TheTest.com

Debloat and Secure a New Machine

How to remove pre-installed junk and configure privacy and security settings on a fresh computer

A new computer comes loaded with apps you never asked for and settings that share more data than you'd expect. Spending 15 minutes on cleanup and privacy settings right after first boot makes a real difference. Here's what to do in the first hour.

Remove pre-installed apps:

  1. Open Settings (Win + I)
  2. Go to Apps > Installed apps
  3. Sort by Install date to see what came with the machine
  4. Click the three-dot menu next to anything you don't want and select Uninstall

Common culprits: Candy Crush, Spotify (pre-installed promo version), Disney+, TikTok, Instagram, LinkedIn, news apps, and various manufacturer bloatware. If an app doesn't show an Uninstall option, it's a protected system app and can only be removed via PowerShell.

Disable telemetry and diagnostic data:

  1. Open Settings > Privacy & Security > Diagnostics & feedback
  2. Turn off Send optional diagnostic data
  3. Turn off Tailored experiences
  4. Turn off Improve inking & typing if present
  5. Go back to Privacy & Security > Activity history
  6. Turn off Store my activity history on this device
  7. Click Clear history

Disable personalized ads and suggestions:

  1. Go to Settings > Privacy & Security > General
  2. Turn off Let apps show me personalized ads by using my advertising ID
  3. Turn off Show me suggested content in the Settings app
  4. Go to Settings > Personalization > Start
  5. Turn off Show recommendations for tips, shortcuts, new apps, and more
  6. Go to Settings > System > Notifications
  7. Expand Additional settings at the top and turn off Offer suggestions on how I can set up my device

Disable lock screen ads:

  1. Go to Settings > Personalization > Lock screen
  2. Set Personalize your lock screen to Picture or Slideshow (not Windows Spotlight)
  3. Turn off Get fun facts, tips, tricks, and more on your lock screen

Disable Copilot (if unwanted):

  1. Go to Settings > Personalization > Taskbar
  2. Turn off Copilot

This hides the Copilot button from the taskbar. The Win + C shortcut may still trigger it on some builds. Fully disabling Copilot system-wide requires Group Policy or registry changes, which is beyond the scope of a quick setup.

Hide the Widgets panel:

  1. Go to Settings > Personalization > Taskbar
  2. Turn off Widgets

Configure Windows Security:

  1. Open Settings > Privacy & Security > Windows Security
  2. Click Open Windows Security
  3. Verify that Virus & threat protection, Firewall & network protection, and App & browser control all show green checkmarks
  4. Under App & browser control, click Smart App Control settings and make sure it's in Evaluation or On mode

Windows Security (Defender) is solid out of the box. You don't need third-party antivirus unless your workplace requires specific software.

Frequently Asked Questions

Do I need third-party antivirus software?▾

On Windows, Windows Security (Defender) is good enough for most people. On macOS, the built-in Gatekeeper and XProtect handle most threats. On Linux, the attack surface for desktop malware is small. A third-party antivirus is only necessary if your workplace requires it or you regularly handle high-risk files.

Will removing pre-installed apps break anything?▾

No. The apps listed as removable through Settings > Apps are safe to uninstall. Windows protects true system components and won't let you remove them through the normal uninstall flow. If you change your mind, most can be reinstalled from the Microsoft Store.

Can I fully disable telemetry on Windows?▾

Not completely through Settings alone. The toggles above reduce telemetry to the minimum allowed on Home and Pro editions. Windows Enterprise and Education editions can disable it further through Group Policy. The base-level "required diagnostic data" cannot be turned off on consumer editions.

Should I do this on a work-managed computer?▾

Be careful. If your machine is managed by IT (enrolled in Intune, Jamf, or another MDM), some of these settings may be controlled by policy and could revert. Disabling certain features might also flag compliance issues. Check with your IT department first.

How often should I revisit these settings?▾

Major Windows updates (like 24H2 or 25H2) can reset some privacy toggles or add new ones. It's worth rechecking after any feature update. macOS and Linux settings tend to stick across updates.