Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

Awesome Lists | Featured Topics | Projects

https://github.com/gordonbay/Windows-On-Reins

Wor is a Powershell script to harden, debloat, optimize, enhance privacy, avoid fingerprinting and improve performance on Windows 10 and 11.
https://github.com/gordonbay/Windows-On-Reins

bloatware-removal debloat fingerprinting-protection performance-optimization powershell-script privacy-enhancing-technologies privacy-protection privacy-tools sysadmin sysadmin-scripts sysadmin-tasks sysadmin-tool windows-10 windows-10-ameliorated

Last synced: 5 days ago
JSON representation

Wor is a Powershell script to harden, debloat, optimize, enhance privacy, avoid fingerprinting and improve performance on Windows 10 and 11.

Awesome Lists containing this project

README 

        
# Windows On Reins - Windows 10 Ameliorated, Bloatware removal, privacy fix and performance optimization

[![made-with-powershell](https://img.shields.io/badge/PowerShell-1f425f?logo=Powershell)](https://microsoft.com/PowerShell)

[![Discord](https://badgen.net/badge/icon/discord?icon=discord&label)](https://discord.gg/SGHFtvx4bN)



## Warning

I do not take responsibility for what may happen to your system. This is at your own risk.



## Before running WOR (stand by)

![](https://raw.githubusercontent.com/gordonbay/Windows-On-Reins/master/.github/BEFORE.PNG)



## After (stand by)

![](https://raw.githubusercontent.com/gordonbay/Windows-On-Reins/master/.github/AFTER.PNG)

* The Wifi was turned on a few moments before taking the screenshot in both cases.



## What it does - Security



- Harden the system to prevent Mimikatz credential scraping attack

- Harden the system to prevent Airstrike domain account hash capture attack

- Disable NetBIOS and Link-Local Multicast Name Resolution (LLMNR) protocol. Both imposes security risk for layer-4 name resolution spoofing attacks, ARP poisoning, KARMA attack and cache poisoning

- Disable SMB Server, it's known for opening doors for mass ransomware attacks - WannaCry and NotPetya

- Disable Anonymous enumeration of shares. Allowing anonymous logon users to list all account names and enumerate all shared resources can provide a map of potential points to attack the system (Stigviewer V-220930)

- Disable Wi-Fi Sense, it connects you to open hotspots that are "greenlighted" through crowdsourcing. Openning doors to Lure10 MITM attack and phishing (Stigviewer V-220808)

- Disable Remote Assistance (RA). RA may allow unauthorized parties access to the resources on the computer. (Stigviewer V-220823)

- Disable Autoplay, "allowing autoplay to execute may introduce malicious code to a system" (Stigviewer V-63673)

- Disable WPAD (Web Proxy Auto-Discovery Protocol), it exposes the system to MITM attack

- Apply Google's DNS to all connections to prevent some types of MITM attacks and DNS spoofing



## What it does - Performance



- Disable the Diagnostic Policy Service. To avoid some I/O operations to the file system and reduce system load

- Disable Windows Malicious Software Removal Tool due to high disk usage

- Disable NTFS encryption and compression due to processing overhead on filesystem operations

- Disable of scheduled defragmentation due to lack of parameters and waste of disk cycles

- Disable Windows Superfetch, due to high RAM usage and is known for causing slow boot times

- Disable Windows Hibernation, there are some evidence that if you use HDD and not a SSD disabling it may lead to lower boot times

- Disable Winmgmt service, Windows Management Instrumentation. This service transfer unusual amount of data, keeps windows updates silent running even if user had it opt-out

- Allow user to disable Cortana

- Disable SmartScreen Filter, due to huge performance impact, it checks online data about running programs

- Disable BITS - Background Intelligent Transfer Service, UsoSvc - Update Orchestrator Service, DusmSvc - Data Usage, the all showed the same behavior, its aggressive bandwidth eating will interfere with you online gameplay, work and navigation. Its aggressive disk usable will reduce your HDD or SSD lifespan

- Disable DoSvc (Delivery Optimization), it overrides the windows updates opt-out user option, turn your pc into a p2p peer for Windows updates, mining your network performance and compromises your online gameplay, work and navigation

- Disable wlidsvc service, due to conflicts with some games

- Disable Fax service

- Disable Xbox Dvr, its may cause fps problems on some games

- Disable Windows SgrmBroker - System Guard Runtime Monitor Broker, big name and big memory usage on some systems

- Disable Windows SystemRestore, due to performance draw and never works when you need it

