Update 2015-08-26:

I’ve posted a new article with some additional configuration steps/tweaks.

Update 2015-08-05:

Removed some additional tracking services & bloatware using:

https://github.com/10se1ucgo/DisableWinTracking

https://github.com/W4RH4WK/Debloat-Windows-10 Geolocation Service XBox stuff (I don’t own one) HomeGroup (I’ve got a NAS, I don’t need fancy ways to share files) Block currently known telemetry domains (at my DNS server level rather than in the hosts file) Removed the WorkFolders-Client Removed WindowsMediaPlayer Removed more bloatware: Bing Finance Bing News Bing Sports Bing Weather Microsoft Office Hub Windows Feedback Windows Maps Windows Phone ZuneMusic ZuneVideo … (geeeeez)



I’ve also removed OneDrive from autorun, removed the app, etc. Thanks Microsoft but no, I’m not interested and if I ever am, I’ll let you know. It’s not because I’m using Windows that I want all the software you’ve ever produced. Propose me to opt in if you want, but don’t force additional products on me!.

Tip:

If you want to get a list of the other currently installed apps just use: Get-AppxPackage -User <username>. If one of them bothers you then you can invoke Remove-AppxPackage <package name>

—

In the previous post, I’ve mentioned that almost all of my applications and settings were kept during the upgrade from Windows 8.1 to Windows 10. Almost all, but not all.

And anyway, each time I switch to a new OS release, I can’t help but spend some time going through all the options and policy settings just to configure it the way I like.

With Windows 10, it’s the very first time that I’m done in less than two hours, which is nice :)

Now let me list all the things that I’ve done after upgrading, in no specific order:

Activate Windows (first things first right? :p)

Installed the latest NVidia drivers (these didn’t survive the upgrade)

Put the resolution back to 1920*1080

Configured the File Explorer to show “This PC” rather than “Quick Access”, because I don’t care about frequent folders & recent files. I know where I need to go and how my files are organized

Reinstalled Virtualbox as I’ve noticed that it crashed when started

fired up gpedit.msc (which you will only have with the Professional & above editions..) disabled thumbs.db files generation: because I can’t stand trying to move/delete things to discover that the damn thumbnails file prevents me from doing what I want… User > Administrative Templates > Windows Components > File Explorer > Turn off the caching of thumbnails in hidden thumbs.db files disabled things that send data to Microsoft: Sorry MSFT, but I never like having my machine send data around (just a general principle that I stick by) Computer > Windows Components > Windows Error Reporting > Disable Windows Error Reporting Computer > Windows Components > Windows Error Reporting > Do not send additional data Computer > Windows Components > Data Collection and Preview Builds > Allow Telemetry made sure that the shutdown button on the logon screen was disabled: If you have young children you’ll understand why Computer > Windows Settings > Local Policies > Security Options > Shutdown: Allow system to be shut down without having to log on enabled always sending Do Not Track (DNT) header: because if there are still non-evil people on the Web, I need them to know that I somehow value privacy Computer > Windows Components > Internet Explorer > Internet Control Panel > Advanced Page > Always send Do Not Track header disabled Windows SmartScreen: because I don’t need Microsoft to tell me what is safe and what isn’t Computer > Administrative Templates > Windows Components > File Explorer > Configure Windows SmartScreen enabled confirmation for file deletion: because I can’t trust myself that much ;-) Recycle Bin > Properties > Display delete confirmation dialog disabled documents history: who cares about history (don’t repeat that to my son ^^) User > Administrative Templates > Start Menu and Taskbar Clear history of recently opened documents on exit Do not keep history of recently opened documents disabled searching for files/documents/internet in start menu: because I care about apps when I use the start menu, nothing else (personal choice indeed) User > Administrative Templates > Start Menu and Taskbar Do not search communications Do not search for files Do not search Internet forced listing desktop apps first (rather than metro apps..) User > Administrative Templates > Start Menu and Taskbar List desktop apps first in the Apps view disabled MS Edge app usage tracking: I love MS Edge but I just don’t like tracking User > Administrative Templates > Windows Components > Edge UI Turn off tracking of app usage customized the File Explorer User > Administrative Templates > Windows Components > File Explorer Remove the Search the Internet “Search again” link Start File Explorer with ribbon minimized Turn off display of recent search entries in the File Explorer search box Turn off caching of thumbnail pictures

forced numlock at boot (logon screen also!): this setting was apparently lost during the upgrade run “regedit” go to \HKEY_USERS\.DEFAULT\Control Panel\Keyboard change value “InitialKeyboardIndicators” from “2147483648” to “80000002” restart and u will have NUM LOCK ON always on windows startup



After this I already felt a bit more at ease, although that was only the first part.

The next part was to go through all the Settings and trying out the new features..

created a new virtual desktop: Hey MSFT, great that you’ve finally added virtual desktops but why so late? :)

fixed the default apps: this is one of the things I disliked. MSFT, you’ve managed to keep so many things and just decided to replace my default apps by all of yours? That really sucks! Switched default browser back to Google Chrome Switched default music player back to Winamp (because it really… :p) Switched default video player back to VLC

modified the folders that appear by default in the Start Menu File Explorer Settings Downloads Personal Folder

modified privacy settings Settings > Privacy General Send Microsoft info about how I write… OFF Location Disabled Removed various rights from apps… Feedback & diagnostics Windows should ask for my feedback: Never Send your device data to Microsoft: Basic Background apps: Remove

removed default Windows 10 apps: MSFT I get why it is all there, but I just couldn’t care less Finance News MSN Food & Drinks Health & Fitness Travel Get Skype Get Office Get Bored Get Whatever :o

Windows Store signed in with my Windows Live account: ONLY for apps

Cortana & Search settings disabled web search results



Done!

I’ll probably edit this post over time to reflect config changes, but for now I think it’s already in a pretty good shape :)

PS: For those wondering, no I’m not hardening my Windows box in any specific way, I just have a local firewall (Net Limiter) set to ask me to allow/Deny anytime there are inbound/outbound connections (when I don’t already have rules covering those), so as long as apps cannot bypass that Firewall, I know what tries to go in/out and I’m in control. That combined with the Antivirus is all I need. I wouldn’t configure a Windows box just like that at work, but at home that’s just more than enough :)