Closed imtrobin closed 4 years ago
Can't reproduce. From the 3 tweaks you've mentioned, all of them worked for a "Standard user" with no administrative permissions. All the tweaks touch just HKCU keys which are not part of any group policies, so I don't see any reason why it shouldn't work.
1) Please paste or attach your preset 2) Do you happen to have any of the script files (ps1, psm1, preset) on network shares? 3) a. Do you happen to use any antivirus software besides Defender? If so, check if the registry modificaten wasn't blocked by it. b. If you use Defender, did you enable any of the advanced protection mechanisms (e.g. Controlled folder access)?
##########
# Win 10 / Server 2016 / Server 2019 Initial Setup Script - Default preset
# Author: Disassembler <disassembler@dasm.cz>
# Version: v3.8, 2019-09-11
# Source: https://github.com/Disassembler0/Win10-Initial-Setup-Script
##########
RequireAdmin
DisableTelemetry # EnableTelemetry DisableWiFiSense # EnableWiFiSense DisableSmartScreen # EnableSmartScreen DisableWebSearch # EnableWebSearch DisableAppSuggestions # EnableAppSuggestions DisableActivityHistory # EnableActivityHistory DisableBackgroundApps # EnableBackgroundApps DisableSensors # EnableSensors DisableLocation # EnableLocation DisableMapUpdates # EnableMapUpdates DisableFeedback # EnableFeedback DisableTailoredExperiences # EnableTailoredExperiences DisableAdvertisingID # EnableAdvertisingID DisableWebLangList # EnableWebLangList DisableCortana # EnableCortana DisableBiometrics # EnableBiometrics DisableCamera # EnableCamera DisableMicrophone # EnableMicrophone DisableErrorReporting # EnableErrorReporting
SetP2PUpdateDisable DisableDiagTrack # EnableDiagTrack DisableWAPPush # EnableWAPPush
DisableClearRecentFiles DisableRecentFiles # EnableRecentFiles
HideDefenderTrayIcon # ShowDefenderTrayIcon DisableDefender # EnableDefender DisableDefenderCloud # EnableDefenderCloud
HideAccountProtectionWarn # ShowAccountProtectionWarn
DisableScriptHost # EnableScriptHost EnableDotNetStrongCrypto # DisableDotNetStrongCrypto
EnableF8BootMenu # DisableF8BootMenu
SetDEPOptOut # SetDEPOptIn
SetCurrentNetworkPrivate # SetCurrentNetworkPublic
DisableConnectionSharing # EnableConnectionSharing DisableRemoteAssistance # EnableRemoteAssistance
DisableRemoteDesktop
DisableUpdateDriver # EnableUpdateDriver EnableUpdateMSProducts # DisableUpdateMSProducts DisableUpdateAutoDownload # EnableUpdateAutoDownload DisableUpdateRestart # EnableUpdateRestart DisableMaintenanceWakeUp # EnableMaintenanceWakeUp DisableSharedExperiences # EnableSharedExperiences
DisableClipboardHistory DisableAutoplay # EnableAutoplay DisableAutorun # EnableAutorun DisableRestorePoints # EnableRestorePoints
DisableStorageSense DisableDefragmentation # EnableDefragmentation DisableSuperfetch # EnableSuperfetch DisableIndexing # EnableIndexing DisableSwapFile # EnableSwapFile DisableRecycleBin # EnableRecycleBin EnableNTFSLongPaths # DisableNTFSLongPaths
DisableHibernation DisableSleepButton # EnableSleepButton DisableSleepTimeout # EnableSleepTimeout DisableFastStartup # EnableFastStartup DisableAutoRebootOnCrash # EnableAutoRebootOnCrash
DisableActionCenter # EnableActionCenter DisableLockScreen # EnableLockScreen DisableLockScreenRS1 # EnableLockScreenRS1 HideNetworkFromLockScreen # ShowNetworkOnLockScreen HideShutdownFromLockScreen # ShowShutdownOnLockScreen DisableLockScreenBlur # EnableLockScreenBlur DisableAeroShake # EnableAeroShake DisableAccessibilityKeys # EnableAccessibilityKeys ShowTaskManagerDetails # HideTaskManagerDetails ShowFileOperationsDetails # HideFileOperationsDetails
HideTaskbarSearch # ShowTaskbarSearchIcon # ShowTaskbarSearchBox HideTaskView # ShowTaskView ShowSmallTaskbarIcons # ShowLargeTaskbarIcons
SetTaskbarCombineNever HideTaskbarPeopleIcon # ShowTaskbarPeopleIcon
ShowTrayIcons # HideTrayIcons
DisableSearchAppInStore # EnableSearchAppInStore DisableNewAppPrompt # EnableNewAppPrompt HideRecentlyAddedApps # ShowRecentlyAddedApps HideMostUsedApps # ShowMostUsedApps
SetControlPanelLargeIcons DisableShortcutInName # EnableShortcutInName
SetVisualFXPerformance # SetVisualFXAppearance
DisableStartupSound # EnableStartupSound DisableChangingSoundScheme # EnableChangingSoundScheme
DisableF1HelpKey # EnableF1HelpKey
ShowKnownExtensions # HideKnownExtensions ShowHiddenFiles # HideHiddenFiles
DisableNavPaneExpand
EnableFldrSeparateProcess # DisableFldrSeparateProcess
DisableRestoreFldrWindows
DisableSharingWizard # EnableSharingWizard HideSelectCheckboxes # ShowSelectCheckboxes HideSyncNotifications # ShowSyncNotifications HideRecentShortcuts # ShowRecentShortcuts SetExplorerThisPC # SetExplorerQuickAccess HideQuickAccess # ShowQuickAccess HideRecycleBinFromDesktop # ShowRecycleBinOnDesktop ShowThisPCOnDesktop # HideThisPCFromDesktop
HideDocumentsFromThisPC # ShowDocumentsInThisPC HideDocumentsFromExplorer # ShowDocumentsInExplorer HideDownloadsFromThisPC # ShowDownloadsInThisPC HideDownloadsFromExplorer # ShowDownloadsInExplorer HideMusicFromThisPC # ShowMusicInThisPC HideMusicFromExplorer # ShowMusicInExplorer HidePicturesFromThisPC # ShowPicturesInThisPC HidePicturesFromExplorer # ShowPicturesInExplorer HideVideosFromThisPC # ShowVideosInThisPC HideVideosFromExplorer # ShowVideosInExplorer Hide3DObjectsFromThisPC # Show3DObjectsInThisPC Hide3DObjectsFromExplorer # Show3DObjectsInExplorer HideIncludeInLibraryMenu # ShowIncludeInLibraryMenu HideGiveAccessToMenu # ShowGiveAccessToMenu
DisableThumbnails # EnableThumbnails DisableThumbnailCache # EnableThumbnailCache DisableThumbsDBOnNetwork # EnableThumbsDBOnNetwork
DisableOneDrive # EnableOneDrive UninstallOneDrive # InstallOneDrive UninstallMsftBloat # InstallMsftBloat UninstallThirdPartyBloat # InstallThirdPartyBloat UninstallWindowsStore # InstallWindowsStore DisableXboxFeatures # EnableXboxFeatures
DisableAdobeFlash # EnableAdobeFlash DisableEdgePreload # EnableEdgePreload DisableEdgeShortcutCreation # EnableEdgeShortcutCreation DisableIEFirstRun # EnableIEFirstRun DisableFirstLogonAnimation # EnableFirstLogonAnimation DisableMediaSharing # EnableMediaSharing
UninstallWorkFolders # InstallWorkFolders
SetPhotoViewerAssociation # UnsetPhotoViewerAssociation AddPhotoViewerOpenWith # RemovePhotoViewerOpenWith UninstallPDFPrinter # InstallPDFPrinter UninstallXPSPrinter # InstallXPSPrinter RemoveFaxPrinter # AddFaxPrinter UninstallFaxAndScan # InstallFaxAndScan
DisableShutdownTracker # EnableShutdownTracker DisablePasswordPolicy # EnablePasswordPolicy DisableCtrlAltDelLogin # EnableCtrlAltDelLogin DisableIEEnhancedSecurity # EnableIEEnhancedSecurity EnableAudio # DisableAudio
UnpinStartMenuTiles UnpinTaskbarIcons
WaitForKey Restart
Well, if this is the preset you're runing as unprivileged user, then no wonder. The very first thing this preset does is asking for elevation - so you enter some credentials and from then on all user setting (including the registry) is taken from that user you're impersonating, so you're effectively applying the tweaks for that user who's credentials you have entered.
If you want to run the tweaks for unprivileged user, you need to create a separate preset which won't include RequireAdmin
and all other tweaks usable only by admin. See comments in #29 for some more tips for multiuser environments.
Thanks, make sense. So then it's a bit hard for me to know which is admin, which is not. Will it be group nicely in near future?
Right now, the only way is to skim through the script and see what the tweaks do and which registry keys they modify (which you should do anyway). In the near future, there will be a wiki (#225) or some spreadsheet containing that info.
Hi, I've tried on an Admin and non admin account. Some settings like HideTaskbarPeopleIcon, DisableShortcutInName, ShowKnownExtensions etc. works in Admin account but not for non admins. Is that supposed to be so?