In .ini file - unlikely. But in .bat and planned task, why not.
HW DEP - idk hadn't tried to touch
Exploit protection - not required for work, can be manually disabled until you would need to enable it again. Enabled by default in Microsoft Defender
Core isolation - not required for work, can be manually disabled or enabled. Again, Microsoft Defender.
Script for removal of system restore points is possible, i think.
You can permanently disable Hibernation manually in parameters.
Drive indexing can be manually disabled.
Cleanmgr and defrag is doable on startup via .bat and planned task
But in something .bat or .exe file and set it to autorun on startup - doable.
Also exploit protection isn't required by anyone.
But if you wanted something more specific, i hadn't understood you. Text is too cramped without any punctuation.