We use all operating system here at this lab. Of them all Windows is the most fitting for the job.
Why?
Because (see Principles) we:
- want an OS that works
- don’t care to recompile the Kernel
- want to focus on research and… not recompiling the Kernel
But Windows has issues.
Here is how we fix these:
- install Windows 11 with a local account: During Windows setup, disconnect all internet, press Shift + F10, run
OOBE\BYPASSNRO, let the system reboot, then choose “I don’t have internet” → “Continue with limited setup” to create a local account. - install WinUtil and clean as much as possible: GitHub - ChrisTitusTech/winutil: Chris Titus Tech's Windows Utility - Install Programs, Tweaks, Fixes, and Updates
- disable as much bloat as possible with this registry file (
clean.reg):
Windows Registry Editor Version 5.00
[HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CloudContent]
"DisableWindowsSpotlightFeatures"=dword:00000001
"DisableSpotlightOnLockScreen"=dword:00000001
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager]
"RotatingLockScreenEnabled"=dword:00000000
"RotatingLockScreenOverlayEnabled"=dword:00000000
"SubscribedContent-310093Enabled"=dword:00000000
"SubscribedContent-338387Enabled"=dword:00000000
"SubscribedContent-353694Enabled"=dword:00000000
"SubscribedContent-353696Enabled"=dword:00000000
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge]
"HubsSidebarEnabled"=dword:00000000
"ShowCopilotButton"=dword:00000000
; ==== 1) Fully disable the Windows Search service (stops indexing engine) ====
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WSearch]
"Start"=dword:00000004
; ==== 2) Machine-wide policies: block web/Bing/cloud search, Cortana, suggestions ====
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search]
"AllowCortana"=dword:00000000
"AllowCloudSearch"=dword:00000000
"ConnectedSearchUseWeb"=dword:00000000
"ConnectedSearchUseWebOverMeteredConnections"=dword:00000000
"DisableWebSearch"=dword:00000001
"AllowSearchToUseLocation"=dword:00000000
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Explorer]
"DisableSearchBoxSuggestions"=dword:00000001
; ==== 3) Per-user policies (set for current user as well) ====
[HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Windows Search]
"AllowCloudSearch"=dword:00000000
"ConnectedSearchUseWeb"=dword:00000000
"ConnectedSearchUseWebOverMeteredConnections"=dword:00000000
"DisableWebSearch"=dword:00000001
"AllowSearchToUseLocation"=dword:00000000
[HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Explorer]
"DisableSearchBoxSuggestions"=dword:00000001
; ==== 4) Legacy/user knobs (kept for completeness) ====
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Search]
"BingSearchEnabled"=dword:00000000
"CortanaConsent"=dword:00000000
"AllowSearchToUseLocation"=dword:00000000
; ======================================================
; Reduce Windows Defender background load (safe version)
; ======================================================
; --- Exclude common heavy-use folders from scanning ---
;[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths]
;"C:\\SuperMemo"=""
;"C:\\Projects"=""
;"C:\\Builds"=""
;"C:\\Source"=""
;"C:\\"
; --- Disable scheduled scans (manual scans still possible) ---
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Scan]
"DisableScheduleScan"=dword:00000001
; --- Disable sample submission and telemetry ---
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Spynet]
"SubmitSamplesConsent"=dword:00000000
"SpynetReporting"=dword:00000000
; --- Prevent background maintenance scans when idle ---
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Scan]
"DisableCatchupFullScan"=dword:00000001
"DisableCatchupQuickScan"=dword:00000001
; --- Disable Defender cache maintenance ---
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\MpEngine]
"MpCloudBlockLevel"=dword:00000000
"MpCloudBlockTimeout"=dword:00000000
; ===== 1) Disable Windows Widgets feature (policy) =====
; GPO path: Computer Configuration > Administrative Templates > Windows Components > Widgets
; Effect: Widgets backend is disabled system-wide.
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Dsh]
"AllowNewsAndInterests"=dword:00000000
; (Optional) Hide the Widgets button on taskbar for current user
;[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
;"TaskbarDa"=dword:00000000
; ===== 2) Disable Windows Copilot (Win+C, taskbar entry) =====
; Works per-user and machine-wide. Use both keys for completeness.
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsCopilot]
"TurnOffWindowsCopilot"=dword:00000001
[HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows\WindowsCopilot]
"TurnOffWindowsCopilot"=dword:00000001
; ===== 3) Disable Microsoft Edge Sidebar & Copilot icon =====
Hides the Edge sidebar (where Copilot lives) and the Copilot toolbar icon.
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge]
"HubsSidebarEnabled"=dword:00000000
"Microsoft365CopilotChatIconEnabled"=dword:00000000
- disable copilot with this reg file:
Windows Registry Editor Version 5.00
; === Turn OFF Windows Copilot (policy) ===
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsCopilot]
"TurnOffWindowsCopilot"=dword:00000001
[HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows\WindowsCopilot]
"TurnOffWindowsCopilot"=dword:00000001
; === Hide Copilot button on the taskbar (cover both names used across builds) ===
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced]
"TaskbarCopilot"=dword:00000000
"ShowCopilotButton"=dword:00000000
; === Reduce web suggestions in Windows Search ===
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search]
"DisableSearchBoxSuggestions"=dword:00000001
"ConnectedSearchUseWeb"=dword:00000000
; === Disable Edge Copilot/Discover/Sidebar (unused keys are safely ignored) ===
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge]
"HubsSidebarEnabled"=dword:00000000
"DiscoverPageContextEnabled"=dword:00000000
"EdgeCopilotEnabled"=dword:00000000
"BingChatEnabled"=dword:00000000
"EnterpriseChatEnabled"=dword:00000000
"StandaloneHubsSidebarEnabled"=dword:00000000
- disable defender (yes, that’s right!) with this PowerShell:
;; disable UWP background tasks (via registry or PowerShell) if you don’t use Store apps:
Get-AppxPackage | Remove-AppxPackage
;;to quiet Defender scanning system files repeatedly:
Set-MpPreference -DisableRealtimeMonitoring $true
;; disable services
Set-Service wuauserv -StartupType Manual
Set-Service SysMain -StartupType Disabled
;; disable Defender
Set-MpPreference -DisableRealtimeMonitoring $true
Set-MpPreference -DisableBehaviorMonitoring $true
Set-MpPreference -DisableIOAVProtection $true
Set-MpPreference -DisableScriptScanning $true
Set-MpPreference -DisableIntrusionPreventionSystem $true
;; disable defender updates
Stop-Service WinDefend -Force
Set-Service WinDefend -StartupType Disabled
;; remove defender
dism /Online /Disable-Feature /FeatureName:Windows-Defender-Features /Remove /NoRestart
;; cleanup Defender
Remove-Item "C:\ProgramData\Microsoft\Windows Defender" -Recurse -Force
Remove-Item "C:\Program Files\Windows Defender" -Recurse -Force
Sotware
- install only this software:
- Sumatra PDF
- Firefox
- Notepad++ / Sublime
- Far Manager
- Alacritty or Windows Terminal (
winget install --id Microsoft.WindowsTerminal -e)
That’s it!