RotatingLockScreenOverlayEnabled /T REG_DWORD /D 00000000 /F >NUL 2>&1
REG unload HKLM\defuser >NUL 2>&1

:: Disable "Occasionally show suggestions in Start"...sigh
REG ADD HKLM\SOFTWARE\Policies\Microsoft\Windows\CloudContent /v DisableWindowsConsumerFeatures /t REG_DWORD /d 1 /f

echo.
echo -------------------------------------------------------------------------
echo Following commands have an unknown origin, so credit cannon be provided. 
echo -------------------------------------------------------------------------
timeout -t 6 > nul

rem *** Disable Some Service ***
sc stop diagnosticshub.standardcollector.service
sc stop WMPNetworkSvc
sc stop WSearch
sc stop SysMain

sc config diagnosticshub.standardcollector.service start= disabled
REM sc config TrkWks start= disabled
sc config WSearch start= disabled
sc config SysMain start= disabled

REM *** SCHEDULED TASKS tweaks ***
schtasks /Change /TN "Microsoft\Windows\AppID\SmartScreenSpecific" /Disable
schtasks /Change /TN "Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser" /Disable
schtasks /Change /TN "Microsoft\Windows\Application Experience\ProgramDataUpdater" /Disable
schtasks /Change /TN "Microsoft\Windows\Application Experience\StartupAppTask" /Disable
schtasks /Change /TN "Microsoft\Windows\Customer Experience Improvement Program\Consolidator" /Disable
schtasks /Change /TN "Microsoft\Windows\Customer Experience Improvement Program\KernelCeipTask" /Disable
schtasks /Change /TN "Microsoft\Windows\Customer Experience Improvement Program\UsbCeip" /Disable
schtasks /Change /TN "Microsoft\Windows\Customer Experience Improvement Program\Uploader" /Disable
schtasks /Change /TN "Microsoft\Windows\Shell\FamilySafetyUpload" /Disable
schtasks /Change /TN "Microsoft\Office\OfficeTelemetryAgentLogOn" /Disable
schtasks /Change /TN "Microsoft\Office\OfficeTelemetryAgentFallBack" /Disable
schtasks /Change /TN "Microsoft\Office\Office 15 Subscription Heartbeat" /Disable

schtasks /Change /TN "Microsoft\Windows\Autochk\Proxy" /Disable
schtasks /Change /TN "Microsoft\Windows\CloudExperienceHost\CreateObjectTask" /Disable
schtasks /Change /TN "Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector" /Disable
REM schtasks /Change /TN "Microsoft\Windows\DiskFootprint\Diagnostics" /Disable *** Not sure if should be disabled, maybe related to S.M.A.R.T.
schtasks /Change /TN "Microsoft\Windows\FileHistory\File History (maintenance mode)" /Disable
schtasks /Change /TN "Microsoft\Windows\Maintenance\WinSAT" /Disable
schtasks /Change /TN "Microsoft\Windows\NetTrace\GatherNetworkInfo" /Disable
schtasks /Change /TN "Microsoft\Windows\PI\Sqm-Tasks" /Disable
The stubborn task Microsoft\Windows\SettingSync\BackgroundUploadTask can be Disabled using a simple bit change. I use a REG file for that (attached to this post).
schtasks /Change /TN "Microsoft\Windows\Time Synchronization\ForceSynchronizeTime" /Disable
REM schtasks /Change /TN "Microsoft\Windows\Time Synchronization\SynchronizeTime" /Disable
schtasks /Change /TN "Microsoft\Windows\WindowsUpdate\Automatic App Update" /Disable

rem *** Remove Telemetry & Data Collection ***
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Device Metadata" /v PreventDeviceMetadataFromNetwork /t REG_DWORD /d 1 /f
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\DataCollection" /v "AllowTelemetry" /t REG_DWORD /d 0 /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\MRT" /v DontOfferThroughWUAU /t REG_DWORD /d 1 /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\SQMClient\Windows" /v "CEIPEnable" /t REG_DWORD /d 0 /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\AppCompat" /v "AITEnable" /t REG_DWORD /d 0 /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\AppCompat" /v "DisableUAR" /t REG_DWORD /d 1 /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DataCollection" /v "AllowTelemetry" /t REG_DWORD /d 0 /f
reg add "HKLM\SYSTEM\CurrentControlSet\Control\WMI\AutoLogger\SQMLogger" /v "Start" /t REG_DWORD /d 0 /f

REM Settings -> Privacy -> General -> Let apps use my advertising ID...
reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\AdvertisingInfo" /v Enabled /t REG_DWORD /d 0 /f
REM - SmartScreen Filter for Store Apps: Disable
reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\AppHost" /v EnableWebContentEvaluation /t REG_DWORD /d 0 /f
REM - Let websites provide locally...
reg add "HKCU\Control Panel\International\User Profile" /v HttpAcceptLanguageOptOut /t REG_DWORD /d 1 /f

REM WiFi Sense: HotSpot Sharing: Disable
reg add "HKLM\Software\Microsoft\PolicyManager\default\WiFi\AllowWiFiHotSpotReporting" /v value /t REG_DWORD /d 0 /f
REM WiFi Sense: Shared HotSpot Auto-Connect: Disable
reg add "HKLM\Software\Microsoft\PolicyManager\default\WiFi\AllowAutoConnectToWiFiSenseHotspots" /v value /t REG_DWORD /d 0 /f

REM Change Windows Updates to "Notify to schedule restart"
reg add "HKLM\SOFTWARE\Microsoft\WindowsUpdate\UX\Settings" /v UxOption /t REG_DWORD /d 1 /f
REM Disable P2P Update downlods outside of local network
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\DeliveryOptimization\Config" /v DODownloadMode /t REG_DWORD /d 0 /f


REM *** Hide the search box from taskbar. You can still search by pressing the Win key and start typing what you're looking for ***
REM 0 = hide completely, 1 = show only icon, 2 = show long search box
reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Search" /v "SearchboxTaskbarMode" /t REG_DWORD /d 1 /f

REM *** Disable MRU lists (jump lists) of XAML apps in Start Menu ***
reg add "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "Start_TrackDocs" /t REG_DWORD /d 0 /f

REM *** Set Windows Explorer to start on This PC instead of Quick Access ***
REM 1 = This PC, 2 = Quick access
reg add "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "LaunchTo" /t REG_DWORD /d 1 /f

rem NOW JUST SOME TWEAKS
REM *** Show hidden files in Explorer ***
REM reg add "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "Hidden" /t REG_DWORD /d 1 /f
 
REM *** Show super hidden system files in Explorer ***
REM reg add "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "ShowSuperHidden" /t REG_DWORD /d 1 /f

REM *** Show file extensions in Explorer ***
reg add "HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "HideFileExt" /t  REG_DWORD /d 0 /f

REM *** Uninstall OneDrive ***
rd C:\OneDriveTemp /Q /S >NUL 2>&1
rd "%USERPROFILE%\OneDrive" /Q /S >NUL 2>&1
rd "%LOCALAPPDATA%\Microsoft\OneDrive" /Q /S >NUL 2>&1
rd "%PROGRAMDATA%\Microsoft OneDrive" /Q /S >NUL 2>&1
reg add "HKEY_CLASSES_ROOT\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\ShellFolder" /f /v Attributes /t REG_DWORD /d 0 >NUL 2>&1
reg add "HKEY_CLASSES_ROOT\Wow6432Node\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\ShellFolder" /f /v Attributes /t REG_DWORD /d 0 >NUL 2>&1
start /wait TASKKILL /F /IM explorer.exe
start explorer.exe

echo.
echo -------------------------------------------------------------------------
echo Following commands are from W4RH4WK's Debloat-Windows-10 repository
echo -------------------------------------------------------------------------
timeout -t 6 > nul

REM https://github.com/W4RH4WK/Debloat-Windows-10/blob/master/scripts/optimize-user-interface.ps1
echo Disable Game DVR and Game Bar
powershell -command Set-ItemProperty "HKLM:\SOFTWARE\Policies\Microsoft\Windows\GameDVR" "AllowgameDVR" 0

echo Disable easy access keyboard stuff
powershell -command Set-ItemProperty "HKCU:\Control Panel\Accessibility\StickyKeys" "Flags" "506"
powershell -command Set-ItemProperty "HKCU:\Control Panel\Accessibility\Keyboard Response" "Flags" "122"
powershell -command Set-ItemProperty "HKCU:\Control Panel\Accessibility\ToggleKeys" "Flags" "58"

echo Disable Aero-Shake Minimize feature (Do people use this??)
powershell -command Set-ItemProperty "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" "DisallowShaking" 1

echo.
echo -------------------------------------------------------------------------
echo Following commands are from IAreKyleW00t's windows-tweaks repository
echo -------------------------------------------------------------------------
timeout -t 6 > nul

REM https://github.com/IAreKyleW00t/windows-tweaks/blob/master/windows10/privacy-patcher.bat
:: The following section will update Windows firewall to block multiple IP's that
:: are known to harvest/request user data from within Windows 10. These IP's belong
:: to Akamai, United States Superior Edgar Rental Corp., and Microsoft itself.
:: This will block any requests from these IP's on any protocol.
:STEP_2
ECHO.
<NUL SET /P o="[2] Updating Windows Firewall... "
netsh advfirewall firewall add rule name="Block Microsoft IP (Akamai)" dir=out protocol=any remoteip="2.22.61.43" profile=any action=block >NUL 2>&1
netsh advfirewall firewall add rule name="Block Microsoft IP (Akamai)" dir=out protocol=any remoteip="2.22.61.66" profile=any action=block >NUL 2>&1
netsh advfirewall firewall add rule name="Block Microsoft IP (Akamai)" dir=out protocol=any remoteip="23.218.212.69" profile=any action=block >NUL 2>&1
netsh advfirewall firewall add rule name="Block Microsoft IP (SEC)" dir=out protocol=any remoteip="65.39.117.230" profile=any action=block >NUL 2>&1
netsh advfirewall firewall add rule name="Block Microsoft IP" dir=out protocol=any remoteip="65.55.108.23" profile=any action=block >NUL 2>&1
netsh advfirewall firewall add rule name="Block Microsoft IP" dir=out protocol=any remoteip="134.170.30.202" profile=any action=block >NUL 2>&1
netsh advfirewall firewall add rule name="Block Microsoft IP" dir=out protocol=any remoteip="137.116.81.24" profile=any action=block >NUL 2>&1
netsh advfirewall firewall add rule name="Block Microsoft IP" dir=out protocol=any remoteip="157.56.106.189" profile=any action=block >NUL 2>&1
netsh advfirewall firewall add rule name="Block Microsoft IP" dir=out protocol=any remoteip="204.79.197.200" profile=any action=block >NUL 2>&1
ECHO DONE!

:: The following section will block the SYSTEM from modifying the DiagTrack Log
:: file and then clears the file entirely.
:STEP_5
ECHO.
<NUL SET /P o="[5] Disabling and Clearing DiagTrack Log... "
takeown /f %PROGRAMDATA%\Microsoft\Diagnosis\ETLLogs\Autologger\Autologger-Diagtrack-Listener.etl >NUL 2>&1
icacls %PROGRAMDATA%\Microsoft\Diagnosis\ETLLogs\Autologger\Autologger-Diagtrack-Listener.etl /grant administrators:F >NUL 2>&1
ECHO Y|cacls %PROGRAMDATA%\Microsoft\Diagnosis\ETLLogs\Autologger\Autologger-Diagtrack-Listener.etl /d SYSTEM >NUL 2>&1
BREAK>%PROGRAMDATA%\Microsoft\Diagnosis\ETLLogs\Autologger\Autologger-Diagtrack-Listener.etl
ECHO DONE!

:: The following section will apply "tweaked" optimizations to the Windows services.
:: These should be safe for all users, but there's a small chance that problems could occur
:: depending on the users average workload.
:TWEAKED
ECHO.
ECHO Now applying TWEAKED service optimizations -- This shouldn't take long...
ECHO    ^> AxInstSV set to DEMAND & sc config AxInstSV start=demand >NUL 2>&1
ECHO    ^> AJRouter set to DISABLED & sc config AJRouter start=disabled >NUL 2>&1
ECHO    ^> AppReadiness set to DEMAND & sc config AppReadiness start=demand >NUL 2>&1
ECHO    ^> AppHostSvc set to DISABLED & sc config AppHostSvc start=disabled >NUL 2>&1
ECHO    ^> AppIDSvc set to DEMAND & sc config AppIDSvc start=demand >NUL 2>&1
ECHO    ^> Appinfo set to DEMAND & sc config Appinfo start=demand >NUL 2>&1
ECHO    ^> ALG set to DISABLED & sc config ALG start=disabled >NUL 2>&1
ECHO    ^> AppMgmt set to DEMAND & sc config AppMgmt start=demand >NUL 2>&1
ECHO    ^> AppXSVC set to DEMAND & sc config AppXSVC start=demand >NUL 2>&1
ECHO    ^> aspnet_state set to DISABLED & sc config aspnet_state start=disabled >NUL 2>&1
ECHO    ^> BITS set to DELAYED-AUTO & sc config BITS start=delayed-auto >NUL 2>&1
ECHO    ^> BrokerInfrastructure set to AUTO & sc config BrokerInfrastructure start=auto >NUL 2>&1
ECHO    ^> BFE set to AUTO & sc config BFE start=auto >NUL 2>&1
ECHO    ^> BDESVC set to DEMAND & sc config BDESVC start=demand >NUL 2>&1
ECHO    ^> wbengine set to DEMAND & sc config wbengine start=demand >NUL 2>&1
ECHO    ^> BthHFSrv set to DEMAND & sc config BthHFSrv start=demand >NUL 2>&1
ECHO    ^> bthserv set to DISABLED & sc config bthserv start=disabled >NUL 2>&1
ECHO    ^> PeerDistSvc set to DISABLED & sc config PeerDistSvc start=disabled >NUL 2>&1
ECHO    ^> CDPSvc set to DEMAND & sc config CDPSvc start=demand >NUL 2>&1
ECHO    ^> CertPropSvc set to DISABLED & sc config CertPropSvc start=disabled >NUL 2>&1
ECHO    ^> c2wts set to DEMAND & sc config c2wts start=demand >NUL 2>&1
ECHO    ^> NfsClnt set to DISABLED & sc config NfsClnt start=disabled >NUL 2>&1
ECHO    ^> ClipSVC set to DEMAND & sc config ClipSVC start=demand >NUL 2>&1
ECHO    ^> KeyIso set to DEMAND & sc config KeyIso start=demand >NUL 2>&1
ECHO    ^> EventSystem set to AUTO & sc config EventSystem start=auto >NUL 2>&1
ECHO    ^> COMSysApp set to DEMAND & sc config COMSysApp start=demand >NUL 2>&1
ECHO    ^> Browser set to DEMAND & sc config Browser start=demand >NUL 2>&1
ECHO    ^> CoreUIRegistrar set to AUTO & sc config CoreUIRegistrar start=auto >NUL 2>&1
ECHO    ^> VaultSvc set to DEMAND & sc config VaultSvc start=demand >NUL 2>&1
ECHO    ^> CryptSvc set to AUTO & sc config CryptSvc start=auto >NUL 2>&1
ECHO    ^> DsSvc set to DEMAND & sc config DsSvc start=demand >NUL 2>&1
ECHO    ^> DcpSvc set to DEMAND & sc config DcpSvc start=demand >NUL 2>&1
ECHO    ^> DcomLaunch set to AUTO & sc config DcomLaunch start=auto >NUL 2>&1
ECHO    ^> DoSvc set to DISABLED & sc config DoSvc start=disable >NUL 2>&1
ECHO    ^> DeviceAssociationService set to DEMAND & sc config DeviceAssociationService start=demand >NUL 2>&1
ECHO    ^> DeviceInstall set to DEMAND & sc config DeviceInstall start=demand >NUL 2>&1
ECHO    ^> DmEnrollmentSvc set to DEMAND & sc config DmEnrollmentSvc start=demand >NUL 2>&1
ECHO    ^> DsmSVC set to DEMAND & sc config DsmSVC start=demand >NUL 2>&1
ECHO    ^> DevQueryBroker set to DEMAND & sc config DevQueryBroker start=demand >NUL 2>&1
ECHO    ^> Dhcp set to AUTO & sc config Dhcp start=auto >NUL 2>&1
ECHO    ^> DPS set to AUTO & sc config DPS start=auto >NUL 2>&1
ECHO    ^> WdiServiceHost set to DEMAND & sc config WdiServiceHost start=demand >NUL 2>&1
ECHO    ^> WdiSystemHost set to DEMAND & sc config WdiSystemHost start=demand >NUL 2>&1
ECHO    ^> DiagTrack set to DISABLED & sc config DiagTrack start=disable >NUL 2>&1
ECHO    ^> TrkWks set to DISABLED & sc config TrkWks start=disabled >NUL 2>&1
ECHO    ^> MSDTC set to DEMAND & sc config MSDTC start=demand >NUL 2>&1
ECHO    ^> dmwappushsvc set to DISABLED & sc config dmwappushsvc start=disabled >NUL 2>&1
ECHO    ^> Dnscache set to AUTO & sc config Dnscache start=auto >NUL 2>&1
ECHO    ^> MapsBroker set to DISABLED & sc config MapsBroker start=disabled >NUL 2>&1
ECHO    ^> DsRoleSvc set to DISABLED & sc config DsRoleSvc start=disabled >NUL 2>&1
ECHO    ^> embeddedmode set to DEMAND & sc config embeddedmode start=demand >NUL 2>&1
ECHO    ^> EFS set to DEMAND & sc config EFS start=demand >NUL 2>&1
ECHO    ^> EntAppSvc set to DISABLED & sc config EntAppSvc start=disabled >NUL 2>&1
ECHO    ^> EapHost set to DEMAND & sc config EapHost start=demand >NUL 2>&1
ECHO    ^> Fax set to DISABLED & sc config Fax start=disabled >NUL 2>&1
ECHO    ^> fhsvc set to DEMAND & sc config fhsvc start=demand >NUL 2>&1
ECHO    ^> fdPHost set to DEMAND & sc config fdPHost start=demand >NUL 2>&1
ECHO    ^> FDResPub set to DEMAND & sc config FDResPub start=demand >NUL 2>&1
ECHO    ^> fsvc set to DISABLED & sc config fsvc start=disabled >NUL 2>&1
ECHO    ^> gpsvc set to AUTO & sc config gpsvc start=auto >NUL 2>&1
ECHO    ^> hkmsvc set to DISABLED & sc config hkmsvc start=disabled >NUL 2>&1
ECHO    ^> HomeGroupListener set to DEMAND & sc config HomeGroupListener start=demand >NUL 2>&1
ECHO    ^> HomeGroupProvider set to DEMAND & sc config HomeGroupProvider start=demand >NUL 2>&1
ECHO    ^> hidserv set to DEMAND & sc config hidserv start=demand >NUL 2>&1
ECHO    ^> vmickvpexchange set to DISABLED & sc config vmickvpexchange start=disabled >NUL 2>&1
ECHO    ^> vmicguestinterface set to DISABLED & sc config vmicguestinterface start=disabled >NUL 2>&1
ECHO    ^> vmicshutdown set to DISABLED & sc config vmicshutdown start=disabled >NUL 2>&1
ECHO    ^> vmicheartbeat set to DISABLED & sc config vmicheartbeat start=disabled >NUL 2>&1
ECHO    ^> vmicrdv set to DISABLED & sc config vmicrdv start=disabled >NUL 2>&1
ECHO    ^> vmictimesync set to DISABLED & sc config vmictimesync start=disabled >NUL 2>&1
ECHO    ^> vmicvmsession set to DISABLED & sc config vmicvmsession start=disabled >NUL 2>&1
ECHO    ^> vmicvss set to DISABLED & sc config vmicvss start=disabled >NUL 2>&1
ECHO    ^> IISADMIN set to DISABLED & sc config IISADMIN start=disabled >NUL 2>&1
ECHO    ^> IKEEXT set to DEMAND & sc config IKEEXT start=demand >NUL 2>&1
ECHO    ^> cphs set to DEMAND & sc config cphs start=demand >NUL 2>&1
ECHO    ^> UI0Detect set to DEMAND & sc config UI0Detect start=demand >NUL 2>&1
ECHO    ^> SharedAccess set to DISABLED & sc config SharedAccess start=disabled >NUL 2>&1
ECHO    ^> IEEtwCollectorService set to DISABLED & sc config IEEtwCollectorService start=disabled >NUL 2>&1
ECHO    ^> iphlpsvc set to DISABLED & sc config iphlpsvc start=disabled >NUL 2>&1
ECHO    ^> PolicyAgent set to DEMAND & sc config PolicyAgent start=demand >NUL 2>&1
ECHO    ^> KtmRm set to DEMAND & sc config KtmRm start=demand >NUL 2>&1
ECHO    ^> lltdsvc set to DEMAND & sc config lltdsvc start=demand >NUL 2>&1
ECHO    ^> LSM set to AUTO & sc config LSM start=auto >NUL 2>&1
ECHO    ^> LPDSVC set to DISABLED & sc config LPDSVC start=disabled >NUL 2>&1
ECHO    ^> MSMQ set to DISABLED & sc config MSMQ start=disabled >NUL 2>&1
ECHO    ^> MSMQTriggers set to DISABLED & sc config MSMQTriggers start=disabled >NUL 2>&1
ECHO    ^> diagnosticshub.standardcollector.service set to DISABLED & sc config diagnosticshub.standardcollector.service start=disabled >NUL 2>&1
ECHO    ^> wlidsvc set to DEMAND & sc config wlidsvc start=demand >NUL 2>&1
ECHO    ^> ftpsvc set to DISABLED & sc config ftpsvc start=disabled >NUL 2>&1
ECHO    ^> MSiSCSI set to DISABLED & sc config MSiSCSI start=disabled >NUL 2>&1
ECHO    ^> NgcSvc set to DEMAND & sc config NgcSvc start=demand >NUL 2>&1
ECHO    ^> NgcCtnrSvc set to DEMAND & sc config NgcCtnrSvc start=demand >NUL 2>&1
ECHO    ^> swprv set to DEMAND & sc config swprv start=demand >NUL 2>&1
ECHO    ^> smphost set to DEMAND & sc config smphost start=demand >NUL 2>&1
ECHO    ^> SmsRouter set to DISABLED & sc config SmsRouter start=disabled >NUL 2>&1
ECHO    ^> NetMsmqActivator set to DISABLED & sc config NetMsmqActivator start=disabled >NUL 2>&1
ECHO    ^> NetPipeActivator set to DISABLED & sc config NetPipeActivator start=disabled >NUL 2>&1
ECHO    ^> NetTcpActivator set to DISABLED & sc config NetTcpActivator start=disabled >NUL 2>&1
ECHO    ^> NetTcpPortSharing set to DISABLED & sc config NetTcpPortSharing start=disabled >NUL 2>&1
ECHO    ^> Netlogon set to DISABLED & sc config Netlogon start=disabled >NUL 2>&1
ECHO    ^> NcdAutoSetup set to DEMAND & sc config NcdAutoSetup start=demand >NUL 2>&1
ECHO    ^> NcbService set to DEMAND & sc config NcbService start=demand >NUL 2>&1
ECHO    ^> Netman set to DEMAND & sc config Netman start=demand >NUL 2>&1
ECHO    ^> NcaSVC set to DEMAND & sc config NcaSVC start=demand >NUL 2>&1
ECHO    ^> netprofm set to DEMAND & sc config netprofm start=demand >NUL 2>&1
ECHO    ^> NlaSvc set to AUTO & sc config NlaSvc start=auto >NUL 2>&1
ECHO    ^> NetSetupSvc set to DEMAND & sc config NetSetupSvc start=demand >NUL 2>&1
ECHO    ^> nsi set to AUTO & sc config nsi start=auto >NUL 2>&1
ECHO    ^> CscService set to DISABLED & sc config CscService start=disabled >NUL 2>&1
ECHO    ^> defragsvc set to DEMAND & sc config defragsvc start=demand >NUL 2>&1
ECHO    ^> PNRPsvc set to DEMAND & sc config PNRPsvc start=demand >NUL 2>&1
ECHO    ^> p2psvc set to DEMAND & sc config p2psvc start=demand >NUL 2>&1
ECHO    ^> p2pimsvc set to DEMAND & sc config p2pimsvc start=demand >NUL 2>&1
ECHO    ^> pla set to DEMAND & sc config pla start=demand >NUL 2>&1
ECHO    ^> PlugPlay set to DEMAND & sc config PlugPlay start=demand >NUL 2>&1
ECHO    ^> PNRPAutoReg set to DEMAND & sc config PNRPAutoReg start=demand >NUL 2>&1
ECHO    ^> WPDBusEnum set to DEMAND & sc config WPDBusEnum start=demand >NUL 2>&1
ECHO    ^> Power set to AUTO & sc config Power start=auto >NUL 2>&1
ECHO    ^> Spooler set to AUTO & sc config Spooler start=auto >NUL 2>&1
ECHO    ^> PrintNotify set to DEMAND & sc config PrintNotify start=demand >NUL 2>&1
ECHO    ^> wercplsupport set to DEMAND & sc config wercplsupport start=demand >NUL 2>&1
ECHO    ^> PcaSvc set to DEMAND & sc config PcaSvc start=demand >NUL 2>&1
ECHO    ^> QWAVE set to DEMAND & sc config QWAVE start=demand >NUL 2>&1
ECHO    ^> RasAuto set to DEMAND & sc config RasAuto start=demand >NUL 2>&1
ECHO    ^> RasMan set to DEMAND & sc config RasMan start=demand >NUL 2>&1
ECHO    ^> SessionEnv set to DEMAND & sc config SessionEnv start=demand >NUL 2>&1
ECHO    ^> TermService set to DEMAND & sc config TermService start=demand >NUL 2>&1
ECHO    ^> UmRdpService set to DEMAND & sc config UmRdpService start=demand >NUL 2>&1
ECHO    ^> RpcSs set to AUTO & sc config RpcSs start=auto >NUL 2>&1
ECHO    ^> RpcLocator set to DISABLED & sc config RpcLocator start=disabled >NUL 2>&1
ECHO    ^> RemoteRegistry set to DISABLED & sc config RemoteRegistry start=disabled >NUL 2>&1
ECHO    ^> RetailDemo set to DISABLED & sc config RetailDemo start=disabled >NUL 2>&1
ECHO    ^> iprip set to DISABLED & sc config iprip start=disabled >NUL 2>&1
ECHO    ^> RemoteAccess set to DISABLED & sc config RemoteAccess start=disabled >NUL 2>&1
ECHO    ^> RpcEptMapper set to AUTO & sc config RpcEptMapper start=auto >NUL 2>&1
ECHO    ^> seclogon set to DEMAND & sc config seclogon start=demand >NUL 2>&1
ECHO    ^> SstpSvc set to DEMAND & sc config SstpSvc start=demand >NUL 2>&1
ECHO    ^> SamSs set to AUTO & sc config SamSs start=auto >NUL 2>&1
ECHO    ^> wscsvc set to DELAYED-AUTO & sc config wscsvc start=delayed-auto >NUL 2>&1
ECHO    ^> SensorDataService set to DISABLED & sc config SensorDataService start=disabled >NUL 2>&1
ECHO    ^> SensrSvc set to DISABLED & sc config SensrSvc start=disabled >NUL 2>&1
ECHO    ^> SensorService set to DISABLED & sc config SensorService start=disabled >NUL 2>&1
ECHO    ^> LanmanServer set to AUTO & sc config LanmanServer start=auto >NUL 2>&1
ECHO    ^> ShellHWDetection set to AUTO & sc config ShellHWDetection start=auto >NUL 2>&1
ECHO    ^> simptcp set to DISABLED & sc config simptcp start=disabled >NUL 2>&1
ECHO    ^> SCardSvr set to DISABLED & sc config SCardSvr start=disabled >NUL 2>&1
ECHO    ^> ScDeviceEnum set to DISABLED & sc config ScDeviceEnum start=disabled >NUL 2>&1
ECHO    ^> SCPolicySvc set to DISABLED & sc config SCPolicySvc start=disabled >NUL 2>&1
ECHO    ^> SNMP set to DISABLED & sc config SNMP start=disabled >NUL 2>&1
ECHO    ^> SNMPTRAP set to DISABLED & sc config SNMPTRAP start=disabled >NUL 2>&1
ECHO    ^> sppsvc set to DELAYED-AUTO & sc config sppsvc start=delayed-auto >NUL 2>&1
ECHO    ^> svsvc set to DEMAND & sc config svsvc start=demand >NUL 2>&1
ECHO    ^> SSDPSRV set to DEMAND & sc config SSDPSRV start=demand >NUL 2>&1
ECHO    ^> StateRepository set to DEMAND & sc config StateRepository start=demand >NUL 2>&1
ECHO    ^> WiaRpc set to DEMAND & sc config WiaRpc start=demand >NUL 2>&1
ECHO    ^> StorSvc set to DISABLED & sc config StorSvc start=disabled >NUL 2>&1
ECHO    ^> SysMain set to DISABLED & sc config SysMain start=disable >NUL 2>&1
ECHO    ^> SENS set to AUTO & sc config SENS start=auto >NUL 2>&1
ECHO    ^> SystemEventsBroker set to AUTO & sc config SystemEventsBroker start=auto >NUL 2>&1
ECHO    ^> Schedule set to AUTO & sc config Schedule start=auto >NUL 2>&1
ECHO    ^> lmhosts set to DEMAND & sc config lmhosts start=demand >NUL 2>&1
ECHO    ^> TapiSrv set to DEMAND & sc config TapiSrv start=demand >NUL 2>&1
ECHO    ^> Themes set to DISABLED & sc config Themes start=disable >NUL 2>&1
ECHO    ^> tiledatamodelsvc set to AUTO & sc config tiledatamodelsvc start=auto >NUL 2>&1
ECHO    ^> TimeBroker set to DEMAND & sc config TimeBroker start=demand >NUL 2>&1
ECHO    ^> TabletInputService set to DISABLED & sc config TabletInputService start=disabled >NUL 2>&1
ECHO    ^> UsoSvc set to DEMAND & sc config UsoSvc start=demand >NUL 2>&1
ECHO    ^> upnphost set to DEMAND & sc config upnphost start=demand >NUL 2>&1
ECHO    ^> UserManager set to AUTO & sc config UserManager start=auto >NUL 2>&1
ECHO    ^> ProfSvc set to AUTO & sc config ProfSvc start=auto >NUL 2>&1
ECHO    ^> vds set to DEMAND & sc config vds start=demand >NUL 2>&1
ECHO    ^> VSS set to DEMAND & sc config VSS start=demand >NUL 2>&1
ECHO    ^> W3LOGSVC set to DISABLED & sc config W3LOGSVC start=disabled >NUL 2>&1
ECHO    ^> WalletService set to DEMAND & sc config WalletService start=demand >NUL 2>&1
ECHO    ^> WMSVC set to DISABLED & sc config WMSVC start=disabled >NUL 2>&1
ECHO    ^> WebClient set to DEMAND & sc config WebClient start=demand >NUL 2>&1
ECHO    ^> AudioSrv set to AUTO & sc config AudioSrv start=auto >NUL 2>&1
ECHO    ^> AudioEndpointBuilder set to AUTO & sc config AudioEndpointBuilder start=auto >NUL 2>&1
ECHO    ^> SDRSVC set to DEMAND & sc config SDRSVC start=demand >NUL 2>&1
ECHO    ^> WbioSrvc set to DISABLED & sc config WbioSrvc start=disabled >NUL 2>&1
ECHO    ^> WcsPlugInService set to DEMAND & sc config WcsPlugInService start=demand >NUL 2>&1
ECHO    ^> wcncsvc set to DISABLED & sc config wcncsvc start=disabled >NUL 2>&1
ECHO    ^> Wcmsvc set to AUTO & sc config Wcmsvc start=auto >NUL 2>&1
ECHO    ^> WdNisSvc set to DEMAND & sc config WdNisSvc start=demand >NUL 2>&1
ECHO    ^> WinDefend set to AUTO & sc config WinDefend start=auto >NUL 2>&1
ECHO    ^> wudfsvc set to DEMAND & sc config wudfsvc start=demand >NUL 2>&1
ECHO    ^> WEPHOSTSVC set to DEMAND & sc config WEPHOSTSVC start=demand >NUL 2>&1
ECHO    ^> WerSvc set to DEMAND & sc config WerSvc start=demand >NUL 2>&1
ECHO    ^> Wecsvc set to DEMAND & sc config Wecsvc start=demand >NUL 2>&1
ECHO    ^> EventLog set to AUTO & sc config EventLog start=auto >NUL 2>&1
ECHO    ^> MpsSvc set to AUTO & sc config MpsSvc start=auto >NUL 2>&1
ECHO    ^> FontCache set to AUTO & sc config FontCache start=auto >NUL 2>&1
ECHO    ^> StiSvc set to DEMAND & sc config StiSvc start=demand >NUL 2>&1
ECHO    ^> msiserver set to DEMAND & sc config msiserver start=demand >NUL 2>&1
ECHO    ^> LicenseManager set to DEMAND & sc config LicenseManager start=demand >NUL 2>&1
ECHO    ^> Winmgmt set to AUTO & sc config Winmgmt start=auto >NUL 2>&1
ECHO    ^> WMPNetworkSvc set to DISABLED & sc config WMPNetworkSvc start=disabled >NUL 2>&1
ECHO    ^> icssvc set to DISABLED & sc config icssvc start=disabled >NUL 2>&1
ECHO    ^> TrustedInstaller set to DEMAND & sc config TrustedInstaller start=demand >NUL 2>&1
ECHO    ^> Wms set to DISABLED & sc config Wms start=disabled >NUL 2>&1
ECHO    ^> WmsRepair set to DISABLED & sc config WmsRepair start=disabled >NUL 2>&1
ECHO    ^> FontCache3.0.0.0 set to DISABLED & sc config FontCache3.0.0.0 start=disabled >NUL 2>&1
ECHO    ^> WAS set to DISABLED & sc config WAS start=disabled >NUL 2>&1
ECHO    ^> WpnService set to DEMAND & sc config WpnService start=demand >NUL 2>&1
ECHO    ^> WinRM set to DISABLED & sc config WinRM start=disabled >NUL 2>&1
ECHO    ^> WSearch set to DELAYED-AUTO & sc config WSearch start=delayed-auto >NUL 2>&1
ECHO    ^> WSService set to DEMAND & sc config WSService start=demand >NUL 2>&1
ECHO    ^> W32Time set to DEMAND & sc config W32Time start=demand >NUL 2>&1
ECHO    ^> wuauserv set to DEMAND & sc config wuauserv start=demand >NUL 2>&1
ECHO    ^> WinHttpAutoProxySvc set to DEMAND & sc config WinHttpAutoProxySvc start=demand >NUL 2>&1
ECHO    ^> dot3svc set to DEMAND & sc config dot3svc start=demand >NUL 2>&1
ECHO    ^> WlanSvc set to AUTO & sc config WlanSvc start=auto >NUL 2>&1
ECHO    ^> wmiApSrv set to DEMAND & sc config wmiApSrv start=demand >NUL 2>&1
ECHO    ^> workfolderssvc set to DISABLED & sc config workfolderssvc start=disabled >NUL 2>&1
ECHO    ^> LanmanWorkstation set to AUTO & sc config LanmanWorkstation start=auto >NUL 2>&1
ECHO    ^> W3SVC set to DISABLED & sc config W3SVC start=disabled >NUL 2>&1
ECHO    ^> WwanSvc set to DEMAND & sc config WwanSvc start=demand >NUL 2>&1
ECHO    ^> XblAuthManager set to DISABLED & sc config XblAuthManager start=disabled >NUL 2>&1
ECHO    ^> XblGameSave set to DISABLED & sc config XblGameSave start=disabled >NUL 2>&1
ECHO    ^> XboxNetApiSvc set to DISABLED & sc config XboxNetApiSvc start=disabled >NUL 2>&1
ECHO    ^> cbdhsvc_1cf55 set to DISABLED & sc config cbdhsvc_1cf55 start=disabled >NUL 2>&1
ECHO    ^> CDPSvc set to DISABLED & sc config CDPSvc start=disabled >NUL 2>&1
ECHO    ^> CDPUserSvc_1cf55 set to DISABLED & sc config CDPUserSvc_1cf55 start=disabled >NUL 2>&1
ECHO    ^> WpnUserService_1cf55	 set to DISABLED & sc config WpnUserService_1cf55	 start=disabled >NUL 2>&1

