geckronome - Windows 11 Setup

Note: This guide is for personal setups, not enterprise. Look over what you copy and paste. I am not responsible for anything that goes wrong.

Pre-requisites

A PC with TPM 2.0 and Secure Boot support
A Windows 11 ISO — latest as of writing is 25H2 (26200.8655)
I recommend using Rufus to write the ISO to a USB drive. It has an option to bypass the Microsoft account requirement during setup, which saves you a step.

Installation

Set your Language, Time and Currency settings.
Install Windows 11 Pro.
Follow through the prompts as normal.
At the Microsoft sign-in screen, you have a few options to get a local account:
- Easiest: If you used Rufus with the account bypass option, you'll see a local account option directly.
- Otherwise: Enter [email protected] as the email and any random password. It will fail to connect, and Windows will then let you create a local account.
- No internet: Disconnect your ethernet or disable Wi-Fi before this screen — the I don't have internet button will appear.
Note: OOBE\BYPASSNRO was removed in Windows 11 24H2 and no longer works.
Once you reach the desktop, go straight to Windows Update and update everything, including optional updates under Advanced options → Optional updates.

Recommended: Chris Titus Tech Winutil

Before diving into manual tweaks, consider running the Chris Titus Tech Windows Utility. It's a GUI tool that covers debloating, tweaks, and app installation all in one place — and it's actively maintained. Run the following as Administrator in PowerShell:

# Run as Administrator in PowerShell
iwr -useb https://christitus.com/win | iex

The sections below cover everything manually for those who want more control over what gets changed.

Privacy & Online Features

Go through these in the Settings app. These replace a wall of registry commands — the GUI is the right place for these.

Settings → Privacy & security → General

Let apps show me personalized ads using my advertising ID → Off
Let websites show me locally relevant content by accessing my language list → Off
Let Windows improve Start and search results by tracking app launches → Off
Show me suggested content in the Settings app → Off
Show me notifications in the Settings app → Off

Settings → Privacy & security → Speech

Online speech recognition → Off

Settings → Privacy & security → Inking & typing personalization

Inking & typing personalization → Off

Settings → Privacy & security → Diagnostics & feedback

Diagnostic data → Send required diagnostic data
Improve inking and typing → Off
Tailored experiences → Off
Feedback frequency → Never

Settings → Privacy & security → Activity history

Store my activity history on this device → Off

Settings → Privacy & security → Search permissions

SafeSearch → Off
Cloud content search (Microsoft account) → Off
Cloud content search (Work or School account) → Off
Search history on this device → Off
Show search highlights → Off

Settings → Personalization → Start

Show recently opened items in Start, Jump Lists, and File Explorer → Off
Show recommendations for tips, shortcuts, new apps, and more → Off

Settings → Personalization → Taskbar

Copilot → Off
Task View → Off
Widgets → Off
Search → Hide

UI & Taskbar Tweaks

First, open Task Manager → Startup apps and disable everything except Windows Security.

# Disable typing insights
reg add "HKCU\Software\Microsoft\input\Settings" /v "InsightsEnabled" /t REG_DWORD /d 0 /f

# Disable storage sense
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\StorageSense\Parameters\StoragePolicy" /v "01" /t REG_DWORD /d 0 /f

# Don't show Edge tabs in Alt+Tab
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "MultiTaskingAltTabFilter" /t REG_DWORD /d 3 /f

# Don't show snapped groups in Alt+Tab
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "EnableTaskGroups" /t REG_DWORD /d 0 /f

# Don't show snap layouts hover menu
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "EnableSnapBar" /t REG_DWORD /d 0 /f

# Remove Copilot, Task View and Widgets from the taskbar
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "ShowCopilotButton" /t REG_DWORD /d 0 /f
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "ShowTaskViewButton" /t REG_DWORD /d 0 /f
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "TaskbarDa" /t REG_DWORD /d 0 /f

