Creating a custom Windows ISO lets you remove bloatware, skip setup screens, pre-configure accounts, and inject drivers — all before Windows ever boots. Every tool that does this relies on the same two built-in mechanisms: DISM (which mounts and modifies the Windows image) and answer files (which tell Setup how to configure Windows as it installs). This guide covers the tools I actually use and recommend, what each one does best, and how to decide which approach fits your situation.
Applies to: Windows 10 (all editions) and Windows 11 (22H2, 23H2, 24H2, 25H2)
Last updated: April 2026
Key Takeaways
- Every Windows customization tool wraps the same two built-in systems: DISM (modifies
install.wim/install.esd) and answer files (autounattend.xmldriving Setup). - Want a GUI? NTLite (paid, most polished) or MSMG Toolkit (free, menu-driven) give you direct control over what gets removed from the image.
- Want it done for you? Community projects — Tiny11, MicroWin, UnattendedWinstall, and Winhance — already package the modifications so you just download and install.
- Always test a custom ISO in a VM first. Removing the wrong component (Windows Update, Defender platform, Edge WebView2) can break features you didn’t expect.
In This Guide
There are three distinct approaches to customizing a Windows ISO. Jump to whichever matches your goal:
- How Windows image customization works — the DISM + answer file foundation every tool sits on top of.
- GUI and menu-driven tools — NTLite, MSMG Toolkit, ET Optimizer, Schneegans Unattended Generator.
- Community projects (pre-built) — Tiny11, MicroWin, UnattendedWinstall, Winhance, WIMUtil.
- Which approach to choose — by experience level and what you’re trying to achieve.
Why Bother Creating a Custom Windows ISO?
A clean Windows install still ships with telemetry, promoted apps, Copilot, Recall, OneDrive, Edge, widgets, and a growing list of services most people never use. Every stock install means sitting through OOBE, dodging the forced Microsoft account, and then spending twenty minutes uninstalling apps. A custom ISO bakes those decisions in once so every install comes up the way you want it — no OOBE clicks, no bloatware, local account already created.
When I repair or rebuild PCs, this saves real time. Plugging in a USB with a pre-configured ISO means the machine is usable within minutes of Setup finishing, not an hour later.
Warning: Modifying the Windows image can break things if you remove a component something else depends on. Always test a custom ISO in a VM (VirtualBox, VMware Workstation, or Hyper-V) before running it on real hardware.
How Windows Image Customization Works
Every ISO is a disk image containing an install.wim or install.esd file inside the sources folder. That WIM (Windows Imaging Format) file is essentially a compressed snapshot of a fully installed Windows — every system file, driver, package, and registry hive. There are two ways to customize what ends up on disk after Setup runs.
Approach 1: Modify the image with DISM
DISM (Deployment Image Servicing and Management) is shipped inside every copy of Windows. It can mount a WIM to a folder, letting you add or remove Windows features, inject drivers, delete provisioned apps, and edit the registry of the offline image — then commit the changes and repack the ISO.
dism /Mount-Image /ImageFile:C:\ISO\sources\install.wim /Index:1 /MountDir:C:\mount
dism /Image:C:\mount /Get-ProvisionedAppxPackages
dism /Image:C:\mount /Remove-ProvisionedAppxPackage /PackageName:<AppName>
dism /Unmount-Image /MountDir:C:\mount /Commit
That’s what every GUI tool on this page is wrapping — a cleaner front-end for these DISM commands, plus the oscdimg step that rebuilds a bootable ISO at the end.
Approach 2: Use an answer file (autounattend.xml)
Answer files don’t touch the Windows image at all. Instead, you drop an autounattend.xml file on the root of the installation USB, and Setup reads it at every phase — disk partitioning, specialize, OOBE, FirstLogon — and executes the instructions you put there. You can:
- Skip the entire OOBE (region, keyboard, Microsoft account)
- Create a local user account automatically
- Remove provisioned apps (Copilot, Widgets, Xbox, etc.) on first boot
- Apply registry tweaks for privacy, UI, and performance
- Run PowerShell or CMD scripts during FirstLogon
The advantage: you never modify the WIM, so Windows Update and feature updates keep working normally. The disadvantage: everything happens at install time, so the ISO itself stays the same size. I cover this approach in depth in my guide on how to create an autounattend.xml answer file and the follow-up debloat and optimize with an answer file.
GUI and Menu-Driven Tools
These tools give you direct control over what goes into the image. They’re for people who want to pick and choose rather than accept someone else’s preset.
NTLite — the most polished GUI
NTLite is the cleanest interface in this space. Load a WIM, and you get a tree of every component, service, and provisioned app — each with a short description explaining what breaks if you remove it. It also handles driver integration, update slipstreaming, and answer-file generation inside the same window.

NTLite has a free tier, but component removal, driver integration, and most of the useful features sit behind a paid license. If you’re customizing one ISO for personal use, the Home license is reasonable; for repair shops or anyone doing this regularly, it pays for itself quickly.
MSMG Toolkit — free and powerful (but menu-based)
MSMG Toolkit is completely free and tracks new Windows builds quickly. Instead of a GUI, you get a numbered text menu driven from a command window — you pick a source, then walk through remove/integrate/customize options. Not pretty, but it does everything NTLite does without the paywall.
Typical MSMG workflow: point it at an extracted ISO, remove the apps and components you don’t want, integrate updates or drivers, then let it rebuild the ISO. If you’re comfortable reading menus and don’t need hand-holding, it’s the best free option for direct image modification.
ET Optimizer — optimize-first ISO builder
ET Optimizer is primarily a live-system optimizer, but it includes a custom ISO builder that bakes its optimization profile into the image before you install. If you’ve used and liked ET Optimizer on a running system, its ISO feature gives you that same state at first boot.
Schneegans Unattended Generator — web-based answer files
If you want to use the answer-file approach without hand-writing XML, Christoph Schneegans’ Unattended Generator is the tool. It’s a web form — pick your region, keyboard, account type, bloatware to remove, registry tweaks — and it outputs a valid autounattend.xml that you drop on your install USB.

It’s excellent for one-offs. For repeated use or when you want stricter debloating and preset optimizations, I’d point you at UnattendedWinstall below.
Community Projects (Pre-Built Custom Windows)
If you don’t want to pick components yourself, someone has already done it. These projects ship either as pre-built ISOs or as scripts that build one from your own ISO.
Tiny11 — the classic lightweight Windows 11
Tiny11 by NTDEV is a PowerShell script that takes an official Windows 11 ISO and strips it down to a shell that runs on 2 GB of RAM. The value of Tiny11 isn’t just the smaller footprint — the script is open source, so you can read it line-by-line and understand exactly which provisioned packages and components get removed. I cover the full build process in my Tiny11 Builder tutorial.

MicroWin — the CTT utility’s ISO builder
MicroWin is part of the Chris Titus Tech Windows Utility. Point it at an official ISO and it produces a debloated version — crucially, it can also inject the drivers from the machine you’re running it on, which dramatically improves first-boot hardware compatibility. It’s probably the most user-friendly way to generate a stable custom Windows ISO without touching the image yourself.
UnattendedWinstall — my answer-file project
UnattendedWinstall is my own project. It’s a curated autounattend.xml file (plus the scripts it triggers) that handles everything I want on a new Windows install:
- Bypasses the forced Microsoft account and creates a local account
- Removes provisioned bloatware (Copilot, Widgets, Xbox apps, promoted Store apps)
- Applies privacy registry tweaks and disables telemetry services
- Enables useful power and performance settings
- Leaves Windows Update fully functional — no WIM modification

Easiest way to use it: pair UnattendedWinstall with WIMUtil, which creates a bootable USB and drops the answer file in the right place automatically. Full walkthrough in my UnattendedWinstall setup guide.
Winhance — post-install customization
If you’d rather install stock Windows and clean it up afterwards, that’s what Winhance is for. It’s my own tool and it does the same debloating, privacy tweaks, and optimization work that UnattendedWinstall does — just on a system that’s already running. Useful when you don’t control the install process (work laptops, pre-built PCs, OEM machines).
Tip: All three of these (UnattendedWinstall, Winhance, Tiny11) are open source. You can read exactly what they do to your system before running them — and if something feels off, you can ask an AI assistant to explain the script line-by-line.
Which Approach Should You Pick?
Short version, by what you’re actually trying to do:
- “I just want a cleaner Windows install with zero fuss” → UnattendedWinstall + WIMUtil. No image modification, Windows Update keeps working, takes about ten minutes to set up a USB.
- “My hardware is weak / I want the smallest possible ISO” → Tiny11 or MicroWin. Both physically strip components out of the WIM, so the install is smaller and lighter on RAM.
- “I want full control over every component” → NTLite if you’ll pay for it, MSMG Toolkit if you want it free. Both give you granular removal with clear warnings.
- “I already installed Windows and want to clean it up now” → Winhance. Runs on the live system, no reinstall needed.
- “I just want a one-off answer file for this one install” → Schneegans Unattended Generator. Fill in the web form, download the XML, done.
Critical: Whichever tool you pick, always boot the resulting ISO in a VM (VirtualBox, VMware Workstation Player, Hyper-V) before running it on real hardware. A five-minute VM test catches broken ISOs that would otherwise waste an hour reinstalling on your actual machine.
Related Guides on memstechtips.com
- How to create an autounattend.xml answer file for Windows 10/11
- Customize Windows installs with UnattendedWinstall
- Clean Windows 11 install with WIMUtil
- Create a debloated Windows 11 ISO with Tiny11 Builder
- Debloat and optimize Windows 11 with the Chris Titus Utility
- Winhance — my post-install customization tool
Frequently Asked Questions
Is it safe to create a custom Windows ISO?
Yes, as long as you test it in a VM before using it on real hardware. The risk is removing a component something else depends on — for example, stripping the App Installer service also breaks WinGet, and removing the Windows Update platform kills both cumulative updates and Defender definition updates. Well-tested community projects like Tiny11 and MicroWin avoid the obvious footguns. If you’re rolling your own with NTLite or MSMG Toolkit, stick to checked-by-default removals until you’ve tested each extra one in a VM.
Which tool should a beginner start with?
Start with UnattendedWinstall plus WIMUtil, or with MicroWin from the Chris Titus utility. Both give you a dramatically cleaner Windows install without requiring you to understand which DISM packages are safe to remove. If you specifically want to learn component removal with a GUI, NTLite is the easiest entry point — its component descriptions tell you what breaks when you untick each box.
Can I remove all bloatware with these tools?
You can remove almost all of the provisioned apps (the Store apps that install per-user) and most optional Windows features. What you cannot fully remove is anything deeply integrated into Explorer, the Edge WebView2 runtime, or the core Windows shell — ripping these out usually breaks something. Answer-file tools like UnattendedWinstall and Winhance focus on the stuff that’s safe to remove, which is why they don’t break updates.
Does customizing Windows violate Microsoft’s license?
For personal use on a machine you own with a legitimate Windows license, no. Microsoft’s EULA lets you install and configure Windows however you want on your own hardware. What isn’t allowed is distributing a modified Windows ISO — you can’t upload your custom build for others to download, because redistribution rights aren’t part of a consumer license.
How much disk space do I need to build a custom ISO?
Plan for 20 GB of free space to work comfortably. DISM expands the mounted WIM to about 6 GB, you need the original ISO (roughly 5 GB), the working mount folder, and the final rebuilt ISO — plus headroom for update slipstreaming if you’re doing that. SSD is strongly recommended; WIM operations on a spinning disk take hours.
Does a custom ISO still get Windows updates?
Answer-file-only approaches (UnattendedWinstall, Schneegans) keep Windows Update fully functional — you’re not touching the image. WIM-modification approaches (Tiny11, MicroWin, NTLite, MSMG) will keep cumulative updates working as long as you leave the Windows Update service and its dependencies intact. Feature updates (e.g. 24H2 → 25H2) on heavily stripped ISOs sometimes fail and require reinstalling from a fresh ISO — this is the main tradeoff of aggressive component removal.
