[New Script]: Disable Additional Services and Programs (as of 07-18-25) #556
Description
Operating system
Windows
Name of the script
Disable Additional Services and Programs (as of 07-18-25)
Documentation/References
Disable NetIO Legacy TDI Support Driver (tdx)
The NetIO Legacy TDI Support Driver, identified by the service name “tdx,” is a kernel-mode driver that provides a legacy interface for network input-output operations. It is a core component for network functionality and is used by various other network-related services. The “tdx” service operates at a low level within the operating system’s kernel. It provides support for the Transport Driver Interface, abbreviated as TDI, a legacy Windows networking API. The default startup type is “System,” meaning that it loads during system initialization. The “tdx” service is a dependency for several other network services, including DHCP Client, DNS Client, IP Helper, and NetBT. It exists in various Windows versions, including Windows 7, 8, 10, and 11. The “tdx.sys” file is typically located at %WinDir%\System32\drivers\. Using this script will disable the NetIO Legacy TDI Support Driver completely.
Reference 1: https://www.file.net/process/tdx.sys.html
Reference 2: https://batcmd.com/windows/10/services/tdx
----
Block File System Filter Drivers (Legacy or Obsolete)
This script can block legacy, obsolete, unnecessary, outdated, or third-party file system filter drivers that are not critical for Windows or any hardware.
----
Disable Windows Cloud Files Filter Driver (cldflt)
The Windows Cloud Files Filter Driver is a part of the OneDrive synchronization. This script disables the cldflt driver.
Reference: https://web.archive.org/web/20250719060453/https://gist.github.com/Aldaviva/0eb62993639da319dc456cc01efa3fe5
----
Disable Remote Access LEGACY NDIS WAN Driver (ndiswanlegacy)
ndiswanlegacy is a part of the ndiswan.sys kernel driver. It supports legacy dial-up and Virtual Private Network (VPN) connections using older NDIS (Network Driver Interface Specification) technology. Also, it allows Windows to communicate with older network adapters and modems, particularly for dial-up internet connections. Using this script will disable the Remote Access LEGACY NDIS WAN Driver, which means that the older dial-up and VPN connections will not be used. The image path is the “%SystemRoot%\System32\drivers\ndiswan.sys” path. The registry directory is the “HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ndiswanlegacy” directory.
Reference 1: https://batcmd.com/windows/10/services/ndiswanlegacy
Reference 2: https://revertservice.com/10/ndiswanlegacy
----
Disable QWAVE Driver (qwavedrv)
This script will disable the QWAVE driver, which is designed to support Quality of Service (QoS) for audio and video applications. The QWAVE driver relies on applications like Skype, Teams, or other VoIP and video conferencing software. The image path is the “%SystemRoot%\System32\drivers\qwavedrv.sys” path. The registry directory is the “HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\QWAVEdrv” directory.
Reference 1: https://www.computerhope.com/cgi-bin/process.pl?p=qwavedrv.sys
Reference 2: https://web.archive.org/web/20250719075741/https://www.ntlite.com/community/index.php?threads%2Ffyi-improvement-oculusvr-qwave-qos-windows-10-22h2.3540%2F
----
Disable Microsoft Kernel Debug Network Miniport (NDIS 6.20) (kdnic)
This script will disable the Microsoft Kernel Debug Network Miniport (NDIS 6.20) driver, which is mainly used for kernel debugging over a network connection. The image path is “%SystemRoot%\System32\drivers\kdnic.sys.” The registry directory is “HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\kdnic.”
Reference 1: https://web.archive.org/web/20250719090453/https://learn.microsoft.com/en-us/answers/questions/3964123/what-are-wan-miniport-microsoft-kernel-debug-netwo
Reference 2: https://umatechnology.org/what-are-wan-miniport-microsoft-kernel-debug-network-adapter-and/
Reference 3: https://www.drivethelife.com/microsoft-kernel-debug-network-adapter-driver/
Reference 4: https://learn.microsoft.com/en-us/answers/questions/3972158/wan-miniport-microsoft-kernel-debug-network-adapte
----
Disable QoS Packet Scheduler (psched)
This script will disable the Quality of Service (QoS) Packet Scheduler that manages, prioritizes, and schedules network packets based on Quality of Service policies.
Reference 1: https://www.file.net/process/psched.sys.html
Reference 2: https://batcmd.com/windows/10/services/psched/
----
Disable Remote Access NDIS TAPI Driver (ndistapi)
This script will disable the driver that activates the communication between the Telephony API and the Network Driver Interface Specification and supports remote access connections that are particularly for older dial-up and VPN technologies.
Reference 1: https://www.file.net/process/ndistapi.sys.html
Reference 2: https://batcmd.com/windows/10/services/ndistapi/
Reference 3: https://revertservice.com/10/ndistapi/
----
Disable Windows Network Data Usage Monitoring Driver (ndu)
The Windows Network Data Usage Monitoring Driver (ndu) is a kernel-mode driver that collects and tracks network data usage statistics for features like the Windows Data Usage display in Settings and Task Manager. Its startup type is set to Automatic by default, and if it fails to start, Windows will still boot; the failure is simply logged, and a message may be displayed. This script will disable the driver that tracks and monitors network data usage across all applications and connections. Also, this script will disable the information-collecting function towards data consumption by applications and services.
Reference 1: https://superuser.com/questions/1630368/how-to-view-daily-network-data-usage-in-windows-10
Reference 2: https://batcmd.com/windows/10/services/ndu
Reference 3: https://revertservice.com/10/ndu
----
Disable WSD Print Support (wsdprintdevice)
WSD Print Support (wsdprintdevice) is a driver that allows Windows to discover and communicate with printers and scanners over the network using the Web Services for Devices (WSD) protocol. This is primarily intended to make network printer setup easier for end users, but it is not required for USB printers or printers set up using standard TCP/IP ports. This script will disable the service that has print network support.
Reference 1: https://www.file.net/process/wsdprint.sys.html
Reference 2: https://web.archive.org/web/20250719165956/https://github.com/MicrosoftDocs/windows-driver-docs/blob/staging/windows-driver-docs-pr/print/ws-print-v1-1.md
----
Disable Packet Monitor Driver (pktmon)
Pktmon is a modern, built-in, kernel-mode network diagnostic tool integrated into Windows since version 1809. It is used primarily for packet capture, drop detection, filtering, counting, and network troubleshooting. This script will disable the driver that has enhanced network diagnostics and monitoring capabilities.
Reference 1: https://web.archive.org/web/20250719170514/https://learn.microsoft.com/en-us/windows-server/networking/technologies/pktmon/pktmon
Reference 2: https://web.archive.org/web/20250719170613/https://learn.microsoft.com/en-us/windows-server/administration/windows-commands/pktmon
Reference 3: https://web.archive.org/web/20250719170701/https://petri.com/how-to-monitor-network-activity-using-windows-10-packet-monitor-pktmon/
Reference 4: https://batcmd.com/windows/10/services/pktmon/
----
Disable Link-Layer Topology Discovery Mapper I/O Driver (lltdio)
The Link-Layer Topology Discovery Mapper I/O Driver (lltdio) is a network diagnostics and visualization component that enables Windows to discover devices on the local network and create a network map. It is used by features like the Network Map in the Network and Sharing Center and by some QoS and bandwidth estimation tools. This script will disable the network driver that interacts with external devices such as printers, graphics cards, disk drives, etc.
