Skip to content

Commit

Permalink
Update to v0.7
Browse files Browse the repository at this point in the history
  • Loading branch information
@styris-ame
styris-ame committed Jun 13, 2024
1 parent 08d4aea commit 276ec8a
Show file tree
Hide file tree
Showing 34 changed files with 207 additions and 77 deletions.
13 changes: 0 additions & 13 deletions src/Configuration/custom.yml
View file

This file was deleted.

12 changes: 12 additions & 0 deletions src/Configuration/main.yml
View file
Original file line number Diff line number Diff line change
@@ -0,0 +1,12 @@
---
title: Custom
description: Custom AME configuration
privilege: Admin
actions:
- !task {path: 'tasks\regedits.yml'}
- !task {path: 'tasks\appx.yml'}
- !task {path: 'tasks\services.yml'}
- !task {path: 'tasks\components.yml'}
- !task {path: 'tasks\files.yml'}
- !task {path: 'tasks\config.yml'}
- !task {path: 'tasks\software.yml'}
2 changes: 2 additions & 0 deletions src/Configuration/tasks/appx.yml
View file
Original file line number Diff line number Diff line change
Expand Up @@ -67,6 +67,8 @@ actions:
- !appx: {name: '*XboxSpeechToTextOverlay*', type: family}
- !appx: {name: '*YourPhone*', type: family}
- !appx: {name: '*Zune*', type: family}
- !appx: {name: '*MicrosoftFamily*', type: family}
- !appx: {name: '*MicrosoftWindows.Client.AIX*', type: family}

- !appx: {name: '*Global.IrisService*', type: app}
- !appx: {name: '*Global.Accounts*', type: app}
Expand Down
16 changes: 13 additions & 3 deletions src/Configuration/tasks/components.yml
View file
Original file line number Diff line number Diff line change
Expand Up @@ -16,7 +16,6 @@ actions:
- !taskKill: {name: "SkypeBackgroundHost"}
- !taskKill: {name: "MsMpEng"}
- !taskKill: {name: "msiexec"}

- !file: {path: "%windir%\\System32\\smartscreen.exe"}
- !file: {path: "%windir%\\System32\\smartscreenps.dll"}
- !file: {path: "%windir%\\System32\\SecurityHealthSystray.exe"}
Expand All @@ -33,8 +32,8 @@ actions:
- !file: {path: "%windir%\\System32\\drivers\\WdNisDrv.sys"}
- !file: {path: "%ProgramW6432%\\Windows Defender Advanced Threat Protection"}
- !file: {path: "%SystemDrive%\\ProgramData\\Microsoft\\Windows Defender Advanced Threat Protection"}
- !file: {path: "%windir%\\System32\\drivers\\cldflt.sys"}

# - !file:
# path: "%windir%\\System32\\drivers\\cldflt.sys"
- !scheduledTask:
path: "\\Microsoft\\Windows\\Windows Defender\\Windows Defender Cache Maintenance"
operation: delete
Expand Down Expand Up @@ -160,6 +159,17 @@ actions:

- !run: {exeDir: true, exe: "ONED.bat", weight: 20}

- !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders', value: '{0DDD015D-B06C-45D5-8C4C-F59713854639}', operation: delete}
- !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders', value: '{35286A68-3C57-41A1-BBB1-0EAE73D76C95}', operation: delete}
- !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders', value: '{A0C69A99-21C8-4671-8703-7934162FCF1D}', operation: delete}
- !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders', value: '{F42EE2D3-909F-4907-8871-4C22FC0BF756}', operation: delete}

- !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders', value: 'Desktop', type: REG_SZ, data: '%USERPROFILE%\Desktop'}
- !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders', value: 'My Music', type: REG_SZ, data: '%USERPROFILE%\Music'}
- !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders', value: 'My Pictures', type: REG_SZ, data: '%USERPROFILE%\Pictures'}
- !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders', value: 'My Video', type: REG_SZ, data: '%USERPROFILE%\Videos'}
- !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\User Shell Folders', value: 'Personal', type: REG_SZ, data: '%USERPROFILE%\Documents'}

