Vsrail Win11

Windows 11 VSRail End-to-End Guide

This skill documents the precise procedure for deploying and managing Windows 11 on Incus.

1. Initial VM Configuration

The VM must be configured with specific hardware limits and devices to ensure performance and compatibility.

• CPU: 6 Cores (limits.cpu: "6")
• RAM: 12 GB (limits.memory: 12GB)
• Root Disk: NVMe bus (io.bus: nvme, size >= 64GB)
• Video: VNC display enabled on unique port (e.g., :1 for 5901).
• ISO Attachments:
  • Windows 11 Installer (DVD-ROM)
  • VirtIO Driver ISO (IDE CD-ROM for stability)

2. Installation & Requirement Bypass

During the first screen of the Windows 11 installer:

1. Press Shift + F10 to open the command prompt.
2. Run these 5 registry bypass commands:

   reg add HKLM\SYSTEM\Setup\LabConfig /v BypassTPMCheck /t REG_DWORD /d 1 /f
   reg add HKLM\SYSTEM\Setup\LabConfig /v BypassSecureBootCheck /t REG_DWORD /d 1 /f
   reg add HKLM\SYSTEM\Setup\LabConfig /v BypassRAMCheck /t REG_DWORD /d 1 /f
   reg add HKLM\SYSTEM\Setup\LabConfig /v BypassCPUCheck /t REG_DWORD /d 1 /f
   reg add HKLM\SYSTEM\Setup\LabConfig /v BypassStorageCheck /t REG_DWORD /d 1 /f
   

3. Load the VirtIO SCSI driver (replace D: with your VirtIO drive letter):

   drvload D:\vioscsi\w11\amd64\vioscsi.inf
   

4. Prepare the disk using diskpart:

   diskpart
   select disk 0
   clean
   convert gpt
   exit
   

5. Click Refresh in the GUI, select the 80GB disk, and proceed.

3. Post-Install Configuration (RDP & Identity)

Once at the desktop, open an Administrator PowerShell window:

3.1 Enable RDP & Firewall

# Enable RDP
set-itemproperty -path 'hklm:\system\currentcontrolset\control\terminal server' -name 'fdenytsconnections' -value 0
# Open Firewall
enable-netfirewallrule -displaygroup 'remote desktop'
# Disable NLA for client compatibility
set-itemproperty -path 'hklm:\system\currentcontrolset\control\terminal server\winstations\rdp-tcp' -name 'userauthentication' -value 0

3.2 Create User & Permissions

net user vsrail Password123! /add
net localgroup administrators vsrail /add
net localgroup "remote desktop users" vsrail /add

4. Cloning & Generalization

Before cloning a VM, you must ensure it receives a unique identity on the network.

4.1 The Sysprep Method (Preferred)

Run this inside the source VM to "Generalize" it:

c:\windows\system32\sysprep\sysprep.exe /generalize /oobe /shutdown /mode:vm

Note: If Sysprep fails, remove third-party antivirus and run Get-AppxPackage | Remove-AppxPackage.

4.2 The Incus Copy Method (Manual)

If Sysprep fails, you can clone manually and fix the identity:

1. Clone in Incus: incus copy source clone (Generates a new MAC).
2. Change Name: powershell rename-computer -newname vsrail-clone -force
3. Reboot: shutdown /r /t 0

5. Chromebook Tunneling

To access the VM via RDP from a Chromebook:

1. Open Chromebook terminal.
2. Run: ssh -L 3389:<VM_IP>:3389 rocm@100.65.27.72
3. Connect RDP client to 127.0.0.1:3389.