Jump to content

Registry Tweaks PT 4 beta update


 Share

Recommended Posts

Unfortunately I no longer have the time to finish updating the Reg tweak. I have uploaded the latest version I was working on, I have tried to clean up the layout and add an explanation to each tweak. I did plan to split the reg tweaks into separate files for example a file containing "Log on" related tweaks and another for "Internet explorer" etc. I would be grateful if someone could finish the work and start a new thread :)

EDIT: Thaks nrg86, file fixed redownload plz

Regtweaks_Oct_22th_2006.zip

Edited by glent
Link to comment
Share on other sites


http://www.msfn.org/board/index.php?s=&sho...ndpost&p=343801

Despite what I said before for pt. 3, the system services are still using 00000002 = Automatic when they mostly should be 00000004 = Disabled.

And I'd have thought the comments I made before would deserve an acknowledgement.

Now the Security Center under services have no reg entry but is duplicated later under SP2.

There're quite a few items (too many to list) where the reg entries follow the dotted line when a new line is needed.

Edited by Takeshi
Link to comment
Share on other sites

At first I wanna say WOW, really nice list of tweaks. I didn't read the whole list til now, since it's a little too much to read it all at once. But here a few little corrections. The following two tweaks are contained two times:

;Enable Monitor Power-off on the Logon Screen

;Do Not Send Files to Recycle Bin

As a matter of form the two tweaks

;Disables DOS Filenames may cause problems with old dos based applications

;Disable the NTFS Last Access Time Stamp (speeds up viewing folders in ntfs)

should be settled right after

;These NTFS tweaks improve file system performance (Speed up NTFS) Note: these have been reported to cause non-compatibility with DOS/Win9x-based apps/games.

I'm going to test some of the untested right now.

I'm also just figuring out the tweaks to set the security level of IE to high for the different zones, e.g.

;--------------------------------------------------------------------------
;Set Internet Explorer Security Level For Internet To High
;--------------------------------------------------------------------------

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\3]
"1001"=dword:00000003
"1200"=dword:00000003
"1400"=dword:00000003
"1402"=dword:00000003
"1405"=dword:00000003
"1407"=dword:00000003
"1604"=dword:00000001
"1606"=dword:00000003
"1607"=dword:00000003
"1608"=dword:00000003
"1800"=dword:00000003
"1802"=dword:00000001
"1803"=dword:00000003
"1804"=dword:00000003
"1A00"=dword:00010000
"1A02"=dword:00000003
"1A03"=dword:00000003
"1A05"=dword:00000003
"1A06"=dword:00000003
"1C00"=dword:00000000
"1E05"=dword:00010000
"2100"=dword:00000003
"2101"=dword:00000003
"2300"=dword:00000003
"2000"=dword:00000003

Could be interesting for non-IE users.

Link to comment
Share on other sites

@amit_talkin yeah I made a typo then couldt edit the title lol

@Takeshi yeahits beta....unfinished and yes all credits will be given . please post any errors thats all I ask . compiling a list this big is not easy :blink: there will be many more fixes to come included the ones you have stated

@Doc Symbiosis Thanks , will look into this

Edited by glent
Link to comment
Share on other sites

I don't think it'd be really helpful to include the whole list of system services, because some are best left to automatic (default), some depends on individual circumstances. Only select a few really important ones (for security purpose). What services are needed have been discussed many times and there's no single list that suits everyone.

It'd be quite a task (if that's possible) to include every tweak that is available so we should aim to include only the most useful ones. Aim for quality not quantity.

I've only listed the services that should be corrected (from auto to disabled) and those whose descriptions I've amended. The others I'd leave the start value blank for the user to fill in.

;-------

;Alerter

;-------

;Disabled by default in XP SP2. If you're part of a network that sends and receives administrative alerts this service is for you.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Alerter]"Start"=dword:00000004

;---------------------------------------------------------

;Internet Connection - Firewall (ICF) / Sharing (ICS)

;---------------------------------------------------------

;Set this service to the same setting used for Application Layer Gateway Service.

;Renamed Windows Firewall/ICS in XP SP2

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess]

"Start"=dword:00000002

;-----------

;Messenger

;------------

;Transmits net send and Alerter service messages between clients and servers.

;This service is not related to Windows Messenger. If this service is stopped,

;Alerter messages will not be transmitted. Disabled by default in SP2.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Messenger]

"Start"=dword:00000004

;------------------

;Remote Registry

;------------------

;permits someone to edit your registery remotely

;Disabled unless you want that!

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\RemoteRegistry]

"Start"=dword:00000004

;-----------------

;Security Center

;-----------------

;Monitors system security settings and configurations.

;XP SP2 only

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\wscsvc]

"Start"=dword:00000004

;-------------------------

;TCP/IP NetBIOS Helper

;-------------------------

; Enables support for NetBIOS over TCP/IP (NetBT) service and NetBIOS name resolution. Disabled unless needed.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LmHosts]

"Start"=dword:00000004

;--------

;Telnet

;--------

;A remote login 'feature' that is a major security hole. Unless you have a ;specific reason to use this, keep it disabled. Even Microsoft has changed the default to Disabled with SP2.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\TlntSvr]

"Start"=dword:00000004

;--------------------------------------

;Universal Plug and Play Device Host

;--------------------------------------

;Provides support to host Universal Plug and Play devices.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\upnphost]

"Start"=dword:00000004

;--------------------------------------------------

;Windows Firewall/Internet Connection Sharing (ICS)

;--------------------------------------------------

;Provides network address translation, addressing, name resolution and/or intrusion

;prevention services for a home or small office network.

;XP SP2 only (previously Internet Connection Firewall (ICS)/Sharing (ICS)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess]

"Start"=dword:00000002

Link to comment
Share on other sites

This is my correction (content and formatting) for the "System Performance" section.