- !registryKey: {path: 'HKCR\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}'}
- !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run', value: 'OneDrive', operation: delete}
- !registryKey: {path: 'HKCU\SOFTWARE\Microsoft\OneDrive'}
Expand Down
8 changes: 3 additions & 5 deletions src/Configuration/tasks/config.yml
View file
Original file line number Diff line number Diff line change
Expand Up @@ -5,8 +5,7 @@ privilege: TrustedInstaller
actions:
# Sync time and set to more reliable time servers
- !service: {name: "w32time", operation: start, ignoreErrors: true}
- !run: {exe: 'w32tm', args: '/config /syncfromflags:manual /manualpeerlist:"0.pool.ntp.org 1.pool.ntp.org 2.pool.ntp.org 3.pool.ntp.org"'}
- !run: {exe: 'w32tm', args: '/config /update'}
- !run: {exe: 'w32tm', args: '/config /manualpeerlist:pool.ntp.org /syncfromflags:manual /update'}
- !run: {exe: 'w32tm', args: '/resync'}

- !writeStatus: {status: 'Cleaning user interface'}
Expand All @@ -28,7 +27,7 @@ actions:

- !run: {exe: "explorer.exe", wait: false, runas: currentUser}

- !writeStatus: {status: 'Configuring security permissions', option: "security-enhanced"}
- !writeStatus: {status: 'Configuring permissions', option: "security-enhanced"}
- !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System', value: 'ConsentPromptBehaviorAdmin', type: REG_DWORD, data: '5', option: "security-enhanced"}
- !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System', value: 'ConsentPromptBehaviorUser', type: REG_DWORD, data: '3', option: "security-enhanced"}
- !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System', value: 'EnableInstallerDetection', type: REG_DWORD, data: '1', option: "security-enhanced"}
Expand All @@ -54,5 +53,4 @@ actions:
- !writeStatus: {status: 'Modifying login screen', option: "ui"}
- !run:
exeDir: true
exe: "LOGIN.bat"
option: "ui"
exe: "LOGIN.bat"
14 changes: 0 additions & 14 deletions src/Configuration/tasks/dotnet.yml
View file

This file was deleted.

30 changes: 24 additions & 6 deletions src/Configuration/tasks/regedits.yml
View file
Original file line number Diff line number Diff line change
Expand Up @@ -4,6 +4,10 @@ description: Base AME registry edits
privilege: TrustedInstaller
actions:
- !writeStatus: {status: 'Modifying registry'}

# Re-enable blocklist
- !registryValue: {path: 'HKLM\SYSTEM\CurrentControlSet\Control\CI\Config', value: 'VulnerableDriverBlocklistEnable', type: REG_DWORD, data: '1'}

- !run:
exeDir: true
exe: "REGI.bat"
Expand Down Expand Up @@ -43,7 +47,7 @@ actions:
- !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Device Metadata', operation: add}

