simeononsecurity/windows-optimize-debloat repository overview

⁠Windows-Optimize-Debloat

• Windows "N" Editions are not tested.
• Run the Windows 10 Upgrade Assistant⁠ to update and verify latest major release.

⁠Fixing Microsoft Account or Xbox Services:

This is because we block signing into microsoft accounts. Microsoft's telemetry and identity association is frowned upon. However, if you still wish to use these services see the following issue tickets for the resolution:

• https://github.com/simeononsecurity/Windows-Optimize-Harden-Debloat/issues/1⁠
• https://github.com/simeononsecurity/Windows-Optimize-Harden-Debloat/issues/16⁠
• https://github.com/simeononsecurity/Windows-Optimize-Harden-Debloat/issues/22⁠

⁠A list of scripts and tools this collection utilizes:

• Microsoft Security Compliance Toolkit 1.0⁠

⁠Additional configurations were considered from:

• BuiltByBel - PrivateZilla⁠
• MelodysTweaks - Basic Tweaks⁠
• Microsoft - Managing Windows 10 Telemetry and Callbacks⁠
• Microsoft - Windows 10 Privacy⁠
• Microsoft - Windows 10 VDI Recomendations⁠
• Mirinsoft - SharpApp⁠
• Mirinsoft - debotnet⁠
• UnderGroundWires - Privacy.S**Y⁠
• Sycnex - Windows10Debloater⁠
• The-Virtual-Desktop-Team - Virtual-Desktop-Optimization-Tool⁠
• TheVDIGuys - Windows 10 VDI Optimize⁠
• W4H4WK - Debloat Windows 10⁠

⁠How to run the script:

⁠Automated Install:

The script may be launched from the extracted GitHub download like this:

iwr -useb 'https://simeononsecurity.ch/scripts/windowsoptimizeanddebloat.ps1'|iex

⁠Manual Install:

If manually downloaded, the script must be launched from an administrative powershell in the directory containing all the files from the GitHub Repository⁠

The script "sos-optimize-windows.ps1" includes several parameters that allow for customization of the optimization process. Each parameter is a boolean value that defaults to true if not specified.

• $cleargpos: Clears Group Policy Objects settings.
• $installupdates: Installs updates to the system.
• $removebloatware: Removes unnecessary programs and features from the system.
• $disabletelemetry: Disables data collection and telemetry.
• $privacy: Makes changes to improve privacy.
• $imagecleanup: Cleans up unneeded files from the system.
• $diskcompression: Compresses the system disk.
• $updatemanagement: Changes the way updates are managed and improved on the system.
• $sosbrowsers: Optimizes the system's web browsers.

An example of how to launch the script with specific parameters would be:

Set-ExecutionPolicy -ExecutionPolicy RemoteSigned -Force
Get-ChildItem -Recurse *.ps1 | Unblock-File
powershell.exe -ExecutionPolicy ByPass -File .\sos-optimize-windows.ps1 -cleargpos:$false -installupdates:$false

⁠Learn more about Debloating Windows 10 and Windows 11⁠

⁠Explore the World of Cybersecurity

⁠

⁠Links:

• ⁠github.com/simeononsecurity⁠

• ⁠simeononsecurity.ch⁠