Optimize Windows 7

How to Optimize Windows 7​

   Information

This is a list of suggestions that will help show you how to optimize Windows 7 by speeding up and improving it's performance.

You can pick and choose which ones you would like to do, or feel comfortable doing. If you do not notice an increase in performance or have a problem with the suggestion, then you can always go back and undo the suggestion at it's provided tutorial link.

If you have a question about one of the options, then please feel free to post a question here. We'll be happy to help.

This list of suggestions will continue to be ongoing. I will be adding and updating suggestions to this list every so often, so you may would like to check back from time to time for anything new.

If you like, please feel free to post any of your own suggestions that you find to help the performance of Windows 7.

   Note

Windows 7 Minimum Hardware Requirements:

• 1 GHz 32-bit or 64-bit processor
• 1 GB RAM for 32-bit Windows 7 OR 2 GB RAM for 64-bit Windows 7
• 16 GB available disk space 32-bit Windows 7 OR 20 GB for 64-bit Windows 7
• Support for DirectX 9 graphics with 128 MB memory (in order to enable Aero theme)
• DVD-R/W Drive
• Internet or phone access to activate Windows 7.

Here we go:

1. Use a Solid State Drive (SSD)
Installing Windows 7 onto a solid state hard drive (SSD) instead of a normal SATA or IDE hard drive will dramatically increase your computer's performance.
2. Install the Latest BIOS and Device Drivers
Make sure that you have the latest available drivers installed for all of your devices and BIOS version for your motherboard. These will often have updated that correct new bugs, bug from the previous version, and may add new features, and increase performance. Check at the device's website for them. Be sure to have the correct versions for your 32 bit or 64 bit Windows 7. If you do not have Windows 7 drivers available, then you can often times use Vista drivers instead with sometimes having to use Compatibility Mode on the driver installation file with Vista selected.
3. Install More RAM
The more you have the better your performance can be up to a point. Usually 4 GB (32-bit) or 8 GB (64-bit) will be the most that you will need though unless you do memory intensive actions such as video editing.

Better memory (RAM) performance will depend on fast the bandwidth MHZ rating (higher the better) is, and if you are using faster dual (DDR2) or tripple (DDR3) channel memory in that mode instead of just one stick in single channel mode. It's best to have all of your RAM sticks with the exact same specs.
4. Upgrade to a Better Video Graphics Card
If you're a gamer, then upgrading your video card to a better one can give you much better FPS (frames per second) and performance. In some situations, better video cards can be a huge benefit even without heavy onscreen video work, because certain applications can leverage the GPUs for calculations. If your current card and motherboard support SLI or CrossFireX, adding a second card and bridging them will be a good option as well.
5. Turn Transparency Off
The glass transparency effect uses the most resources from the Aero feature. You can disable it without disabling Aero.
6. Turn Off Unneeded Visual Effects
Uncheck the visual effect options that you do not want or need, or select the Adjust for best performance option, to increase the speed. You can optimize performance by changing how menus and windows appear. The most common visual effects to uncheck are:

• Animate windows when minimizing and maximizing
• Animations in the taskbar and Start Menu
• Enable transparent glass
• Fade or slide menus into view
• Fade or slide ToolTips into view
• Fade out menu items after clicking
• Show shadows under windows
• Slide open combo boxes

