Skip to content

Instantly share code, notes, and snippets.

@kfalconspb
Forked from jessfraz/boxstarter.ps1
Created October 12, 2017 04:41
Show Gist options
  • Save kfalconspb/ca8730e60e4008c2b78d0935edb5fd9f to your computer and use it in GitHub Desktop.
Save kfalconspb/ca8730e60e4008c2b78d0935edb5fd9f to your computer and use it in GitHub Desktop.

Revisions

  1. kfalconspb revised this gist Oct 13, 2017. 1 changed file with 1 addition and 1 deletion.
    2 changes: 1 addition & 1 deletion boxstarter.ps1
    Original file line number Diff line number Diff line change
    @@ -1,4 +1,4 @@
    # Description: Boxstarter Script# Author: ElJefeDSecurIT # Last Updated: 2017-10-10## Install boxstarter:# . { iwr -useb http://boxstarter.org/bootstrapper.ps1 } | iex; get-boxstarter -Force## You might need to set: Set-ExecutionPolicy RemoteSigned## Run this boxstarter by calling the following from an **elevated** command-prompt:# start http://boxstarter.org/package/nr/url?<URL-TO-RAW-GIST># OR# Install-BoxstarterPackage -PackageName <URL-TO-RAW-GIST> -DisableReboots## Learn more: http://boxstarter.org/Learn/WebLauncher# heavily borrowed from Jessie, but I just have to tweak some things for my boxen. I have a couple of things I use for work, # a couple of things I use for home. this includes a bunch of core optimizations i've picked up over the years...# little things... small, exlusively paranoid things...#---- TEMPORARY ---Disable-UAC#---- PERMANENT ---# ElJEfe: for Ned Pyle, because, I blame him. Disable-WindowsOptionalFeature -Online -FeatureName SMB1Protocol#--- Fonts ---#ElJefe: sry I don't trust fonts I didn't review or came from the OS itself. #choco install inconsolata -y #--- Windows Settings --- #eljefe- I like Bing Search. so, there. Disable-BingSearchDisable-GameBarTipsSet-WindowsExplorerOptions -EnableShowHiddenFilesFoldersDrives -EnableShowProtectedOSFiles -EnableShowFileExtensionsSet-TaskbarOptions -Size Large -Dock Bottom -Combine Full # -Lock # i do not like locks on my taskbar. Set-TaskbarOptions -Size Large -Dock Bottom -Combine Full -AlwaysShowIconsOn#--- Windows Subsystems/Features ---#eljefe - Nice Job Jesse ;)# choco install Microsoft-Hyper-V-All -source windowsFeatures# choco install Microsoft-Windows-Subsystem-Linux -source windowsfeatures#--- Tools --- eljefe: I need git; any way i want it, that's the way I need it. i'll even get it in bash once i'm done. choco install git -params '"/GitAndUnixToolsOnPath /WindowsTerminal"' -ychoco install poshgitchoco install sysinternals -ychoco install vim#--- Apps ---choco install googlechrome# choco install docker-for-windows# choco install sharexchoco install microsoft-teams# choco install vcxsrv
    # Description: Boxstarter Script# Author: ElJefeDSecurIT # Last Updated: 2017-10-10## Install boxstarter:# . { iwr -useb http://boxstarter.org/bootstrapper.ps1 } | iex; get-boxstarter -Force## You might need to set: Set-ExecutionPolicy RemoteSigned## Run this boxstarter by calling the following from an **elevated** command-prompt:# start http://boxstarter.org/package/nr/url?<URL-TO-RAW-GIST># OR# Install-BoxstarterPackage -PackageName <URL-TO-RAW-GIST> -DisableReboots## Learn more: http://boxstarter.org/Learn/WebLauncher# heavily borrowed from Jessie, but I just have to tweak some things for my boxen. I have a couple of things I use for work, # a couple of things I use for home. this includes a bunch of core optimizations i've picked up over the years...# little things... small, exlusively paranoid things...#---- TEMPORARY ---Disable-UAC#---- PERMANENT ---# ElJEfe: for Ned Pyle, because, I blame him. Disable-WindowsOptionalFeature -Online -FeatureName SMB1Protocol#--- Fonts ---#ElJefe: sry I don't trust fonts I didn't review or came from the OS itself. #choco install inconsolata -y #--- Windows Settings --- #eljefe- I like Bing Search. so, there. Disable-BingSearchDisable-GameBarTipsSet-WindowsExplorerOptions -EnableShowHiddenFilesFoldersDrives -EnableShowProtectedOSFiles -EnableShowFileExtensionsSet-TaskbarOptions -Size Large -Dock Bottom -Combine Full # -Lock # i do not like locks on my taskbar. Set-TaskbarOptions -Size Large -Dock Bottom -Combine Full -AlwaysShowIconsOn#--- Windows Subsystems/Features ---#eljefe - Nice Job Jesse ;)# choco install Microsoft-Hyper-V-All -source windowsFeatureschoco install Microsoft-Windows-Subsystem-Linux -source windowsfeatures#--- Tools --- eljefe: I need git; any way i want it, that's the way I need it. i'll even get it in bash once i'm done. choco install git -params '"/GitAndUnixToolsOnPath /WindowsTerminal"' -ychoco install poshgitchoco install sysinternals -ychoco install vim#--- Apps ---choco install googlechrome# choco install docker-for-windows# choco install sharexchoco install microsoft-teams# choco install vcxsrv
    choco install adobereader
    choco install jre8
    choco install firefox
  2. kfalconspb revised this gist Oct 12, 2017. 1 changed file with 1 addition and 2 deletions.
    3 changes: 1 addition & 2 deletions boxstarter.ps1
    Original file line number Diff line number Diff line change
    @@ -66,6 +66,5 @@ choco install poshtools-visualstudio2015
    choco install powershellhere
    choco install okta.core.automation
    choco install powergist
    choco install chocolateyexplorer
    #--- Uninstall unecessary applications that come with Windows out of the box ---# 3D BuilderGet-AppxPackage Microsoft.3DBuilder | Remove-AppxPackage# AlarmsGet-AppxPackage Microsoft.WindowsAlarms | Remove-AppxPackage# AutodeskGet-AppxPackage *Autodesk* | Remove-AppxPackage# Bing Weather, News, Sports, and Finance (Money):Get-AppxPackage Microsoft.BingFinance | Remove-AppxPackageGet-AppxPackage Microsoft.BingNews | Remove-AppxPackageGet-AppxPackage Microsoft.BingSports | Remove-AppxPackageGet-AppxPackage Microsoft.BingWeather | Remove-AppxPackage# BubbleWitchGet-AppxPackage *BubbleWitch* | Remove-AppxPackage# Candy CrushGet-AppxPackage king.com.CandyCrush* | Remove-AppxPackage# Comms PhoneGet-AppxPackage Microsoft.CommsPhone | Remove-AppxPackage# DellGet-AppxPackage *Dell* | Remove-AppxPackage# DropboxGet-AppxPackage *Dropbox* | Remove-AppxPackage# FacebookGet-AppxPackage *Facebook* | Remove-AppxPackage# Feedback HubGet-AppxPackage Microsoft.WindowsFeedbackHub | Remove-AppxPackage# Get StartedGet-AppxPackage Microsoft.Getstarted | Remove-AppxPackage# KeeperGet-AppxPackage *Keeper* | Remove-AppxPackage# Mail & CalendarGet-AppxPackage microsoft.windowscommunicationsapps | Remove-AppxPackage# MapsGet-AppxPackage Microsoft.WindowsMaps | Remove-AppxPackage# March of EmpiresGet-AppxPackage *MarchofEmpires* | Remove-AppxPackage# McAfee SecurityGet-AppxPackage *McAfee* | Remove-AppxPackage# Uninstall McAfee Security App$mcafee = gci "HKLM:\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall" | foreach { gp $_.PSPath } | ? { $_ -match "McAfee Security" } | select UninstallStringif ($mcafee) { $mcafee = $mcafee.UninstallString -Replace "C:\Program Files\McAfee\MSC\mcuihost.exe","" Write "Uninstalling McAfee..." start-process "C:\Program Files\McAfee\MSC\mcuihost.exe" -arg "$mcafee" -Wait}# MessagingGet-AppxPackage Microsoft.Messaging | Remove-AppxPackage# MinecraftGet-AppxPackage *Minecraft* | Remove-AppxPackage# NetflixGet-AppxPackage *Netflix* | Remove-AppxPackage# Office HubGet-AppxPackage Microsoft.MicrosoftOfficeHub | Remove-AppxPackage# One ConnectGet-AppxPackage Microsoft.OneConnect | Remove-AppxPackage# OneNote#Get-AppxPackage Microsoft.Office.OneNote | Remove-AppxPackage# PeopleGet-AppxPackage Microsoft.People | Remove-AppxPackage# PhoneGet-AppxPackage Microsoft.WindowsPhone | Remove-AppxPackage# PhotosGet-AppxPackage Microsoft.Windows.Photos | Remove-AppxPackage# PlexGet-AppxPackage *Plex* | Remove-AppxPackage# Skype (Metro version)Get-AppxPackage Microsoft.SkypeApp | Remove-AppxPackage# Sound RecorderGet-AppxPackage Microsoft.WindowsSoundRecorder | Remove-AppxPackage# SolitaireGet-AppxPackage *Solitaire* | Remove-AppxPackage# Sticky NotesGet-AppxPackage Microsoft.MicrosoftStickyNotes | Remove-AppxPackage# SwayGet-AppxPackage Microsoft.Office.Sway | Remove-AppxPackage# Twitter #eljefe: oh now hold on there... let's not get carried away...# Get-AppxPackage *Twitter* | Remove-AppxPackage# XboxGet-AppxPackage Microsoft.XboxApp | Remove-AppxPackageGet-AppxPackage Microsoft.XboxIdentityProvider | Remove-AppxPackage# Zune Music, Movies & TV#eljefe: with my last words i curse at thee, with my last breath, I spit at thee.Get-AppxPackage Microsoft.ZuneMusic | Remove-AppxPackageGet-AppxPackage Microsoft.ZuneVideo | Remove-AppxPackage#--- Windows Settings ---# Some from: @NickCraver's gist https://gist.github.com/NickCraver/7ebf9efbfd0c3eab72e9# Privacy: Let apps use my advertising ID: DisableIf (-Not (Test-Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\AdvertisingInfo")) { New-Item -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\AdvertisingInfo | Out-Null}Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\AdvertisingInfo -Name Enabled -Type DWord -Value 0# WiFi Sense: HotSpot Sharing: DisableIf (-Not (Test-Path "HKLM:\Software\Microsoft\PolicyManager\default\WiFi\AllowWiFiHotSpotReporting")) { New-Item -Path HKLM:\Software\Microsoft\PolicyManager\default\WiFi\AllowWiFiHotSpotReporting | Out-Null}Set-ItemProperty -Path HKLM:\Software\Microsoft\PolicyManager\default\WiFi\AllowWiFiHotSpotReporting -Name value -Type DWord -Value 0# WiFi Sense: Shared HotSpot Auto-Connect: DisableSet-ItemProperty -Path HKLM:\Software\Microsoft\PolicyManager\default\WiFi\AllowAutoConnectToWiFiSenseHotspots -Name value -Type DWord -Value 0# Start Menu: Disable Bing Search Results# ElJefe: You bet that if i'm protecting Bing Ima gonna be using Bing. and like it!
    choco install chocolateyexplorer#--- Uninstall unecessary applications that come with Windows out of the box ---# 3D BuilderGet-AppxPackage Microsoft.3DBuilder | Remove-AppxPackage# AlarmsGet-AppxPackage Microsoft.WindowsAlarms | Remove-AppxPackage# AutodeskGet-AppxPackage *Autodesk* | Remove-AppxPackage# Bing Weather, News, Sports, and Finance (Money):Get-AppxPackage Microsoft.BingFinance | Remove-AppxPackageGet-AppxPackage Microsoft.BingNews | Remove-AppxPackageGet-AppxPackage Microsoft.BingSports | Remove-AppxPackageGet-AppxPackage Microsoft.BingWeather | Remove-AppxPackage# BubbleWitchGet-AppxPackage *BubbleWitch* | Remove-AppxPackage# Candy CrushGet-AppxPackage king.com.CandyCrush* | Remove-AppxPackage# Comms PhoneGet-AppxPackage Microsoft.CommsPhone | Remove-AppxPackage# DellGet-AppxPackage *Dell* | Remove-AppxPackage# DropboxGet-AppxPackage *Dropbox* | Remove-AppxPackage# FacebookGet-AppxPackage *Facebook* | Remove-AppxPackage# Feedback HubGet-AppxPackage Microsoft.WindowsFeedbackHub | Remove-AppxPackage# Get StartedGet-AppxPackage Microsoft.Getstarted | Remove-AppxPackage# KeeperGet-AppxPackage *Keeper* | Remove-AppxPackage# Mail & CalendarGet-AppxPackage microsoft.windowscommunicationsapps | Remove-AppxPackage# MapsGet-AppxPackage Microsoft.WindowsMaps | Remove-AppxPackage# March of EmpiresGet-AppxPackage *MarchofEmpires* | Remove-AppxPackage# McAfee SecurityGet-AppxPackage *McAfee* | Remove-AppxPackage# Uninstall McAfee Security App$mcafee = gci "HKLM:\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall" | foreach { gp $_.PSPath } | ? { $_ -match "McAfee Security" } | select UninstallStringif ($mcafee) { $mcafee = $mcafee.UninstallString -Replace "C:\Program Files\McAfee\MSC\mcuihost.exe","" Write "Uninstalling McAfee..." start-process "C:\Program Files\McAfee\MSC\mcuihost.exe" -arg "$mcafee" -Wait}# MessagingGet-AppxPackage Microsoft.Messaging | Remove-AppxPackage# MinecraftGet-AppxPackage *Minecraft* | Remove-AppxPackage# NetflixGet-AppxPackage *Netflix* | Remove-AppxPackage# Office HubGet-AppxPackage Microsoft.MicrosoftOfficeHub | Remove-AppxPackage# One ConnectGet-AppxPackage Microsoft.OneConnect | Remove-AppxPackage# OneNote#Get-AppxPackage Microsoft.Office.OneNote | Remove-AppxPackage# PeopleGet-AppxPackage Microsoft.People | Remove-AppxPackage# PhoneGet-AppxPackage Microsoft.WindowsPhone | Remove-AppxPackage# PhotosGet-AppxPackage Microsoft.Windows.Photos | Remove-AppxPackage# PlexGet-AppxPackage *Plex* | Remove-AppxPackage# Skype (Metro version)Get-AppxPackage Microsoft.SkypeApp | Remove-AppxPackage# Sound RecorderGet-AppxPackage Microsoft.WindowsSoundRecorder | Remove-AppxPackage# SolitaireGet-AppxPackage *Solitaire* | Remove-AppxPackage# Sticky NotesGet-AppxPackage Microsoft.MicrosoftStickyNotes | Remove-AppxPackage# SwayGet-AppxPackage Microsoft.Office.Sway | Remove-AppxPackage# Twitter #eljefe: oh now hold on there... let's not get carried away...# Get-AppxPackage *Twitter* | Remove-AppxPackage# XboxGet-AppxPackage Microsoft.XboxApp | Remove-AppxPackageGet-AppxPackage Microsoft.XboxIdentityProvider | Remove-AppxPackage# Zune Music, Movies & TV#eljefe: with my last words i curse at thee, with my last breath, I spit at thee.Get-AppxPackage Microsoft.ZuneMusic | Remove-AppxPackageGet-AppxPackage Microsoft.ZuneVideo | Remove-AppxPackage#--- Windows Settings ---# Some from: @NickCraver's gist https://gist.github.com/NickCraver/7ebf9efbfd0c3eab72e9# Privacy: Let apps use my advertising ID: DisableIf (-Not (Test-Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\AdvertisingInfo")) { New-Item -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\AdvertisingInfo | Out-Null}Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\AdvertisingInfo -Name Enabled -Type DWord -Value 0# WiFi Sense: HotSpot Sharing: DisableIf (-Not (Test-Path "HKLM:\Software\Microsoft\PolicyManager\default\WiFi\AllowWiFiHotSpotReporting")) { New-Item -Path HKLM:\Software\Microsoft\PolicyManager\default\WiFi\AllowWiFiHotSpotReporting | Out-Null}Set-ItemProperty -Path HKLM:\Software\Microsoft\PolicyManager\default\WiFi\AllowWiFiHotSpotReporting -Name value -Type DWord -Value 0# WiFi Sense: Shared HotSpot Auto-Connect: DisableSet-ItemProperty -Path HKLM:\Software\Microsoft\PolicyManager\default\WiFi\AllowAutoConnectToWiFiSenseHotspots -Name value -Type DWord -Value 0# Start Menu: Disable Bing Search Results# ElJefe: You bet that if i'm protecting Bing Ima gonna be using Bing. and like it!
    Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Search -Name BingSearchEnabled -Type DWord -Value 0# To Restore (Enabled):#Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Search -Name BingSearchEnabled -Type DWord -Value 1# Disable Telemetry (requires a reboot to take effect)# Note this may break Insider builds for your organizationSet-ItemProperty -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\DataCollection -Name AllowTelemetry -Type DWord -Value 0Get-Service DiagTrack,Dmwappushservice | Stop-Service | Set-Service -StartupType Disabled# Change Explorer home screen back to "This PC"#Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced -Name LaunchTo -Type DWord -Value 1# Change it back to "Quick Access" (Windows 10 default)Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced -Name LaunchTo -Type DWord -Value # Better File ExplorerSet-ItemProperty -Path HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced -Name NavPaneExpandToCurrentFolder -Value 1 Set-ItemProperty -Path HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced -Name NavPaneShowAllFolders -Value 1 Set-ItemProperty -Path HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced -Name MMTaskbarMode -Value 2# These make "Quick Access" behave much closer to the old "Favorites"# ElJefe I got so much stuff I work on I'm usually looking at the last thing. ain't got time to not have bottom line up front. # Disable Quick Access: Recent Files#Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer -Name ShowRecent -Type DWord -Value 0# Disable Quick Access: Frequent Folders#Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer -Name ShowFrequent -Type DWord -Value 0# To Restore:Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer -Name ShowRecent -Type DWord -Value 1Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer -Name ShowFrequent -Type DWord -Value 1# Disable the Lock Screen (the one before password prompt - to prevent dropping the first character)#oh hell no!If (-Not (Test-Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\Personalization)) { New-Item -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows -Name Personalization | Out-Null}Set-ItemProperty -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\Personalization -Name NoLockScreen -Type DWord -Value 1# To Restore:#eljefe - there I fixed it: next line should be 0, or false.# Set-ItemProperty -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\Personalization -Name NoLockScreen -Type DWord -Value 0# Lock screen (not sleep) on lid closeSet-ItemProperty -Path 'HKLM:\SYSTEM\CurrentControlSet\Control\Session Manager\Power' -Name AwayModeEnabled -Type DWord -Value 1# To Restore:# Set-ItemProperty -Path 'HKLM:\SYSTEM\CurrentControlSet\Control\Session Manager\Power' -Name AwayModeEnabled -Type DWord -Value 0# Use the Windows 7-8.1 Style Volume Mixer#If (-Not (Test-Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MTCUVC")) {# New-Item -Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion" -Name MTCUVC | Out-Null#}#Set-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MTCUVC" -Name EnableMtcUvc -Type DWord -Value 0# To Restore (Windows 10 Style Volume Control):Set-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MTCUVC" -Name EnableMtcUvc -Type DWord -Value 1# Disable Xbox GamebarSet-ItemProperty -Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\GameDVR" -Name AppCaptureEnabled -Type DWord -Value 0Set-ItemProperty -Path "HKCU:\System\GameConfigStore" -Name GameDVR_Enabled -Type DWord -Value 0# Turn off People in TaskbarIf (-Not (Test-Path "HKCU:SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\People")) { New-Item -Path HKCU:SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\People | Out-Null}Set-ItemProperty -Path "HKCU:SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\People" -Name PeopleBand -Type DWord -Value 0#--- Restore Temporary Settings ---Enable-UACEnable-MicrosoftUpdateInstall-WindowsUpdate -acceptEula#--- Rename the Computer ---# Requires restart, or add the -Restart flag#eljefe I have a strange sence of humor...#$computername = "UNDETECTED"#if ($env:computername -ne $computername) {# Rename-Computer -NewName $computername#}
