diff --git a/config/tweaks.json b/config/tweaks.json index c47a8be9..036c37c2 100644 --- a/config/tweaks.json +++ b/config/tweaks.json @@ -2642,64 +2642,6 @@ ], "link": "https://winutil.christitus.com/dev/tweaks/essential-tweaks/disablerecall" }, - "WPFTweaksDisableLMS1": { - "Content": "Disable Intel MM (vPro LMS)", - "Description": "Intel LMS service is always listening on all ports and could be a huge security risk. There is no need to run LMS on home machines and even in the Enterprise there are better solutions.", - "category": "z__Advanced Tweaks - CAUTION", - "panel": "1", - "Order": "a026_", - "InvokeScript": [ - " - Write-Host \"Kill LMS\" - $serviceName = \"LMS\" - Write-Host \"Stopping and disabling service: $serviceName\" - Stop-Service -Name $serviceName -Force -ErrorAction SilentlyContinue; - Set-Service -Name $serviceName -StartupType Disabled -ErrorAction SilentlyContinue; - - Write-Host \"Removing service: $serviceName\"; - sc.exe delete $serviceName; - - Write-Host \"Removing LMS driver packages\"; - $lmsDriverPackages = Get-ChildItem -Path \"C:\\Windows\\System32\\DriverStore\\FileRepository\" -Recurse -Filter \"lms.inf*\"; - foreach ($package in $lmsDriverPackages) { - Write-Host \"Removing driver package: $($package.Name)\"; - pnputil /delete-driver $($package.Name) /uninstall /force; - } - if ($lmsDriverPackages.Count -eq 0) { - Write-Host \"No LMS driver packages found in the driver store.\"; - } else { - Write-Host \"All found LMS driver packages have been removed.\"; - } - - Write-Host \"Searching and deleting LMS executable files\"; - $programFilesDirs = @(\"C:\\Program Files\", \"C:\\Program Files (x86)\"); - $lmsFiles = @(); - foreach ($dir in $programFilesDirs) { - $lmsFiles += Get-ChildItem -Path $dir -Recurse -Filter \"LMS.exe\" -ErrorAction SilentlyContinue; - } - foreach ($file in $lmsFiles) { - Write-Host \"Taking ownership of file: $($file.FullName)\"; - & icacls $($file.FullName) /grant Administrators:F /T /C /Q; - & takeown /F $($file.FullName) /A /R /D Y; - Write-Host \"Deleting file: $($file.FullName)\"; - Remove-Item $($file.FullName) -Force -ErrorAction SilentlyContinue; - } - if ($lmsFiles.Count -eq 0) { - Write-Host \"No LMS.exe files found in Program Files directories.\"; - } else { - Write-Host \"All found LMS.exe files have been deleted.\"; - } - Write-Host 'Intel LMS vPro service has been disabled, removed, and blocked.'; - " - ], - "UndoScript": [ - " - Write-Host \"LMS vPro needs to be redownloaded from intel.com\" - - " - ], - "link": "https://winutil.christitus.com/dev/tweaks/z--advanced-tweaks---caution/disablelms1" - }, "WPFTweaksWPBT": { "Content": "Disable Windows Platform Binary Table (WPBT)", "Description": "If enabled then allows your computer vendor to execute a program each time it boots. It enables computer vendors to force install anti-theft software, software drivers, or a software program conveniently. This could also be a security risk.",