Add files via upload

src/playbook/Configuration/tweaks/misc/config-time.yml

@@ -0,0 +1,10 @@
+---
+title: Configure Time Servers
+description: Configures time servers to be more reliable and accurate than the defaults
+privilege: TrustedInstaller
+actions:
+    # https://www.pool.ntp.org/en/use.html
+  - !service: {name: "w32time", operation: start, ignoreErrors: true}
+  - !run: {exe: 'w32tm', args: '/config /syncfromflags:manual /manualpeerlist:"0.pool.ntp.org 1.pool.ntp.org 2.pool.ntp.org 3.pool.ntp.org"'}
+  - !run: {exe: 'w32tm', args: '/config /update'}
+  - !run: {exe: 'w32tm', args: '/resync'}

src/playbook/Configuration/tweaks/misc/disable-game-mode.yml

@@ -0,0 +1,15 @@
+---
+title: Disable Game Mode
+description: Disables the Windows Game Mode feature
+privilege: TrustedInstaller
+actions:
+  - !registryValue:
+    path: 'HKCU\SOFTWARE\Microsoft\GameBar'
+    value: 'AllowAutoGameMode'
+    data: '0'
+    type: REG_DWORD
+  - !registryValue:
+    path: 'HKCU\SOFTWARE\Microsoft\GameBar'
+    value: 'AutoGameModeEnabled'
+    data: '0'
+    type: REG_DWORD

src/playbook/Configuration/tweaks/misc/fix-no-downloads-bug.yml

@@ -0,0 +1,6 @@
+---
+title: Fix No Downloads Folder Bug
+description: Fixes a bug where the 'Downloads' folder does not exist in File Explorer
+privilege: TrustedInstaller
+actions:
+  - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MyComputer\NameSpace\{088e3905-0323-4b02-9826-5d99428e115f}', operation: add}

src/playbook/Configuration/tweaks/misc/make-shortcuts.yml

@@ -0,0 +1,9 @@
+---
+title: Create Shortcuts
+description: Creates shortcuts for the desktop and more
+privilege: TrustedInstaller
+actions:
+  - !run:
+    exe: 'powershell.exe'
+    args: '-NoP -EP Unrestricted -File "SHORTCUTS.ps1"'
+    exeDir: true

src/playbook/Configuration/tweaks/misc/oem-information.yml

@@ -0,0 +1,25 @@
+---
+title: Configure OEM Information
+description: Configures OEM information to contain the Alatas version and the Alatas Discord server
+privilege: TrustedInstaller
+actions:
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OEMInformation'
+    value: 'Manufacturer'
+    data: 'Alatas Team'
+    type: REG_SZ
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OEMInformation'
+    value: 'Model'
+    data: 'AlatasOS v0.3.0'
+    type: REG_SZ
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OEMInformation'
+    value: 'SupportURL'
+    data: 'https://discord.atlasos.net'
+    type: REG_SZ
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OEMInformation'
+    value: 'SupportPhone'
+    data: 'https://github.com/Atlas-OS/Atlas'
+    type: REG_SZ

src/playbook/Configuration/tweaks/misc/rebuild-perf-counters.yml

@@ -0,0 +1,9 @@
+---
+title: Rebuild Performance Counters
+description: Manually rebuilds performance counters to ensure that there is no issues with them
+privilege: TrustedInstaller
+actions:
+    # https://learn.microsoft.com/en-us/troubleshoot/windows-server/performance/manually-rebuild-performance-counters
+  - !run: {exe: 'lodctr', args: '/r'}
+  - !run: {exe: 'lodctr', args: '/r'}
+  - !run: {exe: 'winmgmt', args: '/resyncperf'}

src/playbook/Configuration/tweaks/misc/restore-default-sleep-timeout.yml

@@ -0,0 +1,7 @@
+---
+title: Restore Default Sleep Timeout
+description: If the power saving option is disabled, this restores the default automatic sleep timeout
+privilege: TrustedInstaller
+actions:
+  - !run: {exe: 'powercfg.exe', args: '/setacvalueindex scheme_current sub_sleep standbyidle 900', option: '!disable-power-saving'}
+  - !run: {exe: 'powercfg.exe', args: '/setdcvalueindex scheme_current sub_sleep standbyidle 600', option: '!disable-power-saving'}

src/playbook/Configuration/tweaks/networking/disable-llmnr.yml

@@ -0,0 +1,12 @@
+---
+title: Disable LLMNR Protocol
+description: Disable Link-Local Multicast Name Resolution (LLMNR) protocol as it is replaced by DNS and vulnerable
+privilege: TrustedInstaller
+actions:
+  # https://www.blackhillsinfosec.com/how-to-disable-llmnr-why-you-want-to
+  # https://www.thewindowsclub.com/disable-netbios-and-llmnr-protocols-via-gpo
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient'
+    value: 'EnableMulticast'
+    data: '0'
+    type: REG_DWORD

