Skip to content

Instantly share code, notes, and snippets.

@tolgamorf

tolgamorf/Trimmed_Windows.md

Created May 12, 2026 10:32
Show Gist options

  • Select an option

    Learn more about clone URLs
  • Save tolgamorf/e87ebc9ae1e91567b513402f666894e6 to your computer and use it in GitHub Desktop.

Select an option

Learn more about clone URLs
Save tolgamorf/e87ebc9ae1e91567b513402f666894e6 to your computer and use it in GitHub Desktop.
Download ZIP
Trimmed Windows Setup Guide
Raw
Trimmed_Windows.md

Trimmed Windows Setup Guide

A quick guide to building a lightweight, privacy-respecting Windows installation using four open-source tools.

1. Tiny11 Builder — Create a Lightweight ISO

Repository: ntdevlabs/tiny11builder

A PowerShell script that repackages the official Windows 11 ISO into a stripped-down version. It uses only Microsoft tools (DISM, oscdimg) — no shady third-party executables.

What it removes:

  • Bloatware apps (Clipchamp, News, Weather, Xbox, OneDrive, etc.)
  • Microsoft Edge
  • TPM/CPU/RAM requirements
  • Microsoft account requirement during setup

Usage:

  1. Download official Windows 11 ISO from Microsoft
  2. Mount the ISO
  3. Run tiny11maker.ps1 as Administrator
  4. Select drive letter and edition
  5. Get your tiny11.iso ready for Rufus

2. Microsoft Activation Scripts (MAS) — Activate Windows

Repository: massgravel/Microsoft-Activation-Scripts

Open-source activation tool with multiple methods. Fully transparent batch scripts — you can audit exactly what it does.

Activation methods:

  • HWID — Permanent digital license tied to hardware (recommended for Windows)
  • Ohook — For Office activation
  • TSforge — Newer method, works on older systems too

Usage:

irm https://get.activated.win | iex

Or download MAS_AIO.cmd and run manually.

3. Simplewall — Control Network Access

Repository: henrypp/simplewall

A lightweight firewall that hooks into Windows Filtering Platform (WFP). Unlike Windows Firewall (allow-by-default), Simplewall blocks everything by default — you whitelist what you trust.

Key features:

  • Blocks all outbound traffic until you allow it
  • Can block Windows telemetry and system processes
  • ~2MB, portable, open-source (GPLv3)
  • Works independently from Windows Firewall

Why use it: Every time an app tries to connect, you get a popup asking for permission. Great for catching sneaky telemetry and background connections.

4. Win11Debloat — Final Polish

Repository: Raphire/Win11Debloat

A PowerShell script for post-install cleanup. Catches anything Tiny11 might have missed and lets you tweak Windows behavior.

What it does:

  • Removes remaining bloatware
  • Disables telemetry and tracking
  • Cleans up Start menu pins
  • Removes Copilot, Cortana, widgets
  • Hides interface clutter (search box, task view, etc.)

Usage:

& ([scriptblock]::Create((irm "https://debloat.raphi.re/")))

Choose Default mode for recommended settings, or Custom mode for granular control.

Recommended Order

  1. Build ISO with Tiny11 Builder
  2. Install Windows from the trimmed ISO
  3. Activate with MAS
  4. Install Simplewall and enable filters
  5. Run Win11Debloat to finish cleanup

Bonus

Use reg files from this repo to turn off Windows updates for a very long time.

Bonus 2

Windows can grow in size especially ints WinSxS Folder. Here are safe ways to reduce its size using built-in tools to remove outdated components.

Open Command Prompt as Administrator and run:

dism.exe /online /Cleanup-Image /StartComponentCleanup

Also to remove all superseded versions of every component (cannot undo updates after this), use:

dism.exe /online /Cleanup-Image /StartComponentCleanup /ResetBase

All tools are open-source. Use at your own risk — always back up before making system changes.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment