SYSCONF16


Installing Windows 11 Enterprise LTSC

Prerequisites

Creating Installation Media

Flashing the ISO Image
  1. Using a working Windows computer, visit this link to download the 64-bit en_gb ISO image of the Windows installation media
  2. Download the portable Rufus application here
  3. Insert the USB stick into the computer and ensure that it is empty
  4. Run Rufus and choose the USB stick
  5. Click "SELECT" and navigate to the downloaded ISO image
  6. Click "START", click "OK" to any prompts regarding a revoked UEFI bootloader, and keep the options checked for "Remove requirement for 4GB+ RAM, Secure Boot and TPM 2.0", "Remove requirement for an online Microsoft account", "Disable BitLocker automatic device encryption" and "Disable data collection (Skip privacy questions)"
Collecting Installers & Tools
  1. In the root of the USB drive, create a folder named "files"
  2. In the "files" folder, create three further folders named "drivers", "installers" and "configs"
  3. Visit the following links relevant to your hardware, and save the relevant installer executables inside the "drivers" folder
  4. Visit the following links and save the installer executables inside the "installers" folder
  5. Visit the following links and save the files inside the "configs" folder

Installation

Booting from USB
  1. Turn off the target computer and insert the USB stick
  2. Push the power button while repeatedly pressing the boot menu key
  3. Select the UEFI option for your USB drive from the list
Installing to Disk
  1. Continue through the wizard, selecting and deleting all partitions on the desired boot drive so that only a single "Drive X Unallocated Space" is listed
  2. Select "Drive X Unallocated Space", click "Next", and continue through the wizard
  3. Wait for the installation to complete
Out-of-Box Experience (OOBE)
  1. Continue through the wizard, creating an offline user account

Core Applications & Basic Configuration

Installing Hardware Drivers
  1. Once the desktop has been reached, navigate to the "drivers" folder on the USB stick
  2. Install each driver package and restart after the final package has been installed
  3. Reboot and, once at the desktop again, connect to the internet if not already connected
Running Windows Update
  1. Hit "Win + S", type "Settings", and click to open
  2. Click "Windows Update" and "Check for updates"
  3. Install any available updates and restart
Installing Software
Windows 11 Core Software Configurator
  1. Hit "Win + S" on your keyboard, type "Windows Security", and open it
  2. Click "Virus & threat protection", then "Manage settings", then turn the "Real-time protection" toggle off
  3. Close Windows Security
  4. Hit "Win + S", search for "Settings", then open it
  5. Navigate to Apps > Installed Apps, then uninstall Snipping Tool by clicking on "..."
  6. Run the windows-11-core-software-configurator "runme.bat" to activate Windows, install the new Snipping Tool, and configure the newly installed applications
  7. Press any key to exit once complete
Setting Default Apps
  1. Hit "Win + S" on your keyboard to search for "SumatraPDF" and "JPEGView"
  2. In SumatraPDF, click the hamburger menu in the top left > Settings > click "Options"
  3. Click "Make SumatraPDF the default PDF viewer" and exit
  4. In JPEGView, click "Cancel" and right-click the black space > Settings/Admin > click "Set as the default viewer", click "OK", and exit
  5. Hit "Win + S" on your keyboard to search for "MPC-BE x64", right-click and "Run as administrator"
  6. Click View > click "Options", then under "Player" > "Formats", click "All" and exit
  7. Hit "Win + S" on your keyboard to search for "7-Zip File Manager", right-click and "Run as administrator"
  8. Tools > System > Associate 7-Zip with: > click the "+" above "All users", then manually select each file type and set it to 7z
  9. Click "OK" and exit

Optimising Telemetry, Services & Performance (Optional But Recommended)

Disabling UAC
  1. Hit "Win + S" on your keyboard to open Search
  2. Type "UAC" and click "Change User Account Control settings"
  3. Slide the blue slider to "Never notify" and click "OK"
  4. Click "Yes"
privacy.sexy
  1. Hit "Win + S" on your keyboard, type "Windows Security", and open it
  2. Click "Virus & threat protection", then "Manage settings", then turn the "Real-time protection" toggle off
  3. Close Windows Security
  4. In the "scripts" folder, right-click "privacy-script.bat", then click "Run as administrator"
  5. Restart once the script is complete
Win11Debloat
  1. Hit "Win + S" and type "PowerShell", then click to open
  2. Copy and paste & ([scriptblock]::Create((irm "https://debloat.raphi.re/"))) and press any key to continue
  3. Click "Custom Setup", then click the hamburger menu in the top right > "Import config" and select "Win11Debloat-Config-20261101.json" from the "configs" folder
  4. Click "Import Settings", "OK", then "Apply Changes" and click "Close" when complete
winutil
  1. Hit "Win + S" and type "PowerShell", then click to open
  2. Copy and paste irm https://christitus.com/win | iex and press Enter
  3. Click "Tweaks" and disable the following preferences:
  4. Click the cog in the top right and click "Import"
  5. Select "winutilconfig.json" from the "configs" folder, then click "Run Tweaks"
  6. Click "O&O ShutUp10++ - Run"
  7. Click "File" > "Import settings..." > select "ooshutup10.cfg" from the "configs" folder > click "OK"
  8. Click "Exit" > "No, thanks" > "Close"
  9. Exit all applications
PrivaZer
  1. Open "PrivaZer" from the "tools" folder
  2. Click "Cancel"
  3. Click "Advanced Options"
  4. Click the "Memory" tab
  5. Click "Stop" and "Disable" under "Wsearch Indexing"
  6. Exit
CCleaner
  1. Open "CCleaner64" from the "tools" folder
  2. Click "Tools", then "Startup"
  3. Click "Scheduled Tasks", then "CCleanerCrashReporting", then "Delete", then "OK"
  4. Click "MicrosoftEdgeUpdateTaskMachineCore", then "Delete"
  5. Click "MicrosoftEdgeUpdateTaskMachineUA", then "Delete"
  6. Click "Windows Services", then check "Advanced Mode"
  7. Attempt to disable all except the following:
  8. Exit
Control Panel
  1. Hit "Win + S" on your keyboard to open Search
  2. Type "Control Panel" and click "Control Panel"
  3. Click Programs > "Turn Windows Features on or off"
  4. Uncheck the following, then click "OK":
System Configuration
  1. Hit "Win + S" on your keyboard to open Search
  2. Type "msconfig" and click "System Configuration"
  3. Boot > check "No GUI boot" > click "OK" > click "Exit without restart"
InSpectre (on Intel Systems Only)
  1. Right-click "InSpectre" from the "tools" folder and click "Run as administrator"
  2. Click "Disable Meltdown Protection" and "Disable Spectre Protection"
  3. Exit
Downfall (on Intel Systems Only)
  1. Right-click the Start Menu and click "Command Prompt (Administrator)"
  2. Copy and paste the following: "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management" /v FeatureSettingsOverride /t REG_DWORD /d 33554432 /f, then hit the Enter key
  3. Click through any prompts to modify the registry and exit

Related Guides

Cleaning-up Windows