Reference 1: https://www.file.net/process/lltdio.sys.html
Reference 2: https://batcmd.com/windows/10/services/lltdio/
Reference 3: https://en.wikipedia.org/wiki/Link_Layer_Topology_Discovery
Reference 4: https://learn.microsoft.com/en-us/previous-versions/windows/desktop/qos/link-layer-topology-discovery-protocol
Reference 5: https://handwiki.org/wiki/Link_Layer_Topology_Discovery
----
Disable Link-Layer Topology Discovery Responder (rspndr)
This script will disable the driver that works in conjunction with the LLTD protocol to respond to network discovery requests and helps other devices on the network identify and locate this computer.
Reference 1: https://www.file.net/process/lltdio.sys.html
Reference 2: https://batcmd.com/windows/10/services/lltdio/
Reference 3: https://learn.microsoft.com/en-us/previous-versions/windows/desktop/qos/link-layer-topology-discovery-protocol
Reference 4: https://handwiki.org/wiki/Link_Layer_Topology_Discovery
Reference 5: https://en.wikipedia.org/wiki/Link_Layer_Topology_Discovery
----
Disable Beep (beep)
The Beep (beep) driver controls the PC speaker beep, a feature dating back to early versions of Windows and older PC hardware. It is a legacy kernel mode driver and is not essential for Windows boot, operation, or modern hardware; most new computers do not use or need it. This script will disable the kernel driver that activates the beeping noise.
Reference 1: https://www.file.net/process/beep.sys.html
Reference 2: https://batcmd.com/windows/10/services/beep/
Reference 3: https://superuser.com/questions/1104713/beep-pc-motherboard-speaker-in-windows-10
Reference 4: https://web.archive.org/web/20250719171940/https://serverfault.com/questions/129346/is-it-possible-to-stop-the-beep-device-on-all-computers-in-a-windows-network
----
Disable Windows Projected File System (prjflt)
The Windows Projected File System (prjflt), introduced in Windows 10 version 1809, allows user-mode applications, which are providers, to project hierarchical data into the file system, making it appear as regular files and directories. This allows for virtualization of data from various sources, like the Windows registry or large Git repositories, without needing to store the data locally in its entirety. This script disables the Windows Projected File System driver.
Reference 1: https://scorpiosoftware.net/2024/02/20/projected-file-system/
Reference 2: https://github.com/microsoft/ProjFS-Managed-API
Reference 3: https://learn.microsoft.com/en-us/windows/win32/projfs/projected-file-system
Reference 4: https://learn.microsoft.com/en-us/samples/microsoft/windows-classic-samples/projectedfilesystem/
Reference 5: https://cdn.callback.com/shellboost/doc/Introduction/Projected-File-System-ProjFS.html
----
Disable Microsoft Network Adapter Multiplexor Protocol (ndisimplatform)
The Microsoft Network Adapter Multiplexor Protocol (ndisimplatform) is a kernel mode driver used exclusively for NIC Teaming (network adapter bonding), which combines two or more network adapters to increase bandwidth or provide redundancy. This protocol only becomes active when you explicitly configure network adapter teaming; otherwise, it remains disabled by default and does not affect your standard network connections. This script will disable the ndisimplatform driver.
Reference 1: https://www.partitionwizard.com/partitionmagic/microsoft-network-adapter-multiplexor-protocol.html
Reference 2: https://www.ituonline.com/blogs/demystifying-microsoft-network-adapter-multiplexor-protocol/
Reference 3: https://techcult.com/what-is-microsoft-network-adapter-multiplexor-protocol/
Reference 4: https://answers.microsoft.com/en-us/windows/forum/all/what-does-the-microsoft-network-adapter/ad63238e-ae98-4f3d-ab7b-716c137d8428
Reference 5: https://appuals.com/what-is-microsoft-network-adapter-multiplexor-protocol-and-should-it-be-enabled/
----
Disable Remote Access NDIS WAN Driver (ndiswan)
The Remote Access NDIS WAN Driver (ndiswan) is a kernel mode driver used to enable functions like WAN Miniports (for protocols such as PPP, VPN connections, and older dial-up or ISDN support). This driver facilitates packet conversion and other network features required for certain remote access solutions such as legacy dial-up, VPN, or some older enterprise networking scenarios. This script will disable the ndiswan driver.
Reference 1: https://learn.microsoft.com/en-us/windows-hardware/drivers/network/ndiswan-overview
Reference 2: https://batcmd.com/windows/10/services/ndiswan/
Reference 3: https://batcmd.com/windows/10/services/ndiswanlegacy/
----
Disable WSD Scan Support (wsdscan)
The WSD Scan Support (wsdscan) driver is responsible for enabling network-connected scanning using the Web Services for Devices (WSD) protocol. This allows Windows to communicate with and receive scans from WSD-enabled scanners and multifunction devices on the network. This script will disable the wsdscan driver.
Reference 1: https://learn.microsoft.com/en-us/windows-hardware/drivers/image/wia-with-web-services-for-devices
Reference 2: https://www.file.net/process/wsdscan.sys.html
Reference 3: https://kmbsmanuals.konicaminolta.us/bizhub360isection508/contents/id02-_104678992.html
----
Disable Microsoft Remote Desktop Input Driver (terminpt)
The Microsoft Remote Desktop Input Driver (terminpt) is a kernel mode driver used to enable keyboard and mouse input redirection for Remote Desktop and Terminal Services sessions. This script will disable the terminpt driver.
Reference: https://batcmd.com/windows/10/services/terminpt/
----
Disable Remote Desktop USB Hub Class Filter Driver (tsusbflt)
The Remote Desktop USB Hub Class Filter Driver (tsusbflt) is a kernel-mode driver that enables USB device redirection for Remote Desktop sessions. This allows USB devices plugged into a local machine to be accessed by a remote desktop session. This script will disable the tsusbflt driver.
Reference 1: https://revertservice.com/10/tsusbflt/
Reference 2: https://batcmd.com/windows/11/services/tsusbflt/
Reference 3: https://batcmd.com/windows/10/services/tsusbflt/
----
Disable Remote Desktop Generic USB Device (tsusbgd)
The Remote Desktop Generic USB Device (tsusbgd) driver is used to enable redirection of USB devices from a local computer into a Remote Desktop session. This driver is part of the infrastructure that allows USB devices plugged into your client machine to appear and function on the remote host when using Microsoft’s Remote Desktop. This script will disable the tsusbgd driver.
Reference 1: https://batcmd.com/windows/10/services/tsusbgd/
Reference 2: https://systemexplorer.net/file-database/file/tsusbgd-sys
----
Disable Microsoft USB PRINTER Class (usbprint)
The Microsoft USB PRINTER Class (usbprint) driver (usbprint.sys) is the essential low-level kernel-mode driver that enables Windows to communicate with and send print jobs to USB-connected printers. It does not directly interpret print jobs (that is the role of printer-specific drivers), but it provides the critical conduit necessary for all printer communication over USB. This script will disable the Microsoft USB PRINTER Class driver.
Reference 1: https://learn.microsoft.com/en-us/windows-hardware/drivers/print/usb-printing
Reference 2: https://batcmd.com/windows/10/services/usbprint/
----
Disable Remote Desktop Video Miniport Driver (rdpvideominiport)
The Remote Desktop Video Miniport Driver (rdpvideominiport) is a kernel-mode driver used only during Remote Desktop sessions. It handles the rendering and transmission of video data from the remote system to the client, ensuring the graphical interface is properly displayed during RDP connections. Its default startup type is Manual in all editions and versions, including Windows 10 22H2, and it only starts when a Remote Desktop session is active. This script disables the rdpvideominiport driver.
