Last updated on Februar 8, 2024

This post describes how I typically set up and configure my Windows machines.

[compatibility issues with Windows on ARM are marked red]
See Using the Windows Dev Kit 2023 ARM Mini-PC as Office Computer

For details on Windows features and configuration, see Paul Thurrot’s Windows field guides:
Windows 10 Field Guide
Windows 11 Field Guide

Repair Install?

To avoid a lengthy and boring Windows reinstall, it might be worth trying a repair install first, replacing all Windows files while keeping all store and desktop(!) apps, data and settings. Here a quick repair from within an existing Windows installation, not requiring to boot from a recovery drive. The whole process takes about 90 mins.

  • Reduce used drive space via Disk Cleanup
    To reduce copy time and have room for the Windows.old copy which repair will create.
  • Create Windows 11 Installation Media
    Select „Download Now“ under „Create Windows 11 Installation Media“.
  • Run the MediaCreation Tool to download a Windows.iso
  • Mount the Windows.iso
  • Start Setup.exe from the mounted volume
  • (Deselect downloading updates)
    Via „Change how Setup download updates“.
    For a faster repair, but updates need to be installed via Windows update later.
  • The repair then runs automatically without any user input
  • Delete Windows.old
    Once you are sure the repair worked fine.

Lately (Nov 2023 with Windows 23H2) a repair install fixed persistent problems with my old X1 2-in-1 Tablet PC: System interrupts hogging the CPU, Outlook contacts not indexing for search and the fingerprint reader no longer being detected. Typical fixes (like recreating the index, SFC and DISM) had not worked.

Current Windows 11 & OneDrive problems

Generally, Windows 11 works fine for me, especially version 23H2. Major problems I am currently experiencing are:

  • Edge and Chrome abort downloading large files with error „… network issue“. All recommended fixes don’t work.
    Workaround: use Firefox for such downloads – works without any problems.
  • OneDrive for Business is extremely slow at downloading. Plus it has nasty file name, extension and path limits.
    One does not feel this when working with single files, but syncing a large file structure when setting up a new PC is a nightmare. Downloading my 100 GB takes about 2.5 days. OD for Business permanently stalls with downloading at 0.0 Kb/sec and not progress – on idle PCs with an idle fast internet connections. Happened to my on 3 different PCs connected via 2 different internet providers.
    All recommended fixes work for some minutes only, then it slows down to stalling again. This problem exists for years without MS fixing it. OD Personal works fine.
    I am moving all my OD Business files to Tresorit and OD Personal.

My typical Windows and apps layout:

  • Windows Dark theme
  • Office Black theme
  • Dark solid color background
    I find background pictures distracting
  • Window borders in accent color (not supported by all apps)
  • My favorite Office commands in Quick Access toolbars above ribbon
  • Outlook HubBar disabled for more horizontal space
  • My most used apps pinned to Taskbar
  • 3 clocks in Taskbar
  • Important Taskbar tray icons always visible
  • Taskbar search: show icon only
  • My web browsers configured doing research
  • ‚This PC‘ pinned to desktop
  • Colored mouse pointer (in the picture below, green)
  • Some changing stuff I am currently interested in (files, links) on desktop
My typical windows and apps layout
3 Clocks and my tray icons

My Data Storage Configuration

I store data in the cloud (Tresorit, OneDrive Personal, Google), locally on my desktop and notebook PCs and on my Android phones. In addition I keep sporadic image and file & folder backups on external SSDs with some versions in a bank safe.

All my files are synced to the cloud. I prefer using Tresorit because it uses end-to-end encryption and simply works unobtrusively. I use OneDrive Personal for the standard Windows folders Documents, Pictures, Videos (don’t have any) Music and Desktop. I moved the OneNote folder (which syncs my Notebooks across all my computers) out of Documents to the root of my users folder because I was sick of digging for it when setting up a new computer.

Android „Camera Roll“ (as backup to Google Photos) and „Microsoft Lens“ are also stored in OD Personal because this is convenient and relatively easy to set up. My Android phones store their stuff (photos, videos, OS and app backups) with Google.

