Troubleshooting Guide

Troubleshooting Guide for Windows-Optimize-Harden-Debloat

This troubleshooting guide provides assistance for resolving common issues that users may encounter while using the Windows Optimization Script. Before proceeding with troubleshooting, ensure that your system meets the specified requirements and that you have followed the recommended reading material.

Requirements:

Ensure that your system meets the following requirements before running the Windows Optimization Script:

• Operating System:

  • Windows 10/11 Enterprise (Preferred) or Professional.
  • Home editions and "N" Editions are not supported or tested.

• Standards for Highly Secure Windows 10 Device:

  • Follow the Microsoft standards for a highly secure Windows 10 device.

• System Updates:

  • Ensure the system is fully up to date and supported.
  • Run the Windows Upgrade Assistant to update and verify the latest major release.

• Bitlocker:

  • Bitlocker must be suspended or turned off before running the script. It can be enabled again after rebooting.
  • Subsequent runs of the script can be performed without disabling Bitlocker.

• Hardware Requirements:

  • Check and meet the hardware requirements for:
    • Memory Integrity
    • Virtualization-Based Security
    • Windows Defender Application Guard
    • Windows Defender Credential Guard

Troubleshooting Steps:

1. Sleep Mode on Laptops:

If sleep mode is disabled on your laptop after running the script, refer to this discussion for instructions on re-enabling sleep.

2. Microsoft Account, Store, or Xbox Services:

If you encounter issues with Microsoft Account, Store, or Xbox services due to account blocking, follow the resolutions provided in the following issue tickets:

• Issue 1
• Issue 16
• Issue 22

3. Thunderbolt Devices:

For users experiencing issues with Thunderbolt Devices, refer to this issue for guidance. The script disables Thunderbolt by default due to associated vulnerabilities.

4. SSL Issues with Chocolatey:

If encountering SSL issues with Chocolatey, especially related to TLS 1.3 ciphers, review this issue for workarounds. Keep in mind that these are primarily Chocolatey issues.

5. Enabling Remote Desktop (RDP) Again:

To enable Remote Desktop (RDP) again on standalone systems, follow the steps outlined in this discussion. The script disables RDP as per STIGs and Hardening Best Practices.

6. Editing Policies in Local Group Policy:

If you need to modify or change a setting after running the script, refer to the following steps:

• Import the ADMX Policy definitions from this repository into C:\windows\PolicyDefinitions on the system.
• Open gpedit.msc on the system to modify the desired settings.

If you encounter issues beyond the scope of this guide, please review the script's documentation, check for updates, or seek assistance in the relevant community spaces.