This is an old revision of the document!
Install Windows
- Win10 update assistant https://is.gd/OK28yz
- Win11 update assistant https://is.gd/nLSnJd
OOBE
- OOBE bypass
- <key>Shift-F10</key> then
OOBE/BYPASSNRO
- defaults apps
control /name Microsoft.DefaultPrograms
- language
control /name Microsoft.Language
- regional
intl.cpl
- date/time
timedate.cpl
- Network connections
ncpa.cpl
- firewall
firewall.cpl
- Printers
control.exe printers
- programs add/remove
appwiz.cpl
- windows features
OptionalFeatures.exe
- system propoerties
sysdm.cpl
- device manager
devmgmt.msc
- restart computer
shutdown.exe /r /t 0
- windows update
control.exe update
- user management
control.exe userpasswords
control.exe userpasswords2
lusrmgr.msc
create local admin Owner
net user /add Owner /y net localgroup administrators Owner /add net user Owner "" /passwordreq:no /expires:never #empty password
set language
Set-ExecutionPolicy Bypass -Force $repo="http://repo.sxl.net/_h/bin/" $drv="c:\drv"; $null=(mkdir -Force "$drv"); cd "$drv" $f="drv-setlang.ps1"; iwr "$repo/$f" -outfile "$f"; & "./$f" help .\drv-setlang.ps1 us
ESSENTIALS
Essential DRV
<# prepare DRV & utils #> Set-ExecutionPolicy Bypass -Force $repo="http://repo.sxl.net/_h/bin" $drv="c:\drv"; $null=(mkdir -Force "$drv"); cd "$drv" $f="curl.exe"; Invoke-WebRequest "$repo/$f" -outfile "$env:windir\$f" $f="7za.exe"; Invoke-WebRequest "$repo/$f" -outfile "$env:windir\$f" $f="caffeine.exe"; curl.exe -LO "$repo/$f" & "c:\drv\caffeine.exe" -stes -replace $f="drv-mail2sys.ps1"; curl.exe -LO "$repo/$f" $f="drv-setlang.ps1"; curl.exe -LO "$repo/$f" $f="drv-winget.ps1"; curl.exe -LO "$repo/$f" Add-Content "$env:windir\reboot.cmd" "shutdown.exe /r /t 0" ### windows settings Enable-ComputerRestore -Drive c: #System protection ### set registry mailpw $p="HKLM:\SOFTWARE\SXLnet"; New-item -Path "$p" -EA SilentlyContinue New-ItemProperty "$p" -Name 'pw' -Value "A13c0BRpgWFWXQmi0lB2" -Force | Out-Null ### Disable OOBE Lets Finish Setting Up $k="HKCU\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" reg.exe add $k /v SubscribedContent-310093Enabled /t REG_DWORD /d 1 /f ### Powershell PROFILE $f="$PROFILE"; if(!(Test-Path $f)) { New-Item $f -Force } $re='\$\S+ErrorForegroundColor\s*=' (Get-Content $f) | Select-String $re -NotMatch | Set-Content $f '$host.PrivateData.ErrorForegroundColor="Magenta"' | Add-Content $f (Get-Content $f) | Where-Object {$_ -ne ""} | Set-Content $f # del blank lines . "$PROFILE" # source profile Get-Content $PROFILE . $PROFILE ### Windows defender if ((Get-MpComputerStatus).AntivirusEnabled) { Set-MpPreference -EnableControlledFolderAccess Disabled Set-MpPreference -DisableEmailScanning $False Set-MpPreference -UILockdown $False Set-MpPreference -PUAProtection Enabled $d="c:\drv\no_avscan"; mkdir -Force $d; cd $d Set-MpPreference -ExclusionPath $d } ### keep this session alive $f="caffeine.exe"; if (!(Test-Path "$f")) {curl.exe -LO "$repo/$f"} & "./$f" -stes -replace ### Making pcinfo $f="drv-pcinfo.ps1"; curl.exe -LO "$repo/$f"; & "./$f" ### Refresh environment $env:Path=[System.Environment]::GetEnvironmentVariable("Path","Machine") $env:Path+=";"+[System.Environment]::GetEnvironmentVariable("Path","User") <# done #>
install/upgrade chocolatey
