From 7be1c2c8999c6bd6a680a39caced70896627b3b6 Mon Sep 17 00:00:00 2001 From: Simon Sapin Date: Wed, 3 Oct 2018 17:14:23 +0200 Subject: [PATCH] Windows AMI: disable indexing and anti-virus --- etc/taskcluster/windows/first-boot.ps1 | 7 +++++++ 1 file changed, 7 insertions(+) diff --git a/etc/taskcluster/windows/first-boot.ps1 b/etc/taskcluster/windows/first-boot.ps1 index be330cdf3a0..bbf1cdb6449 100644 --- a/etc/taskcluster/windows/first-boot.ps1 +++ b/etc/taskcluster/windows/first-boot.ps1 @@ -2,6 +2,13 @@ Start-Transcript -Path "C:\first_boot.txt" Get-ChildItem Env: | Out-File "C:\install_env.txt" +# DisableIndexing: Disable indexing on all disk volumes (for performance) +Get-WmiObject Win32_Volume -Filter "IndexingEnabled=$true" | Set-WmiInstance -Arguments @{IndexingEnabled=$false} + +# Disable Windows Defender +# https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-antivirus/windows-defender-antivirus-on-windows-server-2016#install-or-uninstall-windows-defender-av-on-windows-server-2016 +Uninstall-WindowsFeature -Name Windows-Defender + # use TLS 1.2 (see bug 1443595) [Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12