≪ View Page
Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
pub:windows_setup [2023/12/15 06:10] – [essential utilities] derekpub:windows_setup [2025/04/14 07:11] (current) – derek
Line 1: Line 1:
-== windows setup +== Install Windows 
-* [[windows oobe bypass microsoft account]]+* [[?do=export_xhtml|export]] to https://repo.sxl.net/install_windows.html
 * [[Windows 7]] * [[Windows 7]]
-* [[https://www.microsoft.com/software-download/windows10|Win10 update assistant]] +* Win10 update assistant https://is.gd/OK28yz 
-* [[https://www.microsoft.com/software-download/windows11|Win11 update assistant]]+* Win11 update assistant https://is.gd/nLSnJd
  
-== windows 10+=== OOBE 
 +<WRAP colmedium> 
 +* OOBE bypass  
 +* <key>Shift-F10</key> then ''OOBE/BYPASSNRO'' 
 +* defaults apps ''control /name Microsoft.DefaultPrograms'' 
 +* language ''control /name Microsoft.Language'' 
 +* regional ''intl.cpl'' 
 +* date/time ''timedate.cpl'' 
 +* Network connections ''ncpa.cpl'' 
 +* firewall ''firewall.cpl'' 
 +* Printers ''control.exe printers'' 
 +* programs add/remove ''appwiz.cpl'' 
 +* windows features ''OptionalFeatures.exe'' 
 +* system propoerties ''sysdm.cpl'' 
 +* device manager ''devmgmt.msc'' 
 +* restart computer ''shutdown.exe /r /t 0'' 
 +* windows update ''control.exe update'' 
 +* user management  
 +* ''control.exe userpasswords''  
 +* ''control.exe userpasswords2''  
 +* ''lusrmgr.msc'' 
 +</WRAP>
  
-=== windows setup +=== create local admin Owner 
-* adjust desktop size/position: ''start desk.cpl'' +  net user /add Owner /y 
-* uninstall vendor bolatware, antivirus: ''start appwiz.cpl'' +  net localgroup administrators Owner /add 
-* create user/domain ''control userpasswords'' or ''control userpasswords2'' +  net user Owner "" /passwordreq:no /expires:never #empty password
-  net user /add Owner ; net localgroup administrators Owner /add +
-* rename computer, join domain: ''start sysdm.cpl''+
  
-== install essentials+=== set language 
 +  Set-ExecutionPolicy Bypass -Force 
 +  $repo="http://repo.sxl.net/_h/bin/" 
 +  $drv="c:\drv"; $null=(mkdir -Force "$drv"); cd "$drv" 
 +  $f="drv-setlang.ps1"; iwr "$repo/$f" -outfile "$f"; & "./$f" help 
 +  .\drv-setlang.ps1 us
  
 +== ESSENTIALS
  
- +=== Essential DRV
-=== essential utilities+
 <code powershell> <code powershell>
-# prepare DRV +<# prepare DRV & utils #> 
-if(!(Test-Path $profile) ) { New-Item -ItemType File -Path $profile -Force } +Set-ExecutionPolicy Bypass -Force 
-Add-Content $profile "`$host.PrivateData.ErrorForegroundColor = 'Magenta'" +$repo="http://repo.sxl.net/_h/bin" 
-$drv="c:\drv"; $repo="http://repo.sxl.net/win/bin" +$drv="c:\drv"; $null=(mkdir -Force "$drv"); cd "$drv" 
-New-Item -Force -ItemType Directory -Path $drv; Set-Location C:\drv +$f="curl.exe"; if(!(Get-Command $f -EA SilentlyContinue )) 
-$wc=New-Object System.Net.WebClient +  { Invoke-WebRequest "$repo/$f" -outfile "$env:windir\$f" } 
-$wc.DownloadFile("$repo/aria2c.exe", "$drv\aria2c.exe") +$f="7za.exe"; curl.exe -LO "$repo/$f" 
-.\aria2c -c "$repo/curl.exe" +$f="caffeine.exe"; curl.exe -LO "$repo/$f" 
-.\aria2c -c "$repo/7za.exe" +& "c:\drv\caffeine.exe" -stes -replace 
-#done+$f="drv-mail2sys.ps1"; curl.exe -LO "$repo/$f" 
 +$f="drv-setlang.ps1"; curl.exe -LO "$repo/$f" 
 +Add-Content "$env:windir\reboot.cmd" "shutdown.exe /r /t 0"  
 +### windows settings 
 +Enable-ComputerRestore -Drive C: -EA SilentlyContinue #System protection 
 +### set registry mailpw 
 +$p="HKLM:\SOFTWARE\SXLnet"; New-item -Path "$p" -EA SilentlyContinue 
 +New-ItemProperty "$p" -Name 'pw' -Value "A13c0BRpgWFWXQmi0lB2" -Force | Out-Null 
 +### Disable OOBE Lets Finish Setting Up 
 +$k="HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" 
 +reg.exe add $k /v SubscribedContent-310093Enabled /t REG_DWORD /d 1 /f 
 +### Powershell PROFILE 
 +$f="$PROFILE"; if(!(Test-Path $f)) { New-Item $f -Force } 
 +$re='\$\S+ErrorForegroundColor\s*=' 
 +(Get-Content $f) | Select-String $re -NotMatch | Set-Content $f 
 +'$host.PrivateData.ErrorForegroundColor="Magenta"' | Add-Content $f 
 +(Get-Content $f) | Where-Object {$_ -ne ""} | Set-Content $f # del blank lines 
 +. "$PROFILE" # source profile 
 +Get-Content $PROFILE 
 +. $PROFILE 
 +### Windows defender 
 +if ((Get-MpComputerStatus -EA SilentlyContinue).AntivirusEnabled) { 
 +  Set-MpPreference -EnableControlledFolderAccess Disabled 
 +  Set-MpPreference -DisableEmailScanning $False 
 +  Set-MpPreference -UILockdown $False 
 +  Set-MpPreference -PUAProtection Enabled 
 +  #$d="c:\drv\no_avscan"; mkdir -Force $d; cd $d; Set-MpPreference -ExclusionPath $d 
 +} 
 +### keep this session alive 
 +$f="caffeine.exe"; if (!(Test-Path "$f")) {curl.exe -LO "$repo/$f"} 
 +& "./$f" -stes -replace 
 +### Making pcinfo 
 +#$f="drv-pcinfo.ps1"; curl.exe -LO "$repo/$f"; & "./$f"
  
