Update debloat stuff

Signed-off-by: Tommy <contact@tommytran.io>

Debloat/Parallels.txt

@@ -14,4 +14,5 @@ Microsoft.XboxGamingOverlay
 Microsoft.YourPhone
 Microsoft.WindowsMaps
 Microsoft.MicrosoftSolitaireCollection
-Microsoft.Windows.DevHome
+Microsoft.Windows.DevHome
+Microsoft.OutlookForWindows

Debloat/README.md

@@ -1,12 +1,8 @@
 # Debloating Windows
 
-Windows mark a number of packages as "provisioned". Thus, they will persist in the system even when you right click and uninstall them or try to remove them through `winget`.
+Windows mark a number of packages as "provisioned". Thus, they will persist in the system even when you right click and uninstall them or try to remove them through `winget`. Additionally, for apps installed from the Microsoft Store, they will continue existing in `C:\Program Files\WindowsApps` until it has been uninstalled by all users. `winget` also does not see packages installed by other users.
 
-Additionally, for apps installed from the Microsoft Store, they will continue existing in `C:\Program Files\WindowsApps` until it has been uninstalled by all users.
+As such, if you want to make sure all of the annoying APPX/MSIX apps are gone, it is better to use `Get-AppxPackage`. The documentation is at https://learn.microsoft.com/en-us/powershell/module/appx/get-appxpackage?view=windowsserver2022-ps. `Get-AppxPackage` does not see Win32 packages, therefore you will still need to remove them using `winget` afterwards.
-
-`winget` also does not see packages installed by other users.
-
-As such, if you want to make sure all of the annoying apps are gone, it is better to use `Get-AppxPackage`. The documentation is at https://learn.microsoft.com/en-us/powershell/module/appx/get-appxpackage?view=windowsserver2022-ps.
 
 ## Steps to debloat
 
@@ -22,6 +18,8 @@ As such, if you want to make sure all of the annoying apps are gone, it is bette
 
 - Run `Get-AppxPackage -AllUsers <PackageName> | Remove-AppxPackage -AllUsers` to remove the unwanted packages.
 
-- "Uninstall" the remaining annoying apps from the Start Menu. They are not really apps on the system, they are just annoying shortcuts which will install the apps when you click on them.
+- "Uninstall" the remaining annoying apps from the Start Menu. They are not really apps on the system, they are just annoying shortcuts which will install the apps when you click on them. The list of packages I remove on my Parallels system is in the `Parallels.txt` file.
 
-The list of packages I remove on my Parallels system is in the `Parallels.txt` file.
+- Open the terminal and run `winget list` to see the remaining packages (note that this will not exclude Framework packages). Remove the remaining undesirable apps with `winget remove <PackageName>`. In most cases, this will just be OneDrive.
+
+- For some reason, the Remote Desktop Connection app doesn't show up with both `Get-AppxPackage` and `winget`. Remove it with `mstsc /uninstall`. https://learn.microsoft.com/en-us/windows-server/remote/remote-desktop-services/clients/uninstall-remote-desktop-connection?tabs=command-prompt#uninstall-remote-desktop-connection

Group Policies/Computer Configuration/System/Internet Communication settings.md

@@ -2,7 +2,7 @@
 
 `Computer Configuration\Administrative Templates\System\Internet Communication Management\Internet Communication settings`
 
-These look quite old so I am not sure if they apply to modern Windows versions or not. It doesn't hurt to set them either ways
+**Old and very likely to be obsolete.**
 
 - Turn off Windows Customer Experience mprovement Program -> Enabled
 - Turn off downloading of print drivers over HTTP -> Enabled

Group Policies/Computer Configuration/Windows Components/App Privacy.md

@@ -0,0 +1,27 @@
+# App Privacy
+
+`Computer Configuration\Administrative Templates\Windows Components\App Privacy`
+
+These contains some settings that are not in the Settings app (and vice versa). Most of these stuff I will never use, therefore I am forcing them to be off. You do not need to follow me on this, but you should at least check out all of the policies there.
+
+- Let Windows apps access account information -> Enabled -> Force Deny
+- Let Windows apps access user movements while running in the background -> Enabled -> Force Deny
+- Let Windows apps access the calendar -> Enabled -> Force Deny
+- Let Windows apps access call history -> Enabled -> Force Deny
+- Let Windows apps access contacts -> Enabled -> Force Deny
+- Let Windows apps access email -> Enabled -> Force Deny
+- Let Windows apps access and eye tracker device -> Enabled -> Force Deny
+- Let Windows apps take screenshots of various windows or displays -> Enabled -> Force Deny
+- Let Windows apps turn off the screenshot border -> Enabled -> Force Deny
+- Let Windows apps access presence sensing -> Enabled -> Force Deny
+- Let Windows apps access location -> Enabled -> Force Deny
+- Let Windows apps access messaging -> Enabled -> Force Deny
+- Let Windows apps access motion -> Enabled -> Force Deny
+- Let Windows apps access notifications -> Enabled -> Force Deny
+- Let Windows apps make phone calls -> Enabled -> Force Deny
+- Let Windows apps control radios -> Enabled -> Force Deny
+- Let Windows apps access Tasks -> Enabled -> Force Deny
+- Let Windows apps access trusted devices -> Enabled -> Force Deny
+- Let Windows apps activate with voice -> Enabled -> Force Deny
+- Let Windows apps activate with voice while the system is locked -> Enabled -> Force Deny
+- Let Windows apps access diagnostic information about other apps -> Enabled -> Force Deny

Group Policies/Computer Configuration/Windows Components/MDM.md

@@ -0,0 +1,8 @@
+# MDM
+
+`Computer Configuration\Administrative Templates\Windows Components\MDM`
+
+Unless you run your own MDM system or something, this probably should not be on with a personal computer.
+
+- Enable automatic MDM enrollment using default Azure AD credentials -> Disabled (Probably redundant because of the next policy, but it will also **unenroll** you from Azure AD)
+- Disable MDM enrollment -> Enabled (This will not unenroll you though)

Group Policies/Computer Configuration/Windows Components/Messaging.md

@@ -0,0 +1,5 @@
+# Messaging
+
+`Computer Configuration\Administrative Templates\Windows Components\Messaging`
+
+- Allow Message Service Cloud Sync -> Disabled

Group Policies/Computer Configuration/Windows Components/Microsoft Edge.md

@@ -2,7 +2,7 @@
 
 `Computer Configuration\Administrative Templates\Windows Components\Microsoft Edge`
 
-**Probably for the legacy Microsoft Edge, not the Chromium based one**
+**Legacy Microsoft Edge, not the Chromium based one. Obsolete.**
 
 - Configure Autofill -> Disable (Password Manager is off so no reason for autofill to be on)
 - Configure Do Not Track -> Enable

Group Policies/Computer Configuration/Windows Components/Widgets.md

@@ -0,0 +1,7 @@
+# Widgets
+
+`Computer Configuration\Administrative Templates\Windows Components\Widgets`
+
+Probably not a huge privacy/security issue, it just fetches news and stuff from the internet. I disable it as it is extremely annoying.
+
+- Allow widgets -> Disabled

Group Policies/Computer Configuration/Windows Components/Windows Game Recording and Broadcasting.md

@@ -0,0 +1,7 @@
+# Windows Game Recording and Broadcasting
+
+`Computer Configuration\Administrative Templates\Windows Components\Windows Game Recording and Broadcasting`
+
+If you wanna record your screen and stuff, don't apply this. Otherwise, why not just disable it? Unnecesary stuff.
+
+- Enables or disables Windows Game Windows Game Recording and Broadcasting -> Disabled