Here you will find various powershell scripts/commands that can be useful in various circumstances.
The content list below show the current available scripts for you to find.
I will add more as I make them, and if they are suited to be generalized and made available to others.
If I find some useful scripts elsewhere, I will add thos aswell – with notes on who is the creator.
I will try to keep this updated regularly, and post updates in the Changelog below.
Hope you find the content useful.
Table Of Contents
Windows
|—-Credential Providers
| Hive | Path | Type | Name | Value | Description |
|---|---|---|---|---|---|
| HKLM | SOFTWARE\Microsoft\Windows\CurrentVersion\Authentication\Credential Providers | Subfolder with GUID name for each available Credential Provider – Source | |||
| HKLM | SOFTWARE\Policies\Microsoft\Windows\System | REG_SZ | DefaultCredentialProvider | GUID | Assign a default credential provider – Source |
| HKLM | SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System | REG_SZ | ExcludedCredentialProviders | GUID | Comma seperated GUIDs for those to exclude For a list of providers: Link1 – Link2 – Link3 Example: {60b78e88-ead8-445c-9cfd-0b87f74ea6cd},{8FD7E19C-3BF7-489B-A72C-846AB3678C96} This will exclude normal password and smartcards |
|—-Systray icons
| Hive | Path | Type | Name | Value | Description |
|---|---|---|---|---|---|
| HKCU | Software\Citrix\ProvisioningServices\StatusTray | REG_DWORD | ShowIcon | 0 | Hides PVS Icon in Systray |
| Software\VMware, Inc.\VMware Tools | REG_DWORD | ShowTray | 0 | Hides VMware in Icon Systray – pr user | |
| Software\Citrix\Receiver | REG_DWORD | ShowIcon | 0 | Hide Citrix Receiver Icon in Systray | |
| HKLM | SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer | REG_DWORD | HideSCAHealth | 1 | Hide Action Centre |
| SOFTWARE\VMware, Inc.\VMware Tools | REG_DWORD | ShowTray | 0 | Hides VMware in Icon Systray |
|—-Windows Explorer – Folders
| Hive | Path | Type | Name | Value | Description |
|---|---|---|---|---|---|
| HKCU | Software\Classes\CLSID{031E4825-7B94-4dc3-B131-E946B44C8DD5} | REG_DWORD | System.IsPinnedToNameSpaceTree | 1 | Shows libraries in Explorer nav panel |
| CLSID{679f85cb-0220-4080-b29b-5540cc05aab6}\ShellFolder | REG_DWORD | Attributes | 2690646016 | Remove Quick Access from File Menu | |
| Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | REG_DWORD | NavPaneShowAllFolders | 0 | Turns off “show all folders” in explorer nav panel | |
| Software\Microsoft\Windows\CurrentVersion\Explorer\HideMyComputerIcons | REG_DWORD | {0DB7E03F-FC29-4DC6-9020-FF41B59E513A} | 1 | Hides 3D Objects folder in explorer | |
| Software\Microsoft\Windows\CurrentVersion\Explorer\HideMyComputerIcons | REG_DWORD | {B4BFCC3A-DB2C-424C-B029-7FE99A87C641} | 1 | Hides Desktop folder in explorer | |
| Software\Microsoft\Windows\CurrentVersion\Explorer\HideMyComputerIcons | REG_DWORD | {D3162B92-9365-467A-956B-92703ACA08AF} | 1 | Hides Documents folder in explorer | |
| Software\Microsoft\Windows\CurrentVersion\Explorer\HideMyComputerIcons | REG_DWORD | {088E3905-0323-4B02-9826-5D99428E115F} | 1 | Hides Downloads folder in explorer | |
| Software\Microsoft\Windows\CurrentVersion\Explorer\HideMyComputerIcons | REG_DWORD | {3DFDF296-DBEC-4FB4-81D1-6A3438BCF4DE} | 1 | Hides Music folder in explorer | |
| Software\Microsoft\Windows\CurrentVersion\Explorer\HideMyComputerIcons | REG_DWORD | {24AD3AD4-A569-4530-98E1-AB02F9417AA8} | 1 | Hides Pictures folder in explorer | |
| Software\Microsoft\Windows\CurrentVersion\Explorer\HideMyComputerIcons | REG_DWORD | {F86FA3AB-70D2-4FC7-9C99-FCBF05467F3A} | 1 | Hides Videos folder in explorer |
|—-Windows Explorer – File Association related
| Hive | Path | Type | Name | Value | Description |
|---|---|---|---|---|---|
| HKCU | Software\Policies\Microsoft\Windows\Explorer | REG_DWORD | NoNewAppAlert | 1 | Ignore the “open with” window, opens with first available app |
| SOFTWARE\Classes\AppX4hxtad77fbk3jkkeerkrm0ze94wjf3s9 | REG_SZ | NoOpenWith | “” | An app default was reset notification_Microsoft Edge_1of2 – Source | |
| SOFTWARE\Classes\AppX4hxtad77fbk3jkkeerkrm0ze94wjf3s9 | REG_SZ | NoStaticDefaultVerb | “” | An app default was reset notification_Microsoft Edge_2of2 – Source | |
| SOFTWARE\Classes\AppXk0g4vb8gvt7b93tg50ybcy892pge6jmt | REG_SZ | NoOpenWith | “” | An app default was reset notification_Microsoft Photos_1of2 – Source | |
| SOFTWARE\Classes\AppXk0g4vb8gvt7b93tg50ybcy892pge6jmt | REG_SZ | NoStaticDefaultVerb | “” | An app default was reset notification_Microsoft Photos_2of2 – Source | |
| SOFTWARE\Classes\AppXvhc4p7vz4b485xfp46hhk3fq3grkdgjg | REG_SZ | NoOpenWith | “” | An app default was reset notification_Microsoft.3DBuilder_1of2 – Source | |
| SOFTWARE\Classes\AppXvhc4p7vz4b485xfp46hhk3fq3grkdgjg | REG_SZ | NoStaticDefaultVerb | “” | An app default was reset notification_Microsoft.3DBuilder_2of2 – Source | |
| SOFTWARE\Classes\AppX43hnxtbyyps62jhe9sqpdzxn1790zetc | REG_SZ | NoOpenWith | “” | An app default was reset notification_MostImageTypes_1of2 – Source | |
