win: add disable_sbat_updates.reg

win/README.md

@@ -6,6 +6,7 @@ These are `.reg` files for configuration changes to Windows.
 
 - [`classic_right_click.reg`](classic_right_click.reg) - restore the classic right-click menu
 - [`disable_network_thumbs_db.reg`](disable_network_thumbs_db.reg) - disable the creation of `Thumbs.db` files on network drives
+- [`disable_sbat_updates.reg`](disable_sbat_updates.reg) - disable Secure Boot Advanced Targeting (SBAT) updates
 - [`enable_developer_mode.reg`](enable_developer_mode.reg) - enable developer mode to (among other things) allow creating symlinks as a non-admin user
 - [`open_in_photo_viewer.reg`](open_in_photo_viewer.reg) - add an "Open in Photo Viewer" right-click option to images to open them in the old Microsoft Photo Viewer application
 - [`swap_caps_lock_key_and_context_key.reg`](swap_caps_lock_key_and_context_key.reg) - swap the behaviors of the caps lock key and the context menu key

win/disable_sbat_updates.reg

@@ -0,0 +1,4 @@
+Windows Registry Editor Version 5.00
+
+[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecureBoot\SBAT]
+"OptOut"=dword:00000001