privacy.sexyRevamped

Windows privacy and debloat script catalog

The full index of what the Windows collection can change, grouped the way the script builder groups it. Every entry is a tweak you can select, read as plain commands, and download as one script that runs locally.

Build a Windows script →

Windows is the largest collection here because it has the most to switch off. It covers diagnostic telemetry and the DiagTrack service, Recall and Click to Do, the Copilot app and Copilot in Edge, advertising and content recommendations, preinstalled Store apps, OneDrive, Xbox, Widgets, and the connectivity checks and scheduled tasks that report back on their own schedule. It also carries defensive hardening: DNS privacy, insecure cipher and protocol removal, remote administration lockdown and Meltdown/Spectre mitigations.

Not everything here is advisable, and the tags say which is which. A tweak tagged Opt-in only is deliberately excluded from both recommendation presets. Most of the "Privacy over security" section is in that state, because turning off Defender, SmartScreen or automatic updates buys privacy by removing a protection. This fork moved a large number of upstream's recommendations into that tier rather than dropping the scripts, so the choice stays available and stops being a default.

Privacy cleanup

  • Clear credentials in Windows Credential Manager Opt-in only
  • Remove the controversial `default0` user Opt-in only
  • Empty trash (Recycle Bin) Opt-in only
  • Minimize DISM "Reset Base" update data Opt-in only
  • Remove Windows product key from registry Opt-in only
  • Clear volume backups (shadow copies) Opt-in only
  • Remove associations of default apps Opt-in only
  • Clear System Resource Usage Monitor (SRUM) data Opt-in only
  • Clear previous Windows installations Opt-in only

Clear recent activity

  • Clear recent application history Opt-in only
  • Clear Adobe recent file history Opt-in only
  • Clear Microsoft Paint recent files history Opt-in only
  • Clear network drive mapping history Opt-in only
  • Clear Windows Search history Opt-in only
  • Clear recent files and folders history Opt-in only
  • Clear Windows Media Player recent activity history Opt-in only
  • Clear DirectX recent application history Opt-in only
  • Clear Windows Run command history Opt-in only
  • Clear File Explorer address bar history Opt-in only

Clear recent activity › Clear Quick Access lists

  • Clear Quick Access recent files Opt-in only
  • Clear Quick Access pinned items Opt-in only

Clear recent activity › Clear Windows Registry recent activity

  • Clear Windows Registry last-accessed key Opt-in only
  • Clear Windows Registry favorite locations Opt-in only

Clear third-party application data

  • Clear Listary search index Opt-in only
  • Clear Java cache Opt-in only
  • Clear Dotnet CLI telemetry Opt-in only

Clear third-party application data › Clear Steam data

  • Clear Steam dumps Opt-in only
  • Clear Steam traces Opt-in only
  • Clear Steam cache Opt-in only

Clear third-party application data › Clear Visual Studio usage data › Clear Visual Studio telemetry and feedback data

  • Clear offline Visual Studio usage telemetry data Opt-in only
  • Clear Visual Studio Application Insights logs Opt-in only
  • Clear Visual Studio telemetry data Opt-in only
  • Clear Visual Studio temporary telemetry and log data Opt-in only

Clear third-party application data › Clear Visual Studio usage data › Clear Visual Studio licenses

  • Clear Visual Studio 2010 license Opt-in only
  • Clear Visual Studio 2013 license Opt-in only
  • Clear Visual Studio 2015 license Opt-in only
  • Clear Visual Studio 2017 license Opt-in only
  • Clear Visual Studio 2019 license Opt-in only
  • Clear Visual Studio 2022 license Opt-in only

Clear browser history

  • Clear Opera history (user profiles, settings, and data) Opt-in only

Clear browser history › Clear Internet Explorer history

  • Clear Internet Explorer cache Opt-in only
  • Clear Internet Explorer typed URLs Opt-in only
  • Clear "Temporary Internet Files" (browser cache) Opt-in only
  • Clear Internet Explorer feeds cache Opt-in only
  • Clear Internet Explorer cookies Opt-in only
  • Clear Internet Explorer DOMStore Opt-in only
  • Clear Internet Explorer usage data Opt-in only

Clear browser history › Clear Chrome history

  • Clear Chrome crash reports Opt-in only
  • Clear Google's "Software Reporter Tool" logs Opt-in only
  • Clear Chrome user data Opt-in only

Clear browser history › Clear Firefox history

  • Delete Firefox browsing history, bookmarks, and download history Opt-in only
  • Clear all Firefox user information and preferences Opt-in only

Clear browser history › Clear Safari history

  • Clear Webpage Icons Opt-in only
  • Clear Safari cache Opt-in only
  • Clear Safari cookies Opt-in only
  • Clear all Safari data (user profiles, settings, and data) Opt-in only

Clear temporary Windows files

  • Clear temporary system folder Opt-in only
  • Clear temporary user folder Opt-in only
  • Clear prefetch folder Opt-in only

Clear Windows log and caches

  • Clear thumbnail cache Opt-in only
  • Clear diagnostics tracking logs Opt-in only
  • Clear event logs in Event Viewer application Opt-in only
  • Clear Defender scan (protection) history Opt-in only

Clear Windows log and caches › Clear Windows system log files

  • Clear Optional Component Manager and COM+ components logs Opt-in only
  • Clear "Distributed Transaction Coordinator (DTC)" logs Opt-in only
  • Clear logs for pending/unsuccessful file rename operations Opt-in only
  • Clear Windows update installation logs Opt-in only
  • Clear Windows setup logs Opt-in only
  • Clear "Windows System Assessment Tool (`WinSAT`)" logs Opt-in only
  • Clear password change events Opt-in only
  • Clear user web cache database Opt-in only
  • Clear system temp folder when not logged in Opt-in only
  • Clear DISM (Deployment Image Servicing and Management) system logs Opt-in only
  • Clear Windows update files Opt-in only
  • Clear Common Language Runtime system logs Opt-in only
  • Clear Network Setup Service Events system logs Opt-in only
  • Clear logs generated by Disk Cleanup Tool (`cleanmgr.exe`) Opt-in only

Clear Windows log and caches › Clear Windows system log files › Clear Windows Update system logs

  • Clear Windows update and SFC scan logs Opt-in only
  • Clear Windows Update Medic Service logs Opt-in only
  • Clear "Cryptographic Services" diagnostic traces Opt-in only
  • Clear Server-initiated Healing Events system logs Opt-in only
  • Clear Windows Update logs Opt-in only

Clear Outlook data

  • Clear Outlook logs and telemetry Opt-in only
  • Clear Outlook caches Opt-in only
  • Clear Outlook user data Opt-in only

Disable OS data collection

  • Disable Recall Strict
  • Disable Click to Do Strict
  • Disable generative AI features in Paint Strict
  • Disable cloud-based speech recognition Recommended
  • Opt out of Windows privacy consent Recommended
  • Disable Windows feedback collection Recommended
  • Disable text and handwriting data collection Recommended
  • Disable device sensors Recommended
  • Disable Wi-Fi Sense Recommended
  • Disable app launch tracking (hides most-used apps) Strict
  • Disable Website Access of Language List Recommended
  • Disable automatic map downloads Recommended
  • Disable game screen recording Recommended
  • Disable internet access for Windows DRM Recommended
  • Disable typing feedback (sends typing data) Recommended
  • Disable Activity Feed feature Recommended

Disable Windows Global Device ID

  • Block creation of Windows Global Device ID (breaks Microsoft account features) Opt-in only
  • Remove Windows Global Device ID and block its recreation (breaks Microsoft account features) Opt-in only

Disable app access to personal information

  • Disable app access to location Recommended
  • Disable app access to account information, name, and picture Recommended
  • Disable app access to motion activity Recommended
  • Disable app access to trusted devices Recommended
  • Disable app access to unpaired wireless devices Recommended
  • Disable app access to camera Opt-in only
  • Disable app access to microphone (breaks Sound Recorder) Opt-in only
  • Disable app access to information about other apps Recommended
  • Disable app access to your contacts Recommended
  • Disable app access to notifications Strict
  • Disable app access to calendar Recommended
  • Disable app access to email Recommended
  • Disable app access to tasks Recommended
  • Disable app access to radios Recommended
  • Disable app access to physical movement Recommended
  • Disable app access to eye tracking Recommended
  • Disable app access to human presence Recommended
  • Disable app access to screen capture Recommended
  • Disable app access to background activity (breaks Cortana, Search, live tiles, notifications) Opt-in only
  • Disable app access to input devices Recommended

