Go to Settings.
- Additional settings >
- Show the Windows welcome experience after updates and when signed in to show what's new and suggested: Off
- Suggest ways to get the most out of Windows and finish setting up this device: Off
- Get tips and suggestions when using Windows: Off
- Off (Enable this only when needed. Remember to turn it off when no longer required.)
This feature is not available in Home editions
- Off (Enable this only when needed. Remember to turn it off when no longer required.)
- Require device to use Network Level Authentication to connect: On
- Phone Link : Off (use something else like KDE Connect, LocalSend, etc.)
- Use AutoPlay for all media and devices: Off
-
DNS server assignment > Edit >
- Edit DNS settings: Manual
- IPv4: On
-
Preferred DNS: enter IPv4 address of a provider from this list
Example: For Quad9, enter 9.9.9.9
-
DNS over HTTPS: On (automatic template)
-
Fallback to plaintext: Off
-
Alternate DNS: enter alternate IPv4 address of the same provider as above or a different provider
Example: For Quad9, enter 149.112.112.112
-
DNS over HTTPS: On (automatic template)
-
Fallback to plaintext: Off
-
- IPv6: On
-
Preferred DNS: enter IPv6 address of a provider from this list
Example: For Quad9, enter 2620:fe::fe
-
DNS over HTTPS: On (automatic template)
-
Fallback to plaintext: Off
-
Alternate DNS: enter alternate IPv6 address of the same provider as above or a different provider
Example: For Quad9, enter 2620:fe::9
-
DNS over HTTPS: On (automatic template)
-
Fallback to plaintext: Off
-
Click
Save
-
Random hardware addresses: On
-
Hardware properties > DNS server assignment > Edit
- Edit DNS settings: Manual
- IPv4: On
-
Preferred DNS: enter IPv4 address of a provider from this list
Example: For Quad9, enter 9.9.9.9
-
DNS over HTTPS: On (automatic template)
-
Fallback to plaintext: Off
-
Alternate DNS: enter alternate IPv4 address of the same provider as above or a different provider
Example: For Quad9, enter 149.112.112.112
-
DNS over HTTPS: On (automatic template)
-
Fallback to plaintext: Off
-
- IPv6: On
-
Preferred DNS: enter IPv6 address of a provider from this list
Example: For Quad9, enter 2620:fe::fe
-
DNS over HTTPS: On (automatic template)
-
Fallback to plaintext: Off
-
Alternate DNS: enter alternate IPv6 address of the same provider as above or a different provider
Example: For Quad9, enter 2620:fe::9
-
DNS over HTTPS: On (automatic template)
-
Fallback to plaintext: Off
-
Click
Save
- Personalize your lock screen
- select
Picture
orSlideshow
- Get fun facts, tips, tricks and more on your lock screen: Off
- select
- Show recommendations for tips, shortcuts, new apps and more: Off
- Turn everything off
Uninstall anything you don't use like XBox, candy crush, some other preinstalled apps/games etc. Be sure not to uninstall anything important. If you have doubts about any app, search the net.
This section is applicable only if you've signed in with a Microsoft account
Delete your account picture and set it to default as mentioned below:
- Choose a file > Browse files
- Go to
C:\Users\JohnDoe\AppData\Roaming\Microsoft\Windows\AccountPictures
and delete your picture. (ReplaceJohnDoe
with your username) - Go to
C:\ProgramData\Microsoft\User Account Pictures
and selectguest.png
.
NOTE: AppData
is a hidden folder by default. To enable: in file explorer on top click View
> Show > select Hidden items
.
- Show account details such as my email address on the sign-in screen: Off
- Show text suggestions when typing on the physical keyboard: Off
- Typing insights: Off
- Virus & threat protection > Virus & threat protection settings > Manage settings > All protections on (Except automatic sample submission)
- Firewall & network protection > Firewall should be on for domain, public and private networks.
- Find my device: Off
- All off
This feature is available only on some devices
- Save Snapshots: Off
- Delete Snapshots >
- Delete all snapshots: Delete all
- Online speech recognition: Off
- Custom inking and typing dictionary: Off
- Diagnostic data > Send optional diagnostic data: Off
- Improve inking & typing: Off
- Tailored experiences: Off
- Delete diagnostic data: Delete
- Feedback frequency: Never
- Send my activity history to Microsoft: Off
- Cloud content search
- Microsoft account: Off
- Work or School account: Off
- More settings
- Show search highlights: Off
- Review each permission and disable accordingly (choose which apps can have access to location, camera, microphone, notifications etc. If any app doesn't need something, turn it off.)
- App diagnostics > App diagnostic access: Off
- Delivery Optimization > Allow downloads from other PCs: Off
Open file explorer. Click 3 dots menu on top > Options >
- Click
View
on top of the new popup >- Uncheck
Show sync provider notifications
- Click
Apply
- Also click "Apply to Folders" on top (if available)
- Uncheck
Press Win key + r
> type services.msc
> press enter
- Double-click on
Connected User Experiences and Telemetry
>- Service Status: Stopped (Click on
Stop
, if service is running) - Startup Type: Disabled
- Click
OK
- Service Status: Stopped (Click on
Press Win key + r
> type regedit
> press enter > Yes
- Navigate to
Computer\HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Search
- In the left navigation window, right click on
Search
> New > DWORD (32-bit) Value > name itBingSearchEnabled
- Double click it and make sure
Value data
is set to0
- Open Task Manager > Processes > select
Windows Explorer
> Right click > Restart
Press Win key + r
> type regedit
> press enter > Yes
- Navigate to
Computer\HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows
- In the left navigation window, right click on
Windows
> New > Key > name itWindowsCopilot
- Right click on
WindowsCopilot
> New > DWORD (32-bit) Value > name itTurnOffWindowsCopilot
- Double click it and set
Value data
to1
> OK - Open Task Manager > Processes > select
Windows Explorer
> Right click > Restart