# ============================================
# Explorer & File Manager
# ============================================

- path: "HKCU:\\Control Panel\\Keyboard"
  type: DWord
  values:
    PrintScreenKeyForSnippingEnabled: 0

- path: "HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer"
  type: DWord
  values:
    ShowCloudFilesInQuickAccess: 0
    ShowFrequent: 0
    ShowRecent: 0

- path: "HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced"
  type: DWord
  values:
    LaunchTo: 1           # Open to This PC
    HideFileExt: 0        # Show file extensions
    Hidden: 1             # Show hidden files
    TaskbarAl: 0          # Align taskbar left
    Start_AccountNotifications: 0
    ShowCopilotButton: 0
    Start_TrackProgs: 0   # Disable app launch tracking
    Start_IrisRecommendations: 0
    ShowSyncProviderNotifications: 0

- path: "HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\AutoComplete"
  values:
    - name: Append Completion
      type: String
      value: "no"

- path: "HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer"
  type: DWord
  values:
    HideSCAMeetNow: 1
    NoInstrumentation: 1  # Disable tracking of user activity
    NoThumbnailCache: 1

- path: "HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer"
  type: DWord
  values:
    HideSCAMeetNow: 1
    NoInstrumentation: 1

- path: "HKCU:\\SOFTWARE\\Policies\\Microsoft\\Windows\\Explorer"
  type: DWord
  values:
    DisableSearchBoxSuggestions: 1
    HidePeopleBar: 1
    HideRecentlyAddedApps: 1
    DisableThumbsDBOnNetworkFolders: 1

- path: "HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows\\Explorer"
  type: DWord
  values:
    HidePeopleBar: 1
    DisableThumbsDBOnNetworkFolders: 1

- path: "HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer\\Advanced\\People"
  type: DWord
  values:
    PeopleBand: 0

- path: "HKCU:\\SOFTWARE\\Policies\\Microsoft\\Windows"
  type: DWord
  values:
    DisableThumbsDBOnNetworkFolders: 1

# ============================================
# Appearance & Wallpaper
# ============================================

- path: "HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Themes\\Personalize"
  type: DWord
  values:
    AppsUseLightTheme: 0    # Dark mode
    SystemUsesLightTheme: 0 # Dark mode
    EnableTransparency: 1

- path: "HKCU:\\Control Panel\\Desktop"
  values:
    - name: WallpaperStyle
      type: String
      value: "10"   # Fill
    - name: TileWallpaper
      type: String
      value: "0"

- path: "HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\PersonalizationCSP"
  values:
    - name: LockScreenImagePath
      type: String
      value: "C:\\Windows\\Web\\Wallpaper\\Custom\\Lockscreen.png"
    - name: LockScreenImageStatus
      type: DWord
      value: 1

# ============================================
# Search & Cortana
# ============================================

- path: "HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Search"
  type: DWord
  values:
    SearchboxTaskbarMode: 0   # Hide search box
    BingSearchEnabled: 0
    CortanaEnabled: 0
    CortanaConsent: 0

- path: "HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows\\Windows Search"
  type: DWord
  values:
    AllowCloudSearch: 0
    AllowCortana: 0
    AllowCortanaAboveLock: 0
    CortanaConsent: 0

- path: "HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\SearchSettings"
  type: DWord
  values:
    IsDynamicSearchBoxEnabled: 0  # Disable Search Highlights

# ============================================
# Taskbar & News
# ============================================

- path: "HKLM:\\SOFTWARE\\Policies\\Microsoft\\Dsh"
  type: DWord
  values:
    AllowNewsAndInterests: 0

- path: "HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows\\Windows Feeds"
  type: DWord
  values:
    EnableFeeds: 0

# ============================================
# Privacy & Telemetry
# ============================================

- path: "HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\AdvertisingInfo"
  type: DWord
  values:
    Enabled: 0    # Disable advertising ID

- path: "HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Privacy"
  type: DWord
  values:
    TailoredExperiencesWithDiagnosticDataEnabled: 0

- path: "HKCU:\\SOFTWARE\\Microsoft\\Speech_OneCore\\Settings\\OnlineSpeechPrivacy"
  type: DWord
  values:
    HasAccepted: 0    # Disable online speech recognition

- path: "HKCU:\\SOFTWARE\\Microsoft\\Input\\TIPC"
  type: DWord
  values:
    Enabled: 0    # Disable inking & typing data collection