  3. kfalconspb revised this gist Oct 12, 2017. 1 changed file with 51 additions and 1 deletion.
    52 changes: 51 additions & 1 deletion boxstarter.ps1
    Original file line number Diff line number Diff line change
    @@ -16,6 +16,56 @@ choco install nmap
    choco install vmwareworkstation
    choco install rvtools
    choco install office365proplus
    choco install postman
    choco install postman -y
    choco install regscanner
    choco install ollydbg
    choco install x64dbg.portable
    choco install visualstudio2015community
    choco install sqltoolbelt
    choco install kindle
    choco install sendtokindle
    choco install amazon-music
    choco install authy-desktop
    choco install keepass.install
    choco install vagrant
    choco install fiddler4
    choco install burp-suite-free-edition
    choco install sql-server-management-studio
    choco install pycharm-community
    choco install slack
    choco install nugetpackageexplorer
    choco install pscx
    choco install yumi
    choco install chocolateypackageupdater
    choco install kodi
    choco install veracrypt
    choco install posh-github
    choco install processhacker
    choco install rsat
    choco install nugetpackagemanager
    choco install angryip
    choco install softerraldapbrowser
    choco install httrack.app
    choco install office365-2016-deployment-tool
    choco install visualstudiocod
    choco install firefox
    choco install python3
    choco install zoom
    choco install tor-browser
    choco install ldapadmin
    choco install finddupe
    choco install apktool
    choco install camtasia
    choco install simplednscrypt
    choco install dex2jar
    choco install ida-free
    choco install kodi
    choco install vscode-powershell
    choco install dsc.powershellcommunity
    choco install poshtools-visualstudio2015
    choco install powershellhere
    choco install okta.core.automation
    choco install powergist
    choco install chocolateyexplorer
    #--- Uninstall unecessary applications that come with Windows out of the box ---# 3D BuilderGet-AppxPackage Microsoft.3DBuilder | Remove-AppxPackage# AlarmsGet-AppxPackage Microsoft.WindowsAlarms | Remove-AppxPackage# AutodeskGet-AppxPackage *Autodesk* | Remove-AppxPackage# Bing Weather, News, Sports, and Finance (Money):Get-AppxPackage Microsoft.BingFinance | Remove-AppxPackageGet-AppxPackage Microsoft.BingNews | Remove-AppxPackageGet-AppxPackage Microsoft.BingSports | Remove-AppxPackageGet-AppxPackage Microsoft.BingWeather | Remove-AppxPackage# BubbleWitchGet-AppxPackage *BubbleWitch* | Remove-AppxPackage# Candy CrushGet-AppxPackage king.com.CandyCrush* | Remove-AppxPackage# Comms PhoneGet-AppxPackage Microsoft.CommsPhone | Remove-AppxPackage# DellGet-AppxPackage *Dell* | Remove-AppxPackage# DropboxGet-AppxPackage *Dropbox* | Remove-AppxPackage# FacebookGet-AppxPackage *Facebook* | Remove-AppxPackage# Feedback HubGet-AppxPackage Microsoft.WindowsFeedbackHub | Remove-AppxPackage# Get StartedGet-AppxPackage Microsoft.Getstarted | Remove-AppxPackage# KeeperGet-AppxPackage *Keeper* | Remove-AppxPackage# Mail & CalendarGet-AppxPackage microsoft.windowscommunicationsapps | Remove-AppxPackage# MapsGet-AppxPackage Microsoft.WindowsMaps | Remove-AppxPackage# March of EmpiresGet-AppxPackage *MarchofEmpires* | Remove-AppxPackage# McAfee SecurityGet-AppxPackage *McAfee* | Remove-AppxPackage# Uninstall McAfee Security App$mcafee = gci "HKLM:\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall" | foreach { gp $_.PSPath } | ? { $_ -match "McAfee Security" } | select UninstallStringif ($mcafee) { $mcafee = $mcafee.UninstallString -Replace "C:\Program Files\McAfee\MSC\mcuihost.exe","" Write "Uninstalling McAfee..." start-process "C:\Program Files\McAfee\MSC\mcuihost.exe" -arg "$mcafee" -Wait}# MessagingGet-AppxPackage Microsoft.Messaging | Remove-AppxPackage# MinecraftGet-AppxPackage *Minecraft* | Remove-AppxPackage# NetflixGet-AppxPackage *Netflix* | Remove-AppxPackage# Office HubGet-AppxPackage Microsoft.MicrosoftOfficeHub | Remove-AppxPackage# One ConnectGet-AppxPackage Microsoft.OneConnect | Remove-AppxPackage# OneNote#Get-AppxPackage Microsoft.Office.OneNote | Remove-AppxPackage# PeopleGet-AppxPackage Microsoft.People | Remove-AppxPackage# PhoneGet-AppxPackage Microsoft.WindowsPhone | Remove-AppxPackage# PhotosGet-AppxPackage Microsoft.Windows.Photos | Remove-AppxPackage# PlexGet-AppxPackage *Plex* | Remove-AppxPackage# Skype (Metro version)Get-AppxPackage Microsoft.SkypeApp | Remove-AppxPackage# Sound RecorderGet-AppxPackage Microsoft.WindowsSoundRecorder | Remove-AppxPackage# SolitaireGet-AppxPackage *Solitaire* | Remove-AppxPackage# Sticky NotesGet-AppxPackage Microsoft.MicrosoftStickyNotes | Remove-AppxPackage# SwayGet-AppxPackage Microsoft.Office.Sway | Remove-AppxPackage# Twitter #eljefe: oh now hold on there... let's not get carried away...# Get-AppxPackage *Twitter* | Remove-AppxPackage# XboxGet-AppxPackage Microsoft.XboxApp | Remove-AppxPackageGet-AppxPackage Microsoft.XboxIdentityProvider | Remove-AppxPackage# Zune Music, Movies & TV#eljefe: with my last words i curse at thee, with my last breath, I spit at thee.Get-AppxPackage Microsoft.ZuneMusic | Remove-AppxPackageGet-AppxPackage Microsoft.ZuneVideo | Remove-AppxPackage#--- Windows Settings ---# Some from: @NickCraver's gist https://gist.github.com/NickCraver/7ebf9efbfd0c3eab72e9# Privacy: Let apps use my advertising ID: DisableIf (-Not (Test-Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\AdvertisingInfo")) { New-Item -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\AdvertisingInfo | Out-Null}Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\AdvertisingInfo -Name Enabled -Type DWord -Value 0# WiFi Sense: HotSpot Sharing: DisableIf (-Not (Test-Path "HKLM:\Software\Microsoft\PolicyManager\default\WiFi\AllowWiFiHotSpotReporting")) { New-Item -Path HKLM:\Software\Microsoft\PolicyManager\default\WiFi\AllowWiFiHotSpotReporting | Out-Null}Set-ItemProperty -Path HKLM:\Software\Microsoft\PolicyManager\default\WiFi\AllowWiFiHotSpotReporting -Name value -Type DWord -Value 0# WiFi Sense: Shared HotSpot Auto-Connect: DisableSet-ItemProperty -Path HKLM:\Software\Microsoft\PolicyManager\default\WiFi\AllowAutoConnectToWiFiSenseHotspots -Name value -Type DWord -Value 0# Start Menu: Disable Bing Search Results# ElJefe: You bet that if i'm protecting Bing Ima gonna be using Bing. and like it!
    Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Search -Name BingSearchEnabled -Type DWord -Value 0# To Restore (Enabled):#Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Search -Name BingSearchEnabled -Type DWord -Value 1# Disable Telemetry (requires a reboot to take effect)# Note this may break Insider builds for your organizationSet-ItemProperty -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\DataCollection -Name AllowTelemetry -Type DWord -Value 0Get-Service DiagTrack,Dmwappushservice | Stop-Service | Set-Service -StartupType Disabled# Change Explorer home screen back to "This PC"#Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced -Name LaunchTo -Type DWord -Value 1# Change it back to "Quick Access" (Windows 10 default)Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced -Name LaunchTo -Type DWord -Value # Better File ExplorerSet-ItemProperty -Path HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced -Name NavPaneExpandToCurrentFolder -Value 1 Set-ItemProperty -Path HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced -Name NavPaneShowAllFolders -Value 1 Set-ItemProperty -Path HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced -Name MMTaskbarMode -Value 2# These make "Quick Access" behave much closer to the old "Favorites"# ElJefe I got so much stuff I work on I'm usually looking at the last thing. ain't got time to not have bottom line up front. # Disable Quick Access: Recent Files#Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer -Name ShowRecent -Type DWord -Value 0# Disable Quick Access: Frequent Folders#Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer -Name ShowFrequent -Type DWord -Value 0# To Restore:Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer -Name ShowRecent -Type DWord -Value 1Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer -Name ShowFrequent -Type DWord -Value 1# Disable the Lock Screen (the one before password prompt - to prevent dropping the first character)#oh hell no!If (-Not (Test-Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\Personalization)) { New-Item -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows -Name Personalization | Out-Null}Set-ItemProperty -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\Personalization -Name NoLockScreen -Type DWord -Value 1# To Restore:#eljefe - there I fixed it: next line should be 0, or false.# Set-ItemProperty -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\Personalization -Name NoLockScreen -Type DWord -Value 0# Lock screen (not sleep) on lid closeSet-ItemProperty -Path 'HKLM:\SYSTEM\CurrentControlSet\Control\Session Manager\Power' -Name AwayModeEnabled -Type DWord -Value 1# To Restore:# Set-ItemProperty -Path 'HKLM:\SYSTEM\CurrentControlSet\Control\Session Manager\Power' -Name AwayModeEnabled -Type DWord -Value 0# Use the Windows 7-8.1 Style Volume Mixer#If (-Not (Test-Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MTCUVC")) {# New-Item -Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion" -Name MTCUVC | Out-Null#}#Set-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MTCUVC" -Name EnableMtcUvc -Type DWord -Value 0# To Restore (Windows 10 Style Volume Control):Set-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MTCUVC" -Name EnableMtcUvc -Type DWord -Value 1# Disable Xbox GamebarSet-ItemProperty -Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\GameDVR" -Name AppCaptureEnabled -Type DWord -Value 0Set-ItemProperty -Path "HKCU:\System\GameConfigStore" -Name GameDVR_Enabled -Type DWord -Value 0# Turn off People in TaskbarIf (-Not (Test-Path "HKCU:SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\People")) { New-Item -Path HKCU:SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\People | Out-Null}Set-ItemProperty -Path "HKCU:SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\People" -Name PeopleBand -Type DWord -Value 0#--- Restore Temporary Settings ---Enable-UACEnable-MicrosoftUpdateInstall-WindowsUpdate -acceptEula#--- Rename the Computer ---# Requires restart, or add the -Restart flag#eljefe I have a strange sence of humor...#$computername = "UNDETECTED"#if ($env:computername -ne $computername) {# Rename-Computer -NewName $computername#}
  4. kfalconspb revised this gist Oct 12, 2017. 1 changed file with 1 addition and 0 deletions.
    1 change: 1 addition & 0 deletions boxstarter.ps1
    Original file line number Diff line number Diff line change
    @@ -16,5 +16,6 @@ choco install nmap
    choco install vmwareworkstation
    choco install rvtools
    choco install office365proplus
    choco install postman
    #--- Uninstall unecessary applications that come with Windows out of the box ---# 3D BuilderGet-AppxPackage Microsoft.3DBuilder | Remove-AppxPackage# AlarmsGet-AppxPackage Microsoft.WindowsAlarms | Remove-AppxPackage# AutodeskGet-AppxPackage *Autodesk* | Remove-AppxPackage# Bing Weather, News, Sports, and Finance (Money):Get-AppxPackage Microsoft.BingFinance | Remove-AppxPackageGet-AppxPackage Microsoft.BingNews | Remove-AppxPackageGet-AppxPackage Microsoft.BingSports | Remove-AppxPackageGet-AppxPackage Microsoft.BingWeather | Remove-AppxPackage# BubbleWitchGet-AppxPackage *BubbleWitch* | Remove-AppxPackage# Candy CrushGet-AppxPackage king.com.CandyCrush* | Remove-AppxPackage# Comms PhoneGet-AppxPackage Microsoft.CommsPhone | Remove-AppxPackage# DellGet-AppxPackage *Dell* | Remove-AppxPackage# DropboxGet-AppxPackage *Dropbox* | Remove-AppxPackage# FacebookGet-AppxPackage *Facebook* | Remove-AppxPackage# Feedback HubGet-AppxPackage Microsoft.WindowsFeedbackHub | Remove-AppxPackage# Get StartedGet-AppxPackage Microsoft.Getstarted | Remove-AppxPackage# KeeperGet-AppxPackage *Keeper* | Remove-AppxPackage# Mail & CalendarGet-AppxPackage microsoft.windowscommunicationsapps | Remove-AppxPackage# MapsGet-AppxPackage Microsoft.WindowsMaps | Remove-AppxPackage# March of EmpiresGet-AppxPackage *MarchofEmpires* | Remove-AppxPackage# McAfee SecurityGet-AppxPackage *McAfee* | Remove-AppxPackage# Uninstall McAfee Security App$mcafee = gci "HKLM:\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall" | foreach { gp $_.PSPath } | ? { $_ -match "McAfee Security" } | select UninstallStringif ($mcafee) { $mcafee = $mcafee.UninstallString -Replace "C:\Program Files\McAfee\MSC\mcuihost.exe","" Write "Uninstalling McAfee..." start-process "C:\Program Files\McAfee\MSC\mcuihost.exe" -arg "$mcafee" -Wait}# MessagingGet-AppxPackage Microsoft.Messaging | Remove-AppxPackage# MinecraftGet-AppxPackage *Minecraft* | Remove-AppxPackage# NetflixGet-AppxPackage *Netflix* | Remove-AppxPackage# Office HubGet-AppxPackage Microsoft.MicrosoftOfficeHub | Remove-AppxPackage# One ConnectGet-AppxPackage Microsoft.OneConnect | Remove-AppxPackage# OneNote#Get-AppxPackage Microsoft.Office.OneNote | Remove-AppxPackage# PeopleGet-AppxPackage Microsoft.People | Remove-AppxPackage# PhoneGet-AppxPackage Microsoft.WindowsPhone | Remove-AppxPackage# PhotosGet-AppxPackage Microsoft.Windows.Photos | Remove-AppxPackage# PlexGet-AppxPackage *Plex* | Remove-AppxPackage# Skype (Metro version)Get-AppxPackage Microsoft.SkypeApp | Remove-AppxPackage# Sound RecorderGet-AppxPackage Microsoft.WindowsSoundRecorder | Remove-AppxPackage# SolitaireGet-AppxPackage *Solitaire* | Remove-AppxPackage# Sticky NotesGet-AppxPackage Microsoft.MicrosoftStickyNotes | Remove-AppxPackage# SwayGet-AppxPackage Microsoft.Office.Sway | Remove-AppxPackage# Twitter #eljefe: oh now hold on there... let's not get carried away...# Get-AppxPackage *Twitter* | Remove-AppxPackage# XboxGet-AppxPackage Microsoft.XboxApp | Remove-AppxPackageGet-AppxPackage Microsoft.XboxIdentityProvider | Remove-AppxPackage# Zune Music, Movies & TV#eljefe: with my last words i curse at thee, with my last breath, I spit at thee.Get-AppxPackage Microsoft.ZuneMusic | Remove-AppxPackageGet-AppxPackage Microsoft.ZuneVideo | Remove-AppxPackage#--- Windows Settings ---# Some from: @NickCraver's gist https://gist.github.com/NickCraver/7ebf9efbfd0c3eab72e9# Privacy: Let apps use my advertising ID: DisableIf (-Not (Test-Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\AdvertisingInfo")) { New-Item -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\AdvertisingInfo | Out-Null}Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\AdvertisingInfo -Name Enabled -Type DWord -Value 0# WiFi Sense: HotSpot Sharing: DisableIf (-Not (Test-Path "HKLM:\Software\Microsoft\PolicyManager\default\WiFi\AllowWiFiHotSpotReporting")) { New-Item -Path HKLM:\Software\Microsoft\PolicyManager\default\WiFi\AllowWiFiHotSpotReporting | Out-Null}Set-ItemProperty -Path HKLM:\Software\Microsoft\PolicyManager\default\WiFi\AllowWiFiHotSpotReporting -Name value -Type DWord -Value 0# WiFi Sense: Shared HotSpot Auto-Connect: DisableSet-ItemProperty -Path HKLM:\Software\Microsoft\PolicyManager\default\WiFi\AllowAutoConnectToWiFiSenseHotspots -Name value -Type DWord -Value 0# Start Menu: Disable Bing Search Results# ElJefe: You bet that if i'm protecting Bing Ima gonna be using Bing. and like it!
    Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Search -Name BingSearchEnabled -Type DWord -Value 0# To Restore (Enabled):#Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Search -Name BingSearchEnabled -Type DWord -Value 1# Disable Telemetry (requires a reboot to take effect)# Note this may break Insider builds for your organizationSet-ItemProperty -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\DataCollection -Name AllowTelemetry -Type DWord -Value 0Get-Service DiagTrack,Dmwappushservice | Stop-Service | Set-Service -StartupType Disabled# Change Explorer home screen back to "This PC"#Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced -Name LaunchTo -Type DWord -Value 1# Change it back to "Quick Access" (Windows 10 default)Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced -Name LaunchTo -Type DWord -Value # Better File ExplorerSet-ItemProperty -Path HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced -Name NavPaneExpandToCurrentFolder -Value 1 Set-ItemProperty -Path HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced -Name NavPaneShowAllFolders -Value 1 Set-ItemProperty -Path HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced -Name MMTaskbarMode -Value 2# These make "Quick Access" behave much closer to the old "Favorites"# ElJefe I got so much stuff I work on I'm usually looking at the last thing. ain't got time to not have bottom line up front. # Disable Quick Access: Recent Files#Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer -Name ShowRecent -Type DWord -Value 0# Disable Quick Access: Frequent Folders#Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer -Name ShowFrequent -Type DWord -Value 0# To Restore:Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer -Name ShowRecent -Type DWord -Value 1Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer -Name ShowFrequent -Type DWord -Value 1# Disable the Lock Screen (the one before password prompt - to prevent dropping the first character)#oh hell no!If (-Not (Test-Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\Personalization)) { New-Item -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows -Name Personalization | Out-Null}Set-ItemProperty -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\Personalization -Name NoLockScreen -Type DWord -Value 1# To Restore:#eljefe - there I fixed it: next line should be 0, or false.# Set-ItemProperty -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\Personalization -Name NoLockScreen -Type DWord -Value 0# Lock screen (not sleep) on lid closeSet-ItemProperty -Path 'HKLM:\SYSTEM\CurrentControlSet\Control\Session Manager\Power' -Name AwayModeEnabled -Type DWord -Value 1# To Restore:# Set-ItemProperty -Path 'HKLM:\SYSTEM\CurrentControlSet\Control\Session Manager\Power' -Name AwayModeEnabled -Type DWord -Value 0# Use the Windows 7-8.1 Style Volume Mixer#If (-Not (Test-Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MTCUVC")) {# New-Item -Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion" -Name MTCUVC | Out-Null#}#Set-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MTCUVC" -Name EnableMtcUvc -Type DWord -Value 0# To Restore (Windows 10 Style Volume Control):Set-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MTCUVC" -Name EnableMtcUvc -Type DWord -Value 1# Disable Xbox GamebarSet-ItemProperty -Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\GameDVR" -Name AppCaptureEnabled -Type DWord -Value 0Set-ItemProperty -Path "HKCU:\System\GameConfigStore" -Name GameDVR_Enabled -Type DWord -Value 0# Turn off People in TaskbarIf (-Not (Test-Path "HKCU:SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\People")) { New-Item -Path HKCU:SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\People | Out-Null}Set-ItemProperty -Path "HKCU:SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\People" -Name PeopleBand -Type DWord -Value 0#--- Restore Temporary Settings ---Enable-UACEnable-MicrosoftUpdateInstall-WindowsUpdate -acceptEula#--- Rename the Computer ---# Requires restart, or add the -Restart flag#eljefe I have a strange sence of humor...#$computername = "UNDETECTED"#if ($env:computername -ne $computername) {# Rename-Computer -NewName $computername#}
  5. kfalconspb revised this gist Oct 12, 2017. 1 changed file with 1 addition and 1 deletion.
    2 changes: 1 addition & 1 deletion boxstarter.ps1
    Original file line number Diff line number Diff line change
    @@ -1,4 +1,4 @@
    # Description: Boxstarter Script# Author: ElJefeDSecurIT # Last Updated: 2017-10-10## Install boxstarter:# . { iwr -useb http://boxstarter.org/bootstrapper.ps1 } | iex; get-boxstarter -Force## You might need to set: Set-ExecutionPolicy RemoteSigned## Run this boxstarter by calling the following from an **elevated** command-prompt:# start http://boxstarter.org/package/nr/url?<URL-TO-RAW-GIST># OR# Install-BoxstarterPackage -PackageName <URL-TO-RAW-GIST> -DisableReboots## Learn more: http://boxstarter.org/Learn/WebLauncher# heavily borrowed from Jessie, but I just have to tweak some things for my boxen. I have a couple of things I use for work, # a couple of things I use for home. this includes a bunch of core optimizations i've picked up over the years...# little things... small, exlusively paranoid things...#---- TEMPORARY ---Disable-UAC#---- PERMANENT ---# ElJEfe: for Ned Pyle, because, I blame him. Disable-WindowsOptionalFeature -Online -FeatureName SMB1Protocol#--- Fonts ---#ElJefe: sry I don't trust fonts I didn't review or came from the OS itself. #choco install inconsolata -y #--- Windows Settings --- #eljefe- I like Bing Search. so, there. Disable-BingSearchDisable-GameBarTipsSet-WindowsExplorerOptions -EnableShowHiddenFilesFoldersDrives -EnableShowProtectedOSFiles -EnableShowFileExtensionsSet-TaskbarOptions -Size Large -Dock Bottom -Combine Full # -Lock # i do not like locks on my taskbar. Set-TaskbarOptions -Size Large -Dock Bottom -Combine Full -AlwaysShowIconsOn#--- Windows Subsystems/Features ---#eljefe - Nice Job Jesse ;)#choco install Microsoft-Hyper-V-All -source windowsFeatureschoco install Microsoft-Windows-Subsystem-Linux -source windowsfeatures#--- Tools --- eljefe: I need git; any way i want it, that's the way I need it. i'll even get it in bash once i'm done. choco install git -params '"/GitAndUnixToolsOnPath /WindowsTerminal"' -ychoco install poshgitchoco install sysinternals -ychoco install vim#--- Apps ---choco install googlechrome#choco install docker-for-windows# choco install sharexchoco install microsoft-teams#choco install vcxsrv
    # Description: Boxstarter Script# Author: ElJefeDSecurIT # Last Updated: 2017-10-10## Install boxstarter:# . { iwr -useb http://boxstarter.org/bootstrapper.ps1 } | iex; get-boxstarter -Force## You might need to set: Set-ExecutionPolicy RemoteSigned## Run this boxstarter by calling the following from an **elevated** command-prompt:# start http://boxstarter.org/package/nr/url?<URL-TO-RAW-GIST># OR# Install-BoxstarterPackage -PackageName <URL-TO-RAW-GIST> -DisableReboots## Learn more: http://boxstarter.org/Learn/WebLauncher# heavily borrowed from Jessie, but I just have to tweak some things for my boxen. I have a couple of things I use for work, # a couple of things I use for home. this includes a bunch of core optimizations i've picked up over the years...# little things... small, exlusively paranoid things...#---- TEMPORARY ---Disable-UAC#---- PERMANENT ---# ElJEfe: for Ned Pyle, because, I blame him. Disable-WindowsOptionalFeature -Online -FeatureName SMB1Protocol#--- Fonts ---#ElJefe: sry I don't trust fonts I didn't review or came from the OS itself. #choco install inconsolata -y #--- Windows Settings --- #eljefe- I like Bing Search. so, there. Disable-BingSearchDisable-GameBarTipsSet-WindowsExplorerOptions -EnableShowHiddenFilesFoldersDrives -EnableShowProtectedOSFiles -EnableShowFileExtensionsSet-TaskbarOptions -Size Large -Dock Bottom -Combine Full # -Lock # i do not like locks on my taskbar. Set-TaskbarOptions -Size Large -Dock Bottom -Combine Full -AlwaysShowIconsOn#--- Windows Subsystems/Features ---#eljefe - Nice Job Jesse ;)# choco install Microsoft-Hyper-V-All -source windowsFeatures# choco install Microsoft-Windows-Subsystem-Linux -source windowsfeatures#--- Tools --- eljefe: I need git; any way i want it, that's the way I need it. i'll even get it in bash once i'm done. choco install git -params '"/GitAndUnixToolsOnPath /WindowsTerminal"' -ychoco install poshgitchoco install sysinternals -ychoco install vim#--- Apps ---choco install googlechrome# choco install docker-for-windows# choco install sharexchoco install microsoft-teams# choco install vcxsrv
    choco install adobereader
    choco install jre8
    choco install firefox
  6. kfalconspb revised this gist Oct 12, 2017. 1 changed file with 1 addition and 1 deletion.
    2 changes: 1 addition & 1 deletion boxstarter.ps1
    Original file line number Diff line number Diff line change
    @@ -1,4 +1,4 @@
    # Description: Boxstarter Script# Author: ElJefeDSecurIT # Last Updated: 2017-10-10## Install boxstarter:# . { iwr -useb http://boxstarter.org/bootstrapper.ps1 } | iex; get-boxstarter -Force## You might need to set: Set-ExecutionPolicy RemoteSigned## Run this boxstarter by calling the following from an **elevated** command-prompt:# start http://boxstarter.org/package/nr/url?<URL-TO-RAW-GIST># OR# Install-BoxstarterPackage -PackageName <URL-TO-RAW-GIST> -DisableReboots## Learn more: http://boxstarter.org/Learn/WebLauncher# heavily borrowed from Jessie, but I just have to tweak some things for my boxen. I have a couple of things I use for work, # a couple of things I use for home. this includes a bunch of core optimizations i've picked up over the years...# little things... small, exlusively paranoid things...#---- TEMPORARY ---Disable-UAC#---- PERMANENT ---# ElJEfe: for Ned Pyle, because, I blame him. Disable-WindowsOptionalFeature -Online -FeatureName SMB1Protocol#--- Fonts ---#ElJefe: sry I don't trust fonts I didn't review or came from the OS itself. #choco install inconsolata -y #--- Windows Settings --- #eljefe- I like Bing Search. so, there. Disable-BingSearchDisable-GameBarTipsSet-WindowsExplorerOptions -EnableShowHiddenFilesFoldersDrives -EnableShowProtectedOSFiles -EnableShowFileExtensionsSet-TaskbarOptions -Size Large -Dock Bottom -Combine Full # -Lock # i do not like locks on my taskbar. Set-TaskbarOptions -Size Large -Dock Bottom -Combine Full -AlwaysShowIconsOn#--- Windows Subsystems/Features ---#eljefe - Nice Job Jesse ;)#choco install Microsoft-Hyper-V-All -source windowsFeatureschoco install Microsoft-Windows-Subsystem-Linux -source windowsfeatures#--- Tools --- eljefe: I need git; any way i want it, that's the way I need it. i'll even get it in bash once i'm done. choco install git -params '"/GitAndUnixToolsOnPath /WindowsTerminal"' -ychoco install poshgitchoco install sysinternals -ychoco install vim#--- Apps ---choco install googlechromechoco install docker-for-windows# choco install sharexchoco install microsoft-teams#choco install vcxsrv
    # Description: Boxstarter Script# Author: ElJefeDSecurIT # Last Updated: 2017-10-10## Install boxstarter:# . { iwr -useb http://boxstarter.org/bootstrapper.ps1 } | iex; get-boxstarter -Force## You might need to set: Set-ExecutionPolicy RemoteSigned## Run this boxstarter by calling the following from an **elevated** command-prompt:# start http://boxstarter.org/package/nr/url?<URL-TO-RAW-GIST># OR# Install-BoxstarterPackage -PackageName <URL-TO-RAW-GIST> -DisableReboots## Learn more: http://boxstarter.org/Learn/WebLauncher# heavily borrowed from Jessie, but I just have to tweak some things for my boxen. I have a couple of things I use for work, # a couple of things I use for home. this includes a bunch of core optimizations i've picked up over the years...# little things... small, exlusively paranoid things...#---- TEMPORARY ---Disable-UAC#---- PERMANENT ---# ElJEfe: for Ned Pyle, because, I blame him. Disable-WindowsOptionalFeature -Online -FeatureName SMB1Protocol#--- Fonts ---#ElJefe: sry I don't trust fonts I didn't review or came from the OS itself. #choco install inconsolata -y #--- Windows Settings --- #eljefe- I like Bing Search. so, there. Disable-BingSearchDisable-GameBarTipsSet-WindowsExplorerOptions -EnableShowHiddenFilesFoldersDrives -EnableShowProtectedOSFiles -EnableShowFileExtensionsSet-TaskbarOptions -Size Large -Dock Bottom -Combine Full # -Lock # i do not like locks on my taskbar. Set-TaskbarOptions -Size Large -Dock Bottom -Combine Full -AlwaysShowIconsOn#--- Windows Subsystems/Features ---#eljefe - Nice Job Jesse ;)#choco install Microsoft-Hyper-V-All -source windowsFeatureschoco install Microsoft-Windows-Subsystem-Linux -source windowsfeatures#--- Tools --- eljefe: I need git; any way i want it, that's the way I need it. i'll even get it in bash once i'm done. choco install git -params '"/GitAndUnixToolsOnPath /WindowsTerminal"' -ychoco install poshgitchoco install sysinternals -ychoco install vim#--- Apps ---choco install googlechrome#choco install docker-for-windows# choco install sharexchoco install microsoft-teams#choco install vcxsrv
    choco install adobereader
    choco install jre8
    choco install firefox
  7. kfalconspb revised this gist Oct 12, 2017. 1 changed file with 19 additions and 1 deletion.
    20 changes: 19 additions & 1 deletion boxstarter.ps1
    Original file line number Diff line number Diff line change
    @@ -1,2 +1,20 @@
    # Description: Boxstarter Script# Author: ElJefeDSecurIT # Last Updated: 2017-10-10## Install boxstarter:# . { iwr -useb http://boxstarter.org/bootstrapper.ps1 } | iex; get-boxstarter -Force## You might need to set: Set-ExecutionPolicy RemoteSigned## Run this boxstarter by calling the following from an **elevated** command-prompt:# start http://boxstarter.org/package/nr/url?<URL-TO-RAW-GIST># OR# Install-BoxstarterPackage -PackageName <URL-TO-RAW-GIST> -DisableReboots## Learn more: http://boxstarter.org/Learn/WebLauncher# heavily borrowed from Jessie, but I just have to tweak some things for my boxen. I have a couple of things I use for work, # a couple of things I use for home. this includes a bunch of core optimizations i've picked up over the years...# little things... small, exlusively paranoid things...#---- TEMPORARY ---Disable-UAC#---- PERMANENT ---# ElJEfe: for Ned Pyle, because, I blame him. Disable-WindowsOptionalFeature -Online -FeatureName SMB1Protocol#--- Fonts ---#ElJefe: sry I don't trust fonts I didn't review or came from the OS itself. #choco install inconsolata -y #--- Windows Settings --- #eljefe- I like Bing Search. so, there. Disable-BingSearchDisable-GameBarTipsSet-WindowsExplorerOptions -EnableShowHiddenFilesFoldersDrives -EnableShowProtectedOSFiles -EnableShowFileExtensionsSet-TaskbarOptions -Size Large -Dock Bottom -Combine Full # -Lock # i do not like locks on my taskbar. Set-TaskbarOptions -Size Large -Dock Bottom -Combine Full -AlwaysShowIconsOn#--- Windows Subsystems/Features ---#eljefe - Nice Job Jesse ;)#choco install Microsoft-Hyper-V-All -source windowsFeatureschoco install Microsoft-Windows-Subsystem-Linux -source windowsfeatures#--- Tools --- eljefe: I need git; any way i want it, that's the way I need it. i'll even get it in bash once i'm done. choco install git -params '"/GitAndUnixToolsOnPath /WindowsTerminal"' -ychoco install poshgitchoco install sysinternals -ychoco install vim#--- Apps ---choco install googlechromechoco install docker-for-windows# choco install sharexchoco install microsoft-teams#choco install vcxsrv#--- Uninstall unecessary applications that come with Windows out of the box ---# 3D BuilderGet-AppxPackage Microsoft.3DBuilder | Remove-AppxPackage# AlarmsGet-AppxPackage Microsoft.WindowsAlarms | Remove-AppxPackage# AutodeskGet-AppxPackage *Autodesk* | Remove-AppxPackage# Bing Weather, News, Sports, and Finance (Money):Get-AppxPackage Microsoft.BingFinance | Remove-AppxPackageGet-AppxPackage Microsoft.BingNews | Remove-AppxPackageGet-AppxPackage Microsoft.BingSports | Remove-AppxPackageGet-AppxPackage Microsoft.BingWeather | Remove-AppxPackage# BubbleWitchGet-AppxPackage *BubbleWitch* | Remove-AppxPackage# Candy CrushGet-AppxPackage king.com.CandyCrush* | Remove-AppxPackage# Comms PhoneGet-AppxPackage Microsoft.CommsPhone | Remove-AppxPackage# DellGet-AppxPackage *Dell* | Remove-AppxPackage# DropboxGet-AppxPackage *Dropbox* | Remove-AppxPackage# FacebookGet-AppxPackage *Facebook* | Remove-AppxPackage# Feedback HubGet-AppxPackage Microsoft.WindowsFeedbackHub | Remove-AppxPackage# Get StartedGet-AppxPackage Microsoft.Getstarted | Remove-AppxPackage# KeeperGet-AppxPackage *Keeper* | Remove-AppxPackage# Mail & CalendarGet-AppxPackage microsoft.windowscommunicationsapps | Remove-AppxPackage# MapsGet-AppxPackage Microsoft.WindowsMaps | Remove-AppxPackage# March of EmpiresGet-AppxPackage *MarchofEmpires* | Remove-AppxPackage# McAfee SecurityGet-AppxPackage *McAfee* | Remove-AppxPackage# Uninstall McAfee Security App$mcafee = gci "HKLM:\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall" | foreach { gp $_.PSPath } | ? { $_ -match "McAfee Security" } | select UninstallStringif ($mcafee) { $mcafee = $mcafee.UninstallString -Replace "C:\Program Files\McAfee\MSC\mcuihost.exe","" Write "Uninstalling McAfee..." start-process "C:\Program Files\McAfee\MSC\mcuihost.exe" -arg "$mcafee" -Wait}# MessagingGet-AppxPackage Microsoft.Messaging | Remove-AppxPackage# MinecraftGet-AppxPackage *Minecraft* | Remove-AppxPackage# NetflixGet-AppxPackage *Netflix* | Remove-AppxPackage# Office HubGet-AppxPackage Microsoft.MicrosoftOfficeHub | Remove-AppxPackage# One ConnectGet-AppxPackage Microsoft.OneConnect | Remove-AppxPackage# OneNote#Get-AppxPackage Microsoft.Office.OneNote | Remove-AppxPackage# PeopleGet-AppxPackage Microsoft.People | Remove-AppxPackage# PhoneGet-AppxPackage Microsoft.WindowsPhone | Remove-AppxPackage# PhotosGet-AppxPackage Microsoft.Windows.Photos | Remove-AppxPackage# PlexGet-AppxPackage *Plex* | Remove-AppxPackage# Skype (Metro version)Get-AppxPackage Microsoft.SkypeApp | Remove-AppxPackage# Sound RecorderGet-AppxPackage Microsoft.WindowsSoundRecorder | Remove-AppxPackage# SolitaireGet-AppxPackage *Solitaire* | Remove-AppxPackage# Sticky NotesGet-AppxPackage Microsoft.MicrosoftStickyNotes | Remove-AppxPackage# SwayGet-AppxPackage Microsoft.Office.Sway | Remove-AppxPackage# Twitter #eljefe: oh now hold on there... let's not get carried away...# Get-AppxPackage *Twitter* | Remove-AppxPackage# XboxGet-AppxPackage Microsoft.XboxApp | Remove-AppxPackageGet-AppxPackage Microsoft.XboxIdentityProvider | Remove-AppxPackage# Zune Music, Movies & TV#eljefe: with my last words i curse at thee, with my last breath, I spit at thee.Get-AppxPackage Microsoft.ZuneMusic | Remove-AppxPackageGet-AppxPackage Microsoft.ZuneVideo | Remove-AppxPackage#--- Windows Settings ---# Some from: @NickCraver's gist https://gist.github.com/NickCraver/7ebf9efbfd0c3eab72e9# Privacy: Let apps use my advertising ID: DisableIf (-Not (Test-Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\AdvertisingInfo")) { New-Item -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\AdvertisingInfo | Out-Null}Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\AdvertisingInfo -Name Enabled -Type DWord -Value 0# WiFi Sense: HotSpot Sharing: DisableIf (-Not (Test-Path "HKLM:\Software\Microsoft\PolicyManager\default\WiFi\AllowWiFiHotSpotReporting")) { New-Item -Path HKLM:\Software\Microsoft\PolicyManager\default\WiFi\AllowWiFiHotSpotReporting | Out-Null}Set-ItemProperty -Path HKLM:\Software\Microsoft\PolicyManager\default\WiFi\AllowWiFiHotSpotReporting -Name value -Type DWord -Value 0# WiFi Sense: Shared HotSpot Auto-Connect: DisableSet-ItemProperty -Path HKLM:\Software\Microsoft\PolicyManager\default\WiFi\AllowAutoConnectToWiFiSenseHotspots -Name value -Type DWord -Value 0# Start Menu: Disable Bing Search Results# ElJefe: You bet that if i'm protecting Bing Ima gonna be using Bing. and like it!