src/playbook/Configuration/tweaks/networking/disable-reserved-bandwidth.yml

@@ -0,0 +1,11 @@
+---
+title: Disable Reserved Bandwidth
+description: Disables reserved bandwith for connections for improved network performance
+privilege: TrustedInstaller
+actions:
+    # https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.QualityofService::QosNonBestEffortLimit
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Psched'
+    value: 'NonBestEffortLimit'
+    data: '0'
+    type: REG_DWORD

src/playbook/Configuration/tweaks/networking/disable-smart-name-resolution.yml

@@ -0,0 +1,16 @@
+---
+title: Disable Smart Multi-Homed Name Resolution
+description: Designed to speed up DNS resolution by sending DNS requests across all available network adapters, but also causes a privacy issue due to DNS leakage
+privilege: TrustedInstaller
+actions:
+  # https://www.ghacks.net/2017/08/14/turn-off-smart-multi-homed-name-resolution-in-windows
+  - !registryValue:
+    path: 'HKLM\SYSTEM\CurrentControlSet\Services\Dnscache\Parameters'
+    value: 'DisableParallelAandAAAA'
+    data: '1'
+    type: REG_DWORD
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient'
+    value: 'DisableSmartNameResolution'
+    data: '1'
+    type: REG_DWORD

src/playbook/Configuration/tweaks/networking/netsh.yml

@@ -0,0 +1,8 @@
+---
+title: Configure Network Settings with Network Shell
+description: Configures the optimal networking settings using Network Shell (netsh.exe)
+privilege: TrustedInstaller
+actions:
+  - !run: {exe: 'netsh', args: 'int tcp set supplemental Internet congestionprovider=ctcp'}
+  - !run: {exe: 'netsh', args: 'interface Teredo set state type=enterpriseclient'}
+  - !run: {exe: 'netsh', args: 'interface Teredo set state servername=default'}

src/playbook/Configuration/tweaks/networking/network-power-saving.yml

@@ -0,0 +1,10 @@
+---
+title: Disable Network Adapter Power Saving
+description: Disables the default power saving mode for all network cards by removing the default capability
+privilege: TrustedInstaller
+actions:
+  - !registryValue:
+    path: 'HKLM\SYSTEM\CurrentControlSet\Services\NDIS\Parameters'
+    value: 'DefaultPnPCapabilities'
+    data: '24'
+    type: REG_DWORD

src/playbook/Configuration/tweaks/networking/packet-sched-timer-res.yml

@@ -0,0 +1,11 @@
+---
+title: Set Packet Scheduler Timer Resolution
+description: Sets the network stack (packet scheduler) timer resolution to be more precise
+privilege: TrustedInstaller
+actions:
+  # https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.QualityofService::QosTimerResolution
+  - !registryValue:
+    path: 'HKLM\SOFTWARE\Policies\Microsoft\Windows\Psched'
+    value: 'TimerResolution'
+    data: '1'
+    type: REG_DWORD

src/playbook/Configuration/tweaks/networking/shares/restrict-anonymous-access.yml

@@ -0,0 +1,11 @@
+---
+title: Restrict Anonymous Access to Named Pipes and Shares
+description: Restricts anonymous access to named pipes and shares to prevent unauthorized system access
+privilege: TrustedInstaller
+actions:
+    # https://www.stigviewer.com/stig/microsoft_windows_10/2022-04-08/finding/V-220932
+  - !registryValue:
+    path: 'HKLM\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters'
+    value: 'RestrictNullSessAccess'
+    data: '1'
+    type: REG_DWORD

src/playbook/Configuration/tweaks/networking/shares/restrict-anonymous-enumeration.yml

@@ -0,0 +1,11 @@
+---
+title: Restrict Anonymous Enumeration of Shares
+description: Restricts anonymous enumeration of shares
+privilege: TrustedInstaller
+actions:
+  # https://www.stigviewer.com/stig/microsoft_windows_10/2022-04-08/finding/V-220930
+  - !registryValue:
+    path: 'HKLM\SYSTEM\CurrentControlSet\Control\Lsa'
+    value: 'RestrictAnonymous'
+    data: '1'
+    type: REG_DWORD

src/playbook/Configuration/tweaks/networking/shares/smb-bandwidth-throttling.yml

@@ -0,0 +1,11 @@
+---
+title: Disable SMB Bandwidth Throttling
+description: Disables SMB bandwidth throttling for improved performance
+privilege: TrustedInstaller
+actions:
+  # https://learn.microsoft.com/en-us/windows-server/administration/performance-tuning/role/file-server
+  - !registryValue:
+    path: 'HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters'
+    value: 'DisableBandwidthThrottling'
+    data: '1'
+    type: REG_DWORD