keyliner.blogspot.com: November 2021

2021-11-24

Windows Share You Don't Have Permission

Imperfect Solution - Windows Disk Shares - You do not have permission: Windows cannot access Share.

Windows Share "You don't have permissions"
"Windows cannot access Share"
Cannot map a share drive

when sharing a folder between two Windows PC's in the same local network.

2021.11.24 - Still work in progress. Steps are not yet working in all cases. Works sometimes.

There are three common issues:
* The Share was not built properly or Network Settings were not enabled
* Default Services do not auto-start
* Use fully-qualified credentials when logging in

I have spent days on this problem and have given up. The solution(s) below sometimes work, and are certainly needed, but the peer-to-peer sharing is broken, with intermittent and unpredictable failures. Dear Microsoft, this is embarrassing. Too many people are having this problem.

Comments:

Having all machines on the same version of Windows does not seem to help
It does not seem to matter if users have administrative rights
The following items are definitely required to even have a hope

Prerequisites

On all computers attempting to share, you must do these one-time-steps. Much fiddling is needed:

A. Click Start,
      Type "Sharing" (a search)
      Launch "Manage Advanced Sharing Settings"

B. In the Private Network(current Profile)
      [x] Turn on Network Discovery
      [x] Turn on Automatic setup of network connected devices

      In File and Printer sharing
      [x] Turn on file and Printer Sharing

C. On the same screen, scroll down to "All Networks"
      [x] Use 128-bit encryption
      [x] Turn off password protected sharing (if you trust all PCs in your network)

D. Click Start, type "workgroup"
      Launch "Change Workgroup Name"

      Click button "To rename this computer, click Change"

      Note each computer's name
      Note the "Workgroup" name (illustrated as "Wolfhouse")
           Windows default name is "Workgroup"

      *Using same steps for each computer,
        Confirm all computers have unique names (e.g. Nancy, Mary, etc.)
        Confirm all computers are in same Workgroup.

E. Starting Services.

These little-known services may not be set to run by default. Starting them is geeky. Unclear why these are not started automatically when File and Printer sharing is enabled. On some Windows machines, these were started; on others not. Curse the complexity here. This makes you think about Macintoshes.

1) Click Start.
     Type "services.msc" (find Services)

2) Single-click "services.msc", choose "Run as Administrator"

3) In the list, locate "Function Discovery Provider Host"
     Right-mouse-click, Properties
     Choose Startup Type: "Automatic (delayed Start)" or set as "Automatic"

     Repeat for four more services, next.

Click for Larger View

4) Locate "Function Discovery Resource Publication"
     Similarly, set as Automatic (delayed start)

5) Locate "TCP/IP NetBIOS Helper"
     Set Automatic (delayed start)

Documentation:
https://docs.microsoft.com/en-us/troubleshoot/windows-client/networking/cannot-access-shared-folder-file-explorer.

Note: This article recommends turning on the SMB 1.0. Do not do this. Huge security risk.

Note: Technically, these services are only needed on the workstation that hosts the share. But I recommend doing this on all workstations; this way they can host shares too. Invariably you will want this.

F. Network Adapter Settings

1) Start. Type "Network Connections".
(Note either Ethernet or Wireless/Wifi)

2) Right-mouse-click "Ethernet" (or Wireless/WiFi),
     Select "Properties"

     If Windows 10, uncheck [ ] "Internet Protocol Version 6 (TCP/IPv6)

     Double-click "Internet Protocol Version 4 (TCP/IPv4)
     Click button "Advanced"

Click to Enlarge

4) In the Advanced TCP/IP window,

      Click the [WINS] tab
      Select "Enable NETBIOS over TCP/IP"
      Click OK, OK, OK to close all dialogs

G. Continue with Firewall changes
(this step is only needed if this PC does not appear in File Explorer. Safe to run unconditionally.)

1) Click Start
2) Type "CMD" (no quotes)
3) Highlight the found DOS Command Prompt, click "Run as administrator"

4) Type this one-line command, no quotes:
(I found this was needed on Windows 10 computers)

netsh advfirewall firewall set rule
group="Network Discovery" new enable=Yes

Should report back: "updated (52) rule(s)".

5) Press Enter to run the command. When done, close the command prompt window.

H. Reboot

Repeat A-H for other workstations on the network.

From a remote machine, test by opening File Explorer's NETWORK folder (illustrated below), and look for the workstation's name and Share. Open the Share to confirm. You may be prompted for credentials; see below.

Building the Share

To do this right, build the share manually and do not use the Sharing Wizard.

Illustration shows Left-Nav with the "Nancy" computer expanded to show is broadcasted share-name.

1. Open File Explorer.
Right-mouse-click the folder to share. Illustrated here, C:\Data
Select "Properties"

Click for larger view

2. In Properties, click the [Sharing] Tab
      Note: "Network path Not Shared"

      Click "Advanced Sharing"
      [x] Share this folder
      Share name: "Data" (no quotes, no spaces, no punctuation, any name)
      Click "Permissions" button
      Grant Everyone [x] Full Control

Click for larger view

3. Return to File Explorer, re-highlight the shared folder.

     Right-mouse click folder (e.g. C:\Data)
     Select "Properties"
     Select "[Security]" tab
     Click button "Edit"

4. In the [Security] tab's EDIT
     "Add"
     Type "Everyone" (no quotes).
     Click check names. Underlined when found.
     Grant Everyone [x] Full Control (or at least Modify, Read/Execute/List/Read)

Click for larger view

Since this is only allowed for Private Networks, "[x] Full Control" is okay.
Why such busy steps to set a share? Microsoft has always done it this way.