7. Turn off all unnecessary animations
If animation effects, such as fade windows when closed visual effects, run slow or sluggish on your computer, then using Turn off all unnecessary animations can help improve your computer's performance.
8. Enable Write Caching for Storage Devices
This option is usually the best choice for storage devices that must provide the highest possible performance and that you intend to not remove from the system frequently, such as internal hard disk drives.
9. Disable or Remove Unwanted or Unneeded Startup Programs
Double check through your startup programs and disable or remove the ones you do not want to have start when Windows 7 starts. It is a good idea to check these every once in awhile to help make sure that some unknown program or malware has not placed itself to startup with Windows 7.
10. Set Unused Services to Manual
Services use processes that run in the background using part of your computer's resources. Check through your services with the help of the guide provided in this link, and stop and set to manual the services that affects features that you do not use or need to gain a tiny bit more performance. WARNING: Disabling the wrong service could hurt performance, or even cripple Windows 7. If you do not truly know what you are doing, then it's not recommended to do this.
11. Turn Off Unneeded Windows Features
Windows 7 includes many features. You can review the list of features and turn off the ones that you do not want or need.
12. Turn Off or Change Disk Defragmenter Schedule
By default Disk Defragmenter is scheduled to run in the background automatically every so often in Windows 7. Having this running in the background can cause a slight slow down and extra hard drive activity. You should either set the schedule to run at a time when you are not using the computer while it is on, or turn it off and run Disk Defragmenter manually when it is convenient for you instead.
13. Defragment Your Hard Drive
Fragmentation makes your hard disk do extra work that can slow down your computer. This will show you how to open and use Disk Defragmenter to manually analyze and defragment your disks and drives in Windows 7. Do not do this on a SSD though.
14. Disable Hibernate
If you do not use hibernate, then disabling it will save you a GB size file from being saved on your hard drive when you put the computer into hibernation mode. When hibernate is disabled, the shut down time will be shorter by not having to save memory to the hiberfil.sys file, but you will no longer be able to resume from hibernate for a quicker startup. If you like, using sleep instead of hibernate will allow a faster resume.
15. Turn Off System Protection
If hard drive space is at a high premium for you, then turning System Restore off will free up some hard drive space. When disabled it will also not run in the background anymore while it creates restore points. However, disabling System Restore will mean that there will be no restore points available to go back to quickly fix Windows 7 in the event of a problem with your Windows 7 system files instead of having to reinstall Windows 7. You will need to create backups or system images if you disable System Restore instead incase you need to reinstall.
16. Speed Up the Menu Show Time
This will allow you to reduce the amount of time it takes for a menu in Windows 7 to pop, fade, or slide open when you run the mouse pointer over it.
17. Enable High Performance in the Power Plan
This power plan maximizes system performance and responsiveness. However, if you use a mobile PC running on battery power, then you will notice that your battery doesn't last as long when using this plan.
18. Speed Up Mouse Hover Time
This will show you how to change the delay time, in milliseconds, that the mouse pointer has to stay hovered on a item before it is selected or opens a pop-up in Windows 7.
19. Reduce Time to Display Operating Systems at Boot
This will show you how to change the amount of time to display a list of operating systems in the Windows Boot Manager screen at boot and wait for you to select a OS to start before the default OS starts automatically. If you do not dual boot with another operating sytem on your computer, then you can uncheck, or reduce the time as low as it will go, to save on how long it takes to boot your computer.
20. Add or Remove Gadgets
Gadgets can be handy to offer information at a glance and provide easy access to frequently used tools from your dekstop. However, since each gadget added will take up some of your system resources. You can see how much memory is being used by the gadgets in Task Manager (Ctrl+Shift+Esc) under the Processes tab with the sidebar.exe process.
21. Run Disk Cleanup
Running Disk Cleanup every so often will help find and remove unnecessary files on your hard disk to free up disk space and help your computer run faster.
22. Speed Up Shut Down Time
This will allow you how to set the AutoEndTasks, HungAppTimeout, WaitToKillAppTimeout, and/or WaitToKillServiceTimeout values that Windows waits for programs to save data and close before shutting down.
23. Add COPY TO FOLDER and MOVE TO FOLDER to Context Menu
This will allow you how to add Copy To Folder and Move To Folder to the context menu to make copying and moving files faster and easier in Windows 7.
24. Log On Automatically to a User Account at Startup
This will show you how to select a user account to have Windows 7 automatically log on to at startup so that you do not have to spend time manually logging on to the user account everytime you start or restart the computer.
25. Disable Require a Password on Wakeup
If you use sleep, hybrid, or hibernate mode, then you may wish to disable the option to have your computer require you to enter a password everytime you wakeup the computer.