Reference 1: https://www.file.net/process/rdpvideominiport.sys.html
Reference 2: https://www.bleepingcomputer.com/startups/27639/rdpvideominiport.sys/
Reference 3: https://revertservice.com/10/rdpvideominiport/
Reference 4: https://batcmd.com/windows/10/services/rdpvideominiport/
----
Disable Remote Desktop Device Redirector Driver (rdpdr)
The Remote Desktop Device Redirector Driver (rdpdr) is a kernel driver that enables the redirection of local devices (printers, USB drives, audio devices, smart cards, etc.) into a Remote Desktop session. When you connect to a machine via RDP, this driver is what allows those devices to be accessed from within your remote desktop session. This script will disable the rdpdr driver.
Reference 1: https://batcmd.com/windows/10/services/rdpdr/
Reference 2: https://blog.oudel.com/remote-desktop-device-redirector-bus/
Reference 3: https://www.driveridentifier.com/scan/remote-desktop-device-redirector-bus-driver/driver-detail/80373DE40C7149A0BD82A4150215EA39/4663515/883ccff996bc1e1da72f2b0779af1d3f/1018219358/ROOT-RDPBUS
Reference 4: https://www.driveridentifier.com/scan/remote-desktop-device-redirector-bus/driver-detail/3235CE14E86F494CBF0C2111AECBE062/3053271/76f1617ce4e75b4d2f36693174385391/2192534490/ROOT%5CRDPBUS
Reference 5: https://www.driveridentifier.com/scan/remote-desktop-device-redirector-bus-driver/driver-detail/2BF03D9EAFE0438A840A3604C2409F13/4633471/23fa0aaddcf1b41360ed90a7a46f1b22/1948611203/ROOT-RDPBUS
Reference 6: https://revertservice.com/10/rdpdr/
Reference 7: https://learn.microsoft.com/en-us/azure/virtual-desktop/redirection-configure-usb
----
Disable Remote Desktop Device Redirector Bus Driver (rdpbus)
The Remote Desktop Device Redirector Bus Driver (rdpbus) is a kernel mode driver that enables the redirection of local devices (such as USB drives, printers, audio devices, smart cards, and more) into a remote desktop session. This allows users to access their local peripherals while working in a Remote Desktop environment. This script disables the rdpbus driver.
Reference 1: https://batcmd.com/windows/10/services/rdpbus/
Reference 2: https://revertservice.com/10/rdpbus/
Reference 3: https://blog.oudel.com/remote-desktop-device-redirector-bus/
Reference 4: https://www.driveridentifier.com/scan/remote-desktop-device-redirector-bus-driver/driver-detail/80373DE40C7149A0BD82A4150215EA39/4663515/883ccff996bc1e1da72f2b0779af1d3f/1018219358/ROOT-RDPBUS
Reference 5: https://www.driveridentifier.com/scan/remote-desktop-device-redirector-bus/driver-detail/3235CE14E86F494CBF0C2111AECBE062/3053271/76f1617ce4e75b4d2f36693174385391/2192534490/ROOT%5CRDPBUS
Reference 6: https://www.file.net/process/rdpbus.sys.html
----
Disable WAN Miniport (SSTP) (rassstp)
The WAN Miniport (SSTP) (rassstp) driver is a virtual network adapter and kernel driver that enables support for Secure Socket Tunneling Protocol (SSTP) VPN connections. This allows Windows to establish secure VPN tunnels using SSL/TLS encryption, often required for secure connections to remote networks, workplaces, or VPN providers. This script will disable the rassstp driver.
Reference 1: https://outbyte.com/blog/wan-miniport-sstp-driver/
Reference 2: https://www.driveridentifier.com/scan/wan-miniport-sstp/driver-detail/A116C2A18EFD463A9231C31D367BB7A5/4630232/451c1160ec262d22456e413c35b585a8/395044288/MS_SstpMiniport
Reference 3: https://batcmd.com/windows/10/services/rassstp/
Reference 4: https://revertservice.com/10/rassstp/
Reference 5: https://batcmd.com/windows/11/services/rassstp/
Reference 6: https://www.reddit.com/r/Windows10/comments/4w45ds/where_did_all_these_wan_miniports_come_from_is_it/
Reference 7: https://forums.tomsguide.com/threads/wan-miniports-appeared-out-of-nowhere-and-i-dont-know-what-it-is-and-is-it-safe.476733/
----
Disable Remote Access PPPOE Driver (raspppoe)
The Remote Access PPPOE Driver (raspppoe) is a kernel-mode driver that enables PPPoE connectivity, which is primarily used for broadband internet connections (especially DSL) requiring a username and password. This driver is only required if you need to establish a PPPoE dial-up connection to your service provider. This script disables the raspppoe driver.
Reference 1: https://batcmd.com/windows/10/services/raspppoe/
Reference 2: https://revertservice.com/10/raspppoe/
----
Disable High-Capacity Floppy Disk Drive (sfloppy)
The High-Capacity Floppy Disk Drive (sfloppy) driver is a legacy system driver that enables support for SuperFloppy and other 3.5" floppy disk drives, particularly those using higher capacity formats like 2.88MB ED (Extra Density) disks, as well as standard USB floppy drives. While Windows 10 still includes this driver for backward compatibility, floppy drives are rarely used on modern hardware. This script disables the sfloppy driver.
Reference 1: https://www.file.net/process/sfloppy.sys.html
Reference 2: https://www.reddit.com/r/vintagecomputing/comments/16kzmcu/how_would_i_go_about_using_a_floppy_drive_with_a/
Reference 3: https://answers.microsoft.com/en-us/insider/forum/all/usb-floppy-disk-drives-not-working-in-windows-10/ba036314-5987-4293-9223-0c053335d5f4
Reference 4: https://answers.microsoft.com/en-us/insider/forum/all/did-windows-10-drop-floppy-drive-support/14498a36-413b-4ec7-ac96-cd18f5972b49
Reference 5: https://answers.microsoft.com/en-us/windows/forum/all/legacy-internal-floppy-drive-support-in-win-10/23975174-54b3-421e-a929-f54e2b23bd6d
----
Disable WAN Miniport (L2TP) (rasl2tp)
The WAN Miniport (L2TP) (rasl2tp) driver is a kernel-mode driver that provides support for Virtual Private Network (VPN) connections using the Layer 2 Tunneling Protocol (L2TP). This protocol is still used in some enterprise settings and by users needing specific types of VPN connections. This script disables the rasl2tp driver.
Reference 1: https://www.driveridentifier.com/scan/wan-miniport-l2tp/driver-detail/51C6E4D0059A465AB93A984D02CC5DE6/3053383/25f377a56a64999cbc794e4a97f46599/1245713098/MS_L2tpMiniport
Reference 2: https://www.driveridentifier.com/scan/wan-miniport-l2tp/driver-detail/DF1940B7DE984E68954B33FFB6BD04F6/386009/834902b88c68a4963d2f3721ab877e3c/961439899/MS_L2TPMINIPORT
Reference 3: https://revertservice.com/10/rasl2tp/
Reference 4: https://batcmd.com/windows/10/services/rasl2tp/
----
Disable WAN Miniport (IKEv2) (rasagilevpn)
The WAN Miniport (IKEv2) (rasagilevpn) driver is a kernel-mode driver that enables VPN connectivity using the IKEv2 protocol—a modern and secure standard used for VPN tunnels in many enterprise and some consumer environments. This script disables the rasagilevpn driver.
