# boxstarter-sm-fgc-laptop
# Description: Boxstarter Script for Windows 10 miscellaneous admin machine
# To Run, use boxstarter weblauncher: (Edge supports ClickOnce, the others need extension)
#	START https://boxstarter.org/package/nr/url?https://pastebin.com/raw/dPcdMe4L
###############################################################################

###############################################################################
#--- Prep
###############################################################################
Write-Output "================================================================================"
Write-Output "Boxstarter options...ThinkPad P16s"
Write-Output "The majority
Write-Output "================================================================================"
# Boxstarter options
$Boxstarter.RebootOk=$false # Allow reboots?
#$Boxstarter.NoPassword=$false # Is this a machine with no login password?
$Boxstarter.AutoLogin=$false # Save my password securely and auto-login after a reboot

Disable-UAC
#Disable-BingSearch

###############################################################################
#--- Apps
###############################################################################
Write-Output "================================================================================"
Write-Output "Installing apps..."
Write-Output "================================================================================"
Write-Output "Not installing autohotkey; version 1 needs security review."
# 2025-01-25 "autohotkey.install" was upgraded to 2.0.19; not security reviewed. 
# My scripts are v1. Don't install autohotkey w/o security review. 
#### choco install -y autohotkey.install
Write-Output "================================================================================"
#choco install -y 7zip
#choco install -y vscode
# https://code.visualstudio.com/docs/configure/settings-sync
#  using Microsoft at FGC

###############################################################################
#--- Fonts
###############################################################################
#choco install -y inconsolata
#choco install -y ubuntu.font

###############################################################################
#--- Windows Explorer
###############################################################################
#  Disable View > Grouping in Downloads folder
#  Will remove grouping from all possible views of the Downloads folder for the current user. 
#  Warning: ALL folder views (except Downloads grouping) will revert to Windows defaults! Minimal solution. To set ALL default folder views, use the free tool WinSetView. 
#  https://answers.microsoft.com/en-us/windows/forum/all/completely-disable-file-grouping-always-everywhere/ac31a227-f585-4b0a-ab2e-a557828eaec5
###############################################################################
Write-Output "================================================================================"
Write-Output "Setting Windows Explorer Options..."
Write-Output "================================================================================"
$RegExe = "$env:SystemRoot\System32\Reg.exe" 
$File = "$env:Temp\Temp.reg" 
$Key = 'HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\FolderTypes\{885a186e-a440-4ada-812b-db871b942259}'
& $RegExe Export $Key $File /y 
$Data = Get-Content $File 
$Data = $Data -Replace 'HKEY_LOCAL_MACHINE', 'HKEY_CURRENT_USER' 
$Data = $Data -Replace '"GroupBy"="System.DateModified"', '"GroupBy"=""'
$Data | Out-File $File 
& $RegExe Import $File 
$Key = 'HKCU\SOFTWARE\Classes\Local Settings\Software\Microsoft\Windows\Shell'
& $RegExe Delete "$Key\BagMRU" /f 
& $RegExe Delete "$Key\Bags" /f 
Stop-Process -Force -ErrorAction SilentlyContinue -ProcessName Explorer

###############################################################################
#--- WinConfig Features
###############################################################################
# show hidden/protected files and extensions, full path in title bar, no recent, disable ribbon and checkboxes
Write-Output "================================================================================"
Write-Output "WinConfig Features..."
Write-Output "Windows 11 removed the ability to put the Task Bar anywhere except the bottom. #livid"
Write-Output "================================================================================"
Set-WindowsExplorerOptions -EnableShowHiddenFilesFoldersDrives -EnableShowProtectedOSFiles -EnableShowFileExtensions -EnableShowFullPathInTitleBar -DisableOpenFileExplorerToQuickAccess -DisableShowRecentFilesInQuickAccess -DisableShowFrequentFoldersInQuickAccess -EnableExpandToOpenFolder -DisableShowRibbon -DisableItemCheckBox


###############################################################################
#--- Fin
###############################################################################
Write-Output "================================================================================"
Write-Output "Enable UAC..."
Write-Output "================================================================================"
Enable-UAC