- path: "HKCU:\\SOFTWARE\\Microsoft\\InputPersonalization"
  type: DWord
  values:
    RestrictImplicitInkCollection: 1
    RestrictImplicitTextCollection: 1

- path: "HKCU:\\SOFTWARE\\Microsoft\\InputPersonalization\\TrainedDataStore"
  type: DWord
  values:
    HarvestContacts: 0

- path: "HKCU:\\SOFTWARE\\Microsoft\\Personalization\\Settings"
  type: DWord
  values:
    AcceptedPrivacyPolicy: 0

- path: "HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows\\DataCollection"
  type: DWord
  values:
    AllowTelemetry: 0
    MaxTelemetryAllowed: 0
    DoNotShowFeedbackNotifications: 1
    AllowDeviceNameInTelemetry: 0

- path: "HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\DataCollection"
  type: DWord
  values:
    AllowTelemetry: 0

- path: "HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows\\AppCompat"
  type: DWord
  values:
    AITEnable: 0    # Disable Application Impact Telemetry

- path: "HKCU:\\SOFTWARE\\Policies\\Microsoft\\Windows\\EdgeUI"
  type: DWord
  values:
    DisableMFUTracking: 1

- path: "HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows\\HandwritingErrorReports"
  type: DWord
  values:
    PreventHandwritingErrorReports: 1

- path: "HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows\\InputPersonalization"
  type: DWord
  values:
    RestrictImplicitInkCollection: 1

- path: "HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\TextInput"
  type: DWord
  values:
    AllowLinguisticDataCollection: 0

- path: "HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows\\System"
  type: DWord
  values:
    PublishUserActivities: 0    # Disable Activity History

- path: "HKCU:\\SOFTWARE\\Microsoft\\Siuf\\Rules"
  type: DWord
  values:
    NumberOfSIUFInPeriod: 0    # Set feedback frequency to never

- path: "HKLM:\\SOFTWARE\\Microsoft\\PCHealth\\ErrorReporting"
  type: DWord
  values:
    DoReport: 0
    ShowUI: 0

- path: "HKLM:\\SOFTWARE\\WOW6432Node\\Microsoft\\PCHealth\\ErrorReporting"
  type: DWord
  values:
    DoReport: 0
    ShowUI: 0

- path: "HKLM:\\SYSTEM\\CurrentControlSet\\Control\\CrashControl\\StorageTelemetry"
  type: DWord
  values:
    DeviceDumpEnabled: 0

# ============================================
# Windows Suggestions & Content Delivery
# ============================================

- path: "HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows\\CloudContent"
  type: DWord
  values:
    DisableWindowsConsumerFeatures: 1
    DisableConsumerAccountStateContent: 1   # Hide M365 Copilot ads in Settings

- path: "HKCU:\\SOFTWARE\\Policies\\Microsoft\\Windows\\CloudContent"
  type: DWord
  values:
    DisableSpotlightCollectionOnDesktop: 1   # Disable Windows Spotlight for desktop

- path: "HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\ContentDeliveryManager"
  type: DWord
  values:
    SilentInstalledAppsEnabled: 0       # Disable auto-install of suggested apps
    OemPreInstalledAppsEnabled: 0
    PreInstalledAppsEnabled: 0
    SystemPaneSuggestionsEnabled: 0
    SoftLandingEnabled: 0
    SubscribedContent-310093Enabled: 0  # Windows welcome experience after updates
    SubscribedContent-338387Enabled: 0  # Lock screen tips & tricks
    SubscribedContent-338388Enabled: 0  # Occasional suggestions in Start
    SubscribedContent-338389Enabled: 0  # Tips, tricks & suggestions as you use Windows
    SubscribedContent-338393Enabled: 0  # Suggested content in Settings
    SubscribedContent-353694Enabled: 0
    SubscribedContent-353696Enabled: 0
    SubscribedContent-353698Enabled: 0
    RotatingLockScreenOverlayEnabled: 0 # Lock screen fun facts overlay

- path: "HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\SystemSettings\\AccountNotifications"
  type: DWord
  values:
    EnableAccountNotifications: 0

- path: "HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Notifications\\Settings\\Windows.SystemToast.Suggested"
  type: DWord
  values:
    Enabled: 0    # Disable "Suggested" app notifications

- path: "HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Notifications\\Settings\\Windows.SystemToast.BackupReminder"
  type: DWord
  values:
    Enabled: 0    # Disable Windows Backup reminders