Reference 1: https://batcmd.com/windows/10/services/rasagilevpn/
Reference 2: https://superuser.com/questions/1124337/missing-rasgreeng-dll-on-vpn-server-when-client-attempts-to-connect
----
Disable Remote Access Auto Connection Driver (rasacd)
The Remote Access Auto Connection Driver (rasacd) is a kernel mode driver that works in conjunction with remote access services. Its main function is to automatically initiate a remote network connection when a program references a remote DNS or NetBIOS name or address, such as when attempting to access a file share or device on a remote network for which no active connection exists. This is mainly relevant for dial-up, VPN, or other legacy remote access methods. This script disables the rasacd driver.
Reference 1: https://batcmd.com/windows/10/services/rasacd/
Reference 2: https://batcmd.com/windows/10/services/rasauto/
Reference 3: https://web.archive.org/web/20250719183428/https://support.microsoft.com/en-us/topic/to-keep-remote-access-service-connections-active-after-you-log-off-from-windows-vista-or-windows-server-2008-you-must-create-a-new-registry-key-8b9d30ed-1add-8b82-8cff-f81662ab3acb
Reference 4: https://web.archive.org/web/20250719183520/https://support.microsoft.com/en-gb/topic/private-ras-connections-are-disconnected-when-a-new-user-logs-on-to-a-windows-server-2008-r2-based-rds-server-64a51ddd-639f-a536-bf73-158aa51023ba
Reference 5: https://web.archive.org/web/20250719183738/https://directaccess.richardhicks.com/tag/ras/page/4/?ak_action=reject_mobile
Reference 6: https://web.archive.org/web/20250719183831/https://directaccess.richardhicks.com/tag/remote-access-connection-manager/
Reference 7: https://web.archive.org/web/20250719183947/https://directaccess.richardhicks.com/tag/routing-and-remote-access/
----
Disable WAN Miniport (PPTP) (pptpminiport)
The WAN Miniport (PPTP) (pptpminiport) driver is a kernel-mode driver that provides support for VPN connections using the Point-to-Point Tunneling Protocol (PPTP). PPTP is an older VPN protocol and is included for compatibility with legacy VPN solutions. This script disables the pptpminiport driver.
Reference 1: https://batcmd.com/windows/10/services/pptpminiport/
Reference 2: https://www.reddit.com/r/Windows10/comments/4w45ds/where_did_all_these_wan_miniports_come_from_is_it/
Reference 3: https://h30434.www3.hp.com/t5/Notebook-Wireless-and-Networking/Network-Adapter-WAN-Miniport-IP/td-p/6865822
----
Disable Microsoft Link-Layer Discovery Protocol (mslldp)
The Microsoft Link-Layer Discovery Protocol (mslldp) is a network protocol and driver that enables your computer to advertise and discover information about itself and neighboring devices on the local network, facilitating network management and topology mapping. It implements LLDP (IEEE 802.1AB), an industry-standard protocol supported by most modern network devices. This script disables the mslldp driver.
Reference 1: https://www.cbtnuggets.com/blog/technology/networking/what-is-lldp-protocol-link-layer-discovery-protocol
Reference 2: https://en.wikipedia.org/wiki/Link_Layer_Topology_Discovery
Reference 3: https://learn.microsoft.com/en-us/azure/azure-local/concepts/physical-network-requirements?view=azloc-2506
----
Disable Floppy Disk Driver (flpydisk)
The Floppy Disk Driver (flpydisk.sys) is a kernel mode driver designed for support of traditional internal floppy disk drives. Its default startup type is Manual, and its presence is mostly for backward compatibility with legacy hardware. This script disables the flpydisk driver.
Reference 1: https://answers.microsoft.com/en-us/windows/forum/all/legacy-internal-floppy-drive-support-in-win-10/23975174-54b3-421e-a929-f54e2b23bd6d
Reference 2: https://learn.microsoft.com/en-us/answers/questions/4326840/legacy-internal-floppy-drive-support-in-win-10
Reference 3: https://batcmd.com/windows/10/services/flpydisk/
Reference 4: https://learn.microsoft.com/en-us/answers/questions/3768489/floppy-disk-drive-driver
Reference 5: https://superuser.com/questions/938965/are-usb-fdds-supported-by-win-10
----
Disable Floppy Disk Controller Driver (fdc)
The Floppy Disk Controller Driver (fdc) is a kernel mode driver that supports legacy floppy disk controllers and drives. Its startup type is Manual across all Windows 10 editions, including 22H2. This script disables the fdc driver.
Reference 1: https://batcmd.com/windows/10/services/fdc/
Reference 2: https://learn.microsoft.com/en-us/answers/questions/4326840/legacy-internal-floppy-drive-support-in-win-10
Reference 3: https://answers.microsoft.com/en-us/windows/forum/all/legacy-internal-floppy-drive-support-in-win-10/23975174-54b3-421e-a929-f54e2b23bd6d
----
Disable Chelsio Virtual Bus Driver (cht4vbd)
The Chelsio Virtual Bus Driver (cht4vbd) is a hardware-specific driver required for the operation of Chelsio T4/T5/T6 series network adapters and related unified networking features. This driver provides a virtual bus interface used by other Chelsio driver components (such as the NDIS Miniport) as part of high-performance networking, storage offload, or virtualization environments. This script disables the cht4vbd driver.
Reference 1: https://web.archive.org/web/20221006073345/http://service.chelsio.com/downloads/Microsoft/Drivers/ChelsioUwire-5.0.0.69-exe/ChelsioT5-UnifiedWire-Windows-UserGuide.pdf
Reference 2: https://web.archive.org/web/20221006045651/https://service.chelsio.com/downloads/Microsoft/Drivers/ChelsioUwire-6.0.0.10/Chelsio-UnifiedWire-Windows-UserGuide.pdf
Reference 3: https://web.archive.org/web/20250719191204/https://service.chelsio.com/downloads/Microsoft/Drivers/ChelsioUwire_6.16.1.0_WIN_006.0.93/Chelsio-UnifiedWire-Windows-UserGuide.pdf
Reference 4: https://web.archive.org/web/20221006054826/https://service.chelsio.com/downloads/Microsoft/Drivers/ChelsioUwire_2.0.9.0_WIN_006.0.45/Chelsio-UnifiedWire-Windows-UserGuide.pdf
Reference 5: https://web.archive.org/web/20221006085659/http://service.chelsio.com/downloads/Microsoft/Drivers/ChelsioUwire-5.0.0.57-zip/ChelsioT5-T4-UnifiedWire-Windows-UserGuide.pdf
Reference 6: https://web.archive.org/web/20250719191636/https://www.chelsio.com/windows/
Reference 7: https://web.archive.org/web/20250719191754/https://www.driverscloud.com/en/services/GetInformationDriver/75815-151268/chelsio-chelsiouwire-2090-win-0060102exe
Reference 8: https://web.archive.org/web/20250719191903/https://gist.github.com/Chester-Gillon/f05596b2c119336254af28ddb95b5273
Reference 9: https://web.archive.org/web/20221006081458/http://service.chelsio.com/downloads/Microsoft/Drivers/ChelsioUwire-5.0.0.85/Chelsio-UnifiedWire-Windows-UserGuide.pdf
Reference 10: https://web.archive.org/web/20250719192059/https://tg-archive.hyperdbg.org/2023-06.html#2023-06-03
Reference 11: https://web.archive.org/web/20250719192149/https://tg-archive.hyperdbg.org/2023-06_2.html#2023-06-25
----
Disable Chelsio iSCSI Storport Miniport Driver (cht4iscsi)
The cht4iscsi driver is the Chelsio iSCSI Storport Miniport driver. It is specifically used for enabling iSCSI (Internet Small Computer Systems Interface) connectivity through Chelsio network adapters, such as in high-performance or enterprise storage environments with Chelsio hardware. This driver is only relevant if you have and use Chelsio iSCSI-capable network adapters configured for iSCSI targets. This script disables the cht4iscsi driver.
Reference 1: https://web.archive.org/web/20250719191204/https://service.chelsio.com/downloads/Microsoft/Drivers/ChelsioUwire_6.16.1.0_WIN_006.0.93/Chelsio-UnifiedWire-Windows-UserGuide.pdf
Reference 2: https://web.archive.org/web/20250719193748/https://service.chelsio.com/downloads/Microsoft/?0
Reference 3: https://web.archive.org/web/20250719191636/https://www.chelsio.com/windows/
Reference 4: https://web.archive.org/web/20221006080205/http://service.chelsio.com/downloads/Microsoft/Drivers/ChelsioUwire-5.0.0.77/Chelsio-UnifiedWire-Windows-UserGuide.pdf
Reference 5: https://web.archive.org/web/20250719194047/https://www.chelsio.com/chelsio-delivers-windows-iscsi-initiator-1255381200/
Reference 6: https://web.archive.org/web/20250719194209/https://www.reddit.com/r/homelab/comments/11825vy/should_you_buy_the_cheap_dual_10g_nics_or_which/?0
----
Disable Browser (bowser)
The Browser (bowser) service is related to the “Computer Browser” driver, which was historically responsible for maintaining an updated list of computers and network resources on local area networks (LANs) using the legacy NetBIOS protocol. It was crucial in older Windows workgroup networks for browsing shared resources, but it is obsolete in modern Windows environments. This script disables the bowser driver.
Reference 1: https://learn.microsoft.com/en-us/windows/whats-new/whats-new-windows-10-version-22h2
Reference 2: https://learn.microsoft.com/en-us/windows/iot/iot-enterprise/whats-new/windows-10-iot-enterprise-22h2
Reference 3: https://learn.microsoft.com/en-us/windows/release-health/status-windows-10-22h2
Code
:: ----------------------------------------------------------
:: -------Disable NetIO Legacy TDI Support Driver (tdx)--------
:: ----------------------------------------------------------
echo --- Disable NetIO Legacy TDI Support Driver (tdx)
:: Set the registry value: "HKLM\SYSTEM\CurrentControlSet\Services\tdx!Start"
PowerShell -ExecutionPolicy Unrestricted -Command "$registryPath = 'HKLM\SYSTEM\CurrentControlSet\Services\tdx'; $data = '4'; reg add 'HKLM\SYSTEM\CurrentControlSet\Services\tdx' /v 'Start' /t 'REG_DWORD' /d "^""$data"^"" /f"
:: ----------------------------------------------------------
:: ----------------------------------------------------------
:: -------Block File System Filter Drivers (Legacy or Obsolete)--------
:: ----------------------------------------------------------
echo --- Block File System Filter Drivers (Legacy or Obsolete)
:: Set the registry value: "HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\I/O System!IoBlockLegacyFsFilters"
PowerShell -ExecutionPolicy Unrestricted -Command "$registryPath = 'HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\I/O System'; $data = '1'; reg add 'HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\I/O System' /v 'IoBlockLegacyFsFilters' /t 'REG_DWORD' /d "^""$data"^"" /f"
:: ----------------------------------------------------------
:: ----------------------------------------------------------
:: -------Disable Windows Cloud Files Filter Driver (cldflt)--------
:: ----------------------------------------------------------
echo --- Disable Windows Cloud Files Filter Driver (cldflt)
:: Set the registry value: "HKLM\SYSTEM\CurrentControlSet\Services\cldflt!Start"
PowerShell -ExecutionPolicy Unrestricted -Command "$registryPath = 'HKLM\SYSTEM\CurrentControlSet\Services\cldflt'; $data = '4'; reg add 'HKLM\SYSTEM\CurrentControlSet\Services\cldflt' /v 'Start' /t 'REG_DWORD' /d "^""$data"^"" /f"
:: ----------------------------------------------------------
:: ----------------------------------------------------------
:: -------Disable Remote Access LEGACY NDIS WAN Driver (ndiswanlegacy)--------
:: ----------------------------------------------------------
echo --- Disable Remote Access LEGACY NDIS WAN Driver (ndiswanlegacy)
:: Set the registry value: "HKLM\SYSTEM\CurrentControlSet\Services\ndiswanlegacy!Start"
PowerShell -ExecutionPolicy Unrestricted -Command "$registryPath = 'HKLM\SYSTEM\CurrentControlSet\Services\ndiswanlegacy'; $data = '4'; reg add 'HKLM\SYSTEM\CurrentControlSet\Services\ndiswanlegacy' /v 'Start' /t 'REG_DWORD' /d "^""$data"^"" /f"
:: ----------------------------------------------------------
:: ----------------------------------------------------------
:: -------Disable QWAVE Driver (qwavedrv)--------
:: ----------------------------------------------------------
echo --- Disable QWAVE Driver (qwavedrv)
:: Set the registry value: "HKLM\SYSTEM\CurrentControlSet\Services\qwavedrv!Start"
PowerShell -ExecutionPolicy Unrestricted -Command "$registryPath = 'HKLM\SYSTEM\CurrentControlSet\Services\qwavedrv'; $data = '4'; reg add 'HKLM\SYSTEM\CurrentControlSet\Services\qwavedrv' /v 'Start' /t 'REG_DWORD' /d "^""$data"^"" /f"
:: ----------------------------------------------------------
:: ----------------------------------------------------------
:: -------Disable Microsoft Kernel Debug Network Miniport (NDIS 6.20) (kdnic)--------
:: ----------------------------------------------------------
echo --- Disable Microsoft Kernel Debug Network Miniport (NDIS 6.20) (kdnic)
:: Set the registry value: "HKLM\SYSTEM\CurrentControlSet\Services\kdnic!Start"
PowerShell -ExecutionPolicy Unrestricted -Command "$registryPath = 'HKLM\SYSTEM\CurrentControlSet\Services\kdnic'; $data = '4'; reg add 'HKLM\SYSTEM\CurrentControlSet\Services\kdnic' /v 'Start' /t 'REG_DWORD' /d "^""$data"^"" /f"
:: ----------------------------------------------------------
:: ----------------------------------------------------------
:: -------Disable QoS Packet Scheduler (psched)--------
:: ----------------------------------------------------------
echo --- Disable QoS Packet Scheduler (psched)
:: Set the registry value: "HKLM\SYSTEM\CurrentControlSet\Services\psched!Start"
PowerShell -ExecutionPolicy Unrestricted -Command "$registryPath = 'HKLM\SYSTEM\CurrentControlSet\Services\psched'; $data = '4'; reg add 'HKLM\SYSTEM\CurrentControlSet\Services\psched' /v 'Start' /t 'REG_DWORD' /d "^""$data"^"" /f"
:: ----------------------------------------------------------
:: ----------------------------------------------------------
:: -------Disable Remote Access NDIS TAPI Driver (ndistapi)--------
:: ----------------------------------------------------------
echo --- Disable Remote Access NDIS TAPI Driver (ndistapi)
:: Set the registry value: "HKLM\SYSTEM\CurrentControlSet\Services\ndistapi!Start"
PowerShell -ExecutionPolicy Unrestricted -Command "$registryPath = 'HKLM\SYSTEM\CurrentControlSet\Services\ndistapi'; $data = '4'; reg add 'HKLM\SYSTEM\CurrentControlSet\Services\ndistapi' /v 'Start' /t 'REG_DWORD' /d "^""$data"^"" /f"
:: ----------------------------------------------------------
:: ----------------------------------------------------------
:: -------Disable Windows Network Data Usage Monitoring Driver (ndu)--------
:: ----------------------------------------------------------
echo --- Disable Windows Network Data Usage Monitoring Driver (ndu)
:: Set the registry value: "HKLM\SYSTEM\CurrentControlSet\Services\ndu!Start"
PowerShell -ExecutionPolicy Unrestricted -Command "$registryPath = 'HKLM\SYSTEM\CurrentControlSet\Services\ndu'; $data = '4'; reg add 'HKLM\SYSTEM\CurrentControlSet\Services\ndu' /v 'Start' /t 'REG_DWORD' /d "^""$data"^"" /f"
:: ----------------------------------------------------------
:: ----------------------------------------------------------
:: -------Disable WSD Print Support (wsdprintdevice)--------
:: ----------------------------------------------------------
echo --- Disable WSD Print Support (wsdprintdevice)
:: Set the registry value: "HKLM\SYSTEM\CurrentControlSet\Services\wsdprintdevice!Start"
PowerShell -ExecutionPolicy Unrestricted -Command "$registryPath = 'HKLM\SYSTEM\CurrentControlSet\Services\wsdprintdevice'; $data = '4'; reg add 'HKLM\SYSTEM\CurrentControlSet\Services\wsdprintdevice' /v 'Start' /t 'REG_DWORD' /d "^""$data"^"" /f"
:: ----------------------------------------------------------
:: ----------------------------------------------------------
:: -------Disable Packet Monitor Driver (pktmon)--------
:: ----------------------------------------------------------
echo --- Disable Packet Monitor Driver (pktmon)
:: Set the registry value: "HKLM\SYSTEM\CurrentControlSet\Services\pktmon!Start"
PowerShell -ExecutionPolicy Unrestricted -Command "$registryPath = 'HKLM\SYSTEM\CurrentControlSet\Services\pktmon'; $data = '4'; reg add 'HKLM\SYSTEM\CurrentControlSet\Services\pktmon' /v 'Start' /t 'REG_DWORD' /d "^""$data"^"" /f"
:: ----------------------------------------------------------
:: ----------------------------------------------------------
:: -------Disable Link-Layer Topology Discovery Mapper I/O Driver (lltdio)--------
:: ----------------------------------------------------------
echo --- Disable Link-Layer Topology Discovery Mapper I/O Driver (lltdio)
:: Set the registry value: "HKLM\SYSTEM\CurrentControlSet\Services\lltdio!Start"
PowerShell -ExecutionPolicy Unrestricted -Command "$registryPath = 'HKLM\SYSTEM\CurrentControlSet\Services\lltdio'; $data = '4'; reg add 'HKLM\SYSTEM\CurrentControlSet\Services\lltdio' /v 'Start' /t 'REG_DWORD' /d "^""$data"^"" /f"
:: ----------------------------------------------------------
:: ----------------------------------------------------------
:: -------Disable Link-Layer Topology Discovery Responder (rspndr)--------
:: ----------------------------------------------------------
echo --- Disable Link-Layer Topology Discovery Responder (rspndr)
:: Set the registry value: "HKLM\SYSTEM\CurrentControlSet\Services\rspndr!Start"
PowerShell -ExecutionPolicy Unrestricted -Command "$registryPath = 'HKLM\SYSTEM\CurrentControlSet\Services\rspndr'; $data = '4'; reg add 'HKLM\SYSTEM\CurrentControlSet\Services\rspndr' /v 'Start' /t 'REG_DWORD' /d "^""$data"^"" /f"
:: ----------------------------------------------------------
:: ----------------------------------------------------------
:: -------Disable Beep (beep)--------
:: ----------------------------------------------------------
echo --- Disable Beep (beep)
:: Set the registry value: "HKLM\SYSTEM\CurrentControlSet\Services\beep!Start"
PowerShell -ExecutionPolicy Unrestricted -Command "$registryPath = 'HKLM\SYSTEM\CurrentControlSet\Services\beep'; $data = '4'; reg add 'HKLM\SYSTEM\CurrentControlSet\Services\beep' /v 'Start' /t 'REG_DWORD' /d "^""$data"^"" /f"
:: ----------------------------------------------------------
:: ----------------------------------------------------------
:: -------Disable Windows Projected File System (prjflt)--------
:: ----------------------------------------------------------
echo --- Disable Windows Projected File System (prjflt)
:: Set the registry value: "HKLM\SYSTEM\CurrentControlSet\Services\prjflt!Start"
PowerShell -ExecutionPolicy Unrestricted -Command "$registryPath = 'HKLM\SYSTEM\CurrentControlSet\Services\prjflt'; $data = '4'; reg add 'HKLM\SYSTEM\CurrentControlSet\Services\prjflt' /v 'Start' /t 'REG_DWORD' /d "^""$data"^"" /f"
:: ----------------------------------------------------------
:: ----------------------------------------------------------
:: -------Disable Microsoft Network Adapter Multiplexor Protocol (ndisimplatform)--------
:: ----------------------------------------------------------
echo --- Disable Microsoft Network Adapter Multiplexor Protocol (ndisimplatform)
:: Set the registry value: "HKLM\SYSTEM\CurrentControlSet\Services\ndisimplatform!Start"
PowerShell -ExecutionPolicy Unrestricted -Command "$registryPath = 'HKLM\SYSTEM\CurrentControlSet\Services\ndisimplatform'; $data = '4'; reg add 'HKLM\SYSTEM\CurrentControlSet\Services\ndisimplatform' /v 'Start' /t 'REG_DWORD' /d "^""$data"^"" /f"
:: ----------------------------------------------------------
:: ----------------------------------------------------------
:: -------Disable Remote Access NDIS WAN Driver (ndiswan)--------
:: ----------------------------------------------------------
echo --- Disable Remote Access NDIS WAN Driver (ndiswan)
:: Set the registry value: "HKLM\SYSTEM\CurrentControlSet\Services\ndiswan!Start"
PowerShell -ExecutionPolicy Unrestricted -Command "$registryPath = 'HKLM\SYSTEM\CurrentControlSet\Services\ndiswan'; $data = '4'; reg add 'HKLM\SYSTEM\CurrentControlSet\Services\ndiswan' /v 'Start' /t 'REG_DWORD' /d "^""$data"^"" /f"
:: ----------------------------------------------------------
:: ----------------------------------------------------------
:: -------Disable WSD Scan Support (wsdscan)--------
:: ----------------------------------------------------------
echo --- Disable WSD Scan Support (wsdscan)
:: Set the registry value: "HKLM\SYSTEM\CurrentControlSet\Services\wsdscan!Start"
PowerShell -ExecutionPolicy Unrestricted -Command "$registryPath = 'HKLM\SYSTEM\CurrentControlSet\Services\wsdscan'; $data = '4'; reg add 'HKLM\SYSTEM\CurrentControlSet\Services\wsdscan' /v 'Start' /t 'REG_DWORD' /d "^""$data"^"" /f"
:: ----------------------------------------------------------
:: ----------------------------------------------------------
:: -------Disable Microsoft Remote Desktop Input Driver (terminpt)--------
:: ----------------------------------------------------------
echo --- Disable Microsoft Remote Desktop Input Driver (terminpt)
:: Set the registry value: "HKLM\SYSTEM\CurrentControlSet\Services\terminpt!Start"
PowerShell -ExecutionPolicy Unrestricted -Command "$registryPath = 'HKLM\SYSTEM\CurrentControlSet\Services\terminpt'; $data = '4'; reg add 'HKLM\SYSTEM\CurrentControlSet\Services\terminpt' /v 'Start' /t 'REG_DWORD' /d "^""$data"^"" /f"
:: ----------------------------------------------------------
:: ----------------------------------------------------------
:: -------Disable Remote Desktop USB Hub Class Filter Driver (tsusbflt)--------
:: ----------------------------------------------------------
echo --- Disable Remote Desktop USB Hub Class Filter Driver (tsusbflt)
:: Set the registry value: "HKLM\SYSTEM\CurrentControlSet\Services\tsusbflt!Start"
PowerShell -ExecutionPolicy Unrestricted -Command "$registryPath = 'HKLM\SYSTEM\CurrentControlSet\Services\tsusbflt'; $data = '4'; reg add 'HKLM\SYSTEM\CurrentControlSet\Services\tsusbflt' /v 'Start' /t 'REG_DWORD' /d "^""$data"^"" /f"
:: ----------------------------------------------------------
:: ----------------------------------------------------------
:: -------Disable Remote Desktop Generic USB Device (tsusbgd)--------
:: ----------------------------------------------------------
echo --- Disable Remote Desktop Generic USB Device (tsusbgd)
:: Set the registry value: "HKLM\SYSTEM\CurrentControlSet\Services\tsusbgd!Start"
PowerShell -ExecutionPolicy Unrestricted -Command "$registryPath = 'HKLM\SYSTEM\CurrentControlSet\Services\tsusbgd'; $data = '4'; reg add 'HKLM\SYSTEM\CurrentControlSet\Services\tsusbgd' /v 'Start' /t 'REG_DWORD' /d "^""$data"^"" /f"
:: ----------------------------------------------------------
:: ----------------------------------------------------------
:: -------Disable Microsoft USB PRINTER Class (usbprint)--------
:: ----------------------------------------------------------
echo --- Disable Microsoft USB PRINTER Class (usbprint)
:: Set the registry value: "HKLM\SYSTEM\CurrentControlSet\Services\usbprint!Start"
PowerShell -ExecutionPolicy Unrestricted -Command "$registryPath = 'HKLM\SYSTEM\CurrentControlSet\Services\usbprint'; $data = '4'; reg add 'HKLM\SYSTEM\CurrentControlSet\Services\usbprint' /v 'Start' /t 'REG_DWORD' /d "^""$data"^"" /f"
:: ----------------------------------------------------------
:: ----------------------------------------------------------
:: -------Disable Remote Desktop Video Miniport Driver (rdpvideominiport)--------
:: ----------------------------------------------------------
echo --- Disable Remote Desktop Video Miniport Driver (rdpvideominiport)
:: Set the registry value: "HKLM\SYSTEM\CurrentControlSet\Services\rdpvideominiport!Start"
PowerShell -ExecutionPolicy Unrestricted -Command "$registryPath = 'HKLM\SYSTEM\CurrentControlSet\Services\rdpvideominiport'; $data = '4'; reg add 'HKLM\SYSTEM\CurrentControlSet\Services\rdpvideominiport' /v 'Start' /t 'REG_DWORD' /d "^""$data"^"" /f"
:: ----------------------------------------------------------
:: ----------------------------------------------------------
:: -------Disable Remote Desktop Device Redirector Driver (rdpdr)--------
:: ----------------------------------------------------------
echo --- Disable Remote Desktop Device Redirector Driver (rdpdr)
:: Set the registry value: "HKLM\SYSTEM\CurrentControlSet\Services\rdpdr!Start"
PowerShell -ExecutionPolicy Unrestricted -Command "$registryPath = 'HKLM\SYSTEM\CurrentControlSet\Services\rdpdr'; $data = '4'; reg add 'HKLM\SYSTEM\CurrentControlSet\Services\rdpdr' /v 'Start' /t 'REG_DWORD' /d "^""$data"^"" /f"
:: ----------------------------------------------------------
:: ----------------------------------------------------------
:: -------Disable Remote Desktop Device Redirector Bus Driver (rdpbus)--------
:: ----------------------------------------------------------
echo --- Disable Remote Desktop Device Redirector Bus Driver (rdpbus)
:: Set the registry value: "HKLM\SYSTEM\CurrentControlSet\Services\rdpbus!Start"
PowerShell -ExecutionPolicy Unrestricted -Command "$registryPath = 'HKLM\SYSTEM\CurrentControlSet\Services\rdpbus'; $data = '4'; reg add 'HKLM\SYSTEM\CurrentControlSet\Services\rdpbus' /v 'Start' /t 'REG_DWORD' /d "^""$data"^"" /f"
:: ----------------------------------------------------------
:: ----------------------------------------------------------
:: -------Disable WAN Miniport (SSTP) (rassstp)--------
:: ----------------------------------------------------------
echo --- Disable WAN Miniport (SSTP) (rassstp)
:: Set the registry value: "HKLM\SYSTEM\CurrentControlSet\Services\rassstp!Start"
PowerShell -ExecutionPolicy Unrestricted -Command "$registryPath = 'HKLM\SYSTEM\CurrentControlSet\Services\rassstp'; $data = '4'; reg add 'HKLM\SYSTEM\CurrentControlSet\Services\rassstp' /v 'Start' /t 'REG_DWORD' /d "^""$data"^"" /f"
:: ----------------------------------------------------------
:: ----------------------------------------------------------
:: -------Disable Remote Access PPPOE Driver (raspppoe)--------
:: ----------------------------------------------------------
echo --- Disable Remote Access PPPOE Driver (raspppoe)
:: Set the registry value: "HKLM\SYSTEM\CurrentControlSet\Services\raspppoe!Start"
PowerShell -ExecutionPolicy Unrestricted -Command "$registryPath = 'HKLM\SYSTEM\CurrentControlSet\Services\raspppoe'; $data = '4'; reg add 'HKLM\SYSTEM\CurrentControlSet\Services\raspppoe' /v 'Start' /t 'REG_DWORD' /d "^""$data"^"" /f"
:: ----------------------------------------------------------
:: ----------------------------------------------------------
:: -------Disable High-Capacity Floppy Disk Drive (sfloppy)--------
:: ----------------------------------------------------------
echo --- Disable High-Capacity Floppy Disk Drive (sfloppy)
:: Set the registry value: "HKLM\SYSTEM\CurrentControlSet\Services\sfloppy!Start"
PowerShell -ExecutionPolicy Unrestricted -Command "$registryPath = 'HKLM\SYSTEM\CurrentControlSet\Services\sfloppy'; $data = '4'; reg add 'HKLM\SYSTEM\CurrentControlSet\Services\sfloppy' /v 'Start' /t 'REG_DWORD' /d "^""$data"^"" /f"
:: ----------------------------------------------------------
:: ----------------------------------------------------------
:: -------Disable WAN Miniport (L2TP) (rasl2tp)--------
:: ----------------------------------------------------------
echo --- Disable WAN Miniport (L2TP) (rasl2tp)
:: Set the registry value: "HKLM\SYSTEM\CurrentControlSet\Services\rasl2tp!Start"
