bat file commands to apply to a machine designed to replace the sysprep Aufit Mode / Copy Profile methodology. This provides a consistant and efficient way to apply user settings without manually doing it for all users. You can pick and choose which settings you want and do not want

Annoyances_Tweaks.cmd

:: https://stealthpuppy.com/customize-the-windows-default-profile/#.XEfajs17mUm
:: https://helgeklein.com/blog/2011/12/customizing-the-default-profile/
:: https://www.reddit.com/r/PowerShell/comments/8rupxv/unloading_registry_hive_with_a_script/
:: https://blogs.technet.microsoft.com/deploymentguys/2009/10/29/configuring-default-user-settings-full-update-for-windows-7-and-windows-server-2008-r2/
:: remove the double colon to activate the code if it is commented out
:: disable Cortana
:: https://www.addictivetips.com/windows-tips/disable-web-search-windows-10-april-update/
REG ADD "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /v "AllowCortana" /d 0 /t REG_DWORD /f
:: 5/9/2019
REG ADD "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /v "DisableWebSearch" /d 1 /t REG_DWORD /f
REG ADD "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /v "ConnectedSearchUseWeb" /d 0 /t REG_DWORD /f
:: Disable Defender
REG ADD "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender" /v "DisableAntiSpyware" /d 1 /t REG_DWORD /f
:: Prevent "how do you want to open this file"
REG ADD "HKLM\SOFTWARE\Policies\Microsoft\Windows\Explorer" /v "NoNewAppAlert" /d 1 /t REG_DWORD /f
:: Prevent EDGE ICON from appearing
REG ADD "HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer" /v DisableEdgeDesktopShortcutCreation /d 1 /t REG_DWORD /f
:: Defer updates current branch 365 days
REG ADD "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" /v "DeferFeatureUpdates" /d 1 /t REG_DWORD /f
REG ADD "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" /v "BranchReadinessLevel" /d 32 /t REG_DWORD /f
REG ADD "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" /v "DeferFeatureUpdatesPeriodInDays" /d 365 /t REG_DWORD /f
REG ADD "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" /v "PauseFeatureUpdatesStartTime" /d 0 /t REG_DWORD /f
:: Prevent IE first run Wizard
REG ADD "HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer\Main" /v "DisableFirstRunCustomize" /d 1 /t REG_DWORD /f
:: Enable RDP
REG ADD "HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server" /v "fDenyTSConnections" /d 0 /t REG_DWORD /f
REG ADD "HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp" /v "UserAuthentication" /d 0 /t REG_DWORD /f
::  set to kill background services in 4 seconds to be inline with the per users app settings
REG ADD "HKLM\SYSTEM\CurrentControlSet\Control" /v "WaitToKillServiceTimeout" /d 4000 /t REG_SZ /f
:: BCD EDIT 3 seconds
bcdedit /timeout 3
:: remove OneDrive icon from quick access file explorer
REG ADD "HKEY_CLASSES_ROOT\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}" /v "System.IsPinnedToNameSpaceTree" /d 0 /t REG_DWORD /f
:: set time zone to eastern
REG ADD "HKLM\SYSTEM\CurrentControlSet\Control\TimeZoneInformation" /v "TimeZoneKeyName" /d "Eastern Standard Time" /t REG_SZ /f
:: disable UAC 
REG ADD "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v "ConsentPromptBehaviorAdmin" /d 0 /t REG_DWORD /f
::WARNING EnableLUA set to 0 will break windows spotlight. setting disabled by default
::REG ADD "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableLUA" /d 0 /t REG_DWORD /f
REG ADD "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v "PromptOnSecureDesktop" /d 0 /t REG_DWORD /f
:: Disable update and restart
REG ADD "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" /v "NoAutoRebootWithLoggedOnUsers" /d 1 /t REG_DWORD /f
:: Disable Wake and install updates
REG ADD "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" /v "AUPowerManagement" /d 0 /t REG_DWORD /f
:: Disable Update and Restart and Update and Shutdown option on power menu
:: https://www.kapilarya.com/how-to-disable-remove-update-and-shut-down-in-windows-10
REG ADD "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" /v "NoAUShutdownOption" /d 1 /t REG_DWORD /f
REG ADD "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" /v "NoAUAsDefaultShutdownOption" /d 1 /t REG_DWORD /f
::  Remove Lock in Account Picture Menu in Windows 10 but allows WINKEY + L
:: https://www.tenforums.com/tutorials/61721-add-remove-lock-account-picture-menu-windows-10-a.html
REG ADD "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FlyoutMenuSettings" /v "ShowLockOption"  /d 0 /t REG_DWORD /f
:: Disable Hibernation 
REG ADD "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernteEnabled"  /d 0 /t REG_DWORD /f
:: Remove hibernation from menu (use only if Hibernation is turned on )
REG ADD "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\FlyoutMenuSettings" /v "ShowHibernateOption" /d 0 /t REG_DWORD /f
:: turn off game-bar Globally(see below)
:: https://www.top-password.com/blog/disable-game-bar-and-game-dvr-in-windows-10/
REG ADD "HKLM\SOFTWARE\Policies\Microsoft\Windows\GameDVR" /v "AllowgameDVR" /d 0 /t REG_DWORD /f
:: Prevent EDGE first run page
REG ADD "HKLM\SOFTWARE\Policies\Microsoft\MicrosoftEdge\Main" /v "PreventFirstRunPage" /d 1 /t REG_DWORD /f
:: Disable first login Animations
REG ADD "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /v "EnableFirstLogonAnimation" /d 0 /t REG_DWORD /f
:: 4/23/2019
:: Remove SHortCut arrows from desktop icons
REG ADD "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Icons" /v "29" /d "" /t REG_SZ /f
:: 5/9/2019
:: Enable F8 boot menu options
bcdedit /set {bootmgr} displaybootmenu yes
:: Disable Windows Defender Cloud
REG ADD "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Spynet" /v "SpynetReporting" /d "0" /t REG_DWORD /f
REG ADD "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Spynet" /v "SubmitSamplesConsent" /d "2" /t REG_DWORD /f

:: June 8 2019 - Prevent apps from relaunching after a reboot
:: https://www.tenforums.com/tutorials/49963-use-sign-info-auto-finish-after-update-restart-windows-10-a.html
REG ADD "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v "DisableAutomaticRestartSignOn" /d 1 /t REG_DWORD /f
:: July 7 2024
:: Disable Choose where to get apps in Windows 11 || Application Installation Control || App recommendation warnings. In other words, if you download an exe or msi you can install as you normally do without being nagged.
:: https://www.elevenforum.com/t/choose-where-to-get-apps-in-windows-11.7370/
REG ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer" /v AicEnabled /d "Anywhere" /t REG_SZ /f
::July 29 2024
:: Disable/Remove Copilot icon from Search on Windows 11. Microsoft is finding new was to infest windows with AI. ref: https://www.thewindowsclub.com/how-to-remove-copilot-icon-from-search-on-windows
REG ADD "HKLM\SOFTWARE\Policies\Microsoft\Windows\Explorer" /v DisableSearchBoxSuggestions  /d 1 /t REG_DWORD /f
:: disable driver updates in windows updates
:: reference : https://www.elevenforum.com/t/enable-or-disable-include-drivers-with-windows-updates-in-windows-11.2232/
REG ADD "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" /v ExcludeWUDriversInQualityUpdate  /d 1 /t REG_DWORD /f
REG ADD "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\DriverSearching" /v SearchOrderConfig  /d 0 /t REG_DWORD /f
REG ADD "HKLM\SOFTWARE\Microsoft\WindowsUpdate\UpdatePolicy\PolicyState" /v ExcludeWUDrivers  /d 1 /t REG_DWORD /f
:: =====================================================================================================================