# Disable Copilot system-wide
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsCopilot" /v "TurnOffWindowsCopilot" /t REG_DWORD /d 1 /f
reg add "HKCU\SOFTWARE\Policies\Microsoft\Windows\WindowsCopilot" /v "TurnOffWindowsCopilot" /t REG_DWORD /d 1 /f

# Turn off auto-installation of Microsoft Teams
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Communications" /v "ConfigureChatAutoInstall" /t REG_DWORD /d 0 /f

# Hide the search box in the taskbar (0 = hidden, 1 = icon, 2 = box, 3 = icon with label)
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Search" /v "SearchboxTaskbarMode" /t REG_DWORD /d 0 /f

# Turn off lock screen notifications
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\PushNotifications" /v "LockScreenToastEnabled" /t REG_DWORD /d 0 /f
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Notifications\Settings" /v "NOC_GLOBAL_SETTING_ALLOW_CRITICAL_TOASTS_ABOVE_LOCK" /t REG_DWORD /d 0 /f

# Disable autocorrect
reg add "HKCU\Software\Microsoft\TabletTip\1.7" /v "EnableAutocorrection" /t REG_DWORD /d 0 /f

# Disable Game Bar opening with a controller
reg add "HKCU\Software\Microsoft\GameBar" /v "UseNexusForGameBarEnabled" /t REG_DWORD /d 0 /f

# Disable Sticky Keys and Filter Keys prompts
reg add "HKCU\Control Panel\Accessibility\StickyKeys" /v "Flags" /t REG_SZ /d "506" /f
reg add "HKCU\Control Panel\Accessibility\Keyboard Response" /v "Flags" /t REG_SZ /d "122" /f

# Disable SafeSearch
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\SearchSettings" /v "SafeSearchMode" /t REG_DWORD /d 0 /f

# Disable delivery optimization (only disable if you don't have multiple PCs sharing the same network)
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\DeliveryOptimization\Config" /v "DODownloadMode" /t REG_DWORD /d 0 /f
Delete-DeliveryOptimizationCache -Force

# Disable Remote Assistance
reg add "HKLM\SYSTEM\CurrentControlSet\Control\Remote Assistance" /v "fAllowToGetHelp" /t REG_DWORD /d 0 /f
reg add "HKLM\SYSTEM\CurrentControlSet\Control\Remote Assistance" /v "fAllowFullControl" /t REG_DWORD /d 0 /f

# Stop Windows managing your default printer
reg add "HKCU\Software\Microsoft\Windows NT\CurrentVersion\Windows" /v "LegacyDefaultPrinterMode" /t REG_DWORD /d 1 /f

# Disable Bing results in the Search box
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Search" /v "BingSearchEnabled" /t REG_DWORD /d 0 /f
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Search" /v "CortanaConsent" /t REG_DWORD /d 0 /f
reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Search" /v "BingSearchEnabled" /t REG_DWORD /d 0 /f

# Turn off sign-in info used to automatically finish setting up after an update
$SID = (Get-CimInstance -ClassName Win32_UserAccount | Where-Object -FilterScript {$_.Name -eq $env:USERNAME}).SID
reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\UserARSO\$SID" /v "OptOut" /t REG_DWORD /d 1 /f

# Disable the 260-character path limit
reg add "HKLM\SYSTEM\CurrentControlSet\Control\FileSystem" /v "LongPathsEnabled" /t REG_DWORD /d 1 /f

Enable Useful Features

A few things worth enabling manually first:

Night light — Settings → System → Display → Night light
Power mode — Settings → System → Power → Power mode (set to Balanced or Best performance)
Enhanced search — Settings → Privacy & security → Searching Windows → Enhanced

# Enable Developer Mode
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\AppModelUnlock" /v "AllowDevelopmentWithoutDevLicense" /t REG_DWORD /d 1 /f

# Enable End Task in taskbar right-click menu
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\TaskbarDeveloperSettings" /v "TaskbarEndTask" /t REG_DWORD /d 1 /f

# Enable clipboard history (Win+V)
reg add "HKCU\Software\Microsoft\Clipboard" /v "EnableClipboardHistory" /t REG_DWORD /d 1 /f

# Receive updates for other Microsoft products via Windows Update
reg add "HKLM\SOFTWARE\Microsoft\WindowsUpdate\UX\Settings" /v "AllowMUUpdateService" /t REG_DWORD /d 1 /f

# Show full path in Explorer title bar
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\CabinetState" /v "FullPath" /t REG_DWORD /d 1 /f

# Show hidden files and folders
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "Hidden" /t REG_DWORD /d 1 /f

# Show file extensions
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "HideFileExt" /t REG_DWORD /d 0 /f

# Show merge conflicts
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "HideMergeConflicts" /t REG_DWORD /d 0 /f

# Show encrypted/compressed NTFS files in color
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "ShowEncryptCompressedColor" /t REG_DWORD /d 1 /f

# Open File Explorer to This PC instead of Quick Access
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "LaunchTo" /t REG_DWORD /d 1 /f

# Disable OneDrive sync provider notifications (the ads)
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "ShowSyncProviderNotifications" /t REG_DWORD /d 0 /f

# Show detailed transfer info in Explorer
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\OperationStatusManager" /v "EnthusiastMode" /t REG_DWORD /d 1 /f

# Disable F1 help key in some Microsoft apps
reg add "HKCU\Software\Classes\Typelib\{8cec5860-07a1-11d9-b15e-000d56bfe6ee}\1.0\0\win64" /v "(default)" /t REG_SZ /d "" /f

# Enable Num Lock at startup
reg add "HKEY_USERS\.DEFAULT\Control Panel\Keyboard" /v "InitialKeyboardIndicators" /t REG_SZ /d 2147483650 /f

# Enable verbose logon messages
reg add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v "VerboseStatus" /t REG_DWORD /d 1 /f

# Show full BSOD info instead of the sad face
reg add "HKLM\SYSTEM\CurrentControlSet\Control\CrashControl" /v "DisplayParameters" /t REG_DWORD /d 1 /f

# Enable Network Discovery and file sharing on private networks
$FirewallRules = @(
  "@FirewallAPI.dll,-32752",
  "@FirewallAPI.dll,-28502"
)
Set-NetFirewallRule -Group $FirewallRules -Profile Private -Enabled True
Set-NetFirewallRule -Profile Public, Private -Name FPS-SMB-In-TCP -Enabled True
Set-NetConnectionProfile -NetworkCategory Private

# Set Control Panel to Large Icons view
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ControlPanel" /v "AllItemsIconView" /t REG_DWORD /d 0 /f
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\ControlPanel" /v "StartupPage" /t REG_DWORD /d 1 /f

# Fix JPEG wallpaper quality
reg add "HKCU\Control Panel\Desktop" /v "JPEGImportQuality" /t REG_DWORD /d 100 /f

# Fix Downloads folder grouping by date (finally)
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FolderTypes\{885a186e-a440-4ada-812b-db871b942259}\TopViews\{00000000-0000-0000-0000-000000000000}" /v "ColumnList" /t REG_SZ /d "System.Null" /f
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FolderTypes\{885a186e-a440-4ada-812b-db871b942259}\TopViews\{00000000-0000-0000-0000-000000000000}" /v "GroupBy" /t REG_SZ /d "System.Null" /f
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FolderTypes\{885a186e-a440-4ada-812b-db871b942259}\TopViews\{00000000-0000-0000-0000-000000000000}" /v "LogicalViewMode" /t REG_DWORD /d 1 /f
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FolderTypes\{885a186e-a440-4ada-812b-db871b942259}\TopViews\{00000000-0000-0000-0000-000000000000}" /v "Name" /t REG_SZ /d "NoName" /f
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FolderTypes\{885a186e-a440-4ada-812b-db871b942259}\TopViews\{00000000-0000-0000-0000-000000000000}" /v "Order" /t REG_DWORD /d 0 /f
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FolderTypes\{885a186e-a440-4ada-812b-db871b942259}\TopViews\{00000000-0000-0000-0000-000000000000}" /v "PrimaryProperty" /t REG_SZ /d "System.ItemNameDisplay" /f
reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\FolderTypes\{885a186e-a440-4ada-812b-db871b942259}\TopViews\{00000000-0000-0000-0000-000000000000}" /v "SortByList" /t REG_SZ /d "System.ItemNameDisplay" /f