PowerShell -ExecutionPolicy Unrestricted -Command "$registryPath = 'HKLM\SYSTEM\CurrentControlSet\Services\rasl2tp'; $data = '4'; reg add 'HKLM\SYSTEM\CurrentControlSet\Services\rasl2tp' /v 'Start' /t 'REG_DWORD' /d "^""$data"^"" /f"
:: ----------------------------------------------------------
:: ----------------------------------------------------------
:: -------Disable WAN Miniport (IKEv2) (rasagilevpn)--------
:: ----------------------------------------------------------
echo --- Disable WAN Miniport (IKEv2) (rasagilevpn)
:: Set the registry value: "HKLM\SYSTEM\CurrentControlSet\Services\rasagilevpn!Start"
PowerShell -ExecutionPolicy Unrestricted -Command "$registryPath = 'HKLM\SYSTEM\CurrentControlSet\Services\rasagilevpn'; $data = '4'; reg add 'HKLM\SYSTEM\CurrentControlSet\Services\rasagilevpn' /v 'Start' /t 'REG_DWORD' /d "^""$data"^"" /f"
:: ----------------------------------------------------------
:: ----------------------------------------------------------
:: -------Disable Remote Access Auto Connection Driver (rasacd)--------
:: ----------------------------------------------------------
echo --- Disable Remote Access Auto Connection Driver (rasacd)
:: Set the registry value: "HKLM\SYSTEM\CurrentControlSet\Services\rasacd!Start"
PowerShell -ExecutionPolicy Unrestricted -Command "$registryPath = 'HKLM\SYSTEM\CurrentControlSet\Services\rasacd'; $data = '4'; reg add 'HKLM\SYSTEM\CurrentControlSet\Services\rasacd' /v 'Start' /t 'REG_DWORD' /d "^""$data"^"" /f"
:: ----------------------------------------------------------
:: ----------------------------------------------------------
:: -------Disable WAN Miniport (PPTP) (pptpminiport)--------
:: ----------------------------------------------------------
echo --- Disable WAN Miniport (PPTP) (pptpminiport)
:: Set the registry value: "HKLM\SYSTEM\CurrentControlSet\Services\pptpminiport!Start"
PowerShell -ExecutionPolicy Unrestricted -Command "$registryPath = 'HKLM\SYSTEM\CurrentControlSet\Services\pptpminiport'; $data = '4'; reg add 'HKLM\SYSTEM\CurrentControlSet\Services\pptpminiport' /v 'Start' /t 'REG_DWORD' /d "^""$data"^"" /f"
:: ----------------------------------------------------------
:: ----------------------------------------------------------
:: -------Disable Microsoft Link-Layer Discovery Protocol (mslldp)--------
:: ----------------------------------------------------------
echo --- Disable Microsoft Link-Layer Discovery Protocol (mslldp)
:: Set the registry value: "HKLM\SYSTEM\CurrentControlSet\Services\mslldp!Start"
PowerShell -ExecutionPolicy Unrestricted -Command "$registryPath = 'HKLM\SYSTEM\CurrentControlSet\Services\mslldp'; $data = '4'; reg add 'HKLM\SYSTEM\CurrentControlSet\Services\mslldp' /v 'Start' /t 'REG_DWORD' /d "^""$data"^"" /f"
:: ----------------------------------------------------------
:: ----------------------------------------------------------
:: -------Disable Floppy Disk Driver (flpydisk)--------
:: ----------------------------------------------------------
echo --- Disable Floppy Disk Driver (flpydisk)
:: Set the registry value: "HKLM\SYSTEM\CurrentControlSet\Services\flpydisk!Start"
PowerShell -ExecutionPolicy Unrestricted -Command "$registryPath = 'HKLM\SYSTEM\CurrentControlSet\Services\flpydisk'; $data = '4'; reg add 'HKLM\SYSTEM\CurrentControlSet\Services\flpydisk' /v 'Start' /t 'REG_DWORD' /d "^""$data"^"" /f"
:: ----------------------------------------------------------
:: ----------------------------------------------------------
:: -------Disable Floppy Disk Controller Driver (fdc)--------
:: ----------------------------------------------------------
echo --- Disable Floppy Disk Controller Driver (fdc)
:: Set the registry value: "HKLM\SYSTEM\CurrentControlSet\Services\fdc!Start"
PowerShell -ExecutionPolicy Unrestricted -Command "$registryPath = 'HKLM\SYSTEM\CurrentControlSet\Services\fdc'; $data = '4'; reg add 'HKLM\SYSTEM\CurrentControlSet\Services\fdc' /v 'Start' /t 'REG_DWORD' /d "^""$data"^"" /f"
:: ----------------------------------------------------------
:: ----------------------------------------------------------
:: -------Disable Chelsio Virtual Bus Driver (cht4vbd)--------
:: ----------------------------------------------------------
echo --- Disable Chelsio Virtual Bus Driver (cht4vbd)
:: Set the registry value: "HKLM\SYSTEM\CurrentControlSet\Services\cht4vbd!Start"
PowerShell -ExecutionPolicy Unrestricted -Command "$registryPath = 'HKLM\SYSTEM\CurrentControlSet\Services\cht4vbd'; $data = '4'; reg add 'HKLM\SYSTEM\CurrentControlSet\Services\cht4vbd' /v 'Start' /t 'REG_DWORD' /d "^""$data"^"" /f"
:: ----------------------------------------------------------
:: ----------------------------------------------------------
:: -------Disable Chelsio iSCSI Storport Miniport Driver (cht4iscsi)--------
:: ----------------------------------------------------------
echo --- Disable Chelsio iSCSI Storport Miniport Driver (cht4iscsi)
:: Set the registry value: "HKLM\SYSTEM\CurrentControlSet\Services\cht4iscsi!Start"
PowerShell -ExecutionPolicy Unrestricted -Command "$registryPath = 'HKLM\SYSTEM\CurrentControlSet\Services\cht4iscsi'; $data = '4'; reg add 'HKLM\SYSTEM\CurrentControlSet\Services\cht4iscsi' /v 'Start' /t 'REG_DWORD' /d "^""$data"^"" /f"
:: ----------------------------------------------------------
:: ----------------------------------------------------------
:: -------Disable Browser (bowser)--------
:: ----------------------------------------------------------
echo --- Disable Browser (bowser)
:: Set the registry value: "HKLM\SYSTEM\CurrentControlSet\Services\bowser!Start"
PowerShell -ExecutionPolicy Unrestricted -Command "$registryPath = 'HKLM\SYSTEM\CurrentControlSet\Services\bowser'; $data = '4'; reg add 'HKLM\SYSTEM\CurrentControlSet\Services\bowser' /v 'Start' /t 'REG_DWORD' /d "^""$data"^"" /f"
:: ----------------------------------------------------------
Revert code
No response
Suggested category
No response
Recommendation level
None
Additional information
These scripts are used on Windows 10 (Version 22H2 (Operating System Build 19045.4894)).
I already listed some but not all services and programs here. (#517)
However, more information is optional.
I found out that ReadyBoost, which is obsolete, and the Volume Shadow Copy Driver, which should not be needed in terms of privacy, should not be strictly disabled for booting Windows 10 22H2, which I find controversial.
The Microsoft IPv6 Protocol Driver is also controversial because IPv6 has become the modern standard, whereas IPv4 should have been made more secure for Internet use. Not only that, but also the IPv6 for a browser such as Google Chrome gets more secure in modern days.