CoreOS Logo

Advanced Configuration

Advanced settings and customization options for AtomOS

Registry Tweaks

The Windows Registry contains settings that can be modified to enhance performance, security, and functionality. Here are some useful registry tweaks for AtomOS:

Performance Tweaks

Disable Menu Show Delay

This tweak reduces the delay when opening menus in Windows.

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Control Panel\Desktop]
"MenuShowDelay"="0"

Disable Windows Animations

This tweak disables animations for a more responsive experience.

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Control Panel\Desktop\WindowMetrics]
"MinAnimate"="0"

Optimize Processor Scheduling

This tweak prioritizes foreground applications for better responsiveness.

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\PriorityControl]
"Win32PrioritySeparation"=dword:00000026

Disable Startup Delay

This tweak removes the delay for startup applications.

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Serialize]
"StartupDelayInMSec"=dword:00000000

Disable Background Apps

This tweak prevents apps from running in the background.

Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\BackgroundAccessApplications]
"GlobalUserDisabled"=dword:00000001

PowerShell Scripts

PowerShell scripts can automate complex tasks and configurations. Here are some useful scripts for AtomOS:

Disable Unnecessary Services

# Disable unnecessary services
$services = @(
  "DiagTrack", # Connected User Experiences and Telemetry
  "dmwappushservice", # WAP Push Message Routing Service
  "MapsBroker", # Downloaded Maps Manager
  "XblAuthManager", # Xbox Live Auth Manager
  "XblGameSave", # Xbox Live Game Save
  "XboxNetApiSvc" # Xbox Live Networking Service
)

foreach ($service in $services) {
  Set-Service -Name $service -StartupType Disabled
  Stop-Service -Name $service -Force
  Write-Host "Disabled $service"
}

Optimize Windows Settings

# Disable Windows Defender (use with caution)
Set-ItemProperty -Path "HKLM:\SOFTWARE\Policies\Microsoft\Windows Defender" -Name "DisableAntiSpyware" -Type DWord -Value 1

# Disable Game DVR
New-Item -Path "HKLM:\SOFTWARE\Policies\Microsoft\Windows\GameDVR" -Force
Set-ItemProperty -Path "HKLM:\SOFTWARE\Policies\Microsoft\Windows\GameDVR" -Name "AllowGameDVR" -Type DWord -Value 0

# Set power plan to high performance
powercfg /setactive 8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c

Optimize CPU Performance

# Disable CPU throttling
$powerScheme = powercfg /getactivescheme
$schemeGUID = ($powerScheme -split ' ')[3]

# Set processor performance to maximum
powercfg /setacvalueindex $schemeGUID 54533251-82be-4824-96c1-47b60b740d00 893dee8e-2bef-41e0-89c6-b55d0929964c 100
powercfg /setdcvalueindex $schemeGUID 54533251-82be-4824-96c1-47b60b740d00 893dee8e-2bef-41e0-89c6-b55d0929964c 100

# Set minimum processor state to 100%
powercfg /setacvalueindex $schemeGUID 54533251-82be-4824-96c1-47b60b740d00 893dee8e-2bef-41e0-89c6-b55d0929964c 100

# Apply changes
powercfg /setactive $schemeGUID

Optimize Disk Performance

# Disable Windows Search Indexing
Stop-Service "WSearch" -Force
Set-Service "WSearch" -StartupType Disabled

# Disable Superfetch/SysMain
Stop-Service "SysMain" -Force
Set-Service "SysMain" -StartupType Disabled

# Disable hibernation to free up disk space
powercfg /h off

# Disable disk defragmentation schedule
schtasks /Change /TN "\Microsoft\Windows\Defrag\ScheduledDefrag" /Disable

Performance Optimizations

CPU Optimizations

  • Disable CPU-intensive background services
  • Set processor scheduling to favor foreground applications
  • Disable CPU throttling for desktop systems
  • Optimize core parking settings
  • Adjust process priority for critical applications

Storage Optimizations

  • Disable Windows Search Indexing
  • Disable Superfetch/SysMain
  • Optimize virtual memory settings
  • Disable hibernation to free up disk space
  • Enable TRIM for SSDs

Network Optimizations

  • Optimize TCP/IP settings
  • Disable unused network protocols
  • Adjust network adapter settings
  • Optimize DNS settings
  • Disable NetBIOS and LLMNR

Security Hardening

System Hardening

  • Enable BitLocker disk encryption
  • Configure Windows Firewall with advanced settings
  • Disable unnecessary services and features
  • Implement strong password policies
  • Enable Secure Boot and TPM
  • Disable remote access features

Privacy Enhancements

  • Disable telemetry and data collection
  • Configure privacy settings in Windows
  • Disable targeted advertising
  • Limit application permissions
  • Configure browser privacy settings
  • Use DNS over HTTPS (DoH)

Group Policy Settings

Group Policy settings provide a centralized way to configure Windows. Here are some recommended Group Policy settings for AtomOS:

Security Policies

  • Disable Guest Account:
    Computer Configuration > Windows Settings > Security Settings > Local Policies > Security Options > Accounts: Guest account status > Disabled
  • Enforce Password Complexity:
    Computer Configuration > Windows Settings > Security Settings > Account Policies > Password Policy > Password must meet complexity requirements > Enabled
  • Disable Remote Desktop:
    Computer Configuration > Administrative Templates > Windows Components > Remote Desktop Services > Remote Desktop Session Host > Connections > Allow users to connect remotely using Remote Desktop Services > Disabled
  • Block Untrusted Fonts:
    Computer Configuration > Administrative Templates > System > Mitigation Options > Untrusted Font Blocking > Enabled
  • Disable AutoPlay:
    Computer Configuration > Administrative Templates > Windows Components > AutoPlay Policies > Turn off AutoPlay > Enabled

Advanced Troubleshooting

When standard troubleshooting methods don't resolve issues, these advanced techniques can help diagnose and fix problems:

System File Checker

Run System File Checker to repair corrupted system files:

sfc /scannow

For more thorough repairs, use DISM:

DISM /Online /Cleanup-Image /RestoreHealth

Advanced Disk Diagnostics

Check disk for errors and bad sectors:

chkdsk C: /f /r

For SSD health diagnostics, use manufacturer tools or:

wmic diskdrive get status