On this article, we’ll evaluate the way to tame the wild, loopy and sometimes malicious Home windows 11 by combining two separate, highly effective instruments. This isn’t solely to realize an Affirmative Protection in opposition to undesired promoting, bloat and espionage in Home windows 11, but in addition a preventive Affirmative Protection. in opposition to these parts that the month-to-month Home windows Replace tends to re-install with out our consent or data, after we’ve already eliminated them beforehand. The instruments we’ll be protecting on this article are the full-featured Group Coverage built-into the superior variations of Home windows 11, and Winhance (which is free however gladly accepts donations). The full-featured Group Coverage will act just like the «outdoors bouncer» at an evening membership, and Winhance will act just like the «inside bouncer», in additon to having many different helpful features, as defined forward. As I coated in my current article Home windows 11 variations past Dwelling/Professional, to fight undesired promoting, bloat & espionage, Home windows 11 Dwelling and Home windows 11 Professional received’t be allowed into the primary a part of this occasion. That’s as a result of Home windows 11 Dwelling doesn’t embrace any Group Coverage performance in any respect, and Home windows 11 Professional sadly now has very restricted Group Coverage capabilities, which sadly lacks the capability for the strongest and most vital Coverage (Directive) we’ll be implementing forward, earlier than doing the remainder of the our course of with Winhance. Essentially the most highly effective Home windows 11 variations are actually Training, LTSC Enterprise and IoT Enterprise, since Professional was been sadly weakened concerning its Group Coverage capabilities. However no worries: You probably have a type of two «weaker» Home windows 11 variations, it’s fast and straightforward to improve from Home windows 11 Dwelling or Home windows 11 Professional to Home windows 11 Training (not Home windows 11 Professional Training—We don’t need that one.), even in-place (with out having to reformat your drive), as defined in my current article, and the license value is beneath US$5 for one laptop or beneath US$14 for five computer systems), though you could possibly obtain a free license legally, when you have an e-mail handle ending with .edu. I make clear that WInhance does work—even with Home windows 11 Dwelling and Home windows 11 Professional—however forward I’ll clarify why the best resolution to tame Home windows 11 is by combining each the full-featured Group Coverage and Winhance, as our dynamic duo.

Why mix the full-featured Group Coverage with Winhance?

As I started to clarify earlier, we’re in an period when the month-to-month Home windows Updates not solely add desired safety updates (and presumably additionally characteristic updates, if we choose that): These days, the month-to-month Home windows Updates typically additionally reverse actions we’ve already made to take away undesired promoting, bloat and espionage, with out our data or consent. Though I applaud Winhance for its fantastic perform to observe the re-appearance of such undesired parts after every Home windows reboot—and take away these undesired parts (once more) inside seconds after its detection after reboot—I would like to have Winhance act just like the «indoor bouncer» in a elaborate nightclub, which solely has to cope with undesired parts which will have slipped via the «out of doors bouncer». On this analogy, the «out of doors bouncer» is Microsoft Group Coverage, the place the primary and strongest coverage we’ll set (as you’ll see forward) really instructions Home windows Replace—with absolutely the highest authority—to disregard particular undesired parts from ever being reinstalled, which is a reduction to the second (inside) bouncer: Winhance. That approach, Winhance will solely should cope with the less undersired parts which can have gotten previous the «outdoors bouncer». That approach, we’ll have a lot much less interference with our system.

Microsoft’s nomenclature for its Group Coverage in English and Castilian

I personally handle computer systems primarily in two languages: Castilian (castellano) (aka «Spanish» («español») and US English. Whoever was in command of translating the Group Coverage time period at Microsoft (or its subcontractor) made it sound slighlty higher in Castilian: Directivas de grupo native. Though each are right, I might have most well-liked Directriz (Directrices) de grupo native, which is back-translated to English as Directive(s), i.e. The Prime Directive. You probably have by no means been into Star Trek, ask a good friend who has. Anybody who has ever been into Star Trek (or any of its many spinoffs) will learn about The Prime Directive. In any case, these phrases sound a lot better—on this context—than merely Coverage or Insurance policies.

In any case, forward, I’ll point out the Microsoft’s precise Castilian translations in parentheses after the English names to facilitate you discovering them when you have your Home windows with its person inerface in Castilian.

Microsoft Group Coverage (Insurance policies)

Earlier than making an attempt to implement any of the insurance policies defined on this part, you will need to beforehand repeat doing Home windows Replace advert nauseam till all updates are completed. This typically takes a number of cycles and Home windows reboots till Home windows is totally up to date. Should you neglect to do that, the beneath directions received’t work.

