Enterprise-grade Windows 11 configuration management in a single, self-contained PowerShell file.
PatchW11 is the core, standalone delivery of the full WinAuto suite. It is a powerful, lightweight automation script designed to streamline configuration, security hardening, and maintenance of Windows 11 systems—consolidated entirely into one interactive file.
- Interactive Dashboard: A modern, arrow-key driven CLI interface for manual and automated operations.
- SmartRUN Automation: Intelligent orchestration that audits system state and only applies changes where configuration drift is detected.
- Security Hardening: Automates Microsoft Defender, Memory Integrity, Kernel Stack Protection, LSA Protection, App & browser control, and Windows Firewall.
- Application Management: Built-in application setups utilizing WinGet and direct downloads with silent deployment.
- Automated Maintenance: One-touch system repair (SFC/DISM), drive optimization, and temp file cleanup.
- UI Automation: Robust handling of Windows Settings that cannot be managed via the registry alone.
- Elevate: Open a PowerShell window as Administrator.
- Run: Execute the core script:
.\PatchW11.ps1
- Navigate: Use the
^andvarrow keys to select sections. - Execute: Press
Spaceto run the selected section orSmartRUN. - Info: Press
Ito view the functional outline. From the Info page, pressEnterto export a technical CSV map orEscto return to the dashboard.
Unlike the full WinAuto suite, the PatchW11 repository relies on a strictly single-file architecture:
PatchW11.ps1: The complete standalone core script comprising the interactive dashboard and all automation logic. No external dependencies or separate folders required.
- Operating System: Windows 11 (Build 22000+)
- Privileges: Administrator
- Execution Policy: Set to
RemoteSigned(handled automatically by the script).
- Test First: Always run in a non-production environment first.
- Back up: Critical data should be backed up before running maintenance tasks.
- Responsibility: The authors are not responsible for any system instability or data loss.
Maintained by KeithOwns | Open Source MIT License