#This function finds any AppX/AppXProvisioned package and uninstalls it, except for Freshpaint, Windows Calculator, Windows Store, and Windows Photos. #Also, to note - This does NOT remove essential system services/software/etc such as .NET framework installations, Cortana, Edge, etc. #This is the switch parameter for running this script as a 'silent' script, for use in MDT images or any type of mass deployment without user interaction. param ([switch]$Debloat) param ([switch]$SysPrep) param ([switch]$StopEdgePDF) #This will run get-appxpackage | remove-appxpackage which is required for sysprep to provision the apps. function Begin-SysPrep { param ([switch]$SysPrep) Get-AppxPackage | Remove-AppxPackage -ErrorAction SilentlyContinue } #Creates a PSDrive to be able to access the 'HKCR' tree New-PSDrive -Name HKCR -PSProvider Registry -Root HKEY_CLASSES_ROOT function Start-Debloat { param ([switch]$Debloat) #Removes AppxPackages #Credit to Reddit user /u/GavinEke for a modified version of my whitelist code [regex]$WhitelistedApps = 'Microsoft.Paint3D|Microsoft.WindowsCalculator|Microsoft.WindowsStore|Microsoft.Windows.Photos' Get-AppxPackage -AllUsers | Where-Object { $_.Name -notmatch $WhitelistedApps } | Remove-AppxPackage -ErrorAction SilentlyContinue Get-AppxProvisionedPackage -Online | Where-Object { $_.PackageName -notmatch $WhitelistedApps } | Remove-AppxProvisionedPackage -Online -ErrorAction SilentlyContinue } function Remove-Keys { param ([switch]$Debloat) #These are the registry keys that it will delete. $Keys = @( #Remove Background Tasks "HKCR:\Extensions\ContractId\Windows.BackgroundTasks\PackageId\46928bounde.EclipseManager_2.2.4.51_neutral__a5h4egax66k6y" "HKCR:\Extensions\ContractId\Windows.BackgroundTasks\PackageId\ActiproSoftwareLLC.562882FEEB491_2.6.18.18_neutral__24pqs290vpjk0" "HKCR:\Extensions\ContractId\Windows.BackgroundTasks\PackageId\Microsoft.MicrosoftOfficeHub_17.7909.7600.0_x64__8wekyb3d8bbwe" "HKCR:\Extensions\ContractId\Windows.BackgroundTasks\PackageId\Microsoft.PPIProjection_10.0.15063.0_neutral_neutral_cw5n1h2txyewy" "HKCR:\Extensions\ContractId\Windows.BackgroundTasks\PackageId\Microsoft.XboxGameCallableUI_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy" "HKCR:\Extensions\ContractId\Windows.BackgroundTasks\PackageId\Microsoft.XboxGameCallableUI_1000.16299.15.0_neutral_neutral_cw5n1h2txyewy" #Windows File "HKCR:\Extensions\ContractId\Windows.File\PackageId\ActiproSoftwareLLC.562882FEEB491_2.6.18.18_neutral__24pqs290vpjk0" #Registry keys to delete if they aren't uninstalled by RemoveAppXPackage/RemoveAppXProvisionedPackage "HKCR:\Extensions\ContractId\Windows.Launch\PackageId\46928bounde.EclipseManager_2.2.4.51_neutral__a5h4egax66k6y" "HKCR:\Extensions\ContractId\Windows.Launch\PackageId\ActiproSoftwareLLC.562882FEEB491_2.6.18.18_neutral__24pqs290vpjk0" "HKCR:\Extensions\ContractId\Windows.Launch\PackageId\Microsoft.PPIProjection_10.0.15063.0_neutral_neutral_cw5n1h2txyewy" "HKCR:\Extensions\ContractId\Windows.Launch\PackageId\Microsoft.XboxGameCallableUI_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy" "HKCR:\Extensions\ContractId\Windows.Launch\PackageId\Microsoft.XboxGameCallableUI_1000.16299.15.0_neutral_neutral_cw5n1h2txyewy" #Scheduled Tasks to delete "HKCR:\Extensions\ContractId\Windows.PreInstalledConfigTask\PackageId\Microsoft.MicrosoftOfficeHub_17.7909.7600.0_x64__8wekyb3d8bbwe" #Windows Protocol Keys "HKCR:\Extensions\ContractId\Windows.Protocol\PackageId\ActiproSoftwareLLC.562882FEEB491_2.6.18.18_neutral__24pqs290vpjk0" "HKCR:\Extensions\ContractId\Windows.Protocol\PackageId\Microsoft.PPIProjection_10.0.15063.0_neutral_neutral_cw5n1h2txyewy" "HKCR:\Extensions\ContractId\Windows.Protocol\PackageId\Microsoft.XboxGameCallableUI_1000.15063.0.0_neutral_neutral_cw5n1h2txyewy" "HKCR:\Extensions\ContractId\Windows.Protocol\PackageId\Microsoft.XboxGameCallableUI_1000.16299.15.0_neutral_neutral_cw5n1h2txyewy" #Windows Share Target "HKCR:\Extensions\ContractId\Windows.ShareTarget\PackageId\ActiproSoftwareLLC.562882FEEB491_2.6.18.18_neutral__24pqs290vpjk0" ) #This writes the output of each key it is removing and also removes the keys listed above. foreach ($Key in $Keys) { Write-Output "Removing $Key from registry" Remove-Item $Key -Recurse -ErrorAction SilentlyContinue } } function Protect-Privacy { param ([switch]$Debloat) #Creates a PSDrive to be able to access the 'HKCR' tree New-PSDrive -Name HKCR -PSProvider Registry -Root HKEY_CLASSES_ROOT #Disables Windows Feedback Experience Write-Output "Disabling Windows Feedback Experience program" $Advertising = 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\AdvertisingInfo' if (Test-Path $Advertising) { Set-ItemProperty $Advertising -Name Enabled -Value 0 -Verbose } #Stops Cortana from being used as part of your Windows Search Function Write-Output "Stopping Cortana from being used as part of your Windows Search Function" $Search = 'HKLM:\SOFTWARE\Policies\Microsoft\Windows\Windows Search' if (Test-Path $Search) { Set-ItemProperty $Search -Name AllowCortana -Value 0 -Verbose } #Stops the Windows Feedback Experience from sending anonymous data Write-Output "Stopping the Windows Feedback Experience program" $Period1 = 'HKCU:\Software\Microsoft\Siuf' $Period2 = 'HKCU:\Software\Microsoft\Siuf\Rules' $Period3 = 'HKCU:\Software\Microsoft\Siuf\Rules\PeriodInNanoSeconds' if (!(Test-Path $Period3)) { mkdir $Period1 -ErrorAction SilentlyContinue mkdir $Period2 -ErrorAction SilentlyContinue mkdir $Period3 -ErrorAction SilentlyContinue New-ItemProperty $Period3 -Name PeriodInNanoSeconds -Value 0 -Verbose -ErrorAction SilentlyContinue } Write-Output "Adding Registry key to prevent bloatware apps from returning" #Prevents bloatware applications from returning $registryPath = "HKLM:\SOFTWARE\Policies\Microsoft\Windows\CloudContent" if (!(Test-Path $registryPath)) { mkdir $registryPath -ErrorAction SilentlyContinue New-ItemProperty $registryPath -Name DisableWindowsConsumerFeatures -Value 1 -Verbose -ErrorAction SilentlyContinue } Write-Output "Setting Mixed Reality Portal value to 0 so that you can uninstall it in Settings" $Holo = 'HKCU:\Software\Microsoft\Windows\CurrentVersion\Holographic' if (Test-Path $Holo) { Set-ItemProperty $Holo -Name FirstRunSucceeded -Value 0 -Verbose } #Disables live tiles Write-Output "Disabling live tiles" $Live = 'HKCU:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\PushNotifications' if (!(Test-Path $Live)) { mkdir $Live -ErrorAction SilentlyContinue New-ItemProperty $Live -Name NoTileApplicationNotification -Value 1 -Verbose } #Turns off Data Collection via the AllowTelemtry key by changing it to 0 Write-Output "Turning off Data Collection" $DataCollection = 'HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\DataCollection' if (Test-Path $DataCollection) { Set-ItemProperty $DataCollection -Name AllowTelemetry -Value 0 -Verbose } #Disables People icon on Taskbar Write-Output "Disabling People icon on Taskbar" $People = 'HKCU:\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced\People' if (!(Test-Path $People)) { mkdir $People -ErrorAction SilentlyContinue New-ItemProperty $People -Name PeopleBand -Value 0 -Verbose } #Disables suggestions on start menu Write-Output "Disabling suggestions on the Start Menu" $Suggestions = 'HKCU:\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager' if (Test-Path $Suggestions) { Set-ItemProperty $Suggestions -Name SystemPaneSuggestionsEnabled -Value 0 -Verbose } #Loads the registry keys/values below into the NTUSER.DAT file which prevents the apps from redownloading. Credit to a60wattfish reg load HKU\Default_User C:\Users\Default\NTUSER.DAT Set-ItemProperty -Path Registry::HKU\Default_User\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager -Name SystemPaneSuggestionsEnabled -Value 0 Set-ItemProperty -Path Registry::HKU\Default_User\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager -Name PreInstalledAppsEnabled -Value 0 Set-ItemProperty -Path Registry::HKU\Default_User\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager -Name OemPreInstalledAppsEnabled -Value 0 reg unload HKU\Default_User #Disables scheduled tasks that are considered unnecessary Write-Output "Disabling scheduled tasks" Get-ScheduledTask -TaskName XblGameSaveTaskLogon | Disable-ScheduledTask Get-ScheduledTask -TaskName XblGameSaveTask | Disable-ScheduledTask Get-ScheduledTask -TaskName Consolidator | Disable-ScheduledTask Get-ScheduledTask -TaskName UsbCeip | Disable-ScheduledTask Get-ScheduledTask -TaskName DmClient | Disable-ScheduledTask Get-ScheduledTask -TaskName DmClientOnScenarioDownload | Disable-ScheduledTask } function Stop-EdgePDF { param ([switch]$StopEdgePDF) #Stops edge from taking over as the default .PDF viewer Write-Output "Stopping Edge from taking over as the default .PDF viewer" $NoOpen = 'HKCR:\.pdf' if (!(Get-ItemProperty $NoOpen -Name NoOpenWith)) { New-ItemProperty $NoOpen -Name NoOpenWith -Verbose -ErrorAction SilentlyContinue } $NoStatic = 'HKCR:\.pdf' if (!(Get-ItemProperty $NoStatic -Name NoStaticDefaultVerb)) { New-ItemProperty $NoStatic -Name NoStaticDefaultVerb -Verbose -ErrorAction SilentlyContinue } $NoOpen = 'HKCR:\.pdf\OpenWithProgids' if (!(Get-ItemProperty $NoOpen -Name NoOpenWith)) { New-ItemProperty $NoOpen -Name NoOpenWith -Verbose -ErrorAction SilentlyContinue } $NoStatic = 'HKCR:\.pdf\OpenWithProgids' if (!(Get-ItemProperty $NoStatic -Name NoStaticDefaultVerb)) { New-ItemProperty $NoStatic -Name NoStaticDefaultVerb -Verbose -ErrorAction SilentlyContinue } $NoOpen = 'HKCR:\.pdf\OpenWithList' if (!(Get-ItemProperty $NoOpen -Name NoOpenWith)) { New-ItemProperty $NoOpen -Name NoOpenWith -Verbose -ErrorAction SilentlyContinue } $NoStatic = 'HKCR:\.pdf\OpenWithList' if (!(Get-ItemProperty $NoStatic -Name NoStaticDefaultVerb)) { New-ItemProperty $NoStatic -Name NoStaticDefaultVerb -Verbose -ErrorAction SilentlyContinue } #Appends an underscore '_' to the Registry key for Edge $Edge = 'HKCR:\AppXd4nrz8ff68srnhf9t5a8sbjyar1cr723' if (Test-Path $Edge) { Set-Item $Edge AppXd4nrz8ff68srnhf9t5a8sbjyar1cr723_ -Verbose } } function FixWhitelistedApps { param ([switch]$Debloat) if (!(Get-AppxPackage -AllUsers | Select-Object Microsoft.Paint3D,Microsoft.WindowsCalculator,Microsoft.WindowsStore,Microsoft.Windows.Photos)) { #Credit to abulgatz for the 4 lines of code Get-AppxPackage -AllUsers Microsoft.Paint3D | ForEach-Object { Add-AppxPackage -DisableDevelopmentMode -Register "$($_.InstallLocation)\AppXManifest.xml" } Get-AppxPackage -AllUsers Microsoft.WindowsCalculator | ForEach-Object { Add-AppxPackage -DisableDevelopmentMode -Register "$($_.InstallLocation)\AppXManifest.xml" } Get-AppxPackage -AllUsers Microsoft.WindowsStore | ForEach-Object { Add-AppxPackage -DisableDevelopmentMode -Register "$($_.InstallLocation)\AppXManifest.xml" } Get-AppxPackage -AllUsers Microsoft.Windows.Photos | ForEach-Object { Add-AppxPackage -DisableDevelopmentMode -Register "$($_.InstallLocation)\AppXManifest.xml" } } } Write-Output "Initiating Sysprep" Begin-SysPrep Write-Output "Removing bloatware apps." Start-Debloat Write-Output "Removing leftover bloatware registry keys." Remove-Keys Write-Output "Checking to see if any Whitelisted Apps were removed, and if so re-adding them." Write-Output "Stopping telemetry, disabling unneccessary scheduled tasks, and preventing bloatware from returning." Protect-Privacy Write-Output "Stopping Edge from taking over as the default PDF Viewer." Stop-EdgePDF Write-Output "Finished all tasks."