Skip to content

Optimize, Harden, and Debloat Windows 10 Deployments
Compare
Choose a tag to compare
@simeononsecurity simeononsecurity released this 26 Dec 21:40
· 223 commits to master since this release
3.0
d7499a3
This commit was created on GitHub.com and signed with GitHub’s verified signature. The key has expired.
GPG key ID: 4AEE18F83AFDEB23
Expired
Learn about vigilant mode.

##Whats New?

  • STIG Updates
    • Updated to cover Q4 STIG Changes
    • FireFox STIG
    • Oracle JRE 8 Java STIG
    • .NET STIG changes
  • More Debloating
    • Remove Telemetry from Nvidia, Office 2013-2019, PowerShell 6, and VSCode
    • Covers Windows 10 20H2 Apps and Bloatware
  • More Hardening
    • Disable LLMNR
    • Disable NETBIOS/TCP-IP
    • Windows Defender Hardening
      • WDAC Policies
      • ASR Rules

How to run the script:

Manual Install:

If manually downloaded, the script must be launched from an administrative powershell in the directory containing all the files from the GitHub Repository

Set-ExecutionPolicy -ExecutionPolicy RemoteSigned -Force
Get-ChildItem -Recurse *.ps1 | Unblock-File
.\sos-optimize-windows.ps1

Automated Install:

The script may be launched from the extracted GitHub download like this:

iex ((New-Object System.Net.WebClient).DownloadString('https://simeononsecurity.ch/scripts/windowsoptimizeandharden.ps1'))
Assets 2
Loading