windows

windows/system/advanced-settings/apply.ps1

@@ -0,0 +1,78 @@
+[CmdletBinding()]
+param(
+    [string] $TargetUserSid = [Security.Principal.WindowsIdentity]::GetCurrent().User.Value
+)
+
+$ErrorActionPreference = "Stop"
+
+function Test-Administrator {
+    $identity = [Security.Principal.WindowsIdentity]::GetCurrent()
+    $principal = [Security.Principal.WindowsPrincipal]::new($identity)
+
+    return $principal.IsInRole(
+        [Security.Principal.WindowsBuiltInRole]::Administrator
+    )
+}
+
+if (-not (Test-Administrator)) {
+    $powershell = (Get-Process -Id $PID).Path
+    $arguments = @(
+        "-NoProfile"
+        "-ExecutionPolicy"
+        "Bypass"
+        "-File"
+        ('"{0}"' -f $PSCommandPath)
+        "-TargetUserSid"
+        $TargetUserSid
+    )
+
+    $process = Start-Process `
+        -FilePath $powershell `
+        -ArgumentList $arguments `
+        -Verb RunAs `
+        -Wait `
+        -PassThru
+
+    if ($process.ExitCode -ne 0) {
+        throw "Elevated advanced settings failed with exit code $($process.ExitCode)."
+    }
+
+    return
+}
+
+$explorerPolicyKey = Join-Path `
+    "Registry::HKEY_USERS\$TargetUserSid" `
+    "Software\Policies\Microsoft\Windows\Explorer"
+
+New-Item -Path $explorerPolicyKey -Force | Out-Null
+New-ItemProperty `
+    -Path $explorerPolicyKey `
+    -Name "ShowRunAsDifferentUserInStart" `
+    -PropertyType DWord `
+    -Value 1 `
+    -Force | Out-Null
+
+$showRunAsDifferentUser = Get-ItemPropertyValue `
+    -Path $explorerPolicyKey `
+    -Name "ShowRunAsDifferentUserInStart"
+
+if ($showRunAsDifferentUser -ne 1) {
+    throw 'Failed to enable "Run as different user" in Start.'
+}
+
+$fileSystemKey = "HKLM:\SYSTEM\CurrentControlSet\Control\FileSystem"
+
+New-ItemProperty `
+    -Path $fileSystemKey `
+    -Name "LongPathsEnabled" `
+    -PropertyType DWord `
+    -Value 1 `
+    -Force | Out-Null
+
+$longPathsEnabled = Get-ItemPropertyValue `
+    -Path $fileSystemKey `
+    -Name "LongPathsEnabled"
+
+if ($longPathsEnabled -ne 1) {
+    throw "Failed to enable Win32 long paths."
+}

windows/system/advanced-settings/configuration.dsc.yaml

@@ -0,0 +1,20 @@
+$schema: https://aka.ms/dsc/schemas/v3/bundled/config/document.json
+
+resources:
+  - name: Enable End task from the taskbar
+    type: Microsoft.Windows/Registry
+    properties:
+      keyPath: HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\TaskbarDeveloperSettings
+      valueName: TaskbarEndTask
+      valueData:
+        DWord: 1
+      _exist: true
+
+  - name: Enable clipboard history
+    type: Microsoft.Windows/Registry
+    properties:
+      keyPath: HKCU\Software\Microsoft\Clipboard
+      valueName: EnableClipboardHistory
+      valueData:
+        DWord: 1
+      _exist: true