Ecosyste.ms: Awesome

An open API service indexing awesome lists of open source software.

https://github.com/RedAndBlueEraser/windows-10-enhance-2

A PowerShell script to automatically configure for the highest privacy and control settings in Windows 10.
https://github.com/RedAndBlueEraser/windows-10-enhance-2

Last synced: about 1 month ago
JSON representation

A PowerShell script to automatically configure for the highest privacy and control settings in Windows 10.

Lists

README 

        
# Windows 10 Privacy and Control Enhance

A PowerShell script to automatically configure for the highest privacy and control settings in Windows 10.



## Synopsis

This PowerShell script minimises telemetry and data collection sent to Microsoft and third parties, removes advertising elements, and uninstalls useless apps.



By default, it avoids making changes that remove or disable features or functions, such as Cortana and shared experiences. The script can perform more aggressive optimisations with a command line switch. In this mode, it turns off and uninstalls unlikely to be useful and possibly privacy intrusive features and apps, including OneDrive, find my device and Xbox.



Another command line switch makes the script apply Group Policies in addition to changing settings. This locks down the setting, and possibly disabling the option in the Settings app.



Some tweaks, particularly with Group Policies, are only available in Windows 10 Enterprise or Education editions.



## Usage

Run the PowerShell script file `windows-10-enhance-privacy-and-control.ps1` with administrator privileges. This performs the default optimisation where changes are made that do not remove or disable features or functions.



The PowerShell script can be run with the following command line switches:



### Command line switches

- `-EditGroupPolicies`: Edits the group policy (via the registry) in addition to toggling settings. This prevents the user from being able to toggle some settings through the UI. **Precaution should be taken when using this option in conjunction with higher optimisation levels.** _Some tweaks are only available by editing Group Policies while some settings are not controlled by any Group Policy._

- `-AggressiveOptimization`: By default, the standard optimisation only changes settings that should not impact any functionality. For example: turning off telemetry data collection, disabling advertising elements, and tightening privacy controls. Aggressive optimisation goes further by turning off privacy intrusive, yet unlikely to be useful, features.



### Recommended usage

This is the recommended usage of the PowerShell script on a freshly installed Windows 10. It performs aggressive optimisation but still allows the user to undo some of the settings changed by the optimisation. The changes in standard optimisation are generally safe and can be locked down by group policies.

```Shell

windows-10-enhance-privacy-and-control.ps1 -AggressiveOptimization

windows-10-enhance-privacy-and-control.ps1 -EditGroupPolicies

```

---

On an already set up system, it is recommended to just perform standard optimisation to prevent already set user settings from being reset.

```Shell

windows-10-enhance-privacy-and-control.ps1

```

---

It is **not recommended** to lock down aggressive optimisation changes by applying group policies, but this can still be done.

```Shell

windows-10-enhance-privacy-and-control.ps1 -AggressiveOptimization -EditGroupPolicies

```



## Author

RedAndBlueEraser