# New Control Panel cleanup - List of commands: https://winaero.com/ms-settings-commands-in-windows-10/
- !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer', value: 'SettingsPageVisibility', type: REG_SZ, data: 'hide:windowsdefender;activation;backup;delivery-optimization;findmydevice;developers;launchsecuritykeyenrollment;recovery;troubleshoot;windowsinsider;windowsinsider-optin;windowsupdate;windowsupdate-activehours;windowsupdate-options;workplace-provisioning;workplace-repairtoken;provisioning;windowsanywhere;regionlanguage-adddisplaylanguage;regionlanguage-languageoptions;regionlanguage-setdisplaylanguage;speech;storagerecommendations;surfacehub-accounts;search;search-moredetails;search-permissions;mobile-devices;personalization-start-places;gaming-gamebar;gaming-gamedvr;gaming-gamemode;family-group;cortana-moredetails;cortana-permissions;cortana-windowssearch;cortana;cortana-language;cortana-talktocortana;controlcenter;maps;maps-downloadmaps;videoplayback;appsforwebsites;optionalfeatures;workplace;emailandaccounts;otherusers;assignedaccess;signinoptions;signinoptions-dynamiclock;sync;backup;signinoptions-launchfaceenrollment;signinoptions-launchfingerprintenrollment;yourinfo;privacy-accessoryapps;privacy-accountinfo;privacy-activityhistory;privacy-advertisingid;privacy-appdiagnostics;privacy-automaticfiledownloads;privacy-backgroundapps;privacy-backgroundspatialperception;privacy-calendar;privacy-callhistory;privacy-webcam;privacy-contacts;privacy-documents;privacy-downloadsfolder;privacy-email;privacy-eyetracker (requires eyetracker hardware);privacy-feedback;privacy-broadfilesystemaccess;privacy-general;privacy-graphicscaptureprogrammatic;privacy-graphicscapturewithoutborder;privacy-speechtyping;privacy-location;privacy-messaging;privacy-microphone;privacy-motion;privacy-musiclibrary;privacy-notifications;privacy-customdevices;privacy-phonecalls;privacy-pictures;privacy-radios;privacy-speech;privacy-tasks;privacy-videos;privacy-voiceactivation;account;crossdevice;project;energyrecommendations;camera;deviceusage;home;quiethours'}
- !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer', value: 'SettingsPageVisibility', type: REG_SZ, data: 'hide:windowsdefender;activation;backup;delivery-optimization;findmydevice;developers;launchsecuritykeyenrollment;recovery;troubleshoot;windowsinsider;windowsinsider-optin;windowsupdate;windowsupdate-activehours;windowsupdate-options;workplace-provisioning;workplace-repairtoken;provisioning;windowsanywhere;regionlanguage-adddisplaylanguage;regionlanguage-languageoptions;regionlanguage-setdisplaylanguage;speech;storagerecommendations;surfacehub-accounts;search;search-moredetails;search-permissions;mobile-devices;personalization-start-places;gaming-gamebar;gaming-gamedvr;gaming-gamemode;family-group;cortana-moredetails;cortana-permissions;cortana-windowssearch;cortana;cortana-language;cortana-talktocortana;controlcenter;maps;maps-downloadmaps;videoplayback;appsforwebsites;optionalfeatures;workplace;emailandaccounts;otherusers;assignedaccess;signinoptions;signinoptions-dynamiclock;sync;backup;signinoptions-launchfaceenrollment;signinoptions-launchfingerprintenrollment;yourinfo;privacy-accessoryapps;privacy-accountinfo;privacy-activityhistory;privacy-advertisingid;privacy-appdiagnostics;privacy-automaticfiledownloads;privacy-backgroundapps;privacy-backgroundspatialperception;privacy-calendar;privacy-callhistory;privacy-webcam;privacy-contacts;privacy-documents;privacy-downloadsfolder;privacy-email;privacy-eyetracker;privacy-feedback;privacy-broadfilesystemaccess;privacy-general;privacy-graphicscaptureprogrammatic;privacy-graphicscapturewithoutborder;privacy-speechtyping;privacy-location;privacy-messaging;privacy-microphone;privacy-motion;privacy-musiclibrary;privacy-notifications;privacy-customdevices;privacy-phonecalls;privacy-pictures;privacy-radios;privacy-speech;privacy-tasks;privacy-videos;privacy-voiceactivation;account;crossdevice;project;camera;deviceusage;home;quiethours'}

# Decrease shutdown time
- !registryValue: {path: 'HKLM\SYSTEM\CurrentControlSet\Control', value: 'WaitToKillServiceTimeout', type: REG_SZ, data: '2000'}
Expand Down Expand Up @@ -85,9 +89,7 @@ actions:
- !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Speech_OneCore\Preferences', value: 'ModelDownloadAllowed', type: REG_DWORD, data: '0'}
- !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OOBE', value: 'DisableVoice', type: REG_DWORD, data: '1'}

# Firewall rules to prevent the startmenu from talking
- !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules', value: 'Block Search SearchApp.exe', type: REG_SZ, data: 'v2.30|Action=Block|Active=TRUE|Dir=Out|RA42=IntErnet|RA62=IntErnet|App=C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe|Name=Block Search SearchUI.exe|Desc=Block Cortana Outbound UDP/TCP Traffic|'}
# - !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules', value: 'Block Search Package', type: REG_SZ, data: 'v2.30|Action=Block|Active=TRUE|Dir=Out|RA42=IntErnet|RA62=IntErnet|Name=Block Search Package|Desc=Block Search Outbound UDP/TCP Traffic|AppPkgId=S-1-15-2-536077884-713174666-1066051701-3219990555-339840825-1966734348-1611281757|Platform=2:6:2|Platform2=GTEQ|'}
# - !registryValue: {path: 'HKLM\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules', value: 'Block Search Package', type: REG_SZ, data: 'v2.30|Action=Block|Active=TRUE|Dir=Out|RA42=IntErnet|RA62=IntErnet|Name=Block Search Package|Desc=Block Search Outbound UDP/TCP Traffic|AppPkgId=S-1-15-2-536077884-713174666-1066051701-3219990555-339840825-1966734348-1611281757|Platform=2:6:2|Platform2=GTEQ|'}

