{"id":14976899,"url":"https://github.com/orfeous/pure11","last_synced_at":"2025-10-27T21:31:52.295Z","repository":{"id":256157631,"uuid":"828367494","full_name":"Orfeous/Pure11","owner":"Orfeous","description":"Windows 11, minus the junk they thought you needed.","archived":false,"fork":false,"pushed_at":"2024-10-01T15:04:13.000Z","size":70,"stargazers_count":4,"open_issues_count":1,"forks_count":1,"subscribers_count":1,"default_branch":"main","last_synced_at":"2024-10-11T14:22:15.524Z","etag":null,"topics":["privacy","windows","windows-11","windows-11-debloat","windows-11-iso"],"latest_commit_sha":null,"homepage":"","language":"PowerShell","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/Orfeous.png","metadata":{"files":{"readme":"Readme.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2024-07-13T23:31:18.000Z","updated_at":"2024-09-29T09:55:37.000Z","dependencies_parsed_at":"2024-09-09T10:30:01.947Z","dependency_job_id":null,"html_url":"https://github.com/Orfeous/Pure11","commit_stats":null,"previous_names":["orfeous/pure11"],"tags_count":2,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Orfeous%2FPure11","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Orfeous%2FPure11/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Orfeous%2FPure11/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Orfeous%2FPure11/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/Orfeous","download_url":"https://codeload.github.com/Orfeous/Pure11/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":219860665,"owners_count":16556016,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["privacy","windows","windows-11","windows-11-debloat","windows-11-iso"],"created_at":"2024-09-24T13:54:38.292Z","updated_at":"2025-10-27T21:31:46.998Z","avatar_url":"https://github.com/Orfeous.png","language":"PowerShell","funding_links":[],"categories":[],"sub_categories":[],"readme":"# Pure 11 🪟\n\u003ca href=\"https://www.youtube.com/watch?v=aGSKrC7dGcY\" target=\"_blank\"\u003e![Pure11 meme](./.github/pure.png)\u003c/a\u003e\n\nWindows 11 arrives loaded with more than just an operating system—there's also bloatware, relentless telemetry, and a host of so-called 'features' designed to serve everyone except the end user.\n\nPure11 cuts through the nonsense, providing a streamlined, privacy-focused, and highly efficient version of the operating system.\n\nThis PowerShell script strips away the bloatware, removes ads, disables intrusive features, and performs essential system hardening, delivering a clean, secure, and responsive Windows 11 installation.\n\nPure11 is for those who prefer an OS that works for them, not the other way around.\n\n\n## What is removed / changed / disabled\n\n\u003cdetails\u003e\n\n- **Microsoft Edge**\n    \n    It is purged with fire. \u003c3\n\n- **OneDrive**\n\n    With a caveat: you need the post install script to get rid of it completely. It is a very persistent little worm and keeps crawling back. But after the Post install script ran, it is gone forever.\n\n- **Telemetry**\n\n    It's staggering how much telemetry is sewed into the fabric of Windows 11. \n    I highly doubt all of them is disabled, but the wast majority of them should be covered by Pure 11.\n\n- **AppX Packages**\n\n    For the latest list please check the contents of [./config/appx.conf](./config/appx.conf)\n\n    \u003cdetails\u003e\n\n    ```\n    ActiproSoftwareLLC\n    AdobePhotoshopExpress\n    CandyCrushSaga\n    CandyCrushSodaSaga\n    Clipchamp.Clipchamp\n    Duolingo\n    EclipseManager\n    Flipboard.Flipboard\n    iHeartRadio\n    Microsoft.3DBuilder\n    Microsoft.549981C3F5F10\n    Microsoft.AccountsControl\n    Microsoft.AsyncTextService\n    Microsoft.BingFinance\n    Microsoft.BingNews\n    Microsoft.BingSports\n    Microsoft.BingWeather\n    Microsoft.CommsPhone\n    Microsoft.Copilot\n    Microsoft.GamingApp\n    Microsoft.GetHelp\n    Microsoft.Getstarted\n    Microsoft.GroupMe10\n    Microsoft.Messaging\n    Microsoft.Microsoft3DViewer\n    Microsoft.MicrosoftEdge\n    Microsoft.MicrosoftEdge.Stable\n    Microsoft.MicrosoftEdgeDevToolsClient\n    Microsoft.MicrosoftOfficeHub\n    Microsoft.MicrosoftSolitaireCollection\n    Microsoft.MicrosoftStickyNotes\n    Microsoft.MinecraftUWP\n    Microsoft.MixedReality.Portal\n    Microsoft.MSPaint\n    Microsoft.NetworkSpeedTest\n    Microsoft.Office.OneNote\n    Microsoft.Office.Sway\n    Microsoft.OneConnect\n    Microsoft.OutlookForWindows\n    Microsoft.Paint\n    Microsoft.People\n    Microsoft.PowerAutomateDesktop\n    Microsoft.Print3D\n    Microsoft.ScreenSketch\n    Microsoft.SkypeApp\n    Microsoft.StorePurchaseApp\n    Microsoft.Todos\n    Microsoft.Wallet\n    Microsoft.Windows.CallingShellApp\n    Microsoft.Windows.DevHome\n    Microsoft.Windows.Holographic.FirstRun\n    Microsoft.Windows.PeopleExperienceHost\n    Microsoft.Windows.Photos\n    Microsoft.WindowsAlarms\n    Microsoft.WindowsCamera\n    microsoft.windowscommunicationsapps\n    Microsoft.WindowsFeedback\n    Microsoft.WindowsFeedbackHub\n    Microsoft.WindowsMaps\n    Microsoft.WindowsPhone\n    Microsoft.WindowsSoundRecorder\n    Microsoft.WindowsStore\n    Microsoft.Xbox.TCUI\n    Microsoft.XboxApp\n    Microsoft.XboxGameCallableUI\n    Microsoft.XboxGameOverlay\n    Microsoft.XboxGamingOverlay\n    Microsoft.XboxIdentityProvider\n    Microsoft.XboxSpeechToTextOverlay\n    Microsoft.YourPhone\n    Microsoft.ZuneMusic\n    Microsoft.ZuneVideo\n    MicrosoftCorporationII.QuickAssist\n    MicrosoftWindows.Client.WebExperience\n    MicrosoftWindows.CrossDevice\n    PandoraMediaInc\n    Shazam\n    Spotify\n    Twitter\n    Windows.ContactSupport\n    Windows.Print3D\n    ```\n    \u003c/details\u003e\n\n- **Windows Capabilities**\n\n    For the latest list please check the contents of [./config/capabilities.conf](./config/capabilities.conf)\n\n    \u003cdetails\u003e\n\n    ```\n    Accessibility.Braille\n    Analog.Holographic.Desktop\n    App.StepsRecorder\n    Browser.InternetExplorer\n    Language.Handwriting\n    Language.OCR\n    Language.Speech\n    Language.TextToSpeech\n    MathRecognizer\n    Media.WindowsMediaPlayer\n    Microsoft.Wallpapers.Extended\n    Microsoft.Windows.WordPad\n    OneCoreUAP.OneSync\n    Windows.Desktop.EMS-SAC.Tools\n    ```\n    \u003c/details\u003e\n\n- **Optional Windows Features**\n\n    For the latest list please check the contents of [./config/features.conf](./config/features.conf)\n\n    \u003cdetails\u003e\n\n    ```\n    Internet-Explorer-Optional-amd64\n    Internet-Explorer-Optional-x64\n    Internet-Explorer-Optional-x84\n    MediaPlayback\n    MicrosoftWindowsPowerShellV2\n    MicrosoftWindowsPowerShellV2Root\n    RasCMAK.Client\n    RIP.Listener\n    SMB1Protocol\n    SMB1Protocol-Client\n    SMB1Protocol-Server\n    SmbDirect\n    SNMP.Client\n    TelnetClient\n    TFTP\n    WCF-TCP-PortSharing45\n    WindowsMediaPlayer\n    WMI-SNMP-Provider.Client\n    WorkFolders-Client                  \n    ```\n    \u003c/details\u003e\n\n- **And a whole heap of other stuff through registry and filesystem changes**\n\n    Please check the contents of the `./config` folder to review what changes are implemented.\n\n\u003c/details\u003e\n\n## What is **NOT** removed and hence kept in a fully functional state.\n\n\u003cdetails\u003e\n\n - **Windows Updates**\n    \n    I'm not a savage. Despite it's annoying tendency to introduce junk noone asked for, having patches for 0-days and other nasty bugs are far outweights it's downsides and shortcomings.\n\n - **Windows Defender**\n\n    Well, maybe i'm a savage after all... I spent like two weeks trying to strip this out from the system in a way which doesn't undermines stability (and windows updates). \n    But it is not possible without breaking things which otherwise useful.\n\n    If you are under age ~45 just keep your system up-to-date and don't do stupid stuff, Defender will provide sufficient protection.\n    \n    If you are over ~45, please purchase a strong AV engine from a reputable vendor and keep your system updated.\n\n    I don't mean to offend anyone, but statistics and experience never lies...