question

JennyFeng-8985 avatar image
JennyFeng-8985 asked ·

Removing unnecessary application and services from PAW

I'm building a privileged Access workstation PAW for AD administration, and looking a list of application and services to remove.

Basically, we want to have a minimal OS install, with only the necessary services to run the RSAT, while keeping the machine secure, for sure, windows defender and firewall for example.

I have the following list of applications and services :

$Apppackages = "3d","camera","communi","bing","zune","people","phone","photo","solit",
"xbox","sway","onenote","office","store","skype","map","soundrecorder",
"map","WindowsAlarms","GetStarted"


$Services = "BluetoothUserService", "BthAvctpSvc","diagtrack", "diagsvc", "Lotus Notes Diagnostics",
"MapsBroker","fhsvc","TrkWks","iphlpsvc","lmhosts","irmon","SharedAccess","PcaSvc","Spooler","WpcMonSvc","RemoteRegistry",
"seclogon","lmhosts","WerSvc","StiSvc","FrameServer","wisvc","WSearch","AxInstSV","DmEnrollmentSvc",
"DevicesFlowUserSvc_","PrintWorkflowUserSvc_","ssh-agent","WiaRpc","TapiSrv","PushToInstall"


Uninstall Onedrive

Is it safe to remove all these services ? are there any additional services and apps that should be removed ?

windows-10-setup
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

Joyqiao-3755 avatar image
Joyqiao-3755 answered ·

Hi,


If you want to uninstall store application, we could run the following command line as administrator in PowerShell.


Get-AppxPackage -allusers packagename | Remove-AppxPackage


If you not know the exact name of appxpackage, we could use the following command to query.


Get-AppxPackage -AllUsers


But for services, I would not recommend to uninstall or disabled them, as they would affect system usage such as BthAvctpSvc which is used to protect user files from accidental loss by copying them to a backup location. Yet for MapsBroker and TrkWks, which are not used for general system usage, could be deleted without an issue.


As there is not a services list ranking by security level released by Microsoft, so it would be difficult to say which should be removed.


Bests,


2 comments Share
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Thanks for your feedback.

I think this something important that MS should look into, inmy opinion, having Candy Crash or even a mail client in a PAW doesn't make any sense. So, there should be a minimal iso image for such use cases.


For the following command : Get-AppxPackage -allusers packagename | Remove-AppxPackage

That's exactly what I used, I put the Appxpackage Names into a table and delete them, however some of them are still there, typically games such as Candy crash and gardenscapes ..., Spotify and Microsoft News ...

Is there a way to force delete all the apps using powershell.

Thanks

1 Vote 1 · ·

Hi,

Thank you for your feedback.

We could feedback our desire to Microsoft through Build-in application "Feedback Hub", Microsoft will improve based on customers' suggestion.

For delete all build-in application through PowerShell, please run the following command line below as administrator.

Get-AppxPackage -allusers | Remove-AppxPackage

By the way, as I know, the force measure is using upper command line to remove, I have not heard any other measure have a more forceful measure. If you have any other issue, please reply to us.

Bests,

0 Votes 0 · ·