| SOFTWARE\Classes\AppX43hnxtbyyps62jhe9sqpdzxn1790zetc | REG_SZ | NoStaticDefaultVerb | “” | An app default was reset notification_MostImageTypes_2of2 – Source | |
| SOFTWARE\Classes\AppXd4nrz8ff68srnhf9t5a8sbjyar1cr723 | REG_SZ | NoOpenWith | “” | An app default was reset notification_PDF_1of2 – Source | |
| SOFTWARE\Classes\AppXd4nrz8ff68srnhf9t5a8sbjyar1cr723 | REG_SZ | NoStaticDefaultVerb | “” | An app default was reset notification_PDF_2of2 – Source | |
| SOFTWARE\Classes\AppX9rkaq77s0jzh1tyccadx9ghba15r6t3h | REG_SZ | NoOpenWith | “” | An app default was reset notification_raw-etc_1of2 – Source | |
| SOFTWARE\Classes\AppX9rkaq77s0jzh1tyccadx9ghba15r6t3h | REG_SZ | NoStaticDefaultVerb | “” | An app default was reset notification_raw-etc_2of2 – Source | |
| SOFTWARE\Classes\AppXde74bfzw9j31bzhcvsrxsyjnhhbq66cs | REG_SZ | NoOpenWith | “” | An app default was reset_SVG notification_1of2 – Source | |
| SOFTWARE\Classes\AppXde74bfzw9j31bzhcvsrxsyjnhhbq66cs | REG_SZ | NoStaticDefaultVerb | “” | An app default was reset_SVG notification_2of2 – Source | |
| SOFTWARE\Classes\AppXcc58vyzkbjbs4ky0mxrmxf8278rk9b3t | REG_SZ | NoOpenWith | “” | An app default was reset notification_XML_1of2 – Source | |
| SOFTWARE\Classes\AppXcc58vyzkbjbs4ky0mxrmxf8278rk9b3t | REG_SZ | NoStaticDefaultVerb | “” | An app default was reset notification_XML_2of2 – Source | |
| SOFTWARE\Classes\AppXqj98qxeaynz6dv4459ayz6bnqxbyaqcs | REG_SZ | NoOpenWith | “” | An app default was reset notification_Zune Music_1of2 – Source | |
| SOFTWARE\Classes\AppXqj98qxeaynz6dv4459ayz6bnqxbyaqcs | REG_SZ | NoStaticDefaultVerb | “” | An app default was reset notification_Zune Music_2of2 – Source | |
| SOFTWARE\Classes\AppX6eg8h5sxqq90pv53845wmnbewywdqq5h | REG_SZ | NoOpenWith | “” | An app default was reset notification_Zune Video_1of2 – Source | |
| SOFTWARE\Classes\AppX6eg8h5sxqq90pv53845wmnbewywdqq5h | REG_SZ | NoStaticDefaultVerb | “” | An app default was reset notification_Zune Video_2of2 – Source |
|—-Windows – Time & Date
| Hive | Path | Type | Name | Value | Description |
|---|---|---|---|---|---|
| HKCU | Control Panel\International | REG_SZ | sShortTime | HH:mm | Sets the short time format to HH:mm |
| Control Panel\International | REG_SZ | sTime | : | Sets the time seperator to : – server 2016 showed . as default | |
| Control Panel\International | REG_SZ | sTimeformat | HH:mm:ss | Sets the time format to HH:mm:ss | |
| Control Panel\International | REG_SZ | sShortDate | dd.MM.yyyy | Sets the date format to dd.MM.yyyy |
|—-Windows – Personalization
| Hive | Path | Type | Name | Value | Description |
|---|---|---|---|---|---|
| HKCU | Software\Microsoft\Windows\DWM | REG_DWORD | ColorPrevalence | 1 | Enable Border and title bar coloring (1809+) Source |
| Software\Microsoft\Windows\DWM | REG_DWORD | AccentColor | d3d3d3 | Sets Title And Border Color (1809+) Source | |
| Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | REG_DWORD | JumpListItems_Maximum | 30 | Increase number of items available on pinned items on taskbar icons. Source | |
| Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | REG_DWORD | ShowTaskViewButton | 0 | Removes taskView button on taskbar | |
| Software\Microsoft\Windows\CurrentVersion\Search | REG_DWORD | SearchboxTaskbarMode | 0 | Removes search button on taskbar | |
| Software\Policies\Microsoft\Windows\Explorer | REG_DWORD | ExplorerRibbonStartsMinimized | 1 | Always open new File Explorer windows with the ribbon minimized. | |
| Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced | REG_DWORD | LaunchTo | 1 | Sets explorer to open in this computer, not the default quick access view | |
| Software\Microsoft\ServerManager | REG_DWORD | DoNotOpenServerManagerAtLogon | 1 | Dont show server manager at logon | |
| Software\Microsoft\Windows\CurrentVersion\Explorer | REG_DWORD | EnableAutoTray | Win 11 – Show/hide all icons systray (manually: run: shell:::{05d7b0f4-2121-4eff-bf6b-ed3f69b894d9}) | ||
| Software\Classes\CLSID{86ca1aa0-34aa-4e8b-a509-50c905bae2a2}\InprocServer32 | REG_SZ | @ | Win 11 – Enable old right click context menu | ||
| SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced | REG_DWORD | HideIcons | Hide desktop icons without disabling the desktop | ||
| SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced | REG_DWORD | DisablePreviewDesktop | 1 | Disable preview desktop bottom right corner – Source | |
| SOFTWARE\Microsoft\Windows\DWM | REG_DWORD | EnableAeroPeek | 0 | Disable taskbar preview – Source | |
|—-Windows – Spotlight
| Hive | Path | Type | Name | Value | Description |
|---|---|---|---|---|---|
| HKCU | SOFTWARE\Policies\Microsoft\Windows\CloudContent | REG_DWORD | DisableWindowsSpotlightFeatures | 1 | Disable Windows Spotlight on windows |
|—-Windows – Privacy
| Hive | Path | Type | Name | Value | Description |
|---|---|---|---|---|---|
| HKCU | Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\microphone | REG_SZ | Value | On Off | On= enable access to microphone for applications Off= disable access to microphone for applications |
| HKCU | Software\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\webcam | REG_SZ | Value | On Off | On= enable access to webcam for applications Off= disable access to webcam for applications |
| HKLM | SOFTWARE\Policies\Microsoft\Windows\AppPrivacy | REG_DWORD | LetAppsAccessMicrophone | 2 or delete | Allow or Deny OS and Apps Access to Microphone in Windows 10 – Source |
| HKLM | SOFTWARE\Policies\Microsoft\Windows\AppPrivacy | REG_DWORD | LetAppsAccessWebcam | 2 or delete | Allow or Deny OS and Apps Access to Microphone in Windows 10 – Source |
| HKLM | SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore | REG_SZ | microphone | on/off | Allow or Deny OS and Apps Access to Microphone in Windows 10 – Source |
| HKLM | SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore | REG_SZ | webcam | on/off | Allow or Deny OS and Apps Access to Microphone in Windows 10 – Source |
| HKCU | SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore | REG_SZ | microphone | on/off | Allow or Deny OS and Apps Access to Microphone in Windows 10 – Source |
| HKCU | SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore | REG_SZ | webcam | on/off | Allow or Deny OS and Apps Access to Microphone in Windows 10 – Source |
|—-Windows – Processes
| Hive | Path | Type | Name | Value | Description |
|---|---|---|---|---|---|
| HKCU | Control Panel\Desktop | REG_DWORD | AutoEndTasks | 0 or 1 | Auto End Task at Logoff |
|—-Windows – Display
| Hive | Path | Type | Name | Value | Description |
|---|---|---|---|---|---|
| HKLM | SOFTWARE\Microsoft\Windows\CurrentVersion\AutoRotation | REG_SZ | Enable | 0 or 1 | Enable/disable autorotation – Source |
| SYSTEM\CurrentControlSet\Control\GraphicsDrivers\Configuration\HPN34626CM7481M2B_30_07E1_14+HPN34626CM7481M6G_30_07E1_0B^C3065F0AD4B5E2A7FBBBC2C2208C6A02\00\00 | REG_SZ | Rotation | 1,2,3,4 | Control rotation, 1=Landscape 2=Portrait 3=Landscape (flipped) 4=Portrait (flipped) Source |
Applications
|—-Adobe Reader
| Hive | Path | Type | Name | Value | Description |
|---|---|---|---|---|---|
| HKCU | Software\Adobe\Acrobat Reader\DC\Originals | REG_DWORD | bAntialiasGraphics | 1 | Adobe website for reference – Source |
| Software\Adobe\Acrobat Reader\DC\Originals | REG_DWORD | bAntialiasImages | 1 | Adobe website for reference – Source | |
| Software\Adobe\Acrobat Reader\DC\Originals | REG_DWORD | bAntialiasText | 1 | Adobe website for reference – Source | |
| Software\Adobe\Acrobat Reader\DC\Originals | REG_DWORD | benableDDR | 0 | Adobe website for reference – Source | |
| Software\Adobe\Acrobat Reader\DC\Originals | REG_DWORD | bUseLocalFonts | 1 | Adobe website for reference – Source | |
| Software\Adobe\Acrobat Reader\DC\Originals | REG_DWORD | iAntialiasThreshold | 0 | Adobe website for reference – Source | |
| Software\Adobe\CommonFiles\Usage\Reader DC | REG_DWORD | OptIn | 0 | Adobe website for reference – Source | |
| Software\Adobe\Acrobat Reader\DC\UsageMeasurement | REG_DWORD | bHeadlightsNoticeShown | 1 | Adobe website for reference – Source | |
| Software\Adobe\Acrobat Reader\DC\AVGeneral | REG_DWORD | bHideUnreadMsgAtLaunch | 1 | Adobe website for reference – Source | |
| Software\Adobe\Acrobat Reader\DC\AVDisplay | REG_DWORD | bUse2DGPUf | 0 | Adobe website for reference – Source | |
| HKLM | SOFTWARE\Wow6432Node\Adobe\Acrobat Reader\DC\Installer | REG_DWORD | DisableMaintenance | 1 | Adobe website for reference – Source |
| SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown | REG_DWORD | bUpdater | 0 | Adobe website for reference – Source | |
| SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown | REG_DWORD | bShowEbookMenu | 0 | Adobe website for reference – Source | |
| SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown | REG_DWORD | bPurchaseAcro | 0 | Adobe website for reference – Source | |
| SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown | REG_DWORD | bUsageMeasurement | 0 | Adobe website for reference – Source | |
| SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown | REG_DWORD | bFindMoreCustomizationsOnline | 0 | Adobe website for reference – Source | |
| SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown | REG_DWORD | bAcroSuppressUpsell | 1 | Adobe website for reference – Source | |
| SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cServices | REG_DWORD | bUpdater | 0 | Adobe website for reference – Source | |
| SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cServices | REG_DWORD | bToggleAdobeDocumentServices | 0 | Adobe website for reference – Source | |
| SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cServices | REG_DWORD | bToggleWebConnectors | 0 | Adobe website for reference – Source | |
| SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cServices | REG_DWORD | bTogglePrefsSync | 0 | Adobe website for reference – Source | |
| SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cServices | REG_DWORD | bToggleAdobeSign | 0 | Adobe website for reference – Source | |
| SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cIPM | REG_DWORD | bDontShowMsgWhenViewingDoc | 0 | Adobe website for reference – Source | |
