win, mac: fix minor typos, formatting, dead URLs

- Update dead URLs to archived versions
- Correct Windows version references (22H3 to 23H2)
- Correct reference order
- Fix incorrect usage of double quotes
This commit is contained in:
undergroundwires
2024-08-12 09:28:55 +02:00
parent c7e57b8913
commit 29e1069bf2
2 changed files with 89 additions and 70 deletions

View File

@@ -1800,7 +1800,7 @@ actions:
# References for spctl --master-disable # References for spctl --master-disable
- https://web.archive.org/web/20240523173608/https://www.manpagez.com/man/8/spctl/ - https://web.archive.org/web/20240523173608/https://www.manpagez.com/man/8/spctl/
# References for /var/db/SystemPolicy-prefs.plist # References for /var/db/SystemPolicy-prefs.plist
- https://krypted.com/mac-security/manage-gatekeeper-from-the-command-line-in-mountain-lion/ - https://web.archive.org/web/20240810103202/https://krypted.com/mac-security/manage-gatekeeper-from-the-command-line-in-mountain-lion/
- https://community.jamf.com/t5/jamf-pro/users-can-t-change-password-greyed-out/m-p/54228 - https://community.jamf.com/t5/jamf-pro/users-can-t-change-password-greyed-out/m-p/54228
code: |- code: |-
os_major_ver=$(sw_vers -productVersion | awk -F "." '{print $1}') os_major_ver=$(sw_vers -productVersion | awk -F "." '{print $1}')
@@ -1842,10 +1842,10 @@ actions:
fi fi
- -
name: Disable library validation entitlement (library signature validation) name: Disable library validation entitlement (library signature validation)
docs: docs: |-
- https://developer.apple.com/documentation/bundleresources/entitlements/com_apple_security_cs_disable-library-validation - [Disable Library Validation Entitlement | Apple Developer Documentation | developer.apple.com](https://archive.ph/2024.07.19-101811/https://developer.apple.com/documentation/bundleresources/entitlements/com_apple_security_cs_disable-library-validation)
- https://www.macenhance.com/docs/general/sip-library-validation.html - [Forbidden Commands to Speed Up macOS | www.naut.ca](https://web.archive.org/web/20240625020749/https://www.naut.ca/blog/2020/11/13/forbidden-commands-to-liberate-macos/)
- https://www.naut.ca/blog/2020/11/13/forbidden-commands-to-liberate-macos/ - [macEnhance | macEnhance.com](https://web.archive.org/web/20220622212008/https://www.macenhance.com/docs/general/sip-library-validation.html)
code: sudo defaults write /Library/Preferences/com.apple.security.libraryvalidation.plist 'DisableLibraryValidation' -bool true code: sudo defaults write /Library/Preferences/com.apple.security.libraryvalidation.plist 'DisableLibraryValidation' -bool true
revertCode: sudo defaults write /Library/Preferences/com.apple.security.libraryvalidation.plist 'DisableLibraryValidation' -bool false revertCode: sudo defaults write /Library/Preferences/com.apple.security.libraryvalidation.plist 'DisableLibraryValidation' -bool false
- -

View File

@@ -721,7 +721,7 @@ actions:
[1]: https://web.archive.org/web/20240801124433/https://forensafe.com/blogs/typedpaths.html "Typed Paths Blog | forensafe.com" [1]: https://web.archive.org/web/20240801124433/https://forensafe.com/blogs/typedpaths.html "Typed Paths Blog | forensafe.com"
[2]: https://web.archive.org/web/20240801124441/https://www.3fforensics.com/forensics/typed-paths.html "New Orleans Forensics, Expert computer forensics. NOLA Forensics. Mobile forensics, Memory forensics, Disk forensics. | Forensics | www.3fforensics.com" [2]: https://web.archive.org/web/20240801124441/https://www.3fforensics.com/forensics/typed-paths.html "New Orleans Forensics, Expert computer forensics. NOLA Forensics. Mobile forensics, Memory forensics, Disk forensics. | Forensics | www.3fforensics.com"
[3]: https://web.archive.org/web/20240801102250/https://www.elevenforum.com/t/clear-file-explorer-history-in-windows-11.8468/ "Clear File Explorer History in Windows 11 Tutorial | Windows 11 Forum | www.elevenforum.com" [3]: https://web.archive.org/web/20240801102250/https://www.elevenforum.com/t/clear-file-explorer-history-in-windows-11.8468/ "Clear File Explorer History in Windows 11 Tutorial | Windows 11 Forum | www.elevenforum.com"
[4]: https://archive.ph/2024.08.01-102204/https://x.com/dez_/status/1560101453150257154 "Joe Desimone on X: \"@Hexacorn ever come across this technique before ? Is it some kind of odd persistence? Explorer\TypedPaths\url1 https://t.co/iyQgumE7sS\" / X | x.com" [4]: https://archive.ph/2024.08.01-102204/https://x.com/dez_/status/1560101453150257154 "Joe Desimone on X: \"@Hexacorn ever come across this technique before ? Is it some kind of odd persistence? Explorer\TypedPaths\url1 \" / X | x.com"
call: call:
function: ClearRegistryValues function: ClearRegistryValues
parameters: parameters:
@@ -5073,7 +5073,7 @@ actions:
valueName: AllowDesktopAnalyticsProcessing valueName: AllowDesktopAnalyticsProcessing
dataType: REG_DWORD dataType: REG_DWORD
data: "0" data: "0"
deleteOnRevert: 'true' # Missing by default since Windows 10 Pro (≥ 22H2) and Windows 11 Pro (≥ 22H3) deleteOnRevert: 'true' # Missing by default since Windows 10 Pro (≥ 22H2) and Windows 11 Pro (≥ 23H2)
- -
name: Disable sending device name in Windows diagnostic data name: Disable sending device name in Windows diagnostic data
recommend: strict recommend: strict
@@ -5096,7 +5096,7 @@ actions:
valueName: AllowDeviceNameInTelemetry valueName: AllowDeviceNameInTelemetry
dataType: REG_DWORD dataType: REG_DWORD
data: "0" data: "0"
deleteOnRevert: 'true' # Missing by default since Windows 10 Pro (≥ 22H2) and Windows 11 Pro (≥ 22H3) deleteOnRevert: 'true' # Missing by default since Windows 10 Pro (≥ 22H2) and Windows 11 Pro (≥ 23H2)
- -
name: Disable collection of Edge browsing data for Desktop Analytics name: Disable collection of Edge browsing data for Desktop Analytics
recommend: strict recommend: strict
@@ -5124,7 +5124,7 @@ actions:
valueName: MicrosoftEdgeDataOptIn # MDM name: ConfigureTelemetryForMicrosoft365Analytics valueName: MicrosoftEdgeDataOptIn # MDM name: ConfigureTelemetryForMicrosoft365Analytics
dataType: REG_DWORD dataType: REG_DWORD
data: "0" data: "0"
deleteOnRevert: 'true' # Missing by default since Windows 10 Pro (≥ 22H2) and Windows 11 Pro (≥ 22H3) deleteOnRevert: 'true' # Missing by default since Windows 10 Pro (≥ 22H2) and Windows 11 Pro (≥ 23H2)
- -
name: Disable diagnostics data processing for Business cloud name: Disable diagnostics data processing for Business cloud
recommend: strict recommend: strict
@@ -5153,7 +5153,7 @@ actions:
valueName: AllowWUfBCloudProcessing valueName: AllowWUfBCloudProcessing
dataType: REG_DWORD dataType: REG_DWORD
data: "0" data: "0"
deleteOnRevert: 'true' # Missing by default since Windows 10 Pro (≥ 22H2) and Windows 11 Pro (≥ 22H3) deleteOnRevert: 'true' # Missing by default since Windows 10 Pro (≥ 22H2) and Windows 11 Pro (≥ 23H2)
- -
name: Disable Update Compliance processing of diagnostics data name: Disable Update Compliance processing of diagnostics data
recommend: standard recommend: standard
@@ -5186,7 +5186,7 @@ actions:
valueName: AllowUpdateComplianceProcessing valueName: AllowUpdateComplianceProcessing
dataType: REG_DWORD dataType: REG_DWORD
data: "0" data: "0"
deleteOnRevert: 'true' # Missing by default since Windows 10 Pro (≥ 22H2) and Windows 11 Pro (≥ 22H3) deleteOnRevert: 'true' # Missing by default since Windows 10 Pro (≥ 22H2) and Windows 11 Pro (≥ 23H2)
- -
name: Disable commercial usage of collected data name: Disable commercial usage of collected data
recommend: standard recommend: standard
@@ -5211,7 +5211,7 @@ actions:
valueName: AllowCommercialDataPipeline valueName: AllowCommercialDataPipeline
dataType: REG_DWORD dataType: REG_DWORD
data: "0" data: "0"
deleteOnRevert: 'true' # Missing by default since Windows 10 Pro (≥ 22H2) and Windows 11 Pro (≥ 22H3) deleteOnRevert: 'true' # Missing by default since Windows 10 Pro (≥ 22H2) and Windows 11 Pro (≥ 23H2)
- -
name: Disable diagnostic and usage telemetry name: Disable diagnostic and usage telemetry
recommend: standard recommend: standard
@@ -5254,7 +5254,7 @@ actions:
valueName: AllowTelemetry valueName: AllowTelemetry
dataType: REG_DWORD dataType: REG_DWORD
data: "0" data: "0"
deleteOnRevert: 'true' # Missing by default since Windows 10 Pro (≥ 22H2) and Windows 11 Pro (≥ 22H3) deleteOnRevert: 'true' # Missing by default since Windows 10 Pro (≥ 22H2) and Windows 11 Pro (≥ 23H2)
- -
name: Disable automatic cloud configuration downloads name: Disable automatic cloud configuration downloads
recommend: strict recommend: strict
@@ -5297,7 +5297,7 @@ actions:
valueName: DisableOneSettingsDownloads valueName: DisableOneSettingsDownloads
dataType: REG_DWORD dataType: REG_DWORD
data: "1" data: "1"
deleteOnRevert: 'true' # Missing by default since Windows 10 Pro (≥ 22H2) and Windows 11 Pro (≥ 22H3) deleteOnRevert: 'true' # Missing by default since Windows 10 Pro (≥ 22H2) and Windows 11 Pro (≥ 23H2)
- -
name: Disable license telemetry name: Disable license telemetry
recommend: standard recommend: standard
@@ -5308,7 +5308,7 @@ actions:
valueName: NoGenTicket valueName: NoGenTicket
dataType: REG_DWORD dataType: REG_DWORD
data: "1" data: "1"
deleteOnRevert: 'true' # Missing by default since Windows 10 Pro (≥ 22H2) and Windows 11 Pro (≥ 22H3) deleteOnRevert: 'true' # Missing by default since Windows 10 Pro (≥ 22H2) and Windows 11 Pro (≥ 23H2)
- -
name: Disable error reporting name: Disable error reporting
recommend: standard recommend: standard
@@ -5385,7 +5385,7 @@ actions:
valueName: Disabled valueName: Disabled
dataType: REG_DWORD dataType: REG_DWORD
data: "1" data: "1"
deleteOnRevert: 'true' # Missing by default since Windows 10 Pro (≥ 22H2) and Windows 11 Pro (≥ 22H3) deleteOnRevert: 'true' # Missing by default since Windows 10 Pro (≥ 22H2) and Windows 11 Pro (≥ 23H2)
- -
function: SetRegistryValue function: SetRegistryValue
parameters: parameters:
@@ -5393,7 +5393,7 @@ actions:
valueName: Disabled valueName: Disabled
dataType: REG_DWORD dataType: REG_DWORD
data: "1" data: "1"
deleteOnRevert: 'true' # Missing by default since Windows 10 Pro (≥ 22H2) and Windows 11 Pro (≥ 22H3) deleteOnRevert: 'true' # Missing by default since Windows 10 Pro (≥ 22H2) and Windows 11 Pro (≥ 23H2)
- -
function: Comment function: Comment
parameters: parameters:
@@ -5414,7 +5414,7 @@ actions:
valueName: DefaultOverrideBehavior valueName: DefaultOverrideBehavior
dataType: REG_DWORD dataType: REG_DWORD
data: "1" data: "1"
deleteOnRevert: 'true' # Missing by default since Windows 10 Pro (≥ 22H2) and Windows 11 Pro (≥ 22H3) deleteOnRevert: 'true' # Missing by default since Windows 10 Pro (≥ 22H2) and Windows 11 Pro (≥ 23H2)
- -
function: Comment function: Comment
parameters: parameters:
@@ -5427,7 +5427,7 @@ actions:
valueName: DontSendAdditionalData valueName: DontSendAdditionalData
dataType: REG_DWORD dataType: REG_DWORD
data: "1" data: "1"
deleteOnRevert: 'true' # Missing by default since Windows 10 Pro (≥ 22H2) and Windows 11 Pro (≥ 22H3) deleteOnRevert: 'true' # Missing by default since Windows 10 Pro (≥ 22H2) and Windows 11 Pro (≥ 23H2)
- -
function: SetRegistryValue function: SetRegistryValue
parameters: parameters:
@@ -5435,7 +5435,7 @@ actions:
valueName: LoggingDisabled valueName: LoggingDisabled
dataType: REG_DWORD dataType: REG_DWORD
data: "1" data: "1"
deleteOnRevert: 'true' # Missing by default since Windows 10 Pro (≥ 22H2) and Windows 11 Pro (≥ 22H3) deleteOnRevert: 'true' # Missing by default since Windows 10 Pro (≥ 22H2) and Windows 11 Pro (≥ 23H2)
- -
function: DisableScheduledTask function: DisableScheduledTask
parameters: parameters:
@@ -6037,7 +6037,7 @@ actions:
valueName: PreventDeviceMetadataFromNetwork valueName: PreventDeviceMetadataFromNetwork
dataType: REG_DWORD dataType: REG_DWORD
data: "1" data: "1"
deleteOnRevert: 'true' # Missing by default since Windows 10 Pro (≥ 22H2) and Windows 11 Pro (≥ 22H3) deleteOnRevert: 'true' # Missing by default since Windows 10 Pro (≥ 22H2) and Windows 11 Pro (≥ 23H2)
- -
name: Disable inclusion of drivers with Windows updates name: Disable inclusion of drivers with Windows updates
docs: https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.WindowsUpdate::ExcludeWUDriversInQualityUpdate docs: https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.WindowsUpdate::ExcludeWUDriversInQualityUpdate
@@ -6049,7 +6049,7 @@ actions:
valueName: ExcludeWUDriversInQualityUpdate valueName: ExcludeWUDriversInQualityUpdate
dataType: REG_DWORD dataType: REG_DWORD
data: "1" data: "1"
deleteOnRevert: 'true' # Missing by default since Windows 10 Pro (≥ 22H2) and Windows 11 Pro (≥ 22H3) deleteOnRevert: 'true' # Missing by default since Windows 10 Pro (≥ 22H2) and Windows 11 Pro (≥ 23H2)
- -
name: Disable Windows Update device driver search name: Disable Windows Update device driver search
docs: https://www.stigviewer.com/stig/windows_7/2018-02-12/finding/V-21965 docs: https://www.stigviewer.com/stig/windows_7/2018-02-12/finding/V-21965
@@ -6846,7 +6846,7 @@ actions:
[5]: https://web.archive.org/web/20240120135454/https://www.winhelponline.com/blog/disable-web-results-windows-10-start-menu/ "How to Disable Web Search in Windows 10 Start menu | Winhelponline | www.winhelponline.com" [5]: https://web.archive.org/web/20240120135454/https://www.winhelponline.com/blog/disable-web-results-windows-10-start-menu/ "How to Disable Web Search in Windows 10 Start menu | Winhelponline | www.winhelponline.com"
[6]: https://web.archive.org/web/20240120194244/https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.WindowsExplorer::DisableSearchBoxSuggestions "Turn off display of recent search entries in the File Explorer search box | admx.help" [6]: https://web.archive.org/web/20240120194244/https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.WindowsExplorer::DisableSearchBoxSuggestions "Turn off display of recent search entries in the File Explorer search box | admx.help"
[7]: https://web.archive.org/web/20240120194340/https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-admx-windowsexplorer#disablesearchboxsuggestions "ADMX_WindowsExplorer Policy CSP - Windows Client Management | Microsoft Learn | learn.microsoft.com" [7]: https://web.archive.org/web/20240120194340/https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-admx-windowsexplorer#disablesearchboxsuggestions "ADMX_WindowsExplorer Policy CSP - Windows Client Management | Microsoft Learn | learn.microsoft.com"
[8]: https://web.archive.org/web/20240120194603/https://www.pcastuces.com/pratique/astuces/6080-print.htm "PC Astuces - Désactiver les recommandations dans la recherche - Windows 10 | www.pcastuces.com" [8]: https://archive.ph/2024.07.19-094152/https://www.pcastuces.com/pratique/astuces/6080-print.htm "PC Astuces - Désactiver les recommandations dans la recherche - Windows 10 | www.pcastuces.com"
[9]: https://web.archive.org/web/20240120194547/https://www.deskmodder.de/phpBB3/viewtopic.php?t=23243 "Websuche in der Windows 10 Taskleiste deaktivieren - Deskmodder.de | www.deskmodder.de" [9]: https://web.archive.org/web/20240120194547/https://www.deskmodder.de/phpBB3/viewtopic.php?t=23243 "Websuche in der Windows 10 Taskleiste deaktivieren - Deskmodder.de | www.deskmodder.de"
call: call:
- -
@@ -6945,8 +6945,8 @@ actions:
[1]: https://web.archive.org/web/20240120135419/https://admx.help/?Category=Windows_10_2016&Policy=FullArmor.Policies.3B9EA2B5_A1D1_4CD5_9EDE_75B22990BC21::DoNotUseWebResults "Don't search the web or display web results in Search" [1]: https://web.archive.org/web/20240120135419/https://admx.help/?Category=Windows_10_2016&Policy=FullArmor.Policies.3B9EA2B5_A1D1_4CD5_9EDE_75B22990BC21::DoNotUseWebResults "Don't search the web or display web results in Search"
[2]: https://web.archive.org/web/20240120140023/https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-search#donotusewebresults "Search Policy CSP - Windows Client Management | Microsoft Learn | learn.microsoft.com" [2]: https://web.archive.org/web/20240120140023/https://learn.microsoft.com/en-us/windows/client-management/mdm/policy-csp-search#donotusewebresults "Search Policy CSP - Windows Client Management | Microsoft Learn | learn.microsoft.com"
[4]: https://web.archive.org/web/20240120135454/https://www.winhelponline.com/blog/disable-web-results-windows-10-start-menu/ "How to Disable Web Search in Windows 10 Start menu | Winhelponline | www.winhelponline.com"
[3]: https://web.archive.org/web/20230911110911/https://learn.microsoft.com/en-us/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services#21-cortana-and-search-group-policies "Manage connections from Windows 10 and Windows 11 Server/Enterprise editions operating system components to Microsoft services - Windows Privacy | Microsoft Learn" [3]: https://web.archive.org/web/20230911110911/https://learn.microsoft.com/en-us/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services#21-cortana-and-search-group-policies "Manage connections from Windows 10 and Windows 11 Server/Enterprise editions operating system components to Microsoft services - Windows Privacy | Microsoft Learn"
[4]: https://web.archive.org/web/20240120135454/https://www.winhelponline.com/blog/disable-web-results-windows-10-start-menu/ "How to Disable Web Search in Windows 10 Start menu | Winhelponline | www.winhelponline.com"
[5]: https://web.archive.org/web/20240120135331/https://admx.help/?Category=Windows_10_2016&Policy=FullArmor.Policies.3B9EA2B5_A1D1_4CD5_9EDE_75B22990BC21::DoNotUseWebResultsOnMeteredConnections "Don't search the web or display web results in Search over metered connections | admx.help" [5]: https://web.archive.org/web/20240120135331/https://admx.help/?Category=Windows_10_2016&Policy=FullArmor.Policies.3B9EA2B5_A1D1_4CD5_9EDE_75B22990BC21::DoNotUseWebResultsOnMeteredConnections "Don't search the web or display web results in Search over metered connections | admx.help"
call: call:
- -
@@ -9469,47 +9469,47 @@ actions:
Disabling the Hubs Sidebar also deactivates the following features: Disabling the Hubs Sidebar also deactivates the following features:
- **Copilot in Edge**: - **Copilot in Edge**:
This feature was known as *Bing Chat* [11], *Discover in Edge* [2], *Bing Discover* [2], *Edge Discover* [3], This feature was known as *Bing Chat* [2], *Discover in Edge* [3] [4], *Bing Discover* [3],
*Discover app* [4], *Discover experience* [4], or simply *Discover* [4]. *Discover app* [5], *Discover experience* [4], or simply *Discover* [3] [4].
It collects personal data including URLs, page titles, user queries, browsing context, and It collects personal data including URLs, page titles, user queries, browsing context, and
conversation histories [5]. conversation histories [6] [7].
It enables the discovery of content relevant to the page you are browsing, such as summaries and It enables the discovery of content relevant to the page you are browsing, such as summaries and
source information [4]. source information [4].
By default, this feature sends URLs to Microsoft Bing for related recommendations [3] Disabling the Hubs Sidebar is the recommended method to also disable Copilot in Edge [4] [8].
Disabling the Hubs Sidebar is the recommended method to also disable Copilot in Edge [3] [4].
Disabling it stops this data collection, improving your privacy. Disabling it stops this data collection, improving your privacy.
- **Sidebar apps**: - **Sidebar apps**:
Disabling the Hubs Sidebar also deactivates all sidebar apps [6]. Disabling the Hubs Sidebar also deactivates all sidebar apps [5].
This script disables also the sidebar in Progressive Web Apps (PWAs) [6]. This script disables also the sidebar in Progressive Web Apps (PWAs) [5].
This script prevents all sidebar apps from being activated [6]. This script prevents all sidebar apps from being activated [5].
- **Standalone Sidebar**: - **Standalone Sidebar**:
Disabling the Hubs Sidebar also turns off any standalone sidebar modes [7]. Disabling the Hubs Sidebar also turns off any standalone sidebar modes [9].
This mode displays the Sidebar in a fixed position on the desktop, separate from the browser frame [7]. This mode displays the Sidebar in a fixed position on the desktop, separate from the browser frame [9].
Disabling this reduces background resource usage, thereby optimizing system performance [8]. Disabling this reduces background resource usage, thereby optimizing system performance [10].
The script configures the following Edge policies: The script configures the following Edge policies:
| Edge policy | Affected Edge versions | | Edge policy | Affected Edge versions |
|-----------------------------------------|------------------------------| |-------------------------------------------|------------------------------|
| `HubsSidebarEnabled` [1] [2] [6] [9] [10] | Edge ≥ 99 [1] | | `HubsSidebarEnabled` [1] [3] [5] [8] [11] | Edge ≥ 99 [1] |
| `StandaloneHubsSidebarEnabled` [7] [8] | Edge ≥ 88 and ≤ 119 [7] | | `StandaloneHubsSidebarEnabled` [9] [10] | Edge ≥ 88 and ≤ 119 [9] |
The new settings will take effect after you restart the browser [6]. The new settings will take effect after you restart the browser [5].
> **Caution**: > **Caution**:
> - This will display the message "Your browser is managed by your organization" on the settings page. > - This will display the message "Your browser is managed by your organization" on the settings page.
> - This locks settings and prevents them from being changed on the settings page. > - This locks settings and prevents them from being changed on the settings page.
[1]: https://web.archive.org/web/20240517212443/https://learn.microsoft.com/en-us/deployedge/microsoft-edge-policies#hubssidebarenabled "Microsoft Edge Browser Policy Documentation | Microsoft Learn | learn.microsoft.com" [1]: https://web.archive.org/web/20240517212443/https://learn.microsoft.com/en-us/deployedge/microsoft-edge-policies#hubssidebarenabled "Microsoft Edge Browser Policy Documentation | Microsoft Learn | learn.microsoft.com"
[2]: https://web.archive.org/web/20240328062746/https://techcommunity.microsoft.com/t5/discussions/copilot-or-discover-browser-extension-not-working-as-expected/m-p/4097297 "Copilot or Discover browser extension not working as expected for managed Edge browser - Microsoft Community Hub | techcommunity.microsoft.com" [2]: https://web.archive.org/web/20240623213328/https://blogs.bing.com/search/november-2023/our-vision-to-bring-microsoft-copilot-to-everyone-and-more "Our vision to bring Microsoft Copilot to everyone, and more | Bing Search Blog | blogs.bing.com"
[3]: https://web.archive.org/web/20240328062746/https://techcommunity.microsoft.com/t5/discussions/copilot-or-discover-browser-extension-not-working-as-expected/m-p/4097297 "Copilot or Discover browser extension not working as expected for managed Edge browser - Microsoft Community Hub | techcommunity.microsoft.com"
[4]: https://web.archive.org/web/20240101215939/https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnote-archive-beta-channel "Archived release notes for Microsoft Edge Beta Channel | Microsoft Learn | learn.microsoft.com" [4]: https://web.archive.org/web/20240101215939/https://learn.microsoft.com/en-us/deployedge/microsoft-edge-relnote-archive-beta-channel "Archived release notes for Microsoft Edge Beta Channel | Microsoft Learn | learn.microsoft.com"
[5]: https://web.archive.org/web/20240519104435/https://learn.microsoft.com/en-us/copilot/edge#data-used-by--in-edge "Copilot in Edge | Microsoft Learn | learn.microsoft.com" [5]: https://web.archive.org/web/20240519104338/https://learn.microsoft.com/en-us/deployedge/microsoft-edge-sidebar#allow-or-block-the-sidebar-in-group-policy "Manage the sidebar in Microsoft Edge | Microsoft Learn | learn.microsoft.com"
[6]: https://web.archive.org/web/20240519104338/https://learn.microsoft.com/en-us/deployedge/microsoft-edge-sidebar#allow-or-block-the-sidebar-in-group-policy "Manage the sidebar in Microsoft Edge | Microsoft Learn | learn.microsoft.com" [6]: https://web.archive.org/web/20240623123514/https://learn.microsoft.com/en-us/microsoft-edge/privacy-whitepaper/#shopping "Microsoft Edge Privacy Whitepaper - Microsoft Edge Developer documentation | Microsoft Learn | learn.microsoft.com"
[7]: https://web.archive.org/web/20240517212443/https://learn.microsoft.com/en-us/deployedge/microsoft-edge-policies#standalonehubssidebarenabled "Microsoft Edge Browser Policy Documentation | Microsoft Learn | learn.microsoft.com" [7]: https://web.archive.org/web/20240519104435/https://learn.microsoft.com/en-us/copilot/edge#data-used-by--in-edge "Copilot in Edge | Microsoft Learn | learn.microsoft.com"
[8]: https://web.archive.org/web/20240519104546/https://answers.microsoft.com/en-us/microsoftedge/forum/all/microsoft-edge-running-in-the-background/b827d6dc-8853-4258-a2e1-a760e93df561 "Microsoft Edge running in the background - Microsoft Community | answers.microsoft.com" [8]: https://web.archive.org/web/20240519104435/https://learn.microsoft.com/en-us/copilot/edge#manage--in-edge "Copilot in Edge | Microsoft Learn | learn.microsoft.com"
[9]: https://web.archive.org/web/20240519104435/https://learn.microsoft.com/en-us/copilot/edge#manage--in-edge "Copilot in Edge | Microsoft Learn | learn.microsoft.com" [9]: https://web.archive.org/web/20240517212443/https://learn.microsoft.com/en-us/deployedge/microsoft-edge-policies#standalonehubssidebarenabled "Microsoft Edge Browser Policy Documentation | Microsoft Learn | learn.microsoft.com"
[10]: https://web.archive.org/web/20240122064120/https://learn.microsoft.com/en-us/windows/client-management/manage-windows-copilot "Manage Copilot in Windows - Windows Client Management | Microsoft Learn | learn.microsoft.com" [10]: https://web.archive.org/web/20240519104546/https://answers.microsoft.com/en-us/microsoftedge/forum/all/microsoft-edge-running-in-the-background/b827d6dc-8853-4258-a2e1-a760e93df561 "Microsoft Edge running in the background - Microsoft Community | answers.microsoft.com"
[11]: https://web.archive.org/web/20240623213328/https://blogs.bing.com/search/november-2023/our-vision-to-bring-microsoft-copilot-to-everyone-and-more "Our vision to bring Microsoft Copilot to everyone, and more | Bing Search Blog | blogs.bing.com" [11]: https://web.archive.org/web/20240122064120/https://learn.microsoft.com/en-us/windows/client-management/manage-windows-copilot "Manage Copilot in Windows - Windows Client Management | Microsoft Learn | learn.microsoft.com"
call: call:
- -
function: SetEdgePolicyViaRegistry function: SetEdgePolicyViaRegistry
@@ -10904,17 +10904,19 @@ actions:
This script prevents such data sharing by disabling the search suggestions feature [1] [2] [3]. This script prevents such data sharing by disabling the search suggestions feature [1] [2] [3].
As a result, users will no longer receive search suggestions when typing in the Address bar, As a result, users will no longer receive search suggestions when typing in the Address bar,
thereby enhancing privacy [1] [2] [3]. thereby enhancing privacy [1] [2] [3] [4].
Disabling this feature reduces potential privacy risks by preventing data sharing. Disabling this feature reduces potential privacy risks by preventing data sharing.
Microsoft recommends this action to reduce their data collection to protect your privacy [4].
This may also improve system performance by reducing processing workload. This may also improve system performance by reducing processing workload.
This script configures the `ShowSearchSuggestionsGlobal` policy [1] [2] [3]. This script configures the `ShowSearchSuggestionsGlobal` policy [1] [2] [3] [4].
This script only applies to Edge (Legacy) and does not impact newer versions of Edge. This script only applies to Edge (Legacy) and does not impact newer versions of Edge.
[1]: https://web.archive.org/web/20240314100851/https://learn.microsoft.com/en-us/previous-versions/windows/edge-legacy/group-policies/address-bar-settings-gp "Microsoft Edge - Address bar group policies | Microsoft Learn | learn.microsoft.com" [1]: https://web.archive.org/web/20240314100851/https://learn.microsoft.com/en-us/previous-versions/windows/edge-legacy/group-policies/address-bar-settings-gp#configure-search-suggestions-in-address-bar "Microsoft Edge - Address bar group policies | Microsoft Learn | learn.microsoft.com"
[2]: https://web.archive.org/web/20240624135139/https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.MicrosoftEdge::AllowSearchSuggestionsinAddressBar "Configure search suggestions in Address bar | admx.help" [2]: https://web.archive.org/web/20240624135139/https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.MicrosoftEdge::AllowSearchSuggestionsinAddressBar "Configure search suggestions in Address bar | admx.help"
[3]: https://web.archive.org/web/20240624133131/https://learn.microsoft.com/en-us/previous-versions/windows/edge-legacy/configure-search-suggestions-in-address-bar "Group Policy and Mobile Device Management settings for Microsoft Edge (Microsoft Edge for IT Pros) | Microsoft Learn | learn.microsoft.com" [3]: https://web.archive.org/web/20240624133131/https://learn.microsoft.com/en-us/previous-versions/windows/edge-legacy/configure-search-suggestions-in-address-bar "Group Policy and Mobile Device Management settings for Microsoft Edge (Microsoft Edge for IT Pros) | Microsoft Learn | learn.microsoft.com"
[4]: https://web.archive.org/web/20230911110911/https://learn.microsoft.com/en-us/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services#131-microsoft-edge-group-policies "Manage connections from Windows 10 and Windows 11 Server/Enterprise editions operating system components to Microsoft services - Windows Privacy | Microsoft Learn"
call: call:
function: SetLegacyEdgePolicyViaRegistry function: SetLegacyEdgePolicyViaRegistry
parameters: parameters:
@@ -11616,14 +11618,31 @@ actions:
name: Disable "Razer Game Scanner Service" name: Disable "Razer Game Scanner Service"
recommend: standard recommend: standard
docs: |- docs: |-
### Overview of default task statuses This script disables the `Razer Game Scanner Service`.
`\Adobe Acrobat Update Task` [1] (tested with Razer Synapse 3.9.311 and Razer Cortex 10.12.6.0): The service is part of the **Razer Synapse** software suite [1] [2].
It runs the `GameScannerService.exe` process [3] [4].
This process scans your computer for installed games to optimize Razer device settings
and saves all settings to the cloud [2].
Disabling this service enhances privacy by preventing data transmission to Razer servers.
It also improves system performance by reducing heavy resource usage [1] [2] [3].
Recent versions of the Razer Synapse software no longer include this service (last tested on version 3.9.311).
### Overview of default service statuses
`Razer Game Scanner Service` (tested with Razer Synapse 3.9.311 and Razer Cortex 10.12.6.0):
| OS Version | Status | Start type | | OS Version | Status | Start type |
| ---------- | -------| ---------- | | ---------- | -------| ---------- |
| Windows 10 (≥ 21H1) | 🟡 Missing | N/A | | Windows 10 (≥ 21H1) | 🟡 Missing | N/A |
| Windows 11 (≥ 22H2) | 🟡 Missing | N/A | | Windows 11 (≥ 22H2) | 🟡 Missing | N/A |
[1]: https://web.archive.org/web/20240719204604/https://blog.ultimateoutsider.com/2016/02/razers-terrible-game-scanner-service.html "Ultimate Outsider: Razer's Terrible Game Scanner Service | blog.ultimateoutsider.com"
[2]: https://web.archive.org/web/20240719205425/https://www.file.net/process/gamescannerservice.exe.html "GameScannerService.exe Windows process - What is it? | file.net"
[3]: https://web.archive.org/web/20240719205207/https://bugzilla.mozilla.org/show_bug.cgi?id=1326362 "1326362 - Detect and alert for Razer Game Scanner service | bugzilla.mozilla.org"
[4]: https://web.archive.org/web/20240719205527/https://www.shouldiblockit.com/gamescannerservice.exe-3c242c31d44c9ce758ce1f5c1e614c24.aspx "GameScannerService.exe - Should I Block It? (MD5 3c242c31d44c9ce758ce1f5c1e614c24)"
call: call:
function: DisableService function: DisableService
parameters: parameters:
@@ -14216,7 +14235,7 @@ actions:
safeguarding user privacy. safeguarding user privacy.
> **Caution**: This script may impact the delivery of diagnostic and usage-based solutions from > **Caution**: This script may impact the delivery of diagnostic and usage-based solutions from
Microsoft [1] [2]. > Microsoft [1] [2].
### Blocked Hosts ### Blocked Hosts
@@ -18422,7 +18441,7 @@ actions:
[3]: https://web.archive.org/web/20240713100611/https://answers.microsoft.com/en-us/windows/forum/all/i-am-having-issues-changing-my-app-recommendation/16b00c35-05fc-44bc-9e78-e9452cf8d862 "I am Having Issues Changing My App Recommendation Settings - Microsoft Community | answers.microsoft.com" [3]: https://web.archive.org/web/20240713100611/https://answers.microsoft.com/en-us/windows/forum/all/i-am-having-issues-changing-my-app-recommendation/16b00c35-05fc-44bc-9e78-e9452cf8d862 "I am Having Issues Changing My App Recommendation Settings - Microsoft Community | answers.microsoft.com"
[4]: https://web.archive.org/web/20230911110911/https://learn.microsoft.com/en-us/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services#241-microsoft-defender-smartscreen "Manage connections from Windows 10 and Windows 11 Server/Enterprise editions operating system components to Microsoft services - Windows Privacy | Microsoft Learn" [4]: https://web.archive.org/web/20230911110911/https://learn.microsoft.com/en-us/windows/privacy/manage-connections-from-windows-operating-system-components-to-microsoft-services#241-microsoft-defender-smartscreen "Manage connections from Windows 10 and Windows 11 Server/Enterprise editions operating system components to Microsoft services - Windows Privacy | Microsoft Learn"
[5]: https://github.com/privacysexy-forks/10_0_19045_2251/blob/0960c766a4fc8eb5a95d47ac4df6c1d35b9324bf/C/Windows/System32/smartscreen.exe.strings#L5182 "10_0_19045_2251/C/Windows/System32/smartscreen.exe.strings at 0960c766a4fc8eb5a95d47ac4df6c1d35b9324bf · privacysexy-forks/10_0_19045_2251 · GitHub | github.com" [5]: https://github.com/privacysexy-forks/10_0_19045_2251/blob/0960c766a4fc8eb5a95d47ac4df6c1d35b9324bf/C/Windows/System32/smartscreen.exe.strings#L5182 "10_0_19045_2251/C/Windows/System32/smartscreen.exe.strings at 0960c766a4fc8eb5a95d47ac4df6c1d35b9324bf · privacysexy-forks/10_0_19045_2251 · GitHub | github.com"
[6]: https://web.archive.org/web/20240713100920/https://www.elevenforum.com/t/choose-where-to-get-apps-in-windows-11.7370/ "Choose where to get apps in Windows 11 Tutorial | Windows 11 Forum | www.elevenforum.com" [6]: https://web.archive.org/web/20240724195837/https://www.elevenforum.com/t/choose-where-to-get-apps-in-windows-11.7370/ "Choose where to get apps in Windows 11 Tutorial | Windows 11 Forum | www.elevenforum.com"
[7]: https://web.archive.org/web/20240713101028/https://bugzilla.mozilla.org/show_bug.cgi?id=1659157 "1659157 - Add telemetry to track Win 10 installs in related to the system's MSFT verified app setting. | bugzilla.mozilla.org" [7]: https://web.archive.org/web/20240713101028/https://bugzilla.mozilla.org/show_bug.cgi?id=1659157 "1659157 - Add telemetry to track Win 10 installs in related to the system's MSFT verified app setting. | bugzilla.mozilla.org"
call: call:
- -
@@ -19760,7 +19779,7 @@ actions:
| ---------------- | ------ | | ---------------- | ------ |
| Windows 10 22H2 | 🔴 Disabled | | Windows 10 22H2 | 🔴 Disabled |
| Windows 11 22H2 | 🔴 Disabled | | Windows 11 22H2 | 🔴 Disabled |
| Windows 11 22H3 | 🔴 Disabled | | Windows 11 23H2 | 🔴 Disabled |
call: call:
function: DisableScheduledTask function: DisableScheduledTask
parameters: parameters:
@@ -19783,7 +19802,7 @@ actions:
| ---------------- | ------ | | ---------------- | ------ |
| Windows 10 22H2 | 🔴 Disabled | | Windows 10 22H2 | 🔴 Disabled |
| Windows 11 22H2 | 🔴 Disabled | | Windows 11 22H2 | 🔴 Disabled |
| Windows 11 22H3 | 🔴 Disabled | | Windows 11 23H2 | 🔴 Disabled |
call: call:
function: DisableScheduledTask function: DisableScheduledTask
parameters: parameters:
@@ -20446,7 +20465,7 @@ actions:
- `HKLM\SOFTWARE\Microsoft\WindowsUpdate\UX\Settings!PauseUpdatesStartTime` (set only in Windows 11 22H2 and later) - `HKLM\SOFTWARE\Microsoft\WindowsUpdate\UX\Settings!PauseUpdatesStartTime` (set only in Windows 11 22H2 and later)
- `HKLM\SOFTWARE\Microsoft\WindowsUpdate\UX\Settings!PauseUpdatesExpiryTime` - `HKLM\SOFTWARE\Microsoft\WindowsUpdate\UX\Settings!PauseUpdatesExpiryTime`
This method has been tested and verified on Windows 10 from version 22H2 and Windows 11 from version 22H3 onwards. This method has been tested and verified on Windows 10 from version 22H2 and Windows 11 from version 23H2 onwards.
To ensure functional integrity, all these keys must be added together. To ensure functional integrity, all these keys must be added together.
While beneficial for Windows Home users [1], note that Group Policy Object (GPO) settings might override these changes. While beneficial for Windows Home users [1], note that Group Policy Object (GPO) settings might override these changes.