 +### Refresh environment
 +$env:Path=[System.Environment]::GetEnvironmentVariable("Path","Machine") 
 +$env:Path+=";"+[System.Environment]::GetEnvironmentVariable("Path","User") 
 +<# done #>
 </code> </code>
  
-  .\aria2c -c "$repo/wget.exe" +=== install/upgrade chocolatey
-  .\aria2c -c "https://download.teamviewer.com/download/TeamViewerQS.exe" +
-  .\aria2c -c "https://download.anydesk.com/AnyDesk.exe" +
- +
-=== aspia +
- +
-<code powershell> +
-mkdir -Force c:\drv ; sl c:\drv +
-.\aria2c.exe -c https://repo.sxl.net/proj/remote/aspiahost.exe +
-.\aspiahost.exe +
-#done +
-</code> +
- +
-==== China +
-<code powershell> +
-sl c:\drv +
-$p="-x 16 -s 16 -R -c" +
-.\aria2c.exe $p -o aspiahost.exe https://repo.sxl.net/proj/remote/aspiahost.exe +
-.\aspiahost.exe +
-.\aria2c -x $p -o quickq.exe https://repo.sxl.net/proj/babo/win32-quickq.exe +
- +
- +
-</code> +
- +
- +
-=== install chocolatey+
 * [[chocolatey]] * [[chocolatey]]
- 
 <code powershell> <code powershell>
- +$d="c:\drv"; $null=(mkdir -Force "$d"); cd "$d"
-# install chocolatey+
 Set-ExecutionPolicy Bypass -Scope Process -Force Set-ExecutionPolicy Bypass -Scope Process -Force
-[System.Net.ServicePointManager]::SecurityProtocol = [System.Net.ServicePointManager]::SecurityProtocol -bor 3072 +[System.Net.ServicePointManager]::SecurityProtocol = ` 
-iex ((New-Object System.Net.WebClient).DownloadString('https://community.chocolatey.org/install.ps1')) +  [System.Net.ServicePointManager]::SecurityProtocol -bor 3072 
 +$u="https://community.chocolatey.org/install.ps1" 
 +if (Get-Command choco -EA SilentlyContinue ) { choco upgrade chocolatey } ` 
 +else {iex ((New-Object System.Net.WebClient).DownloadString($u))} 
 +Import-Module $env:ChocolateyInstall\helpers\chocolateyProfile.psm1 
 +refreshenv 
 +# fix history problems 
 +$p="sudo"; if ( choco list --lo -r -e "$p" ) { choco uninstall "$p" } 
 +$p="gsudo"; if ( choco list --lo -r -e "$p" ) { choco uninstall "$p" } 
 +$p="choco-cleaner"; if ( choco list --lo -r -e "$p" ) { choco uninstall "$p" } 
 +$p="teamviewer"; if ( choco list --lo -r -e "$p" ) { choco uninstall "$p" } 
 +$p="teamviewer.host"; if ( choco list --lo -r -e "$p" ) { choco uninstall "$p" }
 # config chocolatey # config chocolatey
 +$env:ChocolateyToolsLocation="$env:ProgramData\tools"
 +setx.exe ChocolateyToolsLocation $env:ProgramData\tools
 choco feature enable -n allowGlobalConfirmation choco feature enable -n allowGlobalConfirmation
 choco feature enable -n useRememberedArgumentsForUpgrades choco feature enable -n useRememberedArgumentsForUpgrades
 +refreshenv 
 +choco upgrade chocolatey
 # install essentials # install essentials
 choco install 7zip.commandline wget curl aria2 gsudo nircmd choco install 7zip.commandline wget curl aria2 gsudo nircmd
-#choco install peazip.install --version 9.2.0 +"`nImport-Module 'gsudoModule'" | Add-Content $PROFILE 
-choco install peazip.install +choco upgrade all
- +
-# choco install grep which nircmd peazip.install choco-cleaner +
-# end init+
 </code> </code>
  
-=== upgrade chocolatey+=== choco cleaner
 <code> <code>
-choco upgrade chocolatey 
 choco upgrade all choco upgrade all
 +choco install choco-cleaner  --params "'/NOTASK:TRUE'"
 +choco-cleaner
 +choco uninstall choco-cleaner; 
 +#done
 </code> </code>
  
-== Remote control +=== winget install/upgrade
- +
-=== teamviewer +
- +
-* https://www.sxl.net/support/tv +
- +
-==== Full Teamviewer +
- +
-  choco install teamviewer +
- +
-after install, open teamviewer +
-* enable Start TV with Windows +
-* Options (Gear) > General: Your display name;  Allow incoming LAN connection +
-* Options > Advanced > Show Advanced Options > Personal Password > ''whoSxxxx@xxx'' +
- +
-==== Teamviewer-qs +
- +
-  choco install teamviewr-qs +
- +
-SXL Teamviewer QS +
- +
-  mkdir -Force c:\drv ; Set-Location c:\drv +
-  curl.exe -O https://repo.sxl.net/proj/remote/TeamViewerQS.exe +
-  nircmd shortcut c:\drv\TeamViewerQS.exe ~$folder.desktop$ "TeamviewerQS SXL" +
-  start TeamviewerQS +
- +
-=== Teamviewer-host +
- +
-  choco install teamviewer.host +
- +
-* Options (Gear) > General: Your display name;  Allow incoming LAN connection +
-* Options > Advanced > Show Advanced Options > Personal Password > ''whoSxxxx@xxx'' +
- +
-SXL Teamviewer Host +
- +
-  mkdir -force c:\drv ; Set-Location c:\drv +
-  curl.exe -O https://repo.sxl.net/proj/remote/TeamViewer_Host_Setup.exe +
-  .\TeamViewer_Host_Setup.exe /S /norestart +
- +
-=== aspia +
- +
-  mkdir -Force c:\drv ; sl c:\drv +
-  curl.exe -O https://repo.sxl.net/proj/remote/aspiahost.exe +
-  .\aspiahost.exe +
-  #done +
- +
-poweshell 2.0 +
 <code powershell> <code powershell>
-mkdir -Force c:\drv ; sl c:\drv +# install/fix/upgrade winget 
-$download_url = "http://repo.sxl.net/proj/remote/aspiahost.exe" +$repo="http://repo.sxl.net/_h/bin"; $f="drv-winget.ps1" 
-$local_path = "c:\drv\aspiahost.exe" +$drv="c:\drv"; $null=(mkdir -Force "$drv"); cd "$drv" 
-$WebClient = New-Object System.Net.WebClient +Invoke-WebRequest "$repo/$f" -outfile "$f"; & "./$f" 
-$WebClient.DownloadFile($download_url, $local_path) +./drv-winget.ps1 init 
-.\aspiahost.exe+#./drv-winget.ps1 upgrade 
 +#
 </code> </code>
  
-=== other remote desktop+=== hardware 
 +vmware
  
-  mkdir -force c:\drv ; sl c:\drv +  choco install vmware-tools
- +
-Trustviewer - http://trustviewer.com +
- +
-  wget.exe http://trustviewer.com/src/client/TrustViewer.exe +
- +
-=== Todesk  +
-* https://todesk.com +
- +
-Download & setup +
- +
-  Set-Location c:\drv +
-  curl.exe -O https://dl.todesk.com/windows/ToDesk_Setup.exe +
-  .\ToDesk_Setup.exe /S +
-  # wait until program started +
- +
-config & clean up +
- +
-  & ${Env:ProgramFiles(x86)}\ToDesk\ToDesk.exe -setpasswd Super@123 +
-  & ${Env:ProgramFiles(x86)}\ToDesk\ToDesk.exe -autostart on +
-  Remove-Item .\ToDesk_Setup.exe -Force +
-  # config in gui, security > allow both temp & safe password +
- +
-=== dontsleep +
- +
-  choco install dontsleep.install +
-  dontsleep_x64.exe -bg -enable=1 +
-  # END +
-== drivers / platform specific +
- +
-* Other [[windows platform specific tools]] +
- +
-KVM +
- +
-  choco install virtio-drivers +
-  choco pin add -n virtio-drivers +
- +
-  REM choco install qemu-guest-agent+
      
-Vmware +=== PS Windows Update
- +
-  choco install vmware-tools +
- +
-Virtualbox +
- +
-  choco install virtualbox-guest-additions-guest.install +
- +
-Lenovo +
- +
-  choco install lenovo-thinkvantage-system-update +
- +
-SDIO (Snappy Driver Installer Origin) +
-  choco install sdio +
-  :: download index only > select all > install +
- +
-== some explorer hacks +
 <code powershell> <code powershell>
-# show files extension +### PS Windows Update 
-reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced /v HideFileExt /t REG_DWORD /d 0 /f +Install-PackageProvider -Name NuGet -Force -Confirm:$false 
- +Install-Module PSWindowsUpdate -Force -Confirm:$false 
-# hide news and interests +Add-WUServiceManager -MicrosoftUpdate -Confirm:$false 
-REG add HKCU\Software\Microsoft\Windows\CurrentVersion\Feeds /v ShellFeedsTaskbarViewMode /t REG_DWORD /d 2 /f +Install-WindowsUpdate -MicrosoftUpdate -AcceptAll -IgnoreReboot 
- +Get-WindowsUpdate -IgnoreReboot 
-# restart explorer +#
-taskkill /F /IM explorer.exe +
-start explorer +
-# END+
 </code> </code>
-   
-== useful utilities 
  
