Comment by greenavocado

11 days ago

You can get a completely minimalist Windows 11 by grabbing an ISO from Microsoft then reprocessing the ISO by feeding it into this utility: https://github.com/christitustech/winutil (Win11 Creator Tab) to get a NEW ISO which you then install. The end result is an extremely clean and stable Windows 11 installation.

  The resulting image can remove telemetry, bypass hardware requirement checks, and enable local account setup out of the box.

Official docs:

https://winutil.christitus.com/

https://winutil.christitus.com/userguide/win11creator/

To anyone reading this: please don't use ISOs downloaded from not-official sources.

Use an autounattend.xml, the mass graves, and a WinGet JSON to customise an online image.

[1]: https://schneegans.de/windows/unattend-generator/

[2]: https://learn.microsoft.com/en-gb/windows/package-manager/wi...

  • The tool linked by the parent doesn't download ISOs from non-official sources.

  • Do be aware that an autounattend.xml can cause Windows setup to execute arbitrary code. Their provenance matters too. It's relatively easy to encode scripts (or even binaries) into the XML to run during or after Windows setup. You can eyeball them, for sure, but I bet most people don't.

    • Indeed. I mention this in light of the high-profile supply-chain attacks recently across diverse platforms (Arch AUR, Shai-Hulud, etc). Any online tool that purports to modify an entire install medium should be heavily and continually scrutinised. I'm not saying the developer can't be trusted, but the infrastructure and people in general can't.

      1 reply →

  • I use uup dump myself, which downloads the components directly from MS and builds the ISO locally

Even cleaner when you don't install Windows at all :P

Why would people put themselves through the painful process of keeping themselves safe from their own computer?

  • Not everyone has the luxury of moving off of Windows. Solidworks, for example, has no Linux or Mac port.

    Though I do agree, if your workflow is supported by any non-NT based OS, that's probably a better option

    • Anything I need windows for is work related and runs on my locked down (and actually very cleanly stripped down) windows 11 laptop. Its amazing how much Microsoft hates the consumer but bends over backwards for volume license purchasers.

      1 reply →