CTRL-SHIFT-F3 –> Audit Mode

Get-WindowsCapability -Online -Name "OpenSSH.Server*" | Remove-WindowsCapability -Online
Get-WindowsCapability -Online -Name "OpenSSH.Client*" | Remove-WindowsCapability -Online
Get-WindowsCapability -Online -Name "Microsoft.Windows.PowerShell.ISE*" | Remove-WindowsCapability -Online
Get-WindowsCapability -Online -Name "Media.WindowsMediaPlayer*" | Remove-WindowsCapability -Online
Get-WindowsCapability -Online -Name "Windows.Telnet.Client*" | Remove-WindowsCapability -Online
Get-WindowsCapability -Online -Name "Windows.TFTP.Client*" | Remove-WindowsCapability -Online
Get-WindowsCapability -Online -Name "App.StepsRecorder*" | Remove-WindowsCapability -Online
Get-WindowsCapability -Online -Name "Microsoft.Windows.MSPaint*" | Remove-WindowsCapability -Online
Get-WindowsCapability -Online -Name "AzureArcSetup*" | Remove-WindowsCapability -Online

Remove-WindowsFeature WindowsAdminCenterSetup
Remove-WindowsFeature Windows-Defender
Remove-WindowsFeature XPS-Viewer
Remove-WindowsFeature Wireless-Networking
Remove-WindowsFeature FS-SMB1		
Remove-WindowsFeature AzureArcSetup   	# WIN2022 ONLY

Get-AppxProvisionedPackage -Online | ? {$_.DisplayName -Like 'Microsoft.WindowsFeedbackHub'} | Remove-AppxProvisionedPackage -Online
Get-AppxPackage | ? {$_.Name -like 'Microsoft.WindowsFeedbackHub*'} | Remove-AppxPackage -AllUsers

Set-ItemProperty -Path "HKLM:\System\CurrentControlSet\Services\Tcpip6\Parameters" -Name "DisabledComponents" -Type "DWord" -Value 0xff