simeononsecurity/Windows-Optimize-Harden-Debloat 3.0

Optimize, Harden, and Debloat Windows 10 Deployments

on GitHub

##Whats New?

• STIG Updates
  • Updated to cover Q4 STIG Changes
  • FireFox STIG
  • Oracle JRE 8 Java STIG
  • .NET STIG changes
• More Debloating
  • Remove Telemetry from Nvidia, Office 2013-2019, PowerShell 6, and VSCode
  • Covers Windows 10 20H2 Apps and Bloatware
• More Hardening
  • Disable LLMNR
  • Disable NETBIOS/TCP-IP
  • Windows Defender Hardening
    • WDAC Policies
    • ASR Rules

How to run the script:

Manual Install:

If manually downloaded, the script must be launched from an administrative powershell in the directory containing all the files from the GitHub Repository

Set-ExecutionPolicy -ExecutionPolicy RemoteSigned -Force
Get-ChildItem -Recurse *.ps1 | Unblock-File
.\sos-optimize-windows.ps1

Automated Install:

The script may be launched from the extracted GitHub download like this:

iex ((New-Object System.Net.WebClient).DownloadString('https://simeononsecurity.ch/scripts/windowsoptimizeandharden.ps1'))