Disable windows update automatic restart

src/Configuration/custom.yml

@@ -10,6 +10,8 @@ features:
   - features\lite\search.yml
   - features\lite\scheduled-tasks.yml
   - features\lite\improvements.yml
+  - features\lite\services.yml
   - features\personalization\dark-mode.yml
   - features\personalization\explorer.yml
   - features\personalization\taskbar.yml
+  - features\personalization\context-menu.yml

src/Configuration/features/lite/improvements.yml

@@ -87,3 +87,60 @@ actions:
     value: 'ScoobeSystemSettingEnabled'
     data: '0'
     type: REG_DWORD
+
+  # Disable automatic maintenance
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\Maintenance'
+    value: 'MaintenanceDisabled'
+    data: '1'
+    type: REG_DWORD
+
+  # Disable scheduled system maintenance
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\Microsoft\Windows\ScheduledDiagnostics'
+    value: 'EnabledExecution'
+    data: '0'
+    type: REG_DWORD
+
+    # Disable SmartScreen for Microsoft Store applications
+  - !registryValue:
+    path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\AppHost'
+    value: 'EnableWebContentEvaluation'
+    data: '0'
+    type: REG_DWORD
+  - !registryValue:
+    path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\AppHost'
+    value: 'PreventOverride'
+    data: '0'
+    type: REG_DWORD
+
+    # Disable SmartScreen for applications and files from web
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\System'
+    value: 'EnableSmartScreen'
+    data: '0'
+    type: REG_DWORD
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer'
+    value: 'SmartScreenEnabled'
+    data: 'Off'
+    type: REG_SZ
+
+  # Disable Windows Update automatic restart
+  - !registryValue:
+    path: 'HKLM\Software\Microsoft\WindowsUpdate\UX\Settings'
+    value: 'UxOption'
+    data: '1'
+    type: REG_DWORD
+
+  - !writeStatus: {status: "Cleaning up the WinSxS folder"}
+  - !cmd:
+    exeDir: true
+    command: 'DISM /Online /Cleanup-Image /StartComponentCleanup'
+    weight: 30
+
+  # Uninstall Work Folders Client
+  - !cmd:
+    exeDir: true
+    command: 'dism /online /Disable-Feature /FeatureName:WorkFolders-Client /Quiet /NoRestart'
+    weight: 30

src/Configuration/features/lite/one-drive.yml

@@ -6,6 +6,12 @@ actions:
   # ---------- OneDrive
   - !writeStatus: { status: 'Disable OneDrive' }
 
+  - !systemPackage: {name: 'Microsoft-Windows-OneDrive-Setup-Deployment-LanguagePack', arch: amd64, language: 'en-US'}
+  - !systemPackage: {name: 'Microsoft-Windows-OneDrive-Setup-Deployment', arch: amd64, language: 'neutral'}
+  - !systemPackage: {name: 'Microsoft-Windows-OneDrive-Setup-WOW64-Deployment-LanguagePack', arch: amd64, language: 'en-US'}
+  - !systemPackage: {name: 'Microsoft-Windows-OneDrive-Setup-WOW64-Deployment', arch: amd64, language: 'neutral'}
+  - !systemPackage: {name: 'Microsoft-Windows-SystemSettings-SettingsHandlers-OneDriveBackup', arch: amd64, language: 'neutral'}
+
   - !registryValue:
     path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\OneDrive'
     value: 'DisableFileSyncNGSC'

src/Configuration/features/lite/privacy.yml

@@ -3,6 +3,8 @@ title: Privacy settings
 description: Enable more privacy
 privilege: TrustedInstaller
 actions:
+  - !writeStatus: { status: 'Improving privacy' }
+
   - !registryValue:
     path: 'HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Policies\DataCollection'
     value: 'AllowTelemetry'
@@ -504,3 +506,4 @@ actions:
     data: '1'
     type: REG_DWORD
 
