SkillAgentSearch skills...

Win11tweak

A set of template-based automated scripts to debloat, disable telemetry and then reconfigure Windows 11 to be fit for a power-user.

Install / Use

/learn @kyaulabs/Win11tweak

README

Windows 11 Tweaks - Build 22621.1778

LOGO

Contributor Covenant   GitHub   Gitleaks   CI
Semantic Versioning   Discord

Disclaimer

Let's be honest, Windows has become a mammoth of an OS that is generically geared toward everyone. My goal with this set of scripts is to put the User back in control of the OS. That said, these scripts have been heavily customized to my own personal needs, it is highly recommended that if you are to use them you review them in their entirety first.

🚧 WARNING
This repository is provided for archival/educational purposes, I am not responsible for any data loss or
damage that may ensue.

Introduction

This script is meant to be utilized immediately after a fresh installation of Windows 11. Before the script can be run, Windows itself needs to be installed properly. The following will walk you through setting up Windows 11 with a local user account.

Features

This set of scripts attempts to maintain a vanilla appearance while gutting most of the unneeded and/or unwanted items from the operating system. Privacy is another focus and as such any call home or telemetry functions have been disabled or out-right removed.

  • Microsoft Bloat Removed

  • Microsoft Telemetry/Tracking Stripped

  • (Optional) Microsoft Edge Completed Removed

  • (Optional) Windows Defender Completed Removed

  • Chocolatey Package Manger, manage packages like a Linux system

  • MSYS2 is used for a Linux terminal

  • Git for Windows directly integrated into MSYS2, this uses the faster native version of Git with the added benefit of being able to use the default MSYS2 package manager pacman [^1]

  • YubiKey Ready! [^2]

  • (Optional) GPG and SSH key forwarding over SSH

  • Many Visual Changes!

    • Start Menu shifted back to the left

    • Original Windows right-click menu restored

    • OpenShell is used for a customizable start menu experience

[^1]: Install Git for Windows inside MSYS2 proper git-for-windows/git [^2]: This assumes you followed drduh's YubiKey Guide in order to setup your YubiKey

Configuration

While not required, in order to personalize your installation, it is recommended to edit user_settings.ps1. Use any text editor or regular old Notepad to edit the file. This step will need to be done before the script can be run on a fresh installation. However, as Win11Tweaks can be baked into an installation to be run automatically, I have added this section up near the top so it does not get skipped over.

📌 NOTE
By default this file contains all of my own personal settings. At the very least you should change the Git
Email, GPG Public Key and then review over the list of software that Chocolatey is going to be installing.

Features_01

Windows 11 Tweaks Guide

Installation

While this can be used with any version of Windows 11, this guide revolves around Windows 11 Pro N. In order to bypass the Microsoft Account requirements it is advised that you pull your network cable until Windows 11 is fully installed.

❗ DO NOT SKIP ❗
If you do not plan on pulling your network cable you will be forced into logging in with a Microsoft
Account.

Install_01

After installing Windows to the selected hard drive you will be prompted to reboot the computer. Upon completion, press SHIFT+F10 to bring up a command prompt window.

Install_02

Run oobe\bypassnro in the command prompt window, this will reboot the machine automatically and then return you to the region selection window.

Install_02

Begin by selecting a region and keyboard (and a secondary keyboard layout if necessary).

Install_03

Windows will now prompt you about having no internet connection, select I don't have internet.

Install_05

It will double check that you are sure about using an offline account, select Continue with limited setup.

Install_05

Set your desired username.

Install_08

Set and confirm your password.

Install_09

Fill in the three security questions.

Install_10

Finally on the privacy settings screen, make sure you deselect every single option (scroll down for more options). Only after you have turned off all of Microsoft's tracking should you select Accept to complete the Windows 11 configuration.

Install_11

Windows Update

Eventually you will be able to login and will then be presented with the desktop.

📌NOTE
Now would be an acceptable time to plug your network cable back in.

Right-click on the Start Menu icon (bottom center of screen, left most icon). From here you will want to select Settings.

Windows_01

Navigate to Windows Update.

Windows_02

From here update Windows, you need to continue to check for updates after every update until Windows tells you that You're up to date.

Windows_03

Don't forget to also install optional updates as these tend to contain drivers, these have been moved inside Advanced options.

Windows_04

This will most likely require a reboot or a few. Once complete open the Windows Store from the taskbar (the briefcase with the Windows logo on it). Open the Library from the bottom left of the app.

Windows_05

Select Get updates in the upper right corner of the window.

Windows_06

Verify that you have performed all updates by the store telling you You're good to go.

Windows_07

At this point (if it has not been done already) activate Windows.

With the computer updated and activated it is now time to download the script. Download the latest version of Win11Tweaks. Extract the contents of the ZIP file to the Desktop, this should place a folder win11tweak on the Desktop.

Windows Defender (optional)

📌 NOTE
If you choose to keep Windows Defender installed, the script used to remove it 'defender.ps1' will get
flagged by Defender itself, this is normal behavior.
🚧 WARNING
Removal of Windows Defender WILL break the ability to use Windows Update!

Before the main script can be run Windows Defender needs to be disabled along with tamper protection.

Select the Security Center icon in the system tray and navigate to the security dashboard.

Defender_01

Navigate to Virus & threat protection and select Manage settings.

Defender_02

Turn off Real-time protection, Cloud-delivered protection, Automatic sample submission and Tamper Protection inside of Virus & threat protection settings.

Defender_03

Download Win11Tweaks

Right-click on the Start Menu icon and select Terminal (Admin). Run the following command in PowerShell.

iex ((New-Object System.Net.WebClient).DownloadString('https://github.com/kyaulabs/win11tweak/raw/master/Modules/download.ps1'))

Download_01

This will download a copy of Win11Tweaks and place it on your desktop. You can then close out of Windows Terminal.

Anti-Virus (optional)

Run download_av.cmd inside of the win11tweak folder on the desktop.

AntiVirus_01

This will download Adaware Antivirus to your desktop, then run the installer Adaware.exe. Select Install to install Adaware.

AntiVirus_02

When asked if you want an extra layer of protection, select NO THANKS.

AntiVirus_03

Once installation is finished, feel free to delete the Adaware.exe on your desktop. If by chance MSEdge pops up with incoherent text, go to the Task Manager by right-clicking on the Start Menu and selecting Task Manager. Find Microsoft Edge and expand it to find Browser, right-click on this and choose End task.

![AntiVirus_04](README_media/AntiVirus_0

View on GitHub
GitHub Stars104
CategoryDevelopment
Updated5d ago
Forks8

Languages

PowerShell

Security Score

100/100

Audited on Mar 26, 2026

No findings