Disable app access to personal information › Disable app access to your files

  • Disable app access to "Documents" folder Recommended
  • Disable app access to "Pictures" folder Recommended
  • Disable app access to "Videos" folder Recommended
  • Disable app access to "Music" folder Recommended
  • Disable app access to personal files Recommended

Disable app access to personal information › Disable app access to phone

  • Disable app access to call history Recommended
  • Disable app access to phone calls (breaks phone calls through Phone Link) Strict
  • Disable app access to messaging (SMS / MMS) Recommended

Disable app access to personal information › Disable app access to Bluetooth devices

  • Disable app access to paired Bluetooth devices Recommended
  • Disable app access to unpaired Bluetooth devices Recommended

Disable app access to personal information › Disable app voice activation

  • Disable app access to voice activation Recommended
  • Disable app access to voice activation on locked system Recommended

Disable Customer Experience Improvement Program

  • Disable Customer Experience Improvement Program data collection Recommended
  • Disable Customer Experience Improvement Program data uploads Recommended

Disable Customer Experience Improvement Program › Disable background customer experience data collection

  • Disable automatic Software Quality Metrics (SQM) data transmission Opt-in only
  • Disable kernel-level customer experience data collection Opt-in only
  • Disable Bluetooth usage data collection Opt-in only
  • Disable disk diagnostic data collection Opt-in only
  • Disable disk diagnostic user notifications Opt-in only
  • Disable USB data collection Opt-in only
  • Disable customer experience data consolidation Opt-in only
  • Disable customer experience data uploads Opt-in only

Disable Customer Experience Improvement Program › Disable background customer experience data collection › Disable server-specific customer experience data collection

  • Disable server customer experience data assistant Opt-in only
  • Disable server role telemetry collection Opt-in only
  • Disable server role usage data collection Opt-in only

Disable Application Experience data collection › Disable automatic system compatibility checks (Microsoft Compatibility Appraiser)

  • Disable daily compatibility data collection ("Microsoft Compatibility Appraiser" task) Opt-in only
  • Disable telemetry collector and sender process (`CompatTelRunner.exe`) Recommended

Disable Application Experience data collection › Disable background application compatibility checks (Application Experience scheduled tasks)

  • Disable program data collection and reporting (`ProgramDataUpdater`) Opt-in only
  • Disable application usage tracking (`AitAgent`) Opt-in only
  • Disable startup application data tracking (`StartupAppTask`) Opt-in only
  • Disable software compatibility updates (`PcaPatchDbTask`) Opt-in only
  • Disable compatibility adjustment data sharing (`SdbinstMergeDbTask`) Opt-in only
  • Disable application backup data gathering (`MareBackup`) Opt-in only

Disable Application Compatibility Framework

  • Disable Application Impact Telemetry (AIT) Recommended
  • Disable Application Compatibility Engine Recommended
  • Remove "Program Compatibility" tab from file properties (context menu) Strict
  • Disable Steps Recorder (collects screenshots, mouse/keyboard input and UI data) Recommended
  • Disable "Inventory Collector" task Recommended

Disable Application Compatibility Framework › Disable Program Compatibility Assistant (PCA)

  • Disable "Program Compatibility Assistant (PCA)" feature Recommended
  • Disable "Program Compatibility Assistant Service" (`PcaSvc`) Opt-in only

Disable Windows telemetry and data collection

  • Disable diagnostic and usage telemetry Recommended
  • Disable automatic cloud configuration downloads Strict
  • Disable license telemetry Recommended
  • Disable error reporting Opt-in only

Disable Windows telemetry and data collection › Disable diagnostics telemetry services

  • Disable "Connected User Experiences and Telemetry" (`DiagTrack`) service Opt-in only
  • Disable WAP push notification routing service Opt-in only
  • Disable "Diagnostics Hub Standard Collector" service Opt-in only
  • Disable "Diagnostic Execution Service" (`diagsvc`) Opt-in only

Disable Windows telemetry and data collection › Disable census data collection

  • Disable "Device" task Opt-in only
  • Disable "Device User" task Opt-in only
  • Disable device and configuration data collection tool Recommended

Disable Windows telemetry and data collection › Disable enterprise/business focused data collection

  • Disable commercial usage of collected data Recommended

Disable Windows telemetry and data collection › Disable enterprise/business focused data collection › Disable Desktop Analytics telemetry

  • Disable processing of Desktop Analytics Strict
  • Disable sending device name in Windows diagnostic data Strict
  • Disable collection of Edge browsing data for Desktop Analytics Strict
  • Disable diagnostics data processing for Business cloud Strict
  • Disable Update Compliance processing of diagnostics data Recommended

Disable connectivity checks

  • Disable active connectivity tests (breaks internet connection status, captive portals) Opt-in only
  • Disable passive connectivity tests (breaks internet connection status) Opt-in only
  • Remove "Network Connectivity Status Indicator (NCSI)" app (breaks internet connection status icon) Opt-in only
  • Block Microsoft connectivity check hosts (breaks internet connection status, captive portals) Opt-in only
  • Disable "Network Location Awareness (NLA)" service (breaks auto-reconnect, connectivity status, network identification) Opt-in only
  • Disable "Network List Service (NLS)" service (breaks connectivity status, network identification, network connection icon, connectivity with some Microsoft apps) Opt-in only

Disable update and app sharing

  • Disable update and app peer downloads Recommended
  • Disable Delivery Optimization service (breaks Windows Update & Store downloads) Opt-in only

Disable location access

  • Disable Windows Location Provider Opt-in only
  • Disable location scripting Recommended
  • Disable location Recommended

Disable Windows search data collection

  • Disable search's access to location Recommended
  • Disable local search history (breaks recent suggestions) Strict
  • Disable sharing personal search data with Microsoft Recommended
  • Disable personal cloud content search in taskbar Recommended

Disable Windows search data collection › Disable Cortana data collection

  • Disable Cortana during search Recommended
  • Disable Cortana experience Recommended
  • Disable Cortana's access to cloud services such as OneDrive and SharePoint Recommended
  • Disable Cortana speech interaction while the system is locked Recommended
  • Disable participation in Cortana data collection Recommended
  • Disable enabling of Cortana Recommended
  • Disable Cortana in start menu Recommended
  • Remove "Cortana" icon from taskbar Recommended
  • Disable Cortana in ambient mode Recommended

Disable Windows search data collection › Disable Cortana data collection › Disable Cortana activity history

  • Disable Cortana's history display Recommended
  • Disable Cortana's device history usage Recommended

Disable Windows search data collection › Disable Cortana data collection › Disable Cortana voice listening

  • Disable "Hey Cortana" voice activation Recommended
  • Disable Cortana keyboard shortcut (**Windows logo key** + **C**) Recommended
  • Disable Cortana on locked device Recommended
  • Disable automatic update of speech data Recommended
  • Disable Cortana voice support during Windows setup Recommended

Disable Windows search data collection › Disable privacy-invasive indexing

  • Disable indexing of encrypted items Recommended
  • Disable automatic language detection when indexing Recommended
  • Disable remote access to search index Recommended
  • Disable iFilters and protocol handlers Recommended

Disable Windows search data collection › Disable search suggestions

  • Disable Bing search and recent search suggestions (breaks search history) Recommended
  • Disable Bing search in start menu Recommended
  • Disable web search in search bar Recommended
  • Disable web results in Windows Search Recommended
  • Disable Windows search highlights Recommended

Disable targeted advertisements and marketing

  • Disable ad customization with Advertising ID Recommended
  • Disable suggested content in Settings app Recommended

Disable targeted advertisements and marketing › Disable cloud-based advertising and tips

  • Disable Windows Tips Recommended
  • Disable Windows Spotlight (shows random wallpapers on lock screen) Strict
  • Disable Microsoft Consumer Experiences Recommended