+  - !service: {name: 'DiagTrack', operation: delete}

src/Configuration/features/lite/services.yml

@@ -0,0 +1,48 @@
+---
+title: Services
+description: Configures services
+privilege: TrustedInstaller
+actions:
+  - !writeStatus: {status: 'Configuring services'}
+
+  # Stop and disable Diagnostics Tracking Service
+  - !service: {name: 'DiagTrack', operation: stop}
+  - !service: {name: 'DiagTrack', startup: 4}
+  # Microsoft (R) Diagnostics Hub Standard Collector Service
+  - !service: {name: 'diagnosticshub.standardcollector.service', operation: stop}
+  - !service: {name: 'diagnosticshub.standardcollector.service', startup: 4}
+  # WAP Push Message Routing Service
+  - !service: {name: 'dmwappushservice', operation: stop}
+  - !service: {name: 'dmwappushservice', startup: 4}
+  # Geolocation Service
+  - !service: {name: 'lfsvc', operation: stop}
+  - !service: {name: 'lfsvc', startup: 4}
+  # Downloaded Maps Manager
+  - !service: {name: 'MapsBroker', operation: stop}
+  - !service: {name: 'MapsBroker', startup: 4}
+  # Net.Tcp Port Sharing Service
+  - !service: {name: 'NetTcpPortSharing', operation: stop}
+  - !service: {name: 'NetTcpPortSharing', startup: 4}
+  # Routing and Remote Access
+  - !service: {name: 'RemoteAccess', operation: stop}
+  - !service: {name: 'RemoteAccess', startup: 4}
+  # Internet Connection Sharing (ICS)
+  - !service: {name: 'SharedAccess', operation: stop}
+  - !service: {name: 'SharedAccess', startup: 4}
+  # Distributed Link Tracking Client
+  - !service: {name: 'TrkWks', operation: stop}
+  - !service: {name: 'TrkWks', startup: 4}
+  # Windows Biometric Service (required for Fingerprint reader / facial detection)
+  - !service: {name: 'WbioSrvc', operation: stop}
+  - !service: {name: 'WbioSrvc', startup: 4}
+  # Windows Media Player Network Sharing Service
+  - !service: {name: 'WMPNetworkSvc', operation: stop}
+  - !service: {name: 'WMPNetworkSvc', startup: 4}
+  # Windows Network Data Usage Monitor
+  - !service: {name: 'ndu', operation: stop}
+  - !service: {name: 'ndu', startup: 4}
+  # Stop and disable Home Groups services
+  - !service: {name: 'HomeGroupListener', operation: stop}
+  - !service: {name: 'HomeGroupListener', startup: 4}
+  - !service: {name: 'HomeGroupProvider', operation: stop}
+  - !service: {name: 'HomeGroupProvider', startup: 4}

