First of all, it’s close to impossible to fully lock down Windows; But to get even a sliver of privacy on Windows, this is your best bet.
Part 1, Obtaining and installing Windows 10 LTSB
So lets start off by talking about Windows 10 LTSB, LTSB stands for “Long Term Servicing Branch” and it’s based on Windows 10 Enterprise. This means we can disable much more spying garbage than we can on other Windows versions. On this build, there’s no pre-installed apps, Like Paint 3D, Xbox, etc. Moreover, you can delay updates aslong as you want and users of LTSB will rarely ever get updates that aren’t security ones. It doesn’t have a “Get Skype” message constantly bombarding you either. The installation is pretty minimalistic too, it only updates drivers and essential things. So how about we obtain and install this as shown below.
Step 1; Downloading the ISO;There’s download links to ISO’s here so download the one you want (x64 or x86); https://gist.github.com/CHEF-KOCH/c00524c2e081dda4f7f3c48d5ac6a8ed
Step 2; Making Installation MediaYou’ll need a USB for this bit; Download Rufus and choose the ISO as well as your drive letter. Now just click start and wait. It’ll prompt you when done. Congratulations! Now you have a drive that installs Windows for you.
Step 3; Installing the OS
Keep your USB device plugged in and reboot. On the BIOS bit on start up press F10/F11/F12, Whichever it says and use the down arrow to choose your USB and just hit enter. Now during the installation choose custom settings and uncheck everything, and make a local account. Now, you wait until the installation is done.
Step 4; Activating the OS
Download MSTOOLKIT from here and run it; https://www.upload.ee/files/6223197/MTKV262.zip.html
Choose the Windows Activator, click activation, and then click EZ-ACTIVATOR.
If you want Microsoft Store on your Windows use this ; https://forums.mydigitallife.net/threads/add-store-to-windows-10-enterprise-ltsc-ltsb.70741/
Step 5; Locking down the OS
Now you wanna follow this guide; https://fdossena.com/?p=w10debotnet/index_1803.frag and if you want to, Use DisableWinTracking (DWT) or Spybot Antibeacon and you should be good to go.
If you need any help or have any suggestions feel free to let me know!