remy.yml

#dennyhalim.com #testing using remy to install new box or update old box
#usages:
# download and install remy https://github.com/yetanotherchris/Remy/releases/latest
# remy run -v -c https://is.gd/remy_yml

# https://raw.githubusercontent.com/dennyhalim/cfg/master/remy.gif

name: "dennyhalim.com newbox using remy"
tasks:
  -
    description: "Install chocolatey"
    runner: install-chocolatey
  -
    description: "install windows features"
    runner: windows-feature
    includeAllSubFeatures: false
    ShouldRemove: false
    IsWindows10: true
    features: 
      - TelnetClient
      - NetFx3
      - NetFx4-AdvSrvs
  -
    description: "remove windows features"
    runner: windows-feature
    includeAllSubFeatures: true
    ShouldRemove: true
    IsWindows10: true
    features: 
      - FS-SMB1
      - SMB1Protocol
  -
    description: "powershell example"
    runner: powershell
    commands:
      - Enable-ComputerRestore -drive "c:\"
      - Set-WindowsExplorerOptions -EnableShowFileExtensions -EnableShowHiddenFilesFoldersDrives # -EnableShowProtectedOSFiles
#      - Set-ItemProperty -Path "HKLM:\System\CurrentControlSet\Control\SecurityProviders\WDigest" -Name UseLogonCredential -Value 0 -Force
      - Set-ItemProperty -Path "HKLM:\SOFTWARE\Policies\Microsoft\Windows\DataCollection" AllowTelemetry -Type DWORD -Value 0 -Force
      - Set-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" SafeModeBlockNonAdmins -Type DWORD -Value 1 -Force
      - Set-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\DateTime\Servers" -Name 0 -Value "pool.ntp.org" -Force
      - Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters" SMB1 -Type DWORD -Value 0 -Force
# https://aka.ms/StopUsingSMB1
#      - Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Services\LanmanWorkstation" -Name DependOnService -Value @("bowser","mrxsmb20","nsi") -Force
#      - Set-Service -Name mrxsmb10 -StartupType Disabled 
      - Set-Service -Name DiagTrack -StartupType Disabled #diagnostic tracking
      - Set-Service -Name dmwappushservice -StartupType Disabled # tracking
      - Set-Service -Name WSearch -StartupType Disabled #search indexer
      - Set-Service -Name wuauserv -StartupType Manual #windows auto update
      - choco upgrade -ry 7zip autohotkey.portable boxstarter chocolatey firefoxesr geany remy toolsroot vlc
      - choco upgrade -ry fastcopy.portable git.portable hwinfo.portable kitty.portable processhacker.portable recuva.portable screentogif spacesniffer unxutils
      - Enable-UAC
      - $kinstlr = "$env:windir\temp\kinstlr.exe"; Invoke-WebRequest -Uri https://app.kabuto.io/dl/c/w1gowhcgaw-zmu0 -OutFile $kinstlr; . $kinstlr
      - dism.exe /online /Enable-Feature /FeatureName:TelnetClient
      - dism.exe /online /Enable-Feature /FeatureName:Netfx3 /FeatureName:NetFx4-AdvSrvs #win8+
      - dism.exe /online /Disable-Feature /FeatureName:FS-SMB1 #server
      - dism.exe /online /Disable-Feature /FeatureName:SMB1Protocol #win8+
      - Checkpoint-Computer -Description 'dennyhalim.com remy finished'