📎 AI Summary:
The thread discusses how to “de-bloat” a new Windows 11 laptop—mainly whether to uninstall OEM/trial apps manually versus using Settings > Recovery > Reset this PC, with many advising manual cleanup first and reserving a full clean install (from Microsoft media) for a true “Windows-only” slate. It then shifts to a separate setup problem: signing into an existing Microsoft account triggers a strong security prompt (iPhone/Android approval or security key), with responders emphasizing you usually don’t need to buy a key and that the account owner should complete/adjust security methods. Overall sentiment is practical and slightly frustrated/“MS makes this harder than it used to be,” but the answers are helpful and cautious about not breaking recovery/account access.
C

CaesarWin26

Member
Joined
Mar 16, 2026
Messages
12
Thread Author #1
I've purchased (but have not yet received) a new Windows 11 (Home) laptop for my adult granddaughter. In my limited experience with such things, I've known that new computers typically ship with built-in bloatware--stuff that the user will likely never use, but that takes up precious storage space. So, before I deliver this machine, I'd like to get it down to just what it needs to function: the operating system. I'd like to hear from experts what they do with a new machine before they put it online. Should I simply delete the obvious bloatware, e.g., trial versions of Microsoft 365, antivirus programs, and so on? Or should I reset the installation via Settings > System > Recovery Options?
 

Solution
WindowsForum AI
Yes — the simplest answer is probably: sit down with her and use her iPhone. You almost certainly do not need to buy a physical security key. That prompt usually appears because her Microsoft account is set up to use passwordless sign-in, two-step verification, or another stronger sign-in method, and Microsoft supports methods such as the Microsoft Authenticator app, security keys, Windows Hello, and in some cases SMS codes instead of a plain password.

What to try on that screen first​

  • Look carefully for “Other ways to sign in”, “Sign in another way”, or “Use your password instead.”
  • If you see it, choose it.
  • Then look for one of these...
Sort by date Sort by votes
WindowsForum AI

WindowsForum AI

AI
Staff member
Robot
Joined
Mar 14, 2023
Messages
114,230
#2
Hi CaesarWin26,
My advice is: do not use Reset this PC as your first de-bloating step.

Short answer​

For a brand-new laptop that is working normally, I would usually do this first:
  1. Complete setup and let Windows settle.
  2. Create a recovery path first: a recovery drive and a restore point.
  3. Uninstall the obvious junk manually.
  4. Disable unwanted startup items.
  5. Keep Windows Security, and remove third-party antivirus trials unless you specifically want them.
  6. Only do a true clean install if you want the machine as close as possible to “Windows only.” Microsoft’s own clean-install process removes apps, settings, and manufacturer customizations. (support.microsoft.com)

Why I would not start with Reset​

Microsoft’s reset options include a “Restore preinstalled apps” setting, which can reapply PC-manufacturer customizations. In other words, Reset is not the most reliable way to remove OEM clutter. If you truly want a bare installation, Microsoft’s installation-media clean install is the more thorough route. (support.microsoft.com)

What I would do on a new machine​

Option A — Best for most people​

Use the factory install, but clean it up.
  1. Open Settings > Apps > Installed apps and uninstall the obvious extras you do not want. Microsoft documents uninstalling apps from Start or from Settings > Apps. (support.microsoft.com)
  2. Remove trial antivirus software if present, and rely on Windows Security unless you have a reason to use something else.
  3. Open Settings > Apps > Startup and turn off anything you do not want launching automatically. Microsoft documents startup control there. (support.microsoft.com)
  4. In Windows Security > App & browser control > Reputation-based protection, make sure potentially unwanted app protection is on. Microsoft says PUA protection is on by default on current Windows systems and can be managed there. (support.microsoft.com)

Option B — Best if you want “just Windows”​

Do a clean install from Microsoft installation media.
Microsoft says a clean install removes:
  • personal files
  • apps
  • settings changes
  • customizations from the device manufacturer (support.microsoft.com)
That is the closest match to your goal of getting the machine down to the OS and only what it needs. If you reinstall the same edition, Windows 11 Home, setup can automatically apply the product key if it finds it in firmware. (support.microsoft.com)

My practical recommendation​

For your granddaughter’s laptop, I would not jump straight to a clean install on day one unless the factory image is especially bad.
I would do this in order:
  1. Set up the laptop normally.
  2. Create a recovery drive on a USB stick. Microsoft says the recovery drive includes Windows files, installed updates at the time of creation, and manufacturer customizations. (support.microsoft.com)
  3. Turn on System Protection and create a restore point. Microsoft recommends enabling it and explains how to create a restore point manually. (support.microsoft.com)
  4. Uninstall obvious bloatware:
    • antivirus trials
    • shopping/promotional apps
    • game bundles she will never use
    • OEM “offers” apps
    • Microsoft 365 trial only if she will not use it
  5. Disable startup clutter from Settings > Apps > Startup. (support.microsoft.com)
  6. Keep anything that looks driver- or hardware-related until you know what it does.
  7. If the machine still feels messy after that, then do a clean install from Microsoft media, not a reset. (support.microsoft.com)

If you do decide to use Reset anyway​

If you choose Reset, I would favor Cloud download over Local reinstall, because Microsoft says Cloud download pulls a fresh copy of Windows and includes the latest updates, while Local reinstall uses files already on the PC. (support.microsoft.com)

Bottom line​

My vote:
  • First choice: manually remove the bloatware and disable startup clutter.
  • Not my first choice: Settings > System > Recovery > Reset this PC.
  • Best “clean slate” choice: a Microsoft clean install if you really want to strip out the manufacturer image. (support.microsoft.com)
If you want, once the laptop arrives, I can give you a safe first-hour checklist:
  • what to uninstall,
  • what to keep,
  • and what to avoid removing.
 

Upvote 0 Downvote
ussnorway

ussnorway

Windows Forum Team
Staff member
Joined
May 22, 2012
Messages
4,598
#3
don't delete anything
1st step is to pick a username and sing in pin... an email username works best for work but anything is fine for personal use
2nd the Microsoft 365 needs a email to work and don't use a school or work email because they tend to stop access once you leave
most people are fed-up with microsoft accounts and if you don't really need 365 i'd dump it as their 'help' is AI driven and just a total joke... if you do decide to keep 365 then make a Microsoft account and be sure to use the same email address for that as you use for the 365 account
 

Upvote 0 Downvote
WindowsForum AI

WindowsForum AI

AI
Staff member
Robot
Joined
Mar 14, 2023
Messages
114,230
#4
That’s solid advice overall.
A couple of tidy clarifications:
  1. Don’t delete anything yet
  • Agreed. Set the machine up first, confirm activation, drivers, and recovery options, then clean up later.
  1. Username / PIN
  • Yes — pick the sign-in method first.
  • For a personal PC, a local account is fine.
  • For Microsoft 365, you’ll usually want a Microsoft account or other supported email sign-in you personally control.
  1. Don’t use school/work email for personal ownership
  • Strong agree.
  • If access is tied to a school or employer, you can lose access later when you leave.
  1. If keeping Microsoft 365
  • Use an email address you own and will keep.
  • Using the same email for your Microsoft account and 365 does make life simpler.
  1. Best extra step
  • Add a recovery email/phone and write down the account details somewhere safe.
So the short version is:
  • Set it up first
  • Use a personal email
  • Avoid school/work accounts for personal devices
  • Match the Microsoft account and 365 email if possible
  • Keep recovery info safe
If you want, I can turn that into a clean 5-step “new laptop setup” post for the thread.
 

Upvote 0 Downvote
C

CaesarWin26

Member
Joined
Mar 16, 2026
Messages
12
Thread Author #5
I've got the new PC and I'm trying to set it up at my home. My granddaughter is not with me. I got through all the preliminary steps--language, keyboard layout. Now I'm looking at signing into her Microsoft account, which she's had for years, and I'm getting a little perplexed and annoyed. I entered her Microsoft account email address--so far, so good. Next screen asks me to produce either an iPhone (or Android device) or a security key. I know what a security key is--although I've never owned or used one--and now I see what a security key costs. I'm not inclined to spend that much on a device that my adult granddaughter will have to keep up with. She doesn't need that much security!
So now what? Do I need to sit down with her so we can use her iPhone to finish setting up this machine? I didn't run into this much hassle when I set up her Windows 10 machine. Is there a way to set this thing up with her Microsoft account email address and password?
 

Upvote 0 Downvote
WindowsForum AI

WindowsForum AI

AI
Staff member
Robot
Joined
Mar 14, 2023
Messages
114,230
#6
Yes — the simplest answer is probably: sit down with her and use her iPhone. You almost certainly do not need to buy a physical security key. That prompt usually appears because her Microsoft account is set up to use passwordless sign-in, two-step verification, or another stronger sign-in method, and Microsoft supports methods such as the Microsoft Authenticator app, security keys, Windows Hello, and in some cases SMS codes instead of a plain password.

What to try on that screen first​

  • Look carefully for “Other ways to sign in”, “Sign in another way”, or “Use your password instead.”
  • If you see it, choose it.
  • Then look for one of these:
  • Password
  • Text message
  • Email code
  • Authenticator code/approval
Microsoft’s sign-in guidance says alternate methods may be available through “Sign in another way”, but if that link is not shown, it usually means no other verification method is currently set up for that account.

If the only choices are iPhone/Android or security key​

Then the account is likely relying on a phone-based/passwordless method, and the easiest path is:
  • Have your granddaughter with you.
  • Use her iPhone to approve the sign-in request, or provide the code from the app if prompted.
  • Finish Windows setup.
  • Create the Windows PIN when Windows asks.
If her Microsoft account password was removed, Microsoft says the account must then be accessed with a passwordless method such as Authenticator, Outlook for Android, Windows Hello, a physical security key, or SMS codes.

So, can you just use email address and password?​

Maybe, but only if her account still has password sign-in enabled and that option is offered. If the account was switched to passwordless, then no, a normal password-only sign-in will not work until that account’s sign-in methods are changed. Microsoft’s documentation explicitly says that once you remove the password from the account, sign-in must use passwordless methods instead.

What I recommend after you get in​

Once the laptop is set up, sign in to her Microsoft account security page and make sure she has backup sign-in methods configured, such as:
  • Her iPhone authenticator approval
  • A phone number for text codes, if available
  • Another backup method she can actually manage
Microsoft recommends having multiple security methods, and warns that changing or removing all security info can trigger a 30-day restriction, so don’t strip methods out casually.

My bottom line​

  • No, you should not need to buy a security key.
  • Yes, you may need her present with her iPhone if that is the sign-in method already tied to her Microsoft account.
  • If you see “Other ways to sign in,” use it and look for password or text-code options.
  • If you want, I can walk you through the exact next click based on the screen you are seeing now.
 

Upvote 1 Downvote
Solution
ussnorway

ussnorway

Windows Forum Team
Staff member
Joined
May 22, 2012
Messages
4,598
#7
like i said the 'help' is Ai shit... setting a key should be done by her because that phone then gets linked to her Microsoft account

another option is to use a different email address but the same problem becomes they get linked to her account and Microsoft will nag her to the end of time for all personal details either way
 

Upvote 0 Downvote
WindowsForum AI

WindowsForum AI

AI
Staff member
Robot
Joined
Mar 14, 2023
Messages
114,230
#8
That’s the practical point, yes: the account owner should set up the recovery methods herself.
  • Microsoft 365 is tied to the account associated with the subscription, so sign-in, activation, and reinstall all follow that account.
  • Phone numbers and extra email addresses are part of the account’s security info / aliases, so if she adds them, they become part of her Microsoft account management.
  • Using a different email address can help keep work/school and personal life separate, but it does not remove the basic issue that the subscription and recovery methods are linked to whichever Microsoft account is chosen. Personal and work/school Microsoft accounts also can’t be merged.
  • And yes, Microsoft account recovery/support is rigid: support agents are not allowed to change account details for you, and replacing all security info can trigger a 30-day restricted period.
So the safest setup is:
  1. She picks the email account she wants long-term.
  2. She creates/signs into the Microsoft account herself.
  3. She adds her own phone / backup email.
  4. If using Microsoft 365, use that same account consistently.
If you want, I can turn that into a short forum-ready “new laptop + Microsoft 365 account ownership” checklist.
 

Upvote 0 Downvote
Adler144

Adler144

Well-Known Member
Joined
May 10, 2026
Messages
47
#9
Almost the time you need to buy a new device but if you have time and like make experiences just buy some empty CD and DVD disk and setup the windows by yourself and enjoy it as you like to create your office and avoid the instalation of some program you don't use too much.
 

Upvote 0 Downvote
WindowsForum AI

WindowsForum AI

AI
Staff member
Robot
Joined
Mar 14, 2023
Messages
114,230
#10
Good point about doing a clean setup yourself, Adler144 — that is definitely one way to avoid a lot of manufacturer-added extras.
One thing I’d adjust, though: for a modern Windows 11 laptop, I would use a USB flash drive, not CD/DVD media.

Why USB is better now​

  1. Most new laptops do not have an optical drive.
  2. Windows 11 installation media is normally created on a bootable USB drive.
  3. USB is faster and easier to reuse.
  4. Some Windows images may not fit comfortably on standard DVD media anymore.
  5. Microsoft’s current install-media guidance generally points users toward USB/ISO methods.

Safe clean-install approach​

If CaesarWin26 wants the cleanest possible setup, the basic path would be:
  1. Back up anything important first if the laptop has already been used.
  2. Create the manufacturer recovery media first if available.
  3. Download the official Windows 11 installation media from Microsoft.
  4. Use an empty USB flash drive, usually 8 GB or larger.
  5. Boot the new laptop from the USB.
  6. Install the same edition the laptop came with, likely Windows 11 Home.
  7. After installation, run Windows Update several times.
  8. Install any missing manufacturer drivers or utility apps only if needed.

Important warning​

A clean install can remove useful OEM items too, such as:
  • touchpad/hotkey utilities
  • audio control software
  • battery/thermal management tools
  • warranty/support apps
  • factory recovery tools
So I’d still recommend making a recovery USB or checking that the manufacturer’s recovery image is available before wiping anything.
For most non-technical users, the best compromise is still: set up the factory Windows install, remove obvious trialware, disable startup clutter, and only clean-install if the OEM image is truly messy.
 

Upvote 0 Downvote
Adler144

Adler144

Well-Known Member
Joined
May 10, 2026
Messages
47
#11
Usig the CD port looks the best bet for me because the USB port won't works before any Driver get ready on your pc. By the way it's not to bad if you have it ready to use some programs are easy to found and download to an USB
 

Upvote 0 Downvote
WindowsForum AI

WindowsForum AI

AI
Staff member
Robot
Joined
Mar 14, 2023
Messages
114,230
#12
Adler144, I understand what you mean, but on modern PCs the USB port normally works before Windows drivers are installed.

Why USB usually works for Windows setup​

  1. The laptop’s UEFI/BIOS firmware can read USB devices before Windows starts.
  2. Windows 10/11 setup includes built-in drivers for most USB controllers.
  3. A bootable Windows USB installer is the normal method now.
  4. Most new laptops no longer include a CD/DVD drive.
  5. External DVD drives often connect by USB anyway, so they depend on the same basic USB support.

When USB can be a problem​

USB boot can fail if:
  1. The USB installer was not created correctly.
  2. The laptop is set to the wrong boot mode.
  3. Secure Boot or UEFI settings are misconfigured.
  4. The USB port is damaged.
  5. The machine uses unusual storage/controller hardware and needs extra drivers.
But for a normal Windows 11 laptop, a Microsoft-created Windows 11 USB installer is usually the best choice.

Best practical approach​

  1. Use an 8 GB or larger USB flash drive.
  2. Create it with Microsoft’s official Windows 11 Media Creation Tool.
  3. Boot from the USB using the laptop’s boot menu key, often F12, Esc, F9, or F10.
  4. Install Windows.
  5. After setup, run Windows Update to pull drivers.
  6. Then install only the manufacturer utilities you actually need.

About CD/DVD​

CD/DVD can still work on older machines, but for a new Windows 11 laptop it is usually less convenient. A standard DVD may also be too small for some modern Windows images, and many laptops have no optical drive at all.
So I’d put it this way: USB is the normal best bet now; DVD is more of a fallback for older systems.
 

Upvote 0 Downvote
You must log in or register to reply here.