; Start > Settings > System > Display > Advanced scaling settings > Fix scaling for apps > Off
Breaks window placement on nvidia Win10LTSC2021.
Can you show me an example of this? I've never heard of this happening, and I've used this image on my gaming desktop, and 2 laptops for over a year now, without issue (on Nvidia and Intel cards). In fact, toggling this off fixes issues for people, it's why I found it to begin with because my wife's programs on her unmodified Windows work laptop kept bugging out until this was toggled off. I know people like LTSC because it's more stripped out, but that version was also never intended to be used for gaming, and I have a feeling the issue you're having with Nvidia is more than likely due to LTSC or some other tweak. I'll gladly investigate this further though if you can show me what's happening.

Personalization settings should not be set by these regkeys because they are up to users decision which wallpaper and theme they want.
Did you mean to post a reg key here? I don't think any of the personalization options are a big deal, like I said you can modify them before integrating, delete them, or change them post-install. However, my defaults are definitely a better starting point than Microsoft's, because the default Aero theme causes issues since it overrides a lot of settings, so by stopping it from installing it allows users to more freely change personalization settings to their preferences, without worrying about the Aero theme overwriting things during user-provisioning.

; Start > Settings > Time & Language > Date & time > Set time automatically > Off
I dont think it changes anything in case of performance. Dualboot breaks Windows time & it can be easily fixed in linux by typing
timedatectl set-local-rtc 1 --adjust-system-clock
so I perceive mentioned regkey as useless and potentially harmful.
This one is confusing. What does the linux command have to do with Windows? Can you elaborate this one more thoroughly please, so I can learn what the issue is? This reg key is simply toggled by turning off the automated syncing of time with the Windows servers. This is a minor bandwidth saver, as well as a security tweak too. If you were around during the XP era, you'll know that this is how many people got infected with malware because at one point the Microsoft servers were infected, and then everyone that automatically synced time got infected. Also, keep in mind you can manually sync time on that same settings page too.

; Start > Settings > Ease of Access > Keyboard > Allow the shortcut key to start Toggle Keys > Off
; Start > Settings > Ease of Access > Keyboard > Allow the shortcut key to start Filter Keys > Off
If I understand this correctly then this can break programs using defined shortcuts ex. shift + somekey to toggle mic mute.
I've never had a problem in 30 years of gaming with these settings over every OS they were included in. In fact the opposite was true, many times I've been kicked out of games because I accidentally activated these shortcuts which is beyond frustrating. Can you show me an example of what breaks or where you sourced that information? I think you're confusing this with something else, because these are Accessibility shortcuts, it has nothing to do with activating the microphone through Steam or anything like that.

; Start > Settings > Privacy > X > Allow apps to access your X
Denying access to camera, library, mic, notifications, sounds etc does more harm than good. ex. discord desktop can't use mic/mic activation, ObsidianMD can't use documents folder, slack can't use notifications.
This is super easy to toggle if a user needs it, and the access error even appears in the action center if an app needs access, so it's not hidden from the users. If you are experiencing otherwise, could you elaborate? Again, this could be more of an LTSC issue or from other tweaks, so I need to verify what's going on before I change settings based on 1 report.

I think you are right about the microphone being better to be enabled by default though, I even enable it after I install this image, and many gamers will too, so I should probably update that in the next version I release.

; Start > Windows System > Control Panel > View by > Large icons
As mentioned before - user`s decision.
Most people actually prefer this, because the XP era setup was far more popular than the Vista and above groupings. Using large icons objectively makes things easier to find for most users, because it greatly reduces the number of clicks to find what you need. That's a proven, basic 101 principle of Website and UX design, and the internet vehemently supports this, it's one of the most complained about things (Microsoft changing the control panel/file explorer/start menu). But, again it's super easy to change through Windows, or by modifying the key or deleting it.

; Start > Windows System > Control Panel > Internet Options > General > Home page > Google
Useless, no one uses IE .
This is unfortunately not true. A lot of businesses/agencies, including work laptops people bring home, still require IE because countless programs use it since they refuse to update their code. A colossal number of government agencies still use IE for example. I've worked as a 9-1-1 dispatcher, and my wife is a social worker, and both agencies rely on IE (in multiple states), including other outdated crap like Java. This tweak is really no big deal, you're nitpicking on this one :)

Also, Bing/MSN is worse than Google for searching, really most places are better than Bing/MSN, so I don't agree with it being a problem to include this tweak. On a related note, parts of Windows actually still rely on the \Internet Explorer\ keys, believe it or not, and so tweaking them in general does make a difference. All of these reasons are why it's been so hard for Microsoft to get rid of IE, because it's thoroughly integrated into the OS as a dependency for so many things, as well as being used by countless 3rd parties.

Thank you for the feedback! Please know I'm keeping an open mind, but quite a few of these I need more information on before I act on them.
 
Last edited:
This one is confusing. What does the linux code have to do with Windows? Can you elaborate this one more thoroughly please, so I can learn what the issue is? This reg key is simply toggled by turning off the automated syncing of time with the Windows servers. This is a minor bandwidth saver, as well as a security tweak too. If you were around during the XP era, you'll know that this is how many people got infected with malware because at one point the Microsoft servers were infected, and then everyone that automatically synced time got infected. Also, keep in mind you can manually sync time on that same settings page too.
Ermm, wtf? The recurring problem was for some IP addresses, the time.windows CDN network may be unreliable in assigning you a local MS timeserver. You get a sub-par match, and drop sync traffic. Just use pool.ntp.org, CloudFlare/Google/FB or someone else.
 
Ermm, wtf? The recurring problem was for some IP addresses, the time.windows CDN network may be unreliable in assigning you a local MS timeserver. You get a sub-par match, and drop sync traffic. Just use pool.ntp.org, CloudFlare/Google/FB or someone else.
I have no idea what this means in relation to what I said. Did you mean to quote Regally3628 instead?
 
I have never heard of MS servers getting infected, and messing up time sync.
I really don't remember the specifics, it's been ~20 years. Maybe I misread or misunderstood at the time it happened, or the lingering memory got distorted over the years, but trying to find XP articles is more and more difficult since so much has been lost to time, so I doubt I can find the source again to re-read now that I'm older and more experienced in Windows.

Either way, it doesn't change anything else I said about the reg key, it's such a simple option to toggle, and I've never seen a negative side effect of doing so, which is why I asked for more information so I could look into it. I've always had it off, for so many years without issue.
 
Can you show me an example of this? I've never heard of this happening, and I've used this image on my gaming desktop, and 2 laptops for over a year now, without issue (on Nvidia and Intel cards). In fact, toggling this off fixes issues for people, it's why I found it to begin with because my wife's programs on her unmodified Windows work laptop kept bugging out until this was toggled off. I know people like LTSC because it's more stripped out, but that version was also never intended to be used for gaming, and I have a feeling the issue you're having with Nvidia is more than likely due to LTSC or some other tweak. I'll gladly investigate this further though if you can show me what's happening.
Right now my Windows ISO doesn't use these regkeys but in the beginning with this regkey applied windows were randomly placed ex. some driver-install window was only 20% visible because it snapped into some not-visible space on the left side of my monitor (single-setup monitor to be clear). Fixed by removing this regkey.
This one is confusing. What does the linux command have to do with Windows?
Using Linux & Windows (dualboot) on the same PC causes Windows time to go crazy. Disabling automatic sync does more harm than good because time sync can be fixed by 1 simple command on linux and then Windows will read time properly when using automatic time sync.
This is a minor bandwidth saver, as well as a security tweak too. If you were around during the XP era
XP era is gone. Regkeys are disabling ms-defender & ms-firewall so I thnk that getting infected by Microsoft NTP server is the least possible scenario that you can think of. SMB exploits, powershell exploits, hardware exploits, infected winget/choco/msi/exe packages. Windows is a trashcan with drivers and compability implementations "from XP era" and security on Windows is a joke.

I can agree with other of your replies. I'm new to this modding scene so I can be wrong on a lot of things, especially regkeys. Previously I had thought that setting these access & personalization settings by regkeys will disable the possibility to change by "win-settings UI" & grey out toggles.
 
...with this regkey applied windows were randomly placed...
I think I know what you mean now. Before the display driver is installed, the windows are wonky, because they don't respect the boundaries of the non-native monitor resolution. It's intriguing that this setting would be a culprit there, because it's only supposed to be for adjusting dpi scaling of the text so it's not blurry. I will put this on the to-do list to test out. The reason I don't like this setting though is because it uses up resources and constantly monitors what you are doing so it can send you notifications, as well as bugging out some apps. I'll see if there's a way to find the best of both worlds.

Using Linux & Windows (dualboot) on the same PC causes Windows time to go crazy...
Okay I understand now, I did some Googling on it. So basically this is a compatibility issue between Linux and Windows, because Linux always wants to use UTC time, while Windows wants to use Local time, and they both try to modify the system clock on the motherboard when you sync with the internet (or manually change date/time), which then causes the other operating system to be wrong by a few hours when you boot into it.

There's two common ways to address it:
1) Force Linux to use Local time which is the command you posted (timedatectl set-local-rtc 1).

2) Force Windows to use UTC time with a reg key, and then also disable automatic time syncronization with the keys in this guide.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\TimeZoneInformation]
"RealTimeIsUniversal"=dword:00000001

Although this next bit wasn't in the Google links I read through, I think there is likely a better approach worth testing out, which is to turn off time synchronization on both operating systems, and set their timezones the same. You may still have to use option 1 with this if Linux continues to assume it needs to offset the clock, it's something that needs to be tested to know for sure.

Having time syncronization turned on in Windows isn't actually solving the issue, it's only a workaround because really what's happening is the clock is wrong when Windows boots up since Linux modifies it, and then eventually Windows synchronizes automatically with the internet and thus "fixes" itself, but the clock is still technically wrong momentarily at the start of every Windows boot even with syncing on. By turning off syncing on both operating systems they should both stop modifying the clock and use the motherboard time instead.

Anywho, worth looking into. I'm not trying to overcomplicate this or anything, this is new to me since I don't dual boot, so I wanted to dive into it deeper to learn what's going on, and put all the information out there in case someone else reads this and can reply with a better solution.

...security on Windows is a joke.
Yeah I know what you mean in your reply. My XP example was probably not a good one because it made people read into it too much, I was only trying to provide a quick anecdote, but I think I muddied up the water and shouldn't have included it.

...I had thought that setting these access & personalization settings by regkeys will disable the possibility to change by "win-settings UI" & grey out toggles.
Understandable, yeah all of my keys are toggleable, with the exception of about 6 or so which are "locked" and will show red text saying, "This is managed by your system administrator" or whatever it says. This is because I was forced to use a few group policies to accomplish something because there was no known alternative to change that thing otherwise. If you do a search of the registry files for the keyword \Policies with the backslash included it will quickly show you where all those are.

There's a few on Defender, Firewall, and Lock Screen, I think that's all of them. Even post-install you can fix those super easy though if you need to, just delete that key from regedit and then the settings will "unlock". I still want to find a way to get rid of these policies in the future, but it's difficult because so much is undocumented in Windows, and I haven't found an alternative yet.

Thanks again for the feedback, and please let me know if you come across any other issues. There's still a lot on my to-do list for the next version of the guide, but I haven't made much progress yet because I've been held up for months on the Nvidia DPC thread (link) trying to fix that Microsoft/Nvidia bug.
 
Last edited:
My opinion is that just like presets nothing should be applied blindly, everyone should audit tweaks and presets before applying and understand what each one does. Same thing for scripts, these are dangerous and can cause greater damage to the OS or even have malicious code so it is mandatory to check the code before running it.

Everyone has their personal preference so it's impossible to create something that will please everyone, so everyone has to adjust to their taste.

I think it's advantageous to show the tweaks that exist even if not everyone is going to use them effectively or exactly as it is because sometimes people don't know about the existence of this tweak and it can be useful for them, or even they take advantage of it but with another value according to your need.

About Internet Explorer, 99.999...% of people don't use it directly but many need to keep it for compatibility because many things in Windows depend on IE and some programs try to open it even when you have another browser as default (WinToolkit) so if need to keep this I think it's good to set this up properly.

When I tried to change the homepage and search provider of IE with reg tweaks it went back to default. I don't remember if the reg tweak I used was the same as the one in the topic, I'll try that again.

I use this:
Code:
Windows Registry Editor Version 5.00

; Skips the First Run Wizard when Internet Explorer runs for the first time
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main]
"DisableFirstRunCustomize"=dword:00000001

; Internet Explorer does not display tabs in groups
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TabbedBrowsing]
"Groups"=dword:00000000

; When a new tab is opened, open: A blank page
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TabbedBrowsing]
"NewTabPageShow"=dword:00000000

; Do not show previews for individual tabs in the taskbar
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\TabbedBrowsing]
"ThumbnailBehavior"=dword:00000000

; Does not play a sound when a pop-up window is blocked
[HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\New Windows]
"PlaySound"=dword:00000000

; Specifies that the Accelerators menu does not appear in Internet Explorer
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Activities]
"NoActivities"=dword:00000001

; The default Accelerators are not included in Internet Explorer
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Internet Explorer\Activities]
"NoOOBActivities"=dword:00000001

Some tweaks I discovered using Answer files (unattend.xml) and reading the Windows SIM documentation.

Microsoft-Windows-IE-InternetExplorer component
 
Last edited:
Hellbovine, would you consider sharing this guide on GitHub? I think that would be a good place for the project to grow and especially since you’re planning on a v2.
 
Last edited:
Hellbovine, would you consider sharing this guide on GitHub? I think that would be a good place for the project to grow and especially since you’re planning on a v2.
If I can drop a thought here and is completely my opinion. Hellbovine has been a great asset for us ntliters and would rather have new users come here, purchase the software and then use his guides provided.
 
...would you consider sharing this guide on GitHub?...
I'm not sure if it's as beneficial as it sounds? The only thing that forces people to create an account on this forum is attachments, otherwise anyone from the internet can view the guides and all the content. The account requirement for attachments is an inconvienance, but most users can't use these guides to their full extent without also downloading the NTLite program, so it makes sense to host them here for that reason. Plus, if someone comes across an NTLite issue, they're already here and can report that to the forum too.

Another good reason to use NTLite forums, is it keeps everything in one place, so I don't have to update multiple locations which eats up time I could use to test new things. Also, the SEO (search engine optimization) will favor NTLite.com much more than it would a new GitHub page, and so the guides will get more hits being here. My Nvidia bug thread is a great example, it already reached page #1 on Google in only 6 months, beating out literally hundreds of thousands of other websites/forums which have posts on the subject.

On that note, maybe it might be worthwhile to make a suggestion to see if the forum can remove the account requirement for attachments? We could discuss that on a different thread though, so we don't bog down this guide thread.
 
Last edited:
Hello!
I can't figure out what the problem is. One of the installed programs won't start when I add the "Reg_2_Security.reg" file to the registry... Can you help me?
My config: Wimdows 10 22H2 19045.2364
Thank you.
 
...One of the installed programs won't start when I add the "Reg_2_Security.reg" file to the registry... Can you help me?
My config: Wimdows 10 22H2 19045.2364
I need more info to be able to help:

1) What program?

2) Are you using other tweaks too, like an XML preset or other reg keys you added which may interfere?

I haven't tested this guide on 22H2 (that version is full of known bugs), and Microsoft may have also changed/added some keys which could be part of the problem there too.
 
For me, apart from the above mentioned bug, my computer worked very well , and faster with the tweaks.
I use Windows 10 and my mother tongue is Hungarian (en-HU).
And thank you for the tweaks :)
The only real benefit Pro has over Home is that it has the actual group policy management user interface, and a few more policies work on Pro that don't work on Home, but since I try to avoid using group policies anyway it doesn't matter much to me. Pro also has marginally more bloat than Home does, since it has a few extra features added in. Everything that works on Home should also work on Pro, so yes you can use the guide on your Pro edition.
 
I need more info to be able to help:

1) What program?

2) Are you using other tweaks too, like an XML preset or other reg keys you added which may interfere?

I haven't tested this guide on 22H2 (that version is full of known bugs), and Microsoft may have also changed/added some keys which could be part of the problem there too.
I didn't use just the Tweak.
A program, amely nem működött, a WisualNEO Win volt..
and:
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System]
"EnableLUA"=dword:00000000
"ConsentPromptBehaviorAdmin"=dword:00000000
"ConsentPromptBehaviorUser"=dword:00000000
"EnableInstallerDetection"=dword:00000000
"EnableSecureUIAPaths"=dword:00000001
"EnableUIADesktopToggle"=dword:00000000
"EnableVirtualization"=dword:00000001
"PromptOnSecureDesktop"=dword:00000000
"ValidateAdminCodeSignatures"=dword:00000000
;; "verbosestatus"=dword:00000000
 
Only 2 of those policies are from my tweak file, the rest are your own custom ones.

I'm betting this one is the culprit:
"EnableLUA"=dword:00000000
 
Restore that key and see if the app launches. If it works, it's not a bug/issue from my guide here, you have to contact VisualNeo and work it out with them.
 
Startup without fine tuning (Reg_2_Security).
That's why I dared to say it here.
I just downloaded and installed, then successfully launched VisualNeoWin and have it running currently. I am using this exact same guide, but on W10 21H2 instead.

Microsoft keeps adding new security and other misc changes with various updates and new versions, such as 22H2. The problem here is that you went off course from the guide's instructions and used 22H2, and there's multiple potential reasons why the app is failing to launch:

1) You used extra custom tweaks that may interfere.

2) Version 22H2 has known program launch issues (link).

3) New keys probably got added to 22H2 for security, which may affect this set of keys here:
; ...Exploit protection settings...
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\kernel]

Note: if Microsoft added more options here, it will change what this key should be set to.

Does the app present an error when it fails to launch? I need some more information to troubleshoot, it'll require some investigative work on your end so I can help out further. These are all good ideas to look into right now though, and is where I'd start.
 
Last edited:
Back
Top