26. Use Sleep Mode
If your computer does not run primarily off of a battery, then using sleep mode will allow you to put your computer to sleep and wake it up quickly instead of completely shutting down and starting the computer.
27. Decrease How Long Windows 7 Notifications Stay Open
This will allow you to change how long notifications or messages are displayed in the Windows 7 taskbar notification area before they close automatically.
28. Disable Thumbnail Previews in Windows Explorer
If there are a lot of thumbnails in a Windows Explorer window, then it can slow down your computer while you wait for the thumbnails to load. If this happens or you prefer icons instead of thumbnails, then disabling thumbnails will speed up how fast a Windows Explorer window will open by displaying only icons instead of thumbnails.
29. Turn On ReadyBoost
You can use ReadyBoost in Windows 7 with USB flash drives and flash memory cards to help speed up your computer if it is low on RAM (memory).
30. Uninstall the Bloatware Programs from Your Computer
Most computers that you buy, at a retail store (OEM), have a ton of software installed on it. Some of these can take up a lot of resources. Uninstall the programs that you do not want to use from Programs and Features.
31. Disable Program Compatibility Assistant
If you are a system administrator who requires faster performance and are aware of the compatibility of the applications you are using, then disabling Program Compatibility Assistant (PCA) can be useful.
32. Scan your Computer for Malware or Spyware
If your computer has been infected with spyware or malware, then this they can cause all sorts of issues including slowing your computer down to a crawl. Be sure to scan your system with a good program like the free Windows Defender Offline, MSE, and Malwarebytes Free for malware (ex: virus) and spyware, and allow the program to remove any that may be found.
33. Move the "Page File" to be on a Separate Hard Disk
Moving the page file to a second physical hard drive instead of the same C: drive that Windows is on can help improve the performance of Windows 7 if the other hard drive is at least as fast or faster than the Windows drive.. Doing this allows Windows to use the page file on one drive while not having to interrupt reads or writes on the Windows drive. Be sure to let the page file be System Managed. Windows 7 does a great job of keeping your page file in peak condition and performance.
34. Keep your Index Enabled and Updated, or Disable the Index
Your needs for the index, searches, and libraries will determine what will be best for you. By default the index is enabled in Windows 7. If you do a lot of searches in specific locations or for specific file types, then searching using the index with these locations and file types added to be included in the index could help give you faster search results than doing non index searches. If you find that the index search results are not accurate, then rebuilding the index will update the index for accurate search results afterwards. If you like to only do non index searches to always have accurate search results, then you could either disable the index or set your Search options to not use the index when searching in file folders for system files. Non index searches will take a bit longer to give search results. If you disable the index, then this will help your HDD not run as much while the index (if enabled) automatically updates itself in the background when your computer is idle. If you disable the index, you will also no longer be able to search within libraries.
35. Set to Have "No GUI Boot"
Disabling GUI Boot can help reduce the amount of time it takes to startup Windows by a few seconds or so.
36. Set "Turn off hard disk after" to Never or Increase Time
While having your HDDs turn off after set x amount of idle minutes can help save energy, it can also cause your PC to pause while waiting for the HDD to spin back up when needed. You could either set this to never turn off the HDDs, or increase the amount of idle minutes before turning off the HDDs to avoid it being turned off while you may still use it and having to wait for it to spin back up as often.
37. Uninstall or Disable Unneeded Internet Explorer Add-ons and Toolbars
This is to only help with the performance of Internet Explorer (IE) than Windows, but disabling any unneeded installed add-ons and toolbars will help IE load and perform faster.
38. Clean Your Computer
Keeping the fans and inside of your computer clean and dust free can help prevent performance issues. Dust acts as an insulator, making it harder for your hardware to dissipate the buildup of heat. When this problem becomes significant enough for your computer to overheat, certain components such as your processor or graphics card may temporarily throttle back their clock speeds in order to prevent damage to your hardware.
39. Performance Optimization Guidelines for Windows 7 Desktop Virtualization
This downloadable .docx guide describes important tuning parameters and settings that you can adjust to improve the performance and energy efficiency of the Windows 7 operating system.
40. Use a Faster DNS Server
Most ISPs like to brag about how much bandwidth they are giving you, but they don't mind letting the rest of their infrastructure slowly get overwhelmed or deteriorate. Among the biggest offenders are the DNS servers our ISPs use. If you want to know why things seem to take forever to start loading, slow DNS servers are often the cause. You might consider adding or using a fast DNS server like Google Public DNS as your primary DNS server in your TCP/IP settings to see how it compares to your ISP.
41. Change Maximum Download Connections per Server Limit in Internet Explorer

Internet Explorer has a limit for the amount of simultaneously downloads per website or server.

• Internet Explorer 7 and earlier versions limit the number of files that you can download at one time to two by default.
• Internet Explorer 8 and Internet Explorer 9 limit the number of files that you can download at one time to six by default.
• Internet Explorer 10 and Internet Explorer 11 limit the number of files that you can download at one time to eight by default.

In addition, if you visit a website with lots of images (and supporting files like CSS styles and Javascript), then you could have a slower browsing experience. On average, your browser could have to make several requests to the site's server before it can finish loading the page. Requesting all the files needed to download with the default 8 (ex: IE11) at a time is going to be slower than requesting say 16 files at a time.

As internet connection speeds increase, the default number of simultaneous downloads to a single website or server may be to restrictive and not meet your needs.
I hope these help you,
Shawn

Related Tutorials

---

• How to See What Your Windows Restart Time is
• How to Speed Up Windows 7 Desktop and Shutdown
• Real world Windows 7 SSD tweaks and optimization
• How to Free Up and Recover Hard Drive Space in Windows 7
• How to Speed Up Performance of a Virtual Machine
• How to Generate and View a System Performance Report in Windows

 

[hcour]

Thanks for these excellent tips! I followed a few of your tweaking suggestions and my system is much more responsive. I especially notice that it is no longer sluggish when I'm copying/moving files. Great job!

 

[Brink]

You're most welcome hcour. I'm happy to hear that it was able to help.

 

[rkgnarnaul]

Thanxx 4 the tips, Very helpful............

 

[Brink]

You're most welcome rkgnarnaul.

 

[andreasandrews]

I think Swarfega did actually raise some valid questions that in some cases I already noticed were covered, and in other cases perhaps could have been highlighted a little more, such as the fact that although auto-login has a security risk, making sure you have a password enabled before/after setting the auto-login is a good measure to protect on the network. It can then be required to enter password after sleep/screensaver (which I'm not sure if it defeats the object - depends on screensaver/sleep time settings I guess). You did however mention the password and network issue in a post further down in the thread on the auto-login tutorial which prompted me to make sure I put one straight back on. I guess once you start working down the list and improving reboot time you ask yourself why you have a password until you think about networking and also later discover the auto-login feature.

I'm very much not sure about the write-caching myself. Although you did put sufficient warnings covering external disk drives, I feel that perhaps an internal disk-drive is just as risky in the case of a power-cut. I'm not fully sure how what the practicalities are of a power failure causing data loss and the risk factor between write caching on and off, so although I've left it on for now (default setting) I'm tempted to turn it on in my quest for performance and efficiency. I'm also doing video editing and on the one hand I want the best possible disk write speeds for creating render preview files etc. but on the other hand losing data is not something I wish to risk. Having said that certain contingencies can be (and are) in place so that during any particular transfer of data there is always a back-up. I wonder if the performance increase will be noticeable or if it is for anyone else?

Thanks for the list Shawn, it's been a great one to work down even when I thought I had already optimised things.

I have Windows remember my folders, is this something that will also slow things down (even when there aren't any folders left open on shut-down?)

Finally now I've done everything I think I'm going to reboot and see if my reported reboot time has improved. I'm almost certain that it will!

 

[Thaliur]

I'm very much not sure about the write-caching myself. Although you did put sufficient warnings covering external disk drives, I feel that perhaps an internal disk-drive is just as risky in the case of a power-cut.

That is true, at a power outage, both types of drives are equally threatened. It is far less likely to suddenly remove an internal drive by accident, though, which can easily happen with a USB disk.

 

[andreasandrews]

I'm very much not sure about the write-caching myself. Although you did put sufficient warnings covering external disk drives, I feel that perhaps an internal disk-drive is just as risky in the case of a power-cut.

That is true, at a power outage, both types of drives are equally threatened. It is far less likely to suddenly remove an internal drive by accident, though, which can easily happen with a USB disk.

A false sense of security when using internal drives? I don't know, as I'm not sure how the difference between a power-cut during a data transfer with write caching on compares to without. It's not something I particularly want to test with my hard-drives

My reboot time came to 159 secs, which isn't quite as fast as I had expected although my computer isn't the fastest I'm considering over-clocking this AMD quad core Bulldozer.. perhaps something to talk about on another thread. Hopefully I'll find one because I'm not sure where to start

 

[HoneycombAG]

#2: Where do I find the latest BIOS revision for my motherboard?
#3: If I might have less than enough RAM for the 64-bit edition of Windows 7, should I have opted to clean-install to the 32-bit edition instead?

 

[Brink]

Hello HoneycombAG,

Q1) I can't find the driver download page for that specific motherboard in your specs at the MSI website.

Q2) 2 GB of RAM meets the bare minimum requirements of 64-bit Windows 7, so you could go either way. Personally with that amount, you may see better performance with 32-bit Windows 7.

Hope this helps some,
Shawn

 

[HoneycombAG]

Even if my memory usage gets out of control on this system, how is it possible to keep usage under control?

This machine used to have 4GB installed, up until a RAM slot broke transferring the motherboard to a different case.