| SOFTWARE\Policies\Adobe\Acrobat Reader\DC\FeatureLockDown\cIPM | REG_DWORD | bShowMsgAtLaunch | 0 | Adobe website for reference – Source |
|—-Foxit PDF
| Hive | Path | Type | Name | Value | Description |
|---|---|---|---|---|---|
| HKCU | SOFTWARE\Foxit Software\Foxit PDF Reader 12.0\Preferences\Print | REG_SZ | bPrintUseGraphics | 1 | Enable Print text as graphic due to issues with blank print jobs |
|—-Citrix Files / Sharefile
| Hive | Path | Type | Name | Value | Description |
|---|---|---|---|---|---|
| HKCU | Software\Policies\Citrix\Citrix Files | REG_SZ | Account | yoursubdomain.sharefile.eu/com | To set the account for Citrix Files client |
| Software\Policies\Citrix\Citrix Files | REG_DWORD | EnableApplication | 0 or 1 | Disable /Enable Citrix Files agent for current user | |
| Software\Policies\Citrix\Citrix Files | REG_SZ | MountPoint1-DisplayName | Personal | Set the display name for the mapped drive on the user end – repeat for more folders in sequence, just increase the number | |
| Software\Policies\Citrix\Citrix Files | REG_SZ | MountPoint1-Local | H:\ | Set the drive letter to use on the user end – repeat for more folders in sequence, just increase the number | |
| Software\Policies\Citrix\Citrix Files | REG_SZ | MountPoint1-ShareFile | %personal% | Set the folder in sharefile to be mapped to the above – repeat for more folders in sequence, just increase the number | |
| Software\Citrix\Citrix Files | REG_SZ | WorkspaceSsoLogin | False | Dissable Citrix files trying to use the Workspace/receiver for SSO | |
| Software\Citrix\ShareFile\SSO | REG_SZ | ApiCP | sf-api.eu | To set your region for sharefile API control plane (EU or COM) Source | |
| Software\Citrix\ShareFile\SSO | REG_SZ | AppCP | sharefile.eu | To set your region for sharefile control plane (EU or COM) Source | |
| Software\Citrix\ShareFile\SSO | REG_SZ | Subdomain | yoursubdomain for Sharefile /Files | To set your subdomain for the client Source | |
| Software\Citrix\ShareFile\SSO | REG_DWORD | SuppressWorkspaceSSO | 1 | Disable Outlook Plugin using Workspace app for SSO. Source | |
| Software\Citrix\ShareFile\SSO | REG_DWORD | UserConfigurable | 0 | Disable setup wizard Source | |
| Software\Citrix\ShareFile\SSO | REG_SZ | Method | saml-integrated | Set SSO to use SAML Integrated for SSO Source | |
| Software\Microsoft\Windows\CurrentVersion\Run | REG_SZ | CitrixFiles | “C:\Program Files\Citrix\Citrix Files\CitrixFiles.exe” –autostart | Set the Citrix Files agent to autorun at logon on the user level. Remember to remove the default value for this under HKLM first. |
|—-Visma
| Hive | Path | Type | Name | Value | Description |
|---|---|---|---|---|---|
| HKCU | Software\Rubicon\Visma Lønn-Profiles\Application | REG_SZ | ServerComputer | “YourServerName” | To set the server to connect to for VISMA Lønn |
| Software\Rubicon\Global-Profiles\Application | REG_SZ | ServerComputer | “YourServerName” | To set the server to connect to for VISMA Global | |
| Software\Finale\Aarsoppgjoer | REG_SZ | TempKatalog | “YourWantedPath” | Setting Workfolder for Visma Finale Årsoppgjør. Source | |
| Software\Finale\Konsolid | REG_SZ | TempKatalog | “YourWantedPath” | Setting Workfolder for Visma Finale Konsolidering. Source | |
| Software\Finale\DMiddel | REG_SZ | TempKatalog | “YourWantedPath” | Setting Workfolder for Visma Finale Driftsmidler. Source |
|—-Datalex
| Hive | Path | Type | Name | Value | Description |
|---|---|---|---|---|---|
| HKCU | Software\Datalex Software AS\Datalex | REG_SZ | Rememberlogin | True | Set Datalex client to remember login info |
| Software\Datalex Software AS\Datalex | REG_SZ | DatalexServerPort | 10001 | Set Datalex client port number – adapt to your | |
| Software\Datalex Software AS\Datalex | REG_SZ | DatalexServerIp | http://servername | Set Datalex server | |
| Software\Datalex Software AS\Datalex9 | REG_SZ | Rememberlogin | True | Set Datalex 9 client to remember login info | |
| Software\Datalex Software AS\Datalex9 | REG_SZ | DatalexServerPort | 10001 | Set Datalex client port number – adapt to your | |
| Software\Datalex Software AS\Datalex9 | REG_SZ | DatalexServerIp | http://servername | Set Datalex server |
|—-Internet Explorer
| Hive | Path | Type | Name | Value | Description |
|---|---|---|---|---|---|
| HKCU | Software\Microsoft\Internet Explorer\Main | REG_SZ | Start Page | https://your.page.url | Set Internet Explorer start page pr user |
| SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\url.domain\* | REG_DWORD | https http | 2 | Internet Explorer Site to Zone assignment – 2 adds to trusted sites. In this case “*.url.domain” | |
| SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\url.domain\something | REG_DWORD | https http | 1 | Internet Explorer Site to Zone assignment – 1 adds to local intranet In this case “something.url.domain” | |
| SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\Domains\O: | REG_DWORD | file | 1 | Adds the drive letter O: to local intranet (useful across trusts to avoid notification about path) |
|—-Office 365 / Office
| Hive | Path | Type | Name | Value | Description |
|---|---|---|---|---|---|
