From 9380682edeab774e49292202c9c2de21f6941fde Mon Sep 17 00:00:00 2001 From: Johan Date: Tue, 1 Jul 2025 08:56:23 +0200 Subject: [PATCH] Windows-Tweaks: Disabling Network Level Authentication (NLA) --- Windows/PostInstall/Windows-Tweaks.bat | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/Windows/PostInstall/Windows-Tweaks.bat b/Windows/PostInstall/Windows-Tweaks.bat index 31020a7..9e20eb1 100644 --- a/Windows/PostInstall/Windows-Tweaks.bat +++ b/Windows/PostInstall/Windows-Tweaks.bat @@ -43,10 +43,15 @@ REG ADD HKEY_CLASSES_ROOT\Directory\background\shell\cmd /v "Extended" /d "" /F REG ADD HKEY_CLASSES_ROOT\Directory\shell\Powershell /v "Extended" /d "" /F >nul 2>&1 REG ADD HKEY_CLASSES_ROOT\Directory\background\shell\Powershell /v "Extended" /d "" /F >nul 2>&1 +echo Disabling Network Level Authentication (NLA) (requires restart) +reg add "HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp" /v UserAuthentication /t REG_DWORD /d 0 /f +@rem sc stop TermService && sc start TermService echo Enabling numlock during login screen reg add "HKEY_USERS\.DEFAULT\Control Panel\Keyboard" /v InitialKeyboardIndicators /t REG_SZ /d 2 /f echo Enabling numlock when logged in reg add "HKEY_CURRENT_USER\Control Panel\Keyboard" /v InitialKeyboardIndicators /t REG_SZ /d 2 /f +echo Allow Windows 11 update on unsupported hardware +REG ADD HKEY_LOCAL_MACHINE\SYSTEM\Setup\MoSetup /v AllowUpgradesWithUnsupportedTPMOrCPU /t REG_DWORD /d 1 /F >nul 2>&1 echo Disabling password complexity. @rem secedit /export /cfg "%cd%\secconfig.cfg"