src/Configuration/features/personalization/context-menu.yml

@@ -0,0 +1,169 @@
+---
+title: Context menu
+description: Context menu customization
+privilege: TrustedInstaller
+actions:
+  - !writeStatus: { status: 'Personalize context menu' }
+
+  # Remove 'Give access to' from context menu
+  - !registryKey: {path: 'HKCR\*\shellex\ContextMenuHandlers\Sharing'}
+  - !registryKey: {path: 'HKCR\Directory\Background\shellex\ContextMenuHandlers\Sharing'}
+  - !registryKey: {path: 'HKCR\Directory\shellex\ContextMenuHandlers\Sharing'}
+  - !registryKey: {path: 'HKCR\Drive\shellex\ContextMenuHandlers\Sharing'}
+  - !registryKey: {path: 'HKCR\LibraryFolder\background\shellex\ContextMenuHandlers\Sharing'}
+  - !registryKey: {path: 'HKCR\UserLibraryFolder\shellex\ContextMenuHandlers\Sharing'}
+
+  # Remove 'Cast to device' from context menu
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Blocked'
+    value: '{7AD84985-87B4-4a16-BE58-8B72A5B390F7}'
+    data: ''
+    type: REG_SZ
+
+    # Remove 'Share' from context menu
+  - !registryKey: {path: 'HKCR\*\shellex\ContextMenuHandlers\ModernSharing'}
+
+  # Remove bitmap image from the 'New' context menu
+  - !registryKey: {path: 'HKCR\.bmp\ShellNew'}
+
+  # Remove rich text document from 'New' context menu
+  - !registryKey: {path: 'HKCR\.rtf\ShellNew'}
+
+  # Remove 'Include in library' from context menu
+  - !registryKey: {path: 'HKCR\Folder\ShellEx\ContextMenuHandlers\Library Location'}
+  - !registryKey: {path: 'HKLM\SOFTWARE\Classes\Folder\ShellEx\ContextMenuHandlers\Library Location'}
+
+  # Remove 'Troubleshooting compatibility' from context menu
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Shell Extensions\Blocked'
+    value: '{1d27f844-3a1f-4410-85ac-14651078412d}'
+    data: ''
+    type: REG_SZ
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Shell Extensions\Blocked'
+    value: '{1d27f844-3a1f-4410-85ac-14651078412d}'
+    data: ''
+    type: REG_SZ
+
+    # Remove '- Shortcut' text added onto shortcuts
+  - !registryValue:
+    path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer'
+    value: 'link'
+    data: '00000000'
+    type: REG_BINARY
+
+    # Remove 'Print' from context menu
+  - !registryValue:
+    path: 'HKCR\SystemFileAssociations\image\shell\print'
+    value: 'ProgrammaticAccessOnly'
+    data: ''
+    type: REG_SZ
+  - !registryValue:
+    path: 'HKCR\batfile\shell\print'
+    value: 'ProgrammaticAccessOnly'
+    data: ''
+    type: REG_SZ
+  - !registryValue:
+    path: 'HKCR\cmdfile\shell\print'
+    value: 'ProgrammaticAccessOnly'
+    data: ''
+    type: REG_SZ
+  - !registryValue:
+    path: 'HKCR\docxfile\shell\print'
+    value: 'ProgrammaticAccessOnly'
+    data: ''
+    type: REG_SZ
+  - !registryValue:
+    path: 'HKCR\fonfile\shell\print'
+    value: 'ProgrammaticAccessOnly'
+    data: ''
+    type: REG_SZ
+  - !registryValue:
+    path: 'HKCR\htmlfile\shell\print'
+    value: 'ProgrammaticAccessOnly'
+    data: ''
+    type: REG_SZ
+  - !registryValue:
+    path: 'HKCR\inffile\shell\print'
+    value: 'ProgrammaticAccessOnly'
+    data: ''
+    type: REG_SZ
+  - !registryValue:
+    path: 'HKCR\inifile\shell\print'
+    value: 'ProgrammaticAccessOnly'
+    data: ''
+    type: REG_SZ
+  - !registryValue:
+    path: 'HKCR\JSEFile\shell\print'
+    value: 'ProgrammaticAccessOnly'
+    data: ''
+    type: REG_SZ
+  - !registryValue:
+    path: 'HKCR\otffile\shell\print'
+    value: 'ProgrammaticAccessOnly'
+    data: ''
+    type: REG_SZ
+  - !registryValue:
+    path: 'HKCR\pfmfile\shell\print'
+    value: 'ProgrammaticAccessOnly'
+    data: ''
+    type: REG_SZ
+  - !registryValue:
+    path: 'HKCR\regfile\shell\print'
+    value: 'ProgrammaticAccessOnly'
+    data: ''
+    type: REG_SZ
+  - !registryValue:
+    path: 'HKCR\rtffile\shell\print'
+    value: 'ProgrammaticAccessOnly'
+    data: ''
+    type: REG_SZ
+  - !registryValue:
+    path: 'HKCR\ttcfile\shell\print'
+    value: 'ProgrammaticAccessOnly'
+    data: ''
+    type: REG_SZ
+  - !registryValue:
+    path: 'HKCR\ttffile\shell\print'
+    value: 'ProgrammaticAccessOnly'
+    data: ''
+    type: REG_SZ
+  - !registryValue:
+    path: 'HKCR\txtfile\shell\print'
+    value: 'ProgrammaticAccessOnly'
+    data: ''
+    type: REG_SZ
+  - !registryValue:
+    path: 'HKCR\VBEFile\shell\print'
+    value: 'ProgrammaticAccessOnly'
+    data: ''
+    type: REG_SZ
+  - !registryValue:
+    path: 'HKCR\VBSFile\shell\print'
+    value: 'ProgrammaticAccessOnly'
+    data: ''
+    type: REG_SZ
+  - !registryValue:
+    path: 'HKCR\WSFFile\shell\print'
+    value: 'ProgrammaticAccessOnly'
+    data: ''
+    type: REG_SZ
+
+    # Add 'Install CAB' to context menu
+  - !registryKey: {path: 'HKCR\CABFolder\Shell\RunAs'}
+  - !registryValue:
+    path: 'HKCR\CABFolder\Shell\RunAs'
+    value: ''
+    data: 'Install'
+    type: REG_SZ
+  - !registryValue:
+    path: 'HKCR\CABFolder\Shell\RunAs'
+    value: 'HasLUAShield'
+    data: ''
+    type: REG_SZ
+  - !registryValue:
+    path: 'HKCR\CABFolder\Shell\RunAs\Command'
+    value: ''
+    data: 'cmd /k DISM /online /add-package /packagepath:\"%1\"'
+    type: REG_SZ
+

src/Configuration/features/personalization/explorer.yml

@@ -3,6 +3,8 @@ title: Windows explorer
 description: Explorer customization
 privilege: TrustedInstaller
 actions:
+  - !writeStatus: { status: 'Personalize explorer' }
+
   # Show file extensions in File Explorer
   - !registryValue:
     path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced'

src/Configuration/features/personalization/taskbar.yml

@@ -3,6 +3,8 @@ title: Taskbar
 description: Settings for taskbar personalization
 privilege: TrustedInstaller
 actions:
+  - !writeStatus: { status: 'Personalize taskbar' }
+
   # Set search as icon on taskbar
   - !registryValue:
     path: 'HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Search'