Monday, 25 June 2018 16:09

Yet Another Windows 10 Optimization Script

Written by
Rate this item
(2 votes)

image

As a reminder, Microsoft will be ending support for Windows 7 SP1 on January 14, 2020. I've had multiple enterprise customer engagements over the past several months and with less than two years left, I wanted to take a look at how you can potentially optimize your OS image and successfully transition to a Windows 10 environment. The clock is ticking!

The topic of Windows 10 optimizations comes up often enough, so I figured I should address it in a separate blog post. There are a lot of customers I've worked with who have heard "somewhere" (not sure where) that they should be optimizing their operating system by minimizing connections from Windows to Microsoft services and by disabling unnecessary services and features to improve performance. Now, I've seen a few optimization scripts on the net that will reduce the functionality and security configuration of your devices and may also put you into an untested and unsupported configuration. Consequently, I thought I would share the Windows 10 optimization script that I put together based on my conversations with enterprise customers. Several organizations used this script as part of their deployment to rapidly drive successful Windows 10 adoption and to thrive within a Windows as a Service environment.

It’s important to note and observe that while the script is based on Microsoft's recommendations and best practices and I have successfully used it in various environments, there is no 'one size fits all' solution. If you do not want to run into compatibility problems, then you should carefully review each setting that the script applies and remove undesired configuration changes to accommodate your requirements. Identify which Windows system services, scheduled tasks, and features you intend to disable, and then carefully verify them in a lab environment.

Key Features:

Optimization Enabled by default?
Link the quick action tile to the desktop OneNote app (Note: Adjust the path to the OneNote executable in the script) false
Allow Remote Desktop connections (RDP) false
Disable OneDrive client false
Prefer IPv4 over IPv6 false
Disable IE first run wizard true
Disable Microsoft Edge Desktop shortcut creation (Note: Windows 10, Version 1803+) true
Disable new network dialog true
Disable services true
Disable scheduled tasks true
Apply privacy mitigations true
Install logon script false

Configuration Settings

The following sections list additional information:

Services:

The script will disable following services:

  • Microsoft Account Sign-in Assistant
  • Windows Error Reporting
  • Xbox Live Auth Manager
  • Xbox Live Game Save
  • Xbox Live Networking Service
  • Xbox Accessory Management

Scheduled Tasks

The script will disable following scheduled tasks:

  • Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser
  • Microsoft\Windows\Application Experience\ProgramDataUpdater
  • Microsoft\Windows\Application Experience\StartupAppTask
  • Microsoft\Windows\Customer Experience Improvement Program\Consolidator
  • Microsoft\Windows\Customer Experience Improvement Program\UsbCeip
  • Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticResolver
  • Microsoft\Windows\Maps\MapsToastTask
  • Microsoft\Windows\Maps\MapsUpdateTask
  • Microsoft\Windows\Shell\FamilySafetyMonitor
  • Microsoft\Windows\WDI\ResolutionHost
  • Microsoft\Windows\Windows Media Sharing\UpdateLibrary
  • Microsoft\Windows\Autochk\Proxy
  • Microsoft\Windows\CloudExperienceHost\CreateObjectTask
  • Microsoft\Windows\Feedback\Siuf\DmClient
  • Microsoft\Windows\Feedback\Siuf\DmClientOnScenarioDownload
  • Microsoft\Windows\Shell\FamilySafetyRefreshTask
  • Microsoft\Windows\Windows Error Reporting\QueueReporting
  • Microsoft\XblGameSave\XblGameSaveTask

Privacy Mitigations

The following overview lists the modified settings that control the data that is sent to Microsoft by default. Read the Microsoft's documentation for more information about how to configure each setting.

  • Disable Cortana.
  • Disallow search and Cortana to use location.
  • Do not allow web search.
  • Disallow the user to change sign-in options.
  • Disable the Azure AD Sign In button in the settings app.
  • Block the Microsoft Account Sign-In Assistant.
  • Disable the MSA Sign In button in the settings app.
  • Disable camera usage on user's lock screen.
  • Disable lock screen slideshow.
  • Turn off unsolicited network traffic on the Offline Maps settings page.
  • Disable Automatic Download and Update of Map Data.
  • Enable Do Not Track in Microsoft Edge.
  • Disallow web content on New Tab page in Microsoft Edge.
  • Disable the advertising ID.
  • Turn off location services.
  • Disable automatic learning.
  • Turn off updates to the speech recognition and speech synthesis models.
  • Disallow Windows apps to access account information.
  • Disable all feedback notifications.
  • Set telemetry level to the lowest supported value (Enterprise/Education editions: supported telemetry level: Security. Otherwise: Basic).

Logon Script

You can use the accompanying logon script to apply following optimizations to new user profiles:

  • Set Windows Explorer default 'Open To' behavior to 'This PC'.
  • Show Computer shortcut on the desktop.
  • Show known file extensions in Explorer.
  • Disable 'Default Printer' feature.
  • Disable 'Send Microsoft info about how I write to help us improving typing and writing in the future' functionality.
  • Adjust feedback frequency. A value of 0 indicates that user is never prompted to provide feedback about Windows 10 functionality by Microsoft.

Good luck with your Windows 10 deployments!

Read 5257 times Last modified on Tuesday, 26 June 2018 12:40
  1. Comments (2)

  2. Add yours

Comments (2)

This comment was minimized by the moderator on the site

how to apply during task sequence?

This comment was minimized by the moderator on the site

Create a package with both scripts (without program) and add a step "Run PowerShell Script" calling the ApplyWin10Optimizations script.

There are no comments posted here yet

Leave your comments

  1. Posting comment as a guest.
0 Characters
Attachments (0 / 3)
Share Your Location

Recent Posts