# Disable Timeline
- !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\System', value: 'EnableActivityFeed', type: REG_DWORD, data: '0'}
Expand Down Expand Up @@ -128,7 +130,7 @@ actions:
- !registryValue: {option: "security-enhanced", path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System', value: 'dontdisplaylastusername', type: REG_DWORD, data: '1'}

# Disable The Lock Screen
- !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Personalization', value: 'NoLockScreen', type: REG_DWORD, data: '1'}
# - !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Personalization', value: 'NoLockScreen', type: REG_DWORD, data: '1'}

- !registryValue: {path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\DataCollection', value: 'AllowTelemetry', type: REG_DWORD, data: '0'}

Expand Down Expand Up @@ -300,6 +302,11 @@ actions:

# Disable opening GameBar when pressing the XBOX button on an XBOX controller
- !registryValue: {path: 'HKCU\Software\Microsoft\GameBar', value: 'UseNexusForGameBarEnabled', type: REG_DWORD, data: '0'}
# Disable opening GameBar when connecting XBOX controller
- !registryValue: {path: 'HKCR\ms-gamebar', value: '', type: REG_SZ, data: 'URL:ms-gamebar'}
- !registryValue: {path: 'HKCR\ms-gamebar', value: 'URL Protocol', type: REG_SZ, data: ''}
- !registryValue: {path: 'HKCR\ms-gamebar', value: 'NoOpenWith', type: REG_SZ, data: ''}
- !registryValue: {path: 'HKCR\ms-gamebar\shell\open\command', value: '', type: REG_EXPAND_SZ, data: '%WINDIR%\System32\systray.exe'}

# Disables SmartScreen
- !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\AppHost', value: 'ContentEvaluation', type: REG_DWORD, data: '0'}
Expand Down Expand Up @@ -336,7 +343,7 @@ actions:
- !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'Start_IrisRecommendations', type: REG_DWORD, data: '0'}
- !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'Start_AccountNotifications', type: REG_DWORD, data: '0'}
- !registryValue: {option: "ui", path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'TaskbarGlomLevel', type: REG_DWORD, data: '2'}
- !registryValue: {option: "ui", path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'TaskbarDa', type: REG_DWORD, data: '0'}
- !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'TaskbarDa', type: REG_DWORD, data: '0'}
- !registryValue: {option: "ui", path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'TaskbarAl', type: REG_DWORD, data: '0'}
- !registryValue: {option: "ui", path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced', value: 'NavPaneShowAllFolders', type: REG_DWORD, data: '0'}

Expand All @@ -353,6 +360,8 @@ actions:
- !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Notifications\Settings\Windows.SystemToast.SecurityAndMaintenance', value: 'Enabled', type: REG_DWORD, data: '0'}
# Disable configue backup notifications
- !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Notifications\Settings\Windows.SystemToast.BackupReminder', value: 'Enabled', type: REG_DWORD, data: '0'}

- !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'ContentDeliveryAllowed', type: REG_DWORD, data: '0'}
# Disable "Let's Finish Setting Up Your Device" OOBE screen
- !registryValue: {path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager', value: 'SubscribedContent-310093Enabled', type: REG_DWORD, data: '0'}
# Settings suggested content
Expand Down Expand Up @@ -439,6 +448,15 @@ actions:
# Remove 'Gallery' in file explorer
- !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace_41040327\{e88865ea-0e1c-4e20-9aa6-edcd0212c87c}', operation: delete}

# Prevent DsmSvc from communicating with dspg.akamaiedge.net domains
- !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Device Metadata', value: 'PreventDeviceMetadataFromNetwork', type: REG_DWORD, data: '1'}

# Change time server
- !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\DateTime\Servers', value: '', type: REG_SZ, data: '1'}
- !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\DateTime\Servers', value: '1', type: REG_SZ, data: 'pool.ntp.org'}
- !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\DateTime\Servers', value: '2', type: REG_SZ, data: 'time.windows.com'}
- !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\DateTime\Servers', value: '3', type: REG_SZ, data: 'time.nist.gov'}

- !writeStatus: {status: 'Checking users'}
- !run:
exeDir: true
Expand Down
Loading

0 comments on commit 276ec8a

Please sign in to comment.