- path: "HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Mobility"
  type: DWord
  values:
    OptedIn: 0    # Disable Phone Link suggestions

- path: "HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\UserProfileEngagement"
  type: DWord
  values:
    ScoobeSystemSettingEnabled: 0    # Disable "finish setting up" nag

- path: "HKCU:\\SOFTWARE\\Policies\\Microsoft\\Windows\\CurrentVersion\\AccountNotifications"
  type: DWord
  values:
    DisableAccountNotifications: 1

# ============================================
# AI & Copilot
# ============================================

- path: "HKCU:\\SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsCopilot"
  type: DWord
  values:
    TurnOffWindowsCopilot: 1

- path: "HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsCopilot"
  type: DWord
  values:
    TurnOffWindowsCopilot: 1

- path: "HKCU:\\SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsAI"
  type: DWord
  values:
    DisableAIDataAnalysis: 1
    DisableClickToDo: 1

- path: "HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows\\WindowsAI"
  type: DWord
  values:
    DisableAIDataAnalysis: 1
    AllowRecallEnablement: 0
    TurnOffSavingSnapshots: 1
    DisableClickToDo: 1

- path: "HKLM:\\SYSTEM\\CurrentControlSet\\Services\\WSAIFabricSvc"
  type: DWord
  values:
    Start: 3    # Manual startup (prevent AI service auto-start)

# ============================================
# Edge Browser Policies
# ============================================

- path: "HKLM:\\SOFTWARE\\Policies\\Microsoft\\Edge"
  type: DWord
  values:
    PersonalizationReportingEnabled: 0
    DiagnosticData: 0
    NewTabPageContentEnabled: 0         # Disable MSN news feed
    NewTabPageHideDefaultTopSites: 1
    EdgeShoppingAssistantEnabled: 0
    TabServicesEnabled: 0
    AlternateErrorPagesEnabled: 0
    UserFeedbackAllowed: 0
    ShowRecommendationsEnabled: 0
    WalletDonationEnabled: 0
    HideFirstRunExperience: 0
    DefaultBrowserSettingEnabled: 0     # Don't prompt to be default
    DefaultBrowserSettingsCampaignEnabled: 0
    SpotlightExperiencesAndRecommendationsEnabled: 0
    ShowAcrobatSubscriptionButton: 0

# ============================================
# Brave Browser Policies
# ============================================

- path: "HKLM:\\Software\\Policies\\BraveSoftware\\Brave"
  type: DWord
  values:
    BraveVPNDisabled: 1
    BraveWalletDisabled: 1
    BraveTalkDisabled: 1
    BraveNewsDisabled: 1
    DefaultBrowserSettingEnabled: 0     # Don't prompt to be default

# ============================================
# Firefox
# ============================================

- path: "HKCU:\\SOFTWARE\\Policies\\Mozilla\\Firefox\\SearchEngines"
  values:
    - name: Default
      type: String
      value: "DuckDuckGo"

# ============================================
# NVIDIA Telemetry
# ============================================

- path: "HKLM:\\SOFTWARE\\NVIDIA Corporation\\NvControlPanel2\\Client"
  type: DWord
  values:
    OptInOrOutPreference: 0

- path: "HKLM:\\SOFTWARE\\NVIDIA Corporation\\Global\\FTS"
  type: DWord
  values:
    EnableRID44231: 0
    EnableRID64640: 0
    EnableRID66610: 0

- path: "HKLM:\\SYSTEM\\CurrentControlSet\\Services\\NvTelemetryContainer"
  type: DWord
  values:
    Start: 4    # Disabled

# ============================================
# SmartScreen
# ============================================

- path: "HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Explorer"
  values:
    - name: SmartScreenEnabled
      type: String
      value: "Off"

- path: "HKCU:\\SOFTWARE\\Classes\\Local Settings\\Software\\Microsoft\\Windows\\CurrentVersion\\AppContainer\\Storage\\microsoft.microsoftedge_8wekyb3d8bbwe\\MicrosoftEdge\\PhishingFilter"
  type: DWord
  values:
    EnabledV9: 0

# ============================================
# Location Services
# ============================================

- path: "HKLM:\\SYSTEM\\CurrentControlSet\\Services\\lfsvc\\Service\\Configuration"
  type: DWord
  values:
    Status: 0

- path: "HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\CapabilityAccessManager\\ConsentStore\\location"
  values:
    - name: Value
      type: String
      value: "Deny"

- path: "HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\CapabilityAccessManager\\ConsentStore\\location"
  values:
    - name: Value
      type: String
      value: "Deny"