  • Google Photos are backed up to OneDrive/Pictures/Camera Roll
    I moved all photos from the old SkyDrive Camera Roll to Camera Roll.
  • Microsoft Lens PDFs are uploaded to OneDrive/Documents/Office Lens

I quit using OneDrive for Business because it frequently stalls on syncing and has annoying restrictions for path length and file and folder names. In contrast, OneDrive Personal works fine, but it lacks E2EE too.,

It is beyond me why Microsoft does not offer end-to-end encryption for OneDrive. Yes! encrypted file content or names could not be indexed in the cloud for searching and if the user loses his key he loses his data. But MS could at least make E2EE an option (on folder level.).

My desktop PC stores all my data locally via
– in OD Files-on-Demand set Off
– and ‚Choose Folders‘ select all
– and in Tresorit all folders synced

My notebooks only store data locally that I want to have access to when travelling and offline via
– in OD Files-on-Demand set On
– and ‚Make available offline‘ in File Explorer
– and in Tresorit via ‚Selective Sync‘.

On Windows my private files are stored in my users folder – to ensure I don’t accidentally give access to guest users I might add to Windows.

My file and folder name conventions:

  • Personal folders in my users folder start with „. „
    to sort first.
    Frequently used folders are pinned to Quick Access.
  • File names for files with date-relevant content start with yyy-mm-dd
    for easy sorting.
  • Folders with old content start with „zz-„
    to sort last
  • Folders with content I plan to delete start with „xx-„
My private folders with prefix „. “ and frequently used folders pinned to Quick Access

Installing Windows

Installing the OS and apps is easy and quick. Adjusting OS and app settings to my preferences is boring and time-consuming.

I case you might want to roll back to a backed up version make sure to first have a current backup and copy if important settings, see Final backup!

Run Windows Setup

Just do a standard Windows setup:

[In case you are angry at Microsoft making it difficult to install Windows without using an MS account: One reason might be that on modern HW Windows by default encrypts the system partition with BitLocker. If one loses the BitLocker key, one will lose all data in case of problems where the key is needed. Thus, as a precaution Windows automatically stores the BitLocker key in the MS account.]

Even though being German, I prefer English as display language because the UI texts are shorter, there are less translation errors and it is easier to search for help with English texts and error messages. Sadly MS and many app developers confuse display language with locale, resulting in apps with German UI even though I want a complete English UI.

  • Windows display language: English
  • Region: German
  • Keyboard: German
  • Add German language via language settings for proofing tools

Set up for personal use.

If offered, select restore from previous installation of this device.
With Windows 11 this e.g. does pin my favorite apps to the Taskbar. For not installed apps a click on the icon leads to the web download location.

Don’t select „customize your experience„.

Don’t allow OneDrive folder backup.
Windows might still later enable this without asking. So have a look from time to time!

Set up a sign-in PIN. This is safer than always using your password.
In addition, I configure a fingerprint if the machine supports this.

If unsure about the thermals of the machine (new build, new SSD) run HWINFO to check.

Update to the newest version:

  • Force Windows updates
  • (Including Advanced options > Optional updates)
    I always do this – might be better not to.
  • While in Windows Update enable:
    • Get Windows updates as soon as they are available
    • Receive updates for other Microsoft products
  • Force Windows Store apps updates
  • (Install PC maker’s updates via their tool, e.g. via Lenovo Vantage)
    Maybe it is better to do this only when experiencing problems with what Windows updates installs or when features are missing or with important security fixes.

Configure a backup tool
I don’t use File History because it does not support Boxcryptor encrypted files.
MS has deprecated File History.

Paul Thurrot (who (re)installs Windows on new PCs all the time) switched from image based backups to a cloud based solution with Window Reset or Windows Setup media. Currently, I still find reconfiguring Windows and app with this approach too cumbersome.
Thurrot: Roll Your Own Windows Time Machine (Premium) – Thurrott.com

Currently (23H2) the new built-in Windows Backup is of limited use only because it lacks backing up important Windows settings, desktop Apps, …

I use:

  • Macrium Reflect
    I use Macrium to backup
    – system images (free version) and
    – important files & folders (paid)
    • Let Macrium create rescue boot entry
    • password protect backups!
  • On ARM Macrium does not run
    I use ‚Backup and Restore (Windows 7)‘
    which is still available in Windows 11 (under Control Panel)
    or via the command wbAdmin, e.g.:
    wbAdmin start backup -backupTarget:E: -include:C: -allCritical -quiet
    I used this for years, it is quick and reliable.
  • Bitlocker to protect backups on the external drives
    Macrium does have its own password protection, but I want to encrypt the occasional files I copy to backup drives too.
    • turn on BitLocker auto-unlock
    • the drive can easily be unlocked other machines by simply entering the password (the long recovery key is needed only if one forgets the password)

Create a first backup to make it easy to revert to this point.

