KO | EN

GitLite

Minimalist Open Source Repository Search Engine

gitlite — search

#dsh #dsh-plugin #developer-tools #ai-agent #claude-code #codex #typescript #ai-agents #deepseek-harness #mcp #cli #rust

ps_tiny11

★ 114 Open GitHub ↗

This script creates a trimmed-down Windows 11 image, based on tiny11builder

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

# Update Feb 9, 2025

I'm going to archive this repo.  I've given up on trying to slightly fix or redeem Windows.  I originally made this just to try to show how to do a slightly spruced up version of tiny11 in PowerShell (tiny11 at that time was still using a batch script).  Meanwhile tiny11 has improved and kept up with things better.  Thanks for stopping by!

# ps_tiny11

A PowerShell version of [tiny11builder](https://github.com/ntdevlabs/tiny11builder).

This is a script to automate the build of a streamlined Windows 11 image ***or modify currently running Windows 11***.  Many privacy related and other tweaks are applied as well, please read this entire document before use.

Note on usage:  to right-click and 'run with PowerShell', you must enable PowerShell scripts to run without signing in Windows developer settings.  Not ideal.
The other way: open a terminal and run .\ps_tiny11.ps1

#### Changes from tiny11builder:

- Items to remove are searched for by case-insensitive substring.  If an item name is adjusted slightly in a new build this script should hopefully still find it.  For instance, instead of "Microsoft-Windows-InternetExplorer-Optional-Package\~31bf3856ad364e35\~amd64\~\~11.0.22621.1702", this script searches for "InternetExplorer" in the setup image and gets the full package name from there.
- ps_tiny11 will tell you about packages/apps it doesn't find
- ps_tiny11 will search drives for a Windows setup image and prompt for confirmation
- If there's only one ImageIndex in the install.wim, it will automatically be selected
- If no Windows installer found, prompt to modify running Windows
- Various sanity checks and fixes
- Many additional tweaks
- Modify hosts file to block telemetry servers

Like tiny11builder, oscdimg.exe is included for creating the ISO.  
Also included is an unattended answer file, which is used to bypass the MS account on OOBE and apply HKCU registry tweaks.  
I've tried to improve privacy a fair bit, but it only scratches the surface.  
I recommend using [O&O ShutUp10++](https://www.oo-software.com/en/shutup10) to do a better job.  
Protip:  Use Microsoft Store to install Firefox after you install Windows.

Tested on Windows 11 version 22H2 (22621.2428) amd64 and (22621.1702).  Other builds should mostly work.

#### Instructions to build ISO:

1. Download Windows 11 from [UUPDump](https://uupdump.net/) (don't use ESD compression) or from the Microsoft website (<https://www.microsoft.com/software-download/windows11>).
2. Mount the downloaded ISO image using Windows Explorer (double-click it)
3. Right-click ps_tiny11.ps1 and select 'Run with PowerShell' if you have Developer Mode enabled, otherwise open a terminal and run `.\ps_tiny11.ps1`, it will ask for Admin privileges.
4. Select the drive letter where the image is mounted
5. If installation image contains more than one version of Windows 11, select which one to process
6. Chill for a bit, yah?
7. After it's done, if shit didn't break, you will have ps_tiny11.iso

#### Instructions to modify currently running Windows 11:

1. Right-click ps_tiny11.ps1 and select 'Run with PowerShell' if you have Developer Mode enabled, otherwise open a terminal and run `.\ps_tiny11.ps1`, it will ask for Admin privileges.  Explorer will be restarted to apply changes.

#### What is removed:

Clipchamp,  
News,  
Weather,  
Xbox (although Xbox Identity provider is still here, so it should be possible to be reinstalled with no issues),  
GetHelp,  
GetStarted,  
Office Hub,  
Solitaire,  
PeopleApp,  
PowerAutomate,  
ToDo,  
Alarms,  
Mail and Calendar,  
Feedback Hub,  
Maps,  
Sound Recorder,  
Your Phone,  
Media Player,  
QuickAssist,  
Internet Explorer,    
OCR,  
Speech support,  
TTS,  
Media Player Legacy,  
Tablet PC Math,  
Wallpapers,  
Edge,  
OneDrive

#### Tweaks applied:

Remove Windows 11 hardware requirements,  
Disable Teams,  
Disable Sponsored apps,  
Enable local accounts,  
Disable reserved storage,  
Disable chat icon,  
Disable new right click context menu,  
Disable Search icon in taskbar,  
Disable Windows tips,  
Disable Explorer ads,  
Disable lockscreen ads,  
Disable Windows Platform Binary Table (untested)([source](https://www.powershellgallery.com/packages/Disable-WpbtExecution/1.0.5)),  
Dark mode