-=== google chrome+== Backups 
 +* Iperius - https://www.iperiusbackup.com/ 
 +* Cobian - https://www.cobiansoft.com/ ''choco install cobian-backup'' 
 +* Duplicati - https://www.duplicati.com/ [[sxl:duplicati]]
  
-* set as default +=== Enable File History 
-* enable extensions+* windows explorer, right-click drive, configure Shadow copies 
 +* Enable shadow copies on the drive (e.g C:\ or D:\) 
 +* click Settings > Max Size Limit (example: 20GB=20480MB; 100GB=102400MB, 400GB=409600MB) 
 +* https://cdn.sxl.net/sharex/2018/20180613190536.jpg 
 +* Change schedule: Daily, 1PM and 9PM 
 +* https://cdn.sxl.net/sharex/2018/20180613191027.jpg
  
-  choco install googlechrome+=== Veeam agent 
 +  <# install veeam agent #> 
 +  choco install veeam-agent --pin 
 +  #
  
 +  <# create recovery ISO #>
 +  & "$env:ProgramFiles\Veeam\Endpoint Backup\Veeam.EndPoint.Manager.exe" /createrecoverymediaiso 
 +== COMMON
  
-  choco install ublockorigin-chrome google-translate-chrome +=== choco install apps
-  #choco install setdefaultbrowser +
-  #SetDefaultBrowser HKLM "Google Chrome" +
- +
-=== Common+
  
 +  <# choco apps #>
 +  choco install peazip.install # open, set assoc > standard, set lang
 +  choco install pasteintofile ; PasteIntoFile /filename yyyyMMdd-HHmmss
 +  choco install file-converter 
   choco install vlc    choco install vlc 
-  choco install file-converter  +  choco install xnviewmp.install 
-  choco install adobereader +  #
-  choco install xnviewmp +
-  choco install pasteintofile ; PasteIntoFile /filename yyyyMMdd-HHmmss+
  
 +=== rustdesk
  
 +download exe on desktop
 +  <# rustdesk.exe on desktop#>
 +  choco install dra 
 +  $repo="rustdesk/rustdesk"
 +  $tag="rustdesk-{tag}-x86_64.exe"
 +  $out=[Environment]::GetFolderPath("CommonDesktopDirectory")
 +  dra download $repo --select $tag --output $out\rustdesk.exe
 +  #
 +rustdesk install 
 +  <# install rustdesk #>
 +  $rd=[Environment]::GetFolderPath("CommonDesktopDirectory")
 +  $rd+="\rustdesk.exe"
 +  & "$rd" --silent-install
 +  while (Test-Path "$rd") { Start-Sleep 1; Remove-Item "$rd" -Force }
 +  <# set rustdesk password #>
 +  $rd="$env:ProgramFiles\RustDesk\rustdesk.exe"
 +  while (!(Test-Path "$rd")) { Start-Sleep 1 }
 +  & $rd --install-service
 +  while (!(Get-Service "Rustdesk" -EA SilentlyContinue)) { Start-Sleep 1 }
 +  & $rd --password Super@123
 +  & $rd --option allow-remote-config-modification Y
 +  & $rd --get-id | Out-String
 +  #
  
 +uninstall winget
 +  <# uninstall rustdesk #>
 +  winget uninstall rustdesk.rustdesk
 +  #
  
-==== Xnview +=== aspia install/upgrade 
-* not for commercial use +install/upgrade
-* after install: run xnviewmp as admin > Tools > Settings > Integration : Enable Browse with XnViewMP +
- +
-  choco install xnviewmp +
- +
- +
-== MS office +
-* [[MAS Activation]] +
- +
-=== remove office +
-* Office Removal Tool: https://aka.ms/diag_officeuninstall or https://bit.ly/3MmQbrW+
  
 <code powershell> <code powershell>
-cd c:\drv +## download 
-curl.exe -o SetupProd_OffScrub.exe -L https://aka.ms/diag_officeuninstall +$drv="c:\drv"; $null=(mkdir -Force "$drv"); cd "$drv" 
-.\SetupProd_OffScrub.exe+$repo="https://repo.sxl.net/_h/proj/" 
 +curl.exe -LO "$repo/remote/aspia-host-2.7.0-x86_64.msi" 
 +#$url="https://github.com/dchapyshev/aspia/releases/download" 
 +#curl.exe -LO "$url/v2.7.0/aspia-relay-2.7.0-x86_64.msi" 
 +curl.exe -LO "$repo/remote/aspia/aspia3.json" 
 +Start-Process msiexec.exe "/qb /i aspia-host-2.7.0-x86_64.msi" -Wait 
 +## install/upgrade service 
 +$d="$env:ProgramFiles\Aspia\Host" 
 +& "$d\aspia_host.exe" --import=c:\drv\aspia3.json --silent 
 +& "$d\aspia_host_service.exe" --stop 
 +& "$d\aspia_host_service.exe" --remove 
 +& "$d\aspia_host_service.exe" --install 
 +& "$d\aspia_host_service.exe" --start 
 +& "$d\aspia_host_service.exe" --version 
 +& "$d\aspia_host_service.exe" --host-id 
 +## done
 </code> </code>
 +uninstall
 +  winget uninstall "Aspia Host"
 +  # winget uninstall "ARP\Machine\X64\{152430E2-C5E5-4086-A24B-A733C1B693C6}"
  