\n\n    If you are looking for a good AV to purchase i recommend to check out this youtube channel:\n    [The PC Security Channel](https://www.youtube.com/@pcsecuritychannel) (Note: He will not tell you what to buy, but his videos will provide you the knowledge to be able to form and educated decision for your usecase/situation)\n\n\u003c/details\u003e\n\n## Prerequisites\n\n\u003cdetails\u003e\n\n- Windows 11 Install ISO - [Download Windows 11 - Microsoft](https://www.microsoft.com/software-download/windows11) or [MSDN](https://my.visualstudio.com/)\n- PsExec - [PsExec - Sysinternals | Microsoft Learn](https://learn.microsoft.com/sysinternals/downloads/psexec)\n\n- PowerShell - The versions below are just for reference, if yours somewhere in the ballpark, then you should be fine.\n\n    \u003cdetails\u003e\n\n    ```powershell\n    # for Windows PowerShell\n    # $PSVersionTable \n\n    Name                           Value\n    ----                           -----\n    PSVersion                      5.1.22621.4111\n    PSEdition                      Desktop\n    PSCompatibleVersions           {1.0, 2.0, 3.0, 4.0...}\n    BuildVersion                   10.0.22621.4111\n    CLRVersion                     4.0.30319.42000\n    WSManStackVersion              3.0\n    PSRemotingProtocolVersion      2.3\n    SerializationVersion           1.1.0.1\n\n    # or for pwsh\n    # $PSVersionTable\n\n    Name                           Value\n    ----                           -----\n    PSVersion                      7.4.5\n    PSEdition                      Core\n    GitCommitId                    7.4.5\n    OS                             Microsoft Windows 10.0.22631\n    Platform                       Win32NT\n    PSCompatibleVersions           {1.0, 2.0, 3.0, 4.0…}\n    PSRemotingProtocolVersion      2.3\n    SerializationVersion           1.1.0.1\n    WSManStackVersion              3.0\n    ```\n\n    \u003c/details\u003e\n\n\n- Make sure you can run powershell scripts:\n    ```powershell\n    Set-ExecutionPolicy Bypass -Scope CurrentUser -Force; # for the current user\n    # or\n    Set-ExecutionPolicy Bypass -Scope LocalMachine -Force; # for the current machine\n    ```\n\n\u003c/details\u003e\n\n## Configuration\n\n\u003cdetails\u003e\n\nThe script can be configured using the various files in the `./config` folder (and in the `./work` folder, see below).\n\n- 📄 **config/appx.conf**\n\n        List of AppX packages to be removed.\n        Lines starting with '#' character interpreted as comments and will be ignored.\n\n- 📄 **config/autounattend.xml**\n\n    Allows customization of the Setup process (among other things)\n\n    Pure11 will try to load one which is matching with the detected language of the OS. \n    \n    Allowing the option to create customized ISOs for different languages using the same \"purification\" process.\n\n        Image language: en-US\n            autounattend.en-US.xml will be used (if present)\n\n        Image language: hu-HU\n            autounattend.hu-HU.xml will be used (if present)\n\n        if no language specific autounattend.xml is found then it just uses the generic one.\n\n    Read more: \n\n    [Answer files (unattend.xml)](https://learn.microsoft.com/en-us/windows-hardware/manufacture/desktop/update-windows-settings-and-scripts-create-your-own-answer-file-sxs?view=windows-11)\n    \n    [schneegans Generate autounattend.xml files for Windows 10/11\n](https://schneegans.de/windows/unattend-generator/)\n\n\n\n- 📄 **config/capabilities.conf**\n\n        List of Windows Capabilities to be removed.\n        Lines starting with '#' character interpreted as comments and will be ignored.\n\n- 📄 **config/features.conf**\n\n        List of Windows Optional Features to be disabled.\n        Lines starting with '#' character interpreted as comments and will be ignored.\n\n- 📄 **config/files.txt**\n\n        List of file paths to be deleted.\n        They are relative to the mount folder.\n        Lines starting with '#' character interpreted as comments and will be ignored.\n\n- 📄 **config/hosts.conf**\n    \n    [DNS sinkhole Wikipedia](https://en.wikipedia.org/wiki/DNS_sinkhole)\n\n        List of DNS entries to be sinkholed using the hosts file.\n        Lines starting with '#' character interpreted as comments and will be ignored.\n\n- 📂 **config/post-install**\n\n    Scripts in this directory will be added to be executed when a user logs in for the first time.\n\n    Post installation they can be found in `c:\\Windows\\Setup\\Scripts` you may need to run them manually (as admin) to make them truly work.\n\n    Note: Todo to investigate why they only executed *'partially'*.\n\n- 📂 **config/reg**\n\n    *.reg files to implement registry changes. File whose name is starting with `-` will be ignored.\n\n    Note: *At present the stuff in the reg files is a mess, i need to come up with a structure to organise them better.*\n    \n    The registry paths have to match with the mounted hives:\n\n    | Pure11 Hive Path    | Deployed OS Registry Path | Description |\n    | -------- | ------- | ------- |\n    | HKLM\\P11_COMPONENTS  | HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Components    | Device drivers, services, and other system elements |\n    | HKLM\\P11_DEFAULT | HKEY_USERS.DEFAULT | User hive of the NT Authority\\SYSTEM account |\n    | HKLM\\P11_SOFTWARE    | HKEY_LOCAL_MACHINE\\Software | Settings for installed software and Windows System itself |\n    | HKLM\\P11_SYSTEM    | HKEY_LOCAL_MACHINE\\SYSTEM | Settings and configuration data for the operating system |\n    | HKLM\\P11_NTUSER    | HKEY_CURRENT_USER | User-specific registry data, will be applied to new users |\n\n\n- 📂 **work/updates**\n\n    Place windows update `*.cab` and `*.msu` files in this directory and they will be added to the image.\n    Recursive, subfolders allowed.\n\n- 📂 **work/drivers**\n\n    Place device drivers in this directory and they will be added to the image. Recursive, subfolders allowed.\n\n\n\n\u003c/details\u003e\n\n## Usage\n\n\u003cdetails\u003e\n\n1. Download the repo\n\n2. Open powershell as admin and cd into the directory where you have the Pure11.ps1 script\n\n3. Run the script with the -Init flag to create the required directory structure\n    ```powershell\n    .\\Pure11.ps1 -Init\n    ```\n\n4. Use PsExec to open another powershell window as SYSTEM\n    ```powershell\n    psexec64.exe -nobanner -s -i powershell # for Windows powershell\n    # or\n    psexec64.exe -nobanner -s -i pwsh # for pwsh\n    ```\n\n5. In the freshly opened powershell window, cd into the directory where you have the Pure11.ps1 script\n    ```powershell\n    .\\Pure11.ps1 -BuildIso\n    ```\n\n6. A file picker window will open to select your windows iso. \n\n    **Note:** *A notice window will also complain about not being able to find the desktop folder, that is normal and just click \"Ok\". SYSTEM does not have a desktop folder.*\n\n7. In the powershell window the script will list the available SKUs (installable images / editions). Pick the one you want to proceed with.\n\n8. The finished ISO will be placed into the iso directory right next to the script.\n\n\u003c/details\u003e\n\n## Remarks / Resources\n\nA ton of useful info, snippets and whatnot is coming from the below listed resources, huge thanks for their hard work!\n\n- https://privacy.sexy \n- https://github.com/undergroundwires/privacy.sexy\n- https://schneegans.de\n- https://www.youtube.com/@pcsecuritychannel\n- https://github.com/StellarSand/privacy-settings\n- https://github.com/memstechtips/UnattendedWinstall\n- https://github.com/teeotsa/windows-11-debloat\n- https://github.com/Atlas-OS/Atlas\n- https://github.com/swczk/BetterWithReg\n- https://github.com/beerisgood/Windows11_Hardening\n- https://github.com/ntdevlabs/tiny11builder\n\n## Disclaimer\n\n    This program is provided \"as is\" without warranty of any kind.\n    The developer takes no responsibility for any damages, data loss, or other issues that may arise from the use of this program.\n    \n    Use at your own risk. \n    \n    Always back up your data before making any modifications.\n    Testing in virtual machines are encouraged.\n\n## License\n\n[MIT License](./LICENSE)\n \n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Forfeous%2Fpure11","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Forfeous%2Fpure11","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Forfeous%2Fpure11/lists"}