glent Posted January 26, 2006 Posted January 26, 2006 (edited) Unfortunately I no longer have the time to finish updating the Reg tweak. I have uploaded the latest version I was working on, I have tried to clean up the layout and add an explanation to each tweak. I did plan to split the reg tweaks into separate files for example a file containing "Log on" related tweaks and another for "Internet explorer" etc. I would be grateful if someone could finish the work and start a new thread EDIT: Thaks nrg86, file fixed redownload plzRegtweaks_Oct_22th_2006.zip Edited October 22, 2006 by glent
amit_talkin Posted January 27, 2006 Posted January 27, 2006 (edited) Thanks....i was looking for some new tweaks..let me see this!!but why dont u give this label as "REGISTRY TWEAKS PART 4 BETA" Edited January 27, 2006 by amit_talkin
Takeshi Posted January 27, 2006 Posted January 27, 2006 (edited) http://www.msfn.org/board/index.php?s=&sho...ndpost&p=343801Despite what I said before for pt. 3, the system services are still using 00000002 = Automatic when they mostly should be 00000004 = Disabled.And I'd have thought the comments I made before would deserve an acknowledgement.Now the Security Center under services have no reg entry but is duplicated later under SP2.There're quite a few items (too many to list) where the reg entries follow the dotted line when a new line is needed. Edited January 27, 2006 by Takeshi
Doc Symbiosis Posted January 28, 2006 Posted January 28, 2006 At first I wanna say WOW, really nice list of tweaks. I didn't read the whole list til now, since it's a little too much to read it all at once. But here a few little corrections. The following two tweaks are contained two times:;Enable Monitor Power-off on the Logon Screen;Do Not Send Files to Recycle BinAs a matter of form the two tweaks;Disables DOS Filenames may cause problems with old dos based applications;Disable the NTFS Last Access Time Stamp (speeds up viewing folders in ntfs)should be settled right after;These NTFS tweaks improve file system performance (Speed up NTFS) Note: these have been reported to cause non-compatibility with DOS/Win9x-based apps/games.I'm going to test some of the untested right now.I'm also just figuring out the tweaks to set the security level of IE to high for the different zones, e.g.;--------------------------------------------------------------------------;Set Internet Explorer Security Level For Internet To High;--------------------------------------------------------------------------[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3]"1001"=dword:00000003"1200"=dword:00000003"1400"=dword:00000003"1402"=dword:00000003"1405"=dword:00000003"1407"=dword:00000003"1604"=dword:00000001"1606"=dword:00000003"1607"=dword:00000003"1608"=dword:00000003"1800"=dword:00000003"1802"=dword:00000001"1803"=dword:00000003"1804"=dword:00000003"1A00"=dword:00010000"1A02"=dword:00000003"1A03"=dword:00000003"1A05"=dword:00000003"1A06"=dword:00000003"1C00"=dword:00000000"1E05"=dword:00010000"2100"=dword:00000003"2101"=dword:00000003"2300"=dword:00000003"2000"=dword:00000003Could be interesting for non-IE users.
glent Posted January 28, 2006 Author Posted January 28, 2006 (edited) @amit_talkin yeah I made a typo then couldt edit the title lol@Takeshi yeahits beta....unfinished and yes all credits will be given . please post any errors thats all I ask . compiling a list this big is not easy there will be many more fixes to come included the ones you have stated@Doc Symbiosis Thanks , will look into this Edited January 28, 2006 by glent
Takeshi Posted January 29, 2006 Posted January 29, 2006 I don't think it'd be really helpful to include the whole list of system services, because some are best left to automatic (default), some depends on individual circumstances. Only select a few really important ones (for security purpose). What services are needed have been discussed many times and there's no single list that suits everyone.It'd be quite a task (if that's possible) to include every tweak that is available so we should aim to include only the most useful ones. Aim for quality not quantity.I've only listed the services that should be corrected (from auto to disabled) and those whose descriptions I've amended. The others I'd leave the start value blank for the user to fill in.;-------;Alerter;-------;Disabled by default in XP SP2. If you're part of a network that sends and receives administrative alerts this service is for you.[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Alerter]"Start"=dword:00000004;---------------------------------------------------------;Internet Connection - Firewall (ICF) / Sharing (ICS);---------------------------------------------------------;Set this service to the same setting used for Application Layer Gateway Service.;Renamed Windows Firewall/ICS in XP SP2[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess]"Start"=dword:00000002;-----------;Messenger;------------;Transmits net send and Alerter service messages between clients and servers.;This service is not related to Windows Messenger. If this service is stopped,;Alerter messages will not be transmitted. Disabled by default in SP2.[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Messenger]"Start"=dword:00000004;------------------;Remote Registry ;------------------;permits someone to edit your registery remotely;Disabled unless you want that![HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry]"Start"=dword:00000004;-----------------;Security Center ;-----------------;Monitors system security settings and configurations.;XP SP2 only[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wscsvc]"Start"=dword:00000004;-------------------------;TCP/IP NetBIOS Helper;-------------------------; Enables support for NetBIOS over TCP/IP (NetBT) service and NetBIOS name resolution. Disabled unless needed.[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LmHosts]"Start"=dword:00000004;--------;Telnet ;--------;A remote login 'feature' that is a major security hole. Unless you have a ;specific reason to use this, keep it disabled. Even Microsoft has changed the default to Disabled with SP2.[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TlntSvr]"Start"=dword:00000004;--------------------------------------;Universal Plug and Play Device Host ;--------------------------------------;Provides support to host Universal Plug and Play devices.[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\upnphost]"Start"=dword:00000004;--------------------------------------------------;Windows Firewall/Internet Connection Sharing (ICS);--------------------------------------------------;Provides network address translation, addressing, name resolution and/or intrusion;prevention services for a home or small office network.;XP SP2 only (previously Internet Connection Firewall (ICS)/Sharing (ICS)[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess]"Start"=dword:00000002
Takeshi Posted January 29, 2006 Posted January 29, 2006 This is my correction (content and formatting) for the "System Performance" section.I've removed:[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]"NoSaveSettings"=dword:00000000as I don't think it's anything to do with "Speed up opening of My Computer and Explorer" and this Group Policy is absent by default anyway.These I've left them in but do have some concerns.The "Force DLL To Unload From Memory" is of doubtful benefit in XP (Cluberti explained it in a thread in WinXP forum).The "Optimize System Cache Size" tweak is really for server only.The "Optimize Core System Performance" tweak is to disable kernel paging. I'm not sure if it does "Optimize Core System Performance".The "Increase IoPageLockLimit (disk cache)" tweak is, if I remember correctly, misleading - I'll look into it.;============================================;\\\\\\\\\\\\\\\\\\\\\\\\\\ System Performance ////////////////////////;============================================;Improve file system performance (Speed up NTFS) Note: these have been reported to cause non-compatibility with DOS/Win9x-based apps/games[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\FileSystem]"NtfsDisableLastAccessUpdate"=dword:00000001"Win95TruncatedExtensions"=dword:00000001"Win31FileSystem"=dword:00000000;------------------------------------------------------------------------------;Speed up opening of My Computer and Explorer[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\stisvc]"Start"=dword:00000002[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]"NoNetCrawling"=dword:00000001[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer]"NoRemoteRecursiveEvents"=dword:00000001;------------------------------------------------------------------------------;Force DLL To Unload From Memory[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AlwaysUnloadDLL]@="1";--------------------------------------------------------------------------------------------------------------------------------;Disables DOS Filenames may cause problems with old DOS based applications[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\FileSystem]"NtfsDisable8dot3NameCreation"=dword:00000001;--------------------------------------------------------------------------------------------------------------------------------;To be used manually when windows will not set hard drives or optical drives to DMA mode (this tweak does not mean that your drives will be in DMA mode, you will still have to do that yourself)[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4D36E96A-E325-11CE-BFC1-08002BE10318}\0001]"MasterDeviceTimingModeAllowed"=dword:ffffffff"SlaveDeviceTimingModeAllowed"=dword:ffffffff[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4D36E96A-E325-11CE-BFC1-08002BE10318}\0002]"MasterDeviceTimingModeAllowed"=dword:ffffffff"SlaveDeviceTimingModeAllowed"=dword:ffffffff;--------------------------------------------------------------------------------------------------------------------------------;Increase IoPageLockLimit (disk cache); Note- Use the following settings depending on your system RAM:;00020000 = 131072 KB (if RAM > 512 MB);00010000 = 65536 KB (if RAM > 256 MB);00008000 = 32768 KB (if RAM > 128 MB);00004000 = 16384 KB (if RAM > 64 MB);00002000 = 8192 KB (if RAM > 32 MB);00001000 = 4096 KB (if RAM < 32 MB)[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management]"IoPageLockLimit"=dword:00020000;--------------------------------------------------------------------------------------------------------------------------------;Speeds up copying/moving of zip files (disable windows built in zip functionality)[-HKEY_CLASSES_ROOT\.zip\CompressedFolder][-HKEY_CLASSES_ROOT\CLSID\{E88DCCE0-B7B3-11d1-A9F0-00AA0060FA31}][-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CompressedFolder];--------------------------------------------------------------------------------------------------------------------------------;Disable Windows Installer Rollback (faster msi installs, But some MSI installer wont work with this tweak activated, caused all sorts of problems don't recommend[HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Installer]"DisableRollback"=dword:00000001;--------------------------------------------------------------------------------------------------------------------------------;Optimize System Cache Size: server only (Will cause data corruption if you have ATI vid card and 1 GB of ram)[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management]"LargeSystemCache"=dword:00000001;--------------------------------------------------------------------------------------------------------------------------------;Disable kernel paging; Optimize Core System Performance[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management]"DisablePagingExecutive"=dword:00000001;--------------------------------------------------------------------------------------------------------------------------------;Multiple Explorer Processes meaning its more stable[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer]"DesktopProcess"=dword:00000001;-------------------------------------------------------------------------------------------------------------------------------;Disable the NTFS Last Access Time Stamp (speeds up viewing folders in ntfs)[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\FileSystem]"NtfsDisableLastAccessUpdate"=dword:00000001;--------------------------------------------------------------------------------------------------------------------------------;nVidia OverClock/Tweak mode enable (Note: Use only if you have an nVidia Card![HKEY_LOCAL_MACHINE\SOFTWARE\NVIDIA Corporation\Global\NVTweak]"CoolBits"=dword:00000002;--------------------------------------------------------------------------------------------------------------------------------;Show Run in Separate Memory Space Option to run 16 bit programs in VDM[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]"MemCheckBoxInRunDlg"=dword:00000001[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]"MemCheckBoxInRunDlg"=dword:00000001;--------------------------------------------------------------------------------------------------------------------------------;Opens 16-bit apps in a separate memory space, this increases stability when dealing with 16-bit apps.[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\WOW]"DefaultSeparateVDM"="Yes"
glent Posted February 1, 2006 Author Posted February 1, 2006 (edited) Bump, new file uploaded check first post Edited February 1, 2006 by glent
Ryan711 Posted February 2, 2006 Posted February 2, 2006 hey is this the Glent that runs the xp reloaded forums. If so when are they going to be up again?
glent Posted February 2, 2006 Author Posted February 2, 2006 @Anderz thansk man, please feel free to leave any comments guys, As soon as all the erros are corrected i can post this in Regtweaks PT 3
4r0 Posted February 2, 2006 Posted February 2, 2006 I found a few faults with my RegChecker program..."Enable Remote Administration of Windows Installer" = Lacks the semicolon."Wrap Icon Titles" = Lacks also the semicolon.":Show Thumbnail for bitmap files" = This one is just a typo."nodefaultadminowner=dword:00000000" = Not really a fault, but a pair of parenthesis could be added.Thats about it. Thanks for the good work btw.
glent Posted February 3, 2006 Author Posted February 3, 2006 bump , udpated again and should be final
Recommended Posts