-=== Office 365 +=== customize win10/11
- +
-Business +
 <code powershell> <code powershell>
-choco install office365business +# explorer 
-choco pin add -n office365business+$p="HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" 
 +Set-Itemproperty -path "$p" -Name "HideFileExt" -value 0 #show file exts 
 +Set-ItemProperty -Path "$p" -Name "TaskbarMn"   -Value 0 #hide win11 chat 
 +# win10 disable news feed (old method) 
 +$k="HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Feeds" 
 +Set-ItemProperty -Path "$k" -Name "ShellFeedsTaskbarViewMode" -Value 2 -EA SilentlyContinue 
 +# win10 disable news feed (after 2024) 
 +$url="https://repo.sxl.net/_h/bin/drv-disable-w10news.ps1" 
 +& ([ScriptBlock]::Create((Invoke-RestMethod $url))) 
 +# win11 enable classic context menu 
 +$k="HKCU\Software\Classes\CLSID\{86ca1aa0-34aa-4e8b-a509-50c905bae2a2}" 
 +New-Item -Path "$k\InprocServer32" -Value "" -Force 
 +#Remove-Item -Path "$k\InprocServer32" -Force # Undo 
 +# win11 start menu to left 
 +$k="HKCU:\software\microsoft\windows\currentversion\explorer\advanced" 
 +Set-ItemProperty -Path "$k" -Name "TaskbarAl" -Type "DWord" -Value 0 
 +# win11 remove news widget (Windows web experience Pack) 
 +winget uninstall "Windows web experience Pack"  
 +winget uninstall --id 9MSSGKG348SP --accept-source-agreements 
 +# restart windows explorer 
 +Get-Process explorer | Stop-Process 
 +#
 </code> </code>
  
-Proplus +=== adobe reader 
-<code powershell> +choco install 
-choco install office365proplus +  <# choco install adobe reader #> 
-choco pin add -n office365proplus +  mkdir -force c:\drv ; Set-Location c:\drv 
-</code>+  choco install adobereader --pin --params '"/DesktopIcon /NoUpdates"' 
 +  # MANUALLY set as default
  
-=== Office 2021 +install asian font pack 
-Standard +  <# install asian font pack #> 
-<code powershell> +  $u="https://ardownload3.adobe.com/pub/adobe/acrobat/win/AcrobatDC" 
-choco install microsoft-office-deployment --params="/64bit /Product:Standard2021Volume" +  curl.exe -o adobefont.msi "$u/2300820421/AcroRdrALSDx64_2300820421_all_DC.msi" 
-choco pin add -n microsoft-office-deployment +  msiexec.exe /i adobefont.msi /qb 
-</code>+  # 
 + 
 +config adobe reader
  
-Everything 
 <code powershell> <code powershell>
-if ([System.Environment]::Is64BitOperatingSystem) {$bit="64"} else {$bit="32"} +<# config adobe reader #> 
-$param=" /${bit}bit /DisableUpdate /Language:en-us,zh-tw,zh-cn" +$subkeys = @("HKLM\SOFTWARE","HKLM\SOFTWARE\WOW6432Node") 
-$param+=" /Product:ProPlus2021Volume,VisioPro2021Volume,ProjectPro2021Volume" +ForEach ( $subkey in $subkeys) { 
-choco install microsoft-office-deployment --params="$param" +  $regkey = "$subkey\Policies\Adobe\Adobe Acrobat\DC\FeatureLockDown" 
-choco pin add -n microsoft-office-deployment+  reg add "$regkey" /v bLimitPromptsFeatureKey /t REG_DWORD /d 1 /f 
 +  reg add "$regkey" /v bToggleDCAppCenter /t REG_DWORD /d 1 /f 
 +  reg add "$regkey" /v bShowRhpToolSearch /t REG_DWORD /d 0 /f 
 +  reg add "$regkey" /v bAcroSuppressUpsell /t REG_DWORD /d 1 /f 
 +  reg add "$regkey" /v bPurchaseAcro /t REG_DWORD /d 0 /f 
 +  reg add "$regkey" /v bReaderRetentionExperiment /t REG_DWORD /d 0 /f 
 +  reg add "$regkey" /v bEnableTrialistLaunchCard /t REG_DWORD /d 0 /f 
 +  reg add "$regkey" /v bToggleSophiaWebInfra /t REG_DWORD /d 0 /f 
 +  reg add "$regkey" /v bMerchandizingEnabled /t REG_DWORD /d 0 /f 
 +} 
 +$regkey = "HKLM\SOFTWARE\Policies\Adobe\Adobe Acrobat\DC\FeatureLockDown\cIPM" 
 +reg add "$regkey" /v bDontShowMsgWhenViewingDoc /t REG_DWORD /d 0 /f 
 +reg add "$regkey" /v bShowMsgAtLaunch /t REG_DWORD /d 0 /f 
 +reg add "$regkey" /v bAllowUserToChangeMsgPrefs /t REG_DWORD /d 0 /f 
 +$regkey = "HKLM\SOFTWARE\Policies\Adobe\Adobe Acrobat\DC\FeatureLockDown\cCloud" 
 +reg add "$regkey" /v bDisableADCFileStore /t REG_DWORD /d 1 /f 
 +reg add "$regkey" /v bEnableADCFileStore /t REG_DWORD /d 0 /f 
 +$regkey = "HKLM\SOFTWARE\Policies\Adobe\Adobe Acrobat\DC\FeatureLockDown\cServices" 
 +reg add "$regkey" /v bUpdater /t REG_DWORD /d 0 /f 
 +$regkey = "HKCR\Software\Adobe\Acrobat Reader\11.0\Workflows" 
 +reg add "$regkey" /v bEnableAcrobatHS /t REG_DWORD /d 0 /f 
 +# open it, make it DEFAULT
 </code> </code>
  
 +=== MS Office
 +[[microsoft office]]
  
 +  choco install office365business -pin
 +  choco pin add -n office365business
  
 +activate  
  
-=== Office-Tool+  & ([ScriptBlock]::Create((irm https://massgrave.dev/get))) /Ohook ## office only
  
-* install ''choco install office-tool'' then Deploy > H&B 2021 > 64-bit > Start Deploy+uninstall
  
-=== Volume 2019+  $s="microsoft-office-deployment"; choco pin remove -n $s; choco uninstall $s 
 +  winget uninstall Microsoft.Office 
 +  cd c:\drv ; curl.exe -o uninst_office.exe -L https://aka.ms/diag_officeuninstall; .\uninst_office.exe;
  
 +=== google chrome
 +choco install
  
-* visioviewer''choco install visioviewer '' +  <# choco install #> 
-* choco install microsoft-office-deployment --params="/64bit /Product:Standard2019Volume" +  choco install googlechrome --ignore-checksums 
-* Visio 2019 Volume ''choco install microsoft-office-deployment --params="/64bit /Product:VisioPro2019Volume"'' +  choco install google-translate-chrome 
-* Project 2019 Volume: ''choco install microsoft-office-deployment --params="/64bit /Product:ProjectPro2019Volume"'' +  # MANUALLY make default
-* Retail office H&B ''choco install microsoft-office-deployment --params="/64bit /Product:HomeBusiness2019Retail"''+
  
-=== office 2016 (Win7)+uninstall extension
  
-  choco install microsoft-office-deployment --params="/64bit /Product:HomeBusiness2016Retail" +  <# uninstall chrome and extensions #> 
-  OfficeProPlus2013 +  winget uninstall Google.Chrome --force 
-  office365-2016-deployment-tool +  $k="HKCU:\SOFTWARE\Policies\Google\Chrome\ExtensionInstallForcelist" 
-  libreoffice-fresh +  Remove-Item -Path "$k" -Recurse -Force -EA SilentlyContinue 
-   +  #
-=== pin office-deployment tool+
  
-  choco pin add -n microsoft-office-deployment +=== Xnview 
- +* not for commercial use 
- +  * run xnviewmp as admin > Tools > Settings > Integration : Enable Browse with XnViewMP
-=== pdf reader +
-  * set association after install +
-  * for legal Acrobat DC user, install Reader first, login, and then Download the Acrobat DC +
- +
-  choco install adobereader +
-  #choco install sumatrapdf.install pdftk +
- +
-=== google drive, g.suite +
- +
-  choco install googledrive +
-  choco install gsuite-sync-outlook +
- +
-== antivirus+
  
-Symantec SEP 64 and 32 +  choco install xnviewmp.install
-  * https://knowledge.broadcom.com/external/article/151313/msi-command-line-reference-for-endpoint.html +
-  * https://repo.sxl.net/proj/antivirus/+
  
-=== SEP 64-bit ENG 
  
 +=== Symantec SEP 64 and 32
 +* https://is.gd/sPpEfq
 +* https://repo.sxl.net/proj/antivirus/
 <code powershell> <code powershell>
 +# install SEP
 mkdir -force c:\drv ; cd c:\drv mkdir -force c:\drv ; cd c:\drv
 if ([System.Environment]::Is64BitOperatingSystem) {$bit="64"} else {$bit="32"} if ([System.Environment]::Is64BitOperatingSystem) {$bit="64"} else {$bit="32"}
 $lang = switch -Wildcard ((Get-WinUserLanguageList)[0].LanguageTag) $lang = switch -Wildcard ((Get-WinUserLanguageList)[0].LanguageTag)
   {"zh-Hans*" {'CS'}; "zh-Hant*" {'CH'}; default {'EN'}}   {"zh-Hans*" {'CS'}; "zh-Hant*" {'CH'}; default {'EN'}}
-$url="https://repo.sxl.net/proj/antivirus/SEP_14.3.0_RU4_Win$bit-bit_Client_$lang.exe"+$url="https://repo.sxl.net/.hidden/proj/antivirus/SEP_14.3.0_RU4_Win$bit-bit_Client_$lang.exe"
 curl.exe -L -o "SEP.exe" "$url" curl.exe -L -o "SEP.exe" "$url"
 .\SEP.exe /s /v"SYMREBOOT=ReallySuppress /qb" .\SEP.exe /s /v"SYMREBOOT=ReallySuppress /qb"
-# reboot+# Restart-Computer
 </code> </code>
- 
- 
 Uninstall  Uninstall 
   winget uninstall "Symantec Endpoint Protection"   winget uninstall "Symantec Endpoint Protection"
  
-=== Other antivirus+==== Other antivirus 
 +* NOD32 - https://www.eset.hk/ 
 +* Clamwin for Win98-XP - http://clamsentinel.sourceforge.net/ ' 
 +MS Security Essentials (for vista-7) - https://bit.ly/3iXkoA0  
 +  choco install MicrosoftSecurityEssentials 
  
-  * Mcafee - https://home.mcafee.com/ (info@sxl.net) +== OPTIONAL
-  * NOD32 - https://www.eset.hk/download/home/ +
-  * Immunet - https://www.immunet.com/ (works on server) ''choco install immunet'' +
-  * Clamwin for Win98-XP - http://clamsentinel.sourceforge.net/ ''choco install clamwin'' +
-  * MS Security Essentials (Win vista-7) - https://bit.ly/3iXkoA0 ''choco install MicrosoftSecurityEssentials''+
  
-=== backup+=== dontsleep 
 +  <# dontsleep #> 
 +  choco install dontsleep.install 
 +  dontsleep_x64.exe -bg block_standby=1 block_screensaver=1 block_shutdown=0 block_logoff=0 
 +  #
  
-Veeam +=== caffeine 
 +  <# caffeine #> 
 +  mkdir -force c:\drv; cd c:\drv 
 +  curl.exe -LO "http://repo.sxl.net/_h/bin/$f" 
 +  & "c:\drv\caffeine.exe" -stes -replace 
 +  #
  
-  choco install veeam-agent+=== cad
  
-  * Iperius - https://www.iperiusbackup.com/ +  choco install dwgtrueview designreview
-  * Cobian - https://www.cobiansoft.com/ ''choco install cobian-backup'' +
-  * Duplicati - https://www.duplicati.com/ [[sxl:duplicati]]+
  
-=== admin utils+  choco install autodesk-fusion360 
 +  choco install meshmixer 
 +  choco install cura 
 +  choco install autocad
  
-* Conemu ''choco install conemu '' +=== graphics apps 
-* Notepad++ ''choco install notepadplusplus.install ; regsvr32 "C:\Program Files\Notepad++\contextMenu\NppShell.dll" '' +  choco install inkscape 
-=== others+  choco install gimp 
 +  choco install drawio
  
-3D-print+=== utils 
 +Internet Download Manager IDM 
 +  choco install internet-download-manager 
 +  irm https://massgrave.dev/ias | iex 
 +misc  
 +  locale-emulator #app locale 
 +  firefox 
 +  choco install  
 +  hwinfo.install 
 +  autoruns 
 +  autologon 
 +  bleacbit.portable 
 +  sidebar-diagnostics
  
-  autodesk-fusion360 meshmixer cura+=== misc 
 +  set-alias wg c:\drv\drv-winget.ps1 
 +  <# misc #> 
 +  wg install Apple.iTunes 
 +  wg install 9NKSQGP7F2NH # whatsapp 
 +  wg installTelegram.TelegramDesktop
  
-Cad+=== china 
 +  wg install tencent.wechat 
 +  wg install YY.YYAnchor 
 +  wg install tencent.qq 
 +  wg install tencent.tim 
 +  wg install Tencent.WeCom #企业微信 
 +  wg install tencent.qqmusic 
 +  wg install tencent.yingyongbao #应用宝 
 +  wg install Sogou.SogouInput #搜狗输入法 
 +  wg install NetEase.CloudMusic #网易云音乐
  
-  choco install dwgtrueview #designreview+=== quickq 
 +  mkdir -force c:\drv ; sl c:\drv 
 +  curl.exe -LO https://d.asdfgh.win/quickq/download/win32-quickq.exe
  
-  choco install autocad #autocadlt+== SERVER 
 +create local adminsxl 
 +  net user /add adminsxl sxlSuper@123 ; localgroup administrators adminsxl /add
  
-java+=== Connect server 
 +create the batch file 
 +  $desktop = ([Environment]::GetFolderPath('Desktop')) 
 +  $null >> "$desktop\connect-server.bat" 
 +  notepad "$desktop\connect-server.bat" 
 +file content 
 +  net use n: /delete 
 +  net use /persistent:yes 
 +  net use N: \\server\share password /user:domain\username /savecred
  
-  choco install javaruntime+=== reboot shortcut 
 +<code powershell> 
 +# create reboot shortcut 
 +Add-Content "c:\drv\reboot.cmd" "shutdown.exe /r /t 0" 
 +$TargetFile = "c:\drv\reboot.cmd" 
 +$ShortcutFile = "$env:Public\Desktop\reboot.lnk" 
 +$WScriptShell = New-Object -ComObject WScript.Shell 
 +$Shortcut = $WScriptShell.CreateShortcut($ShortcutFile) 
 +$Shortcut.TargetPath = $TargetFile 
 +$Shortcut.Save() 
 +</code>
  
-  #choco install adoptopenjdk8  +==== conemu  
-  #choco install adoptopenjdk13+  choco install conemu 
 +Setting > Keys & Macros > Paste >  
 +* UNCHECK Multi-line paste 
 +* UNCHECK Long text-paste
  
-git+==== windows terminal
  
-  choco install git.install --params="/NoGuiHereIntegration /SChannel"+  choco install microsoft-windows-terminal
  
