Skip to content

About

Automated tools for creating streamlined Windows 11 images with CI/CD support. Builds Tiny11 and Tiny11 Core ISOs with GitHub Actions workflows.

Resources

Code of conduct

Contributing

Security policy

Stars

0 stars

Watchers

0 watching

Forks

ย 
ย 

Repository files navigation

Tiny11 Automated Builder

Build Tiny11 Build Tiny11 Core Build Nano11 Build Tiny11 Core-Gaming SourceForge Downloads License

Sponsor Buy Me a Coffee

Code of Conduct

Automated tools for creating streamlined Windows 11 images with CI/CD support.


๐Ÿ“Š Project Stats

  • ๐Ÿ“ฆ Total Downloads: 261436 (and growing!)
  • ๐ŸŒ Active Users: 261436 worldwide
  • โœ… Build Success Rate: 100%
  • โฑ๏ธ Average Build Time: ~30-50 minutes
  • ๐Ÿ’พ ISO Size Reduction: Up to 50% smaller (Windows 11 26H2)

๐Ÿ†• What's New (January 2026)

๐ŸŽฎ Tiny11 Core-Gaming โ€” new variant:

  • โšก AtlasOS-style power scheme: no CPU idle (C-State 0), no core parking, no USB/PCIe power saving
  • ๐ŸŽฏ Latency-first tweaks: Game Mode off, Fullscreen Optimizations off, MPO off, mouse acceleration off
  • ๐Ÿ”“ Security mitigations off: VBS / Memory Integrity / Credential Guard / Spectre-Meltdown
  • ๐Ÿ” Reversible: ships an undo script and a per-build manifest inside the ISO
  • ๐Ÿ“– Full details in GAMING.md

Windows 11 26H2 Optimizations:

  • โœจ AI/Recall Removal: Complete removal of Copilot, Recall, and AI Fabric (~220 MB saved)
  • ๐Ÿ›ก๏ธ Enhanced Telemetry Blocking: Stronger privacy protection with additional registry tweaks
  • ๐ŸŽฎ VRAM Gaming Optimization: Improved graphics performance through DirectX registry optimizations
  • โšก Build-Specific Service Removal: 4 services (Standard), 13 services (Core), 14 services (Nano)
  • ๐Ÿšซ Windows Update Binary Removal: Core/Nano builds now remove WU binaries (~300 MB saved)

Total Additional Savings:

  • Standard: ~120 MB
  • Core: ~320 MB
  • Nano: ~320 MB

๐Ÿ“‹ Overview

Tiny11 Automated Builder provides production-ready PowerShell scripts to create minimized Windows 11 ISO images by:

โœจ Removing bloatware (40+ unnecessary apps)
๐Ÿ”’ Disabling telemetry (complete privacy protection)
โšก Optimizing performance (faster boot, less resource usage)
๐Ÿค– Full CI/CD automation (GitHub Actions workflows)
๐Ÿ› ๏ธ System requirement bypass (TPM, CPU, RAM checks removed)

Three variants available: Standard (daily use), Core (ultra-minimal), Nano (VM testing)

Plus an opt-in gaming profile: Core-Gaming layers a latency-first, AtlasOS-style tweak set on top of Core for competitive esports. See GAMING.md.

๐Ÿ™ Attribution

This project is based on the original tiny11 builder by ntdevlabs. The headless versions were created by kelexine to enable automated CI/CD builds while preserving all original functionality.

๐Ÿ“ฅ Downloads

Download Tiny 11 Releases

โš ๏ธ ISO files are hosted on SourceForge only. GitHub Releases contains release notes and checksums.

๐ŸŒ Landing Pages

โš–๏ธ Legal Notice

IMPORTANT: These scripts are for educational and testing purposes only. You must have a valid Windows license. Using modified Windows images may violate Microsoft's terms of service. See LICENSE and SECURITY.md for details.


๐Ÿš€ Quick Start

Option 1: Automated Build (GitHub Actions) - Recommended

Perfect for beginners and automated deployments:

  1. Fork this repository
  2. Go to Actions tab
  3. Choose your workflow:
    • Build Tiny11 โ†’ Standard trimmed Windows 11
    • Build Tiny11 Core โ†’ Ultra-minimal variant
    • Build Nano11 โ†’ EXTREME minimal (VM only)
    • Build Tiny11 Core-Gaming โ†’ Core + latency-first gaming profile
  4. Click "Run workflow" and configure:
    • Windows ISO URL
    • Edition (Home/Pro/Education)
    • Optional parameters
  5. Download ISO from Artifacts or SourceForge

Build time: 30-80 minutes depending on variant

Option 2: Manual Build (PowerShell)

For advanced users and local builds:

# 1. Download or mount Windows 11 ISO
# 2. Note the drive letter (e.g., E:)
# 3. Run PowerShell as Administrator
# 4. Set execution policy
Set-ExecutionPolicy Bypass -Scope Process

# 5. Choose your variant:

# Standard Tiny11 (Recommended for daily use)
.\scripts\tiny11maker-headless.ps1 -ISO E -INDEX 1

# Tiny11 Core (Ultra-minimal, VM/testing only)
.\scripts\tiny11coremaker-headless.ps1 -ISO E -INDEX 6

# Nano11 (EXTREME minimal, VM testing ONLY)
.\scripts\nano11builder-headless.ps1 -ISO E -INDEX 1

# With .NET 3.5 (Core variant only)
.\scripts\tiny11coremaker-headless.ps1 -ISO E -INDEX 1 -ENABLE_DOTNET35

System Requirements: Windows 10/11, PowerShell 5.1+, 30GB+ free space, Admin rights


