but how do I permanently remove garbage apps like Tik-tok and Disney+ and whatnot for ALL users? I can set up a new PC, run through OOBE, connect it to the domain and AD, log in with a domain admin account and start installing software. Thus, I install what I can system-wide, then, after I deliver it and set it up in the end-user's office, I need to sit down and have them log in for the first time and continue setting things up. I can disable the 'change password' and 'require MFA for M365 logins' temporarily to set up their profile, but if the PC is a replacement for an existing user's device, that's not an option. It's not too bad if the PC is for a new user. Everything seems to be installed 'per user' now and it drives me crazy. Still, there's a lot of hurdles I have in the provisioning process. I've never gone the 'make an image' route of quick deployment since we buy maybe a dozen PCs a year, and of those dozen, at most, 3 would be the same model, thus, the ridiculously complex methods of making, storing and applying images was never worth the time investment. Provisioning new PCs is always a time-intensive affair. I'm an IT manager at a small company (100 or so users). I saw a response to this question back in 2018, but this now being 2023 with Windows 11 the norm, I'm going to ask it again since I'm revising out company's 'Provision a New Workstation' instructions.

Equivalent pc decrapifier