Windows 10: How to stop someone use scripts take down C:\Windows and registry file

i'm just stand school i am not student or teacherthat guy was doing1. trying use scripts MpPreference he's trying exploiting disable Windows Defenderthey tried disabling and configuring Windows Defender and other anti-virus Protection2. he's just tried take ownership of files that replacing files SYSTEM to Everyone3. they use Advanced Run Nirsoft and any program that allow run as SYSTEM and TrustedInstaller programwhere can i disable not administrator passwordI have questions1. after disabling MpPreferencenow there no way to disable Windows Defender with scripts?2. after disabling take owner

:)

 

Custom Registry Files

Techpowerup nor myself are in no way responsible for anything that may or may not go wrong with a users system if s/he decides to use these registry hacks. You are doing so at your own risk and agree to release me and or Techpowerup from fault that may occur. If a user decides to use these registry hacks, you must BACKUP YOUR REGISTRY FIRST!

To backup your registry click Start>Run (or use windows search from the start menu) and type "Regedit" without quotes. Click on File>Export. Name the file whatever you wish and save it somewhere that is NOT on your Windows drive.

Contained inside the attached RAR file you will find 13 registry hacks. They are:

• Copy To - Adds Copy To to the right click context menu
• Move To - Adds Move To to the right click context menu
• Enable Balloon Notification - Self explanatory
• Disable Balloon Notification - Self explanatory
• Extended UI Hover Time - Despite its name it decreases the time it takes to preview a thumbnail
• Instant Aero Peek - Self explanatory
• Last Active Click - If you have multiple of the same program open, click the icon and it will bring to you your last open window of that program. Click again and you can cycle through.
• Menu Show Delay - Decreases the time it takes for the start menu to appear
• Move Kernel - Moves the Windows Kernel from the HDD to memory increasing system performance slightly.
• Stop Snap - Disables the Windows 7 Snap feature (when you drag a window to the corner of the screen)
• Stop Space Checking - Keeps Windows from constantly checking disk space
• USB Write Protect - Disallows Windows to write to any USB device but will still allow the device to be read from.
• Wait To Kill Service Timeout - Decreases the time it takes windows to wait for a program to fully close before shutting down.

I have tested all but Move Kernel, Stop Space Checking, and USB Write Protect and they all work 100%. If you open up the registry file I provide, it will give you more information on where the key specifically is along with some information on what it does. Obviously the Aero Peek and Hover time hacks will not work on versions of Windows earlier than 7.

I got the Copy To and Move to from How To Geek and the rest I just Googled and turned into a registry file for convenience. Not sure how many of you guys will need this but i found some new registry hacks that Ill be using now while doing this so I thought I would share with the community. Make me good for something. *Roll Eyes

If I come across more Ill edit this post and upload the new zip. Feel free as well to tell us any registry hacks you use and I could even add them to the list. *Smile

Enjoy!

 

Recent File List

Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file1

Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file2
Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file3
Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file4
Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file5
Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file6
Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file7
Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file8
Remove-ItemProperty -Path "Registry::HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion
\Applets\Paint\Recent File List" -name file9
...

you get the idea. ( too lazy to put it in a for loop and test it.

or just open regedit and remove all the fileX from that key.

 

Windows Script Host

Hi Boniface,

Windows Script Host provides your PC the scripting abilities like
batch files, but Windows Script Host offers more features. You can enable
Windows Script Host to stop 'Windows Script Host is disabled on this machine, contact your administrator for details'
message by following these steps:

• Press Windows + R to open Run.
• Type regedit and press Enter to open the
  Registry Editor.
• Navigate to this key: HKEY_LOCAL_MACHINE\Software\Microsoft\Windows Script Host\Settings.
• On the right panel, double-click Enabled and change the
  Value data to 1.
• Save the changes and exit the Registry Editor.
  
  Note: Do not modify other keys on the Registry without having enough knowledge about that registry key as it may cause some failures on your PC

Let us know how things go.

Regards.