Merge pull request #896 from Atlas-OS/dev

Atlas-OS · Aug 24, 2023 · fd7c173 · fd7c173
2 parents 79024e6 + eb875a4
commit fd7c173
Show file tree

Hide file tree

Showing 304 changed files with 3,365 additions and 2,063 deletions.
diff --git a/src/playbook/Configuration/atlas/appx.yml b/src/playbook/Configuration/atlas/appx.yml
@@ -1,69 +1,31 @@
 ---
 title: APPX
-description: Removes APPX packages
+description: Removes APPX packages and prevents them from being reinstalled
 privilege: TrustedInstaller
 actions:
   - !writeStatus: {status: 'Removing APPX packages'}
 
-  # The reason of removing those applications is that there is a huge potential of them sending users'
-  # data, showing unwanted content including advertisements and using hardware resources. They can also
+  # The reason of removing those applications is that there is a potential of them sending user data,
+  # showing unwanted content including advertisements and using hardware resources. They can also
   # simply be annoyances that are never used. However, most of these applications can be reinstalled
   # via Microsoft Store in case user need them.
 
   # https://docs.microsoft.com/en-us/windows/application-management/apps-in-windows-10
 
-  # ------------------------------------------------------------------------------------------------ #
-  # Applications added back: Dependencies or hidden apps that do not get in the way of users.        #
-  # ------------------------------------------------------------------------------------------------ #
+  #####################################################################################################
 
-  # File Picker
-  # - !appx: {name: '1527c705-839a-4832-9118-54d4Bd6a0c89*', type: family}
-
-  # UWP File Explorer
-  # - !appx: {name: 'c5e2524a-ea46-4f67-841f-6a9465d9d515*', type: family}
-
-  # Add Folder Suggestions dialog
-  # - !appx: {name: 'F46D4000-FD22-4DB4-AC8E-4E1DDDE828FE*', type: family}
-
-  # Related to Windows Hello - biometric (face and fingerprint recognition)
-  # - !appx: {name: '*Microsoft.BioEnrollment*', type: family}
-
-  # Used to install AppX and UWP applications in Windows
-  # Contains the Windows Package Manager
-  # - !appx: {name: '*Microsoft.DesktopAppInstaller*', type: family}
-
-  # Eye Control - dependency of Mixed Reality?
-  # - !appx: {name: '*Microsoft.ECApp*', type: family}
-
-  # Codecs
-  # - !appx: {name: '*Microsoft.WebMediaExtensions*', type: family}
-  # - !appx: {name: '*Microsoft.WebpImageExtension*', type: family}
-  # - !appx: {name: '*Microsoft.VP9VideoExtensions*', type: family}
-  # - !appx: {name: '*Microsoft.HEIFImageExtension*', type: family}
-
-  # Dependency for Phone Link
-  # - !appx: {name: '*Microsoft.Windows.CallingShellApp*', type: family}
-
-  # USB eject for external graphics cards
-  # - !appx: {name: '*Microsoft.Windows.XGpuEjectDialog*', type: family}
-
-  # Barcode Preview - harmless package, related to POS
-  # - !appx: {name: '*Windows.CBSPreview*', type: family}
-
-  # - !appx: {name: '*Microsoft.Windows.AddSuggestedFoldersToLibraryDialog*', type: family}
-  # - !appx: {name: '*Microsoft.AsyncTextService*', type: family}
-  # - !appx: {name: '*Microsoft.Windows.PinningConfirmationDialog*', type: family}
-  # - !appx: {name: '*Microsoft.LockApp*', type: family}
-  # - !appx: {name: '*Microsoft.Windows.NarratorQuickStart*', type: family}
-
-  # ------------------------------------------------------------------------------------------------ #
+  # Clipchamp
+  - !appx: {name: '*Clipchamp*', type: family}
 
   # Disney
   - !appx: {name: '*Disney*', type: family}
 
   # Spotify
   - !appx: {name: '*Spotify*', type: family}
 
+  # Microsoft Teams
+  - !appx: {name: '*MicrosoftTeams*', type: family}
+
   # Cortana
   - !appx: {name: '*Microsoft.549981C3F5F10*', type: family}
 
@@ -86,22 +48,35 @@ actions:
   # https://www.mdsec.co.uk/2021/03/phishing-users-to-take-a-test
   - !appx: {name: '*Microsoft.Windows.SecureAssessmentBrowser*', type: family}
 
+  # Paint 3D
+  - !appx: {name: '*Microsoft.MSPaint*', type: family}
+
+  # Widgets
+  - !appx: {name: '*MicrosoftWindows.Client.WebExperience*', type: family}
+
+  # Get Started
+  - !appx: {name: '*Microsoft.Getstarted*', type: family}
+  - !appx: {name: '*WebExperienceHost*', type: app}
+
+  - !appx: {name: '*MicrosoftCorporationII.MicrosoftFamily*', type: family}
+  - !appx: {name: '*MicrosoftCorporationII.QuickAssist*', type: family}
   - !appx: {name: '*Microsoft.Advertising.Xaml*', type: family}
+  - !appx: {name: '*Microsoft.BingNews*', type: family}
+  - !appx: {name: '*Microsoft.BingSearch*', type: family}
   - !appx: {name: '*Microsoft.BingWeather*', type: family}
   - !appx: {name: '*Microsoft.GetHelp*', type: family}
-  - !appx: {name: '*Microsoft.Getstarted*', type: family}
   - !appx: {name: '*Microsoft.Microsoft3DViewer*', type: family}
-  # - !appx: {name: '*microsoft.microsoftedge.stable*', type: family}
-  # - !appx: {name: '*Microsoft.MicrosoftEdgeDevToolsClient*', type: family}
   - !appx: {name: '*Microsoft.MicrosoftOfficeHub*', type: family}
   - !appx: {name: '*Microsoft.MicrosoftSolitaireCollection*', type: family}
   - !appx: {name: '*Microsoft.MicrosoftStickyNotes*', type: family}
-  - !appx: {name: '*Microsoft.MSPaint*', type: family}
   - !appx: {name: '*Microsoft.Office.OneNote*', type: family}
+  - !appx: {name: '*Microsoft.Outlook*', type: family}
   - !appx: {name: '*Microsoft.People*', type: family}
+  - !appx: {name: '*Microsoft.PowerAutomateDesktop*', type: family}
   - !appx: {name: '*Microsoft.Windows.PeopleExperienceHost*', type: family}
   - !appx: {name: '*Microsoft.ScreenSketch*', type: family}
   - !appx: {name: '*Microsoft.SkypeApp*', type: family}
+  - !appx: {name: '*Microsoft.Todos*', type: family}
   - !appx: {name: '*Microsoft.Wallet*', type: family}
   - !appx: {name: '*Microsoft.Windows.AssignedAccessLockApp*', type: family}
   - !appx: {name: '*Microsoft.Windows.ParentalControls*', type: family}
@@ -115,7 +90,41 @@ actions:
   - !appx: {name: '*Microsoft.ZuneMusic*', type: family}
   - !appx: {name: '*Microsoft.ZuneVideo*', type: family}
 
-  # Necessary to refresh start menu related entries
+  # Prevent provisioned applications from being reinstalled
+  # https://learn.microsoft.com/en-us/windows/application-management/remove-provisioned-apps-during-update
+  - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Clipchamp.Clipchamp_yxz26nhyzhsrt', operation: add}
+  - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.549981C3F5F10_8wekyb3d8bbwe', operation: add}
+  - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.BingNews_8wekyb3d8bbwe', operation: add}
+  - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.BingWeather_8wekyb3d8bbwe', operation: add}
+  - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.GetHelp_8wekyb3d8bbwe', operation: add}
+  - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.Getstarted_8wekyb3d8bbwe', operation: add}
+  - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.MicrosoftOfficeHub_8wekyb3d8bbwe', operation: add}
+  - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.MicrosoftSolitaireCollection_8wekyb3d8bbwe', operation: add}
+  - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.MicrosoftStickyNotes_8wekyb3d8bbwe', operation: add}
+  - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.Microsoft3DViewer_8wekyb3d8bbwe', operation: add}
+  - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.People_8wekyb3d8bbwe', operation: add}
+  - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.PowerAutomateDesktop_8wekyb3d8bbwe', operation: add}
+  - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.ScreenSketch_8wekyb3d8bbwe', operation: add}
+  - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.Todos_8wekyb3d8bbwe', operation: add}
+  - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.Windows.Photos_8wekyb3d8bbwe', operation: add}
+  - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.WindowsAlarms_8wekyb3d8bbwe', operation: add}
+  - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.WindowsCamera_8wekyb3d8bbwe', operation: add}
+  - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\microsoft.windowscommunicationsapps_8wekyb3d8bbwe', operation: add}
+  - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.WindowsFeedbackHub_8wekyb3d8bbwe', operation: add}
+  - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.WindowsMaps_8wekyb3d8bbwe', operation: add}
+  - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.WindowsSoundRecorder_8wekyb3d8bbwe', operation: add}
+  - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.YourPhone_8wekyb3d8bbwe', operation: add}
+  - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.ZuneMusic_8wekyb3d8bbwe', operation: add}
+  - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.ZuneVideo_8wekyb3d8bbwe', operation: add}
+  - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\MicrosoftCorporationII.QuickAssist_8wekyb3d8bbwe', operation: add}
+  - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\MicrosoftTeams_8wekyb3d8bbwe', operation: add}
+  - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\MicrosoftWindows.Client.WebExperience_cw5n1h2txyewy', operation: add}
+  - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.SkypeApp_kzf8qxf38zg5c', operation: add}
+  - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.Office.OneNote_8wekyb3d8bbwe', operation: add}
+  - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.MixedReality.Portal_8wekyb3d8bbwe', operation: add}
+
+  # Clear caches of Start menu and more
   - !appx: {operation: clearCache, name: '*Client.CBS*'}
   - !appx: {operation: clearCache, name: '*StartMenuExperienceHost*'}
   - !appx: {operation: clearCache, name: '*Windows.Search*'}
+  - !appx: {operation: clearCache, name: '*Microsoft.Windows.SecHealthUI'}
diff --git a/src/playbook/Configuration/atlas/components.yml b/src/playbook/Configuration/atlas/components.yml
@@ -4,45 +4,58 @@ description: Removes certain Windows components
 privilege: TrustedInstaller
 actions:
     # Windows Defender
-  - !writeStatus: {status: 'Removing Windows Defender', option: 'defender-disable'}
+  - !writeStatus: {status: 'Disabling Windows Defender', option: 'defender-disable'}
   - !run:
-    exe: 'C:\Users\Default\Desktop\Atlas\3. Configuration\5. Security\Defender\Toggle Defender.cmd'
-    args: '-Disable'
-    wait: true
-    option: 'defender-disable'
-  - !run:
-    exe: 'C:\Users\Default\Desktop\Atlas\3. Configuration\5. Security\Defender\Toggle Defender.cmd'
+    exe: 'C:\Windows\AtlasDesktop\3. Configuration\5. Security\Defender\Toggle Defender.cmd'
     args: '-Disable'
     wait: true
     option: 'defender-disable'
     # Remove Security Center startup item
   - !registryValue: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run', value: 'SecurityHealth', operation: delete}
+    # Causes slow app loading issues, and sends data to Microsoft
+  - !registryValue:
+    path: 'HKLM\SYSTEM\CurrentControlSet\Control\CI\Policy'
+    value: 'VerifiedAndReputablePolicyState'
+    data: '0'
+    type: REG_DWORD
 
     # Microsoft Edge
   - !writeStatus: {status: 'Removing Microsoft Edge', option: 'uninstall-edge'}
   - !run:
-    exe: 'C:\Windows\AtlasModules\Tools\NSudoLG.exe'
-    args: '-U:E -P:E -Wait -ShowWindowMode:Hide powershell.exe -NoP -EP Unrestricted -File "C:\Users\Default\Desktop\Atlas\1. Software\Remove Edge.ps1" -AMEWizard'
+    exe: 'C:\Windows\AtlasModules\Tools\NSudoLC.exe'
+    args: '-U:E -UseCurrentConsole -Wait powershell.exe -NoP -EP Unrestricted -File "C:\Windows\AtlasDesktop\1. Software\Remove Edge.ps1" -AMEWizard'
     wait: true
     option: 'uninstall-edge'
     # AppX uninstallation in the script seems to fail with NSudo, therefore it's not used and AME Wizard is used instead
   - !appx: {name: 'Microsoft.MicrosoftEdge_8wekyb3d8bbwe', type: family, option: 'uninstall-edge'}
+  - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.MicrosoftEdge.Stable_8wekyb3d8bbwe', operation: add, option: 'uninstall-edge'}
+  - !registryKey: {path: 'HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Appx\AppxAllUserStore\Deprovisioned\Microsoft.MicrosoftEdge_8wekyb3d8bbwe', operation: add, option: 'uninstall-edge'}
+
+    # NoTelemetry Package
+  - !run:
+    exe: 'C:\Windows\AtlasModules\Scripts\online-sxs.cmd'
+    args: '"C:\Windows\AtlasModules\Packages\Z-Atlas-NoTelemetry-Package31bf3856ad364e35amd643.0.0.0.cab"'
+    wait: true
+
+    # Misc Package
+  - !run:
+    exe: 'C:\Windows\AtlasModules\Scripts\online-sxs.cmd'
+    args: '"C:\Windows\AtlasModules\Packages\Z-Atlas-Misc-Remover-Package31bf3856ad364e35amd643.0.0.0.cab"'
+    wait: true
 
     # OneDrive
   - !writeStatus: {status: 'Removing OneDrive'}
-  - !run: {exeDir: true, exe: "ONED.cmd"}
-  
+  - !run: {exeDir: true, exe: 'ONED.cmd'}
+
     # Update Health Tools
   - !writeStatus: {status: 'Removing Update Health Tools'}
-  - !powerShell: {command: 'Uninstall-MsiexecAppByName "Microsoft Update Health Tools"'}
+  - !powerShell: {command: 'Import-Module -Name """$env:windir\AtlasModules\Scripts\Modules\Uninstall-MsiexecAppByName\Uninstall-MsiexecAppByName.psm1"""; Uninstall-MsiexecAppByName -Name ''Microsoft Update Health Tools'''}
 
     # PC Health Check
   - !writeStatus: {status: 'Removing PC Health Check'}
-  - !powerShell: {command: 'Uninstall-MsiexecAppByName "Windows PC Health Check"'}
+  - !powerShell: {command: 'Import-Module -Name """$env:windir\AtlasModules\Scripts\Modules\Uninstall-MsiexecAppByName\Uninstall-MsiexecAppByName.psm1"""; Uninstall-MsiexecAppByName -Name ''Windows PC Health Check'''}
 
-    # This could be done in config.yml, however on the off-chance that
-    # the Playbook fails or the system shuts down, we want the users converted
-    # before potentially making any MS Accounts inoperable in packages.yml.
+    # Converts all Microsoft user accounts to local accounts
   - !run:
     exeDir: true
     exe: 'CONVERTUSERS.cmd'