¶ Win 11
¶ Clean install
During install remove internet connectivity to ensure the ability to setup with only a local account.
To minimise crapware during instal selecting a Time and currency format such as English (woorld) or English (Europe) will make the post-install setup crash (OOBEREGION) but you can then continue with ignore(More details).
You can change the setting later on without issues.
¶ Win LTSC 
Microsoft discourages the use of LTSC editions outside of "special-purpose devices" that perform a fixed function and thus do not require new user experience features. As a result, these editions do not come with Microsoft Store, most Cortana features, and most bundled apps.
Sounds good 
Sadly can't dl directly need to be hosted :
- https://archive.org/details/en-us_windows_10_enterprise_ltsc_2021_x64_dvd_d289cf96_202112
- https://massgrave.dev/windows_ltsc_links
Can use another source: adguard to check the dl, ex en_us.
For activation if pro key is refused: https://github.com/massgravel/Microsoft-Activation-Scripts
¶ Monitoring
- Most precise ? https://www.hwinfo.com/
- Open Source : https://openhardwaremonitor.org/
¶ Security
Windows Firewall + Defender is usually enough no need for more.
If you want additionnal protection best way is probably to add fine grained application filtering (Ex: SimpleWall).
¶ Repair
In a cmd running as admin [1].
¶ CHKDSK
Check disk and file system.
To scan and fix issues :
chkdsk /f c:
To scan for bad sectors :
chkdsk /r c:
¶ SFC
SFC scans and repairs Windows system files.
sfc /scannow
If it finish with
found corrupt files but was unable to fix some of them.
Try running the tool again in Safe Mode. Otherwise time for DISM.
¶ DISM
Deployment Image Servicing and Management detects and fixes corrupt files in the component store of the Windows system image, so that SFC can work properly.
To save you the time and risk of performing repairs unnecessarily, you can first check if the image is corrupted without making any changes.
Dism /Online /Cleanup-Image /CheckHealth
The scan should only take a few seconds. If no corruption is detected, you can run a more advanced scan to determine if the component store is healthy and repairable, again without making any changes, by typing:
Dism /Online /Cleanup-Image /ScanHealth
If DISM reports that there are problems with the system image, run another advanced scan to repair these issues automatically. DISM will connect to Windows Update to download and replace damaged files as required. Note that the process may take up to 10 minutes and hang for a while at 20 seconds, but this is normal. Type this command:
Dism /Online /Cleanup-Image /RestoreHealth
Once the scan and repairs are complete, restart your PC and run SFC again to replace your corrupt or missing system files.
¶ In-Place Upgrade
Probably your last chance, will reinstall Windows in place (will lose some app configuration, Ex: lost BG3 config but not saves, had to login again in different apps).
Download the media creation tool :
Launch the tool and select upgrade this pc now.