WINDOWS 11 DEBLOAT & HARDENING
INTRODUCTION
Windows 11 comes with a significant amount of telemetry, ads, and pre-installed bloatware. This guide walks you through stripping it down to the bare essentials for maximum performance and privacy.
PREREQUISITES
- A fresh install of Windows 11 (recommended).
- PowerShell running as Administrator.
INSTRUCTIONS
1. Initial Setup (OOBE)
During installation, select "English (World)" to avoid pre-installed Candy Crush and TikTok. Disconnect from the
internet to force a local account creation (Shift + F10 -> OOBE\BYPASSNRO).
2. PowerShell Debloat Script
We will use the Chris Titus Tech WinUtil, a trusted community tool.
Select "Tweaks" -> "Desktop" -> "Run Tweaks". This disables telemetry, Cortana, and unnecessary services.
3. Group Policy Hardening
Open gpedit.msc and navigate to:
- Computer Config -> Admin Templates -> Windows Components -> Data Collection -> Allow Telemetry (Set to Disabled).
- Computer Config -> Admin Templates -> Windows Components -> Windows Defender Antivirus -> MAPS -> Join Microsoft MAPS (Set to Disabled).
CONCLUSION
Your Windows 11 installation is now significantly lighter. You should see lower RAM usage, fewer background processes, and zero ads in your start menu.