 

[Brink]

Memory usage is dependent on how much you have open and running at once. If you have your page file turned on and set to be managed by the system, then it will use the HDD as a buffer when memory runs low automatically. BY default the page file is set that way. Obviously the page file will be slower than memory (RAM), but it'll keep things running when memory is low.

 

[Infinite]

Nice list Shawn, however you could perhaps add to turn on "No GUI Boot" in msconfig to boot the PC faster.

 

[Brink]

Thank you for the tip Infinite. It may shave a couple of seconds without the GUI at boot. I'll do some playing with it tonight for a separate tutorial as well to reference in the list here.

 

[Brink]

Nice list Shawn, however you could perhaps add to turn on "No GUI Boot" in msconfig to boot the PC faster.

Thank you for the tip Infinite. It may shave a couple of seconds without the GUI at boot. I'll do some playing with it tonight for a separate tutorial as well to reference in the list here.

Ok. Added now as option 34.

 

[GrandServer]

Hi. Great tips.
However I would double check the Ready Boost option because if you have enough RAM on your system and the Service is constantly trying to find devices for itself then it will slow it down. It will also come up as an option when the selection box appears when you plug a flash drive in the computer.
I would not change any services either as I have experienced a slow down after disabling 2 or 3 services (Workstation, Ready Boost,Tablet PC). I am unsure about this info.

 

[shinyjanjan]

thank you

 

[bluezz]

thanx a lot for this wonderful tutorial. Helped a lot for a new user like myself. appreciate your great effort. Thanx again.

 

[Brink]

You're welcome bluezz, and welcome to Seven Forums.

 

[tweakradje]

I cannot make a nice tut like you. I have a few more that I use. Perhaps you can check them?

1) use rramdisk (gavotte or other) for swapfile and temporary internet files (HDD and SSD) use PAE if you have Windows 32 bits. Install rramdisk and then you can prepare it like this:

@echo off
REM ### 
REM ###  Installeert een Ramdisk op B: van 500+ Mb (waarschijnlijk 1 Gb)
REM ###  - driver wordt automatisch geinstalleerd (zie rramdrive.inf)
REM ###  - B: wordt geformatteerd, gecomprimeerd etc
REM ###  - Ramdrive wordt naar Registry weggeschreven, elke keer geladen na reboot
REM ### 


bcdedit /set pae forceenable

%~dp0devcon.exe install %~dp0rramdisk.inf RamDisk

echo Errorlevel devcon: %ERRORLEVEL%

FORMAT /FS:NTFS /Q /X /V:RamDisk-PAE /A:512 B:


Compact /c /s /a /f B:.

CHKDSK /L:2048 B:

CACLS B:\ /E /G USERS:C

MKDIR B:\TEMP
MKDIR "B:\Temporary Internet Files"

rdutil B: registry

echo.
echo "Ramdisk B: klaar.
echo.
Goto Einde

:Foutje
exit %ERRORLEVEL%

:Einde
exit 0

Use addswap.exe with Task Scheduler (run as SYSTEM) to add swapfile to B: at system startup:
addswap.exe B:\PageFile.sys 512 1024 (depend on how much RAM you have)
Turn off windows regular pagefiles.
For Chrome use policy for temp files:
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome]
"DiskCacheDir"="B:\\"

2) uninstall Windows Search, use things like Agent Ransack to search

3) uninstall all the Media Features, use things like vlc or mpc-hc and ffdshow

4) regsvr32 /u mf.dll (Media Foundation, DirectShow successor)

5) uninstall Tablet PC Components

6) use quiethdd.exe if you have HDD for maximizing HDD performance
Use Task Scheduler to run at system starttup, user SYSTEM. Example quietHDD.ini:

FirstRun = 0
AC_APM_Value = 254
DC_APM_Value = 254
AC_AAM_Value = 254
DC_AAM_Value = 254
AAMEnabled = 1
APMEnabled = 1

7) turn off "unnecessary" tasks in Task Scheduler, there are a lot

8) untick QoS Packet Scheduler for you Network adapter

9) Network Advanced Sharing Settings: 40 bit encryption, user usernames and password to connect to other computers for Home, Puiblic and Work Profiles

10) Turn Off Home Group Network
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\HomeGroup]
"DisableHomeGroup"=dword:00000001

11) Services set to manual (start 3): Windows update, Security Center etc. Only these running:

Application Information
ASLDR Service
ATKGFNEX Service
avast! Antivirus
Base Filtering Engine
CNG Key Isolation
COM+ Event System
Computer Browser
Cryptographic Services
DCOM Server Process Launcher
DHCP Client
Distributed Link Tracking Client
DNS Client
Extensible Authentication Protocol
Function Discovery Provider Host
Group Policy Client
Human Interface Device Access
IKE and AuthIP IPsec Keying Modules
IP Helper
IPsec Policy Agent
Network Connections
Network List Service
Network Location Awareness
Network Store Interface Service
NVIDIA Display Driver Service
NVIDIA Update Service Daemon
Plug and Play
PnP-X IP Bus Enumerator
Power
Print Spooler
Program Compatibility Assistant Service
Remote Procedure Call (RPC)
RPC Endpoint Mapper
Security Accounts Manager
Server
Shell Hardware Detection
Software Protection
SPP Notification Service
SSDP Discovery
System Event Notification Service
Task Scheduler
TCP/IP NetBIOS Helper
TeamViewer 5
Themes
Unsigned Themes
User Profile Service
Windows Audio
Windows Audio Endpoint Builder
Windows Connect Now - Config Registrar
Windows Driver Foundation - User-mode Driver Framework
Windows Event Log
Windows Firewall
Windows Font Cache Service
Windows Management Instrumentation
WLAN AutoConfig
Workstation

12) Use loads of other reg tweaks. To name a few:

;### better task priority schedule
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\PriorityControl]
"Win32PrioritySeparation"=dword:00000018

;### makes windows search dlls in windows folders first
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager]
"SafeDllSearchMode"=dword:00000001
"SafeProcessSearchMode"=dword:00000001

;### don't allow the kernel to be paged
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management]
"DisablePagingExecutive"=dword:00000001

;### Disable (Super)Prefetching for faster boot/less memory
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management\PrefetchParameters]
"EnablePrefetcher"=dword:00000002
"EnableSuperfetch"=dword:00000000

;### explorer tweaks
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer]
"DelaySendToMenuBuild"=dword:00000001
"DetailsPaneMaxAutoExtract"=dword:00000010
"MultipleInvokePromptMinimum"=dword:00000002
"StartupTroubleshoot"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
"DisablePreviewWindow"=dword:00000001
"FolderContentsInfoTip"=dword:00000000
"ForceOtherUsersOn"=dword:00000000
"LastActiveClick"=dword:00000000
"MaxUndoItems"=dword:0000ffff
"NavPaneExpandToCurrentFolder"=dword:00000000
"PrefetchAbove"=dword:00000000
"PrefetchBelow"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartPage]
"StartPanel_FadeDelay"=dword:00000190
"StartPanel_FadeIn"=dword:00000200
"StartPanel_FadeOut"=dword:00000100

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
"ServerAdminUI"=dword:00000001
"TypeAhead"=dword:00000000

;### use pre vista for older SMB/CIFS servers
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System]
"CopyFileBufferedSynchronousIo"=dword:00000001
"CopyFileChunkSize"=dword:00008000
"CopyFileOverlappedCount"=dword:00000010

;### don't manage bandwith on connected shares
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\LanmanWorkstation\Parameters]
"DisableBandwidthThrottling"=dword:00000001

;### Don't check continuously for inet connection
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\NlaSvc\Parameters\Internet]
EnableActiveProbing"=dword:00000000

;### No remote task schedule and printer queries
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\RemoteComputer\NameSpace\{2227A280-3AEA-1069-A2DE-08002B30309D}]
[-HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\RemoteComputer\NameSpace\{D6277990-4C6A-11CF-8D87-00AA0060F5BF}]

;### Some policies I use
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Attachments]
"ScanWithAntiVirus"=dword:00000003

