New Laptop Setup: 14 Cleanup Steps Before First Use

Why new machines arrive dirty

Manufacturers are paid to preinstall software, so the factory image of Windows carries a trial antivirus, office suites on 30-day timers, store games and a vendor toolkit with its own updater services. None of it was chosen for your benefit, and part of it runs at boot. Out of the box, a typical consumer laptop shows a dozen or so third-party entries in Task Manager's Startup apps list.

The vendor utilities are the tricky part: one or two of them hold real firmware and driver updates, so you cannot just nuke everything carrying the brand name. The plan below keeps what matters — firmware, drivers, thermal controls — and removes the rest.

Steps 1–7: update first, then debloat

Setup decisions first (steps 1–3). Step 1: finish setup — if you want a local account on Windows 11 Home, run the known Shift+F10 → oobe\bypassnro route before connecting Wi-Fi (Microsoft keeps fighting it, so check what works on your build). Step 2: run Windows Update in a loop until nothing is left — several rounds are normal, because each batch unlocks the next. Step 3: install the vendor's update utility once (Lenovo Vantage, HP Support Assistant, Dell SupportAssist), let it bring BIOS and drivers current, then uninstall it — you keep the firmware, not the telemetry.

Now the debloat (steps 4–7). Step 4: walk Settings → Apps → Installed apps twice — once sorted by size, once by name — uninstalling trial apps, games and anything you cannot explain; step 5 removes the OEM helper suite: dock managers, promo notifications, "customer support" centers. Step 6: in Task Manager → Startup apps, disable everything except security tools, then reboot and see what re-enabled itself — some updaters re-register until their parent app is gone. Step 7: open each surviving app once and decline every "personalized offers" checkbox.

• Save the BitLocker recovery key to your Microsoft account or on paper — TPM laptops auto-encrypt, and the key is what you'll miss later
• Create a manual restore point after cleanup, before any tweaking
• powercfg /h off if you never hibernate — reclaims a hiberfil.sys the size of most of your RAM
• Run the vendor utility once for BIOS and driver updates, then uninstall it
• Sort Installed apps by size — the big OEM items hide at the bottom of the name-sorted list
• Re-check Startup apps after a reboot; some updater services switch themselves back on

Steps 8–14: configure, protect, leave alone

Steps 8–11 are about privacy and associations. Step 8: go through Settings → Privacy & security and turn off the advertising ID, tailored experiences and app-launch tracking. Step 9: set your default browser and check the .pdf, .jpg and mailto associations, because OEM images love to hijack them. Step 10: create a restore point by hand — the first one you'll actually have. Step 11: save your BitLocker recovery key now, because TPM machines encrypt themselves without asking.

Steps 12–14 and the limits of good sense. Step 12: settle the hibernation question — powercfg /h off reclaims a hiberfil.sys the size of most of your RAM if you never use it. Step 13: keep your data and libraries off C: from day one. Step 14: note baseline numbers — boot time, idle RAM — so that a year from now you know what "slower" means. And don't buy a "booster" for a two-hour-old machine: everything it sells is already in Settings, and the folders left behind by uninstalled trial junk are swept away in one Kleaner PRO pass after the debloat.

Questions and Answers

Read next