Disable targeted advertisements and marketing › Disable app and content recommendations

  • Disable automatic installation of suggested apps Recommended
  • Disable preinstalled app suggestions Recommended
  • Disable Start menu suggestions Recommended
  • Disable lock screen tips and advertisements Recommended
  • Disable "finish setting up your device" prompts Recommended
  • Disable cloud-optimized content Recommended
  • Disable tailored experiences with diagnostic data Recommended

Disable biometrics (breaks fingerprinting/facial login)

  • Disable use of biometrics Strict
  • Disable biometric logon Strict
  • Disable "Windows Biometric Service" Opt-in only

Disable Windows Insider Program

  • Disable "Windows Insider Service" Opt-in only
  • Disable Microsoft feature trials Recommended
  • Disable receipt of Windows preview builds Recommended
  • Remove "Windows Insider Program" from Settings Opt-in only

Disable cloud sync

  • Disable all settings synchronization Recommended
  • Disable "Application" setting synchronization Recommended
  • Disable "App Sync" setting synchronization Recommended
  • Disable "Credentials" setting synchronization Recommended
  • Disable "Desktop Theme" setting synchronization Recommended
  • Disable "Personalization" setting synchronization Recommended
  • Disable "Start Layout" setting synchronization Recommended
  • Disable "Web Browser" setting synchronization Recommended
  • Disable "Windows" setting synchronization Recommended
  • Disable "Language" setting synchronization Recommended

Configure programs

  • Disable NET Core CLI telemetry Recommended
  • Disable PowerShell telemetry Recommended
  • Disable "Razer Game Scanner Service" Opt-in only
  • Disable "Logitech Gaming Registry Service" Opt-in only
  • Disable CCleaner data collection Opt-in only
  • Disable WinGet telemetry Recommended
  • Disable Accessibility Insights telemetry Recommended

Disable Visual Studio data collection

  • Disable participation in Visual Studio Customer Experience Improvement Program (VSCEIP) Recommended
  • Disable Visual Studio telemetry Recommended
  • Disable Visual Studio feedback Recommended
  • Disable "Visual Studio Standard Collector Service" Opt-in only
  • Disable Diagnostics Hub log collection Recommended
  • Disable participation in IntelliCode data collection Recommended

Disable Nvidia telemetry

  • Remove Nvidia telemetry packages Opt-in only
  • Remove Nvidia telemetry components (breaks the NVIDIA app) Strict
  • Disable Nvidia telemetry drivers Recommended
  • Disable participation in Nvidia telemetry Recommended
  • Disable "Nvidia Telemetry Container" service Opt-in only

Disable Nvidia telemetry › Disable Nvidia telemetry scheduled tasks

  • Disable "NVIDIA Telemetry Report" task Opt-in only
  • Disable "NVIDIA Telemetry Report on Logon" task Opt-in only
  • Disable "NVIDIA telemetry monitor" task Opt-in only

Disable Visual Studio Code data collection

  • Disable Visual Studio Code telemetry Recommended
  • Disable Visual Studio Code crash reporting Recommended
  • Disable online experiments by Microsoft in Visual Studio Code Recommended
  • Disable Visual Studio Code automatic updates in favor of manual updates Opt-in only
  • Disable fetching release notes from Microsoft servers after an update Opt-in only
  • Automatically check extensions from Microsoft online service Opt-in only
  • Fetch recommendations from Microsoft only on demand Opt-in only
  • Disable automatic fetching of remote repositories in Visual Studio Code Opt-in only
  • Disable fetching package information from NPM and Bower in Visual Studio Code Opt-in only

Disable Microsoft Office telemetry

  • Disable Microsoft Office logging Recommended
  • Disable Microsoft Office client telemetry Recommended
  • Disable user participation in Office Customer Experience Improvement Program (CEIP) Recommended
  • Disable Microsoft Office feedback Recommended
  • Disable Microsoft Office telemetry agent Opt-in only
  • Disable "Microsoft Office Subscription Heartbeat" task Opt-in only

Configure browsers › Configure Edge

  • Disable Edge Follow feature Recommended
  • Disable Edge Shopping Assistant Strict
  • Disable Edge Search bar on desktop Strict
  • Disable Edge Microsoft Rewards Strict
  • Disable Edge Bing suggestions in address bar Strict
  • Disable Edge "Find on Page" data collection Recommended
  • Disable Edge sign-in prompt on new tab page Recommended
  • Disable Edge search and site suggestions Strict
  • Disable Edge quick links on the new tab page Strict
  • Disable Edge remote background images on new tab page Strict
  • Disable Edge Collections feature Strict
  • Disable Edge failed page data collection and suggestions Recommended
  • Disable Edge in-app support Strict
  • Disable Edge payment data storage and ads Recommended
  • Disable Edge address data storage Strict
  • Disable Edge experimentation and remote configuration Recommended
  • Disable Edge automatic startup Recommended
  • Disable Edge external connectivity checks Recommended
  • Disable Edge Family Safety settings Strict
  • Disable Edge site information gathering from Bing Strict

Configure browsers › Configure Edge › Disable Edge telemetry

  • Disable Edge diagnostic data sending Recommended
  • Disable Edge Feedback Recommended

Configure browsers › Configure Edge › Disable Edge and WebView2 automatic updates

  • Disable Edge automatic update services Opt-in only
  • Disable Edge automatic update scheduled tasks Opt-in only
  • Disable Edge update executable Opt-in only
  • Disable Edge automatic updates across all channels Opt-in only
  • Disable Edge WebView and WebView2 updates Opt-in only
  • Disable Edge automatic update checks Opt-in only
  • Maximize Edge update suppression duration Opt-in only

Configure browsers › Configure Edge › Disable Edge and WebView2 automatic updates › Disable automatic installation of Edge and WebView

  • Disable automatic installation of Edge Opt-in only
  • Disable automatic installation of Edge across all channels Opt-in only
  • Disable automatic installation of WebView and WebView2 Opt-in only

Configure browsers › Configure Edge › Disable Copilot in Edge

  • Disable Edge Copilot and Hubs Sidebar Opt-in only
  • Disable Edge Copilot browsing data collection Strict
  • Disable Edge Copilot access on new tab page Opt-in only

Configure browsers › Configure Edge › Disable Edge ads

  • Disable Edge spotlight recommendations Recommended
  • Disable Edge feature ads Recommended
  • Disable Edge Bing ads Recommended
  • Disable Edge promotional pages Recommended
  • Disable Edge browsing history collection for ads Recommended
  • Disable Edge Insider ads Recommended
  • Disable Edge Adobe Acrobat subscription ads Recommended
  • Disable Edge top sites and sponsored links on new tab page Recommended

Configure browsers › Configure Edge › Harden Edge privacy

  • Enable Edge tracking prevention Strict
  • Block Edge third party cookies Strict
  • Enable Do Not Track requests Recommended

Configure browsers › Configure Internet Explorer

  • Disable Internet Explorer geolocation Recommended
  • Disable Internet Explorer InPrivate logging Recommended
  • Disable Internet Explorer Customer Experience Improvement Program (CEIP) participation Recommended
  • Disable legacy WCM policy calls Recommended
  • Disable SSLv3 fallback Recommended
  • Disable certificate error ignoring Recommended

Configure browsers › Configure Chrome

  • Disable Chrome metrics reporting Recommended

Configure browsers › Configure Chrome › Configure Chrome cleanup

  • Disable sharing scanned software data with Google Recommended
  • Disable Chrome system cleanup scans Recommended

Configure browsers › Configure Firefox

  • Disable Firefox default browser and system data reporting Recommended
  • Disable Firefox background browser checks Opt-in only
  • Disable Firefox telemetry data collection Recommended

Disable Google background automatic updates

  • Disable "Google Update Service" services Opt-in only
  • Disable Google automatic updates scheduled tasks (breaks Google Credential Provider) Opt-in only

Disable Adobe background automatic updates

  • Disable "Adobe Acrobat Update Service" service Opt-in only
  • Disable "Adobe Update Service" service Opt-in only
  • Disable "Adobe Acrobat Update Task" scheduled task Opt-in only