@@ -23889,7 +23908,7 @@ actions:
| Windows 11 | 22H2 | ✅ | | Windows 11 | 22H2 | ✅ |
| Windows 11 | 23H2 | ✅ | | Windows 11 | 23H2 | ✅ |
[1]: https://archive.ph/2024.03.25-093648/https://twitter.com/ALumia_Italia/status/1088739425738244096?lang=en 'Aggiornamenti Lumia on X: "Windows Calling Shell App (aka Call) got a new "Store Logo"" / X | twitter.com' [1]: https://archive.ph/2024.03.25-093648/https://twitter.com/ALumia_Italia/status/1088739425738244096?lang=en 'Aggiornamenti Lumia on X: "Windows Calling Shell App (aka Call) got a new "Store Logo" / X | twitter.com'
[2]: https://web.archive.org/web/20240103144719/https://www.aggiornamentilumia.it/2018/11/05/windows-10-19h1-in-arrivo-una-nuova-applicazione-per-il-mirroring-chiamate-indiscrezione/ "Windows 10 19H1 | In arrivo una nuova applicazione per il mirroring chiamate [Indiscrezione] - Aggiornamenti Lumia | www.aggiornamentilumia.it" [2]: https://web.archive.org/web/20240103144719/https://www.aggiornamentilumia.it/2018/11/05/windows-10-19h1-in-arrivo-una-nuova-applicazione-per-il-mirroring-chiamate-indiscrezione/ "Windows 10 19H1 | In arrivo una nuova applicazione per il mirroring chiamate [Indiscrezione] - Aggiornamenti Lumia | www.aggiornamentilumia.it"
[3]: https://web.archive.org/web/20240103144732/https://strontic.github.io/xcyclopedia/library/CallingShellApp.exe-C5415F104A4060D90CE1675383308A66.html "CallingShellApp.exe | Calling App to host call progress on shell | STRONTIC | strontic.github.io" [3]: https://web.archive.org/web/20240103144732/https://strontic.github.io/xcyclopedia/library/CallingShellApp.exe-C5415F104A4060D90CE1675383308A66.html "CallingShellApp.exe | Calling App to host call progress on shell | STRONTIC | strontic.github.io"
call: call:
@@ -28169,7 +28188,7 @@ actions:
valueName: IsUserEligible valueName: IsUserEligible
dataType: REG_DWORD dataType: REG_DWORD
data: "0" data: "0"
deleteOnRevert: 'true' # Default value for this key varies, seen as `0` on some Windows 11 22H3, key does not exist on some Windows 10 22H2 deleteOnRevert: 'true' # Default value for this key varies, seen as `0` on some Windows 11 23H2, key does not exist on some Windows 10 22H2
- -
function: ShowComputerRestartSuggestion function: ShowComputerRestartSuggestion
- -
@@ -28199,7 +28218,7 @@ actions:
valueName: AutoOpenCopilotLargeScreens valueName: AutoOpenCopilotLargeScreens
dataType: REG_DWORD dataType: REG_DWORD
data: "0" data: "0"
deleteOnRevert: 'true' # This key does not exist (tested since Windows 10 22H2, and Windows 11 22H3) deleteOnRevert: 'true' # This key does not exist (tested since Windows 10 22H2, and Windows 11 23H2)
- -
name: Remove "Copilot" icon from taskbar name: Remove "Copilot" icon from taskbar
recommend: strict recommend: strict
@@ -28231,7 +28250,7 @@ actions:
valueName: ShowCopilotButton valueName: ShowCopilotButton
dataType: REG_DWORD dataType: REG_DWORD
data: "0" data: "0"
deleteOnRevert: 'true' # This key does not exist (tested since Windows 10 22H2, and Windows 11 22H3) deleteOnRevert: 'true' # This key does not exist (tested since Windows 10 22H2, and Windows 11 23H2)
- -
function: ShowExplorerRestartSuggestion function: ShowExplorerRestartSuggestion
- -
@@ -28743,7 +28762,7 @@ actions:
valueName: DisableSnippingTool valueName: DisableSnippingTool
dataType: REG_DWORD dataType: REG_DWORD
data: "1" data: "1"
deleteOnRevert: 'true' # This key does not exist (tested since Windows 10 22H2, and Windows 11 22H3) deleteOnRevert: 'true' # This key does not exist (tested since Windows 10 22H2, and Windows 11 23H2)
- -
name: Disable Snipping Tool keyboard shortcut (**Windows logo key** + **Shift** + **S**) name: Disable Snipping Tool keyboard shortcut (**Windows logo key** + **Shift** + **S**)
docs: |- docs: |-
@@ -28782,7 +28801,7 @@ actions:
This key toggles the setting "Use the Print screen button to open screen snipping" in the control panel [1] [2] [3]. This key toggles the setting "Use the Print screen button to open screen snipping" in the control panel [1] [2] [3].
Changing this setting through the user interface also modifies this registry entry [3]. Changing this setting through the user interface also modifies this registry entry [3].
This key is absent by default in modern Windows versions, confirmed through testing starting with Windows This key is absent by default in modern Windows versions, confirmed through testing starting with Windows
10 22H2 and Windows 11 22H3, which indicates that the Print Screen shortcut is enabled. 10 22H2 and Windows 11 23H2, which indicates that the Print Screen shortcut is enabled.
Applying these changes requires restarting File Explorer (`explorer.exe`) [3]. Applying these changes requires restarting File Explorer (`explorer.exe`) [3].
Both `explorer.exe` [4] and `Taskbar.dll` [5] reads this configuration at startup. Both `explorer.exe` [4] and `Taskbar.dll` [5] reads this configuration at startup.
@@ -28800,7 +28819,7 @@ actions:
valueName: PrintScreenKeyForSnippingEnabled valueName: PrintScreenKeyForSnippingEnabled
dataType: REG_DWORD dataType: REG_DWORD
data: "0" data: "0"
deleteOnRevert: 'true' # This key does not exist (tested since Windows 10 22H2, and Windows 11 22H3) deleteOnRevert: 'true' # This key does not exist (tested since Windows 10 22H2, and Windows 11 23H2)
- -
function: ShowExplorerRestartSuggestion function: ShowExplorerRestartSuggestion
- -
@@ -31907,7 +31926,7 @@ functions:
- -
function: RunPowerShell function: RunPowerShell
parameters: parameters:
codeComment: Add a rule to prevent the executable "{{ $executableNameWithExtension }}"" from running via File Explorer codeComment: Add a rule to prevent the executable "{{ $executableNameWithExtension }}" from running via File Explorer
code: |- code: |-
$executableFilename='{{ $executableNameWithExtension }}' $executableFilename='{{ $executableNameWithExtension }}'
try { try {