On this part, we’ll implement two insurance policies (directives). They’re each vital. I’m sure that the primary one (our «Prime Directive») is not going to work (or work as completely) with Home windows 11 Professional, solely with the superior ones indicated above (Home windows 11 Training, Home windows 11 LTSC Enterprise, Home windows 11 IoT Enterprise). A number of colleagues have confirmed the same coverage in Home windows 11 Professional both now not works, now not exists, or solely works for newer customers past the present person, with newly created customers. What I’m about to reveal completely works on the finish of Could 2026 with Home windows 11 Training (absolutely up to date), and with the identical person who implements it (not simply newly-added customers). This has been confirmed by me and by Wealthy of @CyberCPU. This truth can be indicated on the high of the Group Coverage Editor when establishing it, as you’ll see in my screenshot i each languages. Because of Wealthy of @CyberCPU for informing us concerning the horrible scenario with Home windows 11 Professional and the favorable scenario with Home windows 11 Training (along with LTSC Enterprise and IoT Enterprise).

1: Our Prime Directive

In our first (i.e. Prime) directive is to set the Group Coverage in order that sure undesired apps be instantly eliminated (or not be ever re-installed by Home windows Replace). That is apparently new with model 25H2 (in any case Home windows Updates are achieved to it) and is lacking in Professional, however accessible with Training, LTSC Enterprise and IoT Enterprise.

 

1. To do this, we should first open the Group Coverage Editor in Home windows 11 Training, Home windows 11 LTSC Enterprise or Home windows IoT Enterprise by typing the letters GPO within the search area to get and click on on the choice Edit Group Coverage. (En castellano, ingresa la palabra Directiva hasta encontrar la opción Editar directiva de grupo.)
2. As quickly because the Editor opens, it’s finest to click on to go to full display.
3. Within the left column, search for Laptop configuration>Administrative Templates>App Package deal Deployment>Take away Default Microsoft Retailer Packages from the system and double-click it (Configuración de equipo/Plantillas administrativas/Implementación de paquetes de la aplicación/Eliminar los paquetes predeterminados de Microsoft Retailer del sistema)
4. Click on on Enabled>Click on on each apps or options you don’t need. Write-in different packages on the buttom, if desired. For each merchandise (software or characteristic) you add a checkmark, it is going to be uninstalled (if already put in) and commanded by no means to be re-added by way of any future Home windows Replace, after you carry out the upcoming step 5.
5. Both open Powershell as Administrator>Kind in gpupdate /pressure
   adopted by the Enter key on the keyboard, Sign off and Log in or (far more merely) simply restart the pc after step 4 above. After doing both of those, these undesired parts shall be eliminated and may by no means return by way of a future Home windows Replace.

2: Our second coverage

Earlier than implementing this second coverage (directive), we will first affirm that by visiting Privateness & Safety>Diagnostic & suggestions (Diagnóstico y comentarios), our solely official choices to regular customers are to pick out between sending all information or «required information» to Microsoft. Nonetheless, after implementing this Group Coverage, the standing adjustments from «required information» to None!

After we implement this as indicated beneath, it is going to be utterly off, sending no information in any respect.

1. To do this, we should first open the Group Coverage Editor in Home windows 11 Training, Home windows 11 LTSC Enterprise or Home windows 11 IoT Enterprise by typing the letters GPO within the search area to get and click on on the choice Edit Group Coverage. (En castellano, ingresa la palabra Directiva hasta encontrar la opción Editar directiva de grupo.)
2. As quickly because the Editor opens, it’s finest to click on to go to full display.
3. Within the left column, search for Laptop configuration>Administrative Templates>Home windows Elements>Knowledge Assortment and Preview Builds>>Enable Diagnostic Knowledge (Recopilación de datos y versiones preliminares/Permitir datos de diagnóstico):
4. Open it and Click on on Enabled (Habilitada).
5. Within the pulldown menu, choose Diagnostic data-off (Datos de diagnóstico desactivados). Press okay (Aceptar).
6. In contrast to the primary Coverage (Directive) we invoked above, this one is instantaneous, and you’ll confirm it instantly in Privateness & Safety>Diagnostic & suggestions (Diagnóstico y comentarios)

There are numerous extra such insurance policies that you could be need to implement, as Wealthy of @CyberCPU demonstrates on this video.

Can Group Insurance policies (directives) be saved and shared?

That may be a excellent query, which I first researched and later examined myself. I’ll share my private expertise, because it might (and may) save time and potential human error.

1. It may be achieved, so long as the goal laptop has the very same Home windows model and replace standing.
2. It requires the operator to have Home windows present in any other case hidden folder names file names situated within the path Home windows/System32/GroupPolicy and the information inside it.

After copying the information to a folder on a USB drive, I examined it after many clear installations of Home windows 11 on the identical laptop and it labored completely. I used to be doing a number of clear installations since I used to be testing an autounattend.xml filed I created—and continued to shine— to automate the set up of Home windows. After making every clear set up of Home windows 11 Training, I used to be in a position to drag the beforehand created Group Insurance policies to the identical location indicated above, restart the pc they usually had been carried out completely. As said earlier, I solely did that after going via the cycle of Home windows Updates till there have been no extra accessible to replace.

Winhance as our «indoor bouncer»

Winhance is an excellent portmanteau (compound phrase the place just one half stays of every authentic phrase) for one of many best Home windows enhancement instruments I’ve ever used so far. The title Winhance combines elements of the phrases Home windows and Improve. Many different instruments I’ve seen can take away undesired apps and undesired options from Home windows 10/11, however Winhance is the primary one I’ve ever used that may frequently monitor for the potential future presence of a beforehand eliminated and condemned parts inside a couple of seconds after detection after a Home windows reboot. Though—when potential—I choose to exclude a lot of the undesired parts upfront (utilizing Group Coverage because the «outdoors bouncer», as indicated earlier), typically there’s a want for the «indoor bouncer» too, because of completely different conditions.

The Winhance person interface is pleasant and accessible in a number of languages, together with Castilian and English. What you will note within the screenshots beneath are just one of some completely different views it provides to point out and choose Home windows apps & options, for the aim of for both putting in them (if not already put in)…

 

or to uninstall them (if at the moment put in) or simply blocklist them,(if not at the moment put in), after we need it to be routinely eliminated if ever detected because of a compelled reinstallation by a future Home windows Replace not blocked by a Group Coverage (directive) as indicated earlier on this article. That may very well be both as a result of there is no such thing as a such Group Coverage (directive) for that exact app or characteristic, or as a result of one way or the other the Group Coverage failed.

Along with utilizing Winhance to take away and exclude sure undesired promoting, bloat and espionage, Winhance additionally contains very desired options to Optimize and Customise Home windows. Though these two sections are formally outdoors the scope of this explicit article, I’ll provide you with two examples I really like beneath Customise:

• In Home windows Theme, it permits setting Darkish Mode for Home windows even earlier than we’ve had an opportunity to Activate Home windows. What a reduction!
• In Explorer, it permits displaying file extensions and in addition displaying hidden folders, information and drives.

As well as, Winhance has a bit to put in or uninstall third-party apps, all steered by its creator, and a few of that are nice substitutes for the espionage-infested ones we’ll possible need to take away from Home windows 11, like Notepad, in favor of Be aware++ which is usually recommended within the third- occasion apps part.

I’ve confirmed that utilizing the third-party app installer perform inside Inhance (which makes use of Microsoft’s personal WinGet perform) does it in a desired approach. For instance, if I exploit Inhance to obtain and set up the Courageous Browser (and my Home windows is already set to point out Castilian in its person interface), the downloaded and routinely put in Courageous Browser shows the identical language. Obvlously, this solely works with WinGet succesful apps which have been translated to the present Home windows show language.

For extra info, go to Winhance.web or go to the creator’s YouTube channel right here.

Associated content material

Lee este artículo en buen castellano

Domemos a Home windows 11 con Winhance y «directivas de grupo» como tu defensa afirmativa preventiva contra el espionaje, publicidad y relleno

(Re-)Subscribe for upcoming articles, opinions, radio exhibits, books and seminars/webinars

Stand by for upcoming articles, opinions, books and programs by subscribing to my bulletins.

In English:

En castellano:

Most of my present books are at books.AllanTepper.com, and in addition go to AllanTepper.com and radio.AllanTepper.com.

FTC disclosure

Not one of the listed people or corporations talked about above has paid for this text. A few of the producers listed above have contracted Tépper and/or TecnoTur LLC to hold out consulting and/or translations/localizations/transcreations. Thus far, not one of the producers listed above is/are sponsors of the TecnoTur, BeyondPodcasting, CapicúaFM or TuSaludSecreta applications, though they’re welcome to take action, and a few are, could also be (or might have been) sponsors of ProVideo Coalition journal. Some hyperlinks to 3rd events listed on this article and/or on this net web page might not directly profit TecnoTur LLC by way of affiliate applications. Allan Tépper’s opinions are his personal. Allan Tépper is just not chargeable for misuse or misunderstanding of knowledge he shares.