Disable Dropbox background automatic updates

  • Disable "Dropbox Update Service" services Opt-in only
  • Disable Dropbox automatic updates scheduled tasks Opt-in only

Disable Media Player data collection

  • Disable sending Windows Media Player statistics Recommended
  • Disable metadata retrieval Recommended
  • Disable "Windows Media Player Network Sharing Service" (`WMPNetworkSvc`) Opt-in only

Security improvements

  • Enable Data Execution Prevention (DEP) Opt-in only
  • Disable AutoPlay and AutoRun Recommended
  • Disable lock screen camera access Recommended
  • Disable storage of the LAN Manager password hashes Recommended
  • Disable "Always install with elevated privileges" in Windows Installer Recommended
  • Enable Structured Exception Handling Overwrite Protection (SEHOP) Recommended
  • Enable security against PowerShell 2.0 downgrade attacks Recommended
  • Disable "Windows Connect Now" wizard Recommended

Improve network security › Improve DNS privacy

  • Disable insecure "LLMNR" protocol Opt-in only
  • Enable encrypted DNS lookups (DNS-over-HTTPS) Recommended

Improve network security › Enable strong secret key requirements

  • Enable strong Diffie-Hellman key requirement Recommended
  • Enable strong RSA key requirement (breaks Hyper-V VMs) Strict

Improve network security › Disable insecure connections

  • Disable insecure renegotiation Strict
  • Disable insecure connections from .NET apps Strict

Improve network security › Disable insecure connections › Disable insecure ciphers

  • Disable insecure "RC2" ciphers Strict
  • Disable insecure "RC4" ciphers Strict
  • Disable insecure "DES" cipher Strict
  • Disable insecure "Triple DES" cipher Strict
  • Disable insecure "NULL" cipher Recommended

Improve network security › Disable insecure connections › Disable insecure hashes

  • Disable insecure "MD5" hash Strict
  • Disable insecure "SHA-1" hash Strict

Improve network security › Disable insecure connections › Disable insecure protocols

  • Disable insecure "SMBv1" protocol Opt-in only
  • Disable insecure "NetBios" protocol Opt-in only
  • Disable insecure "SSL 2.0" protocol Recommended
  • Disable insecure "SSL 3.0" protocol Recommended
  • Disable insecure "TLS 1.0" protocol Strict
  • Disable insecure "TLS 1.1" protocol Strict
  • Disable insecure "DTLS 1.0" protocol Opt-in only
  • Disable insecure "LM & NTLM" protocols Recommended

Improve network security › Enable secure connections

  • Enable secure "DTLS 1.2" protocol Recommended
  • Enable secure "TLS 1.3" protocol Recommended
  • Enable secure connections for legacy .NET apps Strict

Improve network security › Disable insecure remote administration access

  • Disable basic authentication in WinRM Recommended
  • Disable unauthorized user account discovery (anonymous SAM enumeration) Recommended
  • Disable anonymous access to named pipes and shares Recommended
  • Disable hidden remote file access via administrative shares (breaks remote system management software) Strict
  • Disable anonymous enumeration of shares Recommended
  • Disable "Telnet Client" feature Recommended
  • Remove "RAS Connection Manager Administration Kit (CMAK)" capability Opt-in only
  • Disable Windows Remote Assistance feature Recommended

Improve network security › Disable non-essential network components

  • Disable "Net.TCP Port Sharing" feature Strict
  • Disable "SMB Direct" feature Strict
  • Disable "TFTP Client" feature Recommended
  • Remove "RIP Listener" capability Opt-in only
  • Remove "Simple Network Management Protocol (SNMP)" capability Opt-in only
  • Remove "SNMP WMI Provider" capability Opt-in only

Disable clipboard data collection

  • Disable Cloud Clipboard (breaks clipboard sync) Strict
  • Disable clipboard history Recommended
  • Disable background clipboard data collection (`cbdhsvc`) (breaks clipboard history and sync) Opt-in only

Enable protection against Meltdown and Spectre

  • Mitigate Spectre Variant 2 and Meltdown in host operating system Opt-in only
  • Mitigate Spectre Variant 2 and Meltdown in Hyper-V Opt-in only

Block tracking hosts

  • Block Windows crash report hosts Recommended
  • Block Windows error reporting hosts Recommended
  • Block telemetry and user experience hosts Recommended
  • Block remote configuration sync hosts Strict
  • Block location data sharing hosts Strict
  • Block maps data and updates hosts Strict
  • Block Spotlight ads and suggestions hosts Strict
  • Block Cortana and Live Tiles hosts Strict
  • Block Edge experimentation hosts Recommended
  • Block Photos app sync hosts Strict
  • Block OneNote Live Tile hosts Strict
  • Block Weather Live Tile hosts Strict

Block third-party app hosts

  • Block Dropbox telemetry hosts Recommended
  • Block Spotify Live Tile hosts Opt-in only

Privacy over security

Disable Defender › Disable Defender data collection

  • Disable "Malicious Software Reporting Tool" diagnostic data Opt-in only
  • Disable Defender Antivirus Watson event reporting Opt-in only
  • Disable Defender Antivirus telemetry Opt-in only
  • Disable Defender Antivirus remote experimentation and configurations Opt-in only
  • Disable Defender Antivirus Azure data collection Opt-in only

Disable Defender › Disable Defender data collection › Disable Defender Antivirus cloud protection

  • Disable Defender Antivirus "Block at First Sight" feature Opt-in only
  • Disable Defender Antivirus "Extended Cloud Check" feature Opt-in only
  • Disable Defender Antivirus aggressive cloud protection Opt-in only
  • Disable Defender Antivirus cloud-based notifications Opt-in only
  • Disable Defender Antivirus cloud protection reporting Opt-in only
  • Disable Defender Antivirus automatic file submission to Microsoft Opt-in only
  • Disable Defender Antivirus real-time security intelligence updates Opt-in only

Disable Defender › Disable system modification restrictions

  • Disable Defender Antivirus minifilter driver Opt-in only
  • Disable Defender Antivirus boot driver Opt-in only
  • Disable security event monitoring Opt-in only
  • Disable Secure Boot driver Opt-in only
  • Disable Tamper Protection Opt-in only
  • Disable virtualization-based security (VBS) Opt-in only

Disable Defender › Disable system modification restrictions › Disable Defender System Guard

  • Disable System Guard startup verification Opt-in only
  • Disable System Guard sandbox monitoring Opt-in only
  • Disable System Guard kernel monitoring Opt-in only
  • Disable System Guard communication hub Opt-in only
  • Disable System Guard rule definitions Opt-in only
  • Disable System Guard rule scanner Opt-in only

Disable Defender › Disable Defender Antivirus

  • Disable outdated Defender Antivirus Opt-in only
  • Disable file hash computation feature Opt-in only
  • Disable Defender auto-exclusions Opt-in only
  • Disable Defender Antivirus license verification Opt-in only

Disable Defender › Disable Defender Antivirus › Disable network inspection

  • Disable protocol recognition Opt-in only
  • Disable definition retirement Opt-in only
  • Minimize rate of detection events Opt-in only

Disable Defender › Disable Defender Antivirus › Disable real-time protection

  • Disable real-time monitoring Opt-in only
  • Disable intrusion prevention system (IPS) Opt-in only
  • Disable Information Protection Control (IPC) Opt-in only
  • Disable real-time protection process scanning Opt-in only
  • Disable Defender Antivirus real-time protection module Opt-in only

Disable Defender › Disable Defender Antivirus › Disable real-time protection › Disable Defender monitoring of behavior

  • Disable behavior monitoring Opt-in only
  • Disable sending raw write notifications to behavior monitoring Opt-in only

Disable Defender › Disable Defender Antivirus › Disable real-time protection › Disable monitoring of downloads and attachments in Defender

  • Disable scanning of all downloaded files and attachments Opt-in only
  • Disable scanning files larger than 1 KB (minimum possible) Opt-in only

Disable Defender › Disable Defender Antivirus › Disable real-time protection › Disable Defender monitoring of file and program activity

  • Disable file and program activity monitoring Opt-in only
  • Disable bidirectional scan for incoming and outgoing file and program activities Opt-in only