I've removed:

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]

"NoSaveSettings"=dword:00000000

as I don't think it's anything to do with "Speed up opening of My Computer and Explorer" and this Group Policy is absent by default anyway.

These I've left them in but do have some concerns.

The "Force DLL To Unload From Memory" is of doubtful benefit in XP (Cluberti explained it in a thread in WinXP forum).

The "Optimize System Cache Size" tweak is really for server only.

The "Optimize Core System Performance" tweak is to disable kernel paging. I'm not sure if it does "Optimize Core System Performance".

The "Increase IoPageLockLimit (disk cache)" tweak is, if I remember correctly, misleading - I'll look into it.

;============================================

;\\\\\\\\\\\\\\\\\\\\\\\\\\ System Performance ////////////////////////

;============================================

;Improve file system performance (Speed up NTFS) Note: these have been reported to cause non-compatibility with DOS/Win9x-based apps/games

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\FileSystem]"NtfsDisableLastAccessUpdate"=dword:00000001

"Win95TruncatedExtensions"=dword:00000001

"Win31FileSystem"=dword:00000000

;------------------------------------------------------------------------------

;Speed up opening of My Computer and Explorer

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\stisvc]

"Start"=dword:00000002

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]

"NoNetCrawling"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer]

"NoRemoteRecursiveEvents"=dword:00000001

;------------------------------------------------------------------------------

;Force DLL To Unload From Memory

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\AlwaysUnloadDLL]

@="1"

;--------------------------------------------------------------------------------------------------------------------------------

;Disables DOS Filenames may cause problems with old DOS based applications

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\FileSystem]

"NtfsDisable8dot3NameCreation"=dword:00000001

;--------------------------------------------------------------------------------------------------------------------------------

;To be used manually when windows will not set hard drives or optical drives to DMA mode (this tweak does not mean that your drives will be in DMA mode, you will still have to do that yourself)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4D36E96A-E325-11CE-BFC1-08002BE10318}\0001]

"MasterDeviceTimingModeAllowed"=dword:ffffffff

"SlaveDeviceTimingModeAllowed"=dword:ffffffff

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Class\{4D36E96A-E325-11CE-BFC1-08002BE10318}\0002]

"MasterDeviceTimingModeAllowed"=dword:ffffffff

"SlaveDeviceTimingModeAllowed"=dword:ffffffff

;--------------------------------------------------------------------------------------------------------------------------------

;Increase IoPageLockLimit (disk cache)

; Note- Use the following settings depending on your system RAM:

;00020000 = 131072 KB (if RAM > 512 MB)

;00010000 = 65536 KB (if RAM > 256 MB)

;00008000 = 32768 KB (if RAM > 128 MB)

;00004000 = 16384 KB (if RAM > 64 MB)

;00002000 = 8192 KB (if RAM > 32 MB)

;00001000 = 4096 KB (if RAM < 32 MB)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management]

"IoPageLockLimit"=dword:00020000

;--------------------------------------------------------------------------------------------------------------------------------

;Speeds up copying/moving of zip files (disable windows built in zip functionality)

[-HKEY_CLASSES_ROOT\.zip\CompressedFolder]

[-HKEY_CLASSES_ROOT\CLSID\{E88DCCE0-B7B3-11d1-A9F0-00AA0060FA31}]

[-HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CompressedFolder]

;--------------------------------------------------------------------------------------------------------------------------------

;Disable Windows Installer Rollback (faster msi installs, But some MSI installer wont work with this tweak activated, caused all sorts of problems don't recommend

[HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Installer]

"DisableRollback"=dword:00000001

;--------------------------------------------------------------------------------------------------------------------------------

;Optimize System Cache Size: server only (Will cause data corruption if you have ATI vid card and 1 GB of ram)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management]

"LargeSystemCache"=dword:00000001

;--------------------------------------------------------------------------------------------------------------------------------

;Disable kernel paging; Optimize Core System Performance

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management]

"DisablePagingExecutive"=dword:00000001

;--------------------------------------------------------------------------------------------------------------------------------

;Multiple Explorer Processes meaning its more stable

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer]

"DesktopProcess"=dword:00000001

;-------------------------------------------------------------------------------------------------------------------------------

;Disable the NTFS Last Access Time Stamp (speeds up viewing folders in ntfs)

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\FileSystem]

"NtfsDisableLastAccessUpdate"=dword:00000001

;--------------------------------------------------------------------------------------------------------------------------------

;nVidia OverClock/Tweak mode enable (Note: Use only if you have an nVidia Card!

[HKEY_LOCAL_MACHINE\SOFTWARE\NVIDIA Corporation\Global\NVTweak]

"CoolBits"=dword:00000002

;--------------------------------------------------------------------------------------------------------------------------------

;Show Run in Separate Memory Space Option to run 16 bit programs in VDM

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]

"MemCheckBoxInRunDlg"=dword:00000001

[HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]

"MemCheckBoxInRunDlg"=dword:00000001

;--------------------------------------------------------------------------------------------------------------------------------

;Opens 16-bit apps in a separate memory space, this increases stability when dealing with 16-bit apps.

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\WOW]

"DefaultSeparateVDM"="Yes"

Link to comment
Share on other sites

I found a few faults with my RegChecker program...

"Enable Remote Administration of Windows Installer" = Lacks the semicolon.

"Wrap Icon Titles" = Lacks also the semicolon.

":Show Thumbnail for bitmap files" = This one is just a typo.

"nodefaultadminowner=dword:00000000" = Not really a fault, but a pair of parenthesis could be added.

Thats about it. Thanks for the good work btw.

Link to comment
Share on other sites

Guest
This topic is now closed to further replies.
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.


×
×
  • Create New...