    # Description: Boxstarter Script# Author: ElJefeDSecurIT # Last Updated: 2017-10-10## Install boxstarter:# . { iwr -useb http://boxstarter.org/bootstrapper.ps1 } | iex; get-boxstarter -Force## You might need to set: Set-ExecutionPolicy RemoteSigned## Run this boxstarter by calling the following from an **elevated** command-prompt:# start http://boxstarter.org/package/nr/url?<URL-TO-RAW-GIST># OR# Install-BoxstarterPackage -PackageName <URL-TO-RAW-GIST> -DisableReboots## Learn more: http://boxstarter.org/Learn/WebLauncher# heavily borrowed from Jessie, but I just have to tweak some things for my boxen. I have a couple of things I use for work, # a couple of things I use for home. this includes a bunch of core optimizations i've picked up over the years...# little things... small, exlusively paranoid things...#---- TEMPORARY ---Disable-UAC#---- PERMANENT ---# ElJEfe: for Ned Pyle, because, I blame him. Disable-WindowsOptionalFeature -Online -FeatureName SMB1Protocol#--- Fonts ---#ElJefe: sry I don't trust fonts I didn't review or came from the OS itself. #choco install inconsolata -y #--- Windows Settings --- #eljefe- I like Bing Search. so, there. Disable-BingSearchDisable-GameBarTipsSet-WindowsExplorerOptions -EnableShowHiddenFilesFoldersDrives -EnableShowProtectedOSFiles -EnableShowFileExtensionsSet-TaskbarOptions -Size Large -Dock Bottom -Combine Full # -Lock # i do not like locks on my taskbar. Set-TaskbarOptions -Size Large -Dock Bottom -Combine Full -AlwaysShowIconsOn#--- Windows Subsystems/Features ---#eljefe - Nice Job Jesse ;)#choco install Microsoft-Hyper-V-All -source windowsFeatureschoco install Microsoft-Windows-Subsystem-Linux -source windowsfeatures#--- Tools --- eljefe: I need git; any way i want it, that's the way I need it. i'll even get it in bash once i'm done. choco install git -params '"/GitAndUnixToolsOnPath /WindowsTerminal"' -ychoco install poshgitchoco install sysinternals -ychoco install vim#--- Apps ---choco install googlechromechoco install docker-for-windows# choco install sharexchoco install microsoft-teams#choco install vcxsrv
    choco install adobereader
    choco install jre8
    choco install firefox
    choco install 7zip.install
    choco install notepadplusplus.install
    choco install powershell
    choco install curl
    choco install putty
    choco install chocolately gui
    choco install winscp.install
    choco install wireshark
    choco install boxstarter.common
    choco install citrix-receiver
    choco install nmap
    choco install vmwareworkstation
    choco install rvtools
    choco install office365proplus
    #--- Uninstall unecessary applications that come with Windows out of the box ---# 3D BuilderGet-AppxPackage Microsoft.3DBuilder | Remove-AppxPackage# AlarmsGet-AppxPackage Microsoft.WindowsAlarms | Remove-AppxPackage# AutodeskGet-AppxPackage *Autodesk* | Remove-AppxPackage# Bing Weather, News, Sports, and Finance (Money):Get-AppxPackage Microsoft.BingFinance | Remove-AppxPackageGet-AppxPackage Microsoft.BingNews | Remove-AppxPackageGet-AppxPackage Microsoft.BingSports | Remove-AppxPackageGet-AppxPackage Microsoft.BingWeather | Remove-AppxPackage# BubbleWitchGet-AppxPackage *BubbleWitch* | Remove-AppxPackage# Candy CrushGet-AppxPackage king.com.CandyCrush* | Remove-AppxPackage# Comms PhoneGet-AppxPackage Microsoft.CommsPhone | Remove-AppxPackage# DellGet-AppxPackage *Dell* | Remove-AppxPackage# DropboxGet-AppxPackage *Dropbox* | Remove-AppxPackage# FacebookGet-AppxPackage *Facebook* | Remove-AppxPackage# Feedback HubGet-AppxPackage Microsoft.WindowsFeedbackHub | Remove-AppxPackage# Get StartedGet-AppxPackage Microsoft.Getstarted | Remove-AppxPackage# KeeperGet-AppxPackage *Keeper* | Remove-AppxPackage# Mail & CalendarGet-AppxPackage microsoft.windowscommunicationsapps | Remove-AppxPackage# MapsGet-AppxPackage Microsoft.WindowsMaps | Remove-AppxPackage# March of EmpiresGet-AppxPackage *MarchofEmpires* | Remove-AppxPackage# McAfee SecurityGet-AppxPackage *McAfee* | Remove-AppxPackage# Uninstall McAfee Security App$mcafee = gci "HKLM:\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall" | foreach { gp $_.PSPath } | ? { $_ -match "McAfee Security" } | select UninstallStringif ($mcafee) { $mcafee = $mcafee.UninstallString -Replace "C:\Program Files\McAfee\MSC\mcuihost.exe","" Write "Uninstalling McAfee..." start-process "C:\Program Files\McAfee\MSC\mcuihost.exe" -arg "$mcafee" -Wait}# MessagingGet-AppxPackage Microsoft.Messaging | Remove-AppxPackage# MinecraftGet-AppxPackage *Minecraft* | Remove-AppxPackage# NetflixGet-AppxPackage *Netflix* | Remove-AppxPackage# Office HubGet-AppxPackage Microsoft.MicrosoftOfficeHub | Remove-AppxPackage# One ConnectGet-AppxPackage Microsoft.OneConnect | Remove-AppxPackage# OneNote#Get-AppxPackage Microsoft.Office.OneNote | Remove-AppxPackage# PeopleGet-AppxPackage Microsoft.People | Remove-AppxPackage# PhoneGet-AppxPackage Microsoft.WindowsPhone | Remove-AppxPackage# PhotosGet-AppxPackage Microsoft.Windows.Photos | Remove-AppxPackage# PlexGet-AppxPackage *Plex* | Remove-AppxPackage# Skype (Metro version)Get-AppxPackage Microsoft.SkypeApp | Remove-AppxPackage# Sound RecorderGet-AppxPackage Microsoft.WindowsSoundRecorder | Remove-AppxPackage# SolitaireGet-AppxPackage *Solitaire* | Remove-AppxPackage# Sticky NotesGet-AppxPackage Microsoft.MicrosoftStickyNotes | Remove-AppxPackage# SwayGet-AppxPackage Microsoft.Office.Sway | Remove-AppxPackage# Twitter #eljefe: oh now hold on there... let's not get carried away...# Get-AppxPackage *Twitter* | Remove-AppxPackage# XboxGet-AppxPackage Microsoft.XboxApp | Remove-AppxPackageGet-AppxPackage Microsoft.XboxIdentityProvider | Remove-AppxPackage# Zune Music, Movies & TV#eljefe: with my last words i curse at thee, with my last breath, I spit at thee.Get-AppxPackage Microsoft.ZuneMusic | Remove-AppxPackageGet-AppxPackage Microsoft.ZuneVideo | Remove-AppxPackage#--- Windows Settings ---# Some from: @NickCraver's gist https://gist.github.com/NickCraver/7ebf9efbfd0c3eab72e9# Privacy: Let apps use my advertising ID: DisableIf (-Not (Test-Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\AdvertisingInfo")) { New-Item -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\AdvertisingInfo | Out-Null}Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\AdvertisingInfo -Name Enabled -Type DWord -Value 0# WiFi Sense: HotSpot Sharing: DisableIf (-Not (Test-Path "HKLM:\Software\Microsoft\PolicyManager\default\WiFi\AllowWiFiHotSpotReporting")) { New-Item -Path HKLM:\Software\Microsoft\PolicyManager\default\WiFi\AllowWiFiHotSpotReporting | Out-Null}Set-ItemProperty -Path HKLM:\Software\Microsoft\PolicyManager\default\WiFi\AllowWiFiHotSpotReporting -Name value -Type DWord -Value 0# WiFi Sense: Shared HotSpot Auto-Connect: DisableSet-ItemProperty -Path HKLM:\Software\Microsoft\PolicyManager\default\WiFi\AllowAutoConnectToWiFiSenseHotspots -Name value -Type DWord -Value 0# Start Menu: Disable Bing Search Results# ElJefe: You bet that if i'm protecting Bing Ima gonna be using Bing. and like it!
    Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Search -Name BingSearchEnabled -Type DWord -Value 0# To Restore (Enabled):#Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Search -Name BingSearchEnabled -Type DWord -Value 1# Disable Telemetry (requires a reboot to take effect)# Note this may break Insider builds for your organizationSet-ItemProperty -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\DataCollection -Name AllowTelemetry -Type DWord -Value 0Get-Service DiagTrack,Dmwappushservice | Stop-Service | Set-Service -StartupType Disabled# Change Explorer home screen back to "This PC"#Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced -Name LaunchTo -Type DWord -Value 1# Change it back to "Quick Access" (Windows 10 default)Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced -Name LaunchTo -Type DWord -Value # Better File ExplorerSet-ItemProperty -Path HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced -Name NavPaneExpandToCurrentFolder -Value 1 Set-ItemProperty -Path HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced -Name NavPaneShowAllFolders -Value 1 Set-ItemProperty -Path HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced -Name MMTaskbarMode -Value 2# These make "Quick Access" behave much closer to the old "Favorites"# ElJefe I got so much stuff I work on I'm usually looking at the last thing. ain't got time to not have bottom line up front. # Disable Quick Access: Recent Files#Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer -Name ShowRecent -Type DWord -Value 0# Disable Quick Access: Frequent Folders#Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer -Name ShowFrequent -Type DWord -Value 0# To Restore:Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer -Name ShowRecent -Type DWord -Value 1Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer -Name ShowFrequent -Type DWord -Value 1# Disable the Lock Screen (the one before password prompt - to prevent dropping the first character)#oh hell no!If (-Not (Test-Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\Personalization)) { New-Item -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows -Name Personalization | Out-Null}Set-ItemProperty -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\Personalization -Name NoLockScreen -Type DWord -Value 1# To Restore:#eljefe - there I fixed it: next line should be 0, or false.# Set-ItemProperty -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\Personalization -Name NoLockScreen -Type DWord -Value 0# Lock screen (not sleep) on lid closeSet-ItemProperty -Path 'HKLM:\SYSTEM\CurrentControlSet\Control\Session Manager\Power' -Name AwayModeEnabled -Type DWord -Value 1# To Restore:# Set-ItemProperty -Path 'HKLM:\SYSTEM\CurrentControlSet\Control\Session Manager\Power' -Name AwayModeEnabled -Type DWord -Value 0# Use the Windows 7-8.1 Style Volume Mixer#If (-Not (Test-Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MTCUVC")) {# New-Item -Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion" -Name MTCUVC | Out-Null#}#Set-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MTCUVC" -Name EnableMtcUvc -Type DWord -Value 0# To Restore (Windows 10 Style Volume Control):Set-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MTCUVC" -Name EnableMtcUvc -Type DWord -Value 1# Disable Xbox GamebarSet-ItemProperty -Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\GameDVR" -Name AppCaptureEnabled -Type DWord -Value 0Set-ItemProperty -Path "HKCU:\System\GameConfigStore" -Name GameDVR_Enabled -Type DWord -Value 0# Turn off People in TaskbarIf (-Not (Test-Path "HKCU:SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\People")) { New-Item -Path HKCU:SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\People | Out-Null}Set-ItemProperty -Path "HKCU:SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\People" -Name PeopleBand -Type DWord -Value 0#--- Restore Temporary Settings ---Enable-UACEnable-MicrosoftUpdateInstall-WindowsUpdate -acceptEula#--- Rename the Computer ---# Requires restart, or add the -Restart flag#eljefe I have a strange sence of humor...#$computername = "UNDETECTED"#if ($env:computername -ne $computername) {# Rename-Computer -NewName $computername#}
  8. kfalconspb revised this gist Oct 12, 2017. 1 changed file with 1 addition and 1 deletion.
    2 changes: 1 addition & 1 deletion boxstarter.ps1
    Original file line number Diff line number Diff line change
    @@ -1,2 +1,2 @@
    # Description: Boxstarter Script# Author: ElJefeDSecurIT # Last Updated: 2017-10-10## Install boxstarter:# . { iwr -useb http://boxstarter.org/bootstrapper.ps1 } | iex; get-boxstarter -Force## You might need to set: Set-ExecutionPolicy RemoteSigned## Run this boxstarter by calling the following from an **elevated** command-prompt:# start http://boxstarter.org/package/nr/url?<URL-TO-RAW-GIST># OR# Install-BoxstarterPackage -PackageName <URL-TO-RAW-GIST> -DisableReboots## Learn more: http://boxstarter.org/Learn/WebLauncher# heavily borrowed from Jessie, but I just have to tweak some things for my boxen. I have a couple of things I use for work, # a couple of things I use for home. this includes a bunch of core optimizations i've picked up over the years...# little things... small, exlusively paranoid things...#---- TEMPORARY ---Disable-UAC#---- PERMANENT ---# ElJEfe: for Ned Pyle, because, I blame him. Disable-WindowsOptionalFeature -Online -FeatureName SMB1Protocol#--- Fonts ---#ElJefe: sry I don't trust fonts I didn't review or came from the OS itself. #choco install inconsolata -y #--- Windows Settings --- #eljefe- I like Bing Search. so, there. Disable-BingSearchDisable-GameBarTipsSet-WindowsExplorerOptions -EnableShowHiddenFilesFoldersDrives -EnableShowProtectedOSFiles -EnableShowFileExtensionsSet-TaskbarOptions -Size Large -Dock Bottom -Combine Full # -Lock # i do not like locks on my taskbar. Set-TaskbarOptions -Size Large -Dock Bottom -Combine Full -AlwaysShowIconsOn#--- Windows Subsystems/Features ---#eljefe - Nice Job Jesse ;)#choco install Microsoft-Hyper-V-All -source windowsFeatureschoco install Microsoft-Windows-Subsystem-Linux -source windowsfeatures#--- Tools --- eljefe: I need git; any way i want it, that's the way I need it. i'll even get it in bash once i'm done. choco install git -params '"/GitAndUnixToolsOnPath /WindowsTerminal"' -ychoco install poshgitchoco install sysinternals -ychoco install vim#--- Apps ---choco install googlechromechoco install docker-for-windows# choco install sharexchoco install microsoft-teams#choco install vcxsrv#--- Uninstall unecessary applications that come with Windows out of the box ---# 3D BuilderGet-AppxPackage Microsoft.3DBuilder | Remove-AppxPackage# AlarmsGet-AppxPackage Microsoft.WindowsAlarms | Remove-AppxPackage# AutodeskGet-AppxPackage *Autodesk* | Remove-AppxPackage# Bing Weather, News, Sports, and Finance (Money):Get-AppxPackage Microsoft.BingFinance | Remove-AppxPackageGet-AppxPackage Microsoft.BingNews | Remove-AppxPackageGet-AppxPackage Microsoft.BingSports | Remove-AppxPackageGet-AppxPackage Microsoft.BingWeather | Remove-AppxPackage# BubbleWitchGet-AppxPackage *BubbleWitch* | Remove-AppxPackage# Candy CrushGet-AppxPackage king.com.CandyCrush* | Remove-AppxPackage# Comms PhoneGet-AppxPackage Microsoft.CommsPhone | Remove-AppxPackage# DellGet-AppxPackage *Dell* | Remove-AppxPackage# DropboxGet-AppxPackage *Dropbox* | Remove-AppxPackage# FacebookGet-AppxPackage *Facebook* | Remove-AppxPackage# Feedback HubGet-AppxPackage Microsoft.WindowsFeedbackHub | Remove-AppxPackage# Get StartedGet-AppxPackage Microsoft.Getstarted | Remove-AppxPackage# KeeperGet-AppxPackage *Keeper* | Remove-AppxPackage# Mail & CalendarGet-AppxPackage microsoft.windowscommunicationsapps | Remove-AppxPackage# MapsGet-AppxPackage Microsoft.WindowsMaps | Remove-AppxPackage# March of EmpiresGet-AppxPackage *MarchofEmpires* | Remove-AppxPackage# McAfee SecurityGet-AppxPackage *McAfee* | Remove-AppxPackage# Uninstall McAfee Security App$mcafee = gci "HKLM:\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall" | foreach { gp $_.PSPath } | ? { $_ -match "McAfee Security" } | select UninstallStringif ($mcafee) { $mcafee = $mcafee.UninstallString -Replace "C:\Program Files\McAfee\MSC\mcuihost.exe","" Write "Uninstalling McAfee..." start-process "C:\Program Files\McAfee\MSC\mcuihost.exe" -arg "$mcafee" -Wait}# MessagingGet-AppxPackage Microsoft.Messaging | Remove-AppxPackage# MinecraftGet-AppxPackage *Minecraft* | Remove-AppxPackage# NetflixGet-AppxPackage *Netflix* | Remove-AppxPackage# Office HubGet-AppxPackage Microsoft.MicrosoftOfficeHub | Remove-AppxPackage# One ConnectGet-AppxPackage Microsoft.OneConnect | Remove-AppxPackage# OneNote#Get-AppxPackage Microsoft.Office.OneNote | Remove-AppxPackage# PeopleGet-AppxPackage Microsoft.People | Remove-AppxPackage# PhoneGet-AppxPackage Microsoft.WindowsPhone | Remove-AppxPackage# PhotosGet-AppxPackage Microsoft.Windows.Photos | Remove-AppxPackage# PlexGet-AppxPackage *Plex* | Remove-AppxPackage# Skype (Metro version)Get-AppxPackage Microsoft.SkypeApp | Remove-AppxPackage# Sound RecorderGet-AppxPackage Microsoft.WindowsSoundRecorder | Remove-AppxPackage# SolitaireGet-AppxPackage *Solitaire* | Remove-AppxPackage# Sticky NotesGet-AppxPackage Microsoft.MicrosoftStickyNotes | Remove-AppxPackage# SwayGet-AppxPackage Microsoft.Office.Sway | Remove-AppxPackage# Twitter #eljefe: oh now hold on there... let's not get carried away...# Get-AppxPackage *Twitter* | Remove-AppxPackage# XboxGet-AppxPackage Microsoft.XboxApp | Remove-AppxPackageGet-AppxPackage Microsoft.XboxIdentityProvider | Remove-AppxPackage# Zune Music, Movies & TV#eljefe: with my last words i curse at thee, with my last breath, I spit at thee.Get-AppxPackage Microsoft.ZuneMusic | Remove-AppxPackageGet-AppxPackage Microsoft.ZuneVideo | Remove-AppxPackage#--- Windows Settings ---# Some from: @NickCraver's gist https://gist.github.com/NickCraver/7ebf9efbfd0c3eab72e9# Privacy: Let apps use my advertising ID: DisableIf (-Not (Test-Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\AdvertisingInfo")) { New-Item -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\AdvertisingInfo | Out-Null}Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\AdvertisingInfo -Name Enabled -Type DWord -Value 0# WiFi Sense: HotSpot Sharing: DisableIf (-Not (Test-Path "HKLM:\Software\Microsoft\PolicyManager\default\WiFi\AllowWiFiHotSpotReporting")) { New-Item -Path HKLM:\Software\Microsoft\PolicyManager\default\WiFi\AllowWiFiHotSpotReporting | Out-Null}Set-ItemProperty -Path HKLM:\Software\Microsoft\PolicyManager\default\WiFi\AllowWiFiHotSpotReporting -Name value -Type DWord -Value 0# WiFi Sense: Shared HotSpot Auto-Connect: DisableSet-ItemProperty -Path HKLM:\Software\Microsoft\PolicyManager\default\WiFi\AllowAutoConnectToWiFiSenseHotspots -Name value -Type DWord -Value 0# Start Menu: Disable Bing Search Results# ElJefe: You bet that if i'm protecting Bing Ima gonna be using Bing. and like it!
    Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Search -Name BingSearchEnabled -Type DWord -Value 0# To Restore (Enabled):#Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Search -Name BingSearchEnabled -Type DWord -Value 1# Disable Telemetry (requires a reboot to take effect)# Note this may break Insider builds for your organization# Set-ItemProperty -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\DataCollection -Name AllowTelemetry -Type DWord -Value 0# Get-Service DiagTrack,Dmwappushservice | Stop-Service | Set-Service -StartupType Disabled# Change Explorer home screen back to "This PC"#Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced -Name LaunchTo -Type DWord -Value 1# Change it back to "Quick Access" (Windows 10 default)Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced -Name LaunchTo -Type DWord -Value # Better File ExplorerSet-ItemProperty -Path HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced -Name NavPaneExpandToCurrentFolder -Value 1 Set-ItemProperty -Path HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced -Name NavPaneShowAllFolders -Value 1 Set-ItemProperty -Path HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced -Name MMTaskbarMode -Value 2# These make "Quick Access" behave much closer to the old "Favorites"# ElJefe I got so much stuff I work on I'm usually looking at the last thing. ain't got time to not have bottom line up front. # Disable Quick Access: Recent Files#Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer -Name ShowRecent -Type DWord -Value 0# Disable Quick Access: Frequent Folders#Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer -Name ShowFrequent -Type DWord -Value 0# To Restore:Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer -Name ShowRecent -Type DWord -Value 1Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer -Name ShowFrequent -Type DWord -Value 1# Disable the Lock Screen (the one before password prompt - to prevent dropping the first character)#oh hell no!If (-Not (Test-Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\Personalization)) { New-Item -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows -Name Personalization | Out-Null}Set-ItemProperty -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\Personalization -Name NoLockScreen -Type DWord -Value 1# To Restore:#eljefe - there I fixed it: next line should be 0, or false.# Set-ItemProperty -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\Personalization -Name NoLockScreen -Type DWord -Value 0# Lock screen (not sleep) on lid closeSet-ItemProperty -Path 'HKLM:\SYSTEM\CurrentControlSet\Control\Session Manager\Power' -Name AwayModeEnabled -Type DWord -Value 1# To Restore:# Set-ItemProperty -Path 'HKLM:\SYSTEM\CurrentControlSet\Control\Session Manager\Power' -Name AwayModeEnabled -Type DWord -Value 0# Use the Windows 7-8.1 Style Volume Mixer#If (-Not (Test-Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MTCUVC")) {# New-Item -Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion" -Name MTCUVC | Out-Null#}#Set-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MTCUVC" -Name EnableMtcUvc -Type DWord -Value 0# To Restore (Windows 10 Style Volume Control):Set-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MTCUVC" -Name EnableMtcUvc -Type DWord -Value 1# Disable Xbox GamebarSet-ItemProperty -Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\GameDVR" -Name AppCaptureEnabled -Type DWord -Value 0Set-ItemProperty -Path "HKCU:\System\GameConfigStore" -Name GameDVR_Enabled -Type DWord -Value 0# Turn off People in TaskbarIf (-Not (Test-Path "HKCU:SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\People")) { New-Item -Path HKCU:SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\People | Out-Null}Set-ItemProperty -Path "HKCU:SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\People" -Name PeopleBand -Type DWord -Value 0#--- Restore Temporary Settings ---Enable-UACEnable-MicrosoftUpdateInstall-WindowsUpdate -acceptEula#--- Rename the Computer ---# Requires restart, or add the -Restart flag#eljefe I have a strange sence of humor...$computername = "UNDETECTED"if ($env:computername -ne $computername) { Rename-Computer -NewName $computername}
    Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Search -Name BingSearchEnabled -Type DWord -Value 0# To Restore (Enabled):#Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Search -Name BingSearchEnabled -Type DWord -Value 1# Disable Telemetry (requires a reboot to take effect)# Note this may break Insider builds for your organizationSet-ItemProperty -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\DataCollection -Name AllowTelemetry -Type DWord -Value 0Get-Service DiagTrack,Dmwappushservice | Stop-Service | Set-Service -StartupType Disabled# Change Explorer home screen back to "This PC"#Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced -Name LaunchTo -Type DWord -Value 1# Change it back to "Quick Access" (Windows 10 default)Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced -Name LaunchTo -Type DWord -Value # Better File ExplorerSet-ItemProperty -Path HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced -Name NavPaneExpandToCurrentFolder -Value 1 Set-ItemProperty -Path HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced -Name NavPaneShowAllFolders -Value 1 Set-ItemProperty -Path HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced -Name MMTaskbarMode -Value 2# These make "Quick Access" behave much closer to the old "Favorites"# ElJefe I got so much stuff I work on I'm usually looking at the last thing. ain't got time to not have bottom line up front. # Disable Quick Access: Recent Files#Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer -Name ShowRecent -Type DWord -Value 0# Disable Quick Access: Frequent Folders#Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer -Name ShowFrequent -Type DWord -Value 0# To Restore:Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer -Name ShowRecent -Type DWord -Value 1Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer -Name ShowFrequent -Type DWord -Value 1# Disable the Lock Screen (the one before password prompt - to prevent dropping the first character)#oh hell no!If (-Not (Test-Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\Personalization)) { New-Item -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows -Name Personalization | Out-Null}Set-ItemProperty -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\Personalization -Name NoLockScreen -Type DWord -Value 1# To Restore:#eljefe - there I fixed it: next line should be 0, or false.# Set-ItemProperty -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\Personalization -Name NoLockScreen -Type DWord -Value 0# Lock screen (not sleep) on lid closeSet-ItemProperty -Path 'HKLM:\SYSTEM\CurrentControlSet\Control\Session Manager\Power' -Name AwayModeEnabled -Type DWord -Value 1# To Restore:# Set-ItemProperty -Path 'HKLM:\SYSTEM\CurrentControlSet\Control\Session Manager\Power' -Name AwayModeEnabled -Type DWord -Value 0# Use the Windows 7-8.1 Style Volume Mixer#If (-Not (Test-Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MTCUVC")) {# New-Item -Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion" -Name MTCUVC | Out-Null#}#Set-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MTCUVC" -Name EnableMtcUvc -Type DWord -Value 0# To Restore (Windows 10 Style Volume Control):Set-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MTCUVC" -Name EnableMtcUvc -Type DWord -Value 1# Disable Xbox GamebarSet-ItemProperty -Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\GameDVR" -Name AppCaptureEnabled -Type DWord -Value 0Set-ItemProperty -Path "HKCU:\System\GameConfigStore" -Name GameDVR_Enabled -Type DWord -Value 0# Turn off People in TaskbarIf (-Not (Test-Path "HKCU:SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\People")) { New-Item -Path HKCU:SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\People | Out-Null}Set-ItemProperty -Path "HKCU:SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\People" -Name PeopleBand -Type DWord -Value 0#--- Restore Temporary Settings ---Enable-UACEnable-MicrosoftUpdateInstall-WindowsUpdate -acceptEula#--- Rename the Computer ---# Requires restart, or add the -Restart flag#eljefe I have a strange sence of humor...#$computername = "UNDETECTED"#if ($env:computername -ne $computername) {# Rename-Computer -NewName $computername#}
  9. kfalconspb revised this gist Oct 12, 2017. 1 changed file with 2 additions and 1 deletion.
    3 changes: 2 additions & 1 deletion boxstarter.ps1
    Original file line number Diff line number Diff line change
    @@ -1 +1,2 @@
    # Description: Boxstarter Script# Author: ElJefeDSecurIT # Last Updated: 2017-10-10## Install boxstarter:# . { iwr -useb http://boxstarter.org/bootstrapper.ps1 } | iex; get-boxstarter -Force## You might need to set: Set-ExecutionPolicy RemoteSigned## Run this boxstarter by calling the following from an **elevated** command-prompt:# start http://boxstarter.org/package/nr/url?<URL-TO-RAW-GIST># OR# Install-BoxstarterPackage -PackageName <URL-TO-RAW-GIST> -DisableReboots## Learn more: http://boxstarter.org/Learn/WebLauncher# heavily borrowed from Jessie, but I just have to tweak some things for my boxen. I have a couple of things I use for work, # a couple of things I use for home. this includes a bunch of core optimizations i've picked up over the years...# little things... small, exlusively paranoid things...#---- TEMPORARY ---Disable-UAC#---- PERMANENT ---# ElJEfe: for Ned Pyle, because, I blame him. Disable-WindowsOptionalFeature -Online -FeatureName SMB1Protocol#--- Fonts ---#ElJefe: sry I don't trust fonts I didn't review or came from the OS itself. #choco install inconsolata -y #--- Windows Settings --- #eljefe- I like Bing Search. so, there. #Disable-BingSearchDisable-GameBarTipsSet-WindowsExplorerOptions -EnableShowHiddenFilesFoldersDrives -EnableShowProtectedOSFiles -EnableShowFileExtensionsSet-TaskbarOptions -Size Large -Dock Bottom -Combine Full # -Lock # i do not like locks on my taskbar. Set-TaskbarOptions -Size Large -Dock Bottom -Combine Full -AlwaysShowIconsOn#--- Windows Subsystems/Features ---#eljefe - Nice Job Jesse ;)choco install Microsoft-Hyper-V-All -source windowsFeatureschoco install Microsoft-Windows-Subsystem-Linux -source windowsfeatures#--- Tools --- eljefe: I need git; any way i want it, that's the way I need it. i'll even get it in bash once i'm done. choco install git -params '"/GitAndUnixToolsOnPath /WindowsTerminal"' -ychoco install poshgit# choco install sysinternals -y# choco install vim#--- Apps ---choco install googlechromechoco install docker-for-windows# choco install sharex# choco install microsoft-teamschoco install vcxsrv#--- Uninstall unecessary applications that come with Windows out of the box ---# 3D BuilderGet-AppxPackage Microsoft.3DBuilder | Remove-AppxPackage# AlarmsGet-AppxPackage Microsoft.WindowsAlarms | Remove-AppxPackage# AutodeskGet-AppxPackage *Autodesk* | Remove-AppxPackage# Bing Weather, News, Sports, and Finance (Money):Get-AppxPackage Microsoft.BingFinance | Remove-AppxPackageGet-AppxPackage Microsoft.BingNews | Remove-AppxPackageGet-AppxPackage Microsoft.BingSports | Remove-AppxPackageGet-AppxPackage Microsoft.BingWeather | Remove-AppxPackage# BubbleWitchGet-AppxPackage *BubbleWitch* | Remove-AppxPackage# Candy CrushGet-AppxPackage king.com.CandyCrush* | Remove-AppxPackage# Comms PhoneGet-AppxPackage Microsoft.CommsPhone | Remove-AppxPackage# DellGet-AppxPackage *Dell* | Remove-AppxPackage# DropboxGet-AppxPackage *Dropbox* | Remove-AppxPackage# FacebookGet-AppxPackage *Facebook* | Remove-AppxPackage# Feedback HubGet-AppxPackage Microsoft.WindowsFeedbackHub | Remove-AppxPackage# Get StartedGet-AppxPackage Microsoft.Getstarted | Remove-AppxPackage# KeeperGet-AppxPackage *Keeper* | Remove-AppxPackage# Mail & CalendarGet-AppxPackage microsoft.windowscommunicationsapps | Remove-AppxPackage# MapsGet-AppxPackage Microsoft.WindowsMaps | Remove-AppxPackage# March of EmpiresGet-AppxPackage *MarchofEmpires* | Remove-AppxPackage# McAfee SecurityGet-AppxPackage *McAfee* | Remove-AppxPackage# Uninstall McAfee Security App$mcafee = gci "HKLM:\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall" | foreach { gp $_.PSPath } | ? { $_ -match "McAfee Security" } | select UninstallStringif ($mcafee) { $mcafee = $mcafee.UninstallString -Replace "C:\Program Files\McAfee\MSC\mcuihost.exe","" Write "Uninstalling McAfee..." start-process "C:\Program Files\McAfee\MSC\mcuihost.exe" -arg "$mcafee" -Wait}# MessagingGet-AppxPackage Microsoft.Messaging | Remove-AppxPackage# MinecraftGet-AppxPackage *Minecraft* | Remove-AppxPackage# NetflixGet-AppxPackage *Netflix* | Remove-AppxPackage# Office HubGet-AppxPackage Microsoft.MicrosoftOfficeHub | Remove-AppxPackage# One ConnectGet-AppxPackage Microsoft.OneConnect | Remove-AppxPackage# OneNoteGet-AppxPackage Microsoft.Office.OneNote | Remove-AppxPackage# PeopleGet-AppxPackage Microsoft.People | Remove-AppxPackage# PhoneGet-AppxPackage Microsoft.WindowsPhone | Remove-AppxPackage# PhotosGet-AppxPackage Microsoft.Windows.Photos | Remove-AppxPackage# PlexGet-AppxPackage *Plex* | Remove-AppxPackage# Skype (Metro version)Get-AppxPackage Microsoft.SkypeApp | Remove-AppxPackage# Sound RecorderGet-AppxPackage Microsoft.WindowsSoundRecorder | Remove-AppxPackage# SolitaireGet-AppxPackage *Solitaire* | Remove-AppxPackage# Sticky NotesGet-AppxPackage Microsoft.MicrosoftStickyNotes | Remove-AppxPackage# SwayGet-AppxPackage Microsoft.Office.Sway | Remove-AppxPackage# Twitter #eljefe: oh now hold on there... let's not get carried away...