NTLite presets for Hyper-V on Windows 11

[Sumit Bhatia]

Hello Members,

I am looking if there are any presets or template available that I can leverage for reducing attack vector for Win 11 Enterprise.

I just want my Win 11 to run some Hyper-V VM's and Containers.

So I am looking for presets or templates that helps me

1. Reducing the ISO size
2. Minimizing the attack vector for Win 11
3. Security hardening of the deployment as per MS best practices.

Please if there is any guide that is available, if anyone can help point me to that.

Regards

 

[garlin]

There are a few default Templates for component removals, but Enterprise tends to be more lean. Which is why some gamers try to use LTSC.

NTLite isn't helpful for security hardening, because it's not designed to have a comprehensive set of Windows settings. You should follow best practices and use the MS Security Compliance Toolkit to create a set of GPO's, and embed them into your image.

Security Baselines Download Configuration Guide

You can use LGPO to import a set of exported policy files as a Post-Setup (Before logon) action, before running "gpupdate /force".