Monday, June 23, 2025

Automated System-Wide Debloating & Basic Software Installation for Windows 10/11

Introducing "DeployWorkstation"

A System-Wide/All-Users Debloating & Basic Application Installation
PowerShell Script For Windows 10 & Windows 11 Systems


After a few weeks of development and testing, I'm excited to announce the alpha release of DeployWorkstation v2.0 - a major evolution of the Windows deployment and debloating script that extends far beyond single-user configurations.

https://github.com/Pnwcomputers/DeployWorkstation/tree/Version2-AllUsers%26NewAccounts


The Big Picture

When I first created DeployWorkstation, it solved a personal problem: setting up a clean, efficient Windows environment by removing bloatware and installing essential applications. But as the project gained traction, one limitation became clear; it only configured the current user.

Version 2.0 Alpha changes everything by introducing all-users functionality. Now, the script configures not just your current account, but:

  • All existing user accounts on the system

  • Future user accounts created after deployment

  • System-wide policies that prevent bloatware return

  • Default user profile pre-configuration

This makes it perfect for IT administrators managing multiple workstations, families with shared computers, or anyone who wants a truly clean Windows experience that persists across all users.

Video of Version1.0 (Alpha) In Action:



What Makes v2.0 Special

Advanced Registry Hive Management & All-Users Coverage

The biggest technical challenge was safely mounting and configuring multiple user registry hives simultaneously. Version 2.0 introduces:

  • Intelligent HKU: drive creation for PowerShell registry access

  • Multi-user registry hive mounting with proper error handling

  • Enhanced dismount procedures with retry logic and handle cleanup

  • Default user profile configuration for future account creation


Comprehensive Bloatware Removal

While v1.x removed apps for the current user, v2.0 goes system-wide:

  • 21 bloatware patterns removed via Winget (Xbox, social media, streaming apps)

  • 20+ UWP packages removed for all users and future installations

  • 6 Windows capabilities completely uninstalled

  • 13 unnecessary services disabled system-wide

  • McAfee auto-detection and removal


Privacy-First Configuration

Version 2.0 applies comprehensive privacy settings at multiple levels:

  • System-wide group policies disable telemetry and advertising

  • Per-user privacy settings for existing accounts

  • Default profile configuration ensures new users inherit clean settings

  • Consumer features disabled to prevent promotional content


What Gets Removed vs. Installed

Removed Applications (Examples):

  • Microsoft: Outlook, Clipchamp, OneDrive, Teams, Xbox suite

  • Social Media: Facebook, Instagram, TikTok, Twitter, LinkedIn

  • Entertainment: Netflix, Disney+, Spotify, Candy Crush

  • Utilities: Quick Assist, Remote Desktop, Mixed Reality Portal


Essential Applications Installed:

  • Security: Malwarebytes, BleachBit

  • Productivity: Google Chrome, Adobe Reader, 7-Zip, Zoom

  • Runtime: .NET 7 Desktop, Java Runtime Environment

  • Media: VLC Media Player

The philosophy is simple: remove the noise, keep the essentials.


Real-World Usage Scenarios

IT Administrators

Deploy across multiple workstations with consistent configuration:

# Deploy to all workstations with custom logging
.\DeployWorkstation-AllUsers.ps1 -LogPath "\\server\logs\$env:COMPUTERNAME-deploy.log"

Shared Family Computers

Ensure all family members get a clean experience:

# Configure existing accounts and future children's accounts
.\DeployWorkstation-AllUsers.ps1

Fresh Windows Installations

Start with a completely clean slate:

# Full deployment on new Windows install
.\DeployWorkstation-AllUsers.ps1

Targeted Updates

Apply just registry fixes after updates:

# Configuration-only run
.\DeployWorkstation-AllUsers.ps1 -SkipAppInstall -SkipBloatwareRemoval

The Technical Journey: Lessons Learned

Challenge 1: Registry Drive Access

PowerShell doesn't create HKU: drives by default. Solution: Dynamic drive creation with global scope and verification.

Challenge 2: Multi-User Registry Safety

Mounting multiple user hives safely required careful error handling and proper cleanup procedures.

Challenge 3: Future User Configuration

Configuring the default user profile involves mounting NTUSER.DAT from the Default user folder - a process that required enhanced dismount handling.

Challenge 4: Parameter Compatibility

PowerShell parameter names vary between versions. Extensive testing revealed the correct syntax for registry property types.


⚠️ Alpha Release: What to Expect

This is an alpha release, which means:

✅ What's Working:

  • Core bloatware removal (95%+ success rate)

  • Essential app installation (95%+ success rate)

  • Multi-user registry configuration (90%+ success rate)

  • System-wide policy application

⚠️ Known Limitations:

  • Registry dismount warnings (usually harmless)

  • Extended runtime on systems with many users

  • Potential conflicts in enterprise environments with strict policies

🔬 Testing Needed:

  • Various Windows 10/11 builds and editions

  • Enterprise domain environments

  • Systems with unusual user account configurations

  • Large-scale deployments


📈 Performance Metrics

Based on alpha testing across different systems:

  • Average Runtime: 10-15 minutes

  • Apps Successfully Removed: ~25-30 applications

  • Registry Settings Applied: 50+ privacy/bloatware prevention settings

  • Services Disabled: 13 unnecessary Windows services

  • Disk Space Recovered: Typically 2-4 GB


Roadmap to a Full Stable Release:

Immediate Priorities (v2.1):

  • Enhanced enterprise environment compatibility

  • Improved registry dismount reliability

  • Additional bloatware pattern detection

  • Performance optimizations for large user bases

Future Considerations (v2.2+):

  • GUI interface for non-technical users

  • Configuration profiles for different use cases

  • Remote deployment capabilities

  • Integration with common IT management tools


🚨 Important Considerations:

Backup and Testing

Always test on non-production systems first. Many changes are irreversible without Windows reinstallation.

Enterprise Environments

Check with IT policies before deployment. Some organizations may have restrictions on registry modifications or application removal.

Gaming Impact

Xbox-related features and Game Bar functionality will be removed. Consider your gaming needs before deployment.


🤝 Community and Feedback

The alpha release is available on GitHub with comprehensive documentation:

Your feedback is crucial for reaching a stable release. Please report:

  • Execution errors with log excerpts

  • Unexpected behavior or compatibility issues

  • Performance problems or suggestions

  • Feature requests for future versions


Final Thoughts

DeployWorkstation v2.0 Alpha represents a significant step forward in Windows system management. By extending beyond single-user configuration to system-wide deployment, it addresses real-world scenarios where multiple users share systems or where IT administrators need consistent, repeatable deployments.

The alpha release is about finding the edge cases, improving reliability, and ensuring compatibility across the diverse Windows ecosystem. Whether you're an IT professional, power user, or someone who just wants a cleaner Windows experience, your testing and feedback will help shape the final release.

Ready to try it? Head over to the GitHub repository and let me know how it works in your environment!


Have questions about DeployWorkstation v2.0 Alpha? Found a bug? Want to contribute? Reach out via GitHub Issues or connect with me through social media: www.linktr.ee/pnwcomputers




Created & Maintained by Pacific Northwest Computers



No comments:

Post a Comment