• Configured specifically to support the special purpose application
• Stripped down to include only the needed OS features
• Optimized for speed and increased system resources (CPU, memory, storage)
1. Create a New Administrator Account: In addition to the Windows account used for the special purpose use, it is recommended that a second, password protected local administrator account be created to more easily facilitate a system recovery if needed.
2. Configure Windows Auto Login (detailed instructions) - Typically special purpose configured systems are set up to boot directly into the application. Auto login provides that ability.
3. Turn Off Windows Notifications: Settings > Personalizations > Taskbar > Notification Area
4. Turn Off System Icons: Settings > Personalizations > Taskbar > Notification Area > Turn system icons on or off
5. If using Windows Defender: Create an Exclusion for your application folder
6. Turn Off Windows Defender Notifications: Settings > Windows Defender > Open Windows Defender > Settings (icon) > Windows Defender Antivirus | Firewall Notifications
7. Turn Off Snap: Settings > System > Multitasking > Snap
8. Turn Off Virtual Desktops: Settings > System > Multitasking > Virtual Desktops > Only the desktop I’m...
9. Remove People Icon from the Taskbar: Settings > Personalization > Taskbar > People
10. Turn Off UAC: Control Panel > User Accounts > Change User Account Control settings
11. Set Taskbar to Auto Hide: Settings > Personalizations > Start and Taskbar
12. Disable WiFi Services: Settings > Network & Internet > Wi-Fi > Wi-Fi Services
13. Disable WiFi Hotspot: Settings > Network & Internet > Wi-Fi > Hotspot 2.0
14. Disable Mobile Hotspot: Settings > Network & Internet > Mobile Hotspot
1. Set Windows to Desktop Mode: Settings > Settings > System > Tablet mode > When I sign in > Use desktop mode
2. Turn Off Snap: Settings > Settings > System > Multitasking > Snap
3. Set the Virtual Desktop: Settings > Settings > System > Multitasking > Virtual desktops > Only the desktop I'm using
4. Turn On the Touch Keyboard: Settings > Devices > Typing > Show the touch keyboard when not in tablet mode and there's no keyboard attached option enabled
5. Turn On Standard Keyboard Capability: Settings > Devices > Typing > Add the standard keyboard layout as a touch keyboard option
6. Detach Input Devices: Be sure that no physical input devices (keyboard, mouse, etc) are attached to the device. Otherwise, Windows will not display the touch keyboard.
7. Add the "C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe" path to the Background Apps section in the Secure Lockdown utility. This is only required if you find issues with the Touch Keyboard appearing when entering input fields.
8. Some touch screens are connected via USB. If you're using the Chrome browser in this case, be sure to start Chrome with the following command line switch: "--disable-usb-keyboard-detect"
1. Unpin Unneeded Tiles: Right-click on each item and choose Unipin, or Uninstall (if available)
2. Remove Folders: Settings > Personalization > Start > Choose which folders appear on Start
3. Remove Start Menu List Items: Enter the following in the Windows Run dialog, then delete the unneeded shortcuts and folders:
%AppData%\Microsoft\Windows\Start Menu\Programs
%ProgramData%\Microsoft\Windows\Start Menu\Programs
1. Remove Unnecessary Apps & Features: Settings > Apps > Apps & Features
Be sure not to uninstall needed system applications such as special graphics or network application specific to the computer. Be sure to uninstall Windows Update Assistant. If it is not uninstalled, it will download and install all Windows Updates (even if the Windows Update Service is disabled).
2. Remove Optional Apps & Features: Settings > Apps > Apps & Features > Manage optional features
3. Remove Unnecessary Built-in Windows System Apps (detailed instructions)
1. Turn Off Windows Recovery Screen: remove the Windows Recovery screen if there is a power failure.
Run a command prompt as an admin
Type "bcdedit /set {current} bootstatuspolicy ignoreallfailures"
2. Disable Windows Recovery Dump Files: Control Panel > System and Security > System > Advanced system settings > Startup and Recovery > Settings
Disable Write an event to the system log
Enable Automatic restart
Set Write debugging information > none
3. Remove Cortana (detailed instructions)
4. Remove Connect (detailed instructions)
5. Remove Edge Browser (detailed instructions)
6. Uninstall OneDrive (detailed instructions):
7. Remove Unneeded Windows Services (detailed instructions)
8. Disable the Windows Update Service (detailed instructions)
9. Delete the Windows Restore Partition (detailed instructions)
1. Set a password to access the BIOS
2. Set the system to power on after a power outage
3. Enable Quick Start boot options
4. Disable any unused BIOS-level components such as boot from network or USB options