โš ๏ธ Choose Your Variant

Feature ๐ŸŸข Standard ๐ŸŸก Core ๐Ÿ”ด Nano
Use Case Daily use (with caution) Testing, disposable VMs VM testing ONLY
ISO Size ~3.5-5.5GB ~3-3.5GB ~2.5GB
Bloatware Removal โœ… 40+ apps โœ… 40+ apps โœ… 50+ apps
Telemetry Disabled โœ… Complete โœ… Complete โœ… Complete
WinSxS Component Store โœ… Full โŒ Minimized โŒ Minimized
Windows Recovery โœ… Intact โš™๏ธ Optional (removed by default, use -PreserveWinRE) โš™๏ธ Optional (removed by default, use -PreserveWinRE)
Windows Defender โœ… Included โš™๏ธ Disabled (removable via -RemoveDefender) โŒ Removed
Serviceability โœ… Can add features/updates โŒ Cannot service โŒ Cannot service
Printing Support โœ… Yes โœ… Yes โŒ No
Basic Apps (Notepad, Paint) โœ… Included โœ… Included โŒ Removed
Build Time 45-80 min 30-45 min <40 min

๐Ÿ’ก Which Should You Choose?

  • ๐ŸŸข Standard: Best for most users. Balanced bloat removal with system stability
  • ๐ŸŸก Core: Perfect for development VMs, testing environments, disposable systems
  • ๐Ÿ”ด Nano: Absolute minimal testing only. Expect broken features. VM use ONLY.
  • ๐ŸŽฎ Core-Gaming: Core plus a latency-first gaming profile. Built for competitive esports on older hardware โ€” see the section below before you use it.

๐ŸŽฎ Tiny11 Core-Gaming

An opt-in profile that turns Core into a latency-first gaming build, modelled on what AtlasOS does. The reference workload is Rainbow Six Siege on a CPU-bound machine.

โš ๏ธ This is not a safe daily-driver configuration. It disables VBS, Memory Integrity, Credential Guard and the Spectre/Meltdown kernel mitigations, and it removes the Xbox stack. That is a deliberate performance trade-off. An undo script and a per-build manifest ship inside the image.

What it applies

Area Changes
Power The Atlas Power Scheme, reproduced exactly. Verified against the live Atlas scheme, which turns out to be Ultimate Performance plus exactly two overrides. Adds a C-State 0 latency tweak Atlas does not do, behind its own toggle
CPU Power throttling off, SystemResponsiveness = 10 (AtlasOS value)
Security VBS off ยท HVCI / Memory Integrity off ยท Credential Guard off ยท Spectre/Meltdown mitigations off ยท hypervisorlaunchtype off
Latency Nagle off ยท QoS reserved bandwidth 0 ยท Delivery Optimization P2P off ยท MPO off ยท mouse acceleration off ยท DXGI flip model on
Display Fullscreen Optimizations off (true fullscreen exclusive)
Window response Animations off, menu/hover delays 400 ms โ†’ 0, acrylic transparency off, and the app-close timeouts cut (20 s โ†’ 2 s) so windows open and close instantly
Behaviour Game Mode off (AtlasOS default) ยท Fast Startup off ยท Search indexing off ยท Bluetooth off ยท printing removed ยท background apps denied ยท visual effects off
Xbox Xbox Live Auth, Game Save, Networking, Accessory Management, Gaming Services removed

Game runtimes (VC++, DirectX 9.0c, .NET Desktop) are deliberately not bundled โ€” see GAMING.md for why and what to install yourself.

How to build it

GitHub Actions โ†’ run the Build and Release Tiny11 Core-Gaming workflow. It keeps every input from Build and Release Tiny11 Core and adds one toggle per group, so you can dial any of it back per build.

Locally:

# Full Core-Gaming build
.\scripts\tiny11coremaker-headless.ps1 -ISO E -INDEX 6 -GamingProfile -RemoveDefender -PreserveWinRE

# Dial specific groups back
.\scripts\tiny11coremaker-headless.ps1 -ISO E -INDEX 6 -GamingProfile -HagsMode off `
    -GamingGroups @{ disable_security_mitigations = $false; disable_mpo = $false }

Customising it

Every tweak lives in config/gaming_profile.json as a group-tagged data entry โ€” no PowerShell editing required. Adding a registry value is one JSON object.

Reverting it

# Elevated PowerShell, inside the installed OS
powershell -ExecutionPolicy Bypass -File C:\Windows\Tiny11Gaming\Undo-GamingTweaks.ps1

Restores Game Mode, FSO, VBS / Memory Integrity, mitigations, Fast Startup, mouse acceleration, background apps and the Search / Bluetooth services, and switches the power plan back to Balanced. Defender removal, the printing features and the removed Xbox packages are not restorable from inside Windows โ€” the script says so explicitly.

