new section for windows 10
new section for windows 10
really i have asking, time for create windows 10 subforum havn't come yet?
-
=[FEAR]=JIGSAW
- Posts: 413
- Joined: Mon Feb 18, 2008 11:54 am
- Location: Cape Town, South Africa
-
=[FEAR]=JIGSAW
- Posts: 413
- Joined: Mon Feb 18, 2008 11:54 am
- Location: Cape Town, South Africa
-
Atari800xl
- Posts: 346
- Joined: Sun Dec 30, 2012 5:46 pm
- Location: NL
I agree. With some tweaking, Win10 is not too bad.
That's why it could be a good idea to have a Win10 section here: to share these tweaks, so we can all learn how to modify it to suit our needs.
One of the things I "do not hate" about Win10 is that the install(wim) files haven't really grown since Win7 times, imagine if the "growth" between xp -> vista would have continued, in that case we would have 100gb setup files by now. In most cases, Win10 works quite well on older hardware. But again, it might need some tweaking here and there.
That's why it could be a good idea to have a Win10 section here: to share these tweaks, so we can all learn how to modify it to suit our needs.
One of the things I "do not hate" about Win10 is that the install(wim) files haven't really grown since Win7 times, imagine if the "growth" between xp -> vista would have continued, in that case we would have 100gb setup files by now. In most cases, Win10 works quite well on older hardware. But again, it might need some tweaking here and there.
Indeed.. But after a lot of tweaking it can become rather fast and reliable.GH0st wrote:Win10 is EEEVVVIIILLL
It would be interesting to have new thread just to discuss what tweaks should be made for Windows 10 to become a real power user OS.
Last edited by harkaz on Thu Jan 16, 2020 3:26 am, edited 1 time in total.
Windows XP Unofficial SP4 (2014, 2016, and 2019): https://ryanvm.net/forum/viewtopic.php?t=10321
Non-IT stuff:
Retinal changes in schizophrenia (2019): https://academic.oup.com/schizophreniab ... 06/5598443
Πᾶσά τε ἐπιστήμη χωριζομένη δικαιοσύνης καὶ τῆς ἄλλης ἀρετῆς πανουργία, οὐ σοφία φαίνεται. (Plato)
Non-IT stuff:
Retinal changes in schizophrenia (2019): https://academic.oup.com/schizophreniab ... 06/5598443
Πᾶσά τε ἐπιστήμη χωριζομένη δικαιοσύνης καὶ τῆς ἄλλης ἀρετῆς πανουργία, οὐ σοφία φαίνεται. (Plato)
It all depends on the level of privacy you require and the time you are ready to spend.
I'm ready for more thorough discussion.
I'm ready for more thorough discussion.
Windows XP Unofficial SP4 (2014, 2016, and 2019): https://ryanvm.net/forum/viewtopic.php?t=10321
Non-IT stuff:
Retinal changes in schizophrenia (2019): https://academic.oup.com/schizophreniab ... 06/5598443
Πᾶσά τε ἐπιστήμη χωριζομένη δικαιοσύνης καὶ τῆς ἄλλης ἀρετῆς πανουργία, οὐ σοφία φαίνεται. (Plato)
Non-IT stuff:
Retinal changes in schizophrenia (2019): https://academic.oup.com/schizophreniab ... 06/5598443
Πᾶσά τε ἐπιστήμη χωριζομένη δικαιοσύνης καὶ τῆς ἄλλης ἀρετῆς πανουργία, οὐ σοφία φαίνεται. (Plato)
Windows 10 Privacy Checklist
Well, ensuring privacy is not easy in any non-amnesic OS.
Windows 10 is very powerful and has many security enhancements over its predecessors.
However, it has so many ways to collect data and report them to the WWW.
Microsoft, however, gives the enterprise documented ways to turn most of the stuff off.
GPO (Group policy) is the most important method an organization can use to configure privacy in its PCs.
2 axioms in Windows 10 privacy:
- When you hear "modern" apps think "information exposure"
- It logs all the time and tries to perform "diagnostics" by sending "anonymous" data online
Step 1: Select a stable, well-supported base to tweak for privacy
If you're using Windows 10 Home or Pro you must change to Enterprise.
But not the standard Windows 10 Enterprise. Windows 10 Enterprise has modern stuff which is BAD for privacy
There is a trimmed-down, long-term support flavour of Windows 10 Enterprise called Windows 10 Enterprise LTSB.
This is updated every 2-3 years and each version is supported for 10 years.
All modern stuff except things required for the semi-modern Explorer (+2 useless apps which can be manually removed) have been completely removed. Instead of the modern Edge and Calculator, IE11 and Windows 7 Calculator are present.
Cortana is not available and search is limited to local system only (another very important change).
Step 2: Select the appropriate GPO settings
This is a long part. I'm going to provide a list of recommended settings here. The ISO I offer is more generic, but here I will go even further to disable even more stuff (like Windows Update).
Yes, you here me right Windows Update should be disabled for max privacy. There are tools like WHDownloader to manually download the latest updates and apply them to your system.
Windows Defender should be disabled permanently, but due to its tight WMI integration I recommend against removing the respective CBS packages. There will remain invalid file references in registry and Action Center will still behave like Windows Defender should be preinstalled, even if you remove its entry from the WMI database.
Actually if you seriously concerned about your privacy, don't use an antivirus at all. You are the best antivirus, carefully select and install as less programs as possible and carefully configure them. If you're afraid of removable media you could deny execute rights to them via GPO.
A reliable firewall is however essential to monitor traffic and prevent attacks.
Windows 10 Enterprise also offers a new feature called Virtualization-based security.
That means: "Windows services that manage derived domain credentials and other secrets run in a protected environment that is isolated from the running operating system". This can be enabled via GPO.
Microsoft Accounts, Xbox, Modern app development, Family Safety, Homegroup: Isolation is essential for privacy. So everything like that needs to be turned off via GPO. In the case of Microsoft Accounts, you have basically two options:
- Disable new account creation
- Disable new account creation and logon
The latter is best in terms of privacy. However, the built-in Windows Recovery Environment will not be able to recognize any Admin accounts in your system. This will prevent you from using Startup repair, command prompt, etc. You will still be able to reset your PC and of course use recovery media.
Encrypt the Page file, remove it at shutdown: ENABLE these at GPO.
Turn off all location services permanently.
Minimize all connectivity, diagnostics and other telemetry stuff. You will get a full list later.
So these gives you a first idea of what could be done to increase privacy via GPO.
3. Disable WMI logging (includes Event log) and delete the existing log files.
This is essential for string privacy. Windows constantly logs stuff to help diagnose problems.
Although this may be important for massive deployment, so that system admins can quickly evaluate issues, we could not care less on privacy-oriented system. Not only will this increase performance, but also it will be significantly more difficult to understand/analyse what someone is doing on their system. Of course, logging is not limited to WMI. We will proceed even further and try to disable logging as much as we can.
4. Disable or even delete Scheduled Tasks that could compromise privacy.
5. Remove telemetry/diagtrack packages and disable the respective services.
6. Delete all IE history at exit. Will try to find a way to fully disable Explorer history. Alternatively, we will create a Scheduled Task to automatically remove all explorer history per user at logoff.
The list will only grow as I'm working on it.
Windows 10 is very powerful and has many security enhancements over its predecessors.
However, it has so many ways to collect data and report them to the WWW.
Microsoft, however, gives the enterprise documented ways to turn most of the stuff off.
GPO (Group policy) is the most important method an organization can use to configure privacy in its PCs.
2 axioms in Windows 10 privacy:
- When you hear "modern" apps think "information exposure"
- It logs all the time and tries to perform "diagnostics" by sending "anonymous" data online
Step 1: Select a stable, well-supported base to tweak for privacy
If you're using Windows 10 Home or Pro you must change to Enterprise.
But not the standard Windows 10 Enterprise. Windows 10 Enterprise has modern stuff which is BAD for privacy
There is a trimmed-down, long-term support flavour of Windows 10 Enterprise called Windows 10 Enterprise LTSB.
This is updated every 2-3 years and each version is supported for 10 years.
All modern stuff except things required for the semi-modern Explorer (+2 useless apps which can be manually removed) have been completely removed. Instead of the modern Edge and Calculator, IE11 and Windows 7 Calculator are present.
Cortana is not available and search is limited to local system only (another very important change).
Step 2: Select the appropriate GPO settings
This is a long part. I'm going to provide a list of recommended settings here. The ISO I offer is more generic, but here I will go even further to disable even more stuff (like Windows Update).
Yes, you here me right Windows Update should be disabled for max privacy. There are tools like WHDownloader to manually download the latest updates and apply them to your system.
Windows Defender should be disabled permanently, but due to its tight WMI integration I recommend against removing the respective CBS packages. There will remain invalid file references in registry and Action Center will still behave like Windows Defender should be preinstalled, even if you remove its entry from the WMI database.
Actually if you seriously concerned about your privacy, don't use an antivirus at all. You are the best antivirus, carefully select and install as less programs as possible and carefully configure them. If you're afraid of removable media you could deny execute rights to them via GPO.
A reliable firewall is however essential to monitor traffic and prevent attacks.
Windows 10 Enterprise also offers a new feature called Virtualization-based security.
That means: "Windows services that manage derived domain credentials and other secrets run in a protected environment that is isolated from the running operating system". This can be enabled via GPO.
Microsoft Accounts, Xbox, Modern app development, Family Safety, Homegroup: Isolation is essential for privacy. So everything like that needs to be turned off via GPO. In the case of Microsoft Accounts, you have basically two options:
- Disable new account creation
- Disable new account creation and logon
The latter is best in terms of privacy. However, the built-in Windows Recovery Environment will not be able to recognize any Admin accounts in your system. This will prevent you from using Startup repair, command prompt, etc. You will still be able to reset your PC and of course use recovery media.
Encrypt the Page file, remove it at shutdown: ENABLE these at GPO.
Turn off all location services permanently.
Minimize all connectivity, diagnostics and other telemetry stuff. You will get a full list later.
So these gives you a first idea of what could be done to increase privacy via GPO.
3. Disable WMI logging (includes Event log) and delete the existing log files.
This is essential for string privacy. Windows constantly logs stuff to help diagnose problems.
Although this may be important for massive deployment, so that system admins can quickly evaluate issues, we could not care less on privacy-oriented system. Not only will this increase performance, but also it will be significantly more difficult to understand/analyse what someone is doing on their system. Of course, logging is not limited to WMI. We will proceed even further and try to disable logging as much as we can.
4. Disable or even delete Scheduled Tasks that could compromise privacy.
5. Remove telemetry/diagtrack packages and disable the respective services.
6. Delete all IE history at exit. Will try to find a way to fully disable Explorer history. Alternatively, we will create a Scheduled Task to automatically remove all explorer history per user at logoff.
The list will only grow as I'm working on it.
Windows XP Unofficial SP4 (2014, 2016, and 2019): https://ryanvm.net/forum/viewtopic.php?t=10321
Non-IT stuff:
Retinal changes in schizophrenia (2019): https://academic.oup.com/schizophreniab ... 06/5598443
Πᾶσά τε ἐπιστήμη χωριζομένη δικαιοσύνης καὶ τῆς ἄλλης ἀρετῆς πανουργία, οὐ σοφία φαίνεται. (Plato)
Non-IT stuff:
Retinal changes in schizophrenia (2019): https://academic.oup.com/schizophreniab ... 06/5598443
Πᾶσά τε ἐπιστήμη χωριζομένη δικαιοσύνης καὶ τῆς ἄλλης ἀρετῆς πανουργία, οὐ σοφία φαίνεται. (Plato)
AFAIK, if you are not going to use modern apps and/or the store, the only thing that Windows 10 can do that Windows 7 cannot is run DirectX 12. (Yet, since there are folks that are trying to port DirectX 12 to Windows 7.) And if that is not a concern, I have not seen anyone able to prove that real world performance is any better for Windows 10, in fact instead they have proved that Windows 7 performs better. ( I am totally discounting the faster startup that some claim for Windows 10 since for the most part it is due to the hybrid start which is really just hibernation, and even if it were faster, the percentage of time involved in startup vs actually using the PC makes it totally overshadowed.)
So to answer your question, in my mind no it is not worth it.
And to show my admittedly prejudiced true feelings for the OS, I think this is a totally epic rant about Windows 10 - https://www.youtube.com/watch?v=YCqw9FmBgKY.
BUT, if it works for you and you're happy with it, then that's great, as long as you don't force it on me.
And I do agree, for the convenience of those that want or have to use Windows 10, that there should be a section created at RyanVM for it.
Cheers and Regards
So to answer your question, in my mind no it is not worth it.
And to show my admittedly prejudiced true feelings for the OS, I think this is a totally epic rant about Windows 10 - https://www.youtube.com/watch?v=YCqw9FmBgKY.
BUT, if it works for you and you're happy with it, then that's great, as long as you don't force it on me.
And I do agree, for the convenience of those that want or have to use Windows 10, that there should be a section created at RyanVM for it.
Cheers and Regards
windows 10 is better than 8.1
Last edited by spawn on Fri Mar 25, 2016 7:45 pm, edited 1 time in total.
-
Atari800xl
- Posts: 346
- Joined: Sun Dec 30, 2012 5:46 pm
- Location: NL
after xp ms updated their code make pc more slower simply resoarce hog that i can say.bphlpt wrote:AFAIK, if you are not going to use modern apps and/or the store, the only thing that Windows 10 can do that Windows 7 cannot is run DirectX 12. (Yet, since there are folks that are trying to port DirectX 12 to Windows 7.) And if that is not a concern, I have not seen anyone able to prove that real world performance is any better for Windows 10, in fact instead they have proved that Windows 7 performs better. ( I am totally discounting the faster startup that some claim for Windows 10 since for the most part it is due to the hybrid start which is really just hibernation, and even if it were faster, the percentage of time involved in startup vs actually using the PC makes it totally overshadowed.)
So to answer your question, in my mind no it is not worth it.
And to show my admittedly prejudiced true feelings for the OS, I think this is a totally epic rant about Windows 10 - https://www.youtube.com/watch?v=YCqw9FmBgKY.
BUT, if it works for you and you're happy with it, then that's great, as long as you don't force it on me.
And I do agree, for the convenience of those that want or have to use Windows 10, that there should be a section created at RyanVM for it.
Cheers and Regards
From my test , why? XP is still best
I have compared windows 7 / 8.1 /xp/10 in this case.(all of them are tweaked for maximum performance)
*Starter up is faster even than 7/8.1(it only taken 12sec where 10 taken 17sec and 7 taken 43 sec, for get write about 8.1 in diary)
*Speed of printing via printer through LAN is much faster than newer os.
*Speed of opening photoshop cs8 , gimp, pagemaker, img burn , firefox and other is much faster in xp rather mordern os
*Rate of getting crashed or blue screan is very low if i compare with 7/8/8.1 or 10
*Copy speed of xp is more faster than 7/8.1 and 10
*More FPS In games under xp
*Less resoarce usage under xp
*Opening and sharing network and files over lan is much faster than 7/8.1 and 10
Have multi-boot system: XP Pro w/SP2 x64, Win7 w/SP1 64bit , Win10 (upgraded 8.1) 64bit , Win10 Insider Preview Build 14295 64bit. My #2 system has XP Pro w/SP3.
Not impressed with either version of Win10 - really just using them to stay familiar with Microsoft's follies.
I use Win7 as my main operating system.
Not impressed with either version of Win10 - really just using them to stay familiar with Microsoft's follies.
I use Win7 as my main operating system.
Re: new section for windows 10
I dont want to do 10 ... prolly should force myself to learn linux ... but .... any updates from Harkaz as to Win10? There was a LTSB version running around, then it disappeared ... is Win10 Enterprise LTSB still the way to go, or way to tweak the main stream HOME version to safety? Is it worth the effort?
-
=[FEAR]=JIGSAW
- Posts: 413
- Joined: Mon Feb 18, 2008 11:54 am
- Location: Cape Town, South Africa
Re: new section for windows 10
try this maybe?GH0st wrote: ↑Thu Apr 08, 2021 5:05 amI dont want to do 10 ... prolly should force myself to learn linux ... but .... any updates from Harkaz as to Win10? There was a LTSB version running around, then it disappeared ... is Win10 Enterprise LTSB still the way to go, or way to tweak the main stream HOME version to safety? Is it worth the effort?
Code: Select all
https://youtu.be/WxMqtyNJOkk
Re: new section for windows 10
lol windows 11 round the corner now