- Disable Windows ShadowCopy, due to performance draw

- Disable Windows Fast Boot, due conflicts with Steam and several other programs

- Disable Adobe updates

- Disable Nvidia NGX updates, due to high network usage and lack of settings

- Apply Google's DNS to all connections to improve name resolution timing



## What it does - Quality of Life



- Disable "Get tips and suggestion when i use Windows";

- Disable "Offer suggestions on hou i can set up my device";

- Disable Windows Ads within file explorer;

- Allow users to definitively disable windows updates;

- Allow users to definitively disable windows defender;

- Installation of VC++ resources;

- Allow users to clear all the bloatware that cames with Windows installation;

- Disable Windows sound effects, and W11 startup sound;

- Disable error reporting;

- Enable dark mode;

- Install Nvidia control panel, if you own a Nvidia card;

- Dracula's dark mode for Notepad++;

- Disable error reporting;

- Disable Action Center ;

- Disable People's Bar;

- Show Computer shortcut on desktop;

- Remove all pinned bloatware from your start menu;

- Disable sticky keys prompt;

- Disable Windows from asking your feedback;

- Disable SecurityHealthService, due to anoying and non configurable popups;

- Disable WpnService, push notification service;

- Disable Razer Chroma SDK Server. Its night and you have that game with Razer SDK enabled running and messing up your keys;

- Disable Windows Licence check;

- Put "This PC" shortcut on desktop;

- Disable XPS printing;

- Disable Game Bar tips;

- Disable Vmware Host Server, service uses port 80;

- Firefox: disable recomendations and offers;

- Firefox: enable autoplay audio and video;

- Firefox: disable sponsor shortcut (Amazon, Trivago);



## Fingerprinting Prevention and privacy



- Disable Diagtrack, Windows Diagnostics Tracking, design by Microsoft to spy on users and to intefere with your programs

- Disable autoplay and autorun

- Disable Windows Location Tracking and Wifi Sensor

- Disable Windows lfsvc service, Geofence service, a cute name for a location tracking service

- Disable NvTelemetryContainer, Nvidia telemetry agent

- Disable Windows Media Player Network Sharing Service

- Disable files last modification date, in most cases;

- Disable Windows unique advertise ID;

- Disable and clear ETL and perfomance logs;

- Clears file thumbnails and allows user to complete disable it;

- Clears minimized windows thumbnails and allows user to complete disable it;

- Disable recent opened files history;

- Disable Cortana web search;

- Disable location tracking;

- Disable recycle bin;

- Enable DNS-over-HTTPS (DoH), both on Windows and Firefox, it encrypts the communication between the client and the resolver to prevent the inspection of domain names by network eavesdroppers;

- Firefox: Enable Encrypted Client Hello (ECH), to prevent TLS from leaking any data by encrypting all messages;

- Firefox: Disable telemetry, data collection and studies;

- Firefox: Disable project fission and shield (both are some kind of data collector);



## Gaming



- Disable Windows mouse acceleration (ideal for FPS games);

- Disable VBS (Virtualization-based security), may have a significant performance boost, specially in games;

- Ensure that Hardware Accelerated Scheduling is ON, in very rare cases it may reduce latency;

- Disable Xbox related features, they are known for causing fps issues;



Usage

============



1) Run Power Shell as admin;

2) Type the following to enable PowerShell script execution:

Set-ExecutionPolicy Unrestricted -Force



3) Confirm the question;



4) Run the script:

%path-to-file%/wor.ps1



or just right click the file wor.ps1 and select "Execute with powershell"



Notes

============



- To prevent Windows to install bloatware, this script must be run before connecting to the internet for the first time;

- Disabling Windows defender is unreversible and needs the system to be in safe mode;

- Some NICs may show the preferred DNS encryption as "Unencrypted Only" after running the the fingerprinting prevention. Thats not true, the DNS is being handled over HTTPS (DoH) and there will be no traffic on port 53. Test using::



pktmon filter remove 



pktmon filter add -p 53



start --etw -m real-time



Recommended Filterlists

============



- https://raw.githubusercontent.com/DandelionSprout/adfilt/master/TwitchEvenMorePureViewingExperience.txt

- https://raw.githubusercontent.com/DandelionSprout/adfilt/master/RedditTrashRemovalService.txt

- https://raw.githubusercontent.com/taylr/linkedinsanity/master/linkedinsanity.txt



Recommended Hosts filters

============



- https://github.com/MrRawes/firefox-hosts