Never do a bare metal install of Windows 11 (24h2 warning)

Forums › Microsoft Windows › Never do a bare metal install of Windows 11 (24h2 warning)

1 | 2 | 3

kingdragonfly

12007 posts

Uber Geek
+1 received by user: 12926

Subscriber

#3445732 19-Dec-2025 16:57

gzt: Apparently Microsoft is turning on p2p delivery optimization by default + it has a memory leak. Representative article

It may be a good idea to keep "on" in an Enterprise, running lots of light-weight clients. Maybe if your a development house, with a good number of powerhouse PC's that needs lots of RAM I'd be tempted on disabling. It can be disable/forced on through a GPO.

I generally disable this at home, because I have tons of bandwidth, and high speed network. Since I game heavily, I try to keep a minimal surface area, and a lean machines.

Press Windows + I to open Settings.
Go to Windows Update.
Click Advanced options.
Choose Delivery Optimization.
Turn Off the toggle Allow downloads from other PCs.

Also explicit registry entry
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DoSvc
4 = Disabled
2 = Automatic

MadEngineer

4597 posts

Uber Geek
+1 received by user: 2576

Trusted

#3445738 19-Dec-2025 17:34

Slightly related, how to rename a pc and then domain join it without oobe\bypassnro and Entra.

You're not on Atlantis anymore, Duncan Idaho.

kingdragonfly

12007 posts

Uber Geek
+1 received by user: 12926

Subscriber

#3445751 19-Dec-2025 19:33

MadEngineer:
Slightly related, how to rename a pc and then domain join it without oobe\bypassnro and Entra.

So I guess you're not

using Home (cannot join a domain).
not in the OOBE / clean install stage

Entra is not required for domain join.

Powershell, run as admin
Rename-Computer -NewName PCNAME -Restart

Restart

Powershell, run as admin
Add-Computer -DomainName corp.example.com -Restart

Why Microsoft pushes Entra pver traditional AD. I mean the really want you to use Entra, and pushes it as the default.

Tradational AD is a one-time Windows Server license purchase, while Entra is a monthly per-user licensing.

Entra does have some advantages: AD is in maintenance mode, Entra scales endlessly, deep integration with Microsoft cloud.

But it does have some cons also: MFA everywhere is difficult. DIfficult for SQL, Kerberos, legacy apps, regulated environments.

A regulated environment is one where governments, industry bodies, or auditors define mandatory rules for data handling, security, identity, and change control.

If your attempting to use a cloned server, do a search for fixing Service Account / SPN Issues on Cloned Servers, SetSPN.

Hope that helps.

lxsw20

3704 posts

Uber Geek
+1 received by user: 2185

Subscriber

#3445756 19-Dec-2025 19:39

Are you just copying stuff out of AI? Because that is how its written.

MFA everywhere is a pro if anything and with correctly setup CA policies can be seamless.

AD is not a once only purchase, On Prem server has a shelf life, along with the required CALs.

kingdragonfly

12007 posts

Uber Geek
+1 received by user: 12926

Subscriber

#3445767 19-Dec-2025 21:01

The keyboard warrior again, attacking the tall poppy.

Did you notice I had several gramatical mistakes in my post "your" instead of "you're". Is that something AI does?

I'm writing like I know what I'm doing. I've been using AD, since 2000. I was actually certified in Windows 2000 and AD decades ago. I manage now Azure and AWS as domain admins now.

I worked in many environments that required formal auditing by outside agency, and always passed them. That include yearly visits from Microsoft about licensing (never fun)

MFA everywhere” is not universally viable

Many legacy apps, service accounts, SQL, LDAP binds, SMB, Kerberos flows do not support modern MFA.

If you had ever worked in a government agency, you'd know regulated environments often require non-interactive authentication, where MFA is impossible by design.

CA does not protect: On-prem Kerberos, LDAP, NTLM, SQL service-to-service auth.

Saying “MFA everywhere” ignores that large parts of Windows auth cannot use CA at all.

If Entra is unavailable, MFA fails, logons fail, admin recovery becomes complex.

On-prem AD continues to function offline.

Regarding it's not free, your biggest omission is you buy once per user/device, it's valid for the server version, there's no monthly or annual renewal required, can be used for many years.

As mentioned, Entra has its place, but it is a monthly subscription.

lxsw20

3704 posts

Uber Geek
+1 received by user: 2185

Subscriber

#3445806 19-Dec-2025 23:57

Call me what you like.

I think you're trying to pass off a lot of quite strange information and ideas as fact, when there seems to be more an element of opinion. Microsoft's modern workplace is cloud/entra based, like the borg, resistance is futile. Pick another system if you don't like it.

Geekzone support

Support Geekzone with one-off or recurring donations Donate via PressPatron.

kingdragonfly

12007 posts

Uber Geek
+1 received by user: 12926

Subscriber

#3445820 20-Dec-2025 07:29

You could have stepped in to help MadEngineer when he asked for help, showcasing your skills, instead of sniping at me.

Frankly I'm only posting here so others can find info not posted publicly from Microsoft.

It's well-known I hate AI. I'm glad I'm old enough that I lived without it for the vast majority of career. I really pity anyone getting their career started, and particurally the poor artists who already had it rough.

When I use AI for an anwer, you'll see ChatGPT says. Frankly it's a useful tool.

My thoughts about Microsoft are similar to an senior German ICE car mechanic.

They are going to tell you of the nightmare about new German engines. If they say the latest German performance engines are reliable and easy for a home mechanic to maintain after the warranty period expires, they are not an expert.

When I retire, the first thing I'm going to do is dump Microsoft Windows and Office.

MadEngineer

4597 posts

Uber Geek
+1 received by user: 2576

Trusted

#3446000 20-Dec-2025 11:59

kingdragonfly:
MadEngineer:

Slightly related, how to rename a pc and then domain join it without oobe\bypassnro and Entra.

So I guess you're not

using Home (cannot join a domain).
not in the OOBE / clean install stage

Entra is not required for domain join.

Powershell, run as admin

But to run powershell requires that you have signed into the laptop, which requires my steps above, at which point you may as well hit win-x-y and click domain... I'm talking literal OOBE

Instead of entra joining it (signing in as an admin with your admin ms account), you must bypass the oobe before you can rename the machine

You're not on Atlantis anymore, Duncan Idaho.

lxsw20

3704 posts

Uber Geek
+1 received by user: 2185

Subscriber

#3446004 20-Dec-2025 12:55

Shift + F10 will get you into cmd/ps in oobe

if they are entra joined you can automate the naming in autopilot or just rename them in entra which will push to the device.

MadEngineer

4597 posts

Uber Geek
+1 received by user: 2576

Trusted

#3446005 20-Dec-2025 13:07

^ that's what im saying, you need to run that

MadEngineer:

Slightly related, how to rename a pc and then domain join it without oobe\bypassnro and Entra.

You're not on Atlantis anymore, Duncan Idaho.

1 | 2 | 3