https://github.com/agadiffe/windowsmize
:pushpin: PowerShell script to automate and customize the configuration of Windows. General settings, telemetry, network protocols, apps removal/installation, ramdisk, services, scheduled tasks.
https://github.com/agadiffe/windowsmize
bloatware cleanup debloat debloater optimize powershell powershell-module powershell-script privacy security telemetry tweaks windows windows-10 windows-11 windows10 windows11
Last synced: 6 months ago
JSON representation
:pushpin: PowerShell script to automate and customize the configuration of Windows. General settings, telemetry, network protocols, apps removal/installation, ramdisk, services, scheduled tasks.
- Host: GitHub
- URL: https://github.com/agadiffe/windowsmize
- Owner: agadiffe
- License: mit
- Created: 2024-10-11T18:40:40.000Z (12 months ago)
- Default Branch: main
- Last Pushed: 2025-04-10T09:54:42.000Z (6 months ago)
- Last Synced: 2025-04-10T10:54:18.534Z (6 months ago)
- Topics: bloatware, cleanup, debloat, debloater, optimize, powershell, powershell-module, powershell-script, privacy, security, telemetry, tweaks, windows, windows-10, windows-11, windows10, windows11
- Language: PowerShell
- Homepage:
- Size: 1.44 MB
- Stars: 14
- Watchers: 2
- Forks: 1
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- License: LICENSE
Awesome Lists containing this project
README
```
__ __ _ _ __ __ _
\ \ / / (_) _ _ __| | ___ __ __ __ ___ | \/ | (_) ___ ___
\ \/\/ / | | | ' \ / _` | / _ \ \ V V / (_-< | |\/| | | | |_ / / -_)
\_/\_/ |_| |_||_| \__,_| \___/ \_/\_/ /__/ |_| |_| |_| /__| \___|
```
## Description
### Purpose
PowerShell script to automate and customize the configuration of Windows.
1. Install Windows (semi-unattended: see New-WindowsAnswerFile.ps1) + updates
2. Run the script (WindowsMize.ps1)
3. Finish some customization (see todo_manually.md)
### Characteristics
- Designed for Windows 11 (most tweaks/settings also works on Windows 10).
- Fully non-interactive script: make sure to review everything before running it.
### Remarks
You can read some comments in the source code files about why you should disable some features.
Example:
- src > modules > network > private > NetFirewallRules.ps1
- src > modules > network > public
- src > modules > telemetry > public
- src > modules > tweaks > public
## Features
### Windows settings
Equivalent of the Windows GUI settings app (start > all apps > settings).
There are almost every settings, organized like the graphical counterpart.
### File Explorer
Every settings + few extra.
extra: Show/Hide Home/Gallery, ShowRemovableDrivesOnlyInThisPC, AutoFolderTypeDetection, MaxIconCacheSize.
### System Properties
Equivalent of the Windows GUI System Properties.
Visual Effects, Virtual Memory (paging file), System failure, System Restore, Remote Assistance.
### Power options
Settings not present in the Windows GUI settings app.
Fast startup, Hibernate, Network connectivity in Modern standby (S0), Battery settings (Low, Critical, Reserve).
### Network
Improve security by disabling various network protocols.
- Firewall : block some ports/programs shown as listening (locally) in Netstat or TCP View.
- IPv6 transition technologies (6to4, Teredo, IP-HTTPS, ISATAP).
- Network adapter protocol (Equivalent of the GUI properties (more adapter options > edit)).
- Miscellaneous (NetBiosOverTcpIP, IcmpRedirects, IPSourceRouting, LLMNR, Smhnr, Wpad).
### Telemetry
Various Group Policies to minimize Windows telemetry:
DotNetTelemetry, NvidiaTelemetry, PowerShellTelemetry, AppAndDeviceInventory, ApplicationCompatibility, Ceip,
CloudContent, ConsumerExperience, DiagnosticLogAndDumpCollectionLimit, DiagnosticsAutoLogger,
DiagnosticTracing, ErrorReporting, GroupPolicySettingsLogging, HandwritingPersonalization, InventoryCollector,
KmsClientActivationDataSharing, MsrtDiagnosticReport, OneSettingsDownloads, UserInfoSharing.
The main telemetry configurations are in the Windows settings app.
See 'Windows Settings App > Privacy & security > Windows permissions'.
### Tweaks
Various tweaks to improve and customize Windows:
- Security, privacy and networking:
Hotspot2, IndexingEncryptedFiles, LockScreenCameraAccess, MessagingCloudSync, NotificationsNetworkUsage,
PasswordExpiration, PasswordRevealButton, PrinterDriversDownloadOverHttp, WifiSense, Wpbt.
- System and performance:
FirstSigninAnimation, LongPaths, NtfsLastAccessTime, NumLockAtStartup, ServiceHostSplitting,
Short8Dot3FileName, StartupShutdownVerboseStatusMessages.
- User interface and experience:
ActionCenterLayout, CopyPasteDialogShowMoreDetails, HelpTips, OnlineTips, ShortcutNameSuffix,
StartMenuRecommendedSection, SuggestedContent, WindowsExperimentation, WindowsInputExperience,
WindowsPrivacySettingsExperience, WindowsSharedExperience, WindowsSpotlight.
- Windows features and settings:
MoveCharacterMapShortcutToWindowsTools, EventLogLocation, EaseOfAccessReadScanSection, FileHistory,
FontProviders, HomeSettingPageVisibility, OpenWithDialogStoreAccess, WindowsHelpSupport (F1Key, Feedback),
WindowsMediaDrmOnlineAccess, WindowsUpdateSearchDrivers.
### Applications
#### Removal
Remove default unwanted apps (bloatware).
e.g. Microsoft Edge, OneDrive, Start Menu sponsored apps, Widgets, BingSearch, ClipChamp, etc...
#### Installation
Install applications with Winget.
There are some predefined apps with a friendly name:
Git, VSCode, VLC, Bitwarden, KeePassXC, ProtonPass, AcrobatReader, SumatraPDF, 7zip, Notepad++, qBittorrent,
Brave, Firefox, MullvadBrowser, DirectXEndUserRuntime, Visual C++ Redistributable.
You can also install any apps with their Winget app name (e.g. 'Valve.Steam').
#### Settings
Configure applications settings (including UWP apps).
Apps: AcrobatReader, Brave Browser, Git, KeePassXC, MSOffice, qBittorrent, VLC, VSCode.
UWP apps: Microsoft Store, Notepad, Photos, Snipping Tool, Terminal.
### RamDisk
Configure a RamDisk for 'Brave Browser' and 'VSCode'.
For Brave, only a few elements are either restored to or excluded from the RamDisk:
- Extensions and their settings (excluded. i.e. symlinked).
- Bookmarks and their favicons (saved and restored upon logoff/logon).
- Settings preferences (saved and restored upon logoff/logon).
i.e. By default, history and cookies are not restored across logoff/logon.
### Services & Scheduled Tasks
Configure Windows Services & Scheduled Tasks (grouped by categories).
There are a lot of comments about the services in 'src > modules > services > private'.
Make sure to review them to know which one to disable according to your usages.
## Usage
This script requires 'PowerShell 7 (aka PowerShell Core)' and must be run as Administrator.
It's recommended to use Notepad++ or VSCode to have the code highlighted.
### Automated
1. Open a PowerShell prompt (Administrator privileges are not required).
Right-click on `Start Menu` > `Terminal`.
2. Download and extract WindowsMize archive to the 'Downloads' folder.
e.g. `C:\Users\\Downloads\WindowsMize`.
If the folder 'WindowsMize' exist, it will be deleted.
Save any data you want to keep (e.g. previous log files).
```powershell
irm 'https://github.com/agadiffe/WindowsMize/raw/main/Download_WindowsMize.ps1' | iex
```
3. Navigate to the extracted 'WindowsMize' folder in your 'Downloads' folder.
4. **Configure the script (WindowsMize.ps1) according to your preferences**.
5. Double click on the `Run_WindowsMize.bat` file to run the script.
Accept the Windows UAC prompt to run it as Administrator (required).
If 'PowerShell 7' is not installed, it will be automatically installed.
6. Restart (Mandatory for a lot of tweaks/settings).
### Manually
1. [Download WindowsMize](https://github.com/agadiffe/WindowsMize/archive/main.zip).
2. Navigate to the directory where you downloaded the archive and extract it.
3. **Configure the script (WindowsMize.ps1) according to your preferences**.
3. Open a PowerShell prompt (as Administrator or not).
Right-click on `Start Menu` > `Terminal`.
3. Install 'PowerShell 7'.
```powershell
winget install --exact --id 'Microsoft.PowerShell' --accept-source-agreements --accept-package-agreements
```
4. Open an elevated (i.e. Administrator) PowerShell prompt:
Right-click on `Start Menu` > `Terminal (Admin)`.
At the top of the Terminal window:
Click on the down arrow and choose 'PowerShell'.
5. Navigate to the directory where you extracted 'WindowsMize' (replace '\' with your username).
Example:
```powershell
cd 'C:\Users\\Downloads\WindowsMize-main\WindowsMize-main'
```
6. Unblock the script files (might not be necessary).
```powershell
Get-ChildItem -File -Recurse | Unblock-File
```
7. Sets the PowerShell execution policies for the current session (enable PowerShell script execution).
```powershell
Set-ExecutionPolicy -ExecutionPolicy 'Bypass' -Scope 'Process'
```
8. Run the script.
```powershell
.\WindowsMize.ps1
```
9. Restart (Mandatory for a lot of tweaks/settings).
## Support
If you find a bug, please open an issue.