Technical Anshu
Tutorials Blog
💿 Custom Windows ISO

Build Your Own Windows ISO Remove Unwanted Components and Add Setup Bypasses the Safe Way

Part 1 showed how to create a custom ISO. This is the deep part: which components to remove, which to never touch, how the setup bypasses actually work, and the build order that keeps Windows Update healthy afterwards.

✍️ Technical Anshu🪟 Windows 10 / 11⏱️ 11 minute read
🎥 Watch the complete video — building a custom Windows ISO, removing unwanted components and setting the bypass options step by step

Anyone can tick every remove checkbox in a customisation tool and produce a tiny ISO. The hard part is producing one that still installs cleanly, updates every month, and activates normally six months later. In the video, Technical Anshu loads the image and walks through the component list and the setup options — this guide explains the reasoning behind those choices, the safe order of work, and the checks to run before the ISO goes near a real machine. Work in layers, keep the untouched Microsoft ISO as your fallback, and never delete your only clean source image.

Component removal tool — image loaded, component list open
Windows Apps (provisioned)remove the ones nobody opens
Multimedia / Codecskeep — too much depends on it
System — Windows Update stacknever remove
Privacy — Telemetry optionstune, do not rip out
Setup — TPM / account bypassset inside the image
The professional approach is a layered list like this one — not one big delete. Example view, component names vary by tool and build.
1

Start from a Genuine Microsoft Image, Every Time

Every custom build in this series starts from the untouched ISO downloaded from Microsoft. That matters for three reasons: the file hashes match what Microsoft published, no third party has pre-modified the servicing store, and if anything goes wrong you can prove the problem came from your changes, not the source.

  1. Download the ISO from Microsoft and keep it read-only in a folder called 00-Source — never edit this copy
  2. Check which editions and indexes the image contains before choosing one to customise: Dism /Get-WimInfo /WimFile:D:\sources\install.wim
  3. Work on a copy of the extracted image, and keep one tested master ISO per Windows version instead of rebuilding from zero each time
2

Mount the Image and Look Before You Remove

Whether you use the GUI tool from the video or pure DISM, the flow is identical: mount, inspect, change, verify, commit. Mounting with DISM looks like this, and the same commands let you audit what any tool did:

  1. Dism /Mount-Image /ImageFile:D:\sources\install.wim /Index:1 /MountDir:C:\Mount
  2. List what is actually inside before touching anything: Dism /Image:C:\Mount /Get-Packages and Dism /Image:C:\Mount /Get-Capabilities
  3. Make your changes in the mounted image
  4. Save them with Dism /Unmount-Image /MountDir:C:\Mount /Commit — or discard a bad session with /Discard and start again, which is exactly why you never edit the source
3

Remove Components in Layers, Not in One Sweep

The layered order is the whole secret of a stable custom ISO:

  1. Layer 1 — provisioned apps: the consumer apps pre-installed for every new user. Removing these is almost always safe
  2. Layer 2 — optional features and capabilities: things like extra language packs or legacy tools your users never open. Remove selectively
  3. Layer 3 — tuning instead of removal: telemetry, advertising ID and similar settings are better handled as settings or policies, not deleted components
  4. Never layer — the servicing core: the Windows Update stack, component store plumbing, WinRE and activation components stay untouched, or the image cannot be serviced later. The separate component map page in this series lists the full green, yellow and red zones
4

Add What the Image Is Missing While It Is Open

An open image is also your chance to add value instead of only removing things. Slipstream the current cumulative update so a fresh install is not two hours behind on patches, and integrate the storage and network drivers your hardware needs so Setup can see the disk and the first boot already has internet. Both jobs are DISM one-liners — /Add-Package for updates and /Add-Driver /Recurse for a driver folder — and they are covered step by step in the offline servicing page of this series.

5

Set the Setup Bypasses Inside the Image

The bypasses shown in the video — skipping the TPM, Secure Boot and RAM checks, and avoiding the forced Microsoft account — work because they are policy checks inside Windows Setup, and the image itself can carry the answers. Tools write the LabConfig values for the setup environment and set the BypassNRO flag in the image registry, or an answer file issues the same commands during the windowsPE pass. One honesty line that matters: a bypass removes a check, not a hardware requirement — Windows 11 24H2 still needs a CPU with POPCNT and SSE4.2 instructions, and no checkbox can add instructions a processor does not have. Full detail is in the bypass page of this series.

6

Rebuild, Then Test Like You Do Not Trust It ⭐

A finished build is a claim, not a fact, until it passes testing:

  1. Install it in a virtual machine first — unattended start to desktop, no errors
  2. Run Windows Update twice and confirm the cumulative update installs
  3. Open the Microsoft Store, install one app, and confirm activation status
  4. Boot the recovery environment once (WinRE must survive your removals)
  5. Only then install on one real spare PC — and keep the previous tested master until the new one has passed everything

The complete pre-deployment checklist is in the testing page of this series. Build slowly, test fully, and your custom ISO becomes a tool you can hand to a customer with confidence.

🎥 Watch the Complete Video Guide

Every checkbox, removal and bypass option from this page is shown live in the full video — watch it end to end before you build your own ISO.

▶️ Watch Full Video
❓ Frequently Asked Questions

Is it legal to build my own custom Windows ISO?

Yes, for your own PCs — customising installation media you obtained from Microsoft is a long-standing deployment practice, and activation still follows each machine's own licence. What you may not do is redistribute modified ISOs publicly or use one licence on many machines. The licensing page in this series explains the lines in detail.

Which tool does the video use to remove components?

The video loads the ISO into a GUI customisation tool and works through its component checkboxes and setup options — the same class of tool as NTLite or the MSMG Toolkit. Every technique on this page also works with plain DISM commands, so the method survives even if you change tools.

Will Windows Update still work on a custom ISO?

It will if you respect the red zone: never remove the servicing stack, the component store plumbing or WinRE, and prefer tuning settings over deleting system components. The Windows Update page in this series explains exactly how aggressive removal breaks monthly updates and how to avoid it.

This guide is based on the Technical Anshu video on building your own Windows ISO and removing unwanted components • Stuck on a step? Ask in the video comments — you will get help 🙏