# Vsrail Win11

> End-to-end guide for installing, configuring, and cloning Windows 11 on the VSRail/Incus platform. Includes TPM bypass, driver loading, RDP setup, and Sysprep procedures.

- Skill: `bojak83318/vsrail-win11` (Agent Skill)
- Install (CLI): `npx skillmds@latest add bojak83318/vsrail-win11`
- Raw SKILL.md: https://api.skillmd.com/api/skills/bojak83318/vsrail-win11/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Coding & Dev Tools
- Author: bojak83318 (https://skillmd.com/u/bojak83318)
- Updated: 2026-09-22
- Page: https://skillmd.com/skills/bojak83318/vsrail-win11

---


# Windows 11 VSRail End-to-End Guide

This skill documents the precise procedure for deploying and managing Windows 11 on Incus.

## 1. Initial VM Configuration
The VM must be configured with specific hardware limits and devices to ensure performance and compatibility.

- **CPU:** 6 Cores (`limits.cpu: "6"`)
- **RAM:** 12 GB (`limits.memory: 12GB`)
- **Root Disk:** NVMe bus (`io.bus: nvme`, size >= 64GB)
- **Video:** VNC display enabled on unique port (e.g., `:1` for 5901).
- **ISO Attachments:**
    - Windows 11 Installer (DVD-ROM)
    - VirtIO Driver ISO (IDE CD-ROM for stability)

## 2. Installation & Requirement Bypass
During the first screen of the Windows 11 installer:
1. Press **Shift + F10** to open the command prompt.
2. Run these 5 registry bypass commands:
   ```cmd
   reg add HKLM\SYSTEM\Setup\LabConfig /v BypassTPMCheck /t REG_DWORD /d 1 /f
   reg add HKLM\SYSTEM\Setup\LabConfig /v BypassSecureBootCheck /t REG_DWORD /d 1 /f
   reg add HKLM\SYSTEM\Setup\LabConfig /v BypassRAMCheck /t REG_DWORD /d 1 /f
   reg add HKLM\SYSTEM\Setup\LabConfig /v BypassCPUCheck /t REG_DWORD /d 1 /f
   reg add HKLM\SYSTEM\Setup\LabConfig /v BypassStorageCheck /t REG_DWORD /d 1 /f
   ```
3. Load the VirtIO SCSI driver (replace `D:` with your VirtIO drive letter):
   ```cmd
   drvload D:\vioscsi\w11\amd64\vioscsi.inf
   ```
4. Prepare the disk using `diskpart`:
   ```cmd
   diskpart
   select disk 0
   clean
   convert gpt
   exit
   ```
5. Click **Refresh** in the GUI, select the 80GB disk, and proceed.

## 3. Post-Install Configuration (RDP & Identity)
Once at the desktop, open an **Administrator PowerShell** window:

### 3.1 Enable RDP & Firewall
```powershell
# Enable RDP
set-itemproperty -path 'hklm:\system\currentcontrolset\control\terminal server' -name 'fdenytsconnections' -value 0
# Open Firewall
enable-netfirewallrule -displaygroup 'remote desktop'
# Disable NLA for client compatibility
set-itemproperty -path 'hklm:\system\currentcontrolset\control\terminal server\winstations\rdp-tcp' -name 'userauthentication' -value 0
```

### 3.2 Create User & Permissions
```powershell
net user vsrail Password123! /add
net localgroup administrators vsrail /add
net localgroup "remote desktop users" vsrail /add
```

## 4. Cloning & Generalization
Before cloning a VM, you must ensure it receives a unique identity on the network.

### 4.1 The Sysprep Method (Preferred)
Run this inside the source VM to "Generalize" it:
```cmd
c:\windows\system32\sysprep\sysprep.exe /generalize /oobe /shutdown /mode:vm
```
*Note: If Sysprep fails, remove third-party antivirus and run `Get-AppxPackage | Remove-AppxPackage`.*

### 4.2 The Incus Copy Method (Manual)
If Sysprep fails, you can clone manually and fix the identity:
1. **Clone in Incus:** `incus copy source clone` (Generates a new MAC).
2. **Change Name:** `powershell rename-computer -newname vsrail-clone -force`
3. **Reboot:** `shutdown /r /t 0`

## 5. Chromebook Tunneling
To access the VM via RDP from a Chromebook:
1. Open Chromebook terminal.
2. Run: `ssh -L 3389:<VM_IP>:3389 rocm@100.65.27.72`
3. Connect RDP client to `127.0.0.1:3389`.