:: Per user settings - Applied to all future users the log in for the first time.
REG LOAD HKU\DefaultUser %SystemDrive%\Users\Default\NTUSER.DAT
:: Remove People icon from system tray
REG ADD "HKU\DefaultUser\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\People" /v "PeopleBand" /d 0 /t REG_DWORD /f
:: Disallow WebSearch in search bar
:: https://www.addictivetips.com/windows-tips/disable-web-search-windows-10-april-update/
REG ADD "HKU\DefaultUser\Software\Microsoft\Windows\CurrentVersion\Search" /v "BingSearchEnabled" /d 0 /t REG_DWORD /f
REG ADD "HKU\DefaultUser\Software\Microsoft\Windows\CurrentVersion\Search" /v "AllowSearchToUseLocation" /d 0 /t REG_DWORD /f
REG ADD "HKU\DefaultUser\Software\Microsoft\Windows\CurrentVersion\Search" /v "CortanaConsent" /d 0 /t REG_DWORD /f
:: additional disable cortana
REG ADD "HKU\DefaultUser\SOFTWARE\Microsoft\Personalization\Settings" /v "AcceptedPrivacyPolicy" /d 0 /t REG_DWORD /f
REG ADD "HKU\DefaultUser\Software\Microsoft\Windows\CurrentVersion\Search" /v "RestrictImplicitTextCollection" /d 1 /t REG_DWORD /f
REG ADD "HKU\DefaultUser\Software\Microsoft\Windows\CurrentVersion\Search" /v "RestrictImplicitInkCollection" /d 1 /t REG_DWORD /f
REG ADD "HKU\DefaultUser\SOFTWARE\Microsoft\InputPersonalization\TrainedDataStore" /v "HarvestContacts" /d 0 /t REG_DWORD /f
:: Show hidden files
REG ADD "HKU\DefaultUser\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "Hidden" /d 1 /t REG_DWORD /f
:: Show Show File extensions
REG ADD "HKU\DefaultUser\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "HideFileExt" /d 0 /t REG_DWORD /f
:: Show Protected Operating System Files and folders
REG ADD "HKU\DefaultUser\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "ShowSuperHidden" /d 1 /t REG_DWORD /f
:: Show this PC on all users desktop
REG ADD "HKU\DefaultUser\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel" /v "{20D04FE0-3AEA-1069-A2D8-08002B30309D}" /d 0 /t REG_DWORD /f
REG ADD "HKU\DefaultUser\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\ClassicStartMenu" /v "{20D04FE0-3AEA-1069-A2D8-08002B30309D}" /d 0 /t REG_DWORD /f
::  Set IE HomePage
REG ADD "HKU\DefaultUser\Software\Microsoft\Internet Explorer\Main" /v "Start Page" /d "https://eu.startpage.com/do/mypage.pl?prfe=36c84513558a2d34bf0d89ea505333ad92934a7f254bccb70c1c89932309a9bc818f1bb4bea737976c85d1fa017f7a45" /t REG_SZ /f
:: Disable Sync Provider Notifications
REG ADD "HKU\DefaultUser\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "ShowSyncProviderNotifications" /d 0 /t REG_DWORD /f
:: Turn Off App Suggestions on Start in Windows 10 aka Disable Start Menu App Suggestions
REG ADD "HKU\DefaultUser\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SystemPaneSuggestionsEnabled" /d 0 /t REG_DWORD /f
REG ADD "HKU\DefaultUser\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-338388Enabled" /d 0 /t REG_DWORD /f
:: Disable Silent App Installation
REG ADD "HKU\DefaultUser\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SilentInstalledAppsEnabled" /d 0 /t REG_DWORD /f
:: Turn off "Get tips, tricks and suggestions as you use Windows"
:: WARNING! THIS WILL BREAK WINDOWS SPOTLIGHT LEAVE SET TO 1 IF YOU WANT SPOTLIGHT TO WORK. setting Disabled by default
::REG ADD "HKU\DefaultUser\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SoftLandingEnabled" /d 0 /t REG_DWORD /f
:: Prevent “welcome to the best windows ever”
REG ADD "HKU\DefaultUser\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-310093Enabled" /d 0 /t REG_DWORD /f
:: Disable “This App is Preventing Shutdown or Restart” Screen
REG ADD "HKU\DefaultUser\Control Panel\Desktop" /v "WaitToKillAppTimeout" /d "4000" /t REG_SZ /f
REG ADD "HKU\DefaultUser\Control Panel\Desktop" /v "HungAppTimeout" /d "5000" /t REG_SZ /f
REG ADD "HKU\DefaultUser\Control Panel\Desktop" /v "AutoEndTasks" /d "1" /t REG_SZ /f
:: Turn Off pop-up blocker IE
REG ADD "HKU\DefaultUser\Software\Microsoft\Internet Explorer\New Windows" /v "PopupMgr" /d 0 /t REG_DWORD /f
:: Turn Off check boxes to select items
REG ADD "HKU\DefaultUser\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "AutoCheckSelect" /d "0" /t REG_SZ /f
:: Set Control Panel view to Large icons (Classic)
REG ADD "HKU\DefaultUser\Software\Microsoft\Windows\CurrentVersion\Explorer\ControlPanel" /v "StartupPage" /d "1" /t REG_SZ /f
REG ADD "HKU\DefaultUser\Software\Microsoft\Windows\CurrentVersion\Explorer\ControlPanel" /v "AllItemsIconView" /d "0" /t REG_SZ /f

