Monday, 25 June 2018 16:09

Yet Another Windows 10 Optimization Script

Written by
Rate this item
(8 votes)

image

As a reminder, Microsoft will be ending support for Windows 7 SP1 on January 14, 2020. I've had multiple enterprise customer engagements over the past several months and with less than two years left, I wanted to take a look at how you can potentially optimize your OS image and successfully transition to a Windows 10 environment. The clock is ticking!

The topic of Windows 10 optimizations comes up often enough, so I figured I should address it in a separate blog post. There are a lot of customers I've worked with who have heard "somewhere" (not sure where) that they should be optimizing their operating system by minimizing connections from Windows to Microsoft services and by disabling unnecessary services and features to improve performance. Now, I've seen a few optimization scripts on the net that will reduce the functionality and security configuration of your devices and may also put you into an untested and unsupported configuration. Consequently, I thought I would share the Windows 10 optimization script that I put together based on my conversations with enterprise customers. Several organizations used this script as part of their deployment to rapidly drive successful Windows 10 adoption and to thrive within a Windows as a Service environment.

It’s important to note and observe that while the script is based on Microsoft's recommendations and best practices and I have successfully used it in various environments, there is no 'one size fits all' solution. If you do not want to run into compatibility problems, then you should carefully review each setting that the script applies and remove undesired configuration changes to accommodate your requirements. Identify which Windows system services, scheduled tasks, and features you intend to disable, and then carefully verify them in a lab environment.

Key Features:

Optimization Enabled by default?
Link the quick action tile to the desktop OneNote app (Note: Adjust the path to the OneNote executable in the script) false
Allow Remote Desktop connections (RDP) false
Disable OneDrive client false
Prefer IPv4 over IPv6 false
Disable IE first run wizard true
Disable Microsoft Edge Desktop shortcut creation (Note: Windows 10, Version 1803+) true
Disable new network dialog true
Disable services true
Disable scheduled tasks true
Apply privacy mitigations true
Install logon script false

Configuration Settings

The following sections list additional information:

Services:

The script will disable following services:

  • Microsoft Account Sign-in Assistant
  • Windows Error Reporting
  • Xbox Live Auth Manager
  • Xbox Live Game Save
  • Xbox Live Networking Service
  • Xbox Accessory Management

Scheduled Tasks

The script will disable following scheduled tasks:

  • Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser
  • Microsoft\Windows\Application Experience\ProgramDataUpdater
  • Microsoft\Windows\Application Experience\StartupAppTask
  • Microsoft\Windows\Customer Experience Improvement Program\Consolidator
  • Microsoft\Windows\Customer Experience Improvement Program\UsbCeip
  • Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticResolver
  • Microsoft\Windows\Maps\MapsToastTask
  • Microsoft\Windows\Maps\MapsUpdateTask
  • Microsoft\Windows\Shell\FamilySafetyMonitor
  • Microsoft\Windows\WDI\ResolutionHost
  • Microsoft\Windows\Windows Media Sharing\UpdateLibrary
  • Microsoft\Windows\Autochk\Proxy
  • Microsoft\Windows\CloudExperienceHost\CreateObjectTask
  • Microsoft\Windows\Feedback\Siuf\DmClient
  • Microsoft\Windows\Feedback\Siuf\DmClientOnScenarioDownload
  • Microsoft\Windows\Shell\FamilySafetyRefreshTask
  • Microsoft\Windows\Windows Error Reporting\QueueReporting
  • Microsoft\XblGameSave\XblGameSaveTask

Privacy Mitigations

The following overview lists the modified settings that control the data that is sent to Microsoft by default. Read the Microsoft's documentation for more information about how to configure each setting.

  • Disable Cortana.
  • Disallow search and Cortana to use location.
  • Do not allow web search.
  • Disallow the user to change sign-in options.
  • Disable the Azure AD Sign In button in the settings app.
  • Block the Microsoft Account Sign-In Assistant.
  • Disable the MSA Sign In button in the settings app.
  • Disable camera usage on user's lock screen.
  • Disable lock screen slideshow.
  • Turn off unsolicited network traffic on the Offline Maps settings page.
  • Disable Automatic Download and Update of Map Data.
  • Enable Do Not Track in Microsoft Edge.
  • Disallow web content on New Tab page in Microsoft Edge.
  • Disable the advertising ID.
  • Turn off location services.
  • Disable automatic learning.
  • Turn off updates to the speech recognition and speech synthesis models.
  • Disallow Windows apps to access account information.
  • Disable all feedback notifications.
  • Set telemetry level to the lowest supported value (Enterprise/Education editions: supported telemetry level: Security. Otherwise: Basic).

Logon Script

You can use the accompanying logon script to apply following optimizations to new user profiles:

  • Set Windows Explorer default 'Open To' behavior to 'This PC'.
  • Show Computer shortcut on the desktop.
  • Show known file extensions in Explorer.
  • Disable 'Default Printer' feature.
  • Disable 'Send Microsoft info about how I write to help us improving typing and writing in the future' functionality.
  • Adjust feedback frequency. A value of 0 indicates that user is never prompted to provide feedback about Windows 10 functionality by Microsoft.

