diff --git a/Windows/PostInstall/Windows-Tweaks.bat b/Windows/PostInstall/Windows-Tweaks.bat
index 31020a7..9e20eb1 100644
--- a/Windows/PostInstall/Windows-Tweaks.bat
+++ b/Windows/PostInstall/Windows-Tweaks.bat
@@ -43,10 +43,15 @@ REG ADD HKEY_CLASSES_ROOT\Directory\background\shell\cmd /v "Extended" /d "" /F
 REG ADD HKEY_CLASSES_ROOT\Directory\shell\Powershell /v "Extended" /d "" /F >nul 2>&1
 REG ADD HKEY_CLASSES_ROOT\Directory\background\shell\Powershell /v "Extended" /d "" /F >nul 2>&1
 
+echo Disabling Network Level Authentication (NLA) (requires restart)
+reg add "HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp" /v UserAuthentication /t REG_DWORD /d 0 /f
+@rem sc stop TermService && sc start TermService
 echo Enabling numlock during login screen
 reg add "HKEY_USERS\.DEFAULT\Control Panel\Keyboard" /v InitialKeyboardIndicators /t REG_SZ /d 2 /f
 echo Enabling numlock when logged in
 reg add "HKEY_CURRENT_USER\Control Panel\Keyboard" /v InitialKeyboardIndicators /t REG_SZ /d 2 /f
+echo Allow Windows 11 update on unsupported hardware
+REG ADD HKEY_LOCAL_MACHINE\SYSTEM\Setup\MoSetup /v AllowUpgradesWithUnsupportedTPMOrCPU /t REG_DWORD /d 1 /F >nul 2>&1
 
 echo Disabling password complexity.
 @rem secedit /export /cfg "%cd%\secconfig.cfg"