Thank you very much for sharing, I've been testing it on 23H2 Enterprise and it works really well. I've got a few notes though: Some registry tweaks display an "Access Denied" message when applying, those are: Code: & 'reg' 'add' 'HKLM\zNTUSER\Software\Microsoft\Windows\CurrentVersion\Themes\Personalize' '/v' 'EnableTransparency' '/t' 'REG_DWORD' '/d' '0' '/f' > $null & 'reg' 'add' 'HKLM\zNTUSER\Software\Microsoft\Windows\CurrentVersion\Feeds' '/v' 'ShellFeedsTaskbarViewMode' '/t' 'REG_DWORD' '/d' '2' '/f' > $null And one that doesn't seem to exist: Code: & 'reg' 'delete' 'HKLM\zNTUSER\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager\SuggestedApps' '/f' > $null I've done a few personal modifications (disabling OneDrive and Copilot, and other small things) but I've been struggling to find a way to disable Microsoft Teams (both and the (personal) one) and I'd appreciate some help. It doesn't seem to exist during the installation, but after updating Windows and opening MS Store it seems to get automatically installed, which is quite frustrating. Is the only way to disable the teams installation to Install Windows > Apply HKCU edits AFTER making the first user? I suppose I could automate this procedure with an autounattend but that's not ideal. Some information about the software used: VMware Workstation (17.0.0) ISO used: EN-GB Windows 11 23H2 (22631.5039) Business Edition -> Enterprise Host OS: W10 Enterprise 22H2 (19045.5198)
What is the purpose of the "Enable-Privilege" function present in the script? I understand the description you gave in the comment, to be able to modify protected keys, but as far as I can understand (which is not much) while the function does take ownership of some keys, it does not modify them whatsoever, making the section pointless. Was that a section you're planning to expand later on or am I missing something?