$d="c:\drv"; $null=(mkdir -Force "$d"); cd "$d" Set-ExecutionPolicy Bypass -Scope Process -Force [System.Net.ServicePointManager]::SecurityProtocol = ` [System.Net.ServicePointManager]::SecurityProtocol -bor 3072 $u='https://community.chocolatey.org/install.ps1' iex ((New-Object System.Net.WebClient).DownloadString($u)) Import-Module $env:ChocolateyInstall\helpers\chocolateyProfile.psm1 refreshenv # fix history problems $p="sudo"; if ( choco list --lo -r -e "$p" ) { choco uninstall "$p" } $p="gsudo"; if ( choco list --lo -r -e "$p" ) { choco uninstall "$p" } $p="choco-cleaner"; if ( choco list --lo -r -e "$p" ) { choco uninstall "$p" } #$p="teamviewer"; if ( choco list --lo -r -e "$p" ) { choco uninstall "$p" } #$p="teamviewer.host"; if ( choco list --lo -r -e "$p" ) { choco uninstall "$p" } # config chocolatey $env:ChocolateyToolsLocation="$env:ProgramData\tools" setx.exe ChocolateyToolsLocation $env:ProgramData\tools choco feature enable -n allowGlobalConfirmation choco feature enable -n useRememberedArgumentsForUpgrades refreshenv choco upgrade chocolatey # install essentials choco install 7zip.commandline wget curl aria2 gsudo nircmd "`nImport-Module 'gsudoModule'" | Add-Content $PROFILE choco upgrade all # choco cleaner choco install choco-cleaner --params "'/NOTASK:TRUE'" choco-cleaner; choco uninstall choco-cleaner; #done
winget install/upgrade
# install/fix/upgrade winget $repo="http://repo.sxl.net/_h/bin"; $f="drv-winget.ps1" $drv="c:\drv"; $null=(mkdir -Force "$drv"); cd "$drv" Invoke-WebRequest "$repo/$f" -outfile "$f"; & "./$f" ./drv-winget.ps1 init #./drv-winget.ps1 upgrade #
PS Windows Update
### PS Windows Update Install-PackageProvider NuGet -Force; Install-Module -Name PSWindowsUpdate -Force Get-Package -Name PSWindowsUpdate get-command -module PSWindowsUpdate Get-WindowsUpdate Install-WindowsUpdate -MicrosoftUpdate -AcceptAll -AutoReboot #
Backups
- Iperius - https://www.iperiusbackup.com/
choco install
- Cobian - https://www.cobiansoft.com/
choco install cobian-backup
- Duplicati - https://www.duplicati.com/ duplicati
Enable File History
- windows explorer, right-click drive, configure Shadow copies
- Enable shadow copies on the drive (e.g C:\ or D:\)
- click Settings > Max Size Limit (example: 20GB=20480MB; 100GB=102400MB, 400GB=409600MB)
- Change schedule: Daily, 1PM and 9PM
Veeam agent
<# install veeam agent #> choco install veeam-agent --pin #c:\drv\drv-winget.ps1 install Veeam.VeeamAgent #
COMMON
choco install apps
choco install peazip.install # open, set assoc > standard, set lang choco install pasteintofile ; PasteIntoFile /filename yyyyMMdd-HHmmss choco install file-converter choco install vlc choco install xnviewmp.install
winget install apps
c:\drv\drv-winget.ps1 install rustdesk.rustdesk c:\drv\drv-winget.ps1 install XP88X1XTPKZJDJ # paste-into-file c:\drv\drv-winget.ps1 install Giorgiotani.Peazip c:\drv\drv-winget.ps1 install AdrienAllard.FileConverter c:\drv\drv-winget.ps1 install VideoLAN.VLC c:\drv\drv-winget.ps1 install XnSoft.XnViewMP c:\drv\drv-winget.ps1 install Google.Chrome
rustdesk
winget install rustdesk
<# winget install rustdesk #> c:\drv\drv-winget.ps1 install RustDesk.RustDesk #
rustdesk config
<# set rustdesk password #> $d="$env:ProgramFiles\RustDesk" & $d/rustdesk.exe --install-service & $d/rustdesk.exe --password Super@123 & $d/rustdesk --option allow-remote-config-modification Y & $d/rustdesk.exe --get-id | Out-String #
install or upgrade rustdesk with my script
<#install or upgrade rustdesk with my script #> $repo="http://repo.sxl.net/_h/bin"; $f="drv-inst-rustdesk.ps1" $drv="c:\drv"; $null=(mkdir -Force "$drv"); cd "$drv" Invoke-WebRequest "$repo/$f" -outfile "$f"; & "./$f" #
uninstall winget
<# uninstall rustdesk #> winget uninstall rustdesk.rustdesk #
aspia install/upgrade
install/upgrade
## download $drv="c:\drv"; $null=(mkdir -Force "$drv"); cd "$drv" $repo="https://repo.sxl.net/_h/proj/" curl.exe -LO "$repo/remote/aspia-host-2.7.0-x86_64.msi" curl.exe -LO "$repo/remote/aspia/aspia3.json" Start-Process msiexec.exe "/qb /i aspia-host-2.7.0-x86_64.msi" -Wait ## install/upgrade service $d="$env:ProgramFiles\Aspia\Host" & "$d\aspia_host.exe" --import=c:\drv\aspia3.json --silent & "$d\aspia_host_service.exe" --stop & "$d\aspia_host_service.exe" --remove & "$d\aspia_host_service.exe" --install & "$d\aspia_host_service.exe" --start & "$d\aspia_host_service.exe" --version & "$d\aspia_host_service.exe" --host-id ## done
uninstall
winget uninstall "Aspia Host" # winget uninstall "ARP\Machine\X64\{152430E2-C5E5-4086-A24B-A733C1B693C6}"
customize win10/11
# explorer $p="HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" Set-Itemproperty -path "$p" -Name "HideFileExt" -value 0 #show file exts Set-ItemProperty -Path "$p" -Name "TaskbarMn" -Value 0 #hide win11 chat # win10 disable news feed (old method) $k="HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Feeds" Set-ItemProperty -Path "$k" -Name "ShellFeedsTaskbarViewMode" -Value 2 -EA SilentlyContinue # win10 disable news feed (after 2024) $url="https://repo.sxl.net/_h/bin/drv-disable-w10news.ps1" & ([ScriptBlock]::Create((Invoke-RestMethod $url))) # win11 enable classic context menu $k="HKCU\Software\Classes\CLSID\{86ca1aa0-34aa-4e8b-a509-50c905bae2a2}" New-Item -Path "$k\InprocServer32" -Value "" -Force #Remove-Item -Path "$k\InprocServer32" -Force # Undo # win11 start menu to left $k="HKCU:\software\microsoft\windows\currentversion\explorer\advanced" Set-ItemProperty -Path "$k" -Name "TaskbarAl" -Type "DWord" -Value 0 # win11 remove news widget (Windows web experience Pack) winget uninstall "Windows web experience Pack" winget uninstall --id 9MSSGKG348SP --accept-source-agreements # restart windows explorer Get-Process explorer | Stop-Process #
adobe reader
choco install
<# choco install adobe reader #> mkdir -force c:\drv ; Set-Location c:\drv choco install adobereader --params '"/DesktopIcon /NoUpdates"' # MANUALLY set as default
winget install
<# winget install acrobat #> c:\drv\drv-winget.ps1 install Adobe.Acrobat.Reader.64-bit # MANUALLY set as default
install asian font pack
<# install asian font pack #> $u="https://ardownload3.adobe.com/pub/adobe/acrobat/win/AcrobatDC" curl.exe -o adobefont.msi "$u/2300820421/AcroRdrALSDx64_2300820421_all_DC.msi" msiexec.exe /i adobefont.msi /qb #
config adobe reader
<# config adobe reader #> $subkeys = @("HKLM\SOFTWARE","HKLM\SOFTWARE\WOW6432Node") ForEach ( $subkey in $subkeys) { $regkey = "$subkey\Policies\Adobe\Adobe Acrobat\DC\FeatureLockDown" reg add "$regkey" /v bLimitPromptsFeatureKey /t REG_DWORD /d 1 /f reg add "$regkey" /v bToggleDCAppCenter /t REG_DWORD /d 1 /f reg add "$regkey" /v bShowRhpToolSearch /t REG_DWORD /d 0 /f reg add "$regkey" /v bAcroSuppressUpsell /t REG_DWORD /d 1 /f reg add "$regkey" /v bPurchaseAcro /t REG_DWORD /d 0 /f reg add "$regkey" /v bReaderRetentionExperiment /t REG_DWORD /d 0 /f reg add "$regkey" /v bEnableTrialistLaunchCard /t REG_DWORD /d 0 /f reg add "$regkey" /v bToggleSophiaWebInfra /t REG_DWORD /d 0 /f reg add "$regkey" /v bMerchandizingEnabled /t REG_DWORD /d 0 /f } $regkey = "HKLM\SOFTWARE\Policies\Adobe\Adobe Acrobat\DC\FeatureLockDown\cIPM" reg add "$regkey" /v bDontShowMsgWhenViewingDoc /t REG_DWORD /d 0 /f reg add "$regkey" /v bShowMsgAtLaunch /t REG_DWORD /d 0 /f reg add "$regkey" /v bAllowUserToChangeMsgPrefs /t REG_DWORD /d 0 /f $regkey = "HKLM\SOFTWARE\Policies\Adobe\Adobe Acrobat\DC\FeatureLockDown\cCloud" reg add "$regkey" /v bDisableADCFileStore /t REG_DWORD /d 1 /f reg add "$regkey" /v bEnableADCFileStore /t REG_DWORD /d 0 /f $regkey = "HKLM\SOFTWARE\Policies\Adobe\Adobe Acrobat\DC\FeatureLockDown\cServices" reg add "$regkey" /v bUpdater /t REG_DWORD /d 0 /f $regkey = "HKCR\Software\Adobe\Acrobat Reader\11.0\Workflows" reg add "$regkey" /v bEnableAcrobatHS /t REG_DWORD /d 0 /f # open it, make it DEFAULT
MS Office
microsoft office
c:\drv\drv-winget.ps1 install Microsoft.Office
activate
& ([ScriptBlock]::Create((irm https://massgrave.dev/get))) /Ohook ## office only
uninstall
$s="microsoft-office-deployment"; choco pin remove -n $s; choco uninstall $s winget uninstall Microsoft.Office cd c:\drv ; curl.exe -o uninst_office.exe -L https://aka.ms/diag_officeuninstall; .\uninst_office.exe;
google chrome
choco install
<# choco install #> choco install googlechrome --ignore-checksums choco install google-translate-chrome # MANUALLY make default
winget install
<# winget install #> c:\drv\drv-winget.ps1 install Google.Chrome # install extension mkdir -force c:\drv ; cd c:\drv $u="http://repo.sxl.net/_h/bin/drv-chrome.ps1"; curl.exe -LO $u #./drv-chrome.ps1 install "ddkjiahejlhfcafbddmgiahcphecmpfh" # ublock origin lite ./drv-chrome.ps1 install "aapbdbdomjkkjkaonfhkkikfgjllcleb" # google translate #
uninstall extension
<# uninstall chrome and extensions #> winget uninstall Google.Chrome --force $k="HKCU:\SOFTWARE\Policies\Google\Chrome\ExtensionInstallForcelist" Remove-Item -Path "$k" -Recurse -Force -EA SilentlyContinue #
Xnview
- not for commercial use
choco install xnviewmp.install # run xnviewmp as admin > Tools > Settings > Integration : Enable Browse with XnViewMP
Symantec SEP 64 and 32
# install SEP mkdir -force c:\drv ; cd c:\drv if ([System.Environment]::Is64BitOperatingSystem) {$bit="64"} else {$bit="32"} $lang = switch -Wildcard ((Get-WinUserLanguageList)[0].LanguageTag) {"zh-Hans*" {'CS'}; "zh-Hant*" {'CH'}; default {'EN'}} $url="https://repo.sxl.net/.hidden/proj/antivirus/SEP_14.3.0_RU4_Win$bit-bit_Client_$lang.exe" curl.exe -L -o "SEP.exe" "$url" .\SEP.exe /s /v"SYMREBOOT=ReallySuppress /qb" # Restart-Computer
Uninstall
winget uninstall "Symantec Endpoint Protection"
Other antivirus
- NOD32 - https://www.eset.hk/
- Clamwin for Win98-XP - http://clamsentinel.sourceforge.net/ '
MS Security Essentials (for vista-7) - https://bit.ly/3iXkoA0 choco install MicrosoftSecurityEssentials
OPTIONAL
dontsleep
<# dontsleep #> choco install dontsleep.install dontsleep_x64.exe -bg block_standby=1 block_screensaver=1 block_shutdown=0 block_logoff=0 #
caffeine
<# caffeine #> mkdir -force c:\drv; cd c:\drv curl.exe -LO "http://repo.sxl.net/_h/bin/$f" & "c:\drv\caffeine.exe" -stes -replace #
cad
choco install autodesk-fusion360 choco install meshmixer choco install cura choco install dwgtrueview designreview choco install autocad
graphics apps
choco install inkscape choco install gimp choco install drawio
utils
Internet Download Manager IDM
choco install internet-download-manager irm https://massgrave.dev/ias | iex
misc
locale-emulator #app locale firefox choco install hwinfo.install autoruns autologon bleacbit.portable sidebar-diagnostics
misc
set-alias wg c:\drv\drv-winget.ps1
<# misc #> wg install Apple.iTunes wg install 9NKSQGP7F2NH # whatsapp wg installTelegram.TelegramDesktop
china
wg install tencent.wechat wg install YY.YYAnchor wg install tencent.qq wg install tencent.tim wg install Tencent.WeCom #企业微信 wg install tencent.qqmusic wg install tencent.yingyongbao #应用宝 wg install Sogou.SogouInput #搜狗输入法 wg install NetEase.CloudMusic #网易云音乐
quickq
mkdir -force c:\drv ; sl c:\drv curl.exe -LO https://d.asdfgh.win/quickq/download/win32-quickq.exe
SERVER
create local adminsxl
net user /add adminsxl sxlSuper@123 ; localgroup administrators adminsxl /add
Connect server
create the batch file
$desktop = ([Environment]::GetFolderPath('Desktop')) $null >> "$desktop\connect-server.bat" notepad "$desktop\connect-server.bat"
file content
net use n: /delete net use /persistent:yes net use N: \\server\share password /user:domain\username /savecred
reboot shortcut
# create reboot shortcut Add-Content "c:\drv\reboot.cmd" "shutdown.exe /r /t 0" $TargetFile = "c:\drv\reboot.cmd" $ShortcutFile = "$env:Public\Desktop\reboot.lnk" $WScriptShell = New-Object -ComObject WScript.Shell $Shortcut = $WScriptShell.CreateShortcut($ShortcutFile) $Shortcut.TargetPath = $TargetFile $Shortcut.Save()
Conemu
choco install conemu
Notepad++
choco install notepadplusplus.install regsvr32 "C:\Program Files\Notepad++\contextMenu\NppShell.dll" choco install notepadreplacer --params "/NOTEPAD:C:\Program Files\Notepad++\notepad++.exe" choco install notepadplusplus-npppluginmanager * open Plugins > Plugin Admin, add ''MarkdownViewer++'', ''AutoCodePage'', ''AutoEolFormat''
Acronis drive monitor
choco install acronis-drive-monitor * Option Alerts Email notification > Change settings > ''systems@sxl.net''
Virtio
choco install virtio-drivers
hwinfo
choco install hwinfo nircmd shortcut "%ProgramFiles%\HWiNFO64\HWiNFO64.EXE" "~$folder.desktop$" "HWINFO"
Gsmartcontrol
choco install gsmartcontrol nircmd shortcut "%ProgramFiles%\GSmartControl\gsmartcontrol.exe" "~$folder.desktop$" "GSmartControl"
Server 2016/2019 Windows Defender
Enable Windows Defender GUI
Install-WindowsFeature -Name Windows-Defender Install-WindowsFeature -Name Windows-Defender-GUI
Disable Windows Defender GUI
Uninstall-WindowsFeature -Name Windows-Defender-GUI Uninstall-WindowsFeature -Name Windows-Defender
ACTIVATE
exclude a dir in msdefender
$d="c:\drv\no_avscan"; mkdir -Force $d; cd $d Set-MpPreference -ExclusionPath $d
activate
irm https://massgrave.dev/get | iex ## interactive mode & ([ScriptBlock]::Create((irm https://massgrave.dev/get))) /HWID ## win only & ([ScriptBlock]::Create((irm https://massgrave.dev/get))) /Ohook ## office only
adobe acrobat
winget install Adobe.Acrobat.Pro # genp patch app
adobe cc
- read https://www.reddit.com/r/GenP/ > genp patch cc > install apps > genp patch apps
- login user
nobodyboss@outlook.com
passaSuper@123
- adobe email forward to sxlderek@gmail
winget install Adobe.CreativeCloud
autodesk
choco install autocad --pin
TROUBLESHOOT
clean disk
cleanmgr.exe /lowdisk cleanmgr.exe /verylowdisk
choco cleaner
choco install choco-cleaner choco-cleaner choco uninstall choco-cleaner
HARDWARE
drivers / platform specific
choco
choco install virtio-drivers; choco pin add -n virtio-drivers choco install qemu-guest-agent choco install vmware-tools choco install virtualbox-guest-additions-guest.install choco install lenovo-thinkvantage-system-update choco install sdio #download index only > select all > install
winget
wg install 9WZDNCRFJ4MV # lenovo vantage
DEVELOP
# common choco install python # python choco install vscode.install # vscode choco install javaruntime # java latest runtime choco install temurin8 # java8 runtime choco install adoptopenjdk13 # jdk 13 # java8 with Java WebStart $f="FeatureMain,FeatureEnvironment,FeatureJarFileRunWith," $f+="FeatureJavaHome,FeatureIcedTeaWeb,FeatureJNLPFileRunWith" choco install Temurin8 --params="/both /ADDLOCAL=$f /INSTALLDIR=$env:Programfiles\Eclipse Adoptium\ /quiet"