Microsoft indicate Hardware and CPU requirements related to Windows 10 (EOL & EOS) and Windows 11.
Here it is full article
https://learn.microsoft.com/en-us/windows-hardware/design/minimum/windows-processor-requirements
[other articles ]
https://www.devadmin.it/2026/02/14/processori-supportati-in-windows-11/
|
DNS over https (DoH) is a protocol that permit to encrypt DNS queries and sending them over Https.
This protocol has been developed to override security concerns of DNS traffic.
Windows has supported DoH on the client side since Windows 11. While Windows 10 includes the underlying client support in later builds
The encryption operates at the Application Layer (Layer 7) of the OSI model and integrates directly into applications such as web browsers. This approach differs from traditional DNS, which transmits queries over UDP or TCP on port 53 without encryption, leaving them visible to ISPs, network operators, and potential attackers.
be aware about DNS over HTTPS (DoH) (better privacy) (operate at 443 port more difficult to be detected vs DNS over TLS ( DoT) ( operates at the Transport Layer, using a dedicated port 853 and it is easily to be identified.
DoH verifies DNS server's identity and prevents impersonation attacks. The other advantage is DNS queries and not interceptable.
Microsoft introduced DoH resolver support for Windows DNS Server in the February 10, 2026, cumulative update for Windows Server 2025.
When you enable DoH resolver functionality on a Windows DNS Server, all queries received from clients and responses sent on port 443 are encrypted. However, this implementation has a significant limitation: queries sent by the Windows DNS Server to upstream DNS servers, such as conditional forwarders or authoritative servers, remain unencrypted on port 53.
The traditional DNS service on port 53 continues to operate alongside DoH, ensuring backward compatibility with clients that do not support the encrypted protocol.
So, on Windows 2025 you must install this cumulative update, and doH can be enabled through powershell
I would suggest to read fullo/original article about more interesting and useful details.
[Original/other articles
Enable DoH (DNS over HTTPS) in Windows Server 2025 DNS server, configure Windows 11 DNS clients
If you need to reset Edge settings profile (you will lose only stored password, bookmarks can be easily reimported, plugin/extentions could be re-downloaded) you need to go to this path and rename following folder
C:\Users\%username%\AppData\Local\Microsoft\Edge\User Data\
https://angolodiwindows.com/2022/04/come-resettare-microsoft-edge/
Windows 11 has a built in feature (Windows Live Captions) that provides real-time audio trasnscription.
This way, everything heard by the device can be read out in real time, increasing accessibility for people with hearing problems or those wishing to improve their audio comprehension.
Consider that there are no privacy concerns due to fact that translation occur locally and it work offline as well.
Additionally, real-time subtitles aren't limited to specific apps; they work seamlessly with any audio source on Windows 11.
Windows 11 24H2 or newer are necessary to have full features working properly. There are Drivers and CPU requirements that should be considered.
Live captions can provide automatic transcription of audio to text on the screen. To turn on live captions, do one of the following:
+ Ctrl + L.[original articles]
https://www.microsoft.com/en-us/windows/tips/live-captions
https://www.microsoft.com/it-it/windows/tips/live-captions
https://it.windowsnoticias.com/Come-attivare-i-sottotitoli-in-tempo-reale-in-Windows-11/
To disable control panel and settings access to normal users on Windows 11 you can follow this article instructions:
https://thegeekpage.com/disable-control-panel-and-settings/
A simple utility that can be used to simulate user activity.
Maybe you work from home and want to keep your remote session alive whilst you're away from your machine? Maybe you have a long running process that you want your machine to stay awake for? Move Mouse can be deployed in whole host of situations to assist you.
Actions can range from a simple mouse move or click every few seconds, to PowerShell scripts, schedules and blackout windows that allow you to build a highly customisable experience.
https://apps.microsoft.com/detail/9NQ4QL59XLBF?hl=neutral&gl=IT&ocid=pdpshare
[update 2025.11.18]
Hardware device that permit to achieve the same result
https://www.amazon.it/dp/B09NVH8HVN/?coliid=I3QVLHGNNYMQID&colid=2GODWYADTIZHK&th=1
Gallery is a Windows 11 aggregator photo feature.
If you like to remove it, due to privacy concerns, there are several methods, like register keys, powershell, gpo etc etc.
Here it is a way. --> start --> regedit with administrative rights
HKEY_LOCAL_MACHINE
SOFTWARE
Microsoft
Windows
CurrentVersion
Explorer
Desktop
Namespace
select key {e88865ea-0e1c-4e20-9aa6-edcd0212c87c} and remove it
[original articles]
https://www.claudiomasci.com/come-rimuovere-galleria-da-windows-11/
https://www.ninjaone.com/it/blog/aggiungere-o-rimuovere-la-galleria-da-esplora-file-in-windows-11/
UAC is a windows feature implented for security reasons.
In any case it could be bypassed to this reasons on Windows 11 you should enable Administrator Protection
More details can be found here:
https://4sysops.com/archives/enable-administrator-protection-in-windows-11/
Storage Sense is a Windows feature that helps automatically free up disk space by deleting unnecessary files—like temporary files, items in the recycle bin, and offline content from OneDrive. For IT administrators, especially those managing large device fleets, configuring Storage Sense is a low-effort, high-impact way to ensure devices remain performant and up to date. When left unmanaged, low disk space can prevent critical updates from installing, degrade system performance, and lead to user frustration. When configuring Storage Sense through policy settings, IT admins can automate storage maintenance and reduce support overhead.
https://learn.microsoft.com/en-us/windows/configuration/storage/storage-sense?tabs=intune
ViVeTool is an open source tool for Windows 10/11 that permits you to enable hidden or experimental Windows features
Related articles:
https://4sysops.com/archives/vivetool-enable-hidden-windows-features/
Microsoft released, several months ago this important bulletin.
The key point is that, after February 2025 patch installation Windows domain controller certificate-based authentication will change (due to security reasons) to Full Enforcement mode. However, you can move back to Compatibility mode until September 2025.
There are several CA checks to be done to be sure that no problem will affect your organization.
One compatibility doubt that it might arise it could be related to organization that have no longer supported O.S. (like 2008 or older)
I think that working in compatibility mode might help to check, on internet, after February 2025 if any customer had some issues and find relative fixes/workarounds
In any case here they are essential checks that you should consider before enable “full enforcement mode”:
KB5014754: Certificate-based authentication changes on Windows domain controllers
https://admin.microsoft.com/AdminPortal/home?#/MessageCenter/:/messages/MC894351
This article explain on how to disable windows update on Windows 10/11 client devices.
https://www.thewindowsclub.com/windows-10-update-enables-even-turning-off
here they are actions that you need to know:
a) Disable Windows Update using Windows Services
b) Change the Log on account for Windows Update Service (logon as .\guest user with blank password)
c) Turn Off Windows Update using Group Policy --> gpedit.msc --> Go to Computer Configuration > Administrative Templates > Windows Components > Windows Update > Manage end user experience. --> Configure Automatic Updates setting. --> Disable
d) Disable Windows Update Medic Service (consider that this service [or WaaSMedicSVC using Windows Update Blocker.]) is a service introduecd to repair Windows components.
If you need to activate your windows Client or Server you could use below commands.
slmgr.vbs /upk
slmgr.vbs /cpky
slmgr.vbs /ipk *********** (you must indicate Key)
slmgr.vbs /ato
[other articles]
Slmgr.vbs options for obtaining volume activation information
How to Use Slmgr to Change, Remove, or Extend Your Windows License
Here it is article that explain on how to limit badnwidth used for Windows updates background and foreground downloading.
https://www.thewindowsclub.com/limit-windows-update-bandwidth-windows-10#
In case you have necessity to view stored wifi passwords this is command that is necessary to be executed. (with administrative rights)
for /f "skip=9 tokens=1,2 delims=:" %i in ('netsh wlan show profiles') do @echo %j | findstr -i -v echo | netsh wlan show profiles %j key=clear
I am taking note, on blog, about an interesting article that explain several ways used to limit bandwitch usage during file transfer.
From my side, GPO, related to QoS was decisevely useful.
https://woshub.com/limit-network-file-transfer-speed-windows/
During these latter weeks Sophos released new AV version. (Core Agent 2023.1/Server Core Agent 2023.1 )
PROBLEM
AFFECTED SYSTEMS
AND DEVICES
APPENDIX
In addition to
having the required Windows Security Updates to verify modules signed by Azure
Code Signing, devices must have the "Microsoft Identity Verification Root
Certificate Authority 2020" certificate authority (CA) installed.
Generally impacted O.S. are Windows 10/11 and Windows 2016/2019/2021 server versions.
Legacy O.S. are
not impacted:
Windows 8.1
New Installation
From the 18th of
April 2023, new installations to operating systems that don't support Azure
Code Signing (ACS) will fail.
Here they are shortcuts lists (that, IMO, are quite useful) (yellow highlighted commands that I did not know or I found particularly useful)
Tips - Win 10 e virtual desktops
[original articles]
https://www.windowscentral.com/best-windows-10-keyboard-shortcuts
https://www.lifewire.com/best-windows-10-keyboard-shortcuts-4177070
Microsoft releases below link where system requirements are verbosely indicated:
https://www.microsoft.com/en-us/windows/windows-11-specifications?r=1