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Comdlg32]
"NoBackButton"=dword:00000000
"NoFileMru"=dword:00000001
"NoPlacesBar"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\CredUI]
"EnableSecureCredentialPrompting"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"AllowFileCLSIDJunctions"=dword:00000001
"AlwaysShowClassicMenu"=dword:00000000
;### must be off else taskbar toolbar menu is grey
"ClassicShell"=dword:00000000
"ClearRecentDocsOnExit"=dword:00000000
"ConfirmFileDelete"=dword:00000001
"DisableCurrentUserRun"=dword:00000000
"DisableCurrentUserRunOnce"=dword:00000000
"DisableLocalMachineRun"=dword:00000000
"DisableLocalMachineRunOnce"=dword:00000000
"DisableThumbnails"=dword:00000000
"DisableThumbnailsOnNetworkFolders"=dword:00000001
"DontShowSuperHidden"=dword:00000000
"ForceClassicControlPanel"=dword:00000001
"ForceRunOnStartMenu"=dword:00000001
"HideClock"=dword:00000000
"HideRunAsVerb"=dword:00000000
"HideSCAHealth"=dword:00000001
"HideSCANetwork"=dword:00000000
"HideSCAPower"=dword:00000000
"HideSCAVolume"=dword:00000000
"InheritConsoleHandles"=dword:00000001
"LockTaskbar"=dword:00000000
"MaxRecentDocs"=dword:00000010
"MemCheckBoxInRunDlg"=dword:00000001
"NoAutoTrayNotify"=dword:00000000
"NoCDBurning"=dword:00000000
"NoChangeStartMenu"=dword:00000000
"NoClose"=dword:00000000
"NoCloseDragDropBands"=dword:00000000
"NoCommonGroups"=dword:00000000
"NoControlPanel"=dword:00000000
"NoCustomizeThisFolder"=dword:00000000
"NoCustomizeWebView"=dword:00000000
"NoDesktop"=dword:00000000
"NoDetailsThumbnailOnNetwork"=dword:00000001
"NoDriveAutoRun"=dword:000000ff
"NoDrives"=dword:00000000
"NoDriveTypeAutoRun"=dword:000000ff
"NoEncryption"=dword:00000000
"NoEncryptOnMove"=dword:00000000
"NoFileMenu"=dword:00000000
"NoFolderOptions"=dword:00000000
"NoInplaceSharing"=dword:00000000
"NoInstrumentation"=dword:00000000
"NoInternetIcon"=dword:00000000
"NoLowDiskSpaceChecks"=dword:00000000
"NoManageMyComputerVerb"=dword:00000000
"NoNetConnectDisconnect"=dword:00000000
"NoNetCrawling"=dword:00000001
"NoNetHood"=dword:00000000
"NoNTSecurity"=dword:00000000
"NoPreviewPane"=dword:00000001
"NoPropertiesMyComputer"=dword:00000000
"NoPropertiesRecycleBin"=dword:00000000
"NoReadingPane"=dword:00000001
"NoRecentDocsHistory"=dword:00000000
"NoRecentDocsMenu"=dword:00000000
"NoRecentDocsNetHood"=dword:00000001
"NoRecycleFiles"=dword:00000000
"NoRemoteChangeNotify"=dword:00000000
"NoRemoteRecursiveEvents"=dword:00000001
"NormalizeLinkNetPidls"=dword:00000000
"NoRun"=dword:00000000
"NoSaveSettings"=dword:00000000
"NoSearchFilesInStartMenu"=dword:00000000
"NoSearchFullText"=dword:00000000
"NoSendToMenu"=dword:00000000
"NoSetFolders"=dword:00000000
"NoSetTaskbar"=dword:00000000
"NoSimpleStartMenu"=dword:00000000
"NoSMConfigurePrograms"=dword:00000000
"NoSMHelp"=dword:00000000
"NoStartMenuMFUprogramsList"=dword:00000000
"NoStartMenuMorePrograms"=dword:00000000
"NoStartMenuPinnedList"=dword:00000000
"NoStartMenuSubFolders"=dword:00000000
"NoStrCmpLogical"=dword:00000000
"NoTaskGrouping"=dword:00000000
"NoThumbnailCache"=dword:00000001
"NoToolbarsOnTaskbar"=dword:00000000
"NoTrayContextMenu"=dword:00000000
"NoTrayItemsDisplay"=dword:00000000
"NoUserFolderInStartMenu"=dword:00000000
"NoViewContextMenu"=dword:00000000
"NoViewOnDrive"=dword:00000000
"NoWebView"=dword:00000000
"NoWinKeys"=dword:00000000
"PreventItemCreationInUsersFilesFolder"=dword:00000000
"PreXPSP2ShellProtocolBehavior"=dword:00000000
"QuickLaunchEnabled"=dword:00000001
"SeparateProcess"=dword:00000001
"StartRunNoHOMEPATH"=dword:00000001
"TaskbarLockAll"=dword:00000000
"TaskbarNoAddRemoveToolbar"=dword:00000000
"TaskbarNoNotification"=dword:00000000
"TaskbarNoRedock"=dword:00000000
"TaskbarNoResize"=dword:00000000
"TurnOffSPIAnimations"=dword:00000001
"UseDefaultTile"=dword:00000000
"UseDesktopIniCache"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System]
"ConsentPromptBehaviorAdmin"=dword:00000005
"ConsentPromptBehaviorUser"=dword:00000003
"DisableLockWorkstation"=dword:00000000
"DisableStatusMessages"=dword:00000000
"DisplayLastLogonInfo"=dword:00000000
"dontdisplaylastusername"=dword:00000000
;### 1=This option SHOULD be used to heuristically detect applications that require an elevation of privilege to install
"EnableInstallerDetection"=dword:00000001
;### 1=This policy enables the "administrator in Admin Approval Mode" user type
;### while also enabling all other User Account Control (UAC) policies.
"EnableLUA"=dword:00000001
;### 1=Only elevate UIAccess applications that are installed in secure locations
"EnableSecureUIAPaths"=dword:00000001
;### 1=Allow UIAccess applications to prompt for elevation without using the secure desktop
"EnableUIADesktopToggle"=dword:00000001
;### 1=Virtualize file and registry write failures to per-user locations
"EnableVirtualization"=dword:00000001
;### 1=Only the built-in administrator account (RID 500) is placed into Admin Approval Mode.
;### Approval is required when performing administrative tasks
"FilterAdministratorToken"=dword:00000000
"HideFastUserSwitching"=dword:00000000
"legalnoticecaption"=""
"legalnoticetext"=""
;### 1=This policy will force all UAC prompts to happen on the user's secure desktop.
 "PromptOnSecureDesktop"=dword:00000001
;### smart card logon also see winlogon\scremoveoption
"scforceoption"=dword:00000000
"shutdownwithoutlogon"=dword:00000001
"undockwithoutlogon"=dword:00000001
;### 1=Enforce cryptographic signatures on any interactive application that requests
;### elevation of privilege
"ValidateAdminCodeSignatures"=dword:00000000
"VerboseStatus"=dword:00000001
;### UAC settings used here: http://msdn.microsoft.com/en-us/library/cc232763(v=prot.20).aspx

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Explorer]
"AddSearchInternetLinkInStartMenu"=dword:00000000
"AllowCLSIDPROGIDMapping"=dword:00000001
"DisableIndexedLibraryExperience"=dword:00000001
"DisableKnownFolders.OFF"=hex(7):00,00
"DisableThumbsDBOnNetworkFolders"=dword:00000001
"ForceExpandedSaveDialog"=dword:00000001
"NoAutoplayfornonVolume"=dword:00000000
"NoBrowserClose"=dword:00000000
"NoDataExecutionPrevention"=dword:00000000
"NoPinningToDestinations"=dword:00000000
"NoRemoteDestinations"=dword:00000000
"NoRestartOnTimer"=dword:00000000
"NoSearchEverywhereLinkInStartMenu"=dword:00000000
"NoStartMenuDownloads"=dword:00000000
"NoStartMenuHomegroup"=dword:00000001
"NoStartMenuRecordedTV"=dword:00000001
"NoStartMenuVideos"=dword:00000000
"NoWindowMinimizingShortcuts"=dword:00000001
"PowerButtonAction"=dword:00000010
"SkipNetworkShieldCheck"=dword:00000001
"TaskbarNoPinnedList"=dword:00000000
"UseFindFirstFileEnumeration"=dword:00000001

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Installer]
"MaxPatchCacheSize"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Psched]
"NonBestEffortLimit"=dword:00000000

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsMediaPlayer]
"DisableAutoUpdate"=dword:00000001
"EnableAutoUpgrade"="No"
"PreventLibrarySharing"=dword:00000001

And many more. Pick only what you like

Cheers

 

[ajmich]

Superb tutorial, thanks a heap! Since 35 steps will intimidate the faint of heart, maybe add a provision for that. Insure that the steps are in order of importance/ overall effectiveness, then add a note at the beginning for Noobs to the effect that, if doing this entire tutorial seems too much, don't run away, just work the first 5 (or 10) steps.

Seems minor, but I used to prepare step-by-step instructions for clients and too often they would freak out when they caught first glimpse of such a long list of steps. Anyway if they aren't already, wouldn't it be beneficial to place the steps in priority order? Anyway thanks again for this -- I know how time consuming it can be to prep such a list while keeping in mind the various "comfort zones" of those who will read it! Keep up the fine work. Alex.