Optimize-Offline - Win 10 iso Debloating Tool for 1903, 1909, 20H1 and LTSC 2019

[MaskedUser]

Optimize-Offline is a Windows Image (WIM) optimization module designed for Windows 10 versions 1803-to-1909 64-bit architectures.
About Optimize-Offline

    Expands the user experience by eliminating unnecessary bloat, enhancing privacy, improving aesthetics and increasing system performance.
    Accepts either a full Windows 10 installation ISO or a Windows 10 install.wim file.
    Does not perform any changes to an installed or live system.
    Checks the health of the image both before and after the module runs to ensure the image retains a healthy status.
    Detects what Provisioned and System Applications were removed and further removes any associated drivers, services and integrated content associated with them.
    Allows for the deprovisioning and removal of Provisioned Application Packages, System Applications, Capability Packages, Windows Cabinet Package Files, Optional Features and more.
    Allows for the integration of drivers, Microsoft DaRT 10, Windows Store, Microsoft Edge, Developer Mode, Setup content, Data Deduplication and more.
    All optimization processes are done silently with internal error-handling.
    All images are optimized independently - without the need for 3rd party programs - by utilizing custom module resources.

Module Disclaimer

    The latest releases of Optimize-Offline can be found here
    It is the responsibility of the end-user to be aware of what each parameter value, which are all well documented in the Help Topics.
    Optimize-Offline is designed to optimize OEM images and not images already optimized by another script/program.
    Optimize-Offline is designed for the en-US host environment.
    Just because something can be removed does not mean it should be removed. Haphazard removal of features and/or packages can cause Windows 10 setup or runtime errors.
    Support will not be given to users who attempt to optimize unsupported builds or previously modified images.

Optimize-Offline Best Practices

    Before optimizing an image, read the Help Topics to become familiarized with what each optimization does.
    Keep the default project file stucture in its default state.
    Only OEM images should be used for optimization and not images that have already been modified by other scripts and/or programs.
    If maintaining fully updated OEM images, it is best to integrate offline updates into the image BEFORE running Optimize-Offline.
    To ensure package removals and integrations are retained, it is best to update an offline image with the latest Servicing Stack Update(s) and Monthly Cumulative Update before optimizing it.
    Do not run any other programs or scripts - or manually run commands - that can interact with either the working directories of the module or the registry while optimizations are processing.
    Read the ReadMe files in the 'Content\Additional' directories for important information regarding user-specific content.

Parameters
About System Applications

System Applications are a lot like Provisioned Application Packages (Windows Apps) in respect that they are provisioned and installed during the setup of Windows. During the Windows Setup component pass, setup looks for these System Applications in the default registry and provisions them for installation only if their entries are present. By removing these entries, Windows Setup does not provision them for installation.

This method is safer than force removing the System Application using its component package because it retains the default file structure. Furthermore, the force removal of System Applications' component packages can trip the dreaded "STATUS_SXS_COMPONENT_STORE_CORRUPT" flag. This is a critical component store corruption flag that will then be detected by any servicing command and Windows Update and prevent both the servicing and updating of the Operating System. The only way to remedy and fix this error is to re-install or reset the Operating System.
System Applications universally safe to remove

The following System Applications are safe to remove:

    BioEnrollment (provided no biometrics will be used)
    CallingShellApp
    MicrosoftEdge
    MicrosoftEdgeDevToolsClient
    SecHealthUI
    ContentDeliveryManager
    ParentalControls
    SecureAssessmentBrowser
    XGpuEjectDialog
    XboxGameCallableUI

Cortana can also be removed, though doing so will render the default search feature inoperable and is only recommended if a 3rd party search program like Classic Shell will be used.

Some System Applications are required during the OOBE setup pass and their removal can cause setup to fail. Do not remove any System Application if you're unsure of its impact on a live system.
About Windows Capabilities and Packages

The Capabilities parameter allows for the removal of Features on Demand (FOD) installed in the image and the Packages parameter allows for the removal of Windows Cabinet File Packages.

Like with all removals, care must be taken when using either of these removal parameters, particularly the Packages parameter. Do not remove any Capability or Package if you are unaware of its impact on a live installation. It is recommended to read the Features on Demand Document to better understand their functions.
About Registry Optimizations

The -Registry switch applies an array of entries and values to the image registry hives designed to further enhance both the security of the default image as well as its usability and aesthetics. The module only applies those registry entries and values applicable to the image build being optimized and bypasses those that are unsupported. Conversely, Optimize-Offline will apply additional entries and values to accommodate any application removal or integration. Optimize-Offline does not apply any Group Policy entries that are not available in the specific image by default, as this would just add unnecessary bloat to the registry itself with zero functionality.

A short list of some of the optimizations include:

    Completely disables Cortana without disabling the default search feature.
    Disables a significant amount of telemetry, logging, tracking, monitoring and background feedback submission.
    Prevents bloatware link creation and disables a plethora of annoying default features.
    Disables Windows' annoying pop-up notifications and tips.
    Disables non-explicit application and system location sensor access.
    Disables background error reporting and automatic synchronization to Microsoft.
    Disables the automatic creation of tabs and icons for Microsoft Edge.
    Disables intrusive Microsoft feedback and notification queries.
    Cleans-up the default Context Menu.

About the SMB1 File Sharing Protocol and Windows PowerShell 2.0 Optional Features

When optimizing an image with Optimize-Offline, curiosity may arise as to why the SMB1 Protocol and Windows PowerShell 2.0 Optional Features are automatically disabled. In short, Microsoft has labled both of them a security risk.

    The SMB1 Protocol is vulnerable to Ransomware propagation.
    Windows PowerShell 2.0 can be used to run melicous scripts and has been depreciated since Windows 10 version 1709.

About Additional Content

When the Additional parameter it used, any content specified in its configuration JSON file (Additional.json) will be integrated into the image. This eliminates the need to use an external Distribution Share to integrate content.

Content validation is based on Microsoft's deployment guidelines. All content that gets transfered to the image are copied to locations that are in accordance with Microsoft's deployment guidelines. For example, any system logo is copied to '\Windows\System32\oobe\info\logo', wallpaper is copied to '\Windows\Web\Wallpaper', setup content is copied to '\Windows\Setup\Scripts' and an unattend.xml is copied to '\Windows\Panther' after it is applied to the image itself (this is detailed more below).

Content can be in the form of files, folders or directories, unless a specific filetype is required. Content is NOT copied haphazardly nor are original file structures ignored.
Registry Template Integration

Any custom registry template (.reg) file to be imported into the offline image's registry hives can be placed in the '\Content\Additional\RegistryTemplates' folder. No editing of these template files is required and Optimize-Offline will copy and edit them accordingly to apply them to the appropriate hives.
Adding Drivers

Any driver package to be added to the offline image can be placed in its respective folder in the '\Content\Additional\Drivers' directory. Within this directory you can select whether a driver package is added to just the Windows Installation (install.wim), or also to the Windows Setup and Windows Recovery environments. Either single .inf files or full driver package folders are supported.
Adding an Answer File

When an unattend.xml answer file is added to the '\Content\Additional\Unattend' folder, Optimize-Offline applies the answer file directly to the image, creates the '\Windows\Panther' directory within the image and finally copies the answer file to it. "Panther" was the code-name for a servicing and setup engine that began with Windows Vista and has remained as such since.

During Windows installation, Windows Setup automatically looks for answer files for custom installations in certain locations. %WINDIR%\Panther and the installation media are the first locations checked for an answer file. An unattend.xml located in the %WINDIR%\Panther directory will act just like an autounattend.xml does and can contain all the same content. This is an alternative way to run a custom answer file for Windows Setup automatically as opposed to setting an autounattend.xml to the root of the installation media type being used. Moreover, you can also use multiple answer files by applying one to the image and adding an autounattend.xml to the bootable media. For example, the unattend.xml applied to the image can contain OOBE and Windows Setup parameters while the autounattend.xml can contain only parameters for the WindowsPE pass that sets up the partitions and disks for installation.

It is recommended to create an unattend.xml using the Windows System Image Manager that is included in the Windows ADK. Though there are some online answer file generators that will "quickly" create an unattend.xml for you, just like with Windows 10 features, answer file variables can change between builds. Likewise, having faulty or unsupported variables in an answer file can prevent Windows Setup from completing.

It is also in good practice to have a good idea what each Configuration Pass does and what actions its child parameters takes during the Windows setup process. All information regarding Configuration Passes can be found in the Microsoft Document

Having incorrect, null or incomplete values in your answer file, most notably the WindowsPE Configuration Pass, WILL prevent Windows from completing its setup or even starting its setup. If a custom disk layout is included for installation, make certain the proper drive index numbers, partition type IDs and sizes are entered.
About Microsoft DaRT 10

Integrates the Microsoft 10 Diagnostic and Recovery Toolset with additional debugging tools. Since these tools run in a Preinstallation Environment and are quite powerful, it is wise to be aware of what they do prior to using them and to NOT integrate them into images that will be used by multiple people.

    Microsoft Diagnostics and Recovery Toolset (DaRT) 10 lets you diagnose and repair a computer that cannot be started or that has problems starting as expected. By using DaRT 10, you can recover end-user computers that have become unusable, diagnose probable causes of issues, and quickly repair unbootable or locked-out computers. When it is necessary, you can also quickly restore important lost files and detect and remove malware, even when the computer is not online. Microsoft Document

About Win32Calc

Starting in Windows 8.1, Microsoft introduced a Metro-style calculator to replace its traditional Calculator. In Windows 10 non-LTSB/LTSC/Server editions, the traditional Calculator was entirely removed and replaced with a UWP (Universal Windows Platform) App version. This new UWP Calculator introduced a fairly bloated UI many users were simply not fond of and much preferred the simplicity of the traditional Calculator (now labeled Win32Calc.exe). Unfortunately, Microsoft never added the ability to revert back to the traditional Calculator nor released a downloadable package to install the traditional Calculator.
About Data Deduplication

    Data Deduplication, often called Dedup for short, is a feature of Windows Server 2016 that can help reduce the impact of redundant data on storage costs. When enabled, Data Deduplication optimizes free space on a volume by examining the data on the volume by looking for duplicated portions on the volume. Duplicated portions of the volume's dataset are stored once and are (optionally) compressed for additional savings. Data Deduplication optimizes redundancies without compromising data fidelity or integrity. Microsoft Document

With Optimize-Offline, the Data Deduplication packages and Dedup-Core Windows Feature can be integrated into the offline image. PowerShell can then be used to enable and manage Data Deduplication using its storage cmdlets. More information is available from its Microsoft Document
About Developer Mode

Developer Mode is a Windows Setting that, when enabled, allows the end-user to test any unsigned UWP app, use the Ubuntu Bash shell environment and offers optimizations for Windows Explorer, Remote Desktop and PowerShell. It is also a requirement when writing certain code in Visual Studio.

Enabling Developer Mode also installs Device Portal and Device Discovery, though they must be manually toggled on in the Settings in order for them to be enabled. Enabling Device Portal will reconfigure the default firewall rules to allow incoming connections, as Device Portal is a feature allowing for the system to act as a local web server for other devices on the local network. This is used for developing, deploying and debugging apps. Enabling Device Discovery allows devices to pair with Device Portal.

Developer Mode should ONLY be enabled on systems that require settings it provides. More information is available from its Microsoft Document
Integrating Windows Store

For Windows 10 Enterprise LTSC 2019, the latest Windows Store package bundle and dependency packages can be integrated into the image, as this flavor of Windows (like Windows 10 Enterprise LTSB 2015-2016) does not contain any Windows Apps in its OEM state. There is no additional procedure required once the optimized Windows 10 LTSC 2019 is installed, and the Windows Store will be displayed in the Start Menu.
Integrating Microsoft Edge

For Windows 10 Enterprise LTSC 2019, Microsoft's flagship browser - Microsoft Edge - can be integrated into the image since this flavor of Windows (like Windows 10 Enterprise LTSB 2015-2016) does not contain Microsoft Edge in its OEM state.
Solid Image Compression

Solid image compression uses the undocumented LZMS compression format to concatenate all file data within a regular WIM file into a solid WIM archive (ESD file). By doing this, a 4GB WIM file is able to be compressed to a size of 2GB or less. However, as with other forms of high-ratio compression, LZMS compression can take quite a while to complete and should NOT be selected as the final image compression type if the end-user is impatient or requires the optimized image quickly.
ISO File Structure Optimization

This is a process that occurs automatically when a Windows Installation ISO is used as the source image for optimization. In short, it removes all unnecessary media files used to install Windows 10 from a live system, thus reducing the total size of the installation media. The order in which files are removed and moved is critical for proper file structuring.
ISO Remastering and Creation

When a Windows Installation Media ISO is used as the source image for optimizing, Optimize-Offline expands the entire media structure of the ISO into its own directory and allows for the creation of a new bootable Windows Installation Media ISO containing the newly optimized Windows Image after all processes have completed.

The -ISO parameter allows for two values to be passed to it: 'Prompt' and 'No-Prompt.' This value sets the binary bootcode the image will be created with. An ISO created with the 'No-Prompt' bootcode will not require a keypress to begin Windows Setup allowing for a completely unattended Windows installation, while an ISO created with the 'Prompt' bootcode will require a keypress before Windows Setup will start.

Optimize-Offline calls the COM IMAPI2 interface for file system image building and also opens a binary stream that writes a bootfile sector code to the ISO. This allows for bootable Windows Installation Media ISO creation without the need for 3rd party tools like oscdimg.
About Defaultuser0

Any time an OEM Windows Image is modified offline, or the System Preparation, Reset and Provisioning Package deployment features are used, there is a chance this ghost account will surface. defaultuser0 is not a real account, however, and is a bug that has been present in Windows through countless flavors and variations. It is not added to any user groups nor does it even have a profile. Conversely, failing to remove the defaultuser0 account immediately after Windows Installation completes can lead to future headaches. As an example, if you reset Windows with the defaultuser0 ghost account still present, upon the restart of the device, Windows will force you to log into the defaultuser0 account to continue.

In earlier versions of Optimize-Offline, a specific registry key was appended to allow for elevated control over the defaultuser0 account which allowed for its manual removal, as well as a SetupComplete.cmd script code that automatically removed it. However, with the newer builds (17134+), this is no longer required and simply rebooting the newly installed OS will automatically remove the defaultuser0 account from the 'Users' directory without having to manually remove it.
Using Optimize-Offline

Open the custom configuration JSON file (Configuration.json) in any text editing program and edit any values for your specific optimization requirements. While editing the Configuration.json file, do not change the template structure and make sure its formatting is retained when adding or changing values.

Once you have edited the Configuration.json to your specific optimization requirements, open an elevated PowerShell console in the root directory of the Optimize-Offline project and type:

.\Start-Optimize.ps1

Homepage :

Code:

The contents of this section are hidden

You have No permissions

Download :

Code:

The contents of this section are hidden

You have No permissions

Support From MDL Member Kedarwolf :

Code:

The contents of this section are hidden

You have No permissions

How to Guide By Disk2019 :

Code:

The contents of this section are hidden

You have No permissions

[drew84]

@Disk2019
Just a heads up.. While its a fairly good place to start...
the support thread you mentioned, is maintained/provided by MDL member KedarWolf
and not the developer Godhand (as he is known on MDL).

Following the issues on DrEmpiricism (Godhand) github page is another important
way to glean knowledge for using and manipulating this script.

[MaskedUser]

Win ADK is mandatory for this script / project to work :

Alternative for ADK to save bandwidth :
1903/9

Code:

The contents of this section are hidden

You have No permissions

1809LTSC

Code:

The contents of this section are hidden

You have No permissions

[MaskedUser]

How To Guide

Very important point :{ EN-US Language ISO must only be used }

Extract the zip file download via github page & rename the folder to Optimize-Offline

Then

You need to edit config.json file inside the Optimize-Offline Folder as per your needs as an example i am sharing my config :

Code:

The contents of this section are hidden

You have No permissions

Source Path must be according to your Optimize-Offline Directory Project :
"SourcePath": "C:\\Users\\%UserName%\\Desktop\\Optimize-Offline\\Win10.iso",

if you want to select Provisioned Apps then you can edit config.json file & replace"ALL" with "Select" [ "WindowsApps": "All",]

Then open powershell console with elevated privilages & set execution policy to unrestricted via this command :
Set-ExecutionPolicy Unrestricted
Press A to set to all

Then go to the path via cd command in powershell console where your project folder reside ie Optimize-Offline & execute the script
.\Start-Optimize.ps1

all modern UI apps which are not system apps will be selected and removed in first run.

Now its turn to remove system apps as per shown in images & there so on----

select apps to be removed as per shown in images step by step :


You can select cortana as well in the system apps list but win search ui will not work after that.



you can select everything except language pack for capabilities



You can select all [on demand] packages in this list



Select everything as shown in image

Next step it will ask you to enable features : Dont select anything in that menu & click next.



final select maximum for wim based iso
or
solid for esd based iso

After script finished you need to set powershell execution policy back to defualt for this type :
Set-ExecutionPolicy Default
press a to set default to all .

thats all you have created your optimized debloated win 10 iso without any telemetry & may close the powershell console.
the optimized iso will be found there inside your project folder Optimize-Offline.

Done Enjoy Take Care & Stay Blessed.

[My Vn]

how to use?

[MaskedUser]

Brother i have written a post prior to yours in this thread as an example for how to use this with images as an example.
i hope its very clear to all who will read that post & will create there own optimized debloaded win10 iso without any telemetery.

Even if somebody wants some more clarification i am always here to support them but remember i am not the developer of this script as its created by GodHand MDL User & i am just following his thread to support his project here on our community cuz its a best project i have used which is created by developer using Sapien's Powershell Studio.

[My Vn]

[MaskedUser]

{ Invalid Json Primitive : Select }

brother is Win10 ADK installed on your system if not please go through the post to download & install as per your system edition & source iso :

Code:

The contents of this section are hidden

You have No permissions
# post no-5 of this thread.

{ Parameter could not be found : Source Path }
& if installed please cross check your config.json file plus path to iso & iso name must be correct in your json file.

As the project is still in its Alpha Stage theres no any GUI Executable but Developer is working hard to publish a ful featured GUI very Soon.

[My Vn]

Sorry, I am missing this > Set-ExecutionPolicy Unrestricted

[MaskedUser]

its ok brother . dont be sorry . i hope script on your side worked well without any error at last & result in a fully debloated win10 iso without any telemetery .