# Get-AppxPackage *Twitter* | Remove-AppxPackage# XboxGet-AppxPackage Microsoft.XboxApp | Remove-AppxPackageGet-AppxPackage Microsoft.XboxIdentityProvider | Remove-AppxPackage# Zune Music, Movies & TV#eljefe: with my last words i curse at thee, with my last breath, I spit at thee.Get-AppxPackage Microsoft.ZuneMusic | Remove-AppxPackageGet-AppxPackage Microsoft.ZuneVideo | Remove-AppxPackage#--- Windows Settings ---# Some from: @NickCraver's gist https://gist.github.com/NickCraver/7ebf9efbfd0c3eab72e9# Privacy: Let apps use my advertising ID: DisableIf (-Not (Test-Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\AdvertisingInfo")) { New-Item -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\AdvertisingInfo | Out-Null}Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\AdvertisingInfo -Name Enabled -Type DWord -Value 0# WiFi Sense: HotSpot Sharing: DisableIf (-Not (Test-Path "HKLM:\Software\Microsoft\PolicyManager\default\WiFi\AllowWiFiHotSpotReporting")) { New-Item -Path HKLM:\Software\Microsoft\PolicyManager\default\WiFi\AllowWiFiHotSpotReporting | Out-Null}Set-ItemProperty -Path HKLM:\Software\Microsoft\PolicyManager\default\WiFi\AllowWiFiHotSpotReporting -Name value -Type DWord -Value 0# WiFi Sense: Shared HotSpot Auto-Connect: DisableSet-ItemProperty -Path HKLM:\Software\Microsoft\PolicyManager\default\WiFi\AllowAutoConnectToWiFiSenseHotspots -Name value -Type DWord -Value 0# Start Menu: Disable Bing Search Results# ElJefe: You bet that if i'm protecting Bing Ima gonna be using Bing. and like it!# Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Search -Name BingSearchEnabled -Type DWord -Value 0# To Restore (Enabled):Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Search -Name BingSearchEnabled -Type DWord -Value 1# Disable Telemetry (requires a reboot to take effect)# Note this may break Insider builds for your organization# Set-ItemProperty -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\DataCollection -Name AllowTelemetry -Type DWord -Value 0# Get-Service DiagTrack,Dmwappushservice | Stop-Service | Set-Service -StartupType Disabled# Change Explorer home screen back to "This PC"#Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced -Name LaunchTo -Type DWord -Value 1# Change it back to "Quick Access" (Windows 10 default)Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced -Name LaunchTo -Type DWord -Value # Better File ExplorerSet-ItemProperty -Path HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced -Name NavPaneExpandToCurrentFolder -Value 1 Set-ItemProperty -Path HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced -Name NavPaneShowAllFolders -Value 1 Set-ItemProperty -Path HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced -Name MMTaskbarMode -Value 2# These make "Quick Access" behave much closer to the old "Favorites"# ElJefe I got so much stuff I work on I'm usually looking at the last thing. ain't got time to not have bottom line up front. # Disable Quick Access: Recent Files#Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer -Name ShowRecent -Type DWord -Value 0# Disable Quick Access: Frequent Folders#Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer -Name ShowFrequent -Type DWord -Value 0# To Restore:Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer -Name ShowRecent -Type DWord -Value 1Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer -Name ShowFrequent -Type DWord -Value 1# Disable the Lock Screen (the one before password prompt - to prevent dropping the first character)#oh hell no!If (-Not (Test-Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\Personalization)) { New-Item -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows -Name Personalization | Out-Null}Set-ItemProperty -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\Personalization -Name NoLockScreen -Type DWord -Value 1# To Restore:#eljefe - there I fixed it: next line should be 0, or false.# Set-ItemProperty -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\Personalization -Name NoLockScreen -Type DWord -Value 0# Lock screen (not sleep) on lid closeSet-ItemProperty -Path 'HKLM:\SYSTEM\CurrentControlSet\Control\Session Manager\Power' -Name AwayModeEnabled -Type DWord -Value 1# To Restore:# Set-ItemProperty -Path 'HKLM:\SYSTEM\CurrentControlSet\Control\Session Manager\Power' -Name AwayModeEnabled -Type DWord -Value 0# Use the Windows 7-8.1 Style Volume Mixer#If (-Not (Test-Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MTCUVC")) {# New-Item -Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion" -Name MTCUVC | Out-Null#}#Set-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MTCUVC" -Name EnableMtcUvc -Type DWord -Value 0# To Restore (Windows 10 Style Volume Control):Set-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MTCUVC" -Name EnableMtcUvc -Type DWord -Value 1# Disable Xbox GamebarSet-ItemProperty -Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\GameDVR" -Name AppCaptureEnabled -Type DWord -Value 0Set-ItemProperty -Path "HKCU:\System\GameConfigStore" -Name GameDVR_Enabled -Type DWord -Value 0# Turn off People in TaskbarIf (-Not (Test-Path "HKCU:SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\People")) { New-Item -Path HKCU:SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\People | Out-Null}Set-ItemProperty -Path "HKCU:SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\People" -Name PeopleBand -Type DWord -Value 0#--- Restore Temporary Settings ---Enable-UACEnable-MicrosoftUpdateInstall-WindowsUpdate -acceptEula#--- Rename the Computer ---# Requires restart, or add the -Restart flag#eljefe I have a strange sence of humor...$computername = "UNDETECTED"if ($env:computername -ne $computername) { Rename-Computer -NewName $computername}
    # Description: Boxstarter Script# Author: ElJefeDSecurIT # Last Updated: 2017-10-10## Install boxstarter:# . { iwr -useb http://boxstarter.org/bootstrapper.ps1 } | iex; get-boxstarter -Force## You might need to set: Set-ExecutionPolicy RemoteSigned## Run this boxstarter by calling the following from an **elevated** command-prompt:# start http://boxstarter.org/package/nr/url?<URL-TO-RAW-GIST># OR# Install-BoxstarterPackage -PackageName <URL-TO-RAW-GIST> -DisableReboots## Learn more: http://boxstarter.org/Learn/WebLauncher# heavily borrowed from Jessie, but I just have to tweak some things for my boxen. I have a couple of things I use for work, # a couple of things I use for home. this includes a bunch of core optimizations i've picked up over the years...# little things... small, exlusively paranoid things...#---- TEMPORARY ---Disable-UAC#---- PERMANENT ---# ElJEfe: for Ned Pyle, because, I blame him. Disable-WindowsOptionalFeature -Online -FeatureName SMB1Protocol#--- Fonts ---#ElJefe: sry I don't trust fonts I didn't review or came from the OS itself. #choco install inconsolata -y #--- Windows Settings --- #eljefe- I like Bing Search. so, there. Disable-BingSearchDisable-GameBarTipsSet-WindowsExplorerOptions -EnableShowHiddenFilesFoldersDrives -EnableShowProtectedOSFiles -EnableShowFileExtensionsSet-TaskbarOptions -Size Large -Dock Bottom -Combine Full # -Lock # i do not like locks on my taskbar. Set-TaskbarOptions -Size Large -Dock Bottom -Combine Full -AlwaysShowIconsOn#--- Windows Subsystems/Features ---#eljefe - Nice Job Jesse ;)#choco install Microsoft-Hyper-V-All -source windowsFeatureschoco install Microsoft-Windows-Subsystem-Linux -source windowsfeatures#--- Tools --- eljefe: I need git; any way i want it, that's the way I need it. i'll even get it in bash once i'm done. choco install git -params '"/GitAndUnixToolsOnPath /WindowsTerminal"' -ychoco install poshgitchoco install sysinternals -ychoco install vim#--- Apps ---choco install googlechromechoco install docker-for-windows# choco install sharexchoco install microsoft-teams#choco install vcxsrv#--- Uninstall unecessary applications that come with Windows out of the box ---# 3D BuilderGet-AppxPackage Microsoft.3DBuilder | Remove-AppxPackage# AlarmsGet-AppxPackage Microsoft.WindowsAlarms | Remove-AppxPackage# AutodeskGet-AppxPackage *Autodesk* | Remove-AppxPackage# Bing Weather, News, Sports, and Finance (Money):Get-AppxPackage Microsoft.BingFinance | Remove-AppxPackageGet-AppxPackage Microsoft.BingNews | Remove-AppxPackageGet-AppxPackage Microsoft.BingSports | Remove-AppxPackageGet-AppxPackage Microsoft.BingWeather | Remove-AppxPackage# BubbleWitchGet-AppxPackage *BubbleWitch* | Remove-AppxPackage# Candy CrushGet-AppxPackage king.com.CandyCrush* | Remove-AppxPackage# Comms PhoneGet-AppxPackage Microsoft.CommsPhone | Remove-AppxPackage# DellGet-AppxPackage *Dell* | Remove-AppxPackage# DropboxGet-AppxPackage *Dropbox* | Remove-AppxPackage# FacebookGet-AppxPackage *Facebook* | Remove-AppxPackage# Feedback HubGet-AppxPackage Microsoft.WindowsFeedbackHub | Remove-AppxPackage# Get StartedGet-AppxPackage Microsoft.Getstarted | Remove-AppxPackage# KeeperGet-AppxPackage *Keeper* | Remove-AppxPackage# Mail & CalendarGet-AppxPackage microsoft.windowscommunicationsapps | Remove-AppxPackage# MapsGet-AppxPackage Microsoft.WindowsMaps | Remove-AppxPackage# March of EmpiresGet-AppxPackage *MarchofEmpires* | Remove-AppxPackage# McAfee SecurityGet-AppxPackage *McAfee* | Remove-AppxPackage# Uninstall McAfee Security App$mcafee = gci "HKLM:\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall" | foreach { gp $_.PSPath } | ? { $_ -match "McAfee Security" } | select UninstallStringif ($mcafee) { $mcafee = $mcafee.UninstallString -Replace "C:\Program Files\McAfee\MSC\mcuihost.exe","" Write "Uninstalling McAfee..." start-process "C:\Program Files\McAfee\MSC\mcuihost.exe" -arg "$mcafee" -Wait}# MessagingGet-AppxPackage Microsoft.Messaging | Remove-AppxPackage# MinecraftGet-AppxPackage *Minecraft* | Remove-AppxPackage# NetflixGet-AppxPackage *Netflix* | Remove-AppxPackage# Office HubGet-AppxPackage Microsoft.MicrosoftOfficeHub | Remove-AppxPackage# One ConnectGet-AppxPackage Microsoft.OneConnect | Remove-AppxPackage# OneNote#Get-AppxPackage Microsoft.Office.OneNote | Remove-AppxPackage# PeopleGet-AppxPackage Microsoft.People | Remove-AppxPackage# PhoneGet-AppxPackage Microsoft.WindowsPhone | Remove-AppxPackage# PhotosGet-AppxPackage Microsoft.Windows.Photos | Remove-AppxPackage# PlexGet-AppxPackage *Plex* | Remove-AppxPackage# Skype (Metro version)Get-AppxPackage Microsoft.SkypeApp | Remove-AppxPackage# Sound RecorderGet-AppxPackage Microsoft.WindowsSoundRecorder | Remove-AppxPackage# SolitaireGet-AppxPackage *Solitaire* | Remove-AppxPackage# Sticky NotesGet-AppxPackage Microsoft.MicrosoftStickyNotes | Remove-AppxPackage# SwayGet-AppxPackage Microsoft.Office.Sway | Remove-AppxPackage# Twitter #eljefe: oh now hold on there... let's not get carried away...# Get-AppxPackage *Twitter* | Remove-AppxPackage# XboxGet-AppxPackage Microsoft.XboxApp | Remove-AppxPackageGet-AppxPackage Microsoft.XboxIdentityProvider | Remove-AppxPackage# Zune Music, Movies & TV#eljefe: with my last words i curse at thee, with my last breath, I spit at thee.Get-AppxPackage Microsoft.ZuneMusic | Remove-AppxPackageGet-AppxPackage Microsoft.ZuneVideo | Remove-AppxPackage#--- Windows Settings ---# Some from: @NickCraver's gist https://gist.github.com/NickCraver/7ebf9efbfd0c3eab72e9# Privacy: Let apps use my advertising ID: DisableIf (-Not (Test-Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\AdvertisingInfo")) { New-Item -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\AdvertisingInfo | Out-Null}Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\AdvertisingInfo -Name Enabled -Type DWord -Value 0# WiFi Sense: HotSpot Sharing: DisableIf (-Not (Test-Path "HKLM:\Software\Microsoft\PolicyManager\default\WiFi\AllowWiFiHotSpotReporting")) { New-Item -Path HKLM:\Software\Microsoft\PolicyManager\default\WiFi\AllowWiFiHotSpotReporting | Out-Null}Set-ItemProperty -Path HKLM:\Software\Microsoft\PolicyManager\default\WiFi\AllowWiFiHotSpotReporting -Name value -Type DWord -Value 0# WiFi Sense: Shared HotSpot Auto-Connect: DisableSet-ItemProperty -Path HKLM:\Software\Microsoft\PolicyManager\default\WiFi\AllowAutoConnectToWiFiSenseHotspots -Name value -Type DWord -Value 0# Start Menu: Disable Bing Search Results# ElJefe: You bet that if i'm protecting Bing Ima gonna be using Bing. and like it!
    Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Search -Name BingSearchEnabled -Type DWord -Value 0# To Restore (Enabled):#Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Search -Name BingSearchEnabled -Type DWord -Value 1# Disable Telemetry (requires a reboot to take effect)# Note this may break Insider builds for your organization# Set-ItemProperty -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\DataCollection -Name AllowTelemetry -Type DWord -Value 0# Get-Service DiagTrack,Dmwappushservice | Stop-Service | Set-Service -StartupType Disabled# Change Explorer home screen back to "This PC"#Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced -Name LaunchTo -Type DWord -Value 1# Change it back to "Quick Access" (Windows 10 default)Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced -Name LaunchTo -Type DWord -Value # Better File ExplorerSet-ItemProperty -Path HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced -Name NavPaneExpandToCurrentFolder -Value 1 Set-ItemProperty -Path HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced -Name NavPaneShowAllFolders -Value 1 Set-ItemProperty -Path HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced -Name MMTaskbarMode -Value 2# These make "Quick Access" behave much closer to the old "Favorites"# ElJefe I got so much stuff I work on I'm usually looking at the last thing. ain't got time to not have bottom line up front. # Disable Quick Access: Recent Files#Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer -Name ShowRecent -Type DWord -Value 0# Disable Quick Access: Frequent Folders#Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer -Name ShowFrequent -Type DWord -Value 0# To Restore:Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer -Name ShowRecent -Type DWord -Value 1Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer -Name ShowFrequent -Type DWord -Value 1# Disable the Lock Screen (the one before password prompt - to prevent dropping the first character)#oh hell no!If (-Not (Test-Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\Personalization)) { New-Item -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows -Name Personalization | Out-Null}Set-ItemProperty -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\Personalization -Name NoLockScreen -Type DWord -Value 1# To Restore:#eljefe - there I fixed it: next line should be 0, or false.# Set-ItemProperty -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\Personalization -Name NoLockScreen -Type DWord -Value 0# Lock screen (not sleep) on lid closeSet-ItemProperty -Path 'HKLM:\SYSTEM\CurrentControlSet\Control\Session Manager\Power' -Name AwayModeEnabled -Type DWord -Value 1# To Restore:# Set-ItemProperty -Path 'HKLM:\SYSTEM\CurrentControlSet\Control\Session Manager\Power' -Name AwayModeEnabled -Type DWord -Value 0# Use the Windows 7-8.1 Style Volume Mixer#If (-Not (Test-Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MTCUVC")) {# New-Item -Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion" -Name MTCUVC | Out-Null#}#Set-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MTCUVC" -Name EnableMtcUvc -Type DWord -Value 0# To Restore (Windows 10 Style Volume Control):Set-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MTCUVC" -Name EnableMtcUvc -Type DWord -Value 1# Disable Xbox GamebarSet-ItemProperty -Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\GameDVR" -Name AppCaptureEnabled -Type DWord -Value 0Set-ItemProperty -Path "HKCU:\System\GameConfigStore" -Name GameDVR_Enabled -Type DWord -Value 0# Turn off People in TaskbarIf (-Not (Test-Path "HKCU:SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\People")) { New-Item -Path HKCU:SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\People | Out-Null}Set-ItemProperty -Path "HKCU:SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\People" -Name PeopleBand -Type DWord -Value 0#--- Restore Temporary Settings ---Enable-UACEnable-MicrosoftUpdateInstall-WindowsUpdate -acceptEula#--- Rename the Computer ---# Requires restart, or add the -Restart flag#eljefe I have a strange sence of humor...$computername = "UNDETECTED"if ($env:computername -ne $computername) { Rename-Computer -NewName $computername}
  10. kfalconspb revised this gist Oct 12, 2017. 1 changed file with 1 addition and 32 deletions.
    33 changes: 1 addition & 32 deletions boxstarter.ps1
    Original file line number Diff line number Diff line change
    @@ -1,32 +1 @@
    # Description: Boxstarter Script
    # Author: Jess Frazelle <[email protected]>
    # Last Updated: 2017-09-11
    #
    # Install boxstarter:
    # . { iwr -useb http://boxstarter.org/bootstrapper.ps1 } | iex; get-boxstarter -Force
    #
    # You might need to set: Set-ExecutionPolicy RemoteSigned
    #
    # Run this boxstarter by calling the following from an **elevated** command-prompt:
    # start http://boxstarter.org/package/nr/url?<URL-TO-RAW-GIST>
    # OR
    # Install-BoxstarterPackage -PackageName <URL-TO-RAW-GIST> -DisableReboots
    #
    # Learn more: http://boxstarter.org/Learn/WebLauncher