Uninstall Default Apps

I keep Notepad, Paint, the MS Store, all image/video codec extensions, Photos, Camera, Calculator, Clock, Snipping Tool, Sticky Notes, Terminal, and the Xbox apps. You will need to uninstall OneDrive separately, or at minimum stop it from auto-backing up your folders.

Check off what you want removed, then run the script below:

Get-AppxPackage "Clipchamp.Clipchamp" | Remove-AppxPackage
Get-AppxPackage "*Microsoft.Advertising.Xaml*" | Remove-AppxPackage
Get-AppxPackage "*Spotify*" | Remove-AppxPackage
Get-AppxPackage "*MicrosoftTeams*" | Remove-AppxPackage
Get-AppxPackage "*Disney*" | Remove-AppxPackage
Get-AppxPackage "Microsoft.549981C3F5F10" | Remove-AppxPackage # Cortana
Get-AppxPackage "Microsoft.BingNews" | Remove-AppxPackage
Get-AppxPackage "Microsoft.BingWeather" | Remove-AppxPackage
Get-AppxPackage "Microsoft.GetHelp" | Remove-AppxPackage
Get-AppxPackage "Microsoft.Getstarted" | Remove-AppxPackage
Get-AppxPackage "Microsoft.MicrosoftOfficeHub" | Remove-AppxPackage
Get-AppxPackage "Microsoft.MicrosoftSolitaireCollection" | Remove-AppxPackage
Get-AppxPackage "Microsoft.MixedReality.Portal" | Remove-AppxPackage
Get-AppxPackage "Microsoft.News" | Remove-AppxPackage
Get-AppxPackage "Microsoft.Office.OneNote" | Remove-AppxPackage
Get-AppxPackage "Microsoft.OutlookForWindows" | Remove-AppxPackage
Get-AppxPackage "Microsoft.People" | Remove-AppxPackage
Get-AppxPackage "Microsoft.PowerAutomateDesktop" | Remove-AppxPackage
Get-AppxPackage "Microsoft.Print3D" | Remove-AppxPackage
Get-AppxPackage "Microsoft.SkypeApp" | Remove-AppxPackage
Get-AppxPackage "Microsoft.Todos" | Remove-AppxPackage
Get-AppxPackage "Microsoft.Wallet" | Remove-AppxPackage
Get-AppxPackage "Microsoft.Windows.Ai.Copilot.Provider" | Remove-AppxPackage
Get-AppxPackage "Microsoft.Windows.ParentalControls" | Remove-AppxPackage
Get-AppxPackage "microsoft.windowscommunicationsapps" | Remove-AppxPackage # Mail and Calendar
Get-AppxPackage "Microsoft.WindowsFeedbackHub" | Remove-AppxPackage
Get-AppxPackage "Microsoft.WindowsMaps" | Remove-AppxPackage
Get-AppxPackage "Microsoft.WindowsPhone" | Remove-AppxPackage
Get-AppxPackage "Microsoft.WindowsSoundRecorder" | Remove-AppxPackage
Get-AppxPackage "Microsoft.YourPhone" | Remove-AppxPackage # Phone Link
Get-AppxPackage "Microsoft.ZuneMusic" | Remove-AppxPackage # Groove Music
Get-AppxPackage "Microsoft.ZuneVideo" | Remove-AppxPackage # Movies & TV
Get-AppxPackage "MicrosoftCorporationII.QuickAssist" | Remove-AppxPackage