#### Group Policy tweaks([source](https://admx.help/?Category=Windows_11_2022&Policy=Microsoft.Policies.CloudContent::DisableWindowsConsumerFeatures)):

#### Changes to default security options are ***emphasized***, Windows Defender real-time protection etc. is still on by default

***Disable Windows Defender SmartScreen***,  
***Disable Windows Defender cloud protection***,  
***Turn off routine remediation (ask user what to do when malware is found)***,  
Turn off cloud consumer account state content,  
Turn off Automatic Download and Update of Map Data,    
Turn off cloud optimized content,  
Turn off Microsoft consumer experiences,  
Lowest telemetry setting,  
Do not allow sending intranet or internet history,  
Limit Diagnostic Log Collection,  
Limit Dump Collection,  
Turn off desktop gadgets,  
Turn off collection of InPrivate Filtering data,  
Disallow Microsoft Edge to pre-launch at Windows startup, when the system is idle, and each time Microsoft Edge is closed,  
Disallow Microsoft Edge to start and load the Start and New Tab page at Windows startup and each time Microsoft Edge is closed,  
Disable news and interests on the taskbar,  
Disable Cloud Search,  
Disable Cortana,  
Don't search the web or display web results in Search,  
Disable Cortana above lock screen,  
No auto-restart with logged on users for scheduled automatic updates installations,  
Disable widgets,  
Disable "Improve inking and typing recognition" AKA text input data collection,  
Don't launch privacy settings experience on user logon,  
Disable Windows Error Reporting

#### Hostnames added to hosts file ([source](https://learn.microsoft.com/en-us/windows/privacy/manage-windows-11-endpoints)):

business.bing.com,  
c.bing.com,  
th.bing.com,  
c-ring.msedge.net,  
fp.msedge.net,  
I-ring.msedge.net,  
s-ring.msedge.net,  
dual-s-ring.msedge.net,  
creativecdn.com,  
edgeassetservice.azureedge.net,  
r.bing.com,  
a-ring-fallback.msedge.net,  
fp-afd-nocache-ccp.azureedge.net,  
prod-azurecdn-akamai-iris.azureedge.net,  
widgetcdn.azureedge.net,  
widgetservice.azurefd.net,  
dmd.metaservices.microsoft.com,  
functional.events.data.microsoft.com,  
browser.events.data.msn.com,  
self.events.data.microsoft.com,  
v10.events.data.microsoft.com,  
telecommand.telemetry.microsoft.com,  
www.telecommandsvc.microsoft.com,  
checkappexec.microsoft.com,  
ping-edge.smartscreen.microsoft.com,  
data-edge.smartscreen.microsoft.com,  
nav-edge.smartscreen.microsoft.com,

#### How to Modify:

Top of [ps_tiny11.ps1](ps_tiny11.ps1) contains apps, packages, files and folders to remove, and hostnames to be blocked.  Comment out lines that you want to skip with '#'.

[installwim_patches.reg](installwim_patches.reg) contains the tweaks, comment out unwanted ones by adding ';' in front of them, they're labeled.

#### Known issues:

There's a [report](https://github.com/0xDEADFED5/ps_tiny11/issues/2) of XBox app connectivity issue due to the blocked telemetry servers in the hosts file.
Not sure which entry it is yet, but I've commented out a lot of the entries, I might've been a little too enthusiastic when I first made the list.

Disabling Windows Platform Binary Table may or may not work.  When using Xbox controller a window will pop up on game start pointing you to Microsoft Store to install Xbox crap.

I have code in there that should convert install.esd to install.wim, but it doesn't seem to do shit, so it's commented out.  Don't use ESD compression if you want to use this script.

#### Changelog:

31-Oct-2023:

- Updated registry tweaks and file/folder removal to be like this project, and added some tweaks from there: (<https://github.com/ianis58/tiny11builder/tree/main/tools>)  
- Removed the RunAsTI snippet and the failed attempt at the Teams registry tweak.   
- Replaced autoattend.xml with the one from (<https://github.com/bravomail/tinier11/blob/main/autounattend.xml>), thanks bravomail!
- WebExperience is no longer removed

07-Nov-2023:

- Reorganize code a bit, can now modify currently running Windows
- Group Policy tweaks added ([source](https://admx.help/?Category=Windows_11_2022&Policy=Microsoft.Policies.CloudContent::DisableWindowsConsumerFeatures))
- autounattend.xml now modifies registry to enable old context menu (do i need to add other tweaks there?)
- Modify hosts file to block telemetry servers ([source](https://learn.microsoft.com/en-us/windows/privacy/manage-windows-11-endpoints))

10-Dec-2023:

- Add NoRestart to pkg removal for online windows, stops nagging questions
- Clarify usage

13-Aug-2024:

- Don't mess with LA57 anymore
- Remove hosts file entries so less services are blocked

ps_tiny11

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README