Disable Defender › Disable Defender Antivirus › Disable Defender remediation

  • Disable routine remediation Opt-in only
  • Disable running scheduled auto-remediation Opt-in only
  • Disable remediation actions Opt-in only
  • Enable automatically purging items from quarantine folder Opt-in only

Disable Defender › Disable Defender Antivirus › Disable Defender scans › Disable scan actions

  • Minimize retention time for files in scan history Opt-in only

Disable Defender › Disable Defender Antivirus › Disable Defender scans › Disable catch-up scans

  • Maximize days until mandatory catch-up scan Opt-in only

Disable Defender › Disable Defender Antivirus › Disable Defender scans › Disable Defender scan options

  • Disable scan heuristics Opt-in only
  • Disable scheduled anti-malware scanner (MRT) Opt-in only

Disable Defender › Disable Defender Antivirus › Disable Defender scans › Disable Defender scan options › Disable intensive CPU usage during Defender scans

  • Minimize CPU usage during scans Opt-in only
  • Minimize CPU usage during idle scans Opt-in only

Disable Defender › Disable Defender Antivirus › Disable Defender scans › Minimize scanned areas

  • Disable script scanning Opt-in only
  • Disable reparse point scanning Opt-in only
  • Disable network file scanning Opt-in only
  • Disable scanning packed executables Opt-in only

Disable Defender › Disable Defender Antivirus › Disable Defender scans › Minimize scanned areas › Disable scanning archive files

  • Disable Defender archive file scanning Opt-in only
  • Minimize scanning depth of archive files Opt-in only
  • Minimize file size for scanning archive files Opt-in only

Disable Defender › Disable Defender Antivirus › Disable Defender scans › Disable auto-scans

  • Disable scheduled scans Opt-in only
  • Disable randomizing scheduled task times Opt-in only
  • Minimize daily quick scan frequency Opt-in only
  • Disable scanning after security intelligence (signature) update Opt-in only

Disable Defender › Disable Defender Antivirus › Disable Defender scans › Disable Antimalware Scan Interface (AMSI)

  • Disable Defender Antivirus AMSI provider Opt-in only
  • Disable Defender Antivirus UAC AMSI provider Opt-in only
  • Disable Antimalware Scan Interface (AMSI) for current user Opt-in only

Disable Defender › Disable Defender Antivirus › Disable Defender Antivirus management

  • Disable Defender Antivirus command-line library Opt-in only
  • Disable Defender Antivirus command-line utility Opt-in only
  • Disable Defender Antivirus WMI management Opt-in only
  • Disable Microsoft Security Client Policy Configuration Tool Opt-in only

Disable Defender › Disable Defender Antivirus › Disable Defender Antivirus management › Disable Defender Antivirus remote management

  • Disable Defender Antivirus remote configuration Opt-in only
  • Disable Defender Antivirus remote commands Opt-in only

Disable Defender › Disable Defender Antivirus › Disable Defender updates

  • Minimize Defender updates to completed gradual release cycles Opt-in only
  • Minimize Defender engine updates to completed release cycles Opt-in only
  • Minimize Defender platform updates to completed release cycles Opt-in only
  • Minimize Defender definition updates to completed gradual release cycles Opt-in only

Disable Defender › Disable Defender Antivirus › Disable Defender updates › Disable Defender Security Intelligence (signature) updates

  • Disable forced security intelligence (signature) updates from Microsoft Update Opt-in only
  • Disable security intelligence (signature) updates when running on battery power Opt-in only
  • Disable startup check for latest virus and spyware security intelligence (signature) Opt-in only
  • Disable catch-up security intelligence (signature) updates Opt-in only
  • Minimize spyware security intelligence (signature) updates Opt-in only
  • Minimize virus security intelligence (signature) updates Opt-in only
  • Disable security intelligence (signature) update on startup Opt-in only
  • Minimize checks for security intelligence (signature) updates Opt-in only

Disable Defender › Disable Defender Antivirus › Disable Defender updates › Disable Defender Security Intelligence (signature) updates › Disable alternate definition updates

  • Disable definition updates via WSUS and Microsoft Malware Protection Center Opt-in only
  • Disable definition updates through both WSUS and Windows Update Opt-in only

Disable Defender › Disable Defender Antivirus › Disable Defender reporting

  • Disable Windows Defender boot logging Opt-in only
  • Disable Defender ETW provider (Windows Event Logs) Opt-in only
  • Minimize Windows software trace preprocessor (WPP Software Tracing) Opt-in only

Disable Defender › Disable Defender Antivirus › Disable Defender services and drivers

  • Disable "Microsoft Defender Antivirus Network Inspection System Driver" service Opt-in only
  • Disable Defender Antivirus device filter driver Opt-in only
  • Disable Defender Antivirus network inspection service Opt-in only
  • Disable Microsoft Defender Core Service Opt-in only

Disable Defender › Disable Defender Antivirus › Disable Defender services and drivers › Disable Defender Antivirus service

  • Disable Defender Antivirus service (breaks `Set-MpPreference` cmdlet) Opt-in only
  • Disable Defender Antivirus service in Safe Mode Opt-in only
  • Disable Defender Antivirus service always-on state Opt-in only
  • Disable Defender Antivirus service high-priority startup Opt-in only
  • Disable Defender Antivirus service automatic launch Opt-in only
  • Disable Defender Antivirus service active state Opt-in only
  • Disable Defender Antivirus data storage location Opt-in only
  • Disable Defender Antivirus service module Opt-in only
  • Disable Defender Antivirus antimalware engine Opt-in only
  • Disable Defender Antivirus communication module Opt-in only
  • Disable Defender Antivirus service communication with apps Opt-in only

Disable Defender › Disable Defender Antivirus › Disable Defender Antivirus scheduled tasks

  • Disable Defender Antivirus cache maintenance task Opt-in only
  • Disable Defender Antivirus cleanup task Opt-in only
  • Disable Defender Antivirus scheduled scan task Opt-in only
  • Disable Defender Antivirus verification task Opt-in only

Disable Defender › Disable Defender Antivirus › Disable Defender Antivirus file activity monitoring

  • Disable Defender Antivirus copy accelerator library Opt-in only
  • Disable Defender Antivirus copy accelerator utility Opt-in only
  • Disable Defender Antivirus file activity tracking library Opt-in only
  • Disable Defender Antivirus file risk estimation library Opt-in only

Disable Defender › Disable Defender Firewall

  • Disable firewall via command-line utility Opt-in only
  • Disable Firewall via registry Opt-in only
  • Disable "Firewall & network protection" section in "Windows Security" Opt-in only

Disable Defender › Disable Defender Firewall › Disable Defender Firewall services and drivers

  • Disable "Windows Defender Firewall Authorization Driver" service (breaks Microsoft Store, `netsh advfirewall`, winget, Windows Sandbox, Docker, WSL) Opt-in only
  • Disable "Windows Defender Firewall" service (breaks Microsoft Store, `netsh advfirewall`, winget, Windows Sandbox, Docker, WSL) Opt-in only
  • Disable Microsoft Security WFP callout driver Opt-in only

Disable Defender › Disable Defender for Endpoint

  • Disable "Windows Defender Advanced Threat Protection Service" service Opt-in only
  • Disable Microsoft Data Loss Prevention (DLP) service Opt-in only
  • Disable Defender for Endpoint remote configuration Opt-in only
  • Disable Defender Antivirus DLP command-line utility Opt-in only
  • Disable Defender Antivirus Endpoint Data Loss Prevention (DLP) module Opt-in only

Disable Defender › Disable SmartScreen

  • Disable outdated SmartScreen settings interface Opt-in only

Disable Defender › Disable SmartScreen › Disable SmartScreen for apps and files

  • Disable SmartScreen checks for apps and files Opt-in only
  • Enable SmartScreen warning dismissal for apps Opt-in only

Disable Defender › Disable SmartScreen › Disable SmartScreen for apps and files › Disable SmartScreen for Store apps

  • Disable SmartScreen "App Install Control" feature Opt-in only
  • Disable SmartScreen web content checking for Store apps Opt-in only
  • Enable SmartScreen warning dismissal for Store apps Opt-in only

Disable Defender › Disable SmartScreen › Disable SmartScreen in Microsoft browsers

  • Disable Edge SmartScreen Opt-in only
  • Disable Edge SmartScreen for potentially unwanted apps Opt-in only
  • Enable Edge SmartScreen warning dismissal Opt-in only
  • Enable Edge SmartScreen warning dismissal for files Opt-in only
  • Disable Edge SmartScreen DNS requests Opt-in only
  • Disable Edge SmartScreen checks on downloads from trusted sources Opt-in only
  • Disable outdated Internet Explorer SmartScreen Opt-in only
  • Disable outdated Internet Explorer SmartScreen Filter component Opt-in only

Disable Defender › Disable SmartScreen › Disable SmartScreen system components

  • Disable SmartScreen process Opt-in only
  • Disable SmartScreen libraries Opt-in only
  • Disable SmartScreen integrations Opt-in only

Disable Defender › Disable SmartScreen › Disable SmartScreen Enhanced Phishing Protection

  • Disable SmartScreen Enhanced Phishing Protection Web background services Opt-in only
  • Disable SmartScreen Enhanced Phishing Protection automatic data collection Opt-in only
  • Disable SmartScreen Enhanced Phishing Protection "potentially malicious" notifications Opt-in only
  • Disable SmartScreen Enhanced Phishing Protection "password reuse" notifications Opt-in only
  • Disable SmartScreen Enhanced Phishing Protection "unsafe apps" notifications Opt-in only
  • Disable SmartScreen Enhanced Phishing Protection audit mode Opt-in only
  • Disable SmartScreen Enhanced Phishing Protection warnings and prompts Opt-in only
  • Disable SmartScreen Enhanced Phishing Protection telemetry Opt-in only

Disable Defender › Disable Windows Security interface

  • Remove "Windows Security" system tray icon Opt-in only
  • Remove "Scan with Defender" from context menu Opt-in only
  • Remove "Windows Security" icon from taskbar Opt-in only
  • Disable Defender Antivirus interface Opt-in only
  • Disable outdated non-administrator access to Defender threat history Opt-in only
  • Disable Defender Firewall Control Panel applet Opt-in only
  • Disable Defender Firewall "Windows Defender Firewall with Advanced Security" Opt-in only
  • Remove "Windows Security" app (`SecHealthUI`) (breaks Windows Security user interface) Opt-in only
  • Disable outdated "Windows Defender Security Center" interface Opt-in only

Disable Defender › Disable Windows Security interface › Disable Defender interface background services

  • Disable "Windows Security" status reporting integrations Opt-in only
  • Disable Defender Shell Service Opt-in only
  • Disable "Windows Security Service" service Opt-in only
  • Disable "Windows Security Service" interactions Opt-in only
  • Disable Windows Security Health Agent (WSHA) Opt-in only
  • Disable Windows Security Health Core Opt-in only
  • Disable Windows Security Health UDK Opt-in only
  • Disable "Windows Security Health Host" process Opt-in only
  • Disable Windows Security Health data sharing Opt-in only
  • Disable Windows Security service Opt-in only
  • Disable Windows Security service integrations Opt-in only

Disable Defender › Disable Windows Security interface › Disable sections in "Windows Security"

  • Disable "Virus and threat protection" section in "Windows Security" Opt-in only
  • Disable "Ransomware data recovery" section in "Windows Security" Opt-in only
  • Disable "Family options" section in "Windows Security" Opt-in only
  • Disable "Device performance and health" section in "Windows Security" Opt-in only
  • Disable "Account protection" section in "Windows Security" Opt-in only
  • Disable "App and browser control" section in "Windows Security" Opt-in only

Disable Defender › Disable Windows Security interface › Disable sections in "Windows Security" › Disable device security sections

  • Disable "Device security" section in "Windows Security" Opt-in only
  • Disable "Clear TPM" button in "Windows Security" Opt-in only
  • Disable "Secure boot" button in "Windows Security" Opt-in only
  • Disable "Security processor (TPM) troubleshooter" page in "Windows Security" Opt-in only
  • Disable "TPM Firmware Update" recommendation in "Windows Security" Opt-in only

Disable Defender › Disable Windows Security interface › Disable security notifications › Disable Security and Maintenance notifications

  • Disable Security and Maintenance push notifications Opt-in only
  • Disable Security and Maintenance taskbar notifications Opt-in only
  • Disable Security and Maintenance notification integrations Opt-in only
  • Disable all Security and Maintenance notifications Opt-in only

Disable Defender › Disable Windows Security interface › Disable security notifications › Disable Windows Security notifications

  • Disable all Windows Security notifications Opt-in only
  • Disable non-critical Windows Security notifications Opt-in only
  • Disable Windows Security taskbar notifications Opt-in only

Disable Defender › Disable Windows Security interface › Disable security notifications › Disable Defender Antivirus notifications

  • Disable Defender Antivirus push notifications Opt-in only
  • Disable Defender Antivirus reboot notifications Opt-in only
  • Disable Defender Antivirus taskbar notifications Opt-in only

Disable Defender › Disable Windows Security interface › Disable Security and Maintenance

  • Disable Security and Maintenance core library Opt-in only
  • Disable Security and Maintenance Control Panel applet Opt-in only
  • Disable Security and Maintenance desktop features Opt-in only

Disable Defender › Disable Defender Exploit Guard

  • Disable prevention of users and apps from accessing dangerous websites Opt-in only
  • Disable controlled folder access Opt-in only
  • Disable "ExploitGuard MDM policy Refresh" task Opt-in only

Disable automatic updates

  • Disable Automatic Updates (AU) feature Opt-in only
  • Disable automatic installation of Windows updates without user consent Opt-in only
  • Disable automatic daily installation of Windows updates Opt-in only
  • Disable scheduled automatic updates Opt-in only

Disable automatic updates › Disable Windows Update automatic driver updates

  • Disable Windows Update hardware information collection Opt-in only
  • Disable Windows Update driver downloads Opt-in only
  • Disable Windows Update driver search Opt-in only
  • Disable Windows Update driver installation wizard Opt-in only
  • Disable Windows Update fallback driver search Opt-in only
  • Disable Windows Update driver download server Opt-in only

Disable automatic updates › Disable Windows update services

  • Disable "Windows Update" (`wuauserv`) service Opt-in only
  • Disable "Update Orchestrator Service" (`UsoSvc`) Opt-in only
  • Disable "Windows Update Medic Service" (`WaaSMedicSvc`) Opt-in only
  • Disable automatically enabling Windows Update Medic Service Opt-in only

Disable automatic updates › Disable Windows update scheduled tasks

  • Disable "RestoreDevice" task Opt-in only
  • Disable "ScanForUpdates" task Opt-in only
  • Disable "ScanForUpdatesAsUser" task Opt-in only
  • Disable "SmartRetry" task Opt-in only
  • Disable "WakeUpAndContinueUpdates" task Opt-in only
  • Disable "WakeUpAndScanForUpdates" task Opt-in only
  • Disable "Scheduled Start" task Opt-in only
  • Disable "Report policies" task Opt-in only
  • Disable "Schedule Maintenance Work" task Opt-in only
  • Disable "Schedule Scan" task Opt-in only
  • Disable "Schedule Scan Static Task" task Opt-in only
  • Disable "Schedule Wake To Work" task Opt-in only
  • Disable "Schedule Work" task Opt-in only
  • Disable "UpdateModelTask" task Opt-in only
  • Disable "Start Oobe Expedite Work" task Opt-in only
  • Disable "StartOobeAppsScan_LicenseAccepted" task Opt-in only
  • Disable "StartOobeAppsScan_OobeAppReady" task Opt-in only
  • Disable "StartOobeAppsScanAfterUpdate" task Opt-in only
  • Disable "USO_UxBroker" task Opt-in only
  • Disable "UUS Failover Task" task Opt-in only
  • Disable "PerformRemediation" task Opt-in only
  • Disable outdated Windows Update tasks Opt-in only

Disable automatic updates › Maximize auto-update duration

  • Maximize update pause duration Opt-in only
  • Maximize feature update duration (disables resuming updates from settings) Opt-in only
  • Maximize quality update duration (disables resuming updates from settings) Opt-in only
  • Maximize update duration on older Windows versions Opt-in only

Configure how downloaded files are handled

  • Disable saving of zone information in downloaded files Opt-in only
  • Disable notifications to antivirus programs for downloaded files Opt-in only

UI for privacy

  • Disable lock screen app notifications Recommended
  • Disable Live Tiles push notifications Recommended
  • Disable the "Look For An App In The Store" option Recommended
  • Disable the display of recently used files in Quick Access Strict
  • Disable sync provider notifications Opt-in only
  • Disable hibernation for faster startup and to avoid sensitive data storage Opt-in only
  • Enable camera on/off OSD notifications Opt-in only
  • Disable app usage tracking Recommended
  • Disable recent apps Recommended
  • Disable backtracking Recommended

Disable online content in File Explorer

  • Disable online tips Recommended
  • Disable "Internet File Association" service Recommended
  • Disable "Order Prints" picture task Recommended
  • Disable "Publish to Web" option for files and folders Recommended
  • Disable provider list downloads for wizards Recommended

Secure recent document lists

  • Disable history of recently opened documents Strict
  • Clear recently opened document history upon exit Strict

Remove folders from This PC in File Explorer

  • Remove "Desktop" folder from This PC in File Explorer Opt-in only
  • Remove "Documents" folder from This PC in File Explorer Opt-in only
  • Remove "Downloads" folder from This PC in File Explorer Opt-in only
  • Remove "Videos"folder from This PC in File Explorer Opt-in only
  • Remove "Music" folder from This PC in File Explorer Opt-in only
  • Remove "Pictures" folder from This PC in File Explorer Opt-in only
  • Remove outdated "3D Objects" folder from This PC in File Explorer Opt-in only

Remove bloatware

  • Remove "Meet Now" icon from taskbar Strict
  • Request removal of the Microsoft Copilot app Strict

Remove Windows apps

  • Remove "App Connector" app Opt-in only
  • Remove "Cortana" app Opt-in only
  • Remove "App Installer" app Opt-in only
  • Remove "Get Help" app (breaks built-in troubleshooting) Opt-in only
  • Remove "Microsoft Tips" app Opt-in only
  • Remove "Microsoft Messaging" app Opt-in only
  • Remove "Mixed Reality Portal" app Opt-in only
  • Remove "Feedback Hub" app Opt-in only
  • Remove "Windows Alarms and Clock" app Opt-in only
  • Remove "Windows Camera" app Opt-in only
  • Remove "Paint 3D" app Opt-in only
  • Remove "Windows Maps" app Opt-in only
  • Remove "Minecraft for Windows" app Opt-in only
  • Remove "Microsoft People" app Opt-in only
  • Remove "Microsoft Pay" app Opt-in only
  • Remove "Mobile Plans" app Opt-in only
  • Remove "Microsoft Solitaire Collection" app Opt-in only
  • Remove "Microsoft Sticky Notes" app Opt-in only
  • Remove "Mail and Calendar" app (outdated) Opt-in only
  • Remove "Windows Media Player" app Opt-in only
  • Remove "Movies & TV" app Opt-in only
  • Remove "Windows Calculator" app Opt-in only
  • Remove "Microsoft Photos" app Opt-in only
  • Remove "Skype" app Opt-in only
  • Remove "GroupMe" app Opt-in only
  • Remove "Windows Sound Recorder" app Opt-in only
  • Remove "Microsoft Remote Desktop" app Opt-in only
  • Remove "Network Speed Test" app Opt-in only
  • Remove "Microsoft To Do: Lists, Tasks & Reminders" app Opt-in only

Remove Windows apps › Remove 3D modeling apps

  • Remove insecure "Print 3D" app Opt-in only
  • Remove "Microsoft 3D Builder" app Opt-in only
  • Remove "3D Viewer" app Opt-in only

Remove Windows apps › Remove MSN (Bing) apps

  • Remove "MSN Weather" app Opt-in only
  • Remove "MSN Sports" app Opt-in only
  • Remove "Microsoft News" app Opt-in only
  • Remove "MSN Money" app Opt-in only

Remove Windows apps › Remove extension apps

  • Remove "HEIF Image Extensions" app Opt-in only
  • Remove "VP9 Video Extensions" app Opt-in only
  • Remove "Web Media Extensions" app Opt-in only
  • Remove "Webp Image Extensions" app Opt-in only
  • Remove "HEVC Video Extensions" app Opt-in only
  • Remove "Raw Image Extension" app Opt-in only

Remove Windows apps › Remove Microsoft Office apps

  • Remove "Microsoft 365 (Office)" app Opt-in only
  • Remove "OneNote" app Opt-in only
  • Remove "Sway" app Opt-in only

Remove Windows apps › Remove Microsoft Store apps

  • Remove "Microsoft Store" app Opt-in only
  • Remove "Store Purchase" app Opt-in only

Remove Windows apps › Remove Phone apps

  • Remove "Phone Link" app Opt-in only
  • Remove "Call" app Opt-in only
  • Remove "Cross Device Experience Host" app Opt-in only

Remove Windows apps › Remove third-party apps

  • Remove "Shazam" app Opt-in only
  • Remove "Flipboard" app Opt-in only
  • Remove "Twitter" app Opt-in only
  • Remove "iHeart: Radio, Music, Podcasts" app Opt-in only
  • Remove "Duolingo - Language Lessons" app Opt-in only
  • Remove "Adobe Photoshop Express" app Opt-in only
  • Remove "Pandora" app Opt-in only
  • Remove "Eclipse Manager" app Opt-in only
  • Remove "Code Writer" app Opt-in only
  • Remove "Spotify - Music and Podcasts" app Opt-in only

Remove Windows apps › Remove third-party apps › Remove Candy Crush apps

  • Remove "Candy Crush Saga" app Opt-in only
  • Remove "Candy Crush Soda Saga" app Opt-in only

Remove Windows apps › Remove system apps

  • Remove "File Picker" app Opt-in only
  • Remove "File Explorer" app Opt-in only
  • Remove "App Resolver UX" app Opt-in only
  • Remove "Add Suggested Folders To Library" app Opt-in only
  • Remove "Microsoft Text Input Application" app Opt-in only
  • Remove "Microsoft AAD Broker Plugin" app (breaks Night Light settings, taskbar keyboard selection and Office app authentication) Opt-in only
  • Remove "Microsoft Accounts Control" app Opt-in only
  • Remove "Microsoft Async Text Service" app Opt-in only
  • Remove "Hello setup UI" app (breaks biometric authentication) Opt-in only
  • Remove "Credentials Dialog Host" app Opt-in only
  • Remove "EC" app Opt-in only
  • Remove "Lock" app (shows lock screen) Opt-in only
  • Remove "Win32 Web View Host" / "Desktop App Web Viewer" app Opt-in only
  • Remove "Microsoft PPI Projection" app Opt-in only
  • Remove "ChxApp" app Opt-in only
  • Remove "Assigned Access Lock App" app Opt-in only
  • Remove "Capture Picker" app Opt-in only
  • Remove "Cloud Experience Host" app (breaks Windows Hello password/PIN sign-in options, and Microsoft cloud/corporate sign in) Opt-in only
  • Remove "Content Delivery Manager" app Opt-in only
  • Remove "Search" app Opt-in only
  • Remove "Holographic First Run" app Opt-in only
  • Remove "Microsoft Family Safety" / "Parental control" app Opt-in only
  • Remove "My People" app Opt-in only
  • Remove "Pinning Confirmation Dialog" app Opt-in only
  • Remove "Secondary Tile Experience" app Opt-in only
  • Remove "Take a Test" app Opt-in only
  • Remove "Windows Feedback" app Opt-in only
  • Remove "CBS Preview" app Opt-in only
  • Remove "Contact Support" app Opt-in only
  • Remove "Narrator QuickStart" app Opt-in only
  • Remove "GPU Eject Dialog" app Opt-in only
  • Remove "Windows Undocked Developer Kit (UDK)" app Opt-in only

Remove Windows apps › Remove system apps › Remove Out-of-Box Experience (OOBE) apps

  • Remove "OOBE Network Captive Portal" app Opt-in only
  • Remove "OOBE Network Connection Flow" app Opt-in only

Remove Windows apps › Remove system apps › Remove printing user interface

  • Remove "Print Queue" app (breaks printing) Opt-in only
  • Remove "Print UI" app (breaks printing for some apps) Opt-in only

Remove OneDrive

  • Kill OneDrive process Strict
  • Remove OneDrive from startup Strict
  • Remove OneDrive through official installer Strict
  • Remove empty OneDrive folders Opt-in only
  • Remove OneDrive installation files and cache Opt-in only
  • Remove OneDrive shortcuts Strict
  • Disable OneDrive usage Strict
  • Disable automatic OneDrive installation Recommended
  • Remove OneDrive folder from File Explorer Strict
  • Disable OneDrive scheduled tasks Opt-in only
  • Clear OneDrive environment variable Strict

Remove Edge

  • Remove Edge through official installer Opt-in only
  • Remove Edge shortcuts Opt-in only

Remove Edge › Remove Edge associations

  • Remove Edge application selection associations Opt-in only
  • Remove Edge Open With associations Opt-in only
  • Remove Edge user associations Opt-in only

Remove Xbox

  • Remove Xbox App Opt-in only
  • Remove Game Bar Opt-in only
  • Remove Xbox Live in-game experience Opt-in only
  • Remove Xbox Speech To Text Overlay Opt-in only
  • Disable Xbox Live Game Save Opt-in only
  • Disable Xbox Live Networking Service Opt-in only
  • Disable Xbox Live Auth Manager Opt-in only
  • Remove Xbox Identity Provider (breaks Xbox sign-in) Opt-in only
  • Remove "Xbox Game Callable UI" app (breaks Xbox Live games) Opt-in only

Disable built-in Windows features

  • Disable "Direct Play" feature Opt-in only
  • Disable "Internet Explorer" feature Opt-in only
  • Disable "Legacy Components" feature Opt-in only
  • Disable "Media Features" feature Opt-in only
  • Disable "Scan Management" feature Recommended
  • Disable "Windows Fax and Scan" feature Recommended
  • Disable "Windows Media Player" feature Opt-in only
  • Disable "Windows Search" feature Opt-in only

Disable built-in Windows features › Disable Hyper-V virtualization features

  • Disable "Hyper-V" feature Opt-in only
  • Disable "Hyper-V GUI Management Tools" feature Opt-in only
  • Disable "Hyper-V Management Tools" feature Opt-in only
  • Disable "Hyper-V Module for Windows PowerShell" feature Opt-in only

Disable built-in Windows features › Disable printing features

  • Disable "Print and Document Services" feature Opt-in only
  • Disable "Work Folders Client" feature Opt-in only

Disable built-in Windows features › Disable printing features › Disable printer networking

  • Disable "Internet Printing Client" feature Opt-in only
  • Disable "LPD Print Service" feature Opt-in only
  • Disable "LPR Port Monitor" feature Opt-in only
  • Disable "Microsoft Print to PDF" feature Opt-in only

Disable built-in Windows features › Disable printing features › Disable XPS support features

  • Disable "Microsoft XPS Document Writer" feature Opt-in only
  • Disable "XPS Viewer" feature Recommended

Remove on-demand capabilities and features › Remove preinstalled features on demand

  • Remove "DirectX Configuration Database" capability Opt-in only
  • Remove "Internet Explorer 11" capability Opt-in only
  • Remove "Math Recognizer" capability Opt-in only
  • Remove "OneSync" capability (breaks Mail, People, and Calendar) Strict
  • Remove "OpenSSH client" capability Opt-in only
  • Remove "PowerShell ISE" capability Opt-in only
  • Remove "Print Management Console" capability Opt-in only
  • Remove "Quick Assist" capability Opt-in only
  • Remove "Steps Recorder" capability Opt-in only
  • Remove "Windows Fax and Scan" capability Opt-in only

Remove on-demand capabilities and features › Remove not preinstalled features on demand

  • Remove ".NET Framework" capability Opt-in only
  • Remove "Mixed Reality" capability Opt-in only
  • Remove "Wireless Display" capability Opt-in only
  • Remove "Accessibility - Braille Support" capability Opt-in only
  • Remove "Developer Mode" capability Opt-in only
  • Remove "Graphics Tools" capability Opt-in only
  • Remove "IrDA" capability Opt-in only
  • Remove "Microsoft WebDriver" capability Opt-in only
  • Remove "MSIX Packaging Tool Driver" capability Opt-in only
  • Remove "OpenSSH Server" capability Opt-in only
  • Remove "Windows Emergency Management Services and Serial Console" capability Opt-in only
  • Remove "XPS Viewer" capability Opt-in only

Remove on-demand capabilities and features › Remove not preinstalled features on demand › Remove printing capabilities

  • Remove "Enterprise Cloud Print" capability Opt-in only
  • Remove "Mopria Cloud Service" capability Opt-in only

Remove on-demand capabilities and features › Remove not preinstalled features on demand › Remove Remote Server Administration Tools (RSAT)

  • Remove "Active Directory Domain Services and Lightweight Directory Services Tools" capability Opt-in only
  • Remove "BitLocker Drive Encryption Administration Utilities" capability Opt-in only
  • Remove "Active Directory Certificate Services Tools" capability Opt-in only
  • Remove "DHCP Server Tools" capability Opt-in only
  • Remove "DNS Server Tools" capability Opt-in only
  • Remove "Failover Clustering Tools" capability Opt-in only
  • Remove "File Services Tools" capability Opt-in only
  • Remove "Group Policy Management Tools" capability Opt-in only
  • Remove "IP Address Management (IPAM) Client" capability Opt-in only
  • Remove "Data Center Bridging LLDP Tools" capability Opt-in only
  • Remove "Network Controller Management Tools" capability Opt-in only
  • Remove "Network Load Balancing Tools" capability Opt-in only
  • Remove "Remote Access Management Tools" capability Opt-in only
  • Remove "Server Manager Tools" capability Opt-in only
  • Remove "Shielded VM Tools" capability Opt-in only
  • Remove "Storage Replica Module for Windows PowerShell" capability Opt-in only
  • Remove "Volume Activation Tools" capability Opt-in only
  • Remove "Windows Server Update Services Tools" capability Opt-in only
  • Remove "Storage Migration Service Management Tools" capability Opt-in only
  • Remove "Systems Insights Module for Windows PowerShell" capability Opt-in only

Remove on-demand capabilities and features › Remove not preinstalled features on demand › Remove storage capabilities

  • Remove "Windows Storage Management" capability Opt-in only
  • Remove "OneCore Storage Management" capability Opt-in only

Remove Widgets

  • Remove "Widgets" from taskbar Strict
  • Remove "Windows Web Experience Pack" (breaks Widgets) Opt-in only

Disable non-essential services

  • Disable Microsoft Account Sign-in Assistant (breaks Microsoft Store and Microsoft Account sign-in) Opt-in only
  • Disable Downloaded Maps Manager Opt-in only
  • Disable Microsoft Retail Demo Opt-in only
  • Disable User Data Access Opt-in only
  • Disable Messaging Service Opt-in only
  • Disable Windows Push Notifications Opt-in only
  • Disable Shadow Copy (breaks System Restore and Windows Backup) Opt-in only

Disable non-essential services › Disable synchronization of mail, contacts, calendar, and user data

  • Disable User Data Storage Opt-in only
  • Disable Sync Host Opt-in only

Remove Snipping Tool

  • Remove outdated "Snipping Tool" app Opt-in only
  • Disable outdated Snipping Tool Opt-in only
  • Disable Snipping Tool keyboard shortcut (**Windows logo key** + **Shift** + **S**) Opt-in only
  • Disable Print Screen keyboard shortcut for Snipping Tool Opt-in only

Remove Outlook

  • Remove "Outlook for Windows" app Opt-in only
  • Disable Outlook automatic installation Strict
  • Disable Outlook automatic migration Strict
  • Disable Outlook automatic redirection Strict
  • Remove "Try the new Outlook" toggle Strict
  • Disable Outlook preview prompts Recommended

Advanced settings

  • Set NTP (time) server to `pool.ntp.org` Strict
  • Disable reserved storage for updates Opt-in only