Read this before using it

  • Frame-time consistency improves more than average FPS. The biggest single lever is disabling VBS/HVCI (commonly quoted at 5โ€“15% on affected titles); the rest is mostly 1% lows and input latency.
  • Some tweaks are hardware-specific. HPET / timer settings in particular help some rigs and regress others. Benchmark your own machine.
  • BattlEye is unaffected. R6 Siege via Steam or Ubisoft Connect does not care about any of this. Game Pass and Microsoft Store games, however, will break.

Full write-up, per-setting rationale and trade-offs: GAMING.md.


๐Ÿ“ Repository Structure

tiny11-automated/
โ”œโ”€โ”€ .github/
โ”‚   โ”œโ”€โ”€ workflows/              # GitHub Actions CI/CD
โ”‚   โ”‚   โ”œโ”€โ”€ build-tiny11.yml
โ”‚   โ”‚   โ”œโ”€โ”€ build-tiny11-core.yml
โ”‚   โ”‚   โ”œโ”€โ”€ build-tiny11-core-gaming.yml   # ๐ŸŽฎ Core + gaming profile
โ”‚   โ”‚   โ””โ”€โ”€ build-nano11.yml
โ”‚   โ”œโ”€โ”€ ISSUE_TEMPLATE/         # Issue templates
โ”‚   โ””โ”€โ”€ PULL_REQUEST_TEMPLATE.md
โ”œโ”€โ”€ config/
โ”‚   โ”œโ”€โ”€ matrix_config.json              # Release-detection / trigger config
โ”‚   โ”œโ”€โ”€ gaming_profile.json             # ๐ŸŽฎ Every gaming tweak, group-tagged
โ”‚   โ””โ”€โ”€ gaming_power_settings.json      # ๐ŸŽฎ Power scheme + bcdedit definition
โ”œโ”€โ”€ scripts/
โ”‚   โ”œโ”€โ”€ tiny11maker-headless.ps1          # โœจ Automated Standard
โ”‚   โ”œโ”€โ”€ tiny11coremaker-headless.ps1      # โœจ Automated Core (+ -GamingProfile)
โ”‚   โ”œโ”€โ”€ nano11builder-headless.ps1        # โœจ Automated Nano
โ”‚   โ”œโ”€โ”€ gaming-profile.ps1                # ๐ŸŽฎ Profile engine (dot-sourced)
โ”‚   โ”œโ”€โ”€ gaming-firstboot.ps1              # ๐ŸŽฎ Runs once as SYSTEM on the target
โ”‚   โ””โ”€โ”€ Undo-GamingTweaks.ps1             # ๐ŸŽฎ Revert, shipped inside the image
โ”œโ”€โ”€ autounattend.xml            # Offline local account + OOBE bypass (Standard/Core)
โ”œโ”€โ”€ autounattend-nano.xml       # Offline local account + OOBE bypass (Nano)
โ”œโ”€โ”€ GAMING.md                   # ๐ŸŽฎ Core-Gaming documentation
โ”œโ”€โ”€ CONTRIBUTING.md             # Contributor guidelines
โ”œโ”€โ”€ CODE_OF_CONDUCT.md          # Community standards
โ”œโ”€โ”€ SECURITY.md                 # Security policy
โ”œโ”€โ”€ ROADMAP.md                  # Project roadmap
โ”œโ”€โ”€ README.md                   # This file
โ””โ”€โ”€ LICENSE                     # MIT License

๐Ÿ”ง Script Parameters

Standard & Core Variants

.\tiny11maker-headless.ps1
    -ISO <string>              # Drive letter of mounted ISO (e.g., "E")
    -INDEX <int>               # Image index (1=Home, 4=Education, 6=Pro, 7=Pro N)
    [-SCRATCH <string>]        # Optional: Scratch disk (default: script directory)
    [-SkipCleanup]             # Optional: Keep temp files for debugging
    [-AccountSetup <string>]   # Optional: "auto-admin" (default) | "classic"

Core-Only Parameter

.\tiny11coremaker-headless.ps1
    [-ENABLE_DOTNET35]         # Enable .NET Framework 3.5 support
    [-PreserveWinRE]           # Keep winre.wim intact (required for real hardware / 24H2+ to avoid 0x8007000B)
    [-RemoveDefender]          # Completely remove Windows Defender / Security (no Antimalware service)

Core-Gaming Parameters

.\tiny11coremaker-headless.ps1
    -GamingProfile             # Enable the Core-Gaming profile
    [-GamingProfileFile <path>]# Profile JSON (default: config/gaming_profile.json)
    [-GamingGroups <hashtable>]# Per-group overrides, e.g. @{ disable_mpo = $false }
    [-HagsMode <on|off|leave>] # HAGS. Default: on

-GamingGroups accepts any of these keys (they match the workflow inputs):

atlas_power_scheme            disable_cpu_idle          disable_security_mitigations
remove_xbox_gaming_stack      strip_background_noise    disable_fast_startup
network_latency_tweaks        disable_mpo               latency_input_tweaks
disable_fso                   disable_game_mode         disable_printing

See GAMING.md for what each group does and what it breaks.

Account Setup (Standard & Core)

-AccountSetup controls how the local account is created on first boot, and applies to both tiny11maker-headless.ps1 and tiny11coremaker-headless.ps1:

Value Behaviour
auto-admin (default) Pre-creates a local administrator called Admin with a blank password, auto-logon on first boot, OOBE skipped entirely.
classic OOBE runs offline so you create your own local account with your own name. Still no Microsoft account and no network required.

Either way the install stays fully offline: DynamicUpdate is disabled and BypassNRO / DisableOnline are set, so Setup never reaches a Microsoft account screen.

Nano Variant

.\nano11builder-headless.ps1
    -ISO <string>              # Drive letter of mounted ISO
    -INDEX <int>               # Image index
    [-SCRATCH <string>]        # Optional: Scratch disk
    [-SkipCleanup]             # Optional: Keep temp files
    [-PreserveWinRE]           # Keep winre.wim intact (required for real hardware / 24H2+ to avoid 0x8007000B)

Examples

# Basic build - Windows 11 Home Standard
.\scripts\tiny11maker-headless.ps1 -ISO E -INDEX 1

# Professional Edition Core with .NET 3.5
.\scripts\tiny11coremaker-headless.ps1 -ISO E -INDEX 6 -ENABLE_DOTNET35

# Core build targeting real hardware (preserves WinRE to avoid 0x8007000B on 24H2, 25H2 and 26H2)
.\scripts\tiny11coremaker-headless.ps1 -ISO E -INDEX 6 -PreserveWinRE

# Core build with Windows Defender / Security completely removed (no Antimalware service)
.\scripts\tiny11coremaker-headless.ps1 -ISO E -INDEX 6 -RemoveDefender

# Classic setup: create your own local account with your own name during OOBE
.\scripts\tiny11maker-headless.ps1 -ISO E -INDEX 1 -AccountSetup classic

# Nano build with WinRE preserved (real hardware use)
.\scripts\nano11builder-headless.ps1 -ISO E -INDEX 1 -PreserveWinRE

# Custom scratch drive (useful for limited C:\ space)
.\scripts\tiny11maker-headless.ps1 -ISO E -INDEX 1 -SCRATCH D

# Debug mode (keeps temporary files)
.\scripts\tiny11maker-headless.ps1 -ISO E -INDEX 1 -SkipCleanup

๐Ÿ“ฆ What Gets Removed?

๐Ÿ—‘๏ธ Bloatware Apps (40-50+ removed)

Click to expand full list

Productivity & Entertainment:

  • Microsoft Teams
  • OneDrive
  • Microsoft Edge
  • Xbox Game Bar & Gaming Services
  • Clipchamp Video Editor
  • Paint 3D
  • 3D Viewer
  • Mixed Reality Portal

Information & News:

  • Weather
  • News
  • Maps
  • Bing Search

Communication:

  • Skype
  • Cortana
  • People App
  • Your Phone (Phone Link)
  • Outlook for Windows (new)

AI Features (Windows 11 25H2+):

  • Windows Copilot (AI Assistant)
  • Windows Recall (AI Snapshots)
  • AI Fabric Service
  • CoreAI Components

Office & Productivity:

  • Office Hub
  • Power Automate
  • Solitaire Collection
  • Sticky Notes
  • To Do

Utilities:

  • Get Help
  • Get Started (Tips)
  • Feedback Hub
  • Quick Assist
  • DevHome

Media:

  • Media Player
  • Sound Recorder
  • Photos
  • Camera (Nano only)

Additional (Nano only):

  • Notepad
  • Paint
  • Windows Terminal

๐Ÿ”ง System Components Removed

  • Internet Explorer (legacy package)
  • Windows Media Player (legacy)
  • WordPad
  • Math Input Panel
  • Steps Recorder
  • LA57 CPU compatibility layer
  • Language features (OCR, Speech, Handwriting)
  • Windows Defender (Nano by default; Core via -RemoveDefender / the remove_defender workflow input)
  • Printer drivers (Nano only)
  • Scanner/MFD drivers (Nano only)

โš™๏ธ Registry Optimizations Applied

Click to expand optimizations

System Requirements:

  • TPM 2.0 requirement bypass
  • Secure Boot requirement bypass
  • CPU compatibility check bypass
  • RAM requirement bypass (allows <4GB)

Privacy & Telemetry:

  • All telemetry endpoints disabled
  • Enhanced diagnostic data blocking
  • Activity history disabled
  • Location services disabled
  • Advertising ID disabled
  • Device name excluded from telemetry
  • Feedback notifications disabled

AI & Privacy (NEW - Windows 11 25H2):

  • Windows AI data analysis completely disabled
  • Copilot AI assistant fully removed
  • Recall snapshot feature blocked
  • AI Fabric service disabled

User Experience:

  • Sponsored apps blocked
  • Consumer features disabled
  • Reserved storage disabled
  • BitLocker encryption disabled
  • Windows Search indexing optimized
  • Chat icon removed from taskbar
  • Widgets disabled
  • Cortana startup disabled

Performance (NEW):

  • VRAM allocation optimized for gaming
  • Non-essential services disabled (4-13 depending on variant)
  • Diagnostic services removed
  • Telemetry services disabled

Update & Cloud:

  • Windows Update disabled (can be manually enabled in Standard)
  • Windows Update binaries removed (Core/Nano - NON-SERVICEABLE)
  • OneDrive backup prompts disabled
  • Teams auto-install blocked
  • New Outlook installation blocked

๐Ÿ’พ System Requirements

For Building ISOs

Requirement Minimum Recommended
Operating System Windows 10 Windows 11
PowerShell 5.1 7.0+
RAM 8GB 16GB+
Free Disk Space 20GB 40GB+
Processor Dual-core Quad-core+
Permissions Administrator Administrator
Network For oscdimg.exe download Stable connection

