hexagon logo

Lay the SmackDown on Windows 10

I manged to utterly disable windows Anti-Spyware and Anti-Virus with two registry keys:

First turn off real time protection:
Settings app -> "Update & Security" -> Windows Defender -> "Open Windows Defender Security Center" -> "Virus & Threat protection" -> "Virus & Thread Protection settings" (button) -> "Real-time protection" slide the selector button to "off"

Then powershell:

Set-ExecutionPolicy Unrestricted -Force

RegEdit:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender
add:


DisableAntiSpyware REG_DWORD 0x00000000 (1)

DisableAntiVirus REG_DWORD 0x00000000 (1)

exit and re-boot.


Go for "The Last Ride" and De-bloat WINDOWS 10 with a tasty GUI script:

https://github.com/Sycnex/Windows10Debloater


*It also has a "one Click" DarK Mode button!


Make windows yours!

BTW:

I was really suprised when I performed this tech sheet. Pc-Dmis was locked out of local files!

PC-DMIS Permissions:

WIN7/WIN10 PCDMIS 2016 and newer Permission Settings
Due to the way WIN7/WIN10 security works the following steps need to be done to make sure PCDMIS and the operator both have the proper permissions to run the software. Administrative permissions are required to do the following. If you are doing a fresh install it is best to have the operators’ login brought up to the level of Administrator. Then do the PCDMIS install under his login and when the installation/configuration of PCDMIS is done their permissions can be brought down to the standard user/users group level, if needed.
After PCDMIS is installed and configured the following permissions need to be set:
1. You must have administrative permissions to do the following steps.
Black small square If you cant do a particular step, get IT involved and have them raise your administrative level. There are different levels of Administrator. “Quotes” are used extensively in this document. When doing the steps never type the quote signs into Windows.
2. Make sure you can view hidden files and folders.
Black small square Open Windows Explorer,
Black small square In the top left corner select “Organize”
Black small square Select “Folders and search options”
Black small square Select the “View” tab
Black small square Check “Show hidden files, folders, and drives”,
Black small square Uncheck “Hide empty drives in the computer folder”
Black small square Uncheck “Hide extensions of known file types”
Black small square Select “Apply”
Black small square Select “OK” to close window
3. Turn off User account control in WIN7/WIN10
Black small square Click on the Windows start button in the lower left corner.
Black small square In “Search program and files” type “UAC”
Black small square Select “Change User Account Control settings”
Black small square Lower the slide bar to “Never notify”
Black small square Select “OK”
Black small square Select “Yes” to allow changes
Black small square If the PC asks for a reboot wait until all the steps have been completed in this document and then reboot.
4. Set registry permissions for PC-DMIS and Datapage+, if installed.
Black small square Click on the Windows start button in the lower left corner.
Black small square In the “Search programs and files” Type in “Regedit” and hit enter.
Black small square Now navigate to the registry entry Hkey_local_machine\software\Wow6432node\ Hexagon or WAI(PCDMIS 2015.1) (for 64 bit PC’s ) For 32 bit PCDMIS the path is Hkey_local_machine\software\ Hexagon.
Black small square Right click on the Hexagon or WAI entry and select “Permissions…”
Black small square Scroll down the list of “group or usernames” and select “users”
Black small square Check the box for “full control-allow” and hit apply and OK then go to 4B below.
Black small square IF you do not have a “users” section to modify:
Black small square Select “Add…”
Black small square Under “Enter the object names to select” type “users” (without quotes),
Black small square Select “Check Names”
Black small square When it underlines the name “users” select “OK”. If it does not underline the name see Appendix A below.
Black small square You will be returned to the “Security” tab
Black small square Under the “Permissions for users” select the check box for “Full control” under “allow”, this also checks the “Read” box, leave it checked.
Black small square Select “Apply”
Black small square Select “OK”
Black small square 4B: Also set “users” to have permissions in these Registry entries as well: HKEY_CURRENT_USER\Software\ Hexagon or WAI (for 2015.1) (32-bit & 64 bit) and HKEY_USERS\.Default\Software\ Hexagon or WAI (for 2015.1)
Black small square Close the Registry Editor
5. To allow all users read/write privileges to three different PCDMIS folders:
Black small square Open Windows Explorer
Black small square Navigate to the “C:\Program Files (X86)\ Hexagon” folder or the “C:\Program Files\ Hexagon” folder, depending on where PCDMIS was installed. WAI folder for 2015.1.
Black small square Right click on the Hexagon folder
Black small square Select “Properties”
Black small square Select the “Security” tab
Black small square Select “Edit”
Black small square IF the Users group is not there, do the following, if it is there just set users to have full control.
Black small square Select “Add”
Black small square Under “Enter the object nam1es to select” type “users”(without quotes)
Black small square Select “Check Names” If you get “Name not found” error, hit cancel and go to Appendix A below for instructions on how to add Users
Black small square When it underlines the name “users” select “OK” DESKTOP-XXXXXXXXXX\Users
Black small square Windows returns you to the Security tab
