Every debloat tool will turn off Copilot. The test comes later: the Store stops working, an update flips half of it back, and nobody can tell you what got changed three months ago.

Open the Windows is a free, open-source control panel I made for Windows 11, a desktop app and a command-line tool on one engine. It covers privacy, Windows Update, security hardening, performance, debloat and startup apps: 455 entries so far, 429 of them confirmed on Windows 11 25H2. Here's what the popular tools leave out.

The Privacy page: a scan shows what this PC already has, with what each setting does, its side effects and Microsoft's documentation

It puts back what your PC actually had

Before every change, Open the Windows records the value your PC had. You can then put back one setting, one whole run, or everything it has ever changed.

That's a different promise from "undo." WinUtil's undo writes a value stored in its own tweak list. Sophia Script's undo functions restore the default settings. Going back from Atlas OS means reinstalling Windows. If you'd set something yourself first, defaults aren't what you had.

People do end up asking. "How to undo the script?" is a real issue title.

The History page: every run with its entries, revert for one entry or a run, and Undo everything

It checks its own work

Every setting is read back after it's written. If one step fails, the whole run rolls back and your PC is where it started, and a System Restore point is taken first as well. That step isn't described in the docs for WinUtil, Win11Debloat, Sophia Script, privacy.sexy, Winhance or O&O ShutUp10++ (checked November 2026).

It won't break Windows Update to "fix" it

Disabling the update service is the classic way these tools hurt a PC. WinUtil's disable option sets wuauserv, BITS and UsoSvc to Disabled, and its tracker has people struggling to turn updates back on. Atlas users report Windows Update stopping after an upgrade.

Open the Windows refuses to touch those services' start types, as a rule in the code that applies to every entry and every profile. It also won't turn off Defender, UAC, SmartScreen or the firewall, and it won't block Microsoft in your hosts file.

You still get control, through Windows' own mechanisms:

  • Pause updates, and resume in one click
  • Hold feature updates at a release while security updates keep arriving (Pro and above)
  • Keep Windows Update from replacing your drivers
  • Hide one specific update
  • Stop automatic restarts while you're signed in
  • Repair a stuck update client, with its caches set aside instead of deleted

The Windows Update page: pause, hold a release, repair and hide a specific update

It notices when updates put things back

A scan shows which settings are in place on your PC right now. A scheduled task can then re-apply only what drifted: daily, weekly, at logon or right after a feature update. In O&O ShutUp10++, automatic background protection is part of the paid Premium edition. Here it's free.

You can see the risk before you click

Every entry is labeled Safe, Caution, Advanced or Breaking, and tells you what it does, what it might affect, and the sources behind it. Advanced entries have to be acknowledged. Breaking ones make you type the entry's id. Anything not yet confirmed on 25H2 is marked Draft and stays off unless you pick it yourself.

You don't have to pipe a script off the internet

WinUtil's quick start is irm christitus.com/win | iex. Win11Debloat's downloads a script and runs it in the same line. Open the Windows 0.3.0 is a signed MSI or portable ZIP, with SHA-256 sums, an SBOM and build attestations you can verify.

It scales past one PC

Score a machine against DISA STIG, CIS or the Microsoft Security Baseline, read-only, and export the result as JSON, CSV, HTML or SARIF. Capture one PC's settings as a profile, sign it, and apply it to others. Group Policy templates are in the repo, and it won't override a setting your MDM or Group Policy manages unless you explicitly tell it to.

Good to know

  • Windows 11 only: Home, Pro, Enterprise and Education, x64 and ARM64. Windows Server is refused.
  • Settings can be put back. An app you remove can't be restored automatically, and Open the Windows tells you that up front.
  • The feature-update hold needs Pro or above, because Windows Home ignores that policy.
  • SmartScreen can still warn about a newly signed release until the publisher builds up a reputation.

Other tools' details come from their own docs and source code, checked 8 November 2026. They change, so the links above show today's version.

Get it

Free and open source (MIT):

https://github.com/RandyNorthrup/open-the-windows

Open the Windows is built with help from Claude Code.