Home > System Administration > Windows 10 configuration tips

Windows 10 configuration tips

Thursday, July 30th, 2015

Update 2015-08-26:

I’ve posted a new article with some additional configuration steps/tweaks.

Update 2015-08-05:

Removed some additional tracking services & bloatware using: 

I’ve also removed OneDrive from autorun, removed the app, etc. Thanks Microsoft but no, I’m not interested and if I ever am, I’ll let you know. It’s not because I’m using Windows that I want all the software you’ve ever produced. Propose me to opt in if you want, but don’t force additional products on me!.

Tip:

If you want to get a list of the other currently installed apps just use: Get-AppxPackage -User <username>. If one of them bothers you then you can invoke Remove-AppxPackage <package name>

In the previous post, I’ve mentioned that almost all of my applications and settings were kept during the upgrade from Windows 8.1 to Windows 10. Almost all, but not all.

And anyway, each time I switch to a new OS release, I can’t help but spend some time going through all the options and policy settings just to configure it the way I like.

With Windows 10, it’s the very first time that I’m done in less than two hours, which is nice :)

Now let me list all the things that I’ve done after upgrading, in no specific order:

  • Activate Windows (first things first right? :p)
  • Installed the latest NVidia drivers (these didn’t survive the upgrade)
  • Put the resolution back to 1920*1080
  • Configured the File Explorer to show “This PC” rather than “Quick Access”, because I don’t care about frequent folders & recent files. I know where I need to go and how my files are organized
  • Reinstalled Virtualbox as I’ve noticed that it crashed when started
  • fired up gpedit.msc (which you will only have with the Professional & above editions..)
    • disabled thumbs.db files generation: because I can’t stand trying to move/delete things to discover that the damn thumbnails file prevents me from doing what I want…
      • User > Administrative Templates > Windows Components > File Explorer > Turn off the caching of thumbnails in hidden thumbs.db files
    • disabled things that send data to Microsoft: Sorry MSFT, but I never like having my machine send data around (just a general principle that I stick by)
      • Computer > Windows Components > Windows Error Reporting > Disable Windows Error Reporting
      • Computer > Windows Components > Windows Error Reporting > Do not send additional data
      • Computer > Windows Components > Data Collection and Preview Builds > Allow Telemetry
    • made sure that the shutdown button on the logon screen was disabled: If you have young children you’ll understand why
      • Computer > Windows Settings > Local Policies > Security Options > Shutdown: Allow system to be shut down without having to log on
    • enabled always sending Do Not Track (DNT) header: because if there are still non-evil people on the Web, I need them to know that I somehow value privacy
      • Computer > Windows Components > Internet Explorer > Internet Control Panel > Advanced Page > Always send Do Not Track header
    • disabled Windows SmartScreen: because I don’t need Microsoft to tell me what is safe and what isn’t
      • Computer > Administrative Templates > Windows Components > File Explorer > Configure Windows SmartScreen
    • enabled confirmation for file deletion: because I can’t trust myself that much ;-)
      • Recycle Bin > Properties > Display delete confirmation dialog
    • disabled documents history: who cares about history (don’t repeat that to my son ^^)
      • User > Administrative Templates > Start Menu and Taskbar
        • Clear history of recently opened documents on exit
        • Do not keep history of recently opened documents
    • disabled searching for files/documents/internet in start menu: because I care about apps when I use the start menu, nothing else (personal choice indeed)
      • User > Administrative Templates > Start Menu and Taskbar
        • Do not search communications
        • Do not search for files
        • Do not search Internet
    • forced listing desktop apps first (rather than metro apps..)
      • User > Administrative Templates > Start Menu and Taskbar 
        • List desktop apps first in the Apps view
    • disabled MS Edge app usage tracking: I love MS Edge but I just don’t like tracking
      • User > Administrative Templates > Windows Components > Edge UI
        • Turn off tracking of app usage
    • customized the File Explorer
      • User > Administrative Templates > Windows Components > File Explorer
        • Remove the Search the Internet “Search again” link
        • Start File Explorer with ribbon minimized
        • Turn off display of recent search entries in the File Explorer search box
        • Turn off caching of thumbnail pictures
  • forced numlock at boot (logon screen also!): this setting was apparently lost during the upgrade
    • run “regedit”
    • go to \HKEY_USERS\.DEFAULT\Control Panel\Keyboard
    • change value “InitialKeyboardIndicators” from “2147483648” to “80000002”
    • restart and u will have NUM LOCK ON always on windows startup

After this I already felt a bit more at ease, although that was only the first part.

The next part was to go through all the Settings and trying out the new features..

  • created a new virtual desktop: Hey MSFT, great that you’ve finally added virtual desktops but why so late? :)
  • fixed the default apps: this is one of the things I disliked. MSFT, you’ve managed to keep so many things and just decided to replace my default apps by all of yours? That really sucks!
    • Switched default browser back to Google Chrome
    • Switched default music player back to Winamp (because it really… :p)
    • Switched default video player back to VLC
  • modified the folders that appear by default in the Start Menu
    • File Explorer
    • Settings
    • Downloads
    • Personal Folder
  • modified privacy settings
    • Settings > Privacy
      • General
        • Send Microsoft info about how I write…
          • OFF
      • Location
        • Disabled
      • Removed various rights from apps…
      • Feedback & diagnostics
        • Windows should ask for my feedback: Never
        • Send your device data to Microsoft: Basic
        • Background apps: Remove
  • removed default Windows 10 apps: MSFT I get why it is all there, but I just couldn’t care less
    • Finance
    • News
    • MSN Food & Drinks
    • Health & Fitness
    • Travel
    • Get Skype
    • Get Office
    • Get Bored
    • Get Whatever :o
  • Windows Store
    • signed in with my Windows Live account: ONLY for apps
  • Cortana & Search settings
    • disabled web search results

Done!

I’ll probably edit this post over time to reflect config changes, but for now I think it’s already in a pretty good shape :)

PS: For those wondering, no I’m not hardening my Windows box in any specific way, I just have a local firewall (Net Limiter) set to ask me to allow/Deny anytime there are inbound/outbound connections (when I don’t already have rules covering those), so as long as apps cannot bypass that Firewall, I know what tries to go in/out and I’m in control. That combined with the Antivirus is all I need. I wouldn’t configure a Windows box just like that at work, but at home that’s just more than enough :)

If you enjoyed this post, make sure you subscribe to my RSS feed!

No Comments »

No comments yet.

RSS feed for comments on this post. TrackBack URL

Leave a comment