    #---- TEMPORARY ---
    Disable-UAC

    #--- Fonts ---
    choco install inconsolata -y

    #--- Windows Settings ---
    Disable-BingSearch
    Disable-GameBarTips


    #--- Restore Temporary Settings ---
    Enable-UAC
    Enable-MicrosoftUpdate
    Install-WindowsUpdate -acceptEula

    # Description: Boxstarter Script# Author: ElJefeDSecurIT # Last Updated: 2017-10-10## Install boxstarter:# . { iwr -useb http://boxstarter.org/bootstrapper.ps1 } | iex; get-boxstarter -Force## You might need to set: Set-ExecutionPolicy RemoteSigned## Run this boxstarter by calling the following from an **elevated** command-prompt:# start http://boxstarter.org/package/nr/url?<URL-TO-RAW-GIST># OR# Install-BoxstarterPackage -PackageName <URL-TO-RAW-GIST> -DisableReboots## Learn more: http://boxstarter.org/Learn/WebLauncher# heavily borrowed from Jessie, but I just have to tweak some things for my boxen. I have a couple of things I use for work, # a couple of things I use for home. this includes a bunch of core optimizations i've picked up over the years...# little things... small, exlusively paranoid things...#---- TEMPORARY ---Disable-UAC#---- PERMANENT ---# ElJEfe: for Ned Pyle, because, I blame him. Disable-WindowsOptionalFeature -Online -FeatureName SMB1Protocol#--- Fonts ---#ElJefe: sry I don't trust fonts I didn't review or came from the OS itself. #choco install inconsolata -y #--- Windows Settings --- #eljefe- I like Bing Search. so, there. #Disable-BingSearchDisable-GameBarTipsSet-WindowsExplorerOptions -EnableShowHiddenFilesFoldersDrives -EnableShowProtectedOSFiles -EnableShowFileExtensionsSet-TaskbarOptions -Size Large -Dock Bottom -Combine Full # -Lock # i do not like locks on my taskbar. Set-TaskbarOptions -Size Large -Dock Bottom -Combine Full -AlwaysShowIconsOn#--- Windows Subsystems/Features ---#eljefe - Nice Job Jesse ;)choco install Microsoft-Hyper-V-All -source windowsFeatureschoco install Microsoft-Windows-Subsystem-Linux -source windowsfeatures#--- Tools --- eljefe: I need git; any way i want it, that's the way I need it. i'll even get it in bash once i'm done. choco install git -params '"/GitAndUnixToolsOnPath /WindowsTerminal"' -ychoco install poshgit# choco install sysinternals -y# choco install vim#--- Apps ---choco install googlechromechoco install docker-for-windows# choco install sharex# choco install microsoft-teamschoco install vcxsrv#--- Uninstall unecessary applications that come with Windows out of the box ---# 3D BuilderGet-AppxPackage Microsoft.3DBuilder | Remove-AppxPackage# AlarmsGet-AppxPackage Microsoft.WindowsAlarms | Remove-AppxPackage# AutodeskGet-AppxPackage *Autodesk* | Remove-AppxPackage# Bing Weather, News, Sports, and Finance (Money):Get-AppxPackage Microsoft.BingFinance | Remove-AppxPackageGet-AppxPackage Microsoft.BingNews | Remove-AppxPackageGet-AppxPackage Microsoft.BingSports | Remove-AppxPackageGet-AppxPackage Microsoft.BingWeather | Remove-AppxPackage# BubbleWitchGet-AppxPackage *BubbleWitch* | Remove-AppxPackage# Candy CrushGet-AppxPackage king.com.CandyCrush* | Remove-AppxPackage# Comms PhoneGet-AppxPackage Microsoft.CommsPhone | Remove-AppxPackage# DellGet-AppxPackage *Dell* | Remove-AppxPackage# DropboxGet-AppxPackage *Dropbox* | Remove-AppxPackage# FacebookGet-AppxPackage *Facebook* | Remove-AppxPackage# Feedback HubGet-AppxPackage Microsoft.WindowsFeedbackHub | Remove-AppxPackage# Get StartedGet-AppxPackage Microsoft.Getstarted | Remove-AppxPackage# KeeperGet-AppxPackage *Keeper* | Remove-AppxPackage# Mail & CalendarGet-AppxPackage microsoft.windowscommunicationsapps | Remove-AppxPackage# MapsGet-AppxPackage Microsoft.WindowsMaps | Remove-AppxPackage# March of EmpiresGet-AppxPackage *MarchofEmpires* | Remove-AppxPackage# McAfee SecurityGet-AppxPackage *McAfee* | Remove-AppxPackage# Uninstall McAfee Security App$mcafee = gci "HKLM:\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall" | foreach { gp $_.PSPath } | ? { $_ -match "McAfee Security" } | select UninstallStringif ($mcafee) { $mcafee = $mcafee.UninstallString -Replace "C:\Program Files\McAfee\MSC\mcuihost.exe","" Write "Uninstalling McAfee..." start-process "C:\Program Files\McAfee\MSC\mcuihost.exe" -arg "$mcafee" -Wait}# MessagingGet-AppxPackage Microsoft.Messaging | Remove-AppxPackage# MinecraftGet-AppxPackage *Minecraft* | Remove-AppxPackage# NetflixGet-AppxPackage *Netflix* | Remove-AppxPackage# Office HubGet-AppxPackage Microsoft.MicrosoftOfficeHub | Remove-AppxPackage# One ConnectGet-AppxPackage Microsoft.OneConnect | Remove-AppxPackage# OneNoteGet-AppxPackage Microsoft.Office.OneNote | Remove-AppxPackage# PeopleGet-AppxPackage Microsoft.People | Remove-AppxPackage# PhoneGet-AppxPackage Microsoft.WindowsPhone | Remove-AppxPackage# PhotosGet-AppxPackage Microsoft.Windows.Photos | Remove-AppxPackage# PlexGet-AppxPackage *Plex* | Remove-AppxPackage# Skype (Metro version)Get-AppxPackage Microsoft.SkypeApp | Remove-AppxPackage# Sound RecorderGet-AppxPackage Microsoft.WindowsSoundRecorder | Remove-AppxPackage# SolitaireGet-AppxPackage *Solitaire* | Remove-AppxPackage# Sticky NotesGet-AppxPackage Microsoft.MicrosoftStickyNotes | Remove-AppxPackage# SwayGet-AppxPackage Microsoft.Office.Sway | Remove-AppxPackage# Twitter #eljefe: oh now hold on there... let's not get carried away...# Get-AppxPackage *Twitter* | Remove-AppxPackage# XboxGet-AppxPackage Microsoft.XboxApp | Remove-AppxPackageGet-AppxPackage Microsoft.XboxIdentityProvider | Remove-AppxPackage# Zune Music, Movies & TV#eljefe: with my last words i curse at thee, with my last breath, I spit at thee.Get-AppxPackage Microsoft.ZuneMusic | Remove-AppxPackageGet-AppxPackage Microsoft.ZuneVideo | Remove-AppxPackage#--- Windows Settings ---# Some from: @NickCraver's gist https://gist.github.com/NickCraver/7ebf9efbfd0c3eab72e9# Privacy: Let apps use my advertising ID: DisableIf (-Not (Test-Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\AdvertisingInfo")) { New-Item -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\AdvertisingInfo | Out-Null}Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\AdvertisingInfo -Name Enabled -Type DWord -Value 0# WiFi Sense: HotSpot Sharing: DisableIf (-Not (Test-Path "HKLM:\Software\Microsoft\PolicyManager\default\WiFi\AllowWiFiHotSpotReporting")) { New-Item -Path HKLM:\Software\Microsoft\PolicyManager\default\WiFi\AllowWiFiHotSpotReporting | Out-Null}Set-ItemProperty -Path HKLM:\Software\Microsoft\PolicyManager\default\WiFi\AllowWiFiHotSpotReporting -Name value -Type DWord -Value 0# WiFi Sense: Shared HotSpot Auto-Connect: DisableSet-ItemProperty -Path HKLM:\Software\Microsoft\PolicyManager\default\WiFi\AllowAutoConnectToWiFiSenseHotspots -Name value -Type DWord -Value 0# Start Menu: Disable Bing Search Results# ElJefe: You bet that if i'm protecting Bing Ima gonna be using Bing. and like it!# Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Search -Name BingSearchEnabled -Type DWord -Value 0# To Restore (Enabled):Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Search -Name BingSearchEnabled -Type DWord -Value 1# Disable Telemetry (requires a reboot to take effect)# Note this may break Insider builds for your organization# Set-ItemProperty -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\DataCollection -Name AllowTelemetry -Type DWord -Value 0# Get-Service DiagTrack,Dmwappushservice | Stop-Service | Set-Service -StartupType Disabled# Change Explorer home screen back to "This PC"#Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced -Name LaunchTo -Type DWord -Value 1# Change it back to "Quick Access" (Windows 10 default)Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced -Name LaunchTo -Type DWord -Value # Better File ExplorerSet-ItemProperty -Path HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced -Name NavPaneExpandToCurrentFolder -Value 1 Set-ItemProperty -Path HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced -Name NavPaneShowAllFolders -Value 1 Set-ItemProperty -Path HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced -Name MMTaskbarMode -Value 2# These make "Quick Access" behave much closer to the old "Favorites"# ElJefe I got so much stuff I work on I'm usually looking at the last thing. ain't got time to not have bottom line up front. # Disable Quick Access: Recent Files#Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer -Name ShowRecent -Type DWord -Value 0# Disable Quick Access: Frequent Folders#Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer -Name ShowFrequent -Type DWord -Value 0# To Restore:Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer -Name ShowRecent -Type DWord -Value 1Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer -Name ShowFrequent -Type DWord -Value 1# Disable the Lock Screen (the one before password prompt - to prevent dropping the first character)#oh hell no!If (-Not (Test-Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\Personalization)) { New-Item -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows -Name Personalization | Out-Null}Set-ItemProperty -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\Personalization -Name NoLockScreen -Type DWord -Value 1# To Restore:#eljefe - there I fixed it: next line should be 0, or false.# Set-ItemProperty -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\Personalization -Name NoLockScreen -Type DWord -Value 0# Lock screen (not sleep) on lid closeSet-ItemProperty -Path 'HKLM:\SYSTEM\CurrentControlSet\Control\Session Manager\Power' -Name AwayModeEnabled -Type DWord -Value 1# To Restore:# Set-ItemProperty -Path 'HKLM:\SYSTEM\CurrentControlSet\Control\Session Manager\Power' -Name AwayModeEnabled -Type DWord -Value 0# Use the Windows 7-8.1 Style Volume Mixer#If (-Not (Test-Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MTCUVC")) {# New-Item -Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion" -Name MTCUVC | Out-Null#}#Set-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MTCUVC" -Name EnableMtcUvc -Type DWord -Value 0# To Restore (Windows 10 Style Volume Control):Set-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MTCUVC" -Name EnableMtcUvc -Type DWord -Value 1# Disable Xbox GamebarSet-ItemProperty -Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\GameDVR" -Name AppCaptureEnabled -Type DWord -Value 0Set-ItemProperty -Path "HKCU:\System\GameConfigStore" -Name GameDVR_Enabled -Type DWord -Value 0# Turn off People in TaskbarIf (-Not (Test-Path "HKCU:SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\People")) { New-Item -Path HKCU:SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\People | Out-Null}Set-ItemProperty -Path "HKCU:SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\People" -Name PeopleBand -Type DWord -Value 0#--- Restore Temporary Settings ---Enable-UACEnable-MicrosoftUpdateInstall-WindowsUpdate -acceptEula#--- Rename the Computer ---# Requires restart, or add the -Restart flag#eljefe I have a strange sence of humor...$computername = "UNDETECTED"if ($env:computername -ne $computername) { Rename-Computer -NewName $computername}
  11. kfalconspb revised this gist Oct 12, 2017. 1 changed file with 0 additions and 6 deletions.
    6 changes: 0 additions & 6 deletions boxstarter.ps1
    Original file line number Diff line number Diff line change
    @@ -30,9 +30,3 @@ Enable-UAC
    Enable-MicrosoftUpdate
    Install-WindowsUpdate -acceptEula

    #--- Rename the Computer ---
    # Requires restart, or add the -Restart flag
    $computername = "acidburn"
    if ($env:computername -ne $computername) {
    Rename-Computer -NewName $computername
    }
  12. kfalconspb revised this gist Oct 12, 2017. 1 changed file with 0 additions and 218 deletions.
    218 changes: 0 additions & 218 deletions boxstarter.ps1
    Original file line number Diff line number Diff line change
    @@ -24,224 +24,6 @@ choco install inconsolata -y
    Disable-BingSearch
    Disable-GameBarTips

    Set-WindowsExplorerOptions -EnableShowHiddenFilesFoldersDrives -EnableShowProtectedOSFiles -EnableShowFileExtensions
    Set-TaskbarOptions -Size Small -Dock Bottom -Combine Full -Lock
    Set-TaskbarOptions -Size Small -Dock Bottom -Combine Full -AlwaysShowIconsOn

    #--- Windows Subsystems/Features ---
    choco install Microsoft-Hyper-V-All -source windowsFeatures
    choco install Microsoft-Windows-Subsystem-Linux -source windowsfeatures

    #--- Tools ---
    # choco install git -params '"/GitAndUnixToolsOnPath /WindowsTerminal"' -y
    # choco install poshgit
    choco install sysinternals -y
    # choco install vim

    #--- Apps ---
    choco install googlechrome
    choco install docker-for-windows
    choco install sharex
    # choco install microsoft-teams
    # choco install vcxsrv

    #--- Uninstall unecessary applications that come with Windows out of the box ---

    # 3D Builder
    Get-AppxPackage Microsoft.3DBuilder | Remove-AppxPackage

    # Alarms
    Get-AppxPackage Microsoft.WindowsAlarms | Remove-AppxPackage

    # Autodesk
    Get-AppxPackage *Autodesk* | Remove-AppxPackage

    # Bing Weather, News, Sports, and Finance (Money):
    Get-AppxPackage Microsoft.BingFinance | Remove-AppxPackage
    Get-AppxPackage Microsoft.BingNews | Remove-AppxPackage
    Get-AppxPackage Microsoft.BingSports | Remove-AppxPackage
    Get-AppxPackage Microsoft.BingWeather | Remove-AppxPackage

    # BubbleWitch
    Get-AppxPackage *BubbleWitch* | Remove-AppxPackage

    # Candy Crush
    Get-AppxPackage king.com.CandyCrush* | Remove-AppxPackage

    # Comms Phone
    Get-AppxPackage Microsoft.CommsPhone | Remove-AppxPackage

    # Dell
    Get-AppxPackage *Dell* | Remove-AppxPackage

    # Dropbox
    Get-AppxPackage *Dropbox* | Remove-AppxPackage

    # Facebook
    Get-AppxPackage *Facebook* | Remove-AppxPackage

    # Feedback Hub
    Get-AppxPackage Microsoft.WindowsFeedbackHub | Remove-AppxPackage

    # Get Started
    Get-AppxPackage Microsoft.Getstarted | Remove-AppxPackage

    # Keeper
    Get-AppxPackage *Keeper* | Remove-AppxPackage

    # Mail & Calendar
    Get-AppxPackage microsoft.windowscommunicationsapps | Remove-AppxPackage

    # Maps
    Get-AppxPackage Microsoft.WindowsMaps | Remove-AppxPackage

    # March of Empires
    Get-AppxPackage *MarchofEmpires* | Remove-AppxPackage

    # McAfee Security
    Get-AppxPackage *McAfee* | Remove-AppxPackage

    # Uninstall McAfee Security App
    $mcafee = gci "HKLM:\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall" | foreach { gp $_.PSPath } | ? { $_ -match "McAfee Security" } | select UninstallString
    if ($mcafee) {
    $mcafee = $mcafee.UninstallString -Replace "C:\Program Files\McAfee\MSC\mcuihost.exe",""
    Write "Uninstalling McAfee..."
    start-process "C:\Program Files\McAfee\MSC\mcuihost.exe" -arg "$mcafee" -Wait
    }

    # Messaging
    Get-AppxPackage Microsoft.Messaging | Remove-AppxPackage

    # Minecraft
    Get-AppxPackage *Minecraft* | Remove-AppxPackage

    # Netflix
    Get-AppxPackage *Netflix* | Remove-AppxPackage

    # Office Hub
    Get-AppxPackage Microsoft.MicrosoftOfficeHub | Remove-AppxPackage

    # One Connect
    Get-AppxPackage Microsoft.OneConnect | Remove-AppxPackage

    # OneNote
    Get-AppxPackage Microsoft.Office.OneNote | Remove-AppxPackage

    # People
    Get-AppxPackage Microsoft.People | Remove-AppxPackage

    # Phone
    Get-AppxPackage Microsoft.WindowsPhone | Remove-AppxPackage

    # Photos
    Get-AppxPackage Microsoft.Windows.Photos | Remove-AppxPackage

    # Plex
    Get-AppxPackage *Plex* | Remove-AppxPackage

    # Skype (Metro version)
    Get-AppxPackage Microsoft.SkypeApp | Remove-AppxPackage

    # Sound Recorder
    Get-AppxPackage Microsoft.WindowsSoundRecorder | Remove-AppxPackage

    # Solitaire
    Get-AppxPackage *Solitaire* | Remove-AppxPackage

    # Sticky Notes
    Get-AppxPackage Microsoft.MicrosoftStickyNotes | Remove-AppxPackage

    # Sway
    Get-AppxPackage Microsoft.Office.Sway | Remove-AppxPackage

    # Twitter
    Get-AppxPackage *Twitter* | Remove-AppxPackage

    # Xbox
    Get-AppxPackage Microsoft.XboxApp | Remove-AppxPackage
    Get-AppxPackage Microsoft.XboxIdentityProvider | Remove-AppxPackage

    # Zune Music, Movies & TV
    Get-AppxPackage Microsoft.ZuneMusic | Remove-AppxPackage
    Get-AppxPackage Microsoft.ZuneVideo | Remove-AppxPackage

    #--- Windows Settings ---
    # Some from: @NickCraver's gist https://gist.github.com/NickCraver/7ebf9efbfd0c3eab72e9

    # Privacy: Let apps use my advertising ID: Disable
    If (-Not (Test-Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\AdvertisingInfo")) {
    New-Item -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\AdvertisingInfo | Out-Null
    }
    Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\AdvertisingInfo -Name Enabled -Type DWord -Value 0

    # WiFi Sense: HotSpot Sharing: Disable
    If (-Not (Test-Path "HKLM:\Software\Microsoft\PolicyManager\default\WiFi\AllowWiFiHotSpotReporting")) {
    New-Item -Path HKLM:\Software\Microsoft\PolicyManager\default\WiFi\AllowWiFiHotSpotReporting | Out-Null
    }
    Set-ItemProperty -Path HKLM:\Software\Microsoft\PolicyManager\default\WiFi\AllowWiFiHotSpotReporting -Name value -Type DWord -Value 0

    # WiFi Sense: Shared HotSpot Auto-Connect: Disable
    Set-ItemProperty -Path HKLM:\Software\Microsoft\PolicyManager\default\WiFi\AllowAutoConnectToWiFiSenseHotspots -Name value -Type DWord -Value 0

    # Start Menu: Disable Bing Search Results
    Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Search -Name BingSearchEnabled -Type DWord -Value 0
    # To Restore (Enabled):
    # Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Search -Name BingSearchEnabled -Type DWord -Value 1

    # Disable Telemetry (requires a reboot to take effect)
    # Note this may break Insider builds for your organization
    # Set-ItemProperty -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\DataCollection -Name AllowTelemetry -Type DWord -Value 0
    # Get-Service DiagTrack,Dmwappushservice | Stop-Service | Set-Service -StartupType Disabled

    # Change Explorer home screen back to "This PC"
    Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced -Name LaunchTo -Type DWord -Value 1
    # Change it back to "Quick Access" (Windows 10 default)
    # Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced -Name LaunchTo -Type DWord -Value 2

    # Better File Explorer
    Set-ItemProperty -Path HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced -Name NavPaneExpandToCurrentFolder -Value 1
    Set-ItemProperty -Path HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced -Name NavPaneShowAllFolders -Value 1
    Set-ItemProperty -Path HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced -Name MMTaskbarMode -Value 2

    # These make "Quick Access" behave much closer to the old "Favorites"
    # Disable Quick Access: Recent Files
    Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer -Name ShowRecent -Type DWord -Value 0
    # Disable Quick Access: Frequent Folders
    Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer -Name ShowFrequent -Type DWord -Value 0
    # To Restore:
    # Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer -Name ShowRecent -Type DWord -Value 1
    # Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer -Name ShowFrequent -Type DWord -Value 1

    # Disable the Lock Screen (the one before password prompt - to prevent dropping the first character)
    If (-Not (Test-Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\Personalization)) {
    New-Item -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows -Name Personalization | Out-Null
    }
    Set-ItemProperty -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\Personalization -Name NoLockScreen -Type DWord -Value 1
    # To Restore:
    # Set-ItemProperty -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\Personalization -Name NoLockScreen -Type DWord -Value 1

    # Lock screen (not sleep) on lid close
    Set-ItemProperty -Path 'HKLM:\SYSTEM\CurrentControlSet\Control\Session Manager\Power' -Name AwayModeEnabled -Type DWord -Value 1
    # To Restore:
    # Set-ItemProperty -Path 'HKLM:\SYSTEM\CurrentControlSet\Control\Session Manager\Power' -Name AwayModeEnabled -Type DWord -Value 0

    # Use the Windows 7-8.1 Style Volume Mixer
    If (-Not (Test-Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MTCUVC")) {
    New-Item -Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion" -Name MTCUVC | Out-Null
    }
    Set-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MTCUVC" -Name EnableMtcUvc -Type DWord -Value 0
    # To Restore (Windows 10 Style Volume Control):
    # Set-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MTCUVC" -Name EnableMtcUvc -Type DWord -Value 1

    # Disable Xbox Gamebar
    Set-ItemProperty -Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\GameDVR" -Name AppCaptureEnabled -Type DWord -Value 0
    Set-ItemProperty -Path "HKCU:\System\GameConfigStore" -Name GameDVR_Enabled -Type DWord -Value 0

    # Turn off People in Taskbar
    If (-Not (Test-Path "HKCU:SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\People")) {
    New-Item -Path HKCU:SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\People | Out-Null
    }
    Set-ItemProperty -Path "HKCU:SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\People" -Name PeopleBand -Type DWord -Value 0

    #--- Restore Temporary Settings ---
    Enable-UAC
  13. @jessfraz jessfraz revised this gist Sep 20, 2017. 1 changed file with 2 additions and 0 deletions.
    2 changes: 2 additions & 0 deletions boxstarter.ps1
    Original file line number Diff line number Diff line change
    @@ -172,11 +172,13 @@ Get-AppxPackage Microsoft.ZuneVideo | Remove-AppxPackage
    If (-Not (Test-Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\AdvertisingInfo")) {
    New-Item -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\AdvertisingInfo | Out-Null
    }
    Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\AdvertisingInfo -Name Enabled -Type DWord -Value 0

    # WiFi Sense: HotSpot Sharing: Disable
    If (-Not (Test-Path "HKLM:\Software\Microsoft\PolicyManager\default\WiFi\AllowWiFiHotSpotReporting")) {
    New-Item -Path HKLM:\Software\Microsoft\PolicyManager\default\WiFi\AllowWiFiHotSpotReporting | Out-Null
    }
    Set-ItemProperty -Path HKLM:\Software\Microsoft\PolicyManager\default\WiFi\AllowWiFiHotSpotReporting -Name value -Type DWord -Value 0

