From bf9a8d6cd7427c14b3276b2bfacdb3321532971b Mon Sep 17 00:00:00 2001 From: Carterpersall Date: Fri, 29 Apr 2022 13:12:24 -0500 Subject: [PATCH 1/6] Add gpedit.msc enabler - Adds check if Windows Home Edition is installed, if so, it uses DISM to install gpedit.msc --- win10debloat.ps1 | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/win10debloat.ps1 b/win10debloat.ps1 index 741c1fc3..90e03bbd 100644 --- a/win10debloat.ps1 +++ b/win10debloat.ps1 @@ -1085,6 +1085,14 @@ Set-ItemProperty -Path "HKCU:\Software\Microsoft\Windows\CurrentVersion\Policies Write-Host "Showing known file extensions..." Set-ItemProperty -Path "HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" -Name "HideFileExt" -Type DWord -Value 0 + if(!(((Get-ComputerInfo).WindowsEditionId).IndexOf('Core') -eq -1) -or !(((Get-ComputerInfo).WindowsEditionId).IndexOf('Home') -eq -1)){ # Not sure if home edition is Core or Home + Write-Host "Enabling gpedit.msc..." + Get-ChildItem @( + "C:\Windows\servicing\Packages\Microsoft-Windows-GroupPolicy-ClientTools-Package*.mum", + "C:\Windows\servicing\Packages\Microsoft-Windows-GroupPolicy-ClientExtensions-Package*.mum" + ) | ForEach-Object { dism.exe /online /norestart /add-package:"$_" } + } + # Service tweaks to Manual $services = @( From 13d48fb6a1b27e9095cb1f3f04f569772e952487 Mon Sep 17 00:00:00 2001 From: Carterpersall Date: Fri, 29 Apr 2022 13:53:45 -0500 Subject: [PATCH 2/6] Add built-in admin account disabling - Adds check if current logged in user is the built-in admin account - If it isn't, the built-in admin account is disabled to improve security --- win10debloat.ps1 | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/win10debloat.ps1 b/win10debloat.ps1 index 90e03bbd..0070c1f8 100644 --- a/win10debloat.ps1 +++ b/win10debloat.ps1 @@ -1085,6 +1085,10 @@ Set-ItemProperty -Path "HKCU:\Software\Microsoft\Windows\CurrentVersion\Policies Write-Host "Showing known file extensions..." Set-ItemProperty -Path "HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" -Name "HideFileExt" -Type DWord -Value 0 + if(($(Get-WMIObject -class Win32_ComputerSystem | select username).username).IndexOf('Administrator') -eq -1){ + net user administrator /active:no + } + if(!(((Get-ComputerInfo).WindowsEditionId).IndexOf('Core') -eq -1) -or !(((Get-ComputerInfo).WindowsEditionId).IndexOf('Home') -eq -1)){ # Not sure if home edition is Core or Home Write-Host "Enabling gpedit.msc..." Get-ChildItem @( From 271ff4d38b63067836e63dcbd32444fa97b3465d Mon Sep 17 00:00:00 2001 From: Carterpersall Date: Wed, 4 May 2022 09:57:17 -0500 Subject: [PATCH 3/6] Update .gitignore --- .gitignore | 1 + 1 file changed, 1 insertion(+) diff --git a/.gitignore b/.gitignore index d0af9754..7ceb424c 100644 --- a/.gitignore +++ b/.gitignore @@ -4,3 +4,4 @@ defltbase.sdb bin/x64/ctt-toolbox.exe bin/x64/ctt-toolbox.zip win10debloat.ps1.psbuild +.vs \ No newline at end of file From 6787966e820f2bbc4c1698ac2c1b95498c10d596 Mon Sep 17 00:00:00 2001 From: Carterpersall Date: Wed, 4 May 2022 10:01:57 -0500 Subject: [PATCH 4/6] Revert "Update .gitignore" This reverts commit 271ff4d38b63067836e63dcbd32444fa97b3465d. --- .gitignore | 1 - 1 file changed, 1 deletion(-) diff --git a/.gitignore b/.gitignore index 7ceb424c..d0af9754 100644 --- a/.gitignore +++ b/.gitignore @@ -4,4 +4,3 @@ defltbase.sdb bin/x64/ctt-toolbox.exe bin/x64/ctt-toolbox.zip win10debloat.ps1.psbuild -.vs \ No newline at end of file From da85ef0fb6217d3c5db823b8098a265e87f33e96 Mon Sep 17 00:00:00 2001 From: Carterpersall Date: Wed, 4 May 2022 10:02:48 -0500 Subject: [PATCH 5/6] Update .gitignore - Thought it broke something, actually it didn't --- .gitignore | 1 + 1 file changed, 1 insertion(+) diff --git a/.gitignore b/.gitignore index d0af9754..7ceb424c 100644 --- a/.gitignore +++ b/.gitignore @@ -4,3 +4,4 @@ defltbase.sdb bin/x64/ctt-toolbox.exe bin/x64/ctt-toolbox.zip win10debloat.ps1.psbuild +.vs \ No newline at end of file From b890ea7c0cdbae68d86090827196bef742777c10 Mon Sep 17 00:00:00 2001 From: Carterpersall Date: Wed, 4 May 2022 10:03:25 -0500 Subject: [PATCH 6/6] Update .gitignore --- .gitignore | 1 + 1 file changed, 1 insertion(+) diff --git a/.gitignore b/.gitignore index be0e02ba..7f1f81ed 100644 --- a/.gitignore +++ b/.gitignore @@ -6,3 +6,4 @@ bin/x64/ctt-toolbox.zip win10debloat.ps1.psbuild ctt-toolbox.exe winget-latest.appxbundle +.vs \ No newline at end of file