Black small square Under “Permissions for users” check the box for “Full control” under “Allow”, this also checks the “Modify” box, leave it checked
Black small square Select “Apply”
Black small square Select “OK”
Black small square Select “OK” again to get out of the WAI properties screen.
Black small square Do this also for the C:\ProgramData\ Hexagon or WAI folder, if you get an “Access is denied” error, press continue
Black small square Also do it for the C:\Users\Public\Public Documents\ Hexagon or WAI folder, if you get an “Access is denied” error, press continue
6. THIS STEP IS NOT NEEDED FOR WIN10:To allow the shortcuts for PCDMIS, Setting Editor and Datapage+ to run under administrative rights:
Black small square Click on the Windows start button in the lower left corner.
Black small square All Programs
Black small square Open “PC-DMIS XXXX” folder
Black small square Hover over the “PC-DMIS XXXX online” icon
Black small square Right click on the online icon
Black small square Select “Properties”
Black small square Select “Compatibility” tab
Black small square Select “Change settings for all users”
Black small square Check “Run this program as an administrator”
Black small square Select “Apply”
Black small square Select “OK”
Black small square Select “OK” again to close out of PCDMIS properties
Black small square Do the same thing for the Settings Editor and Datapage+ icons under the Windows Start, All Programs path.
7. Power options now need to be set:
Black small square Click on the Windows start button in the lower left corner.
Black small square In “Search programs and files” type “power options”, hit enter
Black small square Balanced or Dell should be checked, select “change plan settings”
Black small square Change “Put the computer to sleep” to “never”
Black small square Change “Turn off the display” to “30 minutes”
Black small square Select “Change advanced power settings”
Black small square Expand “Hard disk”
Black small square Expand “Turn off hard disk after”
Black small square Change “Setting (Minutes)” to 0, this sets it so the hard disk never turns off
Black small square Expand “USB settings”
Black small square Expand “USB selective suspend setting”
Black small square Change from “Enabled” to “Disabled”
Black small square Expand “PCI Express”
Black small square Expand “Link State Power Management”
Black small square Change the settings from “Moderate power savings” to “Off”
Black small square Select “Apply”
Black small square Select “OK”
Black small square Select “Save changes”
Black small square WIN10 specific setting: go under “choose what the power buttons do”, click “change settings that are currently unavailable”, under “shutdown settings” make sure “turn on fast startup” is disabled.
Black small square Close out the “Power Options” window.
8. Performance settings now need to be set:
Black small square Its up to you whether to do this step or not, if you think the PC has enough power to run PCDMIS then you can skip this step.
Black small square Click on the Windows start button in the lower left corner.
Black small square In “Search programs and files” type “Performance info”
Black small square Select “Performance Information and Tools”
Black small square Select “Adjust visual effects”
Black small square Select “Adjust for best performance”
Black small square Select “Apply”
Black small square Select “OK”
9. Create a shortcut of PCDMIS and Datapage+ for all operators
Black small square Go to C:\program data\Microsoft\Windows\Start menu \programs folder\PC-DMIS XXXX 64bit folder and copy the online and offline shortcuts, if applicable to c:\users\public\desktop.
10. Modify the following settings in the Settings editor:
Black small square Click on the Windows start button
Black small square Select All Programs
Black small square Click on PCDMIS XXXX and select PCDMIS XXXX Settings Editor
Black small square The Settings Editor pops up, click on “connect…”
Black small square After the window populates click on “find…”
Black small square Type in LockExpiryReminder and click find next
Black small square Click on the + sign to expand the settings
Black small square Click on “Disabled” and change setting to True
Black small square Press save
Black small square Now search for DoNotUseAmyUniRTF
Black small square Change that value from 0 to 1
Black small square Select save and then close out the settings editor.
Black small square Change “AutoCheckForUpdates” to False, PCDMIS 2018 and up is using a “Hexagon Universal Updater” app to update pcdmis automatically. this is up to you to turn this setting off. If it’s a core product you are doing these WIN10 permissions on then it should be ok for the customer to install any new updates BUT if you are on a non core product ie Zeiss, LK, Mitutoyo ETC I would definitely change this to False.
To turn off the updater, you have to uninstall it from “programs and features” in Windows.
Appendix A:
• If the users is not found, under “Select Users, Computers, Service Accounts, or Groups” hit the “Locations” button.
• Select the name of the PC, this will be the very top selection and should have an icon like this:
• Hit ok
• Under “enter the object names to select” type Users
• Hit ok
• You should then be able to give full control to the Users group
• Apply and OK out.





A very much improved WIN 10 / Pc-Dmis unit eye has now.
Parents Reply
  • There are several software out there that disable telemetry through the host file that don't make your computer vulnerable by disabling security features. I would never disable windows defender unless my company was using a high quality anti-virus and even then I still use it since it's been proven to be just as good as the rest of the antivirus or better in a lot of cases.
Children
No Data