  • Create Windows system restore point
    Might have to enable system restore first.
  • Create System partition image backup using backup tool
    Create the backup tools recovery media and boot entry.
  • Create a Windows recovery drive.
    See Gute Elektronik und Zubehör for good USB-C/A Sticks.

Configure Windows

  • Enable Remote Desktop Connection (RDP) to new machine
    I find it helpful to be able to remote into all my machines, e.g. for scenarios when they are running without peripherals connected or when they are not reacting to mouse and keyboard. Beware! If you did not RDP into a machine for a long time, it might refuse accepting the correct credentials. I try to prevent this by periodically connection remotely or running an app as admin on the remote machine, e.g. runas /u:MicrosoftAccount\[my account] cmd.exe
  • Print settings
    • Select default printer
    • Set „let windows manage my default printer“ to off.
    • Change printer paper property from Letter to A4
      This is one of the areas where devs confuse system language English with locale German.
  • Dark mode for Windows and apps
  • Windows background: solid dark color
    I consider background images distracting noise.
  • Taskbar alignment left
    With a centered taskbar, pinned icons move when additional apps are opened. Left aligned looks nicer to me.
  • (Select „Automatically hide taskbar„)
    In the past there were always some apps not working properly with this setting. Now this seems to work fine and gives you more vertical space.
  • Add „End Task“ to Taskbar right click
    via System > For developers
  • Show accent color on title bars and windows borders
    Via System > Personalization > Colors.
    Without colored borders I find it hard to distinguish between layered windows when using dark mode. Sadly the colored borders settings is currently ignored by MS Office, many older apps and some current apps like 1Password.
  • Check if Taskbar clock shows correct time
    Sometimes one must force a time sync.
  • Additional clocks.
    Add two additional clocks via ‚Date & Time, Additional Clock‘.
    They will show in addition to the local time when pointing at the clock on taskbar.
  • Set Taskbar Widgets setting ‚Show Announcements“ off.
    This hopefully only shows weather info on the Taskbar.
  • Show most used apps: on (Win11 only)
    Shows most used app at the top of All apps in the Start menu
  • Tighten admin security
    This improves security and only costs rare additional confirmation prompts.
    • User Account Control settings: ‚Always notify me‘
    • Choose where to get apps: ‚Anywhere, but warn me before installing an app that’s not from the Microsoft Store‘
  • Set „If you’ve been away, when should Windows require you to sign in again?“ to 5 min.
  • Enable „Dynamic Lock“ using a phone paired via bluetooth.
    Pairing is stubborn sometimes. Trying to bluetooth pair from the phone may help.
  • Disable keyboard caps lock.
    I rarely need caps lock, but often hit it accidentally. This is easy to reverse.
    disable_caps_lock.zip
  • Disable Windows Fast Startup
    Windows on SSDs starts fast enough without Fast Startup.
    Fast Startup writes systemstate at shudown which slows down shutdown.
    Starting with a saved OS state can cause problems.
  • Enable Windows Voice typing launcher via CTRL-H, Settings.
  • Make Mouse pointer easier to locate
    • Green color
      I use a different color for each machine to help distinguishing which machine I am on when remoting.
    • Enable ‚Show location of pointer when I press the CTRL key‘
  • If the File Explorer OneDrive context menu with „Share“ or „View online“ is missing: Change the User Account Control policies to allow OneDrive context menus. To cumbersome to configure. I use OneDrive online to share.
    With the Win11 March 2023 update the OneDrive menu items are available by default in the right-click context menu via „Show more options“ or via shift+right-click.
  • (Enable Nearby Sharing)
    I currently don’t use this, but it might be worth a look.
    For a good explanation of all Windows file sharing methods, see A quick survey of legacy sharing features
  • Bitlocker
    • Enable Bitlocker for all drives
      • On modern HW Bitlocker is automatically enabled for the system drive (without notifying the user) and the key is stored in the Windows account
      • If your backup tool does not support password protection: enable BitLocker for the removable backup drive too
    • Backup Bitlocker Keys to
      • USB stick
      • and copy to encrypted(!) cloud storage
      • and Print – to store in bank safe
      • and Save to AD
        As my machines are connected to my work/school account and my personal MS account, BitLocker keys are saved to AD instead of my personal MS account.
        How to Find your Bitlocker Recovery Key — LazyAdmin
        Because „Save… to AD…“ is not offered by the BitLocker control panel app is use PowerShell script:
        • $BLV = Get-BitLockerVolume -MountPoint „D:“
        • BackupToAAD-BitLockerKeyProtector -MountPoint „D:“ -KeyProtectorId (($BLV.KeyProtector | where {$_.KeyProtectorType -eq „RecoveryPassword“}).KeyProtectorId)
  • Storage Sense
    Maybe change run ‚During low free disk space“ to „monthly“.
  • Import all EFS-Certificates
    I have lots from many machines. Some with 10+ years old certs.
  • Enable Windows long paths
    To enable long file paths in Windows, open Registry Editor, create a new DWORD named „LongPathsEnabled“ in „HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\FileSystem“ and set the value to 1.
  • Turn on the Diagnostic Data Viewer under ‚Diagnostics & feedback“
    • Install the Diagnostic Data Viewer app from the Microsoft Store
  • Create folder c:\temp
  • (Consider adding a Windows Dev Drive)
  • Enable „Find my device
  • Consider using Windows „Smart App Control

