Windows System Maintenance & Client Setup Guide

sfc /scannow; DISM /Online /Cleanup-Image /CheckHealth; DISM /Online /Cleanup-Image /ScanHealth; DISM /Online /Cleanup-Image /RestoreHealth

netsh winsock reset; netsh int ip reset; ipconfig /release; ipconfig /renew; ipconfig /flushdns; Get-NetAdapter | Where-Status -Eq "Up" | Set-DnsClientServerAddress -ServerAddresses ("9.9.9.9","1.1.1.2"); Get-NetAdapterBinding -ComponentID ms_tcpip6 | Disable-NetAdapterBinding

1. System Repairs (SFC & DISM)

Run the following commands in an Administrator PowerShell or Command Prompt to scan and repair corrupted Windows system files and component stores.

Step 1: System File Checker (SFC)

Fixes corrupted or missing Windows system files.

sfc /scannow

Step 2: DISM Health Check

Checks whether the Windows image has been flagged as corrupted.

DISM /Online /Cleanup-Image /CheckHealth

Step 3: DISM Scan Health

Scans the Windows image for component store corruption.

DISM /Online /Cleanup-Image /ScanHealth

Step 4: DISM Restore Health

Repairs the Windows image using Windows Update as the repair source.

DISM /Online /Cleanup-Image /RestoreHealth

Step 5: Driver Updates (Optional)

Finds and installs outdated or missing hardware drivers.

Recommendation: Create a System Restore Point before updating drivers.

• Download Snappy Driver Installer Origin (SDIO).
• Click Download latest release, extract the archive, and launch SDIO_auto.
• Select Index This PC Only and enable Expert Mode.
• In the 1st Menu, toggle ON: Not installed, Newer, Better matches.
• In the 2nd Menu, toggle ON: Not Installed.
• In the 3rd Menu, toggle ON: Show only best.
• Click Select all and begin installing missing/outdated drivers.

Note: Restart your PC after completing all SFC and DISM operations.

2. Network & DNS Optimization

Reset network adapters, disable IPv6 to avoid resolution conflicts, and configure fast, security-focused DNS servers.

Step 1: Network Stack Reset

Open PowerShell (Admin) or Command Prompt (Admin) and run:

netsh winsock reset
netsh int ip reset
ipconfig /release
ipconfig /renew
ipconfig /flushdns

Step 2: Disable IPv6

1. Press Win + R, type ncpa.cpl, and press Enter.
2. Right-click your active Wi-Fi or Ethernet network adapter and select Properties.
3. Uncheck Internet Protocol Version 6 (TCP/IPv6).
4. Click OK to save.

PowerShell Alternative (Admin):

Get-NetAdapterBinding -ComponentID ms_tcpip6 | Disable-NetAdapterBinding

Step 3: Set Secure DNS (Quad9 & Cloudflare)

In the network adapter Properties menu:

1. Select Internet Protocol Version 4 (TCP/IPv4) and click Properties.
2. Select Use the following DNS server addresses:
   • Preferred DNS server: 9.9.9.9 (Quad9 Malware Protection)
   • Alternate DNS server: 1.1.1.2 (Cloudflare Security / Malware Blocking)
3. Click OK and restart your computer.

PowerShell Alternative (Admin):

Get-NetAdapter | Where-Status -Eq "Up" | Set-DnsClientServerAddress -ServerAddresses ("9.9.9.9","1.1.1.2")

3. Security & Malware Protection

Simple dual-layer protection using built-in Windows Defender alongside Malwarebytes.

Step 1: Windows Defender Quick Maintenance

1. Press Win + S, search for Windows Security, and open it.
2. Go to Virus & threat protection.
3. Click Check for updates under Protection updates.
4. Select Scan options -> Full scan -> Scan now.

PowerShell Alternative (Admin):

Update-MpSignature; Start-MpScan -ScanType FullScan

Step 2: Malwarebytes On-Demand Cleaner

1. Download Malwarebytes Free Installer.
2. Run the installer using default settings.
3. Open Malwarebytes, click Scan, and let it quarantine any discovered threats.
4. (Optional) Free version can remain on the system strictly for periodic manual scans.

4. Brave Browser Client Setup (Debloated & Clean)

Configure Brave for maximum speed, strong privacy, and zero clutter—optimized for non-technical users.

Step 1: Disable Web3 / Crypto Features

1. Open Brave and go to brave://settings/wallet.
2. Set Default Cryptocurrency Wallet to None.
3. Go to brave://settings/rewards and toggle Brave Rewards off.
4. Go to brave://settings/appearance and turn Off the Brave Wallet Button and Brave Rewards Button.

Step 2: Set Non-Breaking Ad & Tracker Protection

1. Go to brave://settings/shields.
2. Set Trackers & ads blocking to Standard.
   • Note: Standard mode blocks malicious ads and pop-ups without breaking standard websites or streaming services.

Step 3: Clean New Tab Page

1. Go to brave://settings/newTab.
2. Set New tab page shows to Blank page or Dashboard (Customize: Hide Cards, News, and Crypto).

5. Windows Setup (OOBE) Network Bypass

Skip the mandatory internet connection requirement during Windows initial setup (Out-Of-Box Experience).

1. On the "Let's connect you to a network" screen, press Shift + F10 (or Shift + Fn + F10) to open the Command Prompt.
2. Type the following command and press Enter:

oobe\bypassnro

3. The system will restart automatically. Upon reboot, select "I don't have internet" to proceed with local account creation.