Automate and customize the configuration of Windows.

Debloat, minimize telemetry, apps installation, general settings, and more.

🎯 Purpose

1. Install Windows (semi-unattended: see New-WindowsAnswerFile.ps1) + updates
2. Run the script (WindowsMize.ps1)
3. Finish some customization (see todo_manually.md)

📝 Characteristics

• Each tweak/setting has its own function.
• Designed for Windows 11 (most tweaks/settings also work on Windows 10).
• Fully non-interactive script: make sure to review everything before running it.

💫 Features

🖥️ Windows settings

Equivalent of the Windows GUI settings app (start > all apps > settings).
There are almost every settings, organized like the graphical counterpart.

📁 File Explorer

Every settings + few extra.
extra: Show/Hide Home/Gallery, ShowRemovableDrivesOnlyInThisPC, AutoFolderTypeDetection, MaxIconCacheSize.

⚙️ System Properties

Equivalent of the Windows GUI System Properties.
Visual Effects, Virtual Memory (paging file), System failure, System Restore, Remote Assistance.

⚡ Power options

Settings not present in the Windows GUI settings app.
Fast startup, Hibernate, Network connectivity in Modern standby (S0), Battery settings (Low, Critical, Reserve).

🌐 Network

Improve security by disabling various network protocols.

• Firewall : block some ports/programs shown as listening (locally) in Netstat or TCP View.
• IPv6 transition technologies (6to4, Teredo, IP-HTTPS, ISATAP).
• Network adapter protocol (Equivalent of the GUI properties (more adapter options > edit)).
• Miscellaneous (NetBiosOverTcpIP, IcmpRedirects, IPSourceRouting, LLMNR, Smhnr, Wpad).

📊 Telemetry

Various Group Policies to minimize Windows telemetry (click to expand).

DotNetTelemetry, NvidiaTelemetry, PowerShellTelemetry, AppAndDeviceInventory, ApplicationCompatibility, Ceip,
CloudContent, ConsumerExperience, DiagnosticLogAndDumpCollectionLimit, DiagnosticsAutoLogger,
DiagnosticTracing, ErrorReporting, GroupPolicySettingsLogging, HandwritingPersonalization, InventoryCollector,
KmsClientActivationDataSharing, MsrtDiagnosticReport, OneSettingsDownloads, UserInfoSharing.

The main telemetry configurations are in the Windows settings app.
See 'Windows Settings App > Privacy & security > Windows permissions'.

🛠️ Tweaks

Various tweaks to improve and customize Windows.

Security, privacy and networking (click to expand).

Hotspot2, LockScreenCameraAccess, MessagingCloudSync, NotificationsNetworkUsage,
PasswordExpiration, PasswordRevealButton, PrinterDriversDownloadOverHttp, WifiSense, Wpbt.

System and performance (click to expand).

FirstSigninAnimation, LongPaths, NtfsLastAccessTime, NumLockAtStartup, ServiceHostSplitting,
Short8Dot3FileName, StartupShutdownVerboseStatusMessages.

User interface and experience (click to expand).

ActionCenterLayout, CopyPasteDialogShowMoreDetails, HelpTips, OnlineTips, ShortcutNameSuffix,
StartMenuRecommendedSection, SuggestedContent, WindowsExperimentation, WindowsInputExperience,
WindowsPrivacySettingsExperience, WindowsSharedExperience, WindowsSpotlight.

Windows features and settings (click to expand).

MoveCharacterMapShortcutToWindowsTools, EventLogLocation, EaseOfAccessReadScanSection, FileHistory,
FontProviders, HomeSettingPageVisibility, OpenWithDialogStoreAccess, WindowsHelpSupport (F1Key, Feedback),
WindowsMediaDrmOnlineAccess, WindowsUpdateSearchDrivers.

💿 Applications

• Remove default unwanted apps (bloatware).
  e.g. Microsoft Edge, OneDrive, Start Menu sponsored apps, Widgets, BingSearch, ClipChamp, etc...

• Install applications with Winget.

  There are some predefined apps with a friendly name (click to expand).

  Git, VSCode, VLC, Bitwarden, KeePassXC, ProtonPass, AcrobatReader, SumatraPDF, 7zip, Notepad++, qBittorrent,
  Brave, Firefox, MullvadBrowser, DirectXEndUserRuntime, Visual C++ Redistributable.

  You can also install any apps with their Winget app name (e.g. 'Valve.Steam').

• Configure applications settings (including UWP apps).

  Apps: Acrobat Reader, Brave Browser, Git, KeePassXC, MS Office, qBittorrent, VLC, VSCode.
  UWP apps: Microsoft Store, Notepad, Photos, Snipping Tool, Terminal.

💾 RamDisk

Configure a RamDisk for 'Brave Browser' and 'VSCode'.

Details (click to expand).

For Brave, only a few elements are either restored to or excluded from the RamDisk:

• Extensions and their settings (excluded. i.e. symlinked).
• Bookmarks and their favicons (saved and restored upon logoff/logon).
• Settings preferences (saved and restored upon logoff/logon).

i.e. By default, history and cookies are not restored across logoff/logon.

⌛ Services & Scheduled Tasks

Configure (e.g. disable) Windows Services & Scheduled Tasks (grouped by categories).

There are a lot of comments about the services in 'src > modules > services > private'.
Make sure to review them to know which one to disable according to your usages.

📚 Usage

This script requires 'PowerShell 7 (aka PowerShell Core)' and must be run as Administrator.
It's recommended to use Notepad++ or VSCode to have the code highlighted.

Automated

1. Open a PowerShell prompt (Administrator privileges are not required).
   Right-click on Start Menu > Terminal.
2. Download and extract WindowsMize archive to the 'Downloads' folder.
   e.g. C:\Users\<User>\Downloads\WindowsMize.
   If the folder 'WindowsMize' exist, it will be deleted.
   Save any data you want to keep (e.g. previous configuration and/or log files).

   irm 'https://github.com/agadiffe/WindowsMize/raw/main/Download_WindowsMize.ps1' | iex

3. Navigate to the extracted 'WindowsMize' folder in your 'Downloads' folder.
4. Configure the script (WindowsMize.ps1) according to your preferences.
5. Double click on the Run_WindowsMize.bat file to run the script.
   Accept the Windows UAC prompt to run it as Administrator (required).
   If 'PowerShell 7' is not installed, it will be automatically installed.
6. Restart (Mandatory for a lot of tweaks/settings).

Manually

1. Download WindowsMize.
2. Navigate to the directory where you downloaded the archive and extract it.
3. Configure the script (WindowsMize.ps1) according to your preferences.
4. Open a PowerShell prompt (as Administrator or not).
   Right-click on Start Menu > Terminal.
5. Install 'PowerShell 7'.

   winget install --exact --id 'Microsoft.PowerShell' --accept-source-agreements --accept-package-agreements

6. Open an elevated (i.e. Administrator) PowerShell prompt:
   Right-click on Start Menu > Terminal (Admin).
   At the top of the Terminal window:
   Click on the down arrow and choose 'PowerShell'.
7. Navigate to the directory where you extracted 'WindowsMize' (replace '<User>' with your username).
   Example:

   cd 'C:\Users\<User>\Downloads\WindowsMize-main\WindowsMize-main'

8. Unblock the script files (might not be necessary).

   Get-ChildItem -File -Recurse | Unblock-File

9. Sets the PowerShell execution policies for the current session (enable PowerShell script execution).

   Set-ExecutionPolicy -ExecutionPolicy 'Bypass' -Scope 'Process'

10. Run the script.

    .\WindowsMize.ps1

11. Restart (Mandatory for a lot of tweaks/settings).

📍 Remarks

You can read some comments in the source code files about why you should disable some features.

Example:

• src > modules > network > private > NetFirewallRules.ps1
• src > modules > network > public
• src > modules > telemetry > public
• src > modules > tweaks > public

💙 Support

If you find a bug, please open an issue.