echo.
echo -------------------------------------------------------------------------
echo Following commands are from DrEmpiricism's Optimize-Offline repository
echo -------------------------------------------------------------------------
timeout -t 6 > nul

powershell -command Remove-ItemProperty -LiteralPath "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" -Name "SecurityHealth" -Force -ErrorAction SilentlyContinue

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender" /v DisableAntiSpyware /t REG_DWORD /d 1 /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Spynet" /v SpyNetReporting /t REG_DWORD /d 0 /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Spynet" /v SubmitSamplesConsent /t REG_DWORD /d 0 /f

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" /v DisableBehaviorMonitoring /t REG_DWORD /d 1 /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" /v DisableOnAccessProtection /t REG_DWORD /d 1 /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" /v DisableScanOnRealtimeEnable /t REG_DWORD /d 1 /f

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Policy Manager" /v AllowBehaviorMonitoring /t REG_DWORD /d 2 /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Policy Manager" /v AllowCloudProtection /t REG_DWORD /d 0 /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Policy Manager" /v AllowRealtimeMonitoring /t REG_DWORD /d 0 /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Policy Manager" /v SubmitSamplesConsent /t REG_DWORD /d 0 /f

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\UX Configuration" /v Notification_Suppress /t REG_DWORD /d 1 /f

reg add "HKLM\SOFTWARE\Policies\Microsoft\MRT" /v DontOfferThroughWUAU /t REG_DWORD /d 1 /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\MRT" /v DontReportInfectionInformation /t REG_DWORD /d 1 /f

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Systray" /v HideSystray /t REG_DWORD /d 1 /f

reg add "HKLM\SOFTWARE\Microsoft\Windows Security Health\State" /v AccountProtection_MicrosoftAccount_Disconnected /t REG_DWORD /d 1 /f

reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppHost" /v SmartScreenEnabled /t REG_MULTI_SZ /d "Off" /f
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer" /v SmartScreenEnabled /t REG_MULTI_SZ /d "Off" /f
reg add "HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Explorer" /v SmartScreenEnabled /t REG_MULTI_SZ /d "Off" /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\System" /v EnableSmartScreen /t REG_DWORD /d 0 /f

reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppHost" /v EnableWebContentEvaluation /t REG_DWORD /d 0 /f

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\GameDVR" /v AllowGameDVR /t REG_DWORD /d 0 /f
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\GameDVR" /v AppCaptureEnabled /t REG_DWORD /d 0 /f
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\GameDVR" /v AudioCaptureEnabled /t REG_DWORD /d 0 /f
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\GameDVR" /v CursorCaptureEnabled /t REG_DWORD /d 0 /f
reg add "HKLM\SOFTWARE\Microsoft\GameBar" /v UseNexusForGameBarEnabled /t REG_DWORD /d 0 /f
reg add "HKLM\SOFTWARE\Microsoft\GameBar" /v AllowAutoGameMode /t REG_DWORD /d 0 /f

reg add "HKLM\SOFTWARE\Policies\Microsoft\MicrosoftEdge\Main" /v AllowPrelaunch /t REG_DWORD /d 0 /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\MicrosoftEdge\TabPreloader" /v PreventTabPreloading /t REG_DWORD /d 1 /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\MicrosoftEdge\Main" /v DoNotTrack /t REG_DWORD /d 1 /f
	
