Skip to content

Commit a9646ac

Browse files
TheyCreeperTheyCreeper
committed
Revert "refac: convert registry taks to powershell"
This reverts commit a15b19f.
1 parent a15b19f commit a9646ac

File tree

144 files changed

+2096
-1337
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

144 files changed

+2096
-1337
lines changed

‎src/playbook/Configuration/tweaks/debloat/config-content-delivery.yml‎

Lines changed: 162 additions & 32 deletions
Original file line numberDiff line numberDiff line change
@@ -2,35 +2,165 @@
22
title: Configure Content Delivery Manager
33
description: Configures Content Delivery Manager not to download applications like Candy Crush Soda and turns off suggested content (tips/tricks/facts/suggestions/ads) for QoL and privacy.
44
actions:
5-
- !powerShell:
6-
command: |
7-
. "$env:windir\AtlasModules\Scripts\regHelp.ps1" -RegistryObjects @(
8-
@{ Path = 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager'; Value = 'ContentDeliveryAllowed'; Data = '0'; Type = 'REG_DWORD' },
9-
@{ Path = 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager'; Value = 'FeatureManagementEnabled'; Data = '0'; Type = 'REG_DWORD' },
10-
@{ Path = 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager'; Value = 'SubscribedContentEnabled'; Data = '0'; Type = 'REG_DWORD' },
11-
# Ensure no settings get changed
12-
@{ Path = 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager'; Value = 'RemediationRequired'; Data = '0'; Type = 'REG_DWORD' },
13-
# Prevent suggested app installs
14-
@{ Path = 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager'; Value = 'OemPreInstalledAppsEnabled'; Data = '0'; Type = 'REG_DWORD' },
15-
@{ Path = 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager'; Value = 'PreInstalledAppsEnabled'; Data = '0'; Type = 'REG_DWORD' },
16-
@{ Path = 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager'; Value = 'PreInstalledAppsEverEnabled'; Data = '0'; Type = 'REG_DWORD' },
17-
@{ Path = 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager'; Value = 'SilentInstalledAppsEnabled'; Data = '0'; Type = 'REG_DWORD' },
18-
# 'Show me notifications in the Settings app' in Windows 11
19-
@{ Path = 'HKCU\Software\Microsoft\Windows\CurrentVersion\SystemSettings\AccountNotifications'; Value = 'EnableAccountNotifications'; Data = '0'; Type = 'REG_DWORD' },
20-
# Windows welcome experience
21-
@{ Path = 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager'; Value = 'SubscribedContent-310093Enabled'; Data = '0'; Type = 'REG_DWORD' },
22-
# Suggested content in the Settings app
23-
@{ Path = 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager'; Value = 'SubscribedContent-338393Enabled'; Data = '0'; Type = 'REG_DWORD' },
24-
@{ Path = 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager'; Value = 'SubscribedContent-353694Enabled'; Data = '0'; Type = 'REG_DWORD' },
25-
@{ Path = 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager'; Value = 'SubscribedContent-353696Enabled'; Data = '0'; Type = 'REG_DWORD' },
26-
@{ Path = 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager'; Value = 'SystemPaneSuggestionsEnabled'; Data = '0'; Type = 'REG_DWORD' },
27-
# "Get fun facts, tips, tricks, and more on your lock screen"
28-
@{ Path = 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager'; Value = 'SubscribedContent-338387Enabled'; Data = '0'; Type = 'REG_DWORD' },
29-
@{ Path = 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager'; Value = 'RotatingLockScreenOverlayEnabled'; Data = '0'; Type = 'REG_DWORD' },
30-
# Suggestions in Start
31-
@{ Path = 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager'; Value = 'SubscribedContent-338388Enabled'; Data = '0'; Type = 'REG_DWORD' },
32-
# "Get tips, tricks, and suggestions as you use Windows"
33-
@{ Path = 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager'; Value = 'SubscribedContent-338389Enabled'; Data = '0'; Type = 'REG_DWORD' },
34-
@{ Path = 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager'; Value = 'SoftLandingEnabled'; Data = '0'; Type = 'REG_DWORD' }
35-
)
36-
wait: true
5+
- !registryValue:
6+
path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager'
7+
value: 'ContentDeliveryAllowed'
8+
data: '0'
9+
type: REG_DWORD
10+
11+
12+
- !registryValue:
13+
path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager'
14+
value: 'FeatureManagementEnabled'
15+
data: '0'
16+
type: REG_DWORD
17+
18+
19+
- !registryValue:
20+
path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager'
21+
value: 'SubscribedContentEnabled'
22+
data: '0'
23+
type: REG_DWORD
24+
25+
26+
# Ensure no settings get changed
27+
- !registryValue:
28+
path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager'
29+
value: 'RemediationRequired'
30+
data: '0'
31+
type: REG_DWORD
32+
33+
34+
35+
# Prevent suggested app installs
36+
# https://www.tenforums.com/tutorials/68217-turn-off-automatic-installation-suggested-apps-windows-10-a.html
37+
- !registryValue:
38+
path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager'
39+
value: 'OemPreInstalledAppsEnabled'
40+
data: '0'
41+
type: REG_DWORD
42+
43+
44+
- !registryValue:
45+
path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager'
46+
value: 'PreInstalledAppsEnabled'
47+
data: '0'
48+
type: REG_DWORD
49+
50+
51+
- !registryValue:
52+
path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager'
53+
value: 'PreInstalledAppsEverEnabled'
54+
data: '0'
55+
type: REG_DWORD
56+
57+
58+
- !registryValue:
59+
path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager'
60+
value: 'SilentInstalledAppsEnabled'
61+
data: '0'
62+
type: REG_DWORD
63+
64+
65+
66+
# Commented as these removals would likely break re-enabling content
67+
# Content would likely stay disabled anyways
68+
# - !registryKey:
69+
# path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\Subscriptions'
70+
# - !registryKey:
71+
# path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\SuggestedApps'
72+
73+
# 'Show me notifications in the Settings app' in Windows 11
74+
- !registryValue:
75+
path: 'HKCU\Software\Microsoft\Windows\CurrentVersion\SystemSettings\AccountNotifications'
76+
value: 'EnableAccountNotifications'
77+
data: '0'
78+
type: REG_DWORD
79+
80+
81+
82+
# Windows welcome experience
83+
# https://winaero.com/disable-welcome-page-windows-10/
84+
- !registryValue:
85+
path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager'
86+
value: 'SubscribedContent-310093Enabled'
87+
data: '0'
88+
type: REG_DWORD
89+
90+
91+
92+
# Suggested content in the Settings app
93+
# https://www.tenforums.com/tutorials/100541-turn-off-suggested-content-settings-app-windows-10-a.html
94+
- !registryValue:
95+
path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager'
96+
value: 'SubscribedContent-338393Enabled'
97+
data: '0'
98+
type: REG_DWORD
99+
100+
101+
- !registryValue:
102+
path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager'
103+
value: 'SubscribedContent-353694Enabled'
104+
data: '0'
105+
type: REG_DWORD
106+
107+
108+
- !registryValue:
109+
path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager'
110+
value: 'SubscribedContent-353696Enabled'
111+
data: '0'
112+
type: REG_DWORD
113+
114+
115+
- !registryValue:
116+
path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager'
117+
value: 'SystemPaneSuggestionsEnabled'
118+
data: '0'
119+
type: REG_DWORD
120+
121+
122+
123+
# "Get fun facts, tips, tricks, and more on your lock screen"
124+
# https://www.elevenforum.com/t/enable-or-disable-facts-tips-and-tricks-on-lock-screen-in-windows-11.7079/
125+
- !registryValue:
126+
path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager'
127+
value: 'SubscribedContent-338387Enabled'
128+
data: '0'
129+
type: REG_DWORD
130+
131+
132+
- !registryValue:
133+
path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager'
134+
value: 'RotatingLockScreenOverlayEnabled'
135+
data: '0'
136+
type: REG_DWORD
137+
138+
139+
140+
# Suggestions in Start
141+
# https://www.tenforums.com/tutorials/24117-turn-off-app-suggestions-start-windows-10-a.html
142+
- !registryValue:
143+
path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager'
144+
value: 'SubscribedContent-338388Enabled'
145+
data: '0'
146+
type: REG_DWORD
147+
148+
149+
150+
# "Get tips, tricks, and suggestions as you use Windows"
151+
# https://www.tenforums.com/tutorials/30869-turn-off-tip-trick-suggestion-notifications-windows-10-a.html
152+
# https://winaero.com/disable-tips-about-windows-10/
153+
- !registryValue:
154+
path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager'
155+
value: 'SubscribedContent-338389Enabled'
156+
data: '0'
157+
type: REG_DWORD
158+
159+
160+
- !registryValue:
161+
path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager'
162+
value: 'SoftLandingEnabled'
163+
data: '0'
164+
type: REG_DWORD
165+
166+

‎src/playbook/Configuration/tweaks/debloat/config-storage-sense.yml‎

Lines changed: 17 additions & 21 deletions
Original file line numberDiff line numberDiff line change
@@ -3,27 +3,23 @@ title: Configure Storage Sense
33
description: Configures Storage Sense to automatically cleanup temporary files every month
44
actions:
55
# Reference: https://gist.github.com/he3als/3d9dcf6e796aa920c24a98130165fb17
6-
- !powerShell:
7-
command: |
8-
. "$env:windir\AtlasModules\Scripts\regHelp.ps1" -RegistryObjects @(
9-
# Enable Storage Sense
10-
@{ Path = 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\StorageSense\Parameters\StoragePolicy'; Value = '01'; Data = '1'; Type = 'REG_DWORD' },
11-
# Run Storage Sense
12-
@{ Path = 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\StorageSense\Parameters\StoragePolicy'; Value = '1024'; Data = '1'; Type = 'REG_DWORD' },
13-
# Run Storage Sense every month
14-
@{ Path = 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\StorageSense\Parameters\StoragePolicy'; Value = '2048'; Data = '30'; Type = 'REG_DWORD' },
15-
# Enable cleaning temporary files
16-
@{ Path = 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\StorageSense\Parameters\StoragePolicy'; Value = '04'; Data = '1'; Type = 'REG_DWORD' },
17-
# Disable the 'Downloads' from being cleared
18-
@{ Path = 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\StorageSense\Parameters\StoragePolicy'; Value = '32'; Data = '0'; Type = 'REG_DWORD' },
19-
# Disable OneDrive cleanup
20-
@{ Path = 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\StorageSense\Parameters\StoragePolicy'; Value = '02'; Data = '0'; Type = 'REG_DWORD' },
21-
@{ Path = 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\StorageSense\Parameters\StoragePolicy'; Value = '128'; Data = '0'; Type = 'REG_DWORD' },
22-
# Disable Recycle Bin cleanup
23-
@{ Path = 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\StorageSense\Parameters\StoragePolicy'; Value = '08'; Data = '0'; Type = 'REG_DWORD' },
24-
@{ Path = 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\StorageSense\Parameters\StoragePolicy'; Value = '256'; Data = '0'; Type = 'REG_DWORD' }
25-
)
26-
wait: true
6+
7+
# Enable Storage Sense
8+
- !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\StorageSense\Parameters\StoragePolicy', value: '01', type: REG_DWORD, data: '1'}
9+
# Run Storage Sense
10+
- !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\StorageSense\Parameters\StoragePolicy', value: '1024', type: REG_DWORD, data: '1'}
11+
# Run Storage Sense every month
12+
- !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\StorageSense\Parameters\StoragePolicy', value: '2048', type: REG_DWORD, data: '30'}
13+
# Enable cleaning temporary files
14+
- !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\StorageSense\Parameters\StoragePolicy', value: '04', type: REG_DWORD, data: '1'}
15+
# Disable the 'Downloads' from being cleared
16+
- !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\StorageSense\Parameters\StoragePolicy', value: '32', type: REG_DWORD, data: '0'}
17+
# Disable OneDrive cleanup
18+
- !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\StorageSense\Parameters\StoragePolicy', value: '02', type: REG_DWORD, data: '0'}
19+
- !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\StorageSense\Parameters\StoragePolicy', value: '128', type: REG_DWORD, data: '0'}
20+
# Disable Recycle Bin cleanup
21+
- !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\StorageSense\Parameters\StoragePolicy', value: '08', type: REG_DWORD, data: '0'}
22+
- !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\StorageSense\Parameters\StoragePolicy', value: '256', type: REG_DWORD, data: '0'}
2723

2824
# Enable cleaning temp files
2925
- !scheduledTask: {path: '\Microsoft\Windows\DiskCleanup\SilentCleanup', operation: enable}

‎src/playbook/Configuration/tweaks/debloat/disable-scheduled-tasks.yml‎

Lines changed: 4 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -17,10 +17,7 @@ actions:
1717

1818
# A/B testing usage reports
1919
- !scheduledTask: {path: '\Microsoft\Windows\Flighting\FeatureConfig\UsageDataReporting', operation: disable, ignoreErrors: true}
20-
- !powerShell:
21-
command: |
22-
. "$env:windir\AtlasModules\Scripts\regHelp.ps1" -RegistryObjects @(
23-
# Remove from automatic maintenance
24-
@{ Path = 'HKLM\System\CurrentControlSet\Control\Ubpm'; Value = 'CriticalMaintenance_UsageDataReporting'; Operation = 'delete' }
25-
)
26-
wait: true
20+
- !registryValue:
21+
path: 'HKLM\System\CurrentControlSet\Control\Ubpm'
22+
value: 'CriticalMaintenance_UsageDataReporting' # Remove from automatic maintenance
23+
operation: delete

‎src/playbook/Configuration/tweaks/debloat/hide-unused-security-pages.yml‎

Lines changed: 15 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -2,11 +2,18 @@
22
title: Hide Unused Windows Security Pages
33
description: Hides Windows Security pages that are not commonly needed/used to have a more clean UI
44
actions:
5-
- !powerShell:
6-
command: |
7-
. "$env:windir\AtlasModules\Scripts\regHelp.ps1" -RegistryObjects @(
8-
@{ Path = 'HKLM\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Family options'; Value = 'UILockdown'; Data = '1'; Type = 'REG_DWORD' },
9-
@{ Path = 'HKLM\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Device performance and health'; Value = 'UILockdown'; Data = '1'; Type = 'REG_DWORD' },
10-
@{ Path = 'HKLM\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Account protection'; Value = 'UILockdown'; Data = '1'; Type = 'REG_DWORD' }
11-
)
12-
wait: true
5+
- !registryValue:
6+
path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Family options'
7+
value: 'UILockdown'
8+
data: '1'
9+
type: REG_DWORD
10+
- !registryValue:
11+
path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Device performance and health'
12+
value: 'UILockdown'
13+
data: '1'
14+
type: REG_DWORD
15+
- !registryValue:
16+
path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Account protection'
17+
value: 'UILockdown'
18+
data: '1'
19+
type: REG_DWORD

‎src/playbook/Configuration/tweaks/misc/add-newUser-script.yml‎

Lines changed: 6 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -2,9 +2,9 @@
22
title: Add newUsers.cmd script
33
description: Adds the newUsers.ps1 script to RunOnce, which applies any tweaks that are dynamically generated on new user creation
44
actions:
5-
- !powerShell:
6-
command: |
7-
. "$env:windir\AtlasModules\Scripts\regHelp.ps1" -RegistryObjects @(
8-
@{ Path = 'HKU\AME_UserHive_Default\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce'; Value = 'RunScript'; Data = 'powershell -EP Bypass -NoP & """$([Environment]::GetFolderPath(''Windows''))\AtlasModules\Scripts\newUsers.ps1"""'; Type = 'REG_SZ' }
9-
)
10-
wait: true
5+
- !registryValue:
6+
path: 'HKU\AME_UserHive_Default\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce'
7+
value: 'RunScript'
8+
data: |
9+
powershell -EP Bypass -NoP & """$([Environment]::GetFolderPath('Windows'))\AtlasModules\Scripts\newUsers.ps1"""
10+
type: REG_SZ

‎src/playbook/Configuration/tweaks/misc/config-oem-information.yml‎

Lines changed: 15 additions & 8 deletions
Original file line numberDiff line numberDiff line change
@@ -16,11 +16,18 @@ actions:
1616
# Shows in winver
1717
Set-ItemProperty 'HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion' -Name 'RegisteredOrganization' -Value $reportedVer -Force
1818
wait: true
19-
- !powerShell:
20-
command: |
21-
. "$env:windir\AtlasModules\Scripts\regHelp.ps1" -RegistryObjects @(
22-
@{ Path = 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OEMInformation'; Value = 'Manufacturer'; Data = 'Atlas Team'; Type = 'REG_SZ' },
23-
@{ Path = 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OEMInformation'; Value = 'SupportURL'; Data = 'https://discord.atlasos.net'; Type = 'REG_SZ' },
24-
@{ Path = 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OEMInformation'; Value = 'SupportPhone'; Data = 'https://github.com/Atlas-OS/Atlas'; Type = 'REG_SZ' }
25-
)
26-
wait: true
19+
- !registryValue:
20+
path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OEMInformation'
21+
value: 'Manufacturer'
22+
data: 'Atlas Team'
23+
type: REG_SZ
24+
- !registryValue:
25+
path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OEMInformation'
26+
value: 'SupportURL'
27+
data: 'https://discord.atlasos.net'
28+
type: REG_SZ
29+
- !registryValue:
30+
path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OEMInformation'
31+
value: 'SupportPhone'
32+
data: 'https://github.com/Atlas-OS/Atlas'
33+
type: REG_SZ

‎src/playbook/Configuration/tweaks/networking/disable-llmnr.yml‎

Lines changed: 6 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,9 @@
22
title: Disable LLMNR Protocol
33
description: Disable Link-Local Multicast Name Resolution (LLMNR) protocol as it is vulnerable and has been replaced by DNS
44
actions:
5-
- !powerShell:
6-
command: |
7-
# https://admx.help/?Category=Windows_11_2022&Policy=Microsoft.Policies.DNSClient::Turn_Off_Multicast
8-
. "$env:windir\AtlasModules\Scripts\regHelp.ps1" -RegistryObjects @(
9-
@{ Path = 'HKLM\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient'; Value = 'EnableMulticast'; Data = '0'; Type = 'REG_DWORD' }
10-
)
11-
wait: true
5+
# https://admx.help/?Category=Windows_11_2022&Policy=Microsoft.Policies.DNSClient::Turn_Off_Multicast
6+
- !registryValue:
7+
path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient'
8+
value: 'EnableMulticast'
9+
data: '0'
10+
type: REG_DWORD

‎src/playbook/Configuration/tweaks/networking/shares/disable-smb-bandwidth-throttling.yml‎

Lines changed: 6 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,9 @@
22
title: Disable SMB Bandwidth Throttling
33
description: Disables SMB bandwidth throttling for improved performance
44
actions:
5-
- !powerShell:
6-
command: |
7-
# https://learn.microsoft.com/en-us/windows-server/administration/performance-tuning/role/file-server
8-
. "$env:windir\AtlasModules\Scripts\regHelp.ps1" -RegistryObjects @(
9-
@{ Path = 'HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters'; Value = 'DisableBandwidthThrottling'; Data = '1'; Type = 'REG_DWORD' }
10-
)
11-
wait: true
5+
# https://learn.microsoft.com/en-us/windows-server/administration/performance-tuning/role/file-server
6+
- !registryValue:
7+
path: 'HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters'
8+
value: 'DisableBandwidthThrottling'
9+
data: '1'
10+
type: REG_DWORD

‎src/playbook/Configuration/tweaks/networking/shares/restrict-anonymous-access.yml‎

Lines changed: 6 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,9 @@
22
title: Restrict Anonymous Access
33
description: Restricts anonymous access to named pipes and shares to prevent unauthorized system access
44
actions:
5-
- !powerShell:
6-
command: |
7-
# https://www.stigviewer.com/stig/microsoft_windows_10/2022-04-08/finding/V-220932
8-
. "$env:windir\AtlasModules\Scripts\regHelp.ps1" -RegistryObjects @(
9-
@{ Path = 'HKLM\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters'; Value = 'RestrictNullSessAccess'; Data = '1'; Type = 'REG_DWORD' }
10-
)
11-
wait: true
5+
# https://www.stigviewer.com/stig/microsoft_windows_10/2022-04-08/finding/V-220932
6+
- !registryValue:
7+
path: 'HKLM\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters'
8+
value: 'RestrictNullSessAccess'
9+
data: '1'
10+
type: REG_DWORD

‎src/playbook/Configuration/tweaks/networking/shares/restrict-anonymous-enumeration.yml‎

Lines changed: 6 additions & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -2,10 +2,9 @@
22
title: Restrict Anonymous Enumeration of Shares
33
description: Restricts anonymous enumeration of shares
44
actions:
5-
- !powerShell:
6-
command: |
7-
# https://www.stigviewer.com/stig/microsoft_windows_10/2022-04-08/finding/V-220930
8-
. "$env:windir\AtlasModules\Scripts\regHelp.ps1" -RegistryObjects @(
9-
@{ Path = 'HKLM\SYSTEM\CurrentControlSet\Control\Lsa'; Value = 'RestrictAnonymous'; Data = '1'; Type = 'REG_DWORD' }
10-
)
11-
wait: true
5+
# https://www.stigviewer.com/stig/microsoft_windows_10/2022-04-08/finding/V-220930
6+
- !registryValue:
7+
path: 'HKLM\SYSTEM\CurrentControlSet\Control\Lsa'
8+
value: 'RestrictAnonymous'
9+
data: '1'
10+
type: REG_DWORD

0 commit comments

Comments
 (0)