Additional Requirements:

  • Windows ADK (optional, oscdimg.exe auto-downloaded if missing)
  • Valid Windows 11 ISO file
  • Antivirus temporarily disabled (optional, may interfere)

For Running Built ISOs

โœ… System requirements are bypassed! Tiny11 can run on:

  • CPU: Any x64/ARM64 processor (Pentium, Core 2 Duo, etc.)
  • RAM: 1GB minimum (2GB+ recommended)
  • Storage: 10GB minimum (20GB+ recommended)
  • TPM: Not required (completely bypassed)
  • Secure Boot: Not required (bypassed)
  • UEFI/BIOS: Both supported

โœจ Perfect for:

  • Old laptops (2010+)
  • Low-spec hardware
  • Virtual machines
  • Testing environments
  • Educational purposes

๐Ÿ’ฟ Ventoy Support & Offline Setup

๐Ÿ–ฅ๏ธ Booting a Tiny11 ISO from Ventoy

ISOs built by this project boot straight from Ventoy in its default (non-wimboot) mode โ€” no Rufus, no extracted USB stick, no manual patching. Verified booting into Windows Setup on Windows 11 26H2, for both Standard and Core.

If you are on an older build and see:

"A media driver your computer needs is missing. This could be a DVD, USB, or Hard disk driver."

โ€ฆthat was a bug in this project, and it is fixed. Rebuild your ISO (or grab a fresh release) โ€” nothing about your Ventoy stick needs to change.

What the bug was

The wording is misleading: it is not a missing disk driver. It means the virtual optical drive never came up.

Ventoy does not extract a Windows ISO. It boots the ISO's own boot.wim and injects vtoyjump.exe into that Windows PE. vtoyjump mounts the ISO as a virtual drive, and only then does setup.exe start and read \sources\install.wim from it. If vtoyjump never runs, Setup finds no media and reports a missing driver.

Because that injection rides on the WinPE setup launch chain, changes a builder makes inside boot.wim can break it. Two did:

Change Why it broke Ventoy
HKLM\SYSTEM\Setup\CmdLine was overwritten with a bare X:\sources\setup.exe That registry value is the hook Ventoy's patcher matches. Overwriting it stopped vtoyjump from running, so no virtual drive appeared. Core-only โ€” which is why Standard kept working.
A ReAgent.xml was created inside boot.wim where the stock image has none Adding files to boot.wim makes it diverge from Microsoft's boot media โ€” exactly what Ventoy inspects and patches. Only pre-existing files are patched now.

Fixed in commit 8ae6bd9.

If it ever stops working again

Press Shift+F10 at the error and run:

diskpart
list volume
exit
type X:\Windows\System32\ventoy\vtoype.log
  • No virtual DVD drive in list volume โ†’ vtoyjump never ran, so the problem is the boot.wim patch rather than the ISO contents.
  • vtoype.log records what vtoyjump did and why a mount failed. It is the log the Ventoy author asks for in bug reports โ€” please attach it to any issue.
  • Ctrl+W at the Ventoy menu switches to wimboot mode, a completely different boot path worth trying as a workaround.

Also worth checking:

Check Why it matters
Ventoy 1.1.07 or newer Older releases have known virtual-drive bugs
Data partition is NTFS, not exFAT exFAT is a documented cause of this error
The ISO is not on the 32 MB VTOYEFI partition Ventoy only scans the first, large partition
Core/Nano on real hardware: pass -PreserveWinRE These variants delete winre.wim by default, which is documented to break real-hardware installs on 24H2+

The build now also refuses to emit an ISO whose sources\ has no usable install.wim/install.esd, because that failure looks identical to this one. If a build stops with "Refusing to build an ISOโ€ฆ", the image export step failed โ€” attach the build log (scripts/*.log, kept by running the workflow with skip_cleanup: true).

๐ŸชŸ Local Account โ€” Offline, Out of the Box

Every ISO built here installs with no internet connection and no Microsoft account. There is nothing to type at Shift+F10 and no BYPASSNRO dance.

Two account modes are available โ€” pick one with the account_setup workflow input, or -AccountSetup on the builders:

  • auto-admin (default) โ€” the account described below is created for you and OOBE is skipped entirely.
  • classic โ€” OOBE runs offline and you create the local account with your own name. Still no Microsoft account and no network required.

The table below describes the default auto-admin mode:

Setting Value
Account name Admin
Type Local administrator
Password (blank)
Auto-logon On for the first boot, then turns itself off
Network during setup Not required โ€” DynamicUpdate is disabled, so Setup never contacts Windows Update

This works on 24H2, 25H2 and 26H2, where Microsoft has progressively removed the old OOBE\BYPASSNRO shortcut. The mechanism is a pre-created local account declared in the answer file (oobeSystem โ†’ LocalAccounts), backed up by BypassNRO=1 and DisableOnline=1 written into the image registry. The OOBE wizard is skipped entirely.

Changing the account name or password. Edit autounattend.xml (Standard/Core) or autounattend-nano.xml (Nano). Keep these values in sync:

<Name>Admin</Name>
<DisplayName>Admin</DisplayName>
...
<Username>Admin</Username>   <!-- inside <AutoLogon> -->

To set a password, put it in <Password><Value> and leave <PlainText>true</PlainText>, then delete the <AutoLogon> block.

