# Austere Windows (2025-11-08) **URL:** \ **Category:** breadcrumbs\ **Created:** [November 8, 2025, 8:00am UTC](https://pluralist.net/t/austere-windows-2025-11-08/329 "2025-11-08T08:00:00Z")\ **Posts on this page:** 1\ **Page:** 1
**Author:** ![delyan](https://pluralist.net/user_avatar/pluralist.net/delyan/32/245_2.png) [@delyan](https://pluralist.net/u/delyan)\ **Post date:** [November 8, 2025, 8:00am UTC](https://pluralist.net/t/austere-windows-2025-11-08/329/1 "2025-11-08T08:00:00Z")
We use all operating system here at this lab. Of them all Windows is the most fitting for the job. Why? Because (see Principles) we: - want an OS that works - don’t care to recompile [the Kernel](https://kernel.org/) - want to focus on research and… not recompiling [the Kernel](https://kernel.org/) But Windows has issues. Here is how we fix these: - install Windows 11 with a **local account** : During Windows setup, disconnect all internet, press **Shift + F10** , run `OOBE\BYPASSNRO`, let the system reboot, then choose **“I don’t have internet” → “Continue with limited setup”** to create a local account. - install WinUtil and clean as much as possible: [GitHub - ChrisTitusTech/winutil: Chris Titus Tech's Windows Utility - Install Programs, Tweaks, Fixes, and Updates](https://github.com/ChrisTitusTech/winutil) - disable as much bloat as possible with this registry file (`clean.reg`): ```reg Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\CloudContent] "DisableWindowsSpotlightFeatures"=dword:00000001 "DisableSpotlightOnLockScreen"=dword:00000001 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager] "RotatingLockScreenEnabled"=dword:00000000 "RotatingLockScreenOverlayEnabled"=dword:00000000 "SubscribedContent-310093Enabled"=dword:00000000 "SubscribedContent-338387Enabled"=dword:00000000 "SubscribedContent-353694Enabled"=dword:00000000 "SubscribedContent-353696Enabled"=dword:00000000 [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge] "HubsSidebarEnabled"=dword:00000000 "ShowCopilotButton"=dword:00000000 ; ==== 1) Fully disable the Windows Search service (stops indexing engine) ==== [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WSearch] "Start"=dword:00000004 ; ==== 2) Machine-wide policies: block web/Bing/cloud search, Cortana, suggestions ==== [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search] "AllowCortana"=dword:00000000 "AllowCloudSearch"=dword:00000000 "ConnectedSearchUseWeb"=dword:00000000 "ConnectedSearchUseWebOverMeteredConnections"=dword:00000000 "DisableWebSearch"=dword:00000001 "AllowSearchToUseLocation"=dword:00000000 [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Explorer] "DisableSearchBoxSuggestions"=dword:00000001 ; ==== 3) Per-user policies (set for current user as well) ==== [HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Windows Search] "AllowCloudSearch"=dword:00000000 "ConnectedSearchUseWeb"=dword:00000000 "ConnectedSearchUseWebOverMeteredConnections"=dword:00000000 "DisableWebSearch"=dword:00000001 "AllowSearchToUseLocation"=dword:00000000 [HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Explorer] "DisableSearchBoxSuggestions"=dword:00000001 ; ==== 4) Legacy/user knobs (kept for completeness) ==== [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Search] "BingSearchEnabled"=dword:00000000 "CortanaConsent"=dword:00000000 "AllowSearchToUseLocation"=dword:00000000 ; ====================================================== ; Reduce Windows Defender background load (safe version) ; ====================================================== ; --- Exclude common heavy-use folders from scanning --- ;[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths] ;"C:\\SuperMemo"="" ;"C:\\Projects"="" ;"C:\\Builds"="" ;"C:\\Source"="" ;"C:\\" ; --- Disable scheduled scans (manual scans still possible) --- [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Scan] "DisableScheduleScan"=dword:00000001 ; --- Disable sample submission and telemetry --- [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Spynet] "SubmitSamplesConsent"=dword:00000000 "SpynetReporting"=dword:00000000 ; --- Prevent background maintenance scans when idle --- [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Scan] "DisableCatchupFullScan"=dword:00000001 "DisableCatchupQuickScan"=dword:00000001 ; --- Disable Defender cache maintenance --- [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\MpEngine] "MpCloudBlockLevel"=dword:00000000 "MpCloudBlockTimeout"=dword:00000000 ; ===== 1) Disable Windows Widgets feature (policy) ===== ; GPO path: Computer Configuration > Administrative Templates > Windows Components > Widgets ; Effect: Widgets backend is disabled system-wide. [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Dsh] "AllowNewsAndInterests"=dword:00000000 ; (Optional) Hide the Widgets button on taskbar for current user ;[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced] ;"TaskbarDa"=dword:00000000 ; ===== 2) Disable Windows Copilot (Win+C, taskbar entry) ===== ; Works per-user and machine-wide. Use both keys for completeness. [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsCopilot] "TurnOffWindowsCopilot"=dword:00000001 [HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows\WindowsCopilot] "TurnOffWindowsCopilot"=dword:00000001 ; ===== 3) Disable Microsoft Edge Sidebar & Copilot icon ===== Hides the Edge sidebar (where Copilot lives) and the Copilot toolbar icon. [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge] "HubsSidebarEnabled"=dword:00000000 "Microsoft365CopilotChatIconEnabled"=dword:00000000 ``` - disable copilot with this reg file: ```reg Windows Registry Editor Version 5.00 ; === Turn OFF Windows Copilot (policy) === [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsCopilot] "TurnOffWindowsCopilot"=dword:00000001 [HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows\WindowsCopilot] "TurnOffWindowsCopilot"=dword:00000001 ; === Hide Copilot button on the taskbar (cover both names used across builds) === [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced] "TaskbarCopilot"=dword:00000000 "ShowCopilotButton"=dword:00000000 ; === Reduce web suggestions in Windows Search === [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search] "DisableSearchBoxSuggestions"=dword:00000001 "ConnectedSearchUseWeb"=dword:00000000 ; === Disable Edge Copilot/Discover/Sidebar (unused keys are safely ignored) === [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge] "HubsSidebarEnabled"=dword:00000000 "DiscoverPageContextEnabled"=dword:00000000 "EdgeCopilotEnabled"=dword:00000000 "BingChatEnabled"=dword:00000000 "EnterpriseChatEnabled"=dword:00000000 "StandaloneHubsSidebarEnabled"=dword:00000000 ``` - disable defender (yes, that’s right!) with this PowerShell: ```ps2 ;; disable UWP background tasks (via registry or PowerShell) if you don’t use Store apps: Get-AppxPackage | Remove-AppxPackage ;;to quiet Defender scanning system files repeatedly: Set-MpPreference -DisableRealtimeMonitoring $true ;; disable services Set-Service wuauserv -StartupType Manual Set-Service SysMain -StartupType Disabled ;; disable Defender Set-MpPreference -DisableRealtimeMonitoring $true Set-MpPreference -DisableBehaviorMonitoring $true Set-MpPreference -DisableIOAVProtection $true Set-MpPreference -DisableScriptScanning $true Set-MpPreference -DisableIntrusionPreventionSystem $true ;; disable defender updates Stop-Service WinDefend -Force Set-Service WinDefend -StartupType Disabled ;; remove defender dism /Online /Disable-Feature /FeatureName:Windows-Defender-Features /Remove /NoRestart ;; cleanup Defender Remove-Item "C:\ProgramData\Microsoft\Windows Defender" -Recurse -Force Remove-Item "C:\Program Files\Windows Defender" -Recurse -Force ``` # Sotware - install **only** this software: - [Sumatra PDF](https://www.sumatrapdfreader.org/free-pdf-reader) - Firefox - Notepad++ / Sublime - Far Manager - [Alacritty](https://alacritty.org/) or Windows Terminal (`winget install --id Microsoft.WindowsTerminal -e`) That’s it!