| HKCU | SOFTWARE\Microsoft\Office\16.0\Outlook\AutoDiscover | REG_DWORD | excludehttpsrootdomain | 1 | Outlook autodiscover issues in office 2016. Source1 Source2 |
| SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3 | REG_DWORD | 1A10 | 1 | Cookie error when trying to activate Office. Source | |
| Software\Microsoft\Office\16.0\FirstRun | REG_DWORD | BootedRTM | 1 | Disable First Run video. (16.0 = 2016, 15.0=2013) Source | |
| Software\Microsoft\Office\16.0\Common\General | REG_DWORD | ShownFirstRunOptin | 1 | Disable first run user opt-in Source | |
| Software\Microsoft\Office\16.0\Registration | REG_DWORD | AcceptAllEulas | 1 | Accept EULA Source | |
| Software\Policies\Microsoft\Office\16.0\Registration | REG_DWORD | AcceptAllEulas | 1 | Accept EULA Source | |
| SOFTWARE\Microsoft\Office\16.0\Common\Identity | REG_DWORD | DisableADALatopWAMOverride | 1 | Office 365 is Randomly Asking Users to Reactivate Source | |
| SOFTWARE\Microsoft\Office\16.0\Common\Identity | REG_DWORD | EnableADAL | 1 | Enable Modern Authentication – 0 for disable | |
| SOFTWARE\Microsoft\Office\16.0\Common\Identity | REG_DWORD | Version | 1 | Enable Modern Authentication – 0 for disable | |
| SOFTWARE\policies\microsoft\office\16.0\common\general | REG_DWORD | disablehyperlinkstowebtemplates | 1 | Disable online templates in office | |
| Software\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers | REG_SZ | C:\Program Files (x86)\Microsoft Office\root\Office16\OUTLOOK.EXE | ~ WIN7RTM | Outlook EmailNotificationsPopup – Win7 style notification | |
| Software\Microsoft\Office\16.0\Outlook\Search | REG_DWORD | SearchResultsCap | 0 | RemoveLimitSearchResultsToSpeedSearch Source | |
| SOFTWARE\Microsoft\OneDrive | REG_DWORD | EnableADAL | 1 | Enable Modern Authentication for OneDrive – 0 for disable | |
| Software\Microsoft\Office\16.0\Outlook\Options\Mail | REG_DWORD | Send Mail Immediately | 1 | Don’t wait for sending email. Source | |
| Software\Policies\Microsoft\Office\16.0\Outlook\Security | REG_DWORD | PromptSimpleMAPISend | 2 | Outlook programmatic security settings – 2 is autoapprove – Source | |
| Software\Policies\Microsoft\Office\16.0\Outlook\Security | REG_DWORD | PromptSimpleMAPINameResolve | 2 | Outlook programmatic security settings – 2 is autoapprove – Source | |
| Software\Policies\Microsoft\Office\16.0\Outlook\Security | REG_DWORD | PromptSimpleMAPIOpenMessage | 2 | Outlook programmatic security settings – 2 is autoapprove – Source | |
| Software\Microsoft\Communicator | REG_DWORD | AutoOpenMainWindowsWhenStartup | 0 | Disable Skype windows to open automatically at logon | |
| Software\Microsoft\Communicator | REG_DWORD | AutoRunWhenLoginToWindows | 0 | Disable run Skype at login | |
| Software\Microsoft\Communicator | REG_DWORD | TourPlayed | 1 | Disable First run Tour |
|—-Google Chrome
| Hive | Path | Type | Name | Value | Description |
|---|---|---|---|---|---|
| HKCU | Software\Policies\Google\Chrome | REG_DWORD | AudioSandboxEnabled | 0 | Disable audio sandbox – User level – Source |
| HKLM | Software\Policies\Google\Chrome | REG_DWORD | AudioSandboxEnabled | 0 | Disable audio sandbox – Machine level – Source |
|—-Microsoft Edge Chromium
Notice:
The location below is to set the settings, but let the users override if wanted.
To enforce the settings, put them directly in the \Edge\ key – and not under the \Edge\Recommended\ key.
| Hive | Path | Type | Name | Value | Description |
|---|---|---|---|---|---|
| HKCU | SOFTWARE\Policies\Microsoft\Edge\Recommended | REG_DWORD | HomepageIsNewTabPage | 0 Off 1 On | Set the new tab page to be the home page – overrides/ignores the homepage url if configured |
| REG_DWORD | ShowHomeButton | 0 Off 1 On | Show the home button | ||
| REG_DWORD | RestoreOnStartup | 1 4 5 | 1=Open new tab 4=Restore last session 5=Open a list of URLs (RestoreOnStartupUrls) | ||
| REG_DWORD | NewTabPageSetFeedType | 0 1 | 0=MS News feed 1=O365 Feed | ||
| REG_SZ | HomepageLocation | URL | Set the homepage url | ||
| REG_SZ | NewTabPageLocation | URL | Set the url to use for the new tab page | ||
| REG_DWORD | SmartScreenEnabled | 0 Off 1 On | Enable/disable Defender SmartScreen | ||
| REG_DWORD | SmartScreenForTrustedDownloadsEnabled | 0 Off 1 On | Enable/disable smartscreen check on download (default on) | ||
| REG_DWORD | SmartScreenPuaEnabled | 0 Off 1 On | Turn on blocking for potentially unwanted apps in Microsoft Defender SmartScreen. | ||
| REG_DWORD | PrintHeaderFooter | 0 Off 1 On | Force ‘headers and footers’ to be on or off in the printing dialog. | ||
| REG_DWORD | PrintPreviewUseSystemDefaultPrinter | 0 Off 1 On | Tells Microsoft Edge to use the system default printer as the default choice in Print Preview instead of the most recently used printer | ||
| REG_DWORD | PasswordManagerEnabled | 0 Off 1 On | Enable/Disable Microsoft Edge to save user password | ||
| REG_DWORD | TranslateEnabled | 0 Off 1 On | Enable/disable Tranlate | ||
| REG_DWORD | SyncDisabled | 0 Off 1 On | Disables data synchronization in Microsoft Edge. This policy also prevents the sync consent prompt from appearing. | ||
