Update root certificates
certutil.exe -generateSSTFromWU C:\PS\roots.sst $sstStore = ( Get-ChildItem -Path C:\ps\rootsupd\roots.sst )$sstStore | Import-Certificate -CertStoreLocation Cert:\LocalMachine\Root link: https://woshub.com/updating-trusted-root-certificates-in-windows-10/#h2_1
WinSxS cleanup
Clean up: Dism.exe /online /cleanup-image /AnalyzeComponentStore Dism.exe /online /cleanup-image /StartComponentCleanup Health check and restore (if the commands above show errors): sfc /scannow Dism /Online /Cleanup-image /Scanhealth Dism /Online /Cleanup-Image /RestoreHealth
SSH-COPY-ID for Windows
type $env:USERPROFILE\.ssh\id_rsa.pub | ssh {IP-ADDRESS-OR-FQDN} “cat >> .ssh/authorized_keys”
RDP + RDG + MFA + More time to login
DWORD registry key at HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp called “LogonTimeout” and setting the decimal value to the number of seconds needed such as 60.