Made for: Windows 11 22H2
Last update: 2022-11-14

This covers all the steps I personally go though when performing a clean install of Windows 11. My aims are the following:

• As much automation as possible (portable programs, quick import of settings)
• A clean UI/UX (I disable/uninstall most of the bloat that comes with Windows)
• As much privacy as possible (see my Group Policy edits)
• Prioritizing native software (to break as little things as possible) or FOSS

• Download the official iso file from Microsoft
• Create bootable USB with Rufus, leave everything as default (GPT, UEFI, NTFS), and customize the Windows User Experience: tick everything
  • Benefits: faster than Microsoft's tool, makes the use of a local account easier, skips privacy questions (all will be off)
• Naviagate to /sources in and add the ei.cfg attached to this repo.
  • Benefits: it will bypass your current Windows key and allow you to choose Windows Education/Enterprise instead of Windows Home.
    • Education edition is my favorite as it has all the features from Enterprise but is also included in the multi-edition iso available from Windows without an account, unlike the enterprise iso that is hard to get. You can fin a comparison of all versions here:
• Reboot and install Windows. Make sure to delete all your partitions (except the data one, if you have one) and to choose the professional edition.

• Platform tools - ADB/Fastboot - mandatory to tinker with my Android phones
• Audacity - Tool to analyse/edit audio files (last update that doesn't include telemetry)
• Everything - Locate files and folders by name instantly
• Foobar2000 - My favorite music player by far
• HandBrake - Favorite video converter
• JPEGView - extremely fast and lightweight image viewer (fork)
• KeePassXC - Cross-Platform Password Manager
• LameXP - Multi-format audio file converter
• LanXchange - Configuration-free, cross-platform file transfers for your local network
• MP3TAG - One of my favorite tag editor for music
• MPC-HC - One of my favorite video player (fork)
• MPV - My favorite video player
• Notepad++ - My favorite text editor
• qBittorrent - Favorite torrent client
• ShareX - Favorite screen capture tools, many other features
• simplewall - great firewall
• Spek - Acoustic spectrum analyser (fork)
• SumatraPDF - My favorite PDF viewer
• TagScanner - Another one of my favorite tag editor for music
• WinCDEmu - CD/DVD/BD emulator
• yt-dlp - Easily download video/audio files from YouTube (fork)

• BleachBit - Disk space cleaner, privacy manager, and computer system optimizer
• HWiNFO - System Information
• Driver Store Explorer [RAPR] - Manage drivers

• Package managers
  • Chocolatey - see packages here
    • Installation (PowerShell with admin rights)
      • Set-ExecutionPolicy AllSigned
      • Set-ExecutionPolicy Bypass -Scope Process -Force; [System.Net.ServicePointManager]::SecurityProtocol = [System.Net.ServicePointManager]::SecurityProtocol -bor 3072; iex ((New-Object System.Net.WebClient).DownloadString('https://community.chocolatey.org/install.ps1'))
      • Command to install all programs: choco install 7zip eartrumpet firefox f.lux jre8 nextcloud powertoys soulseek teamviewer twinkle-tray -y
      • See installed programs: choco list --localonly
  • Winget - see packages here
    • Command to install all programs: winget install 7zip.7zip && winget install File-New-Project.EarTrumpet && winget install Mozilla.Firefox && winget install flux.flux && winget install Oracle.JavaRuntimeEnvironment && winget install Nextcloud.NextcloudDesktop && winget install Soulseek.SoulseekQt && winget install TeamViewer.TeamViewer && winget install xanderfrangos.twinkletray
• 7-zip - Favorite file archiver
• EarTrumpet - Volume Control for Windows (Windows Store)
• Firefox - Main browser
  • Add-ons:
    • uBlock Origin
    • Bypass Paywalls Clean
    • SponsorBlock
    • Firefox Multi-Account Containers
    • A working twitch adblocker, see TwitchAdSolutions
• f.lux - My favorite nightlight software on Windows
• Java - Needed for some programs
• NextCloud - Cloud Client
• PowerToys - Useful system utilities
• Soulseek - To share and download music files that I legally own
• TeamViewer - When I need to support a relative with IT stuff
• Twinkle Tray - Easily manage the brightness of your monitors in Windows from the system tray

• Battery Percentage Icon - See your battery percentage in the system tray (Windows Store)

• ExplorerPatcher - Enhance the working environment on Windows (available on Winget)
• FreeFileSync - My favorite file synchronization tool
• Microsoft Office - Office suite (direct link)
• Sublte - Subtitles downloader

• Sources: 1, 2, 3
• Abbreviations:
  • (D) = disabled
  • (E) = enabled
  • (E+C) = enabled, configuration is necessary
• Benefits of using GPE instead of third-party programs or regedit
  • Easier to setup after a clean install (no need to tick all boxes one by one).
  • All GP edits are up to date, so there's no risk to mess with regedit by adding unnecessary keys.
  • Changes are easier to track than on regedit.
  • No third-party software = more reliable, more secure, more private.
  • GPE includes meaningful descriptions, wheras regedit doesn't offer any. Third-party softwares' are usually not very accurate or up to date.

• Backup: copy all files/folders from C:\Windows\System32\GroupPolicy
• Restore/import:
  • Paste these files to your new installation in the same folder
  • You can also directly import my config that is attached to this repository
  • If you want to update policies without restarting, run this command in CMD (it's not necessary to run it as administrator): gpupdate /force

• Uninstall all unnecessary preinstalled provisioned user apps
• Local Security Policy
  • Ask for password for administrator rights: Local Policies → Security Options → User Account Control: Behavior of the elevation prompt for administrators in Admin Approval mode → Prompt for credentials.
• services.msc: services to disable
  • Connected User Experiences and Telemetry
• Change default app for different file types
  • Video player: mp4, mov, avi, mkv, webm, flv, html5
  • Music player: mp3, aac, flac, ogg, opus
  • PDF reader: pdf
  • image viewer: png, jpg, jpeg, gif, webp, tiff, bmp, heif, xvg
  • Text viewer: txt
  • Torrent client: .torrent
• Optional features
  • Facial Recognition
  • Math Recognizer
  • Internet Explorer mode
  • Steps recorder
  • WMIC
  • Windows Media Player Legacy
  • Windows PowerShell ISE
  • WordPad
• Most important Windows Settings
  • System → Power
  • System → Multitasking
  • System → Clipboard
  • Bluetooth & devices → Mouse → Additional mouse settings → pointer options → disable enhance pointer precision
  • Bluetooth & devices → Touchpad
  • Network & interent → Wi-Fi / Ethernet → Hardware properties → Edit DNS (e.g. 1.1.1.1 & 1.0.0.1 Encrypted)
  • Turn on BitLocker
  • Privacy & security → open Windows Security → disable Tamper Protection
  • Language & Region → Regional format: English (World) (allows to use DD/MM/YYYY format and programs will be installed in English instead of your local language)