1
0
mirror of https://github.com/TommyTran732/Windows-Setup.git synced 2024-11-22 16:11:45 -05:00

Compare commits

..

No commits in common. "25268b6156f07adf81d825d1d5bf0145d0d8200d" and "212897255e9fffd332cbd887d88003ab81277a36" have entirely different histories.

9 changed files with 11 additions and 64 deletions

View File

@ -15,4 +15,3 @@ Microsoft.YourPhone
Microsoft.WindowsMaps Microsoft.WindowsMaps
Microsoft.MicrosoftSolitaireCollection Microsoft.MicrosoftSolitaireCollection
Microsoft.Windows.DevHome Microsoft.Windows.DevHome
Microsoft.OutlookForWindows

View File

@ -1,8 +1,12 @@
# Debloating Windows # Debloating Windows
Windows mark a number of packages as "provisioned". Thus, they will persist in the system even when you right click and uninstall them or try to remove them through `winget`. Additionally, for apps installed from the Microsoft Store, they will continue existing in `C:\Program Files\WindowsApps` until it has been uninstalled by all users. `winget` also does not see packages installed by other users. Windows mark a number of packages as "provisioned". Thus, they will persist in the system even when you right click and uninstall them or try to remove them through `winget`.
As such, if you want to make sure all of the annoying APPX/MSIX apps are gone, it is better to use `Get-AppxPackage`. The documentation is at https://learn.microsoft.com/en-us/powershell/module/appx/get-appxpackage?view=windowsserver2022-ps. `Get-AppxPackage` does not see Win32 packages, therefore you will still need to remove them using `winget` afterwards. Additionally, for apps installed from the Microsoft Store, they will continue existing in `C:\Program Files\WindowsApps` until it has been uninstalled by all users.
`winget` also does not see packages installed by other users.
As such, if you want to make sure all of the annoying apps are gone, it is better to use `Get-AppxPackage`. The documentation is at https://learn.microsoft.com/en-us/powershell/module/appx/get-appxpackage?view=windowsserver2022-ps.
## Steps to debloat ## Steps to debloat
@ -18,8 +22,6 @@ As such, if you want to make sure all of the annoying APPX/MSIX apps are gone, i
- Run `Get-AppxPackage -AllUsers <PackageName> | Remove-AppxPackage -AllUsers` to remove the unwanted packages. - Run `Get-AppxPackage -AllUsers <PackageName> | Remove-AppxPackage -AllUsers` to remove the unwanted packages.
- "Uninstall" the remaining annoying apps from the Start Menu. They are not really apps on the system, they are just annoying shortcuts which will install the apps when you click on them. The list of packages I remove on my Parallels system is in the `Parallels.txt` file. - "Uninstall" the remaining annoying apps from the Start Menu. They are not really apps on the system, they are just annoying shortcuts which will install the apps when you click on them.
- Open the terminal and run `winget list` to see the remaining packages (note that this will not exclude Framework packages). Remove the remaining undesirable apps with `winget remove <PackageName>`. In most cases, this will just be OneDrive. The list of packages I remove on my Parallels system is in the `Parallels.txt` file.
- For some reason, the Remote Desktop Connection app doesn't show up with both `Get-AppxPackage` and `winget`. Remove it with `mstsc /uninstall`. https://learn.microsoft.com/en-us/windows-server/remote/remote-desktop-services/clients/uninstall-remote-desktop-connection?tabs=command-prompt#uninstall-remote-desktop-connection

View File

@ -2,7 +2,7 @@
`Computer Configuration\Administrative Templates\System\Internet Communication Management\Internet Communication settings` `Computer Configuration\Administrative Templates\System\Internet Communication Management\Internet Communication settings`
**Old and very likely to be obsolete.** These look quite old so I am not sure if they apply to modern Windows versions or not. It doesn't hurt to set them either ways
- Turn off Windows Customer Experience mprovement Program -> Enabled - Turn off Windows Customer Experience mprovement Program -> Enabled
- Turn off downloading of print drivers over HTTP -> Enabled - Turn off downloading of print drivers over HTTP -> Enabled

View File

@ -1,27 +0,0 @@
# App Privacy
`Computer Configuration\Administrative Templates\Windows Components\App Privacy`
These contains some settings that are not in the Settings app (and vice versa). Most of these stuff I will never use, therefore I am forcing them to be off. You do not need to follow me on this, but you should at least check out all of the policies there.
- Let Windows apps access account information -> Enabled -> Force Deny
- Let Windows apps access user movements while running in the background -> Enabled -> Force Deny
- Let Windows apps access the calendar -> Enabled -> Force Deny
- Let Windows apps access call history -> Enabled -> Force Deny
- Let Windows apps access contacts -> Enabled -> Force Deny
- Let Windows apps access email -> Enabled -> Force Deny
- Let Windows apps access and eye tracker device -> Enabled -> Force Deny
- Let Windows apps take screenshots of various windows or displays -> Enabled -> Force Deny
- Let Windows apps turn off the screenshot border -> Enabled -> Force Deny
- Let Windows apps access presence sensing -> Enabled -> Force Deny
- Let Windows apps access location -> Enabled -> Force Deny
- Let Windows apps access messaging -> Enabled -> Force Deny
- Let Windows apps access motion -> Enabled -> Force Deny
- Let Windows apps access notifications -> Enabled -> Force Deny
- Let Windows apps make phone calls -> Enabled -> Force Deny
- Let Windows apps control radios -> Enabled -> Force Deny
- Let Windows apps access Tasks -> Enabled -> Force Deny
- Let Windows apps access trusted devices -> Enabled -> Force Deny
- Let Windows apps activate with voice -> Enabled -> Force Deny
- Let Windows apps activate with voice while the system is locked -> Enabled -> Force Deny
- Let Windows apps access diagnostic information about other apps -> Enabled -> Force Deny

View File

@ -1,8 +0,0 @@
# MDM
`Computer Configuration\Administrative Templates\Windows Components\MDM`
Unless you run your own MDM system or something, this probably should not be on with a personal computer.
- Enable automatic MDM enrollment using default Azure AD credentials -> Disabled (Probably redundant because of the next policy, but it will also **unenroll** you from Azure AD)
- Disable MDM enrollment -> Enabled (This will not unenroll you though)

View File

@ -1,5 +0,0 @@
# Messaging
`Computer Configuration\Administrative Templates\Windows Components\Messaging`
- Allow Message Service Cloud Sync -> Disabled

View File

@ -2,7 +2,7 @@
`Computer Configuration\Administrative Templates\Windows Components\Microsoft Edge` `Computer Configuration\Administrative Templates\Windows Components\Microsoft Edge`
**Legacy Microsoft Edge, not the Chromium based one. Obsolete.** **Probably for the legacy Microsoft Edge, not the Chromium based one**
- Configure Autofill -> Disable (Password Manager is off so no reason for autofill to be on) - Configure Autofill -> Disable (Password Manager is off so no reason for autofill to be on)
- Configure Do Not Track -> Enable - Configure Do Not Track -> Enable

View File

@ -1,7 +0,0 @@
# Widgets
`Computer Configuration\Administrative Templates\Windows Components\Widgets`
Probably not a huge privacy/security issue, it just fetches news and stuff from the internet. I disable it as it is extremely annoying.
- Allow widgets -> Disabled

View File

@ -1,7 +0,0 @@
# Windows Game Recording and Broadcasting
`Computer Configuration\Administrative Templates\Windows Components\Windows Game Recording and Broadcasting`
If you wanna record your screen and stuff, don't apply this. Otherwise, why not just disable it? Unnecesary stuff.
- Enables or disables Windows Game Windows Game Recording and Broadcasting -> Disabled