Other PowerShell Tweaks

# Disable hibernation
powercfg.exe /hibernate off

# Turn various services to manual or disabled
Stop-Service -Name AJRouter -Force
Set-Service -Name AJRouter -StartupType Disabled
Stop-Service -Name AssignedAccessManagerSvc -Force
Set-Service -Name AssignedAccessManagerSvc -StartupType Disabled # Kiosk mode
Set-Service -Name CDPSvc -StartupType Manual
Stop-Service -Name diagnosticshub.standardcollector.service -Force
Set-Service -Name diagnosticshub.standardcollector.service -StartupType Disabled
Stop-Service -Name DiagTrack -Force
Set-Service -Name DiagTrack -StartupType Disabled
# Set-Service -Name MapsBroker -StartupType Manual # Will break Windows Maps
# Set-Service -Name PcaSvc -StartupType Manual # Program Compatibility Assistant
Stop-Service -Name RemoteRegistry -Force
Set-Service -Name RemoteRegistry -StartupType Disabled
# Set-Service -Name UsoSvc -StartupType Manual # Shouldn't break Windows Update
# Set-Service -Name wisvc -StartupType Disabled # Disables Windows Insider

# Disable unneeded scheduled tasks
Get-ScheduledTask -TaskName "FamilySafetyMonitor" | Disable-ScheduledTask # Comment out if you use Family Safety
Get-ScheduledTask -TaskName "FamilySafetyRefreshTask" | Disable-ScheduledTask
# Get-ScheduledTask -TaskName "MapsToastTask" | Disable-ScheduledTask # Remove comment left and below if you do not use Windows Maps and will not use Windows Maps
# Get-ScheduledTask -TaskName "MapsUpdateTask" | Disable-ScheduledTask
# Get-ScheduledTask -TaskName "XblGameSaveTask" | Disable-ScheduledTask # Remove comment if you do not use Xbox and will not use Xbox
Get-ScheduledTask -TaskName "AitAgent" | Disable-ScheduledTask
Get-ScheduledTask -TaskName "Consolidator" | Disable-ScheduledTask
Get-ScheduledTask -TaskName "DmClient" | Disable-ScheduledTask
Get-ScheduledTask -TaskName "DmClientOnScenarioDownload" | Disable-ScheduledTask
Get-ScheduledTask -TaskName "KernelCeipTask" | Disable-ScheduledTask
Get-ScheduledTask -TaskName "Microsoft Compatibility Appraiser" | Disable-ScheduledTask
Get-ScheduledTask -TaskName "ProgramDataUpdater" | Disable-ScheduledTask
Get-ScheduledTask -TaskName "QueueReporting" | Disable-ScheduledTask
Get-ScheduledTask -TaskName "StartupAppTask" | Disable-ScheduledTask
Get-ScheduledTask -TaskName "UsbCeip" | Disable-ScheduledTask
Get-ScheduledTask -TaskName "Microsoft-Windows-DiskDiagnosticDataCollector" | Disable-ScheduledTask

# Disable SMBv1 (security)
Disable-WindowsOptionalFeature -Online -NoRestart -FeatureName SMB1Protocol

# Disable XPS Document Writer
Disable-WindowsOptionalFeature -Online -NoRestart -FeatureName Printing-XPSServices-Features

# Disable Work Folders (do not turn off if connected to Active Directory)
# Disable-WindowsOptionalFeature -Online -NoRestart -FeatureName WorkFolders-Client

# Disable PowerShell 2.0 (security)
# dism /online /Disable-Feature /FeatureName:"MicrosoftWindowsPowerShellV2Root" /NoRestart
# dism /online /Disable-Feature /FeatureName:"MicrosoftWindowsPowerShellV2" /NoRestart

# Remove Windows Media Player
Get-WindowsCapability -Online -Name 'Media.WindowsMediaPlayer*' | Remove-WindowsCapability -Online

