1803_VDI_Configuration.ps1

#Requires -RunAsAdministrator
<#
- TITLE:          Microsoft Windows 1803  VDI Cleanup Script
- AUTHORED BY:    Robert M. Smith, and Tim Muessig
- AUTHORED DATE:  01/10/2019
- PURPOSE:        To automatically apply setting referenced in white paper:
                  "Optimizing Windows 10, Build 1803, for a Virtual Desktop Infrastructure (VDI) role"
                  URL: TBD

- DEPENDENCIES    1. LGPO.EXE (available at https://www.microsoft.com/en-us/download/details.aspx?id=55319)
                  2. Previously saved local group policy settings, available on the GitHub site where this script is located
                  3. This PowerShell script

- REFERENCES:
https://social.technet.microsoft.com/wiki/contents/articles/7703.powershell-running-executables.aspx
https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.management/remove-item?view=powershell-6
https://blogs.technet.microsoft.com/secguide/2016/01/21/lgpo-exe-local-group-policy-object-utility-v1-0/
https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.management/set-service?view=powershell-6
https://docs.microsoft.com/en-us/powershell/module/microsoft.powershell.management/remove-item?view=powershell-6
https://msdn.microsoft.com/en-us/library/cc422938.aspx

<# Categories of cleanup items:
- Appx package cleanup                 - Complete
- Scheduled tasks                      - Complete
- Automatic Windows traces             - Complete
- OneDrive cleanup                     - Complete
- Local group policy                   - Complete
- System services                      - Complete
- Disk cleanup                         - Complete
- Default User Profile Customization   - Complete

This script is dependant on three elements:
LGPO Settings folder, applied with the LGPO.exe Microsoft app



the following is the list of almost all the UWP application packages that can be removed with PowerShell, interactively.  
The Store and a few others, such as Wallet, were left off intentionally.  Though it is possible to remove the Store app, 
it is nearly impossible to get it back.  Please review the lists below and comment out or remove references to packages that you do not want to remove.
#>

#region Begin Clean APPX Packages
Set-Location $PSScriptRoot

If (Test-Path .\AppXPackages.txt)
{
    $AppxPackage = Get-Content .\AppXPackages.txt
}

If ($AppxPackage.Count -gt 0)
{
    Foreach ($Item in $AppxPackage)
    {
        $Package = "*$Item*"
        Get-AppxPackage                    | Where-Object {$_.PackageFullName -like $Package} | Remove-AppxPackage
        Get-AppxPackage -AllUsers          | Where-Object {$_.PackageFullName -like $Package} | Remove-AppxPackage -AllUsers
        Get-AppxProvisionedPackage -Online | Where-Object {$_.PackageName -like $Package}     | Remove-AppxProvisionedPackage -Online
    }
}
#endregion

#region Disable Scheduled Tasks

# This section is for disabling scheduled tasks.  If you find a task that should not be disabled
# comment or delete from the "SchTaskList.txt" file.
If (Test-Path .\SchTaskList.txt)
{
    $SchTasksList = Get-Content .\SchTaskList.txt
}
If ($SchTasksList.count -gt 0)
{
    Foreach ($Item in $SchTasksList)
    {
        Get-ScheduledTask | Where-Object {$_.TaskName -like "$($Item.trim())"} | Disable-ScheduledTask
    }
}
#endregion

#region Customize Default User Profile

# End the OneDrive.exe and Explorer.exe processes, then uninstall OneDrive.exe
# Then remove leftover OneDrive .lnk files

Get-Process OneDrive | Stop-Process -Force
Get-Process explorer | Stop-Process -Force

if (Test-Path "C:\Windows\System32\OneDriveSetup.exe")
{
    Start-Process "C:\Windows\System32\OneDriveSetup.exe" -ArgumentList "/uninstall" -Wait
}

if (Test-Path "C:\Windows\SysWOW64\OneDriveSetup.exe")
{
    Start-Process "C:\Windows\SysWOW64\OneDriveSetup.exe" -ArgumentList "/uninstall" -Wait
}

Remove-Item -Path "C:\Windows\ServiceProfiles\LocalService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk" -Force
Remove-Item -Path "C:\Windows\ServiceProfiles\NetworkService\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk" -Force

# Remove the automatic start item for OneDrive from the default user profile registry hive
# and while NTUSER.DAT is open, apply appearance customizations, then close hive file

If (Test-Path .\DefaultUserSettings.txt)
{
    $DefaultUserSettings = Get-Content .\DefaultUserSettings.txt
}
If ($DefaultUserSettings.count -gt 0)
{
    Foreach ($Item in $DefaultUserSettings)
    {
        Start-Process C:\Windows\System32\Reg.exe -ArgumentList "$Item" -Wait 
    }
}

# Restart the previously closed Explorer.exe process
Start-Process -FilePath C:\Windows\Explorer.exe -Wait 
#endregion

#region Disable Windows Traces
If (Test-Path .\ServicesAutologgers.txt)
{
    $DisableAutologgers = Get-Content .\ServicesAutologgers.txt
}

If ($DisableAutologgers.count -gt 0)
{
    Foreach ($Item in $DisableAutologgers)
    {
        Write-Host "Processing $Item"
        New-ItemProperty -Path "$Item" -Name "Start" -PropertyType "DWORD" -Value "0" -Force
    }
}
#endregion

#region Local Group Policy Settings
# - This code does not:
#   * set a lock screen image.
#   * change the "Root Certificates Update" policy.
#   * change the "Enable Windows NTP Client" setting.
#   * set the "Select when Quality Updates are received" policy

if (Test-Path (Join-Path $PSScriptRoot "LGPO\LGPO.exe")) 
{
    Start-Process (Join-Path $PSScriptRoot "LGPO\LGPO.exe") -ArgumentList "/g $((Join-Path $PSScriptRoot "LGPO\VDI_OptimalSettings"))" -Wait
}
#endregion

#region Disable Services
#################### BEGIN: DISABLE SERVICES section ###########################
If (Test-Path .\ServicesDisable.txt)
 
{
    $ServicesToDisable = Get-Content .\ServicesDisable.txt
}

If ($ServicesToDisable.count -gt 0)
{
    Foreach ($Item in $ServicesToDisable)
    {
        Write-Host "Processing $Item"
        New-ItemProperty -Path "$Item" -Name "Start" -PropertyType "DWORD" -Value "4" -Force
    }
}
#endregion

#region Disk Cleanup
#################### BEGIN: DISK CLEANUP section ###########################
# Delete not in-use *.tmp files

$FilesToRemove = Get-ChildItem -Path c:\ -Include *.tmp, *.etl -Recurse -ErrorAction SilentlyContinue
$FilesToRemove | Remove-Item -ErrorAction SilentlyContinue


# Delete not in-use anything in your %temp% folder
Remove-Item -Path $env:TEMP\*.* -Recurse

# Delete not in-use anything in the C:\Windows\Temp folder
Remove-Item -Path $env:windir\Temp\*.* -Recurse 

# Disk Cleanup Wizard automation (Cleanmgr.exe /SAGESET:11)
# If you prefer to skip a particular disk cleanup category, edit the "DiskCleanRegSettings.txt"
If (Test-Path .\DiskCleanRegSettings.txt)
{
    $DiskCleanupSettings = Get-Content .\DiskCleanRegSettings.txt
}
If ($DiskCleanupSettings.count -gt 0)
{
    Foreach ($Item in $DiskCleanupSettings)
    {
        Write-Host "Processing $Item"
        New-ItemProperty -Path "$Item" -Name "StateFlags0011" -PropertyType "DWORD" -Value "2" -Force
    }
}
Start-Process C:\Windows\System32\Cleanmgr.exe -ArgumentList "SAGERUN:11" -Wait
#endregion

#region Network Optimization
# LanManWorkstation optimizations
New-ItemProperty -Path "HKLM:\System\CurrentControlSet\Services\LanmanWorkstation\Parameters\" -Name "DisableBandwidthThrottling" -PropertyType "DWORD" -Value "1" -Force
New-ItemProperty -Path "HKLM:\System\CurrentControlSet\Services\LanmanWorkstation\Parameters\" -Name "FileInfoCacheEntriesMax" -PropertyType "DWORD" -Value "1024" -Force
New-ItemProperty -Path "HKLM:\System\CurrentControlSet\Services\LanmanWorkstation\Parameters\" -Name "DirectoryCacheEntriesMax" -PropertyType "DWORD" -Value "1024" -Force
New-ItemProperty -Path "HKLM:\System\CurrentControlSet\Services\LanmanWorkstation\Parameters\" -Name "FileNotFoundCacheEntriesMax" -PropertyType "DWORD" -Value "1024" -Force
New-ItemProperty -Path "HKLM:\System\CurrentControlSet\Services\LanmanWorkstation\Parameters\" -Name "DormantFileLimit" -PropertyType "DWORD" -Value "256" -Force

# NIC Advanced Properties performance settings for network biased environments
Set-NetAdapterAdvancedProperty -DisplayName "Send Buffer Size" -DisplayValue 4MB

<# Note that the above setting is for a Microsoft Hyper-V VM.  You can adjust these values in your environment...
by querying in PowerShell using Get-NetAdapterAdvancedProperty, and then adjusting values using the...
Set-NetAdapterAdvancedProperty command.
#>
#endregion

########################  END OF SCRIPT  ########################