Optimize, Harden, and Debloat Windows 10 Deployments
##Whats New?
- STIG Updates
- Updated to cover Q4 STIG Changes
- FireFox STIG
- Oracle JRE 8 Java STIG
- .NET STIG changes
- More Debloating
- Remove Telemetry from Nvidia, Office 2013-2019, PowerShell 6, and VSCode
- Covers Windows 10 20H2 Apps and Bloatware
- More Hardening
- Disable LLMNR
- Disable NETBIOS/TCP-IP
- Windows Defender Hardening
- WDAC Policies
- ASR Rules
How to run the script:
Manual Install:
If manually downloaded, the script must be launched from an administrative powershell in the directory containing all the files from the GitHub Repository
Set-ExecutionPolicy -ExecutionPolicy RemoteSigned -Force
Get-ChildItem -Recurse *.ps1 | Unblock-File
.\sos-optimize-windows.ps1
Automated Install:
The script may be launched from the extracted GitHub download like this:
iex ((New-Object System.Net.WebClient).DownloadString('https://simeononsecurity.ch/scripts/windowsoptimizeandharden.ps1'))