# Remove Internet Explorer (and IE mode in Edge)
# Get-WindowsCapability -Online -Name 'Browser.InternetExplorer*' | Remove-WindowsCapability -Online
# dism /Online /Disable-Feature /FeatureName:"Internet-Explorer-Optional-x64" /NoRestart

# Remove Telnet client
dism /Online /Disable-Feature /FeatureName:"TelnetClient" /NoRestart

# Remove some optional apps
Get-WindowsCapability -Online -Name 'App.StepsRecorder*' | Remove-WindowsCapability -Online
Get-WindowsCapability -Online -Name 'Microsoft.Windows.PowerShell.ISE*' | Remove-WindowsCapability -Online
Get-WindowsCapability -Online -Name 'MathRecognizer*' | Remove-WindowsCapability -Online

# Install WSL (Linux in Windows)
# wsl --install

# Improve Defender behavior
# Set-MpPreference -CheckForSignaturesBeforeRunningScan 1
# Set-MpPreference -EnableNetworkProtection Enabled
# Set-MpPreference -PUAProtection Enabled

# Stop Defender nagging about not having a Microsoft account
reg add "HKCU\Software\Microsoft\Windows Security Health\State" /v "AccountProtection_MicrosoftAccount_Disconnected" /t REG_DWORD /d 1 /f

# Stop Defender nagging about Edge SmartScreen
# reg add "HKCU\Software\Microsoft\Windows Security Health\State" /v "AppAndBrowser_EdgeSmartScreenOff" /t REG_DWORD /d 0 /f

# Hide "Share" from the right-click context menu
# Remove-Item -Path "Registry::HKEY_CLASSES_ROOT\AllFilesystemObjects\shellex\ContextMenuHandlers\ModernSharing" -Recurse -Force -ErrorAction Ignore

# Disable MS Store in "Open with" suggestions
reg add "HKCU\Software\Policies\Microsoft\Windows\Explorer" /v "NoUseStoreOpenWith" /t REG_DWORD /d 1 /f

# Clean up Explorer cache and temp files
Clear-RecycleBin -Force -ErrorAction SilentlyContinue
# Remove-Item -Force -Confirm:$false -Recurse $env:LocalAppData\Microsoft\Windows\Explorer\*.db
# Remove-Item -Force -Confirm:$false $env:localappdata\Temp\*

App Installation

winget

# Update winget source if it is not working
# Add-AppxPackage -Path https://cdn.winget.microsoft.com/cache/source.msix

winget upgrade --exact --accept-source-agreements --accept-package-agreements

# Install apps — remove whatever you don't need
winget install --accept-source-agreements --accept-package-agreements Microsoft.PowerShell HeidiSQL.HeidiSQL Git.Git Microsoft.VisualStudioCode Discord.Discord Valve.Steam yt-dlp.yt-dlp Gyan.FFmpeg voidtools.Everything GIMP.GIMP KDE.Krita M2Team.NanaZip PrismLauncher.PrismLauncher qBittorrent.qBittorrent GoLang.Go EclipseAdoptium.Temurin.21.JDK JetBrains.Toolbox OBSProject.OBSStudio dotPDN.PaintDotNet Microsoft.PowerToys Microsoft.VCRedist.2015+.x64 OpenJS.NodeJS.22 Libretro.RetroArch Microsoft.DotNet.SDK.8

Chocolatey

Chocolatey website

# Check the Chocolately website first for any updates. Run as Administrator.
Set-ExecutionPolicy Bypass -Scope Process -Force
[System.Net.ServicePointManager]::SecurityProtocol = [System.Net.ServicePointManager]::SecurityProtocol -bor 3072
iex ((New-Object System.Net.WebClient).DownloadString('https://community.chocolatey.org/install.ps1'))

Testing

Results below were recorded on Windows 11 Pro 23H2 in VMware with a local account. Results on 25H2 may vary.

Fresh installation, no tweaks applied:

With most tweaks applied (WSL/winget/choco excluded), after a restart with no internet:

With everything applied, Edge disabled on startup, and a Windows Update installed: