How to install install Windows 10 as clean as possible (kill all the telemetry and cloud crap) - Updated 7/29/20
Posted: Sat Apr 22, 2017 11:05 am
- UPDATED 1/18/19: Added new links for Open Shell & Spybot Anti-Beacon, and links to defer updates in Win10 Pro. Updated some of the links.
- UPDATED 5/9/2019: Added note about more control over updates in build 1903
- UPDATED 11/19/2019: Added option to disable Cortana entirely from Win 10 Pro's Group Policy Editor
- UPDATED 7/29/20: Added option to switch Windows Update to manual using GPEDIT in Win10 Pro
- UPDATED 6/12/21: More detailed instructions for disabling auto updates via Group Policy (can still be run manually) and disabling auto driver updates.
I've discussed this in other posts but never really written a walkthru. This won't be detailed as most of you are tech savvy enough to understand it, or Google anything you don't:
MAKE YOUR USER A LOCAL USER:
A Local Account is the type of account we're all familiar with from Win7 and prior. Since Win8, Microsoft would prefer you use a Microsoft Account. If you're doing an upgrade from Win7, then a local account will be the default. If you're doing a clean install or buying a new PC, then Win10 wants to make you log in with an MS Account, and this is what links your PC to all the cloud crap. When you are asked to setup an MS Account, there should be a small link at the bottom of the page to "Skip this step" and then you are offered the option to create a local account: https://www.austintechnology.com.au/log ... t-account/
EVEN EASIER: When you first setup Win10 DO NOT connect it to the Internet (when it asks to connect to your Wifi, just skip it). If Win10 can't talk to the mothership, it defaults to setting you up as a local user and skips setting up all the social/phone home crap.
You can also switch to a local account later if you accidentally setup an MS account, or vice a versa: https://www.zdnet.com/article/windows-1 ... t-account/
INSTALL OPEN SHELL (formerly Classic Shell):
This not only gets rid of the silly new Tile based Start menu, and restores the classic Win7-style Start menu, but also bypasses and disables a lot of the cloud search and Cortana crap, as well as kills the embedded MS app advertising in the Start Menu. By tweaking the Classic Shell settings you can make your start menu look, feel and function EXACTLY like it did in Win7 (in Classic Shell settings Show All Settings -> Skin -> Windows Aero). I happen to prefer Open Shell, and it's free, but there's other Start Menu replacements out there as well like Start10 (not free, but only $5).
https://open-shell.github.io/Open-Shell-Menu/
NOTE: Open Shell will occasionally give you a pop-up asking for permission to install an update, or to reconfigure itself after a major Windows update. It's safe to allow that.
DISABLE CORTANA FROM THE GROUP POLICY EDITOR (WIN10 PRO ONLY):
Open GPEDIT.MSC and change the following setting: Computer Configuration > Administrative Templates > Windows Components > Search > Allow Cortana = Disabled
RE-ASSIGN DEFAULT ASSOCIATIONS:
Go to the Windows Control Panel, do a search for "Associations". Look for the page that lets you set default file associations. Make whatever video player you want as the default instead of the silly XBox-based modern video player (Windows Media Player or VLC, etc). Same for the music player instead of the stupid Groove player.
I also prefer the old Photo Viewer from Win7, which is still available if you upgraded from Win7 or 8, but requires a registry hack to enable if you did a clean install of Win10:
https://www.cnet.com/how-to/how-to-get- ... indows-10/
I also don't like the built-in PDF reader, and if you don't like it either, then install the reader of your choice (Chrome has an excellent built-in PDF reader now, or download Sumatra or Adobe Reader - whatever you prefer) and make it the default.
USE CHROME OR FIREFOX:
For the love of GOD don't use Edge unless you upgrade it to the new Chromium version (should auto install if you're on Win10 build 2004 or later, but you can download it separately). Also, don't use Bing to search for Chrome and Firefox downloads (Edge, of course, uses Bing by default). Unless Microsoft has fixed this, it takes you to fake download sites. Make Chrome or Firefox your default browser, and use Google or DuckDuckGo as your search engine.
Chrome download: https://www.google.com/chrome/
Firefox download: https://www.mozilla.org/en-US/firefox/
INSTALL SPYBOT ANTI-BEACON:
This kills all the phone-home telemetry without having to wade through all the privacy settings in Windows (and kills some things the privacy settings won't let you kill). It also blocks OneDrive ads in File Explorer. The new interface is a little confusing. Just click on "Blocked Telemetry Options", click "Recommended" then click "Done".
DEFER UPDATES (Win 10 Pro only):
If you have Win10 Pro you can defer "feature updates" (the every 6 month major update that is like what a Service Pack used to be) for up to a year. You can also defer security updates for 30 days. With all the buggy updates, better to let everyone else be the guinea pigs first: https://www.zdnet.com/article/windows-1 ... g-upgrade/
You don't have the option to defer on Win10 Home. Consider buying the Pro upgrade through the Microsoft Store, or just grit your teeth. There is a trick to force Win10 home not to do updates automatically if you're on a "metered connection". That just makes it nag you until you allow it. As long as you don't put off the updates for TOO long it's okay - just don't defer forever. You do need the security updates. I'd recommend waiting a couple of weeks after they're released to make sure no one is having major problems.
UPDATE: The spring 2019 feature update of Win10 Home (1903) includes more controls in the Updates section including the ability to defer updates: https://www.slashgear.com/windows-10-19 ... -06575628/
Windows 10 Pro users can force Windows Update to ONLY update manually, and never automatically, thus allowing you to defer security updates longer than 30 days, as well as block auto driver updates which can cause a lot of problems.
DISABLE AUTO UPDATES IN WIN10 PRO WITH GROUP POLICY:
- Open Group Policy Editor gpedit.msc
- Go to \Computer Configuration\Administrative Templates\Windows Components\Windows Update\
- Set "Configure Automatic Updates" to enabled and then select option 2 in the drop down box called "Notify for download and notify for install"
CONFIGURE WINDOWS UPDATE TO DEFER FEATURE UPGRADES 365 DAYS VIA GROUP POLICY:
- Computer Configuration > Administrative Templates > Windows Components > Windows Update > Windows Update for Business > Select when Preview and Feature Updates are received: Set to Semi-annual & 365 days deferral.
CONFIGURE QUALITY UPDATES ARE DEFERRED 30 DAYS IN GROUP POLICY EDITOR:
- Computer Configuration > Administrative Templates > Windows Components > Windows Update > Windows Update for Business > Select when Quality Updates are received: set defferal to 30 days
DISABLE AUTO DRIVER UPDATES IN WINDOWS UPDATE USING GROUP POLICY EDITOR:
- Admin Templates -> Windows Components -> Windows Update -> Enable "Do not include drivers with Windows Updates"
- Check that Windows Update restrictions stuck via Updates -> Adv Options -> View Configured update policies (it should list all the administrative exceptions enabled in group policy - this is sometimes reset after a build update)
DISABLE ONEDRIVE:
Unless you WANT OneDrive to backup your documents (in which case right click on the OneDrive icon by the clock and create an account). OneDrive won't automatically sync to the cloud if you didn't logon with an MS Account, but you don't need it running all the time in the background if you're not using it. Right click on the OneDrive icon in the taskbar, and just uncheck "Start OneDrive automatically" and then exit it. You can then uninstall it from the Settings -> Apps.
DISABLE ADVERTISING IN THE LOCK SCREEN:
Win10 annoyingly gives you ads in the lock screen. It's easy to disable:
Settings->Personalization->Lock Screen->In the Background drop-down menu, select Picture or Slideshow.
https://www.windowscentral.com/how-remo ... e_ads_lock
DISABLE ADVERTISING IN START MENU:
This isn't necessary if you end up using Open Shell or some other start menu replacement, but if you prefer the Win10 Start Menu, but hate the ads, this will turn off the ads:
Settings->Personalization->Start->Turn off the "Occasionally show suggestions in Start" toggle switch.
https://www.windowscentral.com/how-remo ... _ads_start
DISABLE "TIPS AND TRICKS" IN ACTION CENTER AND NOTIFICATIONS:
This is a subtle form of advertising. For instance, when you try to make Chrome your default browser, Win10 will cheerfully inform you that Edge is better and ask if you REALLY want to do this:
Settings.->System->Notifications & actions->Under "Notifications", turn off the "Get tips, tricks, and suggestions as you use Windows" toggle switch.
https://www.windowscentral.com/how-remo ... ads_action
TURN OFF TARGETTED ADS:
Spybot Anti-Beacon should take care of this, but just in case:
Settings->Privacy->General->Under "Change privacy options", turn off the "Let apps use my advertising ID for experiences across apps" toggle switch.
https://www.windowscentral.com/how-remo ... ads_target
That's basically it. Win10 at this point will be a stripped down OS like Win7 with no cloud or social crap. The MS Store will still work if you need to get something from it for some deranged reason, although you will need to manually log into an MS Account to actually purchase something (not required for free apps).
Be aware that MS likes to uninstall programs it considers "incompatible" when a major "Feature" update (what we used to call Service Packs) is released every 6 months It sometime uninstalls Open Shell but you can just re-install it and it saves your settings. It may uninstall Anti-Beacon, and it may reset all the file associations to the defaults again. Annoying, but easily fixed.
- UPDATED 5/9/2019: Added note about more control over updates in build 1903
- UPDATED 11/19/2019: Added option to disable Cortana entirely from Win 10 Pro's Group Policy Editor
- UPDATED 7/29/20: Added option to switch Windows Update to manual using GPEDIT in Win10 Pro
- UPDATED 6/12/21: More detailed instructions for disabling auto updates via Group Policy (can still be run manually) and disabling auto driver updates.
I've discussed this in other posts but never really written a walkthru. This won't be detailed as most of you are tech savvy enough to understand it, or Google anything you don't:
MAKE YOUR USER A LOCAL USER:
A Local Account is the type of account we're all familiar with from Win7 and prior. Since Win8, Microsoft would prefer you use a Microsoft Account. If you're doing an upgrade from Win7, then a local account will be the default. If you're doing a clean install or buying a new PC, then Win10 wants to make you log in with an MS Account, and this is what links your PC to all the cloud crap. When you are asked to setup an MS Account, there should be a small link at the bottom of the page to "Skip this step" and then you are offered the option to create a local account: https://www.austintechnology.com.au/log ... t-account/
EVEN EASIER: When you first setup Win10 DO NOT connect it to the Internet (when it asks to connect to your Wifi, just skip it). If Win10 can't talk to the mothership, it defaults to setting you up as a local user and skips setting up all the social/phone home crap.
You can also switch to a local account later if you accidentally setup an MS account, or vice a versa: https://www.zdnet.com/article/windows-1 ... t-account/
INSTALL OPEN SHELL (formerly Classic Shell):
This not only gets rid of the silly new Tile based Start menu, and restores the classic Win7-style Start menu, but also bypasses and disables a lot of the cloud search and Cortana crap, as well as kills the embedded MS app advertising in the Start Menu. By tweaking the Classic Shell settings you can make your start menu look, feel and function EXACTLY like it did in Win7 (in Classic Shell settings Show All Settings -> Skin -> Windows Aero). I happen to prefer Open Shell, and it's free, but there's other Start Menu replacements out there as well like Start10 (not free, but only $5).
https://open-shell.github.io/Open-Shell-Menu/
NOTE: Open Shell will occasionally give you a pop-up asking for permission to install an update, or to reconfigure itself after a major Windows update. It's safe to allow that.
DISABLE CORTANA FROM THE GROUP POLICY EDITOR (WIN10 PRO ONLY):
Open GPEDIT.MSC and change the following setting: Computer Configuration > Administrative Templates > Windows Components > Search > Allow Cortana = Disabled
RE-ASSIGN DEFAULT ASSOCIATIONS:
Go to the Windows Control Panel, do a search for "Associations". Look for the page that lets you set default file associations. Make whatever video player you want as the default instead of the silly XBox-based modern video player (Windows Media Player or VLC, etc). Same for the music player instead of the stupid Groove player.
I also prefer the old Photo Viewer from Win7, which is still available if you upgraded from Win7 or 8, but requires a registry hack to enable if you did a clean install of Win10:
https://www.cnet.com/how-to/how-to-get- ... indows-10/
I also don't like the built-in PDF reader, and if you don't like it either, then install the reader of your choice (Chrome has an excellent built-in PDF reader now, or download Sumatra or Adobe Reader - whatever you prefer) and make it the default.
USE CHROME OR FIREFOX:
For the love of GOD don't use Edge unless you upgrade it to the new Chromium version (should auto install if you're on Win10 build 2004 or later, but you can download it separately). Also, don't use Bing to search for Chrome and Firefox downloads (Edge, of course, uses Bing by default). Unless Microsoft has fixed this, it takes you to fake download sites. Make Chrome or Firefox your default browser, and use Google or DuckDuckGo as your search engine.
Chrome download: https://www.google.com/chrome/
Firefox download: https://www.mozilla.org/en-US/firefox/
INSTALL SPYBOT ANTI-BEACON:
This kills all the phone-home telemetry without having to wade through all the privacy settings in Windows (and kills some things the privacy settings won't let you kill). It also blocks OneDrive ads in File Explorer. The new interface is a little confusing. Just click on "Blocked Telemetry Options", click "Recommended" then click "Done".
DEFER UPDATES (Win 10 Pro only):
If you have Win10 Pro you can defer "feature updates" (the every 6 month major update that is like what a Service Pack used to be) for up to a year. You can also defer security updates for 30 days. With all the buggy updates, better to let everyone else be the guinea pigs first: https://www.zdnet.com/article/windows-1 ... g-upgrade/
You don't have the option to defer on Win10 Home. Consider buying the Pro upgrade through the Microsoft Store, or just grit your teeth. There is a trick to force Win10 home not to do updates automatically if you're on a "metered connection". That just makes it nag you until you allow it. As long as you don't put off the updates for TOO long it's okay - just don't defer forever. You do need the security updates. I'd recommend waiting a couple of weeks after they're released to make sure no one is having major problems.
UPDATE: The spring 2019 feature update of Win10 Home (1903) includes more controls in the Updates section including the ability to defer updates: https://www.slashgear.com/windows-10-19 ... -06575628/
Windows 10 Pro users can force Windows Update to ONLY update manually, and never automatically, thus allowing you to defer security updates longer than 30 days, as well as block auto driver updates which can cause a lot of problems.
DISABLE AUTO UPDATES IN WIN10 PRO WITH GROUP POLICY:
- Open Group Policy Editor gpedit.msc
- Go to \Computer Configuration\Administrative Templates\Windows Components\Windows Update\
- Set "Configure Automatic Updates" to enabled and then select option 2 in the drop down box called "Notify for download and notify for install"
CONFIGURE WINDOWS UPDATE TO DEFER FEATURE UPGRADES 365 DAYS VIA GROUP POLICY:
- Computer Configuration > Administrative Templates > Windows Components > Windows Update > Windows Update for Business > Select when Preview and Feature Updates are received: Set to Semi-annual & 365 days deferral.
CONFIGURE QUALITY UPDATES ARE DEFERRED 30 DAYS IN GROUP POLICY EDITOR:
- Computer Configuration > Administrative Templates > Windows Components > Windows Update > Windows Update for Business > Select when Quality Updates are received: set defferal to 30 days
DISABLE AUTO DRIVER UPDATES IN WINDOWS UPDATE USING GROUP POLICY EDITOR:
- Admin Templates -> Windows Components -> Windows Update -> Enable "Do not include drivers with Windows Updates"
- Check that Windows Update restrictions stuck via Updates -> Adv Options -> View Configured update policies (it should list all the administrative exceptions enabled in group policy - this is sometimes reset after a build update)
DISABLE ONEDRIVE:
Unless you WANT OneDrive to backup your documents (in which case right click on the OneDrive icon by the clock and create an account). OneDrive won't automatically sync to the cloud if you didn't logon with an MS Account, but you don't need it running all the time in the background if you're not using it. Right click on the OneDrive icon in the taskbar, and just uncheck "Start OneDrive automatically" and then exit it. You can then uninstall it from the Settings -> Apps.
DISABLE ADVERTISING IN THE LOCK SCREEN:
Win10 annoyingly gives you ads in the lock screen. It's easy to disable:
Settings->Personalization->Lock Screen->In the Background drop-down menu, select Picture or Slideshow.
https://www.windowscentral.com/how-remo ... e_ads_lock
DISABLE ADVERTISING IN START MENU:
This isn't necessary if you end up using Open Shell or some other start menu replacement, but if you prefer the Win10 Start Menu, but hate the ads, this will turn off the ads:
Settings->Personalization->Start->Turn off the "Occasionally show suggestions in Start" toggle switch.
https://www.windowscentral.com/how-remo ... _ads_start
DISABLE "TIPS AND TRICKS" IN ACTION CENTER AND NOTIFICATIONS:
This is a subtle form of advertising. For instance, when you try to make Chrome your default browser, Win10 will cheerfully inform you that Edge is better and ask if you REALLY want to do this:
Settings.->System->Notifications & actions->Under "Notifications", turn off the "Get tips, tricks, and suggestions as you use Windows" toggle switch.
https://www.windowscentral.com/how-remo ... ads_action
TURN OFF TARGETTED ADS:
Spybot Anti-Beacon should take care of this, but just in case:
Settings->Privacy->General->Under "Change privacy options", turn off the "Let apps use my advertising ID for experiences across apps" toggle switch.
https://www.windowscentral.com/how-remo ... ads_target
That's basically it. Win10 at this point will be a stripped down OS like Win7 with no cloud or social crap. The MS Store will still work if you need to get something from it for some deranged reason, although you will need to manually log into an MS Account to actually purchase something (not required for free apps).
Be aware that MS likes to uninstall programs it considers "incompatible" when a major "Feature" update (what we used to call Service Packs) is released every 6 months It sometime uninstalls Open Shell but you can just re-install it and it saves your settings. It may uninstall Anti-Beacon, and it may reset all the file associations to the defaults again. Annoying, but easily fixed.