Merge pull request #7 from whatk233:new_tweaks

feat(rules): new rules
update(rules): DisableReservedStorage new registry item

tweaks/IE/EnableClearType.yaml

@@ -0,0 +1,12 @@
+meta:
+  en:
+    name: IE enable ClearType
+  zh:
+    name: IE 启用 ClearType
+applyDefaultUser: true
+tweaks:
+  registry:
+    - key: 'HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main'
+      valueName: "UseClearType"
+      type: "REG_SZ"
+      value: "yes"

tweaks/IE/EnableDotNotTrack.yaml

@@ -0,0 +1,12 @@
+meta:
+  en:
+    name: IE Enable sends "DoNotTrack" request
+  zh:
+    name: IE 发送不追踪请求
+applyDefaultUser: true
+tweaks:
+  registry:
+    - key: 'HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main'
+      valueName: "DoNotTrack"
+      type: "REG_SZ"
+      value: "1"

tweaks/IE/EnableWarnOnClose.yaml

@@ -0,0 +1,12 @@
+meta:
+  en:
+    name: Warn when IE closes multiple tabs
+  zh:
+    name: IE 关闭多个标签页时发出警告
+applyDefaultUser: true
+tweaks:
+  registry:
+    - key: 'HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TabbedBrowsing'
+      valueName: "WarnOnClose"
+      type: "REG_DWORD"
+      value: "1"

tweaks/IE/SetStartPageBlank.yaml

@@ -0,0 +1,16 @@
+meta:
+  en:
+    name: 'Set "about:blank" as the Startpage'
+  zh:
+    name: 设置空白页为浏览器主页
+applyDefaultUser: true
+tweaks:
+  registry:
+    - key: 'HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main'
+      valueName: "Start Page"
+      type: "REG_SZ"
+      value: "about:blank"
+    - key: 'HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main'
+      valueName: "Default_Page_URL"
+      type: "REG_SZ"
+      value: "about:blank"

tweaks/Optimize/ClearPageFileAtShutdown.yaml

@@ -0,0 +1,15 @@
+meta:
+  en:
+    name: Clear PageFile at shutdown
+  zh:
+    name: 关机时清理 Pagefile (虚拟内存页面文件)
+tweaks:
+  registry:
+    - key: 'HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management'
+      valueName: "ClearPageFileAtShutdown"
+      type: "REG_DWORD"
+      value: "1"
+    - key: 'HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\Session Manager\Memory Management'
+      valueName: "ClearPageFileAtShutdown"
+      type: "REG_DWORD"
+      value: "1"

tweaks/Optimize/DisableReservedStorage.yaml

@@ -1,8 +1,14 @@
 meta:
   en:
     name: Disable system reserved storage
+    desc: After Windows 10 1903
   zh:
     name: 禁用系统保留空间
 tweaks:
   run:
     - command: "dism /Online /Set-ReservedStorageState /State:Disabled"
+  registry:
+    - key: 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\ReserveManager'
+      valueName: "ShippedWithReserves"
+      type: "REG_DWORD"
+      value: "0"

tweaks/Optimize/DisbaleNonBestEffortLimit.yaml

@@ -0,0 +1,12 @@
+meta:
+  en:
+    name: Disable Limit reservable bandwidth
+    desc: "Ref: https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.QualityofService::QosNonBestEffortLimit"
+  zh:
+    name: 禁用 Windows 带宽保留
+tweaks:
+  registry:
+    - key: 'HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Psched'
+      valueName: "NonBestEffortLimit"
+      type: "REG_DWORD"
+      value: "0"

tweaks/Optimize/DisbalePreventNetworkTrafficPreUserSignIn.yaml

@@ -0,0 +1,12 @@
+meta:
+  en:
+    name: Disable Limit reservable bandwidth
+    desc: "Ref: https://admx.help/?Category=OneDrive&Policy=Microsoft.Policies.OneDriveNGSC::PreventNetworkTrafficPreUserSignIn"
+  zh:
+    name: 在用户登录前阻止 OneDrive 生成网络流量
+tweaks:
+  registry:
+    - key: 'HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\OneDrive'
+      valueName: "PreventNetworkTrafficPreUserSignIn"
+      type: "REG_DWORD"
+      value: "1"

tweaks/Optimize/DisbaleWindowsErrorReporting.yaml

@@ -0,0 +1,19 @@
+meta:
+  en:
+    name: Disable Windows Error Reporting
+  zh:
+    name: 禁用 Windows 错误报告
+tweaks:
+  registry:
+    - key: 'HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting'
+      valueName: "Disabled"
+      type: "REG_DWORD"
+      value: "1"
+    - key: 'HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting'
+      valueName: "LoggingDisabled"
+      type: "REG_DWORD"
+      value: "1"
+    - key: 'HKEY_LOCAL_MACHINE\SOFTWARE\Policies\PCHealth\ErrorReporting'
+      valueName: "DoReport"
+      type: "REG_DWORD"
+      value: "0"

tweaks/Security/DisableRemoteRegistry.yaml

@@ -0,0 +1,15 @@
+meta:
+  en:
+    name: Disable remote registry service
+  zh:
+    name: 禁止远程修改注册表
+tweaks:
+  registry:
+    - key: 'HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurePipeServers\winreg'
+      valueName: "RemoteRegAccess"
+      type: "REG_DWORD"
+      value: "1"
+    - key: 'HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry'
+      valueName: "Start"
+      type: "REG_DWORD"
+      value: "4"

tweaks/Security/DisableSecurityCenterNotifications.yaml

@@ -0,0 +1,19 @@
+meta:
+  en:
+    name: Disable Security Center Notifications
+  zh:
+    name: 关闭 Windows 安全中心通知
+tweaks:
+  registry:
+    - key: 'HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Notifications'
+      valueName: "DisableNotifications"
+      type: "REG_DWORD"
+      value: "1"
+    - key: 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center'
+      valueName: "AntiVirusDisableNotify"
+      type: "REG_DWORD"
+      value: "1"
+    - key: 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center'
+      valueName: "FirewallDisableNotify"
+      type: "REG_DWORD"
+      value: "1"

tweaks/Security/DisableSpectreMeltdownPatch.yaml

@@ -0,0 +1,16 @@
+meta:
+  en:
+    name: Disable Spectre,Meltdown Patch
+  zh:
+    name: 禁用 Spectre、Meltdown 漏洞缓解措施
+    desc: "Ref: https://www.landiannews.com/archives/58701.html  Ref: https://support.microsoft.com/en-us/topic/kb4073119-windows-client-guidance-for-it-pros-to-protect-against-silicon-based-microarchitectural-and-speculative-execution-side-channel-vulnerabilities-35820a8a-ae13-1299-88cc-357f104f5b11"
+tweaks:
+  registry:
+    - key: 'HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management'
+      valueName: "FeatureSettingsOverride"
+      type: "REG_DWORD"
+      value: "3"
+    - key: 'HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management'
+      valueName: "FeatureSettingsOverrideMask"
+      type: "REG_DWORD"
+      value: "3"

tweaks/Security/DisbaleAutoRun.yaml

@@ -0,0 +1,15 @@
+meta:
+  en:
+    name: Disable autoplay
+  zh:
+    name: 禁用自动播放
+tweaks:
+  registry:
+    - key: 'HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Explorer'
+      valueName: "NoAutoplayfornonVolume"
+      type: "REG_DWORD"
+      value: "1"
+    - key: 'HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Explorer'
+      valueName: "NoDriveTypeAutoRun"
+      type: "REG_DWORD"
+      value: "255"

tweaks/Security/DisbaleSystemRestore.yaml

@@ -0,0 +1,20 @@
+meta:
+  en:
+    name: Disable System Restore
+    desc: "Ref: https://learn.microsoft.com/en-us/windows/win32/sr/systemrestoreconfig https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.MSI::MSI_DisableSRCheckPoints https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.SystemRestore::SR_DisableSR"
+  zh:
+    name: 禁用系统还原
+tweaks:
+  registry:
+    - key: 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore'
+      valueName: "RPSessionInterval"
+      type: "REG_DWORD"
+      value: "0"
+    - key: 'HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Installer'
+      valueName: "LimitSystemRestoreCheckpointing"
+      type: "REG_DWORD"
+      value: "1"
+    - key: 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore'
+      valueName: "DisableSR"
+      type: "REG_DWORD"
+      value: "1"

tweaks/Security/EnableFilterAdministratorToken.yaml

@@ -0,0 +1,13 @@
+meta:
+  en:
+    name: Admin Approval Mode for the Built-in Administrator account
+    desc: https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/user-account-control-admin-approval-mode-for-the-built-in-administrator-account
+  zh:
+    name: 启用用于内置管理员帐户的管理员批准模式
+    desc: FilterAdministratorToken 是 Windows 的一个安全特性，用于防止未经授权的管理员权限访问。它通过分离管理员帐户的访问令牌来实现，从而保护系统免受恶意攻击。在 UAC（用户帐户控制）环境中，当用户试图使用管理员权限执行特定任务时，系统将使用 FilterAdministratorToken 来创建一个特殊的令牌，以便执行任务。这可以保证用户不能在不知不觉中使用管理员权限进行不安全的操作。——ChatGPT
+tweaks:
+  registry:
+    - key: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System'
+      valueName: "FilterAdministratorToken"
+      type: "REG_DWORD"
+      value: "1"

tweaks/Settings/ClearRecentDocsOnExit.yaml

@@ -0,0 +1,12 @@
+meta:
+  en:
+    name: Clean up recently opened document records when shutting down
+  zh:
+    name: 关机时清理最近打开的文档记录
+applyDefaultUser: true
+tweaks:
+  registry:
+    - key: 'HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer'
+      valueName: "ClearRecentDocsOnExit"
+      type: "REG_DWORD"
+      value: "1"

tweaks/Settings/DisableSearchBoxSuggestions.yaml

@@ -0,0 +1,12 @@
+meta:
+  en:
+    name: Disable taskbar searchBox suggestions
+  zh:
+    name: 关闭任务栏搜索的搜索建议
+applyDefaultUser: true
+tweaks:
+  registry:
+    - key: 'HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Explorer'
+      valueName: "DisableSearchBoxSuggestions"
+      type: "REG_DWORD"
+      value: "1"

tweaks/Settings/DisableStickyKeys.yaml

@@ -0,0 +1,12 @@
+meta:
+  en:
+    name: Disable StickyKey
+  zh:
+    name: 禁用粘滞键
+applyDefaultUser: true
+tweaks:
+  registry:
+    - key: 'HKEY_CURRENT_USER\Control Panel\Accessibility\StickyKeys'
+      valueName: "Flags"
+      type: "REG_SZ"
+      value: "506"

tweaks/Settings/EnableDeveloperMode.yaml

@@ -0,0 +1,11 @@
+meta:
+  en:
+    name: Enable Developer mode
+  zh:
+    name: 启用开发人员模式
+tweaks:
+  registry:
+    - key: 'HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModelUnlock'
+      valueName: "AllowDevelopmentWithoutDevLicense"
+      type: "REG_DWORD"
+      value: "1"

tweaks/Settings/EnableHttp1_1_Http_2.yaml

@@ -0,0 +1,16 @@
+meta:
+  en:
+    name: Enable HTTP 1.1/1.2
+  zh:
+    name: 启用 HTTP 1.1/1.2
+applyDefaultUser: true
+tweaks:
+  registry:
+    - key: 'HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings'
+      valueName: "EnableHttp1_1"
+      type: "REG_DWORD"
+      value: "1"
+    - key: 'HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings'
+      valueName: "EnableHttp2"
+      type: "REG_DWORD"
+      value: "1"

tweaks/Settings/EnableShowFileExt.yaml

@@ -0,0 +1,12 @@
+meta:
+  en:
+    name: Show "File name extensions"
+  zh:
+    name: 显示文件扩展名
+applyDefaultUser: true
+tweaks:
+  registry:
+    - key: 'HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced'
+      valueName: "HideFileExt"
+      type: "REG_DWORD"
+      value: "0"

tweaks/Settings/PowerMenuShowSleepOption.yaml

@@ -0,0 +1,11 @@
+meta:
+  en:
+    name: Power button shows sleep
+  zh:
+    name: 电源按钮显示睡眠
+tweaks:
+  registry:
+    - key: 'HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Explorer'
+      valueName: "ShowSleepOption"
+      type: "REG_DWORD"
+      value: "1"

version.json

@@ -1,3 +1,3 @@
 {
-  "version": "0.2.0"
+  "version": "0.2.1"
 }