Using the Share:

Use ~~one~~ of two methods. This is the key to the login problem.

x. On File Explorer's URL line, type a UNC path    " \\Nancy\Data "
     ! This does not work in Windows 10/11. Credentials are now required!
     ~~From File Explorer, type "\\Nancy\Data" on the top url-line. Press Enter.~~

2. Instead, use File Explorer's Left-Nav
     (this prompts for credentials)

     From the Workstation that wants to see the share, use File Explorer's left-nav
     On the Left-Nav, locate "Network"
     Expand the Workstation (illustrated "Nancy"). Double-click the share.

    (illustrated:"\\Nancy\Data")

Wait for the credential (login) prompt.
When prompted, type the remote workstation's name and a user-id

For example,

From a laptop named "MaryLeno", expand the "Nancy"'s share, double-clicking on "Data".
If prompted for credentials, type the remote-server's name, slash, and the remote user-id (do not type the share name!):

\\nancy\trayw

where:

"\\nancy" is the computer where the share was built.
"trayw" is the name of a user on that box (and that user presumably has rights to see "Data")
Type the "trayw"'s password, as it exists on that box
Do not use a user-ID/password from your box, instead, use the user-ID on the remote machine -- This may or may not be the same ID/password.
Optionally, check [x] Remember Credentials.
By typing credentials each time, this helps protect the remote machine from ransom-ware attacks.

Finding a User-ID:

On the workstation with the \Data-share, launch File Explorer.
Tunnel to folder C:\users
Note the name of the sub-folders. For example, mine is "trayw" (traywolf). The folder-name is the login account. The name is almost always shortened from what you would expect.

Optionally:
Launch a DOS command Prompt.
The >carrot icon is your user ID.

Remember, you are looking for the User-ID on the remote computer! It may be different than the ID on your local box.

There are concerns if "[x] Remember Credentials" and the remote user changes their password. Consider building a dummy-user-id on the remote box, whose sole purpose is to map drives. Login one time to set that User-ID. Steps not described here.

-end

2021-11-22

Windows 11 Tuning

Windows 11 Tuning - polishing some rough spots. Recommended settings for Windows 11.

Windows 11 spiffs and Tune

I follow these steps on every Windows install. These ideas make the computer easier to use, removes bloat and advertisements, and adds new features -- all are Microsoft-safe changes. Nothing here is extraordinary.

This is a long article, with many steps. Pick and choose what interests you. I do all of the steps on my Windows 10 and 11 computers. All are documented here for my reference. Most of these steps work on any version of Windows.

If this is a new computer:

Consider removing the pre-installed crapware by logging into the new computer for the first time (registering the operating system's install with Microsoft), then download the Windows 11 "Media Creation Tool". Build the bootable USB disk, and then reboot. Use this to re-install the entire operating system from scratch. Details on how to do this in a future article.

On any new or existing computer, I follow these steps. Yes, this takes time, but it is glorious. Get rid of Microsoft built-in advertisements, restore things they hid behind fancy-new-menus, and adds features you did not know were missing. This fixes a variety of annoyances and enshitifications.

Contents:

1. Move the Windows Settings Icon (the Gear icon)
2. File Explorer Icons Spacing
3. Show File Extensions
4. Launch File Explorer, defaulting to a favorite folder
5. Speedup ComboBoxes and other visuals
6. Enable Classic Context Menus (Cut, Copy, Paste)

Enshitification items:
7. Turn off Start Menu Advertisements
8. Turn off Search Highlights (Highly Recommended)
9. Turn off Copilot Icon (and other TaskBar changes)
10. Turn off various System Notifications
11. Turn off Lock Screen Advertisements with Regedit
12. Remove Start Menu Recommended Section
13. Remove "Learn about this picture" wallpaper icon

14. Add "Run" to the Start Menu
15. Send-To Notepad

16. Windows File Explorer Status Slow - Green Bar
17. Remove / disable Bing from Windows Search
18. Add Bit Rate to Explorer View
19. Active Title Bar Color
20. Windows TitleBar Colors (Active and Inactive Title bar colors)

21. MSCONFIG - Startup Programs
22. Setup a Loser Account
23. Enable Hardware Administrator account (Optional)
24. Optimize the Swap File (Geek Out)
25. Speed up USB drives
26. Turn off HardDrive Write Cache Buffering
27. Disable protocol NetBIOS over TCP/IP
28. Cleanup Windows Downgrade files
29. Turn off Windows File Sharing Update
30. Windows PowerSave

-----------------------------

1. Move the Windows Settings Icon (the Gear icon)

Windows 11: Rather than having the Windows Gear icon occupy valuable space in the Tile menu, move the icon to an unobtrusive, but handy place in the Start Menu:

Steps:
Click Start, search/type "Settings"
On left-nav, choose "Personalization"
Select Start>
Select Folders (These folders appear on the Start, near power button)
Turn on "Settings"

Close window.
Click Start Button. Note new, unobtrusive icon near power button

2. File Explorer Icons Spacing

Windows 11: For touch screens, Microsoft gave more white-space around objects.
Illustrated left, the default Windows 11 spacing.
Illustrated on right, the recommended change; tighter, more items on screen:

Click for larger view

If on a desktop, consider tightening the icon spacing.

a. Launch File Explorer
b. Click the ribbon's top-right ellipsis . . ., "Options"
c. Select the [View] tab

[x] Decrease space between items (compact view)

Also recommended, in the same [View] tab -- especially for the next step:
[ ] Uncheck "Hide extensions for known file types"
[x] Show Hidden Files, Folders, or Drives
[ ] Show Sync Provider Notifications (stops some advertisements)

3. Show File Extensions

Curse the Microsoft Marketing rep who thought this was a good idea to hide file extensions. They have been doing this wrong since Windows XP. Doing this makes everything safer; you will know what you are double-clicking, whether it be an .exe or an .xlsx sheet.

Recommended steps.

Using File Explorer, on the ribbon bar, click the ellipsis, Options
In Options, click the [View] tab.
Check "[x] Show hidden files, folders, and drives"
Uncheck "[ ] Hide extensions for known file types"
Uncheck "[ ] Hide protected operating system files"
Ignore warnings.
Click OK.

4. Launch File Explorer, defaulting to a favorite folder

Have File Explorer automatically open to a C:\Data or MyDocuments folder.
This works in all versions of Windows.
These are busy, but easy steps.

a. From the step above, set these File Explorer options:
[ ] Uncheck "Hide extensions for known file types"
[x] Show Hidden Files, Folders, or Drives
(Click Apply/OK)

b. Delete or unpin any Microsoft-built File Explorer icons

From the Start Menu, delete/"unpin" all File Explorer icons (shortcuts, tiles) - this does not delete or uninstall the program; this just deletes the shortcuts. Right-mouse click and "unpin" the Start Menu "File Explorer" icon. They will be rebuilt in a moment.

c. Temporarily, launch File Explorer manually

Click Start: Immediately type the words "File Explorer" (searching)
Launch the program.
Tunnel to folder (This PC), C:\Windows
In C:\Windows, highlight "explorer.exe" (note the .exe extension. "Explorer.exe", not "File Explorer")

d. Right-mouse-click "explorer.exe", chose "Pin to Start"

e. Return to the Start Menu,
Right-mouse-click the new File Explorer tile;

(This is not the file-explorer icon in the Windows folder; choose the file-explorer tile in the Start Menu.)

Chose "Open File Location"

f. Right-mouse-click the "Explorer" shortcut, select "Properties"

Click for larger view

g. In the 'Target' field, append a space-slash-e, comma, and a quoted path name

/e, "C:\data" or
/e, "%USERPROFILE%\DOCUMENTS"

OK
Close all Explorer windows

Return to the Start Menu Icon.

Test by launching the new Start Menu icon. It should open in the new default folder.
Consider renaming the Start Menu tile to "File Explorer" (See Open File Location)

5. Speedup ComboBoxes and other visuals:

These are a matter of preference, but programs like Excel, WordPerfect, and others, seem faster when you don't have to wait a half-second each time you click on a menu or comboBox.

If you are an administrative user on your PC (most people are, but should not be. See below if not an administrative user)

a) Launch File Explorer
b) On tree-side, click/highlight "This PC"

c) Right-mouse-click Properties

d) In center-right of panel, click blue-link "Advanced System Settings"

e) Click top-tab [Advanced], then in Performance, click "Settings"

Click for larger view

I prefer to uncheck the following:

[ ] Fade or slide tooltips into view - I want to see them now

[ ] Show Shadows under Windows - much cleaner without the overhead

[ ] Slide Open ComboBoxes - Programs like Excel "feel faster"

[ ] Smooth Scroll list boxes - moves line-at-a-time instead of pixels

Important note: "Advanced System Settings" are not available to standard users (non-administrative users). Running File Explorer as (admin) will not work; it will set the wrong user to these preferences. Clicking Advanced and promoting to an Administrative user will not work either.

If your user account is a "loser account" (see step 22, recommended), use the administrator's account to promote this user to an administrative user. Login as the newly-more-powerful user, make these changes, and logout. Then revert this account to a "loser account." Once set, these setting will 'stick.' It is a poor design to tie these user preferences to only administrative users.

6. Enable Classic Context Menus (Cut, Copy, Paste)

Put Cut, Copy, Delete, and Rename back where God intended and get rid of the confusing ribbon-bar icons:


Context Menus: Click for larger view

This involves editing in the Windows Registry. If you have never been there, it is scary. Panic not.

a. Copy this key name into the clipboard, including the {braces}.
Do not include leading or trailing spaces. where 86ca-"one"-aa-zero...

{86ca1aa0-34aa-4e8b-a509-50c905bae2a2}

b. Click Start, type "RegEdit".
Because this is the Current User registry key, do not "Run as Administrator"

c. On the left-nav's tree diagram, open HKEY_CURRENT_USER
Tunnel to \Software\Classes\CLSID

(Once in the Classes key, and immediately type "CLSID" to search for that key. It is right below "Calculator" and is no where near the dot-c items at the top of the list)

d. On the detail side, right-click in a blank area,
Select New, Key

Paste: {86ca1aa0-34aa-4e8b-a509-50c905bae2a2} (including braces. ENTER)

e. Click the new key (tree-side) to activate it.

Create a new key inside that key: Again, in the right-pane, in a blank area, right-click New, Key

Name the key: "InprocServer32" (no quotes, ENTER)

f. On the detail side (right side), double-click the "(Default)" value

Click OK, making no changes.
This changes the (Default) from "value not set" to (blank)

g. Close the registry editor

h. (Reboot for changes to take effect)

To test, launch File Explorer; right-mouse-click a file for its Context Menu. Note Cut, Copy, Paste as menu choices.

To undo the change, delete the "{86ca1..." key, and reboot.

If technically-inclined, here is the .REG merge file:
Windows Registry Editor Version 5.00

[HKEY_CURRENT_USER\Software\Classes\CLSID\{86ca1aa0-34aa-4e8b-a509-50c905bae2a2}]

[HKEY_CURRENT_USER\Software\Classes\CLSID\{86ca1aa0-34aa-4e8b-a509-50c905bae2a2}\InprocServer32]
@=" "

7. Turn off Start Menu Advertisements

(This option is now gone in later versions of Windows 11)

Settings (Gear icon), Personalization
"Start"
[ ] "Show Suggestions occasionally in Start" -- Turn off

[ ] "Show recommendations for tips, shortcuts, news app and more..." -- Turn off

8. Turn off Search Highlights (Recommended)

Another annoying feature with newer versions of Windows 11 are "colorful icons and helpful tips" that appear on the Windows Search bar. Although this looks a bit like a virus, it is a "new feature." Read the scathing user comments on Microsoft's support site - Link. It took me an hour to find this setting.

To remove:
For Windows 11:
Launch Settings (gear icon)
Privacy & Security (see left Nav),
locate "Search Permissions"
Near the bottom of the list, under "More Settings"
[ ] Show Search Highlights (off)

For Windows 10:
Right-mouse-click the Start Menu Search box,
Select "Search"
[ ] Uncheck Show Search Highlights

If the options is greyed-out (unable to turn off), use RegeEdit:
HK_Current_User\Software\Policies\Microsoft\Windows\Explorer
On the detail side, look for or create this key:
DisableSearchBoxSuggestions (Reg DWord32);
change from 1 to zero to re-enable the field
(then, after a reboot, you can toggle the switch)

9. Turn off Copilot Icon (and other TaskBar changes)

In Windows Settings (Gear Icon), Personalization
Turn off Copilot
Optionally, turn off Task View (recommended)
Turn off Widgets

In TaskBar Behaviors:

Task Bar Alignment, Left

Consider: Combine Taskbar buttons and hide labels (to Never) -- takes more space on task bar, but easier to read

Unpin Microsoft Store from taskbar (it is easy enough to find when needed)
Unpin Edge from the taskbar (saving space); easy enough to find in Start Menu

10. Turn off various System Notifications

Click the Settings icon (gear)

"System",
"Notifications",
Scroll down the page,
[ ] "Notifications from apps and other senders"

Turn off various bloatware, such as (Dell Assist), (Lenovo this or that)*

In "Additional Settings" at the bottom, expand and turn off
[ ] Offer Suggestions
[ ] Get Tips

Under Settings, Privacy & Security,
"General"
[ ] Turn off -- all

*(Better yet, uninstall bloatware through Add-Remove Programs)

11. Turn off Lock Screen Advertisements with Regedit

The Windows "Spotlight" lock screen has advertisements for xbox, O365, etc., also called "fun facts, tips and tricks". Use the Registry editor to partially-disable; these changes remove some of the popup-text, but not all. The two other lock screen/Screen-saver options have a preference to disable these "features" but the "Spotlight" lock screen does not.

This seems to be a never-ending battle. I am so tired of being advertised to.

Despite high hopes, these changes have not worked in the long run. Leaving them here while I continue to research. No harm in these steps but expect failures. (Changing from the Spotlight wallpaper to a standard wallpaper also works, but I like the changing wallpapers.)

Start, Run, "Regedit" (as current user, not as administrator)

On the tree-side, tunnel to
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion
Locate key "ContentDeliveryManager"

Most of the keys in this area are set to Hex "1" and most are safe to change to "0".
Caution: "ContentDeliveryAllowed" should remain at "1"

Set these keys to hex zero:
FeatureManagementEnabled = 0 (all)
OemPreInstalledAppsEnabled
PreInstalledAppsEnabled
PreInstalledAppsEverEnabled
RotatingLockScreenEnabled
RotatingLockScreenOverlayEnabled
SilentIntalledAppsEnabled

SoftLandingEnabled
SubscribedContent-xxxxxxEnabled (various)
SystemPaneSuggestionsEnabled

(but leave SlideShowEnabled, and RotatingLockScreen (if it exists) as "1")

Next, add a new value in the same area:

On the detail side, right-mouse-click any white space, select "new DWord 32-bit value". Name the new key exactly as: "SubscribedContent-338387Enabled" (no quotes). Set its DWord value to hex zero (0).

A reboot is needed before it takes effect and the reboot can wait.

12. Remove Start Menu Recommended Section

Currently no good solution.
(Policy Editor works in the Student Edition, but no other Windows Versions)

I have had mixed results with this step:

Regedit (run as administrator)
HKLM\Software\Policies\Microsoft\Windows
+Add left-nav (tree side) key, "Explorer" (adding a new yellow folder on the tree-side)
In detail section, add new DWord32 value: "HideRecommendedSection"
Set to Hex 1

Another partial solution is:
Windows Settings (Gear), Personalization
Start (Start Menu - see center of screen)
Set the top section. Click Radio-button: "Layout" to "More Pins" (vs More Recommendations)

13. Remove "Learn about this picture" wallpaper icon

A new desktop icon in the upper-right corner of the main monitor shows "Learn about this picture" (Windows 11 Build 22635.3785 (pushed on 2024.11). This is part of the Windows Spotlight -- the same feature that put advertisements on the Start Menu's Search bar. The icon only appears if your wallpaper rotates and Windows Spotlight is enabled. Remove the icon with this step:

Start, Run, Regedit (as current user, not Administrator)
Tunnel to:
HKey_CurrentUser\Software\Microsoft\Windows\CurrentVersion
(note this is not HKLM CurrentVersion from the previous step; different key)

Tunnel into
... Explorer\HideDesktopIcons\NewStartPanel

Add a new key:
On the detail side (right-side, white area)
right-mouse-click, "New, Dword 32-bit"
Paste this as the key name, including the braces:
{2cc5ca98-6485-489a-920e-b3e88a6ccce3}
Double-click the newly-added key
Set to value: (hexadecimal) 1 (one)

Delete a key:
On the tree side, tunnel up to
...\Explorer\Desktop\Namespace
Delete this entire yellow folder:
{2cc5ca98-6485-489a-920e-b3e88a6ccce3}

Close regedit.
A reboot is needed to take effect and this can wait until convenient.

Optionally, use this .Reg file to automate these steps

Windows Registry Editor Version 5.00

[-HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Desktop\NameSpace\{2cc5ca98-6485-489a-920e-b3e88a6ccce3}]
@="Windows Spotlight"

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\HideDesktopIcons\NewStartPanel]
"{2cc5ca98-6485-489a-920e-b3e88a6ccce3}"=dword:00000000

14. Add "Run" to the Start Menu

The "Run" menu is handy for launching programs when you need to pass a parameter into them. For example, Start, Run, "Notepad.exe myfile.txt". This behaves differently than searching for the program at Start.

"RUN" can be run two different ways. I like using the Start Tile Icon.

Method 1: Recommended Pin the icon on the Start Tile Menu:

a) Click Start, type/Search the word "Run"
b) Right-mouse-click, "Pin to Start"

Method 2: Press Keyboard "Windows-key-R" (R for Run)

Of interest, you can drag a file or executable from File Explorer into the Run Menu, and Windows will pre-type the full path and filename, then will wait for you to type parameters and switches.

15. Send-To Notepad

I often want to send html, .txt, and other ascii files into Notepad. Use File-Explorer to "other-mouse-click" and send them into notepad without bothering to use the RUN menu or to manually launch Notepad. I love this change. It requires a previous change: "Show hidden files and folders".

Add a new sub-menu to the right-mouse-click Context menus:

a) Using File Explorer, tunnel to this path:

C:\Users\(your userid)\AppData\Roaming\Microsoft\Windows\SendTo

b) Right-mouse-click in a blank area on the detail side,
Select "Create a new shortcut"

c) In Location, type "Notepad.exe" (or browse to the executable's path)
Click OK
Name: Notepad

Try it out:

Microsoft dumbed-down this idea in Windows 11 where it now takes more keystrokes than in earlier versions of Windows.
.
Using File Explorer, find any ASCII text file.
Right-Mouse-Click,
Choose "show more options", Send-To, Notepad

Click for larger view

You can add other programs here, such as a photo-editor.

16. Windows File Explorer Status Slow - Green Bar

File Explorer can be slow when opening folders, especially on external drives, on remote-computers, or SAN drives. Since you probably have more than 1 CPU core, put one of them to work on its own thread. Dramatic improvement in speeds.

Make this change even if you have not yet noticed the problem.

See this keyliner article: File Explorer Green Status Bar Slow
https://keyliner.blogspot.com/2021/12/windows-file-explorer-green-status-bar.html

17. Remove / disable Bing from Windows Search

Bing is hard to remove from Windows and there are numerous places that require attention.

A. When ever you use Windows Start Menu Search, results also include Bing web results, 'web results'. Disable with a registry change. Windows 11 and Windows 10.

Start, Run, "Regedit" (as Administrator -- even though you are updating HKCU)

On the tree-side, tunnel to:
HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows

While highlighted on the tree-side "Windows" key,

right-click, choose "New, Key"

Name the new key "Explorer" (case-sensitive)
(New folder "Explorer" will appear as a yellow folder, directly underneath "Windows". This key may already exist from a previous step.)

In the new Explorer key's detail section,

right-click, choose "New", "DWORD (32-bit) Value"
Name the new key, "DisableSearchBoxSuggestions" (case-sensitive)

Double-click the new "DisableSearchBoxSuggestions"

Set to value 1 (Hexadecimal)
Close Registry Editor

This takes effect after the next reboot (technically after restarting Explorer) and is only active for this current user. If you have a secondary admin (administrator) account, consider making this same change for that user.

B. In Windows Settings (Gear icon)
Left-nav, Privacy and Security
      Search Permissions:
      [ ] Microsoft Account (turn off)
      [ ] Work or School Account

      Scroll down the page
      [ ] Show Search Highlights (turn off, previously discussed in this article)

      Scroll down the page
      Click link: Windows Privacy Options
      Turn off all options on this page

C. Launch Microsoft Edge
      Click ellipsis in upper-right corner, "Settings"
      In Left-Nav, "Privacy, Search, and Services", scroll way-way-down, "Address Bar and Search"
      Change "Search Engine used in address bar" to "Google"
      In "Manage Search Filters" (the search list)
      - remove as many as you can (clicking their ellipsis), leaving Google.
        (note: Bing can't be removed)

D. Click the taskbar's START button.
      Immediately begin typing "REGEDIT" (no quotes)
      "Run as administrator"

      Tunnel to "HK-LocalMachine" (not the previous HK-CurrentUser)
      Software, Policies, "Microsoft"

      With the Microsoft key still highlighted (tree-side)
      right-click the Microsoft key, select "New Key"
      Name the new key "Edge"

      In the new key's detail side (the white pane to the right)
      Right-mouse-click anywhere in the detail pain
      New "DWord 32-bit value"
      Create a new value: "HubsSidebarEnabled" (no quotes; note double-s, case-sensitive)
      Double-click and set hex value to zero (0)
      Close Regedit

      In Edge's URL bar, type this address:
      edge://policy
      Click "Reload Policies" (no screen activity shown)
      Close Edge.

18. Add Bit Rate to Explorer View

For locally-stored (C: drive) music files (MP3) it is often nice to see the bitrate the music was recorded.

See this keyliner article: Add Bit Rate to Explorer View

19. Active Title Bar Color

Windows 11 TitleBar and window borders are white, making it hard to distinguish which window is active. See File Explorer Properties illustration above. This window is active, but the title bar is the same color as an inactive window. Also, the border style is a light grey. Make the active window "pop," while still maintaining a link with the color scheme.

a. Click the Start Menu, Gear icon
b. In left-nav, select "Personalization"

c. Select [Colors]

d. Scroll down in same menu,
Enable (turn on) "Show Accent Color on Title bars and Windows Borders"

This is not enough to activate all windows with the new title bar color. Continue with these geeky steps.

e. Click "Start", type "Regedit" (does not need to be run as Administrator ). Open the Registry editor.

f. On left-navigational tree, tunnel to this yellow-folder/key:

Computer HKEY_CURRENT_USER\Control Panel\Colors

g. Locate the detail value called "Active Title"

Double-click and set the value to "255 0 0" (space delimited, where this equal RED).
255 is red,
0 = no green,
0 = no blue.

Search the Internet for "RGB Charts" to find your favorite three-octet character code.

h. Close the Registry Editor

(note: The original, light theme, the default value was: 153 180 209 Red, Green, Blue, space-delimited)

Some programs won't respect this setting until after a reboot. Some programs, such as Windows Setup do not use this value at all - thanks Microsoft! However, many programs do, and the color will make it easy to find the active window.

20. Windows TitleBar Colors (Active and Inactive Title bar colors)

In Windows Settings (gear Icon), Personalization,
Colors,
[ ] Uncheck "Start, taskbar, and Action Center" (option missing on newer Windows)
[x] Check "Show accent color on Titlebars and Windows Borders"

Sadly, this sets all titlebars to the same color, which is kinda dumb and makes it hard to see the active title bar from the inactive ones. Older versions of Windows gave granular control to this.

To resolve: Start, run, Regedit

HKey_Current_User\Software\Microsoft\Windows\DWM

In the details section, create a new 32-bit DWORD value: "AccentColorInactive"

Set a hex value of: beb7a3 (light grey, or other value).

Close RegEdit.

Change takes effect immediately. Some Microsoft programs (remarkably, the Windows Settings screen (Control Panel)) ignore this setting. Again, thanks, Microsoft!

21. MSCONFIG - Startup Programs

Cleanup unneeded startup programs, save memory, faster computer, etc.. Auto-start programs live in multiple places, where "MSConfig" gives access to both "Services" and the "Startup" group. If you have never been here, this is somewhat interesting.

Click Start. Immediately type/search "MSCONFIG" (in Windows 11 it shows as "System Configuration")
Run as Administrator.
Open the [Services] tab

In the [Services] tab, ignore most entries, but I do give consideration to application auto-updater programs, especially for software that I know will never be updated, or I want to control when they update. For example, I unchecked these:

[ ] Asus Update Checker (a motherboard maintenance program)
[ ] LGHub Updater Service (Logitech Keyboard updater; I want to control)
[ ] Corel License Validation (My software is three versions behind, why keep checking?)
[ ] Foxit Updater (Foxit PDF Reader: if allowed to auto-update, they install unwanted other programs)
[ ] Xbox services, various (I am playing with turning these off)

Basically, look for application-services - for applications you may have installed.

Click "Apply"

Next, click the [Startup] tab and follow the re-direction to Task Manager (Startup moved in Windows 11):

In Task Manager, open the ~~[Startup] tab~~,
Click the left-side Hamburger menu.
Choose the left-nav Speedometer/speed icon
Disable things you don't need, but might want to use later. For example:

[ ] Status Monitor Application (for Brother Printer)
[ ] ControlCenter Launcher (again, for Brother Printer)
[ ] Cortana
[ ] Microsoft Teams (?)

These changes take effect on next reboot.

22. Setup a Loser Account

Windows users can log in as standard users (with minimal rights to install and change things), or as god-like admin users. Malware folks like it when you run in administrative mode. Do what I do - I always run as a non-administrative user (which I call a loser account). Use this account for day-to-day work.

To make this work, build a second Administrative account, not tied to Microsoft. Use this account only when installing software or making system changes. Otherwise, run as an account with no rights to install software. This is not as bad as you think. Practically-speaking, once the machine is built, how often do you install software?

Steps here, too detailed to include in this article, but recommended:

https://keyliner.blogspot.com/2020/02/windows-10-administrative-accounts.html

Summary:
Build two accounts on every workstation: One is a 'loser' account (for day-to-day work" and a second "admini" account for software installs. At least one administrator account must be installed on the PC.

*If your current account is already an administrative account

(Windows 11/10 -- assumes you are logged in with an administrative, 'non-loser ' account for the account-build)

Build the new account:
1) Start, type "Users", and open "Other Users"
2) "Add other User" (add another account)
3) Select "I don't have this person's sign-in information"

4) "Add user without a Microsoft Account"
Complete the rest of the account setup, including the three lost password questions.

5) Once the user is built, select the new user from the already-displayed control-panel's User-list.

Change the new Admin's account type:

-For the admin account, make it an administrator.

Log out as yourself.
Then login as the administrator and demote your regular account to a Standard User. Make the admini password the same as your account, so there is one less thing to remember. Only use the admini account when UAC prompts for "installation rights".

23. Enable Hardware Administrator account (Optional)

Optional: This enables a computer-based Administrator account, which is useful in rare instances. This is a different account than the "admini" recommended above. This is here for my documentation. I build and use this account in rare instances. More often, I use the steps above, in item 13.

a) Start, type/search "CMD", Run as Administrator
b) Type this command: NET USER administrator /enable:yes

There will be a new user account, "Administrator" on the computer's initial login screen. Be aware it does not have a password enabled. Login once to set the account.
Use /enable:no to turn the account off.

You can ignore this account; see Step 22 for the real admini account

24. Optimize the Swap File (Geek Out)

Optimize Windows 11 swap file by following these steps, which results in a slightly faster computer with less disk fragmentation. This is an admittedly technical.

What is a Swap File?

The "Swap file", also known as a "Paging File" or "Virtual Memory" is used by Windows to extend the PC's memory by simulating (virtualizing) memory on the hard disk. It works like this: When more programs are loaded than can fit in the available RAM, Windows takes the least-used program and "pages-it" to the hard disk. The paged-out program doesn't know it was moved into Virtual memory, and while there, it is in suspended animation.

When you switch back to the application, Windows pulls it from the hard disk's paging file and crams it back into memory, while shoving something else to disk. Paging only happens when you run out of memory and there are too many programs are running at the same time. Although paging is a wonderful idea, it is slow. PCs that use paging files really need more RAM.

By Default, Paging Files Fragment

When Windows is first installed, a paging file is automatically defined, with a minimum and maximum size. With each reboot, Windows re-allocates (re-creates) the file, starting with the minimum size. This is a large file, often 1.5 times physical RAM. In other words, if your PC has 8G of RAM, then the paging file is likely about 10 to 15G. With each reboot, the old paging file is destroyed and a new one is constructed.

As Windows allocates the new file, it starts writing on the first available disk cluster, but because the file is so large, it invariably runs out of space and the file is fragmented into multiple locations, chaining across the disk, often hundreds of times. The file can grow as more RAM is needed, up to its maximum size. This causes other files to fragment.

Optimizing the Paging File:

With the steps outlined here, force a permanent, fixed-location swap file. This keeps it from allocating and de-allocating, and keeps it and other files from fragmenting around it.

Windows 11 Instructions:

a) Launch File Explorer

b) Right-mouse-click "This PC
Select "Properties"

c) In Device Specifications (center section),

Click "Advanced System Settings".
If prompted for administrative credentials, type them now (this can be run from a loser-account with a promotion).

d) In the new System Properties screen, click the top [Advanced] tab

Click Performance's "[Settings]" button

f) Click the second [Advanced] tab
Change "Virtual Memory"

Uncheck [ ] Automatic manage paging file size

Set "No paging file" (Set)

Click OK, OK. Ignore warnings.

g). You must reboot to de-allocate the file.

h) (Optional step): After reboot, manually defragment the hard disk:

- Open File Explorer

- Highlight drive C:, other-mouse-click, "Properties"

- In the Tools Tab, click Optimize and defragment drive. Defragging is less of a concern with solid-state drives and on newer versions of Windows 11, Defragging is not even given as an option.

- Allow the "optimization" / defragment to complete - with few indications it finished. Look for last-checked 0-days

i) Return to the Virtual Paging screens (see steps above)

j) Manually set a Virtual Paging Size. Turn off [ ] Automatically manage paging file size. Set a custom size, where the minimum and maximum sizes are the same.

The numbers are not important , but for most machines I pick 1500-1500, or 1800-1800, where both the min/initial and max sizes are the same. Click "Set" to commit. Ignore warnings.

For example:

8GB RAM, set to 1500,1500
16GB RAM, set 1800, 1800 - choosing this even if you have more RAM
32GB RAM, set perhaps 2000, 2000. I use 1800.

The key to setting the size is to set both the minimum and maximum to the same value --This keeps the file from growing and shrinking (and thus fragmenting).

The actual number chosen is not that important and it does not need to be in the increments above. Do not bother setting the swap file much larger than 1.5 to 2G. Larger swap files take even longer to parse and the performance-loss may not be worth the trouble. It slows down backups.

k) Reboot one last time, ignoring any warnings.

Optimize Swap File for older versions of Windows

25. Speed up USB drives

Windows uses a cache when writing to USB disks in order to keep a copied file from being corrupted if you should unplug the USB drive in the middle of a write operation. If you are a better user than that, and you would never unplug a drive while writing, you can significantly speed up the drive by disabling that cache.

This article, although written for an older version of Windows, it is still applicable. I make this change on my larger USB backup drives. I don't bother with USB sticks or cameras:

USB Backup Speeds Slow

Need a backup program. keyliner wrote one you can use for free.
https://keyliner.blogspot.com/2021/05/directorypulse-keyliner-backup-software.html

26. Turn off HardDrive Write Cache Buffering

Similar to the step 8's "Speed up USB Drives," the local Hard Disk has a similar setting, which I also enable on my own computers.

*only do this on battery-powered laptops or desktops with UPS battery protection.

Note: Control panel cannot be run as "administrator" but the icons within can be.

a. Click Start, immediately begin typing "Control Panel".
Launch the Control Panel
(Note: In the future, some of these areas will move into the Settings/Gear icon... someday)

b. Click top-right "View by Small icons"

c. Right-mouse-click Device Manager ("run as Administrator"),
Expand "Disk Drives"

d. Locate the hard disk (by name (may be labeled as "ATA Device"))
Most laptops only have one drive.

e. Select Properties, then the [Policies] tab,
[x] Enable Write Caching on the Device
[x] Turn off Windows Write-cache buffer flushing on this device*

27. Disable protocol NetBIOS over TCP/IP

Windows still supports an obsolete protocol, and while enabled, it generates 2505 Errors in the Windows Event Log (Event ID 2505 - Server could not bind to transport). This protocol is safe to disable.

See this keyliner article:
Windows Event ID 2505 Server Could not bind to Transport
https://keyliner.blogspot.com/2022/01/windows-event-id-2505-server-could-not.html

Do this for no other reason than to remove a re-occurring error from the Event Logs.

28. Cleanup Windows Downgrade files

There are a variety of temporary and downgrade files that can be cleaned up. If you are making a backup, or an image backup, I always run this step because it can save gigabytes of disk space.

These are hard to cleanup by hand and instead you should use a built-in Microsoft Utility.

The steps are convoluted, and some checkboxes have to be checked twice. The steps here are a bit weird.

I run these steps frequently.

Windows 11 (later editions)

a. Using File Explorer, locate and highlight "Local Disk C:"

b. Right-mouse-click "Local Disk C:", select "Properties"
Of curiosity, note the free-space available.

c. Click "Details"

(This brings up a semi-complicated menu, where you have to choose each sub-item separately)

1. In Temporary Files: Check various options, then button "Remove Files". I recommend these options:

Delivery Optimization Files
[x] Temporary Files
[x] Previous versions of Windows, Windows.old, etc., if seen
[x] Windows Update Cleanup
[x] Temporary Internet Files

[x] Recycle bin

Select top button "Remove files"

d. Cleanup old Restore points

(This step was easier in older versions of Windows)

1. In the Start Menu's Search bar, type "Restore Point", "Launch Create Restore Point"

2. Click button [Configure]

3. On bottom of panel, click "Delete all Restore Points for this drive"

While in this panel, look at the "disk-space usage" -- adjust the value down to about 8 or 10GB.

e. Other notes:

In Properties, never click "Compress this drive to save space" - a desperate idea.

Even with these steps, use File Explorer to manually delete two or three cluttered $Windows temp files, listed below. These are safe to delete. If locked, reboot, and they should be available. This step requires Step 4 from this article: "Expose File Extensions and Hidden files".

In the root of the C: drive, manually delete folders that look like these:

$WINDOWS.~BT

$Windows.~WS

$WinREAgent

Do not delete "$Recycle.Bin" (although no harm)

Windows 7/10:

a. Using File Explorer, locate and highlight "Local Disk C:"
Of curiosity, note the free-space available.

b. Right-mouse-click "Local Disk C:", select "Properties"

c. Click "Disk Cleanup"
(Later versions of Windows changed this menu, making each choice a separate menu choice)

First Group: Check these various boxes of interest, including
[x] Temporary Internet Files
[x] DirectX Shader Cache
[x] Delivery Optimization Files
[x] Recycle Bin
[x] Temporary files

d) Click "Cleanup System Files"

Second Group: Check various boxes of interest, including.

You will find some of the earlier-checked checkboxes repeated here, and are un-clicked. Click in both places. This looks like a never-fixed bug.

[x] Delivery Optimization Files
[x] Temporary Files
[x] Previous versions of Windows, Windows.old, etc., if seen

[x] Windows Update Cleanup
[x] Temporary Internet Files
[x] System Error minidump
[x] Recycle bin

e) Then click top-tab [More Options]

Click "Cleanup System Restore and Shadow Copies",
Confirm Yes to delete up-to recent restore point.
This is where a majority of disk space is recovered.

f) Click OK. Confirm "are you sure...?"

Compare free disk space. It is typical to recover 10 to 20G if this is the first-time run.

Other notes:
In Properties, never click "Compress this drive to save space" - a desperate idea.

Even with these steps, use File Explorer to manually delete two or three cluttered $Windows temp files, listed below. These are safe to delete. If locked, reboot, and they should be available. This step requires Step 4 from this article: "Expose File Extensions and Hidden files".

In the root of the C: drive, manually delete folders that look like these:

$WINDOWS.~BT

$Windows.~WS

$WinREAgent

Do not delete "$Recycle.Bin" (although no harm)

29. Turn off Windows File Sharing Update

By default, Windows 11 can use your computer to help distribute Microsoft updates to other computers in your local network. This happens unattended. Consider disabling this feature to help control unexpected slowness.

Settings (Gear icon),
Windows Update (upper-center of screen; they've been moving this around)
Advanced Options (Center, scroll menu)
Delivery Optimization

[ ] Allow download from other PC's (Off)

30. Windows PowerSave

Fix unexpected wake-from-sleep issues, where the PC wakes from sleep in the middle of the night. These steps do not address "Does not wake from sleep".

https://keyliner.blogspot.com/2020/02/windows-10-wakes-from-sleep-solution.html

And if you have a laptop, this article might be of interest:
https://keyliner.blogspot.com/2021/04/laptop-battery-drains-unexpectedly.html