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Search" /v CortanaEnabled /t REG_DWORD /d 0 /f
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Search" /v CanCortanaBeEnabled /t REG_DWORD /d 0 /f
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Search" /v CortanaConsent /t REG_DWORD /d 0 /f
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Search" /v CortanaInAmbientMode /t REG_DWORD /d 0 /f
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Search" /v HistoryViewEnabled /t REG_DWORD /d 0 /f
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Search" /v DeviceHistoryEnabled /t REG_DWORD /d 0 /f
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Search" /v HasAboveLockTips /t REG_DWORD /d 0 /f

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /v DisableWebSearch /t REG_DWORD /d 1 /f

reg add "HKLM\SOFTWARE\Microsoft\InputPersonalization" /v RestrictImplicitTextCollection /t REG_DWORD /d 1 /f
reg add "HKLM\SOFTWARE\Microsoft\InputPersonalization" /v RestrictImplicitInkCollection /t REG_DWORD /d 1 /f
reg add "HKLM\SOFTWARE\Microsoft\InputPersonalization\TrainedDataStore" /v AcceptedPrivacyPolicy /t REG_DWORD /d 0 /f
reg add "HKLM\SOFTWARE\Microsoft\InputPersonalization\TrainedDataStore" /v HarvestContacts /t REG_DWORD /d 0 /f

reg add "HKLM\SOFTWARE\Microsoft\Personalization\Settings" /v AcceptedPrivacyPolicy /t REG_DWORD /d 0 /f
reg add "HKLM\SOFTWARE\Microsoft\Speech_OneCore\Preferences" /v VoiceActivationEnableAboveLockscreen /t REG_DWORD /d 0 /f
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OOBE" /v DisableVoice /t REG_DWORD /d 1 /f

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DataCollection" /v DoNotShowFeedbackNotifications /t REG_DWORD /d 1 /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\CloudContent" /v DisableTailoredExperiencesWithDiagnosticData /t REG_DWORD /d 1 /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\AppCompat" /v AITEnable /t REG_DWORD /d 0 /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\AppCompat" /v DisableInventory /t REG_DWORD /d 1 /f

reg add "HKLM\SOFTWARE\Policies\Microsoft\AppV\CEIP" /v CEIPEnable /t REG_DWORD /d 0 /f
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Privacy" /v TailoredExperiencesWithDiagnosticDataEnabled /t REG_DWORD /d 0 /f
reg add "HKLM\SOFTWARE\Microsoft\PolicyManager\default\System\AllowExperimentation" /v value /t REG_DWORD /d 0 /f

reg add "HKLM\SOFTWARE\Microsoft\Siuf\Rules" /v NumberOfSIUFInPeriod /t REG_DWORD /d 0 /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DataCollection" /v DoNotShowFeedbackNotifications /t REG_DWORD /d 1 /f

reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v Start_TrackDocs /t REG_DWORD /d 1 /f

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\CloudContent" /v DisableSoftLanding /t REG_DWORD /d 1 /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\CloudContent" /v DisableThirdPartySuggestions /t REG_DWORD /d 1 /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DataCollection" /v DoNotShowFeedbackNotifications /t REG_DWORD /d 1 /f

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\PushNotifications" /v NoToastApplicationNotification /t REG_DWORD /d 1 /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\PushNotifications" /v NoToastApplicationNotificationOnLockScreen /t REG_DWORD /d 1 /f

reg add "HKLM\SOFTWARE\Policies\Microsoft\WindowsInkWorkspace" /v AllowWindowsInkWorkspace /t REG_DWORD /d 0 /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\WindowsInkWorkspace" /v AllowSuggestedAppsInWindowsInkWorkspace /t REG_DWORD /d 0 /f

reg add "HKLM\SOFTWARE\Policies\Microsoft\Microsoft\Windows\CurrentVersion\PushNotifications" /v NoCloudApplicationNotification /t REG_DWORD /d 1 /f
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v TurnOffSets /t REG_DWORD /d 1 /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers" /v DisableAutoplay /t REG_DWORD /d 1 /f
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v NoDriveTypeAutoRun /t REG_DWORD /d 255 /f
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Attachments" /v SaveZoneInformation /t REG_DWORD /d 1 /f

reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Notifications\Settings" /v NOC_GLOBAL_SETTING_ALLOW_TOASTS_ABOVE_LOCK /t REG_DWORD /d 0 /f
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Notifications\Settings" /v NOC_GLOBAL_SETTING_ALLOW_CRITICAL_TOASTS_ABOVE_LOCK /t REG_DWORD /d 0 /f

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\AdvertisingInfo" /v DisabledByGroupPolicy /t REG_DWORD /d 1 /f

reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AdvertisingInfo" /v Enabled /t REG_DWORD /d 0 /f

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" /v EnableFeaturedSoftware /t REG_DWORD /d 0 /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" /v NoAutoRebootWithLoggedOnUsers /t REG_DWORD /d 1 /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" /v AUPowerManagement /t REG_DWORD /d 0 /f

echo.
echo Ensuring memory compression is enabled (330MB at idle repoted! Thanks hojnikb)
powershell -command Enable-MMAgent -MemoryCompression
echo.
echo -------------------------------------------------------------------------------------------------
echo Windows 10 on ARM has now been optimized and sped up, you've also freed up a bunch of space, yay!
echo -------------------------------------------------------------------------------------------------
echo Press any key to exit
pause >nul

Lines 163-165 are duplicates of 160-162

echo Removing SkypeWiFi
powershell -command " get-appxpackage -allusers 'Microsoft.SkypeWiFi' | remove-appxpackage "
echo.