Skip to main content

Documentation Index

Fetch the complete documentation index at: https://mintlify.com/flick9000/winscript/llms.txt

Use this file to discover all available pages before exploring further.

WinScript provides a collection of targeted registry and service tweaks that reduce background resource usage, eliminate unnecessary latency, and free up CPU and RAM for foreground workloads. Each tweak is independent — apply only the ones that match your use case.

Set Services to Manual

Windows starts many services at boot regardless of whether they are ever needed. Setting them to Manual startup means they launch only when explicitly requested, reducing background CPU and RAM usage from the moment Windows loads. In addition to setting the bulk list to Manual, a smaller set of services known to generate unnecessary network traffic or pose privacy concerns is set to Disabled entirely: AppVClient, AssignedAccessManagerSvc, DiagTrack, DialogBlockingService, NetTcpPortSharing, RemoteAccess, RemoteRegistry, shpamsvc, ssh-agent, and tzautoupdate.
$manualServices = @(
    "ALG","AppMgmt","AppReadiness","Appinfo","AxInstSV","BDESVC","BTAGService",
    "BcastDVRUserService","BluetoothUserService","Browser","CDPSvc","COMSysApp",
    "CaptureService","CertPropSvc","ConsentUxUserSvc","CscService","DevQueryBroker",
    "DeviceAssociationService","DeviceInstall","DevicePickerUserSvc","DevicesFlowUserSvc",
    "DisplayEnhancementService","DmEnrollmentSvc","DsSvc","DsmSvc","EFS","EapHost",
    "EntAppSvc","FDResPub","FrameServer","FrameServerMonitor","GraphicsPerfSvc","HvHost",
    "IEEtwCollectorService","InstallService","InventorySvc","IpxlatCfgSvc","KtmRm",
    "LicenseManager","LxpSvc","MSDTC","MSiSCSI","McpManagementService",
    "MicrosoftEdgeElevationService","MsKeyboardFilter","NPSMSvc","NaturalAuthentication",
    "NcaSvc","NcbService","NcdAutoSetup","NetSetupSvc","Netman","NgcCtnrSvc","NgcSvc",
    "NlaSvc","PNRPAutoReg","PcaSvc","PeerDistSvc","PenService","PerfHost","PhoneSvc",
    "PimIndexMaintenanceSvc","PlugPlay","PolicyAgent","PrintNotify","PushToInstall",
    "QWAVE","RasAuto","RasMan","RetailDemo","RmSvc","RpcLocator","SCPolicySvc","SCardSvr",
    "SDRSVC","SEMgrSvc","SNMPTRAP","SNMPTrap","SSDPSRV","ScDeviceEnum","SensorDataService",
    "SensorService","SensrSvc","SessionEnv","SharedAccess","SmsRouter","SstpSvc","StiSvc",
    "StorSvc","TapiSrv","TextInputManagementService","TieringEngineService","TokenBroker",
    "TroubleshootingSvc","TrustedInstaller","UdkUserSvc","UmRdpService","UserDataSvc",
    "UsoSvc","VSS","VacSvc","WEPHOSTSVC","WFDSConMgrSvc","WMPNetworkSvc","WManSvc",
    "WPDBusEnum","WalletService","WarpJITSvc","WbioSrvc","WdNisSvc","WdiServiceHost",
    "WdiSystemHost","WebClient","Wecsvc","WerSvc","WiaRpc","WinRM","WpcMonSvc",
    "WpnService","WwanSvc","autotimesvc","bthserv","camsvc","cbdhsvc","cloudidsvc",
    "dcsvc","defragsvc","diagsvc","dmwappushservice","dot3svc","edgeupdate","edgeupdatem",
    "embeddedmode","fdPHost","fhsvc","hidserv","icssvc","lfsvc","lltdsvc","lmhosts",
    "msiserver","netprofm","p2pimsvc","p2psvc","perceptionsimulation","pla","seclogon",
    "smphost","svsvc","swprv","upnphost","vds","vmicguestinterface","vmicheartbeat",
    "vmickvpexchange","vmicrdv","vmicshutdown","vmictimesync","vmicvmsession","vmicvss",
    "vmvss","wbengine","wcncsvc","webthreatdefsvc","wercplsupport","wisvc","wlidsvc",
    "wlpasvc","wmiApSrv","workfolderssvc","wuauserv","wudfsvc"
)
$disabledServices = @(
    "AppVClient","AssignedAccessManagerSvc","DiagTrack","DialogBlockingService",
    "NetTcpPortSharing","RemoteAccess","RemoteRegistry","shpamsvc","ssh-agent","tzautoupdate"
)
$manualServices | ForEach-Object { Set-Service -Name $_ -StartupType Manual }
$disabledServices | ForEach-Object { Set-Service -Name $_ -StartupType Disabled }

Disable Windows Transparency

Transparency and blur effects in the Windows shell consume GPU resources on every frame the compositor renders. Disabling them reduces GPU overhead and can make the UI feel snappier, particularly on integrated graphics.
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize" /v "EnableTransparency" /t REG_DWORD /d 0 /f

Disable HAGS (Hardware-Accelerated GPU Scheduling)

HAGS moves GPU scheduling work from the CPU to the GPU’s own hardware scheduler. While it can reduce CPU overhead in some scenarios, it is also known to introduce frame time variance and micro-stuttering on certain GPU and driver combinations. Setting HwSchMode to 1 disables the feature.
reg add "HKLM\SYSTEM\CurrentControlSet\Control\GraphicsDrivers" /v "HwSchMode" /t REG_DWORD /d 1 /f

Disable Mouse Delay

Windows applies a 400 ms delay before showing menus and registering hover events. Setting both values to 0 makes menus and tooltips appear instantly.
reg add "HKCU\Control Panel\Desktop" /v "MenuShowDelay" /t REG_SZ /d 0 /f
reg add "HKCU\Control Panel\Mouse" /v "MouseHoverTime" /t REG_SZ /d 0 /f

Limit Windows Defender CPU Usage

By default, Windows Defender scans can consume up to 50% of available CPU. The two registry values below cap both the average and scan-specific CPU load at 25%, keeping the system more responsive during background scans.
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Scan" /v "AvgCPULoadFactor" /t REG_DWORD /d "25" /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows Defender\Scan" /v "ScanAvgCPULoadFactor" /t REG_DWORD /d "25" /f

Disable Core Isolation

Core Isolation (Memory Integrity / Hypervisor-Protected Code Integrity) uses hardware virtualization to protect kernel memory from tampering. Disabling it can recover a small amount of CPU performance by removing the virtualization overhead on every kernel call.
Disabling Core Isolation reduces protection against kernel-level exploits and driver-based attacks. Only apply this tweak on machines you fully control, where you trust all installed drivers, and where raw performance matters more than defense-in-depth.
reg add "HKLM\System\CurrentControlSet\Control\DeviceGuard\Scenarios\HypervisorEnforcedCodeIntegrity" /v "Enabled" /t REG_DWORD /d 0 /f

Disable Storage Sense

Storage Sense periodically scans for and deletes temporary files and old Windows Update caches in the background. Disabling it prevents unscheduled disk I/O during sessions where consistent storage performance matters.
reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\StorageSense\Parameters\StoragePolicy" /v "01" /t REG_DWORD /d 0 /f

Disable SysMain (Prefetch)

The SysMain service (formerly Superfetch) preloads frequently used application data into RAM to speed up launch times. On systems with fast NVMe storage or limited RAM, the service can consume memory and generate disk I/O that outweighs its benefit.
Stop-Service -Name "sysmain"
Set-Service -Name "sysmain" -StartupType Disabled

Windows Search continuously indexes drive contents in the background to enable fast file and Start Menu searches. Stopping and disabling the service frees up disk I/O and CPU cycles at the cost of in-Explorer search functionality.
After applying this tweak, drive indexing stops and search results in File Explorer will fall back to a slower, real-time scan of the file system.
Stop-Service -Name "wsearch"
Set-Service -Name "wsearch" -StartupType Disabled

Disable Hibernation

Hibernation saves the contents of RAM to disk so that the system can resume exactly where it left off after a full power-off. Disabling it reclaims the disk space used by the hibernation file (hiberfil.sys), which is equal to the installed RAM.
Disabling hibernation also disables Fast Startup (which depends on it). This tweak is not recommended for laptops, where hibernation is a key battery-saving and resume feature.
powercfg /h off

Disable Fast Startup

Fast Startup is a hybrid shutdown mode that saves a partial hibernation image so that the next boot can skip full hardware initialization. While it reduces boot time, it can cause issues with Windows Updates, dual-boot setups, and certain hardware drivers that expect a clean cold-boot state.
reg add "HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Power" /v "HiberbootEnabled" /t REG_DWORD /d 0 /f

Set IPv4 as Preferred

When both IPv4 and IPv6 are available, Windows may prefer IPv6 for outbound connections. Setting DisabledComponents to 32 (decimal) instructs the IPv6 stack to prefer IPv4 addresses in DNS resolution order, which can reduce connection latency on networks where IPv6 routing is suboptimal.
reg add "HKLM\SYSTEM\CurrentControlSet\Services\Tcpip6\Parameters" /v "DisabledComponents" /t REG_DWORD /d 32 /f

Build docs developers (and LLMs) love