NTLite Research Presets

|====|

Active Member
Get RandomMac State :

Powershell -C "$key = 'HKLM:\SOFTWARE\Microsoft\WlanSvc\Interfaces'; Get-ChildItem $key | foreach { Get-ItemProperty -Path \"$key\$($_.pschildname)\" -Name RandomMacState -EA 0 -Verbose }"

Now user can easily set RandomMacState via same but be sure Propertytype is in REG_Binary
 

|====|

Active Member
Disable Delete File Transfer to Bin from all disk drives at once & set max capacity of file to 1mb:

Powershell -EP Bypass -MTA -NOL -NONI -NOP -C "Write-Host 'Disable File Transfer to Recycle Bin' -ForegroundColor Green"
Powershell -EP Bypass -MTA -NOL -NONI -NOP -C "$key = 'HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\BitBucket\Volume'; Get-ChildItem $key | foreach { Set-ItemProperty -Path \"$key\$($_.pschildname)\" -Name MaxCapacity -Value 1 -EA SilentlyContinue -Verbose }"
Powershell -EP Bypass -MTA -NOL -NONI -NOP -C "$key = 'HKCU:\Software\Microsoft\Windows\CurrentVersion\Explorer\BitBucket\Volume'; Get-ChildItem $key | foreach { Set-ItemProperty -Path \"$key\$($_.pschildname)\" -Name NukeOnDelete -Value 1 -EA SilentlyContinue -Verbose }"

Disable all autologgers at once :

Powershell -EP Bypass -MTA -NOL -NONI -NOP -C "Get-AutologgerConfig | Set-AutologgerConfig -Start 0 -InitStatus 0 -Confirm:$false -EA Ignore -Verbose"

Classic Shell Symbols :
 
Last edited:

Clanger

Well-Known Member
If you disable Autologger\EventLog-Application and Autologger\EventLog-System the EventLog service will not start. With that you won't be able to disable some scheduled tasks.
Disable services last, once all other tweaks have been done and drivers and software installed. I always do Tasks first or 2nd.
 

garlin

Moderator
Staff member
While you can use reg tweaking for virtually anything, use the provided Windows command. Because the registry doesn't care if you're wrong, but the command does basic checking and any hidden logic.

C:\Windows\System32>wevtutil el | more
AMSI/Debug
Analytic
Application
DirectShowFilterGraph
DirectShowPluginControl
Els_Hyphenation/Analytic
EndpointMapper
FirstUXPerf-Analytic
ForwardedEvents
HardwareEvents
wevtutil set-log Microsoft-Windows-AllJoyn/Debug /enabled:false /quiet:true
 

Clanger

Well-Known Member
While you can use reg tweaking for virtually anything, use the provided Windows command. Because the registry doesn't care if you're wrong, but the command does basic checking and any hidden logic.
Thats why i prefer to set Power settings through the command line or with a custom power plan which is actually my prefered choice cos if you mess up you delete the custom plan and you still have all the default plans at their default settings.

I have noticed a warning before that says plan has some windows 10 power settings and they will be ignored.
MT_ has switched to custom power plans rather than using direct registry edits that he has used here.
 
Last edited:

AeonX

Active Member
Disable services last, once all other tweaks have been done and drivers and software installed. I always do Tasks first or 2nd.
In that case I think you won't have any problems, but it's good to know the consequence of each thing you disable to do things knowing what you're doing :)

I dont use powershell, what are they in bat form?
In the case of Autologgers I don't think there is a native command or tool other than using PowerShell. But you can use reg.exe in batch.
 
Last edited:

|====|

Active Member
Disable services last, once all other tweaks have been done and drivers and software installed.
i also do the same in very very last after every tweak is done even software & drivers are installed
 
Last edited:

Clanger

Well-Known Member
In the case of Autologgers I don't think there is a native command or tool other than using PowerShell. But you can use reg.exe in batch.
damn, call the ps file from a bat i suppose,,,, There are hundreds of autologgers :(
if i drag a powershell file to Post Setup, the tool will know what to do with it yes?
 

garlin

Moderator
Staff member
if i drag a powershell file to Post Setup, the tool will know what to do with it yes?
Sorry, no....

NTLite will call your PS1 script with PowerShell, but won't provide any Execution-Policy overrides.
If you haven't changed Execution Policy by using a reg key (integrated or run in SetupComplete before the first PS command), it will fail.

This is why you have to copy/paste everywhere:

PowerShell.exe -NoProfile -ExecutionPolicy Bypass -File MyScript.ps1
PowerShell.exe -NoProfile -ExecutionPolicy Bypass -Command "something; something; something"

Or for the hipsters, PowerShell -nop -ep bypass
 

AeonX

Active Member
damn, call the ps file from a bat i suppose,,,, There are hundreds of autologgers :(
if i drag a powershell file to Post Setup, the tool will know what to do with it yes?
I can't tell you, but it's possible to run powershell commands inside the batch script too. I just can't tell you for sure the correct way because I know almost nothing about powershell :p

But I believe this is it:
Code:
powershell.exe -Command "& {<command>}"

https://docs.microsoft.com/en-us/po...t_powershell_exe?view=powershell-5.1#-command

In cmd.exe, there is no such thing as a script block (or ScriptBlock type), so the value passed to Command will always be a string. You can write a script block inside the string, but instead of being executed it will behave exactly as though you typed it at a typical PowerShell prompt, printing the contents of the script block back out to you.

A string passed to Command is still executed as PowerShell code, so the script block curly braces are often not required in the first place when running from cmd.exe. To execute an inline script block defined inside a string, the call operator & can be used:

Code:
powershell.exe -Command "& {Get-WinEvent -LogName security}"
 
Top