- path: "HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\CapabilityAccessManager\\ConsentStore\\location\\NonPackaged"
  values:
    - name: Value
      type: String
      value: "Deny"

- path: "HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\CapabilityAccessManager\\ConsentStore\\location\\Microsoft.WindowsCamera_8wekyb3d8bbwe"
  values:
    - name: Value
      type: String
      value: "Deny"

- path: "HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\CPSS\\Store\\UserLocationOverridePrivacySetting"
  type: DWord
  values:
    Value: 0

- path: "HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\CapabilityAccessManager\\ConsentStore\\location\\Microsoft.BingWeather_8wekyb3d8bbwe"
  values:
    - name: Value
      type: String
      value: "Deny"

# ============================================
# Remote Desktop
# ============================================

- path: "HKLM:\\SYSTEM\\CurrentControlSet\\Control\\Terminal Server"
  type: DWord
  values:
    fDenyTSConnections: 0       # Enable RDP
    fSingleSessionPerUser: 0    # Allow multiple sessions

- path: "HKLM:\\SYSTEM\\CurrentControlSet\\Services\\TermService"
  type: DWord
  values:
    Start: 2    # Automatic

- path: "HKLM:\\SYSTEM\\CurrentControlSet\\Services\\RDPWD"
  type: DWord
  values:
    Start: 2

- path: "HKLM:\\SYSTEM\\CurrentControlSet\\Services\\RDP-Tcp"
  type: DWord
  values:
    Start: 2

- path: "HKLM:\\SOFTWARE\\Policies\\Microsoft\\Windows NT\\Terminal Services"
  type: DWord
  values:
    fDenyTSConnections: 0

# ============================================
# MPC-HC Media Player
# ============================================

- path: "HKCU:\\SOFTWARE\\MPC-HC\\MPC-HC\\Settings"
  type: DWord
  values:
    KeepHistory: 0
    RememberFilePos: 0
    RememberPosForAudioFiles: 0
    AfterPlayback: 0
    RememberWindowPos: 1
    RememberWindowSize: 1
    LoopFolderOnPlayNextFile: 0
    LockNoPause: 0
    PreventDisplaySleep: 1
    ShufflePlaylistItems: 0
    RememberPlaylistItems: 0
    HidePlaylistFullScreen: 0
    Loop: 1
    UpdaterAutoCheck: 0
    UpdaterDelay: 0

# ============================================
# Accessibility
# ============================================

- path: "HKCU:\\Control Panel\\Accessibility\\StickyKeys"
  values:
    - name: Flags
      type: String
      value: "506"    # Disable sticky keys shortcut

- path: "HKCU:\\Control Panel\\Accessibility\\Keyboard Response"
  values:
    - name: Flags
      type: String
      value: "122"    # Disable filter keys shortcut

# ============================================
# Security & Network
# ============================================

- path: "HKLM:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\System"
  type: DWord
  values:
    ConsentPromptBehaviorAdmin: 0   # Disable UAC prompt
    NoConnectedUser: 1              # Disable Microsoft account sign-in requirement

- path: "HKLM:\\SYSTEM\\CurrentControlSet\\Services\\Tcpip\\Parameters"
  type: DWord
  values:
    TcpWindowSize: 16711680
    GlobalMaxTcpWindowSize: 16711680

- path: "HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Policies\\Attachments"
  values:
    - name: SaveZoneInformation
      type: DWord
      value: 1
    - name: LowRiskFileTypes
      type: String
      value: ".zip;.rar;.7z"

# Trusted zones (intranet)
- path: "HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ZoneMap\\Domains\\192.168.100.5"
  type: DWord
  values:
    "*": 1

- path: "HKCU:\\SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\\ZoneMap\\Domains\\callisto.andrewspolytechnic.com"
  type: DWord
  values:
    "*": 1

# ============================================
# ShareX
# ============================================

- path: "HKLM:\\SOFTWARE\\ShareX"
  type: DWord
  values:
    DisableUpdateCheck: 1
    DisableUpload: 1

# ============================================
# Misc Applications
# ============================================

- path: "HKCU:\\SOFTWARE\\ACD Systems\\LUXEA Pro\\080\\LClient"
  type: DWord
  values:
    cod: 1

- path: "HKLM:\\SOFTWARE\\Policies\\Microsoft\\Assistance\\Client\\1.0"
  type: DWord
  values:
    NoActiveHelp: 1