| REG_DWORD | SearchSuggestEnabled | 0 Off 1 On | Enables web search suggestions in Microsoft Edge’s Address Bar and Auto-Suggest List and prevents users from changing this policy | ||
| REG_DWORD | ResolveNavigationErrorsUseWebService | 0 Off 1 On | Allow Microsoft Edge to issue a dataless connection to a web service to probe networks for connectivity in cases like hotel and airport Wi-Fi. If you enable this policy, a web service is used for network connectivity tests | ||
| REG_DWORD | NetworkPredictionOptions | 0 1 2 | 0=Predict network actions on any network connection 1= Predict network actions on any network connection that is not cellular 2=Don’t predict network actions on any network connection | ||
| REG_DWORD | FavoritesBarEnabled | 0 Off 1 On | Enables or disables the favorites bar. | ||
| REG_DWORD | ClearBrowsingDataOnExit | 0 Off 1 On | If you enable this policy, all browsing data is deleted each time Microsoft Edge closes | ||
| REG_DWORD | BackgroundModeEnabled | 0 Off 1 On | If you enable/Disable, background mode | ||
| REG_SZ | ApplicationLocaleValue | en no etc | uses the specified locale. If the configured locale isn’t supported, ‘en-US’ is used instead. | ||
| REG_DWORD | AlternateErrorPagesEnabled | 0 Off 1 On | If you enable this policy, a web service is used to generate url and search suggestions for network errors | ||
| REG_DWORD | AutofillAddressEnabled | 0 Off 1 On | Enables the AutoFill feature and allows users to auto-complete address information in web forms using previously stored information | ||
| REG_DWORD | AutofillCreditCardEnabled | 0 Off 1 On | Enables Microsoft Edge’s AutoFill feature and lets users auto complete credit card information in web forms using previously stored information | ||
| REG_DWORD | BlockThirdPartyCookies | 0 Off 1 On | Block web page elements that aren’t from the domain that’s in the address bar from setting cookies | ||
| REG_SZ | DownloadDirectory | Path | Configures the directory to use when downloading files. | ||
| REG_DWORD | DownloadRestrictions | 0 1 2 3 | 0= No special restrictions 1=Block dangerous downloads Block potentially dangerous downloads 3=Block all downloads | ||
| REG_DWORD | ImportAutofillFormData | 0 Off 1 On | Allows users to import autofill form data from another browser into Microsoft Edge | ||
| REG_DWORD | ImportBrowserSettings | 0 Off 1 On | Allows users to import browser settings from another browser into Microsoft Edge | ||
| REG_DWORD | ImportFavorites | 0 Off 1 On | Allows users to import favorites from another browser into Microsoft Edge. | ||
| REG_DWORD | ImportHistory | 0 Off 1 On | Allows users to import their browsing history from another browser into Microsoft Edge | ||
| REG_DWORD | ImportOpenTabs | 0 Off 1 On | Allows users to import open and pinned tabs from another browser into Microsoft Edge. | ||
| REG_DWORD | ImportPaymentInfo | 0 Off 1 On | Allows users to import payment info from another browser into Microsoft Edge. | ||
| REG_DWORD | ImportSavedPasswords | 0 Off 1 On | Allows users to import saved passwords from another browser into Microsoft Edge. | ||
| REG_DWORD | ImportSearchEngine | 0 Off 1 On | Allows users to import search engine settings from another browser into Microsoft Edge. | ||
| HKCU | SOFTWARE\Policies\Microsoft\Edge\Recommended\RestoreOnStartupURLs | REG_SZ | 1 | URL | Set the url(s) to open on startup. add numbers pr wanted url |
| HKCU | SOFTWARE\Policies\Microsoft\Edge | REG_DWORD | EnableMediaRouter | 0 Off 1 On | Disable this policy to disable Google Cast. |
| REG_DWORD | DefaultCookiesSetting | 1 2 4 | 1 = Let all sites create cookies 2 = Don’t let any site create cookies 4 = Keep cookies for the duration of the session | ||
| REG_DWORD | DefaultPluginsSetting | 2 3 | 2 = Block the Adobe Flash plug-in 3 = Click to play | ||
| REG_DWORD | DefaultGeolocationSetting | 1 2 3 | 1 = Allow sites to track users’ physical location 2 = Don’t allow any site to track users’ physical location 3 = Ask whenever a site wants to track users’ physical location | ||
| REG_DWORD | DefaultPopupsSetting | 1 2 | 1 = Allow all sites to show pop-ups 2 = Don’t allow any site to show pop-up windows | ||
| REG_DWORD | DefaultJavaScriptSetting | 1 2 | 1 = Allow all sites to run JavaScript 2 = Don’t allow any site to run JavaScript | ||
| REG_DWORD | DefaultNotificationsSetting | 1 2 3 | 1 = Allow sites to show desktop notifications 2 = Don’t allow any site to show desktop notifications 3 = Ask every time a site wants to show desktop notifications | ||
| REG_DWORD | PasswordProtectionWarningTrigger | 0 1 | Allows you to control when to trigger password protection warning. Password protection alerts users when they reuse their protected password on potentially suspicious sites 0 = Password protection warning is off. 1 = Password protection warning is triggered by password reuse. | ||
| REG_DWORD | PasswordManagerEnabled | 0 Off 1 On | If you enable this policy, users can save their passwords in Microsoft Edge. The next time they visit the site, Microsoft Edge will enter the password automatically. | ||
| REG_DWORD | PrintingEnabled | 0 Off 1 On | Enables/disables printing in Microsoft Edge and prevents users from changing this setting. | ||
| REG_DWORD | UseSystemPrintDialog | 0 Off 1 On | Shows the system print dialog instead of print preview. | ||
| REG_DWORD | PrintPreviewUseSystemDefaultPrinter | 0 Off 1 On | Tells Microsoft Edge to use the system default printer as the default choice in Print Preview instead of the most recently used printer. | ||
| REG_DWORD | PreventSmartScreenPromptOverride | 0 Off 1 On | Lets you decide whether users can override the Microsoft Defender SmartScreen warnings about potentially malicious websites. | ||
| REG_DWORD | PreventSmartScreenPromptOverrideForFiles | 0 Off 1 On | lets you determine whether users can override Microsoft Defender SmartScreen warnings about unverified downloads. | ||
| REG_DWORD | HardwareAccelerationModeEnabled | 0 Off 1 On | Enable /disable hardware acceleration | ||
| HKCU | SOFTWARE\Policies\Microsoft\Edge\PopupsAllowedForUrls | REG_SZ | 1 2 … | URL(s) | Define a list of sites, based on URL patterns, that can open pop-up windows |
| SOFTWARE\Policies\Microsoft\Edge\PluginsAllowedForUrls | REG_SZ | 1 2 … | URL(s) | Define a list of sites, based on URL patterns, that can run the Adobe Flash plug-in. | |
| SOFTWARE\Policies\Microsoft\Edge\NotificationsAllowedForUrls | REG_SZ | 1 2 … | URL(s) | Define a list of sites, based on URL patterns, that can display notifications. | |
| SOFTWARE\Policies\Microsoft\Edge\JavaScriptAllowedForUrls | REG_SZ | 1 2 … | URL(s) | Define a list of sites, based on URL patterns, that are allowed to run JavaScript. | |
| HKLM | REG_DWORD | AutoUpdateCheckPeriodMinutes | 0 or nr of miunutes | value for the minimum number of minutes between automatic update checks. If you want to disable all auto-update checks, set the value to 0 | |
| For Citrix client endpoint to remove the prompt about receiver/workspace | |||||
| HKCU | SOFTWARE\Policies\Microsoft\Edge\URLAllowlist | REG_SZ | 1 | workspace://* | Removes the trying to open prompt and .ica file open prompt for Citrix Workspace |
| SOFTWARE\Policies\Microsoft\Edge\URLAllowlist | REG_SZ | 2 | receiver://* | Removes the trying to open prompt and .ica file open prompt for Citrix Receiver | |
| HKCU | Software\Policies\Microsoft\Edge | REG_DWORD | AudioSandboxEnabled | 0 | Disable audio sandbox – User level – Source |
| HKLM | Software\Policies\Microsoft\Edge | REG_DWORD | AudioSandboxEnabled | 0 | Disable audio sandbox – Machine level – Source |
| HKLM | SOFTWARE\Policies\Microsoft\Edge | REG_DWORD | HubsSidebarEnabled | 0 | Disable the “Disvovery” button – Source |
Citrix / RDS
|—-Logon optimization
| Hive | Path | Type | Name | Value | Description |
|---|---|---|---|---|---|
| HKCU | SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Serialize | REG_DWORD | StartupDelayInMSec | 0 | DisableStartupDelay (after win8/server2012) Source |
| Software\Microsoft\Windows\CurrentVersion\Group Policy\State | REG_DWORD | NextRefreshReason | 0 | EnableAsyncProcessing-Part1 – Run first time user logon to get Async benefits. Source | |
| Software\Microsoft\Windows\CurrentVersion\Group Policy\State | REG_DWORD | NextRefreshMode | 2 | EnableAsyncProcessing-Part2 – Run first time user logon to get Async benefits. Source |
|—-Citrix Receiver / Workspace App
| Hive | Path | Type | Name | Value | Description |
|---|---|---|---|---|---|
| HKCU | Software\Citrix\Receiver | REG_DWORD | EnableFTU | 0 | Prevent add account pop-up after installation |
| SOFTWARE\Citrix\ICA Client\Keyboard Mapping\Tips | REG_DWORD | In full screen mode | 1 | Prevent the info message about “shift+F2” when exiting fullscreen session, the popup may create session hang | |
| System\GameConfigStore | REG_DWORD | GameDVR_Enabled | 0 | Disable the “GameBar” when launching apps. Source | |
| SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers | REG_SZ | C:\Program Files (x86)\Citrix\ICA Client\wfica32.exe | ~ HIGHDPIAWARE | Disable DPI Scaling for Receiver – Per user | |
| SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers | REG_SZ | C:\Program Files (x86)\Citrix\ICA Client\CDViewer.exe | ~ HIGHDPIAWARE | Disable DPI Scaling for Receiver – Per user | |
| HKLM | SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers | REG_SZ | C:\Program Files (x86)\Citrix\ICA Client\wfica32.exe | ~ HIGHDPIAWARE | Disable DPI Scaling for Receiver – Per machine |
| SOFTWARE\Microsoft\Windows NT\CurrentVersion\AppCompatFlags\Layers | REG_SZ | C:\Program Files (x86)\Citrix\ICA Client\CDViewer.exe | ~ HIGHDPIAWARE | Disable DPI Scaling for Receiver – Per machine | |
| SOFTWARE\Policies\Microsoft\Windows\GameDVR | REG_DWORD | AllowGameDVR | 0 | Disable the “GameBar” when launching apps. Source | |
| SOFTWARE\Policies\Citrix | REG_DWORD | EnableFTU | 0 | Prevent add account pop-up after installation | |
| SOFTWARE\Wow6432Node\Citrix\ICA Client | REG_DWORD | NotificationDelay | 10 | Delay before opening the “launching” box | |
| SOFTWARE\Wow6432Node\Citrix\ICA Client | REG_DWORD | ForegroundProgressBar | 1 | Ensure the “launching” box appears in foreground | |
| SOFTWARE\Wow6432Node\Citrix\ICA Client\Engine\Lockdown Profiles\All Regions\Lockdown\Virtual Channels\Keyboard | REG_SZ | TransparentKeyPassthrough | FullScreenOnly | To prevent windows hotkeys in sessions other then fullscreen ICA | |
| SOFTWARE\Wow6432Node\Citrix\Inventory | REG_DWORD | BeaconProxyEnabled | 0 | To prevent beacon probing from using proxy. Source | |
| SYSTEM\CurrentControlSet\Control\NetworkProvider\ProviderOrder | REG_DWORD | PnSson | 00000fa0 | To add SSO to network provider order. Source | |
| SOFTWARE\Wow6432Node\Citrix\Dazzle | REG_SZ | WSCReconnectMode | 1 | Set Receiver reconnect mode, 1 is “on application launch” | |
| SOFTWARE\Wow6432Node\Citrix\Dazzle | REG_SZ | DisablePoll | Source | ||
| SOFTWARE\Wow6432Node\Citrix\Dazzle | REG_SZ | RefreshMs | 86400000 | How often to background refresh apps in receiver. (24Hour) Source | |
| SOFTWARE\Wow6432Node\Citrix\Dazzle | REG_SZ | StartMenuDir | “Citrix” | Directory on startmenu for Citrix application shortcuts | |
| SOFTWARE\Wow6432Node\Citrix\Dazzle | REG_SZ | UseDifferentPathsforStartmenuAndDesktop | True/False | Use different shortcut paths for desktop and startmenu | |
| SOFTWARE\Wow6432Node\Citrix\Dazzle | REG_SZ | UseCategoryAsStartMenuPath | True/False | Use category defined in studio as path on startmenu | |
| SOFTWARE\Wow6432Node\Citrix\Dazzle | REG_SZ | UseCategoryAsDesktopPath | True/False | Use category defined in studio as path on Desktop | |
| SOFTWARE\Wow6432Node\Citrix\Dazzle | REG_SZ | RemoveAppsOnLogOff | True/False | Removes Citrix shortcust on receiver logoff | |
| SOFTWARE\Wow6432Node\Citrix\Dazzle | REG_SZ | RemoveAppsOnExit | True/False | Removes Citrix shortcust on receiver exit | |
| SOFTWARE\Wow6432Node\Citrix\Dazzle | REG_SZ | MaxSimultaneousFetches | 6 | Speed up icon generation from receiver on endpoint source | |
| SOFTWARE\Wow6432Node\Citrix\Dazzle | REG_SZ | MaxSimultaneousSubscribes | 6 | Speed up icon generation from receiver on endpoint source | |
| SOFTWARE\Wow6432Node\Citrix\Dazzle | REG_SZ | InitialRefreshMaxMs | 1 | Source | |
| SOFTWARE\Wow6432Node\Citrix\Dazzle | REG_SZ | InitialRefreshMinMs | 1 | Source | |
| SOFTWARE\Wow6432Node\Citrix\Dazzle | REG_SZ | SilentlyUninstallRemovedResources | True | Source | |
| SOFTWARE\Wow6432Node\Citrix\Dazzle | REG_SZ | DontWarnOfRemovedResources | True | Prevent popup for user when unpublishing apps. Source | |
| SOFTWARE\Wow6432Node\Citrix\Dazzle | REG_SZ | AlwaysUseStubs | True/False | Generate stubs on newer Receivers. Source | |
| Software\Policies\Citrix\ICA Client\SSON | REG_SZ | Enabled | True/False | Enable/Disable receiver SSO (still need to be installed with sso) |
|—- Citrix Virtual Apps and Desktops
| Hive | Path | Type | Name | Value | Description |
|---|---|---|---|---|---|
| HKLM | Software\Citrix\VirtualDesktopAgent | REG_DWORD | SupportMultipleForest | 1 | On VDA to support DDC in another forest |
| SYSTEM\CurrentControlSet\Control\Citrix\wfshell\TWI | REG_SZ | LogoffCheckSysModules | app1.exe,app2,exe,etc | On VDA, to add applications that prevent clean logoff | |
| SYSTEM\CurrentControlSet\Control\Citrix\wfshell\TWI | REG_DWORD | LogoffCheckerStartupDelayInSeconds | 10 | ON VDA, to enable launching explorer published app as first app | |
| SYSTEM\CurrentControlSet\Control\Citrix\wfshell\TWI] | REG_DWORD | SeamlessFlags | 40000 | ON VDA; Disable language bar | |
| SOFTWARE\Wow6432Node\citrix\HdxMediaStreamForFlash\Server\PseudoServer | REG_DWORD | IEBrowserMaximumMajorVersion | 11 | On VDA, to add support for Flash on IE11+ | |
| SOFTWARE\Wow6432Node\citrix\HdxMediaStreamForFlash\Server\PseudoServer | REG_DWORD | FlashPlayerVersionComparisonMask | 0 | On VDA, to add support for Flash on IE11+ | |
| SOFTWARE\Wow6432Node\Citrix\ExcelHook | REG_DWORD | Enabled | 1 | ON VDA; show multiple worksheets on taskbar in published app Source | |
| SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\ICA-TCP | REG_DWORD | MaxDisconnectionTime | 10800000 | TimeOut for ICA Sessions |
|—-Various Tweaks
| Hive | Path | Type | Name | Value | Description |
|---|---|---|---|---|---|
| HKCU | Software\Microsoft\Windows NT\CurrentVersion\Windows | REG_DWORD | LegacyDefaultPrinterMode | 1 | Enable legacy printer mode (not the new one in the new settings app) – 0 for disable. Source |
| Control Panel\Desktop | REG_SZ | HungAppTimeout | 60000 | Specifies how long the system waits for user processes to end after the user clicks the End Task command button in Task Manager. Source | |
| Software\FinePrint Software\pdfFactory6\FinePrinters\pdfFactory Pro\General | REG_DWORD | AutoSave | 0 | Disable AutoSave for PDF Factory |
Do you find this useful?
Let us know by leaving a comment and following us on Twitter
Also consider subscribing to this website so you get notification on new posts arrive.
You can subscribe with the subscribe button in the menu on the right side, or you can use this button:
If you wish to share the content to others, feel free to use the buttons below for your simplicity.
Best regards
Dybbugt.no