    # WiFi Sense: Shared HotSpot Auto-Connect: Disable
    Set-ItemProperty -Path HKLM:\Software\Microsoft\PolicyManager\default\WiFi\AllowAutoConnectToWiFiSenseHotspots -Name value -Type DWord -Value 0
  14. @jessfraz jessfraz revised this gist Sep 20, 2017. 1 changed file with 3 additions and 0 deletions.
    3 changes: 3 additions & 0 deletions boxstarter.ps1
    Original file line number Diff line number Diff line change
    @@ -236,6 +236,9 @@ Set-ItemProperty -Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\GameDVR"
    Set-ItemProperty -Path "HKCU:\System\GameConfigStore" -Name GameDVR_Enabled -Type DWord -Value 0

    # Turn off People in Taskbar
    If (-Not (Test-Path "HKCU:SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\People")) {
    New-Item -Path HKCU:SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\People | Out-Null
    }
    Set-ItemProperty -Path "HKCU:SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\People" -Name PeopleBand -Type DWord -Value 0

    #--- Restore Temporary Settings ---
  15. @jessfraz jessfraz revised this gist Sep 20, 2017. 1 changed file with 12 additions and 0 deletions.
    12 changes: 12 additions & 0 deletions boxstarter.ps1
    Original file line number Diff line number Diff line change
    @@ -53,12 +53,18 @@ Get-AppxPackage Microsoft.3DBuilder | Remove-AppxPackage
    # Alarms
    Get-AppxPackage Microsoft.WindowsAlarms | Remove-AppxPackage

    # Autodesk
    Get-AppxPackage *Autodesk* | Remove-AppxPackage

    # Bing Weather, News, Sports, and Finance (Money):
    Get-AppxPackage Microsoft.BingFinance | Remove-AppxPackage
    Get-AppxPackage Microsoft.BingNews | Remove-AppxPackage
    Get-AppxPackage Microsoft.BingSports | Remove-AppxPackage
    Get-AppxPackage Microsoft.BingWeather | Remove-AppxPackage

    # BubbleWitch
    Get-AppxPackage *BubbleWitch* | Remove-AppxPackage

    # Candy Crush
    Get-AppxPackage king.com.CandyCrush* | Remove-AppxPackage

    @@ -80,6 +86,9 @@ Get-AppxPackage Microsoft.WindowsFeedbackHub | Remove-AppxPackage
    # Get Started
    Get-AppxPackage Microsoft.Getstarted | Remove-AppxPackage

    # Keeper
    Get-AppxPackage *Keeper* | Remove-AppxPackage

    # Mail & Calendar
    Get-AppxPackage microsoft.windowscommunicationsapps | Remove-AppxPackage

    @@ -127,6 +136,9 @@ Get-AppxPackage Microsoft.WindowsPhone | Remove-AppxPackage
    # Photos
    Get-AppxPackage Microsoft.Windows.Photos | Remove-AppxPackage

    # Plex
    Get-AppxPackage *Plex* | Remove-AppxPackage

    # Skype (Metro version)
    Get-AppxPackage Microsoft.SkypeApp | Remove-AppxPackage

  16. @jessfraz jessfraz revised this gist Sep 19, 2017. 1 changed file with 3 additions and 0 deletions.
    3 changes: 3 additions & 0 deletions boxstarter.ps1
    Original file line number Diff line number Diff line change
    @@ -223,6 +223,9 @@ Set-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MTCUV
    Set-ItemProperty -Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\GameDVR" -Name AppCaptureEnabled -Type DWord -Value 0
    Set-ItemProperty -Path "HKCU:\System\GameConfigStore" -Name GameDVR_Enabled -Type DWord -Value 0

    # Turn off People in Taskbar
    Set-ItemProperty -Path "HKCU:SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\People" -Name PeopleBand -Type DWord -Value 0

    #--- Restore Temporary Settings ---
    Enable-UAC
    Enable-MicrosoftUpdate
  17. @jessfraz jessfraz revised this gist Sep 18, 2017. 1 changed file with 1 addition and 0 deletions.
    1 change: 1 addition & 0 deletions boxstarter.ps1
    Original file line number Diff line number Diff line change
    @@ -41,6 +41,7 @@ choco install sysinternals -y
    #--- Apps ---
    choco install googlechrome
    choco install docker-for-windows
    choco install sharex
    # choco install microsoft-teams
    # choco install vcxsrv

  18. @jessfraz jessfraz revised this gist Sep 18, 2017. 1 changed file with 5 additions and 5 deletions.
    10 changes: 5 additions & 5 deletions boxstarter.ps1
    Original file line number Diff line number Diff line change
    @@ -33,16 +33,16 @@ choco install Microsoft-Hyper-V-All -source windowsFeatures
    choco install Microsoft-Windows-Subsystem-Linux -source windowsfeatures

    #--- Tools ---
    choco install git -params '"/GitAndUnixToolsOnPath /WindowsTerminal"' -y
    choco install poshgit
    # choco install git -params '"/GitAndUnixToolsOnPath /WindowsTerminal"' -y
    # choco install poshgit
    choco install sysinternals -y
    choco install vim
    # choco install vim

    #--- Apps ---
    choco install googlechrome
    choco install docker-for-windows
    choco install microsoft-teams
    choco install vcxsrv
    # choco install microsoft-teams
    # choco install vcxsrv

    #--- Uninstall unecessary applications that come with Windows out of the box ---

  19. @jessfraz jessfraz revised this gist Sep 18, 2017. 1 changed file with 1 addition and 1 deletion.
    2 changes: 1 addition & 1 deletion boxstarter.ps1
    Original file line number Diff line number Diff line change
    @@ -194,7 +194,7 @@ Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer
    # Disable Quick Access: Frequent Folders
    Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer -Name ShowFrequent -Type DWord -Value 0
    # To Restore:
    #Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer -Name ShowRecent -Type DWord -Value 1
    # Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer -Name ShowRecent -Type DWord -Value 1
    # Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer -Name ShowFrequent -Type DWord -Value 1

    # Disable the Lock Screen (the one before password prompt - to prevent dropping the first character)
  20. @jessfraz jessfraz revised this gist Sep 18, 2017. 1 changed file with 6 additions and 6 deletions.
    12 changes: 6 additions & 6 deletions boxstarter.ps1
    Original file line number Diff line number Diff line change
    @@ -153,7 +153,7 @@ Get-AppxPackage Microsoft.ZuneMusic | Remove-AppxPackage
    Get-AppxPackage Microsoft.ZuneVideo | Remove-AppxPackage

    #--- Windows Settings ---
    # Most from: @NickCraver's gist https://gist.github.com/NickCraver/7ebf9efbfd0c3eab72e9
    # Some from: @NickCraver's gist https://gist.github.com/NickCraver/7ebf9efbfd0c3eab72e9

    # Privacy: Let apps use my advertising ID: Disable
    If (-Not (Test-Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\AdvertisingInfo")) {
    @@ -181,7 +181,7 @@ Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Search -N
    # Change Explorer home screen back to "This PC"
    Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced -Name LaunchTo -Type DWord -Value 1
    # Change it back to "Quick Access" (Windows 10 default)
    #Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced -Name LaunchTo -Type DWord -Value 2
    # Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced -Name LaunchTo -Type DWord -Value 2

    # Better File Explorer
    Set-ItemProperty -Path HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced -Name NavPaneExpandToCurrentFolder -Value 1
    @@ -195,28 +195,28 @@ Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer
    Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer -Name ShowFrequent -Type DWord -Value 0
    # To Restore:
    #Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer -Name ShowRecent -Type DWord -Value 1
    #Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer -Name ShowFrequent -Type DWord -Value 1
    # Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer -Name ShowFrequent -Type DWord -Value 1

    # Disable the Lock Screen (the one before password prompt - to prevent dropping the first character)
    If (-Not (Test-Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\Personalization)) {
    New-Item -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows -Name Personalization | Out-Null
    }
    Set-ItemProperty -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\Personalization -Name NoLockScreen -Type DWord -Value 1
    # To Restore:
    #Set-ItemProperty -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\Personalization -Name NoLockScreen -Type DWord -Value 1
    # Set-ItemProperty -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\Personalization -Name NoLockScreen -Type DWord -Value 1

    # Lock screen (not sleep) on lid close
    Set-ItemProperty -Path 'HKLM:\SYSTEM\CurrentControlSet\Control\Session Manager\Power' -Name AwayModeEnabled -Type DWord -Value 1
    # To Restore:
    #Set-ItemProperty -Path 'HKLM:\SYSTEM\CurrentControlSet\Control\Session Manager\Power' -Name AwayModeEnabled -Type DWord -Value 0
    # Set-ItemProperty -Path 'HKLM:\SYSTEM\CurrentControlSet\Control\Session Manager\Power' -Name AwayModeEnabled -Type DWord -Value 0

    # Use the Windows 7-8.1 Style Volume Mixer
    If (-Not (Test-Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MTCUVC")) {
    New-Item -Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion" -Name MTCUVC | Out-Null
    }
    Set-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MTCUVC" -Name EnableMtcUvc -Type DWord -Value 0
    # To Restore (Windows 10 Style Volume Control):
    #Set-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MTCUVC" -Name EnableMtcUvc -Type DWord -Value 1
    # Set-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MTCUVC" -Name EnableMtcUvc -Type DWord -Value 1

    # Disable Xbox Gamebar
    Set-ItemProperty -Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\GameDVR" -Name AppCaptureEnabled -Type DWord -Value 0
  21. @jessfraz jessfraz revised this gist Sep 16, 2017. 1 changed file with 2 additions and 2 deletions.
    4 changes: 2 additions & 2 deletions boxstarter.ps1
    Original file line number Diff line number Diff line change
    @@ -230,6 +230,6 @@ Install-WindowsUpdate -acceptEula
    #--- Rename the Computer ---
    # Requires restart, or add the -Restart flag
    $computername = "acidburn"
    if ($env:computername -ne "acidburn") {
    Rename-Computer -NewName "acidburn"
    if ($env:computername -ne $computername) {
    Rename-Computer -NewName $computername
    }
  22. @jessfraz jessfraz revised this gist Sep 16, 2017. 1 changed file with 4 additions and 1 deletion.
    5 changes: 4 additions & 1 deletion boxstarter.ps1
    Original file line number Diff line number Diff line change
    @@ -229,4 +229,7 @@ Install-WindowsUpdate -acceptEula

    #--- Rename the Computer ---
    # Requires restart, or add the -Restart flag
    Rename-Computer -NewName "acidburn"
    $computername = "acidburn"
    if ($env:computername -ne "acidburn") {
    Rename-Computer -NewName "acidburn"
    }
  23. @jessfraz jessfraz revised this gist Sep 16, 2017. 1 changed file with 6 additions and 4 deletions.
    10 changes: 6 additions & 4 deletions boxstarter.ps1
    Original file line number Diff line number Diff line change
    @@ -92,10 +92,12 @@ Get-AppxPackage *MarchofEmpires* | Remove-AppxPackage
    Get-AppxPackage *McAfee* | Remove-AppxPackage

    # Uninstall McAfee Security App
    $uninstall = gci "HKLM:\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall" | foreach { gp $_.PSPath } | ? { $_ -match "McAfee Security" } | select UninstallString
    $uninstall = $uninstall.UninstallString -Replace "C:\Program Files\McAfee\MSC\mcuihost.exe",""
    Write "Uninstalling McAfee..."
    start-process "C:\Program Files\McAfee\MSC\mcuihost.exe" -arg "$uninstall" -Wait
    $mcafee = gci "HKLM:\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall" | foreach { gp $_.PSPath } | ? { $_ -match "McAfee Security" } | select UninstallString
    if ($mcafee) {
    $mcafee = $mcafee.UninstallString -Replace "C:\Program Files\McAfee\MSC\mcuihost.exe",""
    Write "Uninstalling McAfee..."
    start-process "C:\Program Files\McAfee\MSC\mcuihost.exe" -arg "$mcafee" -Wait
    }

    # Messaging
    Get-AppxPackage Microsoft.Messaging | Remove-AppxPackage
  24. @jessfraz jessfraz revised this gist Sep 16, 2017. 1 changed file with 7 additions and 2 deletions.
    9 changes: 7 additions & 2 deletions boxstarter.ps1
    Original file line number Diff line number Diff line change
    @@ -2,10 +2,15 @@
    # Author: Jess Frazelle <[email protected]>
    # Last Updated: 2017-09-11
    #
    # Install boxstarter:
    # . { iwr -useb http://boxstarter.org/bootstrapper.ps1 } | iex; get-boxstarter -Force
    #
    # You might need to set: Set-ExecutionPolicy RemoteSigned
    #
    # Run this boxstarter by calling the following from an **elevated** command-prompt:
    # start http://boxstarter.org/package/nr/url?<URL-TO-RAW-GIST>
    # start http://boxstarter.org/package/nr/url?<URL-TO-RAW-GIST>
    # OR
    # Install-BoxstarterPackage -PackageName <URL-TO-RAW-GIST> -DisableReboots
    # Install-BoxstarterPackage -PackageName <URL-TO-RAW-GIST> -DisableReboots
    #
    # Learn more: http://boxstarter.org/Learn/WebLauncher

  25. @jessfraz jessfraz revised this gist Sep 16, 2017. 1 changed file with 1 addition and 0 deletions.
    1 change: 1 addition & 0 deletions boxstarter.ps1
    Original file line number Diff line number Diff line change
    @@ -221,4 +221,5 @@ Enable-MicrosoftUpdate
    Install-WindowsUpdate -acceptEula

    #--- Rename the Computer ---
    # Requires restart, or add the -Restart flag
    Rename-Computer -NewName "acidburn"
  26. @jessfraz jessfraz revised this gist Sep 16, 2017. 1 changed file with 4 additions and 1 deletion.
    5 changes: 4 additions & 1 deletion boxstarter.ps1
    Original file line number Diff line number Diff line change
    @@ -218,4 +218,7 @@ Set-ItemProperty -Path "HKCU:\System\GameConfigStore" -Name GameDVR_Enabled -Typ
    #--- Restore Temporary Settings ---
    Enable-UAC
    Enable-MicrosoftUpdate
    Install-WindowsUpdate -acceptEula
    Install-WindowsUpdate -acceptEula

    #--- Rename the Computer ---
    Rename-Computer -NewName "acidburn"
  27. @jessfraz jessfraz revised this gist Sep 16, 2017. 1 changed file with 6 additions and 0 deletions.
    6 changes: 6 additions & 0 deletions boxstarter.ps1
    Original file line number Diff line number Diff line change
    @@ -86,6 +86,12 @@ Get-AppxPackage *MarchofEmpires* | Remove-AppxPackage
    # McAfee Security
    Get-AppxPackage *McAfee* | Remove-AppxPackage

    # Uninstall McAfee Security App
    $uninstall = gci "HKLM:\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall" | foreach { gp $_.PSPath } | ? { $_ -match "McAfee Security" } | select UninstallString
    $uninstall = $uninstall.UninstallString -Replace "C:\Program Files\McAfee\MSC\mcuihost.exe",""
    Write "Uninstalling McAfee..."
    start-process "C:\Program Files\McAfee\MSC\mcuihost.exe" -arg "$uninstall" -Wait

    # Messaging
    Get-AppxPackage Microsoft.Messaging | Remove-AppxPackage

  28. @jessfraz jessfraz revised this gist Sep 16, 2017. 1 changed file with 3 additions and 0 deletions.
    3 changes: 3 additions & 0 deletions boxstarter.ps1
    Original file line number Diff line number Diff line change
    @@ -205,6 +205,9 @@ Set-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MTCUV
    # To Restore (Windows 10 Style Volume Control):
    #Set-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MTCUVC" -Name EnableMtcUvc -Type DWord -Value 1

    # Disable Xbox Gamebar
    Set-ItemProperty -Path "HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\GameDVR" -Name AppCaptureEnabled -Type DWord -Value 0
    Set-ItemProperty -Path "HKCU:\System\GameConfigStore" -Name GameDVR_Enabled -Type DWord -Value 0

    #--- Restore Temporary Settings ---
    Enable-UAC
  29. @jessfraz jessfraz revised this gist Sep 16, 2017. 1 changed file with 2 additions and 2 deletions.
    4 changes: 2 additions & 2 deletions boxstarter.ps1
    Original file line number Diff line number Diff line change
    @@ -193,9 +193,9 @@ Set-ItemProperty -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\Personalization
    #Set-ItemProperty -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\Personalization -Name NoLockScreen -Type DWord -Value 1

    # Lock screen (not sleep) on lid close
    Set-ItemProperty -Path HKLM:\SOFTWARE\CurrentControlSet\Control\SessionManager\Power -Name AwayModeEnabled -Type DWord -Value 1
    Set-ItemProperty -Path 'HKLM:\SYSTEM\CurrentControlSet\Control\Session Manager\Power' -Name AwayModeEnabled -Type DWord -Value 1
    # To Restore:
    #Set-ItemProperty -Path HKLM:\SOFTWARE\CurrentControlSet\Control\SessionManager\Power -Name AwayModeEnabled -Type DWord -Value 0
    #Set-ItemProperty -Path 'HKLM:\SYSTEM\CurrentControlSet\Control\Session Manager\Power' -Name AwayModeEnabled -Type DWord -Value 0

    # Use the Windows 7-8.1 Style Volume Mixer
    If (-Not (Test-Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MTCUVC")) {
  30. @jessfraz jessfraz revised this gist Sep 16, 2017. 1 changed file with 8 additions and 2 deletions.
    10 changes: 8 additions & 2 deletions boxstarter.ps1
    Original file line number Diff line number Diff line change
    @@ -161,8 +161,9 @@ Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Search -N
    # Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Search -Name BingSearchEnabled -Type DWord -Value 1

    # Disable Telemetry (requires a reboot to take effect)
    Set-ItemProperty -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\DataCollection -Name AllowTelemetry -Type DWord -Value 0
    Get-Service DiagTrack,Dmwappushservice | Stop-Service | Set-Service -StartupType Disabled
    # Note this may break Insider builds for your organization
    # Set-ItemProperty -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\DataCollection -Name AllowTelemetry -Type DWord -Value 0
    # Get-Service DiagTrack,Dmwappushservice | Stop-Service | Set-Service -StartupType Disabled

    # Change Explorer home screen back to "This PC"
    Set-ItemProperty -Path HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced -Name LaunchTo -Type DWord -Value 1
    @@ -191,6 +192,11 @@ Set-ItemProperty -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\Personalization
    # To Restore:
    #Set-ItemProperty -Path HKLM:\SOFTWARE\Policies\Microsoft\Windows\Personalization -Name NoLockScreen -Type DWord -Value 1

    # Lock screen (not sleep) on lid close
    Set-ItemProperty -Path HKLM:\SOFTWARE\CurrentControlSet\Control\SessionManager\Power -Name AwayModeEnabled -Type DWord -Value 1
    # To Restore:
    #Set-ItemProperty -Path HKLM:\SOFTWARE\CurrentControlSet\Control\SessionManager\Power -Name AwayModeEnabled -Type DWord -Value 0

    # Use the Windows 7-8.1 Style Volume Mixer
    If (-Not (Test-Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\MTCUVC")) {
    New-Item -Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion" -Name MTCUVC | Out-Null