Do you guys know how to disable all CPU mitigations in Windows?

[tistou77]

I know these values for FeatureSettings

"FeatureSettingsOverride"=dword:2000003
"FeatureSettingsOverrideMask"=dword:00000003

I hadn't looked for xxxx, I'll look

 

[qwerty]

Since Windows 11 24h2, for an Intel CPU, you delete (or rename as you wish) the mcupdate_GenuineIntel.dll file and rename the mcupdate_AuthenticAMD.dll file to mcupdate_GenuineIntel.dll

Do the opposite with an AMD CPU.
Alternatively, you can also use a empty .txt file, eg, that you rename to mcupdate_GenuineIntel.dll (with the .dll extension) for Intel
And mcupdate_AuthenticAMD.dll for AMD

And in NTlite, you just need to keep the "Processor microcode update (xxxx)" component associated with the CPU
=> Processor microcode update (AMD) for AMD, eg

If you want to "mod" the DLL, it's best to rename it afterwards

Update: Just wanted to say that you can not use empty files for this. Windows seems to perform some sort of check on these files. If I replace mcupdate_AuthenticAMD.dll with an empty file windows won't boot on next restart. However replacing it with the intel dll and renaming it works.

[Win11 24H2] I cannot delete mcupdate_GenuineIntel.dll

I’ve had some success getting rid of mcodes that Windows provides during boot, still can’t edit DLLs though. See spoiler. ▶ Spoiler: WIndows 11 build 26100 on AMD rig All I did was rename the dll for Intel to AMD and vice versa. Windows doesnt enter automatic repair mode and boots fine. AMD...

winraid.level1techs.com

 

[tistou77]

Thanks for info
I tried it once at the very beginning of the 24h2, with an Intel CPU.
From what I remember, it was good... Or maybe not.

But I haven't tried it since, I always use the AMD file renamed to Intel.

 

[qwerty]

Thanks for info
I tried it once at the very beginning of the 24h2, with an Intel CPU.
From what I remember, it was good... Or maybe not.

But I haven't tried it since, I always use the AMD file renamed to Intel.

Forgot to mention this is on 24h2 build 216100.1742. Regardless though these do NOT work for disabling the always on STIBP on zen3 unfortunately. I am now exploring BIOS editing and changing model-specific registers.

 

[tistou77]

For STIBP, I had found how to disable it only under Linux, but nothing for Windows.

I'll check if it's present in the old microcodes (before the famous patches) or not.