mikejsavage.co.uk / blog

RSS feed

09 Oct 2017 / Windows 10 post-install checklist

  1. Settings, Update and security, Windows Update, Check for updates.
  2. Launch IE and download another browser. While you’re at it, go into Internet Options, Security, drag the security level all the way down, Custom level…, Launching applications and unsafe files, check Enabled (not secure), ok out of all of that.
  3. If you picked Firefox, install uBlock Origin, NoScript. It’s very important to install those before you do anything else on the web.
  4. Install video drivers.
  5. Right click the start button, Control Panel, User Accounts, User Accounts (again), Change User Account Control settings, disable it.
  6. gpedit.msc, Computer Configuration, Administrative Templates, Windows Components, Windows Defender. Double click Turn off Windows Defender, check Enabled, click ok. Also go to Windows Components, OneDrive, Prevent the usage of OneDrive for file storage, Enabled, ok.
  7. services.msc, disable Superfetch, Windows Firewall, Windows Search, and whatever else you don’t like the look of.
  8. secpol.msc, Local Policies, Security Options, UAC: Run all administrators in Admin Approval Mode, Disabled.
  9. Run this reclaim Windows 10 script.
  10. Right click the desktop, Display settings, Advanced display settings, ClearType text.
  11. Right click the desktop, Personalize, go through all of it. In particular go Themes, Advanced sound settings, Sound Scheme = No Sounds. Taskbar, Combine taskbar buttons, Never. Start, disable everything. Taskbar, Turn system icons on or off, disable Action Center.
  12. Control Panel, System and Security, System, Advanced system settings, Performance Settings…, disable almost everything under visual effects, Advanced, Change…, set the pagefile size to 800MB.
  13. Control Panel, System and Security, Security and Maintenance. Click all the “Turn off messages about x” links.
  14. Win+R, cmd.exe, powercfg -h off.
  15. Set Windows to use UTC time.
  16. Reboot to BIOS, put Linux Boot Manager back at the top of the boot list. Reboot back to Windows.
  17. Win+E, View, Options, View. Check Show hidden files, folders and drives. Uncheck Hide empty drives. Uncheck Hide extensions for known file types. Uncheck Hide protected operating system files. Go down to Naviation pane, check Expand to open folder.
  18. Install the MarkC mouse acceleration fix.
  19. Install the Take Ownership Registry Hack. Take ownership of everything in C:. Right click on the C drive, Security, Advanced, click your name, Edit, check Full Control, OK, check Replace all child object permissions, click OK. Click Continue several hundred times (jesus christ Microsoft!!). Maybe skip ahead and install AHK so you can use an autoclicker.
  20. Open Settings:
    1. System. Notifications & actions, disable them. Power & sleep, Never and Never.
    2. Devices. Typing, Off and Off. AutoPlay, Off.
    3. Network & Internet. Mobile hotspot, Off and Off.
    4. Time & language. Set your time zone. Change date and time formats, use 12h time formats (the ones with h instead of H).
    5. Privacy. General, disable everything. Location, disable everything. Notifications, Off.
    6. Update & security. Windows Update, Advanced Options, Choose how updates are delivered, don’t let other people download updates from your PC and don’t download updates from theirs. For developers, Developer Mode, disable Remote Desktop.
  21. Control Panel, Ease of Access, Change how your keyboard works, disable everything.
  22. Control Panel, Uninstall a program, uninstall OneDrive.
  23. More Firefox things:
    1. Go to Options. General. When Firefox starts, Show your windows and tabs from last time. Set up fonts, set minimum font size, uncheck Allow pages to choose their own fonts. Downloads, Always ask you where to save files. Applications, PDF, Always ask. Firefox Updates, Never check for updates, uncheck the others, uncheck USe smooth scrolling. Search, disable everything. Privacy & Security, custom history settings, never accept third-party cookies, remove all cookies you picked up so far, disable Firefox data collection.
    2. about:config. extensions.update.autoUpdateDefault = false, extensions.update.enabled = false. browser.tabs.closeWindowWithLastTab = false.
    3. Install Vimperator, Download Statusbar, HideScrollbars, and bug489729.
    4. Put the NoScript icons in the tab bar. Go into NoScript options. Whitelist, remove everything. Notifications, uncheck Show message about blocked scripts, uncheck Display the release notes on updates. Advanced, XSS, disable.
    5. Go into uBlock settings and enable whatever filter lists you like the look of.
  24. Download the Sysinternals Suite. Run autoruns, disable anything you don’t like the look of. OneDrive, Windows Defender things, MozillaMaintenance, NVIDIA telemetry, etc. Run procexp and check nothing dumb is running just in case.
  25. Probably reboot again for good measure.
  26. Install 7-Zip. Go into settings and associate it with everything that isn’t zip. Disable all the junk context menu items.
  27. Install Search Everything. Sort by descending run count, and close window on execute.
  28. Install Vim.
  29. Install AutoHotKey. Put startup.ahk in %APPDATA%\Microsoft\Windows\Start Menu\Programs\Startup.
  30. Install Start Killer.
  31. Create halt.bat somewhere containing shutdown /s /t 0. Create reboot.bat containing shutdown /r /t 0. Use Everything to run these.
  32. Install Clink.
  33. Install Dina font.
  34. Download psubst. psubst X: C:\Users\mike\Documents /P.
  35. Install Cygwin. Add OpenSSH, and whatever else you like. Add -w max to the quicklaunch shortcut.
  36. Launch Cygwin and run ssh-host-config, and follow the prompts. Then run chown cyg_server: /var/empty; chmod 700 /var/empty; net start sshd.
  37. Download Cmder.
  38. Install Visual Studio 2015 with Update 3. Make sure to pick custom install, check the C++ common tools box, and uncheck everything else.
  39. Install NSIS.
  40. Install Intel Architecture Code Analyzer.
  41. Install the Windows SDK. Make sure you check Windows Performance Toolkit (for GPUView), Debugging Tools for Windows (WinDBG), Windows SDK Signing Tools for Desktop Apps (SignTool), and probably the x86/amd64 SDKs.
  42. Install the DirectX SDK. You need it for XAudio 2.7, which you need if you want to ship software on Win7. If the installer fails just ignore it.
  43. Install VsVim. TODO config
  44. Optional graphics tools: Install Renderdoc. Download apitrace. Install GPU ShaderAnalyzer. Install GPA.
  45. Optional art tools: Install Color Cop. Install GIMP. Install Inkscape. Install Milton. Install Blender. Install Wings3D. Install MeshLab.
  46. Download Path Editor. Add VS compiler stuff, MSBuild, the Win10 Kit (with mt.exe), IACA, apitrace and NSIS to path.
  47. Install VLC.
  48. Install TODO music player.
  49. Write a blog post.