Note: the builders rewrite /IMAGE/INDEX inside the answer file to match the -INDEX you selected, so a Pro or Education build installs that edition unattended instead of silently falling back to Home.


๐Ÿ—๏ธ GitHub Actions Workflows

Automated Builds via CI/CD

All three variants support automated building through GitHub Actions:

1. Build Tiny11 (Standard)

File: .github/workflows/build-tiny11.yml

Inputs:

windows_iso_url:        # Windows 11 ISO download URL
  required: true
  
image_index:            # Windows edition
  type: choice
  options: [1, 4, 6, 7]  # Home, Education, Pro, Pro N
  
skip_cleanup:           # Debug mode (keep artifacts)
  type: boolean
  default: false

account_setup:          # ๐Ÿ†• Local account setup
  type: choice
  options: [auto-admin, classic]
  # auto-admin = automatically create the local account "Admin" (OOBE skipped)
  # classic    = you create your own local account with your name during setup
  default: auto-admin

2. Build Tiny11 Core (Ultra-Minimal)

File: .github/workflows/build-tiny11-core.yml

Inputs:

windows_iso_url:        # Same as Standard
image_index:            # Same as Standard
skip_cleanup:           # Same as Standard
enable_dotnet35:        # ๐Ÿ†• Enable .NET Framework 3.5
  type: boolean
  default: false
preserve_winre:         # ๐Ÿ†• Preserve winre.wim (real hardware / 24H2+ builds)
  type: boolean
  default: false

remove_defender:        # ๐Ÿ†• Completely remove Windows Defender / Security
  type: boolean
  default: false
  # No Antimalware service will be present in the finished image

account_setup:          # ๐Ÿ†• Local account setup
  type: choice
  options: [auto-admin, classic]
  # auto-admin = automatically create the local account "Admin" (OOBE skipped)
  # classic    = you create your own local account with your name during setup
  default: auto-admin

3. Build Nano11 (EXTREME Minimal)

File: .github/workflows/build-nano11.yml

Inputs:

windows_version:        # Version string (24H2, 25H2, etc.)
  required: true
  
windows_iso_url:        # Same as above
image_index:            # Same as above
language:               # Language name (English, etc.)
  default: "English"
  
skip_cleanup:           # Same as above
preserve_winre:         # ๐Ÿ†• Preserve winre.wim (real hardware / 24H2+ builds)
  type: boolean
  default: false

4. Build Tiny11 Core-Gaming ๐ŸŽฎ

File: .github/workflows/build-tiny11-core-gaming.yml

Accepts every input from Build Tiny11 Core (windows_version, windows_iso_url, windows_build, image_index, language, skip_cleanup, enable_dotnet35, preserve_winre, remove_defender, account_setup) plus one toggle per gaming group:

hags:                       # type: choice
  options: [on, off, leave] # default: on

# Each of these is a boolean, default: true
atlas_power_scheme:         # AtlasOS-style power scheme
disable_cpu_idle:           # Force C-State 0
disable_security_mitigations: # VBS / HVCI / Credential Guard / Spectre-Meltdown off
remove_xbox_gaming_stack:   # Removes Xbox + Gaming Services (breaks Game Pass)
strip_background_noise:     # Search indexing, Bluetooth, background apps, ...
instant_windows:            # Fastest window open/close: animations + delays off, close timeouts cut
disable_fast_startup:       # Hibernation + Fast Startup off
network_latency_tweaks:     # Nagle off, QoS 0, Delivery Optimization P2P off
disable_mpo:                # Multi-Plane Overlay off
latency_input_tweaks:       # Mouse acceleration off, DXGI flip model on
disable_fso:                # Fullscreen Optimizations off
disable_game_mode:          # Game Mode off (AtlasOS default)
disable_printing:           # Print services + features removed

The build also validates config/gaming_profile.json and parses scripts/gaming-profile.ps1 before downloading the ISO, so a typo fails in seconds instead of after an hour.

Full details: GAMING.md

Workflow Features

โœจ Automated download - Fetches ISO automatically
๐Ÿ” Checksum verification - Validates ISO integrity
๐Ÿ“ข Discord notifications - Real-time build status
๐Ÿ“ฆ Artifact upload - ISO + checksums available
๐Ÿš€ SourceForge deployment - Automatic release distribution
๐Ÿ“Š Build statistics - Performance metrics tracked


๐Ÿ“Š Build Performance

Variant Download Time Build Time Total Time Output Size
Standard 5-15 min 45-80 min 50-95 min ~4-5GB
Core 5-15 min 30-45 min 35-60 min ~3-4GB
Nano 5-15 min <40 min ~45-55 min ~2-2.9GB

Build times measured on GitHub Actions standard runners (2-core, 7GB RAM)

Factors affecting build time:

  • ISO download speed
  • Number of apps to remove (more apps = longer compression)
  • WinSxS optimization (Core/Nano)
  • Runner performance
  • Concurrent builds

๐Ÿ› Troubleshooting

Common Issues & Solutions

"Script must run as Administrator"

Problem: PowerShell not running with elevated privileges

Solutions:

  1. Right-click PowerShell โ†’ "Run as Administrator"
  2. Let script auto-elevate (it will restart automatically)
  3. In VS Code: Run as admin before opening
"Insufficient disk space"

Problem: Not enough free space on C:\ drive

Solutions:

  1. Free up at least 30GB on C:\
  2. Use -SCRATCH parameter to specify different drive:
    .\tiny11maker-headless.ps1 -ISO E -INDEX 1 -SCRATCH D
  3. Clean Windows temp files: cleanmgr
  4. Check disk space: Get-PSDrive C
"ISO creation fails" / "oscdimg.exe error"

Problem: Missing oscdimg.exe or corrupted installation

Solutions:

  1. Install Windows ADK:
  2. Let script download oscdimg.exe automatically (requires internet)
  3. Verify antivirus isn't blocking the script
  4. Check file permissions on script directory
"Build failures in GitHub Actions"

Problem: Workflow fails during automated build

Solutions:

  1. Check workflow logs for specific error
  2. Enable skip_cleanup: true to preserve artifacts
  3. Verify ISO URL is accessible and correct
  4. Check if SourceForge credentials are configured (for upload)
  5. Ensure GitHub Actions has sufficient runner space

Common causes:

  • Invalid ISO URL (404 error)
  • Network timeout during download
  • Insufficient runner disk space
  • SourceForge API rate limiting
"A media driver your computer needs is missing" (Ventoy)

Problem: Booting the built ISO from Ventoy stops at the very start of Setup with a missing media driver.

Cause (fixed): The wording is misleading โ€” it is not a missing disk driver, it means Setup could not see its installation media. Ventoy boots the ISO's own boot.wim and injects vtoyjump.exe so it can mount the ISO as a virtual drive before setup.exe runs. Core was overwriting HKLM\SYSTEM\Setup\CmdLine inside boot.wim with a bare X:\sources\setup.exe, which stopped that injection from running. See Booting a Tiny11 ISO from Ventoy above for the full write-up.

Solution: rebuild the ISO โ€” fixed in commit 8ae6bd9. Nothing about your Ventoy stick needs to change.

If a rebuilt ISO still fails, check in this order:

  1. Ventoy 1.1.07 or newer
  2. Data partition formatted NTFS, not exFAT
  3. The ISO sits in the first, large Ventoy partition โ€” not the 32 MB VTOYEFI one
  4. Press Shift+F10 at the error and read X:\Windows\System32\ventoy\vtoype.log

Workaround if you are stuck: install from a PE environment (WinNTSetup, Dism++) instead of booting the ISO directly, and open an issue with the build log attached.

"ISO boots but shows errors"

Problem: Generated ISO boots but has missing features

Solutions:

  1. Verify you used the correct variant:
    • Standard: Most features intact
    • Core: Some features unavailable
    • Nano: Many features broken (expected)
  2. Check if you need .NET 3.5 (Core only):
    -ENABLE_DOTNET35
  3. For printing issues: Don't use Nano variant
  4. For Windows Defender: Use Standard variant
  5. Rebuild with Standard variant if Core/Nano too aggressive
"Checksums don't match"

Problem: Downloaded ISO checksum verification fails

Solutions:

  1. Re-download ISO from official source
  2. Verify download completed fully (check file size)
  3. Scan for disk errors: chkdsk /f
  4. Try different download mirror
  5. Compare with official checksums from Microsoft

Verify checksum:

Get-FileHash -Path "tiny11.iso" -Algorithm SHA256

๐Ÿ” Security Considerations

โš ๏ธ Important Security Information

Before using Tiny11:

  1. Modified Windows Images โ†’ May have security implications

    • No official Microsoft support
    • Potential compatibility issues
    • Use at your own risk
  2. Windows Defender Removed (Core/Nano)

    • Install third-party antivirus (Avast, Kaspersky, etc.)
    • Keep antivirus updated
    • Consider using Standard variant for better security
  3. Updates Disabled by Default

    • Manually enable if needed: services.msc โ†’ Windows Update
    • No automatic security patches
    • Monitor security advisories manually
  4. Privacy vs. Functionality Trade-off

    • Telemetry disabled โ†’ Better privacy
    • Some features may not work without telemetry
    • Cloud features limited/disabled
  5. Production Use NOT Recommended

    • Use for testing/development only
    • Not suitable for business-critical systems
    • Consider official Windows for production

๐Ÿ”’ Security Best Practices

โœ… Download from official sources only

โœ… Verify checksums before installation

Get-FileHash -Path "tiny11.iso" -Algorithm SHA256
# Compare with official checksum

โœ… Test in VM before bare-metal installation

  • Use VirtualBox, Hyper-V, or VMware
  • Verify functionality meets your needs
  • Check for compatibility issues

โœ… Backup important data before installing

  • Full system backup recommended
  • Document current configuration
  • Have recovery media ready

โœ… Use valid Windows license

  • Tiny11 is NOT a Windows activator
  • Legal Windows license required
  • Respect Microsoft's terms of service

๐Ÿšจ Vulnerability Reporting

Found a security issue? DO NOT create a public GitHub issue!

๐Ÿ“ง Email: frankiekelechi@gmail.com
๐Ÿ”’ Subject: [SECURITY] Tiny11 Vulnerability Report
๐Ÿ“‹ See: SECURITY.md for full disclosure policy


๐Ÿ“– Documentation

๐Ÿ“š Available Documentation

๐ŸŽ“ Tutorials & Guides

  • Windows Edition Index Numbers:

    • 1 = Windows 11 Home
    • 4 = Windows 11 Education
    • 6 = Windows 11 Pro
    • 7 = Windows 11 Pro N (without media features)
  • Finding Edition Index:

    # Mount ISO first, then:
    dism /Get-WimInfo /WimFile:E:\sources\install.wim
  • Manual OOBE Bypass: Edit autounattend.xml for custom configurations


๐Ÿค Contributing

We welcome contributions from the community! Tiny11 Automated serves 2,000+ users worldwide.

Ways to Contribute

  • ๐Ÿ› Report bugs
  • โœจ Request features
  • ๐Ÿ“ Improve documentation
  • ๐Ÿงช Test new builds
  • ๐Ÿ’ป Submit pull requests
  • ๐ŸŒ Translate documentation
  • โญ Star the repository

Contribution Guidelines

  1. Read CONTRIBUTING.md
  2. Fork the repository
  3. Create a feature branch (git checkout -b feature/amazing-feature)
  4. Test your changes locally (see testing section below)
  5. Commit with clear messages (git commit -m 'feat: add amazing feature')
  6. Push to your fork (git push origin feature/amazing-feature)
  7. Open a Pull Request

๐Ÿงช Scraper Unit Testing

For Python automation components (such as scripts/microsoft_direct_downloader.py), a robust unit and integration test suite is located in the tests/ directory.

To run the test suite in an isolated environment:

# 1. Set up a local virtual environment
python3 -m venv .venv
source .venv/bin/activate

# 2. Install dependencies & test requirements
pip install -r requirements.txt pytest pytest-asyncio

# 3. Execute the test suite
pytest tests/test_microsoft_downloader.py

This test suite uses complete mock coverage of Playwright page locators and user-agent rotations to validate scraper behavior without performing live requests.

Contributor Recognition

All contributors are recognized in:

  • Release notes
  • CONTRIBUTORS.md file
  • Project README
  • Special Discord role (if applicable)

By contributing, you agree to our Code of Conduct and MIT License.


๐Ÿ’ฌ Community

Connect With Us

  • ๐Ÿ’ฌ Discord: Join our server - Real-time chat & support
  • ๐Ÿ—จ๏ธ GitHub Discussions: Ask questions - Q&A and ideas
  • ๐Ÿ› Issue Tracker: Report bugs - Bug reports only
  • ๐Ÿ“ฅ SourceForge: Download releases - Official ISOs
  • ๐Ÿ”” Release Notifications: Watch repository โ†’ Custom โ†’ Releases

Community Stats

  • ๐Ÿ‘ฅ Active Users: 3,000+
  • ๐Ÿ“ฅ Total Downloads: 19,000+
  • ๐Ÿ“ˆ Weekly Downloads: 3,000 (growing!)
  • โญ GitHub Stars: 11
  • ๐Ÿด Forks: 8

Get Help

  1. Read the docs - Check README and wiki first
  2. Search issues - Someone may have asked before
  3. Ask in Discord - Fastest real-time help
  4. Create discussion - For general questions
  5. File issue - For confirmed bugs only

๐Ÿ“ License

Licensing Information

  • Tiny11 Automated (headless scripts, CI/CD): MIT License ยฉ 2025 kelexine
  • Inspired by tiny11builder: Original concept and interactive scripts by ntdevlabs, MIT License โ€” the headless automation in this project was built on top of that foundation
  • Individual files: See copyright notices in each file

MIT License Summary

โœ… Permitted:

  • Commercial use
  • Modification
  • Distribution
  • Private use

โŒ Limitations:

  • No warranty
  • No liability

๐Ÿ“‹ Conditions:

  • License and copyright notice must be included
  • Proper attribution required

Full license: LICENSE


โš–๏ธ Disclaimer

Legal Disclaimer

This tool is provided "as is" without warranty of any kind, express or implied.

The authors (kelexine, ntdevlabs) are NOT responsible for:

โŒ System damage from using modified Windows images
โŒ Data loss or corruption
โŒ Violation of Microsoft's terms of service
โŒ Legal issues from improper use
โŒ Compatibility problems
โŒ Security vulnerabilities
โŒ Performance issues

Your Responsibilities

โœ… You must have a valid Windows license
โœ… You must understand the risks
โœ… You must backup your data
โœ… You must comply with applicable laws
โœ… You must use responsibly and ethically

Use at your own risk. See LICENSE and SECURITY.md for details.


๐Ÿ”— Important Links

Official Resources

Related Projects

Author


๐Ÿ™ Acknowledgments

Special Thanks

  • ntdevlabs - Creator of original tiny11builder
  • Microsoft - Windows 11 operating system
  • Community contributors - Bug reports, feature requests, and PRs
  • 2,000+ users worldwide - Your feedback drives improvement

Support the Project

If Tiny11 Automated has helped you:

  • โญ Star the repository - Show your support
  • ๐Ÿด Fork and contribute - Help improve it
  • ๐Ÿ“ข Share with others - Spread the word
  • ๐Ÿ’– Sponsor development - Fund new features (optional)

About

Automated tools for creating streamlined Windows 11 images with CI/CD support. Builds Tiny11 and Tiny11 Core ISOs with GitHub Actions workflows.

Resources

Code of conduct

Contributing

Security policy

Stars

0 stars

Watchers

0 watching

Forks

Releases

Packages

Contributors

Languages