diff --git a/Windows/IPv6-no_privacy.bat b/Windows/IPv6-no_privacy.bat new file mode 100644 index 00000000..019101dc --- /dev/null +++ b/Windows/IPv6-no_privacy.bat @@ -0,0 +1,9 @@ +echo off +echo Disable IPv6 privacy extensions? Recommended for servers and other static devices. +pause +netsh interface ipv6 set global randomizeidentifiers=disabled store=active +netsh interface ipv6 set global randomizeidentifiers=disabled store=persistent +netsh interface ipv6 set privacy state=disabled store=active +netsh interface ipv6 set privacy state=disabled store=persistent +pause +echo on \ No newline at end of file diff --git a/Windows/IPv6-no_randomization.bat b/Windows/IPv6-no_randomization.bat new file mode 100644 index 00000000..2dc49495 --- /dev/null +++ b/Windows/IPv6-no_randomization.bat @@ -0,0 +1,7 @@ +echo off +echo Disable IPv6 address randomization? Recommended for all devices. +pause +netsh interface ipv6 set global randomizeidentifiers=disabled store=active +netsh interface ipv6 set global randomizeidentifiers=disabled store=persistent +pause +echo on \ No newline at end of file diff --git a/Windows/IPv6.reg b/Windows/IPv6.reg new file mode 100644 index 00000000..f5d56be7 --- /dev/null +++ b/Windows/IPv6.reg @@ -0,0 +1,9 @@ +Windows Registry Editor Version 5.00 + +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dnscache\Parameters] +"AddrConfigControl"=dword:00000000 + +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\TCPIP\v6Transition] +"Teredo_DefaultQualified"="Enabled" +"Teredo_State"="Enterprise Client" +"Teredo_ServerName"="teredo.trex.fi" diff --git a/Windows/IPv6.reg.markdown b/Windows/IPv6.reg.markdown new file mode 100644 index 00000000..ad8c3956 --- /dev/null +++ b/Windows/IPv6.reg.markdown @@ -0,0 +1,8 @@ +Some kind of explaining for [IPv6.reg](IPv6.reg) like +[Windows.reg](Windows.reg) which includes this file has. + +* Resolve IPv6 even without native connectivity. +* Enable Teredo + * As EnterpriseClient so it also works when joined into domain. +* Use `teredo.trex.fi` as Teredo server. This should be replaced with + something that is as near as possible. diff --git a/Windows/Windows.reg b/Windows/Windows.reg new file mode 100644 index 00000000..fd64ca93 --- /dev/null +++ b/Windows/Windows.reg @@ -0,0 +1,23 @@ +Windows Registry Editor Version 5.00 + +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] +"ConsentPromptBehaviorAdmin"=dword:00000002 +"ConsentPromptBehaviorUser"=dword:00000002 +"dontdisplaylastusername"=dword:00000000 +"shutdownwithoutlogon"=dword:00000001 +"undockwithoutlogon"=dword:00000001 +"VerboseStatus"=dword:00000001 +"HideStartupScripts"=dword:00000000 +"HideShutdownScripts"=dword:00000000 +"EnableFirstLogonAnimation"=dword:00000000 + +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\TimeZoneInformation] +"RealTimeIsUniversal"=qword:00000000 + +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dnscache\Parameters] +"AddrConfigControl"=dword:00000000 + +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\TCPIP\v6Transition] +"Teredo_DefaultQualified"="Enabled" +"Teredo_State"="Enterprise Client" +"Teredo_ServerName"="teredo.trex.fi" diff --git a/Windows/Windows.reg.markdown b/Windows/Windows.reg.markdown new file mode 100644 index 00000000..fcc8fa1e --- /dev/null +++ b/Windows/Windows.reg.markdown @@ -0,0 +1,57 @@ +This file is supposed to explain [Windows.reg](Windows.reg). + +``` +[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] +"ConsentPromptBehaviorAdmin"=dword:00000002 +"ConsentPromptBehaviorUser"=dword:00000002 +``` + +* Ask admins yes/no on UAC + * 1 would also ask for password, 0 disable entirely. +* prompt standard users for username and password. + * The other option (1) doesn't even give them UAC prompt so you must + always login as admin to do anything. + +``` +"dontdisplaylastusername"=dword:00000000 +"shutdownwithoutlogon"=dword:00000001 +"undockwithoutlogon"=dword:00000001 +"VerboseStatus"=dword:00000001 +"HideStartupScripts"=dword:00000000 +"HideShutdownScripts"=dword:00000000 +"EnableFirstLogonAnimation"=dword:00000000 +``` + +* Display the user list. +* Allows shutdown without being logged in +* Allows undocking without logging in +* Shows verbose information on login (starting service...) +* Shows output of startup scripts +* Shows output of shutdown scripts +* Disables the first logon animation on Windows 8\* + +``` +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\TimeZoneInformation] +"RealTimeIsUniversal"=qword:00000000 +``` + +* Sets hardware clock to UTC time (doesn't affect system clock!) + * Must be dword with 32-bit systems. + +``` +[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dnscache\Parameters] +"AddrConfigControl"=dword:00000000 +``` + +* be able to resolve IPv6 even when connection isn't native. + +``` +[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\TCPIP\v6Transition] +"Teredo_DefaultQualified"="Enabled" +"Teredo_State"="Enterprise Client" +"Teredo_ServerName"="teredo.trex.fi" +``` + +* Enable Teredo +* Enable Teredo even when joined to domain. +* Use `teredo.trex.fi` as Teredo server as it's in Finland where I am.