-== finishing+<code powershell> 
 +# download the ico 
 +$icon="https://raw.githubusercontent.com/microsoft/terminal/master/res/terminal.ico" 
 +iwr -OutFile "$env:LOCALAPPDATA\\wt.ico" -uri $icon 
 +$DesktopPath=[Environment]::GetFolderPath("Desktop") 
 +$WshShell=New-Object -comObject WScript.Shell 
 +$Shortcut=$WshShell.CreateShortcut("$DesktopPath\Windows Terminal.lnk") 
 +$Shortcut.TargetPath = (Get-Command wt.exe).Path 
 +$shortcut.IconLocation = "$env:LOCALAPPDATA\\wt.ico" 
 +$Shortcut.Save() 
 +# 
 +</code> 
 +==== notepad++  
 +install 
 +  choco install notepadplusplus.install 
 +  regsvr32 "C:\Program Files\Notepad++\contextMenu\NppShell.dll" 
 +  #choco install notepadreplacer --params "/NOTEPAD:C:\Program Files\Notepad++\notepad++.exe" 
 +notepad plugins 
 +  choco install notepadplusplus-npppluginmanager 
 +* open Plugins > Plugin Admin, add ''MarkdownViewer++'',  ''AutoCodePage'',  ''AutoEolFormat''
  
-=== windows update+==== acronis drive monitor 
 +  choco install acronis-drive-monitor 
 +* Option Alerts Email notification > Change settings > ''systems@sxl.net''
  
-  wuauclt /detectnow /updatenow +==== virtio 
-  control update+  choco install virtio-drivers
  
-=== set default programs+==== hwinfo 
 +  choco install hwinfo 
 +  nircmd shortcut "%ProgramFiles%\HWiNFO64\HWiNFO64.EXE" "~$folder.desktop$" "HWINFO" 
 + 
 +==== Gsmartcontrol 
 +  choco install gsmartcontrol 
 +  nircmd shortcut "%ProgramFiles%\GSmartControl\gsmartcontrol.exe" "~$folder.desktop$" "GSmartControl" 
 + 
 +=== Server 2016/2019 Windows Defender 
 +Enable Windows Defender GUI 
 +  Install-WindowsFeature -Name Windows-Defender 
 +  Install-WindowsFeature -Name Windows-Defender-GUI 
 +Disable Windows Defender GUI 
 +  Uninstall-WindowsFeature -Name Windows-Defender-GUI 
 +  Uninstall-WindowsFeature -Name Windows-Defender 
 + 
 +== ACTIVATE 
 +* download from [[https://github.com/massgravel/Microsoft-Activation-Scripts|Github]] or [[https://bitbucket.org/WindowsAddict/microsoft-activation-scripts/src|Bitbucket]] or [[https://massgrave.dev/|Massgrave]] 
 +exclude a dir in msdefender 
 +  $d="c:\drv\no_avscan"; mkdir -Force $d; cd $d 
 +  Set-MpPreference -ExclusionPath $d 
 +activate 
 +  irm https://massgrave.dev/get | iex  ## interactive mode  
 +  & ([ScriptBlock]::Create((irm https://massgrave.dev/get))) /HWID  ## win only 
 +  & ([ScriptBlock]::Create((irm https://massgrave.dev/get))) /Ohook ## office only 
 +adobe acrobat 
 +  winget install Adobe.Acrobat.Pro # genp patch app 
 +adobe cc      
 +* read https://www.reddit.com/r/GenP/ > genp patch cc > install apps > genp patch apps 
 +* login user ''nobodyboss@outlook.com'' pass ''aSuper@123'' - adobe email forward to sxlderek@gmail 
 +  winget install Adobe.CreativeCloud 
 +autodesk 
 +  choco install autocad --pin 
 + 
 +== TROUBLESHOOT 
 +clean disk 
 +  cleanmgr.exe /lowdisk 
 +  cleanmgr.exe /verylowdisk 
 +choco cleaner 
 +  choco install choco-cleaner 
 +  choco-cleaner 
 +  choco uninstall choco-cleaner 
 + 
 +== HARDWARE 
 + 
 +== drivers / platform specific 
 +* Other [[windows platform specific tools]] 
 +choco 
 +  choco install virtio-drivers; choco pin add -n virtio-drivers 
 +  choco install qemu-guest-agent 
 +  choco install vmware-tools 
 +  choco install virtualbox-guest-additions-guest.install 
 +  choco install lenovo-thinkvantage-system-update 
 +  choco install sdio  #download index only > select all > install 
 +winget 
 +  wg install 9WZDNCRFJ4MV  # lenovo vantage 
 + 
 +== DEVELOP 
 +<code powershell> 
 +# common 
 +choco install python               # python 
 +choco install vscode.install       # vscode 
 +choco install javaruntime          # java latest runtime 
 +choco install temurin8             # java8 runtime 
 +choco install adoptopenjdk13       # jdk 13 
 +# java8 with Java WebStart 
 +$f="FeatureMain,FeatureEnvironment,FeatureJarFileRunWith," 
 +$f+="FeatureJavaHome,FeatureIcedTeaWeb,FeatureJNLPFileRunWith" 
 +choco install Temurin8 --params="/both /ADDLOCAL=$f /INSTALLDIR=$env:Programfiles\Eclipse Adoptium\ /quiet" 
 +</code>
  
-  control /name Microsoft.DefaultPrograms /page pageDefaultProgram+== Win7/8/8.1/2012R2
  
-=== activation+  <# old windows 7/8 #> 
 +  choco install powershell 
 +  choco install conemu
  
-* [[activation]] +old firefox
-* [[MAS Activation]]+
  
-  irm https://massgrave.dev/get | iex +  choco install firefoxesr --version=115.9.1 --params "/NoAutoUpdate" 
-=== windows update ===+  choco pin add -n firefoxesr 
  
-* [[windows update]] +old chrome 
-* [[sxl:windows admin tool]]+ver 109