@Akeo Is it still a requirement to disable Secure Boot during the installation for an ISO created with Rufus if the ISO is bigger than 4GB?
No. That requirement was done with years ago... On some platforms, you may have to make sure that your Secure Boot is set to work for both Microsoft and Third party, since Microsoft decided to create a 2-tier Secure Boot system, arguing that, because they are Microsoft, their own Secure Boot bootloaders should be considered more secure than third party ones, and therefore that OEMs should provide means to restrict Secure Boot to only the Microsoft tier... before being caught with their pants down with BlackLotus, which forced them to revoke ALL the signed UEFI bootloaders they published before 2023 because they could be exploited to install UEFI rootkits. So yeah, so much for Microsoft bootloaders being "more secure" than third party ones... But then again, making sure 3rd party is enabled, which proper OEM platforms should have by default, is the same requirement you have to boot Linux in a Secure Boot environment, so it's not something specific to Rufus. So, you can definitely boot a media created by Rufus without having to disable Secure Boot, and it has been the case for quite a few years now.
"Add a Quality of Life option, to disable Teams, Outlook, Copilot and other Microsoft forced nuisances" Do you have a comprehensive list of what gets disabled? So I don't have to go looking to disable something after install that Rufus already took care of.
I'm annoyed by it too, so I might indeed look into it. Do you happen to know the unattend way of doing so globally (coz I sure don't want to have to do it disk by disk)? If not, I'll figure it out.
Sorry, I don't have a clue. I could search the internet, but I'm sure your searching will be a thousand times better than mine. Just did a clean install of 26200.8328 on my 2017 vintage laptop. Everything went perfectly, even the local account. Thank you so much. EDIT: Btw., I did not use the unattended install feature as I needed to clean the drives using diskpart before installing.
Trust Microsoft to take a useful idea and eff it up. The ideal implementation would be to have search indexing enabled by default ONLY for the documents, pictures, videos, music and downloads folders. Let the user add more folders if he chooses. Instead, search indexing is turned on for EVERYTHING, which I suspect is the leading cause of being unable to eject a USB connected external drive - I had copied a large amount of data to my 2TB external SSD and it could not be safely removed. Nothing I tried worked. Finally I had to shut down the laptop and then remove the drive, something I was reluctant to do in case the malware I had removed was hiding in a hidden partition and would come back after I restarted. Turning off indexing in drive properties takes forever, besides throwing up an access denied if you try to do it on the C drive. Any way to have it turned off by default during Windows setup?
So where are the keys that will be installed? In the Mosby download, or the UEFI Shell downloaded by Rufus, or do I have to download them separately from another source, say, Microsoft?