Good luck with your Windows 10 deployments!

Read 41778 times Last modified on Tuesday, 26 June 2018 12:40
  1. Comments (13)

  2. Add yours
This comment was minimized by the moderator on the site

how to apply during task sequence?

Nuno
This comment was minimized by the moderator on the site

Create a package with both scripts (without program) and add a step "Run PowerShell Script" calling the ApplyWin10Optimizations script.

Thorsten Schelter
This comment was minimized by the moderator on the site

The New-ItemProperty didn't work if the key doesn't exist for me. I had to use New-Item to create first
Example:
New-Item -Path 'HKLM:\SOFTWARE\Policies\Microsoft\Windows' -Name 'OneDrive' -Force
then
New-ItemProperty -Path...

The New-ItemProperty didn't work if the key doesn't exist for me. I had to use New-Item to create first
Example:
New-Item -Path 'HKLM:\SOFTWARE\Policies\Microsoft\Windows' -Name 'OneDrive' -Force
then
New-ItemProperty -Path 'HKLM:\SOFTWARE\Policies\Microsoft\Windows\OneDrive' -Name 'DisableFileSyncNGSC' -PropertyType DWORD -Value '1' -Force

Read More
George
This comment was minimized by the moderator on the site

Which key did not work for you?

Anton Romanyuk
This comment was minimized by the moderator on the site

How do i install this?

Matheus
This comment was minimized by the moderator on the site

You can run the script as part of your deployment task sequence (or manually from an administrative PowerShell prompt / ISE). Read the post above for additional details.

Anton Romanyuk
This comment was minimized by the moderator on the site

Disabling Microsoft Account Sign-in Assistant will cause the window store to fail in downloading any store applications and it throw a non descriptive error.

Jack
This comment was minimized by the moderator on the site

It's not unheard of. For instance, disabling this service caused OOBE issues in Windows 10, version 1709 when using a sysprepped image.

Anton Romanyuk
This comment was minimized by the moderator on the site

hi,
what is the supported windows version

And i have a problem with my windows 10
problem -
When i start my windows 10 the desktop not responds or file explorer
So, i have to go to msconfig and chose diagnostic startup and hit apply then it...

hi,
what is the supported windows version

And i have a problem with my windows 10
problem -
When i start my windows 10 the desktop not responds or file explorer
So, i have to go to msconfig and chose diagnostic startup and hit apply then it works.
But i dont have to restart my laptop it works.
But when I start my laptop it reverts
-----ANY IDEA----------

Read More
sniper
This comment was minimized by the moderator on the site

Thank you so much for this Post and all the best for your future. You are really a talented person I have ever seen. I am satisfied with the arrangement of your posts.

washing machine repair dubai
This comment was minimized by the moderator on the site

This blog looks just like my old one! It's on an entirely different topic but it has pretty much the same page layout and design. Wonderful choice of colors!

Website Development Dubai
This comment was minimized by the moderator on the site

Ouf. Pretty ruthless gutting of services...
I'd be careful with disabling MS Account signin, login scripts and privacy mitigaiton. Could create unnecessary issues with standard images

Start-Bushido
This comment was minimized by the moderator on the site

I agree. It is always a possibility (and I've seen sysprepp'ed images failing during OOBE). We do support this scenario to some extent. However, since creating this script 3 years ago, certain parameters did change internally. I am inclined to...

I agree. It is always a possibility (and I've seen sysprepp'ed images failing during OOBE). We do support this scenario to some extent. However, since creating this script 3 years ago, certain parameters did change internally. I am inclined to remove this bit from the script once I get the chance...

Read More
Anton Romanyuk
There are no comments posted here yet

Leave your comments

  1. Posting comment as a guest.
0 Characters
Attachments (0 / 3)
Share Your Location

Recent Posts

  • An alternative ESU MAK Activation Solution
    This blog post was shared with me by a colleague of mine, Daniel Dorner, a Microsoft Premier Field Engineer. It’s…
    Written on Wednesday, 04 December 2019 21:04
  • The Case of Missing UE-V Templates
    My customers often deal with unexpected Windows behavior and this case is no different. This particular one is especially interesting…
    Written on Tuesday, 03 September 2019 12:20
  • The Case of Corrupted Store Apps
    A few days ago I began experiencing issues with built-in Windows apps where various apps would flash open and close…
    Written on Wednesday, 14 August 2019 13:36
  • The Case of Changing Default Printer
    While I sometimes long for the day when I no longer have to deal with unexpected Windows 10 behavior, there’s…
    Written on Wednesday, 14 August 2019 20:36
  • Windows 10 1903: Useful Resources for IT Professionals
    Windows 10, version 1903 is now available via Windows Update for Business, Windows Server Update Services (WSUS) and the Volume…
    Written on Friday, 07 June 2019 11:21
  • Windows 10 1903 Built-In Apps: What to Keep
    The development of the Windows 10, version 1903 is finished and the update is now available for download from Visual…
    Written on Monday, 03 June 2019 06:59