I’ve seen a lot of complaints and Windows 11 on Lemmy, (ads in the OS, intrusive AI, SSD damage, privacy issues, etc.) I’ve gone to Linux on my laptop, but I don’t believe I can do this for my daily driver desktop. So if I’m forced to update to 11, I’d like to do so in the “safest possible manner.” Any guidance would be appreciated.
I’d be very curious why you can’t use Linux for your desktop, especially if you are already using it on your laptop?
As for the windows 11 question, keep in mind microsoft doesn’t want you doing this. They will try to undo those changes as best they can via updates. Stay vigilant if you truly mean to take privacy seriously and continue to use windows.
https://github.com/ChrisTitusTech/winutil it has this built in https://www.oo-software.com/en/shutup10
Also run this https://www.oo-software.com/en/ooappbuster
It isn’t perfect but it will nuke a bunch of m$ garbage.
Before I went all in with Linux I used to make a custom autounattended.xml file that you dump in the usb installer root. This tool makes it easy to generate one with your desired options:
https://schneegans.de/windows/unattend-generator/
Then after install, use ShutUp10 to block telemetry/keyloggers/sync and run after every Windows Update because Microsoft resets these things often.
Afaik there is an option in the autounattend tk run scripts at first logon. This could be used to run the ShutUp10 script and create a schuled task that keeps it enabled too
Install the LTSC IoT edition of Windows, which comes minus the bloat. It’s sort of an official Microsoft minimal install version. You can activate it with the scripts you find at massgrave.
This is really the best thing you can do, those automated scripts always end up bugging out your system down the line.
Thirded! Its what i use on my only non-linux pc. I will help you make a bootable usb drive if you want. I installed it 2 years ago. In that time, it has received maybe 4 or 5 updates requiring a reboot. Everytime, i go to check to see if it has reinstalled Edge or any AI bloatware. It has not.
this one
This is the best answer, by far. Also look to use StartAllBack on top of that. Best modern Windows experience.
I would install win 11 with no internet connection so you can use a local account not a Microsoft account. Then once booted into windows run the Chris Titus tool to disable a significant chunk of the Windows bullshit.
You can use Chris Titus tool to make a debloated usb before even having to install it. You download the official .iso from MS, and use his tool instead of Rufus to burn a debloated minimal version to a bootable usb.
If one wants to use Windows for some stupid reason, this tool I would second. Otherwise, join the Free Software side and use Linux.
Why can’t you do linux for your daily driver desktop?
Work?
How is that even an answer? Are you saying your work expects you to use your personal computer to do work related tasks, which require proprietary software to be installed on your personal computer? Or are you suggesting that OP considers their workstation at their job to be their “daily driver” and they have enough access to decide to de-bloat their windows install?
What software? That’s what I thought before I moved over
I use this:
Since you’re at least familiar with it, would you be willing and able to try Linux as your daily driver? You might surprise yourself.
For years I dual booted essentially thinking I wasn’t ready to daily it. In the end I just needed to commit and stop booting to windows.
Where can I look up to see if games that I want to play that are currently PC only can also be played on Linux?
Protondb.
I’ll say, almost every game is likely going to work unless it has shitty kernel anti cheat, and we shouldn’t support those games anyways.
Vr is a little bit of a hassle but it does work. Its only a little more jank than windows.
Protondb
What I do is a clean installation with Rufus (disabling ram limitation, bitlocker among other things), then I run Crapfixer, next I remove Bing, OneDrive, default video player, etc. with RevoUninstaller. Finally I do install my own drop-in replacements for video player, image viewer, and so on.
I started with Rufus as well, but then I just uninstalled things directly through Windows and went through the settings to disable everything I didn’t want. Probably safer than using 3rd party applications to remove things. I also use Openshell to replace the start menu. If you change the time and currency settings during install, that apparently disabled some things as well. See here And if you don’t want to set up a Microsoft account, just stay disconnected from Internet during install, it will let you just set up a local account.
And then you have to re-verify your changes after every update.
Yes.
ShutUp10 has been my go-to for many years. (Yes it does 11 too)
updates brick this
Only a few settings on some updates, and then you just run your saved template and reboot and it’s back to normal Although I see there are some better minimal install options in the other comments
If you don’t mind sailing the high seas, Windows LTSC is about as debloated as Windows gets. LTSC is an official windows version but isn’t available for retail purchase, as it’s intended for iot and embedded systems.
This is an actual good solution. Where would you recomend i start looking?
You know how there’s those large burials that happen sometimes? What would you call a place where lots of deceased humans are buried?
Pretend I am 5 and have just discovered the internet. Please.
Massgrave.dev
deleted by creator
I’ve ran the windows iso through Chris Titus’s tool to make a microwin iso. Then installed that through ventoy and then ran Chris Titus’s tool in windows after it got done installing. Been working great for a while now.
deleted by creator
you want an enterprise license of windows for it to be any good. not easy to get as normie, if you got IT types, they might be able to help
anything else is sus imho
https://archive.org/details/tiny-11-NTDEV
Tiny11. But be careful not to update this.
If you’re not supposed to update the install, why not stay on win10 that isn’t going to get updates after next month?