Differences

This shows you the differences between two versions of the page.

--- windows:11_ltsc [2025/02/27 23:51] – [Shortcut] Sean Rhone
+++ windows:11_ltsc [2025/06/27 18:44] (current) – [Information] 26100.4484 Sean Rhone
@@ Line 2: / Line 2: @@
   * Microsoft Windows 11 IoT Enterprise LTSC
-  * Version 24H2 (OS Build 26100.3323)
+  * Version 24H2 (OS Build 26100.4484)
   * TODO: More info on [[windows;10|Windows 10]]
@@ Line 42: / Line 42: @@
 :: End</code>
-==== RDP ====
-  "notepad.exe" "%UserProfile%\Desktop\Alira.rdp"
-<code>
-full address:s:192.168.1.152
-redirectprinters:i:0
-redirectcomports:i:0
-redirectsmartcards:i:0
-redirectwebauthn:i:0
-redirectclipboard:i:1
-redirectposdevices:i:0</code>
 ====== Settings ======
@@ Line 64: / Line 51: @@
   REG ADD "HKEY_CURRENT_USER\Software\Classes\CLSID\{86ca1aa0-34aa-4e8b-a509-50c905bae2a2}\InprocServer32" /ve /t "REG_SZ" /f
-===== Disable HPET =====
+===== Enable FIPS Mode =====
-  "notepad.exe" "%ProgramData%\Microsoft\Windows\Start Menu\Programs\StartUp\Disable HPET.bat"
+  * https://learn.microsoft.com/en-us/windows/security/security-foundations/certification/fips-140-validation
-<code>
+  REG ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy" /v "Enabled" /t "REG_DWORD" /d "1" /f
-"bcdedit.exe" /set "useplatformtick" "no"
-"bcdedit.exe" /set "useplatformclock" "no"</code>
+  "powershell.exe" -Command "$md5 = New-Object -TypeName 'System.Security.Cryptography.MD5CryptoServiceProvider'"
+==== Disable ====
+****
+  REG ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa\FipsAlgorithmPolicy" /v "Enabled" /t "REG_DWORD" /d "0" /f
+====== Services ======
+  * TODO: Separate page, individual batches
+  "sc.exe" stop "DPS" & "sc.exe" config "DPS" "start=disabled"
+  "sc.exe" stop "SysMain" & "sc.exe" config "SysMain" "start=disabled"
+===== Alira =====
+****
-  "%ProgramData%\Microsoft\Windows\Start Menu\Programs\StartUp\Disable HPET.bat"
+  "sc.exe" stop "AMD External Events Utility" & "sc.exe" config "AMD External Events Utility" "start=disabled"
 ====== Programs ======