:: Disable Gamebar per user basis
:: https://www.top-password.com/blog/disable-game-bar-and-game-dvr-in-windows-10/
REG ADD "HKU\DefaultUser\Software\Microsoft\Windows\CurrentVersion\GameDVR" /v "AppCaptureEnabled"  /d 0 /t REG_DWORD /f
:: Gaming Disable background recording
REG ADD "HKU\DefaultUser\Software\Microsoft\Windows\CurrentVersion\GameDVR" /v "HistoricalCaptureEnabled"  /d 0 /t REG_DWORD /f
:: https://www.tenforums.com/tutorials/76094-turn-off-game-bar-tips-windows-10-a.html
REG ADD "HKU\DefaultUser\Software\Microsoft\GameBar" /v "ShowStartupPanel"  /d 0 /t REG_SZ /f
REG ADD "HKU\DefaultUser\Software\Microsoft\GameBar" /v "AutoGameModeEnabled"  /d 0 /t REG_SZ /f
:: https://www.windowscentral.com/how-disable-and-remove-game-bar-windows-10-creators-update
REG ADD "HKU\DefaultUser\SYSTEM\CurrentControlSet\Services\xbgm" /v "Start" /d 4 /t REG_SZ /f
:: Show More Details in File Transfer Dialog
REG ADD "HKU\DefaultUser\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\OperationStatusManager" /v "EnthusiastMode" /d 1 /t REG_DWORD /f
:: Enable/USE Dark Theme 
REG ADD "HKU\DefaultUser\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize" /v "AppsUseLightTheme" /d 0 /t REG_DWORD /f
:: Enable Spotlight
REG ADD "HKU\DefaultUser\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "RotatingLockScreenEnabled" /d 1 /t REG_DWORD /f
:: Do not let Windows manage your Printer
REG ADD "HKU\DefaultUser\Software\Microsoft\Windows NT\CurrentVersion\Windows" /v "LegacyDefaultPrinterMode" /d 1 /t REG_DWORD /f
:: April-30-2019

:: June 6 2019 - Disable "Restore previous folder windows at logon" 
:: NOTE THIS REGEDIT NORMALLY DOES NOT EXIST. THIS SHOULD NOT HARM ANYTHING IF IT DOES NOT.
REG delete "HKU\DefaultUser\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "PersistBrowsers" /f

:: Turn Off Automatically Restart Apps After Sign-In
:: May 28th 2020 https://winaero.com/blog/turn-off-automatically-restart-apps-after-sign-in-windows-10/
REG ADD "HKU\DefaultUser\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /v "RestartApps" /d 0 /t REG_DWORD /f
:: disable 'Get even more out of Windows' reg value does not normally exist so deleting it is default
REG ADD "HKU\DefaultUser\Software\Microsoft\Windows\CurrentVersion\UserProfileEngagement" /v "ScoobeSystemSettingEnabled" /d 0 /t REG_DWORD /f
:: disable Suggested actions
:: https://allthings.how/how-to-disable-suggested-actions-in-windows-11/
REG ADD "HKU\DefaultUser\Software\Microsoft\Windows\CurrentVersion\SmartActionPlatform\SmartClipboard" /v "Disabled" /d 1 /t REG_DWORD /f

REG UNLOAD HKU\DefaultUser

:: Put his at the end of your script 
:: taskkill /f /im explorer.exe
:: start explorer.exe

gistfile1.txt

@echo off 
call :Disable_Cortana

Call :LoadHive
call :Additional_Cortana
call :UnloadHive



:Disable_Cortana
REG ADD "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /v "AllowCortana" /d 0 /t REG_DWORD /f
:: 5/9/2019
REG ADD "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /v "DisableWebSearch" /d 1 /t REG_DWORD /f
REG ADD "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /v "ConnectedSearchUseWeb" /d 0 /t REG_DWORD /f
EXIT /B 0


:LoadHive
:: Load Hive Per user settings - Applied to all future users the log in for the first time.
REG LOAD HKU\DefaultUser %SystemDrive%\Users\Default\NTUSER.DAT
EXIT /B 0
:Additional_Cortana
:: additional disable cortana
REG ADD "HKU\DefaultUser\SOFTWARE\Microsoft\Personalization\Settings" /v "AcceptedPrivacyPolicy" /d 0 /t REG_DWORD /f
REG ADD "HKU\DefaultUser\Software\Microsoft\Windows\CurrentVersion\Search" /v "RestrictImplicitTextCollection" /d 1 /t REG_DWORD /f
REG ADD "HKU\DefaultUser\Software\Microsoft\Windows\CurrentVersion\Search" /v "RestrictImplicitInkCollection" /d 1 /t REG_DWORD /f
REG ADD "HKU\DefaultUser\SOFTWARE\Microsoft\InputPersonalization\TrainedDataStore" /v "HarvestContacts" /d 0 /t REG_DWORD /f

REG ADD "HKCU\SOFTWARE\Microsoft\Personalization\Settings" /v "AcceptedPrivacyPolicy" /d 0 /t REG_DWORD /f
REG ADD "HKCU\Software\Microsoft\Windows\CurrentVersion\Search" /v "RestrictImplicitTextCollection" /d 1 /t REG_DWORD /f
REG ADD "HKCU\Software\Microsoft\Windows\CurrentVersion\Search" /v "RestrictImplicitInkCollection" /d 1 /t REG_DWORD /f
REG ADD "HKCU\SOFTWARE\Microsoft\InputPersonalization\TrainedDataStore" /v "HarvestContacts" /d 0 /t REG_DWORD /f
EXIT /B 0

:UnloadHive
:: Unload Hive
REG UNLOAD HKU\DefaultUser
EXIT /B 0

Performance.cmd

:: https://stealthpuppy.com/customize-the-windows-default-profile/#.XEfajs17mUm
:: https://helgeklein.com/blog/2011/12/customizing-the-default-profile/
:: https://www.reddit.com/r/PowerShell/comments/8rupxv/unloading_registry_hive_with_a_script/
:: https://blogs.technet.microsoft.com/deploymentguys/2009/10/29/configuring-default-user-settings-full-update-for-windows-7-and-windows-server-2008-r2/
:: remove the double colon to activate the code if it is commented out, add '::' to deactivate the code
:: set high performance power mode
REG ADD "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ControlPanel\NameSpace\{025A5937-A6BE-4686-A844-36FE4BEC8B6D}" /v "PreferredPlan" /d "8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c" /t REG_SZ /f
powercfg -setactive 8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c

:: =====================================================================================================================

:: Per user settings 
REG LOAD HKU\DefaultUser %SystemDrive%\Users\Default\NTUSER.DAT
:: Adjust for best performance - Control Panel\System and Security\System - Advanced system Settings - Performance Settings - Adjust for best performance
::check your values to make sure they are in line just as a precaution as this process was a bit tricky
:: :: https://www.tenforums.com/tutorials/6377-change-visual-effects-settings-windows-10-a.html
REG ADD "HKU\DefaultUser\Software\Microsoft\Windows\CurrentVersion\Explorer\VisualEffects" /v "VisualFXSetting" /d "3" /t REG_DWORD /f
REG ADD "HKU\DefaultUser\Control Panel\Desktop" /v "UserPreferencesMask" /d "9012038010000000" /t REG_BINARY /f
:: Disable Peek
:: https://www.tenforums.com/tutorials/47266-turn-off-peek-desktop-windows-10-a.html
REG ADD "HKU\DefaultUser\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "DisablePreviewDesktop" /d 0 /t REG_DWORD /f
:: Disable Animate windows when minimizing and maximizing
:: https://www.tenforums.com/tutorials/126788-enable-disable-animate-windows-when-minimizing-maximizing.html
REG ADD "HKU\DefaultUser\Control Panel\Desktop\WindowMetrics" /v "MinAnimate" /d 0 /t REG_DWORD /f
:: Enable Font Smoothing
:: https://www.tenforums.com/tutorials/126775-enable-disable-font-smoothing-windows.html
REG ADD "HKU\DefaultUser\Control Panel\Desktop" /v "FontSmoothing" /d 2 /t REG_SZ /f
:: Turn On Show window contents while dragging in Windows 10
:: https://www.tenforums.com/tutorials/27449-turn-off-show-window-contents-while-dragging-windows-10-a.html
REG ADD "HKU\DefaultUser\Control Panel\Desktop" /v "DragFullWindows" /d 1 /t REG_SZ /f
::Disable - Show thumbnails instead of icons( Advanced system settings - performance - settngs )
REG ADD "HKU\DefaultUser\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "IconsOnly" /d 1 /t REG_DWORD /f

REG UNLOAD HKU\DefaultUser

Privacy.cmd

:: https://stealthpuppy.com/customize-the-windows-default-profile/#.XEfajs17mUm
:: https://helgeklein.com/blog/2011/12/customizing-the-default-profile/
:: https://www.reddit.com/r/PowerShell/comments/8rupxv/unloading_registry_hive_with_a_script/
:: https://blogs.technet.microsoft.com/deploymentguys/2009/10/29/configuring-default-user-settings-full-update-for-windows-7-and-windows-server-2008-r2/
:: Do not launch the privacy setting experience upon first time user login 1809
REG ADD "HKLM\SOFTWARE\Policies\Microsoft\Windows\OOBE" /v "DisablePrivacyExperience" /d "1" /t REG_DWORD /f
:: Set telemetry to basic
:: Note: This tweak may cause Enterprise edition to stop receiving Windows updates.
:: Windows Update control panel will then show message "Your device is at risk because it's out of date and missing important security and quality updates. Let's get you back on track so Windows can run more securely. Select this button to get going".
:: In such case, enable telemetry, run Windows update and then disable telemetry again. See also https://github.com/Disassembler0/Win10-Initial-Setup-Script/issues/57
REG ADD "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\DataCollection" /v "AllowTelemetry" /d "0" /t REG_DWORD /f
REG ADD "HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\DataCollection" /v "AllowTelemetry" /d "0" /t REG_DWORD /f
REG ADD "HKLM\SOFTWARE\Policies\Microsoft\Windows\DataCollection" /v "AllowTelemetry" /d "0" /t REG_DWORD /f
:: Disable text collection and handwriting data
REG ADD "HKLM\SOFTWARE\Policies\Microsoft\InputPersonalization" /v "RestrictImplicitTextCollection" /d "1" /t REG_DWORD /f
REG ADD "HKLM\SOFTWARE\Policies\Microsoft\InputPersonalization" /v "RestrictImplicitInkCollection" /d "1" /t REG_DWORD /f
:: Turn off location services
REG ADD "HKLM\SOFTWARE\Policies\Microsoft\Windows\LocationAndSensors" /v "DisableLocation" /d "1" /t REG_DWORD /f
REG ADD "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\location" /v "Value" /d "Deny" /t REG_SZ /f
REG ADD "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Sensor\Overrides\{BFA794E4-F964-4FDB-90F6-51056BFE4B44}" /v "SensorPermissionState" /d "0" /t REG_DWORD /f
REG ADD "HKLM\SYSTEM\CurrentControlSet\Services\lfsvc\Service\Configuration" /v "Status" /d "0" /t REG_DWORD /f
:: turn off Advertising ID
REG ADD "HKLM\SOFTWARE\Policies\Microsoft\Windows\AdvertisingInfo" /v "DisabledByGroupPolicy" /d "1" /t REG_DWORD /f
:: Disable the Connected User Experiences and Telemetry Service
:: https://windowsreport.com/disable-windows-11-telemetry/
net stop diagtrack
sc config diagtrack start= disabled
:: Device Management Wireless Application Protocol (WAP) Push message Routing Service
:: https://windowsreport.com/disable-windows-11-telemetry/
net stop dmwappushservice
sc config dmwappushservice start= disabled
:: disable Consolidator
:: https://windowsreport.com/disable-windows-11-telemetry/
schtasks.exe /change /tn "\Microsoft\Windows\Customer Experience Improvement Program\Consolidator" /disable



:: =====================================================================================================================


:: turn off Activity history log off required( top most check box
REG ADD "HKLM\SOFTWARE\Policies\Microsoft\Windows\System" /v "PublishUserActivities" /d "0" /t REG_DWORD /f
:: Disable Activity Feed
REG ADD "HKLM\SOFTWARE\Policies\Microsoft\Windows\System" /v "EnableActivityFeed" /d "0" /t REG_DWORD /f
:: Disable Upload user activities
REG ADD "HKLM\SOFTWARE\Policies\Microsoft\Windows\System" /v "UploadUserActivities" /d "0" /t REG_DWORD /f
:::: Next statements will deny access to the following apps under Privacy - - Setting anyone of these back to allow allows toggle functionality
:: App access turn off camera
REG ADD "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\webcam" /v "Value" /d "Deny" /t REG_SZ /f
:: Disable app diag info about your other apps
REG ADD "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\appDiagnostics" /v "Value" /d "Deny" /t REG_SZ /f
:: do not allow apps to access your file system
REG ADD "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\broadFileSystemAccess" /v "Value" /d "Deny" /t REG_SZ /f
:: do not allow apps to access your contacts
REG ADD "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\contacts" /v "Value" /d "Deny" /t REG_SZ /f
:: Do not allow apps to access microphone
REG ADD "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\microphone" /v "Value" /d "Deny" /t REG_SZ /f
:: Do not allow apps to access Notifications
REG ADD "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\userNotificationListener" /v "Value" /d "Deny" /t REG_SZ /f
:: Do not allow apps to access Account Information
REG ADD "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\userAccountInformation" /v "Value" /d "Deny" /t REG_SZ /f
:: Do not allow apps to access calendar
REG ADD "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\appointments" /v "Value" /d "Deny" /t REG_SZ /f
:: Do not allow apps to access call history
REG ADD "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\phoneCallHistory" /v "Value" /d "Deny" /t REG_SZ /f
:: Do not Allow apps to access email 
REG ADD "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\email" /v "Value" /d "Deny" /t REG_SZ /f
:: Do not allow apps to access tasks
REG ADD "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\userDataTasks" /v "Value" /d "Deny" /t REG_SZ /f
:: Do not allow apps to access messaging
REG ADD "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\chat" /v "Value" /d "Deny" /t REG_SZ /f
:: Do Not allow apps to access radio
REG ADD "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\radios" /v "Value" /d "Deny" /t REG_SZ /f
:: do not allow apps to access other devices
REG ADD "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\bluetoothSync" /v "Value" /d "Deny" /t REG_SZ /f
:: do not allow apps to access Documents
REG ADD "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\documentsLibrary" /v "Value" /d "Deny" /t REG_SZ /f
:: do not allow apps to access Pictures
REG ADD "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\picturesLibrary" /v "Value" /d "Deny" /t REG_SZ /f
:: do not allow apps to access Videos
REG ADD "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\videosLibrary" /v "Value" /d "Deny" /t REG_SZ /f
::July 29 2024
:: Disable/Remove Copilot icon from Search on Windows 11. Microsoft is finding new was to infest windows with AI. ref: https://www.thewindowsclub.com/how-to-remove-copilot-icon-from-search-on-windows
REG ADD "HKLM\SOFTWARE\Policies\Microsoft\Windows\Explorer" /v DisableSearchBoxSuggestions  /d 1 /t REG_DWORD /f

:: Per user settings 
REG LOAD HKU\DefaultUser %SystemDrive%\Users\Default\NTUSER.DAT
:: Turn off background apps
:: https://www.tenforums.com/tutorials/7225-turn-off-background-apps-windows-10-a.html
REG ADD "HKU\DefaultUser\Software\Microsoft\Windows\CurrentVersion\BackgroundAccessApplications" /v "GlobalUserDisabled" /d "1" /t REG_DWORD /f
REG ADD "HKU\DefaultUser\Software\Microsoft\Windows\CurrentVersion\Search" /v "BackgroundAppGlobalToggle" /d "0" /t REG_DWORD /f
:: Do not let Website Access of Language List in Settings
:: https://www.tenforums.com/tutorials/82980-turn-off-website-access-language-list-windows-10-a.html
REG ADD "HKU\DefaultUser\Control Panel\International\User Profile" /v "HttpAcceptLanguageOptOut" /d "1" /t REG_DWORD /f
:: Inking and typing personalization turn off
:: https://www.tenforums.com/tutorials/118127-turn-off-inking-typing-personalization-windows-10-a.html
REG ADD HKU\DefaultUser\Software\Microsoft\InputPersonalization /v "RestrictImplicitInkCollection" /d "1" /t REG_DWORD /f
REG ADD HKU\DefaultUser\Software\Microsoft\InputPersonalization /v "RestrictImplicitTextCollection" /d "1" /t REG_DWORD /f
REG ADD HKU\DefaultUser\Software\Microsoft\Personalization\Settings /v "AcceptedPrivacyPolicy" /d "0" /t REG_DWORD /f
:: Turn Off Suggested Content in Settings app
:: https://www.tenforums.com/tutorials/100541-turn-off-suggested-content-settings-app-windows-10-a.html
REG ADD HKU\DefaultUser\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager /v "SubscribedContent-338393Enabled" /d "0" /t REG_DWORD /f
REG ADD HKU\DefaultUser\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager /v "SubscribedContent-353694Enabled" /d "0" /t REG_DWORD /f
REG ADD HKU\DefaultUser\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager /v "SubscribedContent-353696Enabled" /d "0" /t REG_DWORD /f
:: Disable App Launch Tracking
:: https://www.thewindowsclub.com/enable-or-disable-app-launch-tracking-in-windows-10
REG ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced /v "Start_TrackProgs" /d "0" /t REG_DWORD /f
::Disable creation of Thumbs.db thumbnail cache files
:: IF these keys are left in the registry regardless of the values, windows display thunbnail view will not work
:: Thumbs cache is located here -> C:\Users\%username%\AppData\Local\Microsoft\Windows\Explorer
REG ADD "HKU\DefaultUser\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v "DisableThumbnails" /d "1" /t REG_DWORD /f
REG ADD "HKU\DefaultUser\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v "DisableThumbnailsOnNetworkFolders" /d "1" /t REG_DWORD /f
:: Remove Recent Files from Quick Access in Windows 10
:: https://www.tenforums.com/tutorials/2713-add-remove-recent-files-quick-access-windows-10-a.html
:: https://www.tenforums.com/tutorials/3476-reset-clear-recent-items-frequent-places-windows-10-a.html
REG ADD "HKU\DefaultUser\Software\Microsoft\Windows\CurrentVersion\Explorer" /v "ShowRecent" /d "0" /t REG_DWORD /f
REG UNLOAD HKU\DefaultUser