File Explorer options

  • Compact view
  • Single-click to open an item
    I am quicker with single-click. One only has to master selecting multiple files with single-click enabled.
  • Deselect ‚Hide extensions of known file types‘
  • Show encrypted or compressed NTFS files in color
  • Use check boxes to select items
  • Deselect ‚Hide protected operating system files‘
    Always showing protected OS files is no longer helpful since after Windows XP.
  • Remove folder options „Show frequently used folder (in quick access)“ and „Show recommended“.

Install Apps

Microsoft Apps

  • MS Office apps
    • Outlook
      • Add all my email accounts
        Connect to all email accounts via importing a registry tree export from an existing PC under:
        HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\Profiles
      • Set download from the past‘ to ‚all‘
        Sometimes one has to force OL to actually download all by navigating to the last email
      • Diable „Screen Tips“, via File, Options, General.
      • Restore Outlook signatures
        Sadly signatures don’t sync automatically between installations.
        I simply store them in a .txt file because I might need them in different email clients.
        Alternatively, Outlook signatures can be backed up and restored from:
        C:\Users\<username>\AppData\Roaming\Microsoft\Signatures
      • Configure secure email using an S/MIME certificate
        I gave up on email encryption because none of my contacts were interested, including businesses (as I still was working for a SW house – how incredibly stupid!)
      • Change auto mark as read timeout to 2 seconds
        Options > Advanced Reading Pane > Wait x seconds before marking item as read
      • Check if Outlook uses Windows indexing, via Outlook: File > Options > Search > Indexing Options. Note! the options Window here shows Windows indexing setting more complete and readable than Windows Settings > Indexing options: e.g. Outlook, OneNote, … instead of cryptic mapi16//… names.
      • Configure search to „current folder“ instead of the default „current mailbox“
      • To sporadically backup all my emails I use the MailStore App.
        To control its storage location select portable install in its setup.
    • Word
    • Excel
    • Powerpoint
  • Windows Mail
    I gave up on this because it is being replaced by the new Outlook and its handling of mail accounts is cumbersome.
    • Add my Microsoft 365 email account only
      For mail and calendar Live Tiles in Win 10. And As fallback in case Outlook hangs.
      The Win11 Outlook Calendar Widget does not work for me (June 2023)
  • MS To Do
    • Connect to my Microsoft 365
      Automatically syncs Outlook tasks with To Do
  • OneDrive Personal and For Business
    For a good description of OneDrive features, see Get to know OneDrive in Windows 11
    • Disable File Collaboration.
      I don’t work concurrently with Office docs on different PCs.
      I had the feeling disabling makes OneDrive faster and more robust.
    • Configure OneDrive Folder Backup for Documents, Pictures, Music, Videos..
      Configure Folder Backup for Desktop on one PC only! Otherwise, OneDrive will create a merged mess of the desktops of several PCs. [It seems to mess up the desktop anyway 🙁
    • If not automatically done: change the location of these folders to OneDrive
      via properties, Location.
    • Add to File Explorer Quick Access
      • OneDrive Camera Roll folder to File Explorer Quick Access – this is where OneDrive Android backs up my phone’s photos redundantly to Google Drive (one must configure this manually in OneDrive for Android via Me, Settings)..
      • OneDrive MS Lens
      • OneDrive WeltweitImRuhestand
      • Commonly uses Tresorit folders
    • Configure offline use.
      I select offline use for my desktop machines, and files on-demand for my mobile machines, marking some folders with ‚Always keep on this device‘. The 200GB local storage space required on my desktop does not bother me.
    • Sadly OneDrive for Business syncs quite slowly (the Personal version is a litte quicker)- sometimes it takes several days to download my 170GB – which is especially annoying because during this phase required files don’t downloade on-demand.
    • OneDrive for business has annoying restrictions for path length and file and folder names! This stems from its underlying implementation (Sharepoint). I found out the hard way when migrating from OneDrive personal to business. This is totally unacceptable and MS should have changed their implementation long ago.
  • OneNote
    One of my favorite features of OneNote is that it automatically inserts a link to the source URL when pasting a snippet from the web.
    • Add from Windows store for auto updates
      Since Oct 2022 the store delivers the desktop version
      which is the version MS will support in the future.
      On my last Windows setup it was installed already
    • Select File > Options > Sync > Download all files and images
    • I migrated my Notebooks from OneDrive Business to Personal. This proved difficult because both OneNote Web and the Android app expect Notebooks in OneDrive Documents root and offer no way to browse to my „OneNote Notebooks“ folder. My weird workaround:
      • Download Notebook folders from OneDrive Business.
      • Upload the local folders to OD Personal
        via OneNote Notebook Importer. This results in OneNote files (one does no longer see a folder structure) in Documents root.
      • In OneDrive Web move OneNote files from Documents to the desired „OneNote Notebooks“ folder.
      • Opening the Notebooks in the OneNote Windows app works normally.
      • The OneNote Web and Android app do not see the Notebooks! Workaround:
        • Open each Notebook in OneNote Web
          via double-clicking on the Notebook in OneDrive Web.
          OneNote Web now sees them.
        • Open each Notebook in OneDrive(!) Android
          this does open them via OneNote Android
          and OneNote Android remembers them.
    • Check if OneNote uses the desired storage locations
      Via File > Options > Save & Backup
    • Force a local OneNote backup
      Via File > Options > Save & Backup
    • Create desktop shortcuts to favorite Pages that open in the app and not in web:
      • In OneNote copy Page link an paste in to a test Page
      • Copy the link in the test Page
      • Create a desktop shortcut with it
  • Skype
    In addition to the standard Skype functionality I have a Skype number (Skype Festnetz Telefonnummer) and use Skype to Phone (to cheaply call any phone number anywhere in the World) using Skype credit (no monthly plan).
    • Configure microphone and cam
  • Phone Link
    Is very handy to be informed on the PC and espicially to see and copy SMS confirmation codes
    • Add PC to the Android „Link to Windows“ app
  • Windows Sandbox
    • Enable the Windows feature „Sandbox“
      Is very slow on ARM.
    • I automatically install Brave via a .wsb config file using the RuckZuck installer. For more Sandbox config options see Start Windows Sandbox With Preinstalled Apps

MS Office settings. For apps Outlook, Excel, Word, PowerPoint, OneNote:

  • Show Quick Access toolbar above the Ribbon
  • Import my app-specific Quick Access toolbar icons
    Office Quick Access Toolbar Icons.zip
  • Outlook:
    • disable the HubBar
      I often use Outlook on a monitor in portrait mode and HubBar needlessly wastes precious horizontal space. Under
      HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Common\ExperimentEcs\Overrides\ create a new string value Microsoft.Office.Outlook.Hub.HubBar and set it to false
    • Make Firefox the browser to open with web links in Outlook via setting
      File>Office Account>Advanced>File and brwoser preference to „Default Browser“. On ARM I stick with the default Edge.

Other Apps (manual install)

  • Boxcryptor
    I consider zero-knowledge encryption of cloud data a must-have, see Thoughts and Experiments on Cloud Encryption and Datenschutz (Ende-zu-Ende Verschlüsselung, …)
    To include decrypted Boxcryptor files in Windows indexing ‚Enable Windows search‘ in Boxcryptor advanced settings and add the drive x: to Windows indexing.

    In Nov 2022 BoxCryptor was sold to Dropbox. I don’t know if and when Dropbox will offer good and safe E2EE encryption. The alternative Cryptomator does not support Windows on ARM. I moved to Tresorit, which works better than the Boxcryptor/OneDrive combo I used on Intel.
    I don’t use OneDrive Vault: It offers no E2EE. Backup tools cannot backup Vault files. Vault was unstable in my tests.
  • Tresorit
    For end-to-end encrypted storage of privates files in the cloud.
  • 1Password
    A password manager is a must.
    For 2FA is use the MS Authenticator Android app. Currently I am evaluating using 1PWD for 2FA too.
    Many common assumptions about good password are wrong.
    See Toward better Master Passwords.
  • Macrium Reflect
    to backup system images (free) and important files
    • password protect backups
    • !Macrium cannot backup the Tresorit drive
      Baching up the synced folders works fine
    • on ARM systems (like the Windows Dev Kit)
      Macrium does not work. I fall back to ‚Backup and Restore (Windows 7)‘ for image backups, which is still available in Windows 11 (under Control Panel).
  • Portfolio Performance
  • Kindle for PC app
    While reading is way better on a Kindle ePaper reader, I prefer the PC app or cloud reader if I need to search a lot or jump around in books – as one typically does with technical books.
    • From Amazon deliver all books to Kindle for PC n
      (n as shown in Kindle for PC title bar)
      via Digital Content > select all books > deliver device > select Kindle for PC n
    • In Kindle for PC n app tap sync
    • My 1.000 ebooks use 500 MB drive space only!
  • Acrobat XI Standard
    I still use this very old version, because it supports removing known passwords from PDF files (like the ones I get from my doctor).
    The license came with my scanner. Must be installed before the current Reader version!
  • Reader (free version)
    Acrobat reader can fill and sign PDFs with and without form fields
    • Configure signature picture to sign PDFs
  • AusweisApp2
    For authentication with my German identity card.
    Works fine with the Android AusweisApp2 and a phone as ID card reader.
  • (cyberjack RFID standard USB smart card driver and tools)
    No longer needed with phone as reader.
  • Balsamic Mockups
    To design UIs
  • Markdown Monster
  • Veracypt
    don’t need this any longer
  • MS Powertoys
    I only use:
    • „Awake“ to conveniently prevent the PC from shutting down
      when running lengthy operations
    • Image Resizer
      when I want to forward images
    • T (Win+Shift+T) Text Extractor
      to extract text from images
    • PDF Preview in File Explorer
  • Sysinternals Suite
    There is an ARM version!
  • (Private Internet Access (VPN))
    sometimes use this on notebook when travelling
  • Brother printer tools
    Brother, because I will never buy HP printers again – several times they stopped supporting new Windows versions.
  • Fujitsu iX500 Scanner driver and tools
  • Oscar (not available for ARM)
    To analyze my sleep apnea data from my APAP machine

Other Apps (Ninite install)

Ninite is very handy to install common apps and automatically keep them updated.
I am using this for years: reliable, minimal UI – highly recommended!
The initial Ninite install is free (without any registration). The Ninite Updater costs $10/y.
For alternative installers, see Start Windows Sandbox With Preinstalled Apps.

I am evaluating using the winget installer:

  • winstall
    Creates a PowerShell script with WinGet commands for the apps you want
  • winGet upgrade –include-unknown
    Lists all apps with available updates
  • winget upgrade –all
    Installs all updates. No the „unknown ones because it cannot check the version.
  • and use the WinGetUI to keep apps updated
    Install via winget install wingetui
    Includes an auto updater

Nov 2023: Ninite installs more of my apps than winstall. To keeps apps updated I curently run both WinGetUI and Ninite.

  • Firefox
  • Edge
  • Chrome
  • Greenshot
    Is free and good.
    Always show tray icon on taskbar.
  • FileZilla
    Export / import its settings
  • Notepad++
  • VLC
  • 7-Zip
    There is an ARM version
  • Dropbox
    I no longer use this

Web Browsers

  • Set Firefox as default web browser, configured for research
    see Recherchieren – Warum, Wie und Womit
  • Edge, Brave and Chrome as alternative options
    Edge is installed by default
  • Enable HTTPS-only mode in every browser
  • Set preferred language for search results to english for each search engine, e.g. on https://www.google.com/preferences
My Firefox customizations with website in reading mode

Virus scanners, Windows optimizers

I don’t install any 3rd party virus scanners, the built-in Windows Defender is sufficient for me.

One can install the new MS PC Manager – while it seems to offer no new functionality to Windows it makes it easier to perform Windows healthcare by offering existing features in one place. Beware that Windows defender reports PC Manager as „another antivirus program running„!

Generally, I never use any optimizers or driver tools. I do however use the driver updaters from notebook vendors like Lenovo Vantage – I do not use their optimizers. Maybe it is better to use vendor updaters only when experiencing problems with what Windows updates installs or when features are missing or with important security fixes.

Clean Windows

For minimal Windows VMs I sometimes use the Debloat Windows PowerShell scripts by Chris Titus. Alternatively, one could modify the Windows setup to only install the wanted features and apps using the MSMG ToolKit.

Uninstall unwanted apps.
Windows 11 is less stubborn here and allows to easily uninstall more unwanted stuff.

Remove unwanted shortcuts.

Disable unwanted Windows startup entries.

To free drive space from unneeded files (especially very large ones) I use the built-in Disk cleanup, File Explorer (search for *.* then order the result by size), Microsoft’s PC Manager and WinDirStat or WizTree.

Remove unwanted (COM) add-ins in each Office app.

Create App Shortcuts

Pin frequently used apps to the taskbar.

  • To Pin Excel Worksheets like my Currency Converter to the Win11 taskbar, I use a shortcut with Excels /t parameter as target, e.g.
    „C:\Program Files\Microsoft Office\root\Office16\EXCEL.EXE“ /t „C:\Tools\Excel\TravelCurrencies.xlsm“
  • If setup restored settings from a previous installation, all app icons are pinned already – a click on an icon of a desktop app launches app install.

Run cmd once. This will populate the jumplist of the taskbar Terminal icon with Command Prompt, PowerShell and Azure Cloud Shell.

Add frequently used web sites to desktop.

Make important Taskbar icons always visible.

Add frequently used web sites browser toolbars. Using the browsers sync feature might do this automatically.

Resize desktop icons (depending on monitor resolution) by selecting all via CTRL+A and CTRL+/-MouseWheel

Final Backup

Create ‚config completed‘ backups to make it easy to revert to this point.

  • Create Windows system restore point
  • Create System partition image backup using backup tool
  • Backup BitLocker recovery keys:
    • Print to store in bank safe
    • Save to USB-Stick and encrypted(!) cloud storage and AD
  • Force a local OneNote backup
    Via File > Options > Save & Backup

Store the Windows product key in 1Password
Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SoftwareProtectionPlatform\BackupProductKeyDefault

Save a screenshot with a list of all installed apps
via Settings > Apps > >Installed Apps, select tiled view
All other command I found produced an incompled list.

Save a copy of the Outlook registry profile tree:
HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\Profiles

Create a copy Outlook signatures

Checkup

Check Windows event logs Application and System and Reliability history for uncommon errors and warnings.

Run Microsoft PC Manager health check.

Windows 10 vs. Windows 11

With Win11 I miss Win10 Live Tiles. Was using a full start screen with large Live Tiles for Mail, Calendar, 5 MS Weather tiles for different locations I like to observe for my travel plans, 3 MS To Do list views and 3 MS Money medium tiles for funds and currencies I am interested in. I don’t get the rationale behind those Win11 widgets: no full screen, no multiple instances and these pesky clickbait news stories which you cannot get configured away, however hard you try [Jan 2023: getting rid of the clickbait cards is slowly improving, but MS still keeps vomiting some new bullshit from weird sources at me].

I like the new windows snap layouts in Windows 11. Snapping a Window can be initiated by moving it to the screen edges or by hovering over (not clicking!) the Windows maximize button.

With single monitor setups I frequently use the multiple desktops feature: