Windows management topics

Win11 Heavy sound stutter, don't know what else to do

Machlath — Sat, 14 Mar 2026 12:29:04 GMT

I've been having this issue for about a week now without any success in solving it.

I updated BIOS, CPU firmware, GPU driver (nvidia 595.79) and realtek audio driver with a file from their website, I also updated my WiFi adapter.

Windows is up-to-date with no optional updates.

I usually have several monitoring/device programms running like MSIAB/RTSS, razer synapse etc while listening to music through spotify and sometimes with discord open which has never been a problem in the last few years.

This is my 5.1 surround sound system, discontinued but still working perfectly fine (you might have to translate the website).

My power plan is set to ultimate performance, nvidia global setting is set to prefer maximum performance, cpu min/max set to 100%, no throttling in BIOS and I even created a power throttling key in RegEdit to disable it.

I will add screenshots from LatencyMon and other stuff that might be useful.

LatMon while under full LOAD with Prime95

LatMon while IDLE

My network connections, I disabled my WiFi adapter days ago, NordLynx, OpenVPN is from NordVPN

My device manager with my audio/sound and network devices, SteelSeries is from my rarely used headset

My sound settings from my digital output, someone on reddit mentioned setting it to 96000 Hz stopped it for him, unfortunately not for me.

Hardware-Level Resilience (RMAU) (Remote Acess Management Update)to mitigate Ring 0 Kernel Outages.

CAB4devs — Mon, 23 Feb 2026 00:27:42 GMT

Proposal: Windows RMAU (Remote Access Update) Resilience Architecture

Author:CAB4devs

Credits:CAB4Devs

Unabbreviated name: RAMU (Remote acess management update)

Project Name: RAMU the best fix for mass malware attacks and Driver failures!

Head of idea: CAB4devs

Professions of author: Unofficial IT Computer science Programming (Non of these are degrees)

1. Executive Summary: The "Global Kill-Switch" Problem

The 2024 global outage proved that when the Windows Kernel (Ring 0) fails, the OS becomes a "brick." Current recovery requires manual, physical intervention (Safe Mode + BitLocker keys), which is impossible to scale for 8.5 million+ devices.

RMAU (Remote Access Update) is a proposed system that allows Microsoft to "tap into" any bricked Windows machine via a secure, hardware-independent "Emergency Hatch." It allows a central Microsoft engineer to perform mass file deletions, registry fixes, or command execution on millions of devices simultaneously, without the local user doing anything.

2. How It Works (The "Zero-OS" Logic)

To work without new physical hardware, RMAU leverages the existing UEFI (Firmware) and Windows Recovery Environment (WinRE).

The "Heartbeat" Trigger: If Windows fails to boot 3 times, the UEFI triggers the "RMAU Pre-Boot Agent."

The "Main Server" Connection: This agent bypasses the broken Windows OS and establishes a tiny, encrypted network tunnel directly to Microsoft’s RMAU Central Command.

Zero User Interaction: The user sees a screen saying "System Recovery in Progress – Managed by Microsoft Support." They do not need to type passwords or BitLocker keys; the hardware "handshakes" with the server using the device's unique TPM (Trusted Platform Module) ID.

3. The Microsoft Employee Experience (The Admin UI)

When an outage happens, a Level 4 Microsoft Engineer logs into the RMAU Master Console.

The Admin UI View:

Global Map: A real-time heatmap showing millions of Blue-Screened devices.

Mass-Action Command Line: A console where the engineer types: TARGET: ALL_BSOD_DEVICES_WITH_DRIVER("C-00000291*.sys") ACTION: DELETE_FILE("C:\Windows\System32\Drivers\C-00000291*.sys") ACTION: REBOOT

Remote Desktop (Individual): For single-user bugs, the employee sees a "Ghost Screen"—a low-latency view of the target PC’s file system and registry, allowing them to type commands as if they were sitting at the desk.

4. Security: The "Nuclear Launch" Protocol

Because this system can "do anything," it must be the most secured system on Earth.

The Physical Cord (Center-Side): To prevent a hacker from "mass-tapping" into computers from home, the RMAU Master Console is Air-Gapped. The only way to send a global command is to physically plug a "Golden Key" (USB-HSM) into the server inside a Microsoft high-security vault.

The Quorum (3-of-5): No one person can fix the world. Five high-ranking officials (CEO, CISO, etc.) must each provide a unique biometric scan (Retina/Fingerprint) and a code from an OOB Android Device to authorize the "Global Delete" command.

ID-Locked: Every keystroke an employee makes is recorded and tied to their biometric ID. If an employee tries to "spy" on a user, the system automatically flags them for federal investigation.

5. Real-World Use Case: 2024 Scenario vs. General Bugs

Scenario A: The 2024 CrowdStrike Event

Without RMAU: IT teams drove to offices for weeks to manually fix PCs.

With RMAU: The Microsoft Engineer identifies the bad file C-00000291*.sys. They send a Mass-Tap Command. Within 60 seconds, all 8.5 million computers receive the "Delete" signal at the hardware level. The PCs reboot, and the world is back online in under 5 minutes.

Scenario B: The "Random Driver" Bug

If a specific brand of laptop (e.g., Dell) starts crashing due to a bad update, the PM can target only those specific Serial Numbers. They can remotely open a CMD Prompt on the bricked device, run sfc /scannow, and repair the system while the user sleeps.

6. Legal & Privacy Compliance

To stay legal, RMAU follows the "Emergency-Only" doctrine:

Consent by Terms: Users agree to "Emergency Remediation" in the EULA.

Strict Limitation: The hardware hatch only opens if the OS is non-functional. It cannot be used to "spy" on a working computer.

Immutable Audit: All logs are made available to government regulators to prove Microsoft only deleted the "Bad File" and didn't touch user data.

7. The "No-Hardware" Update (How to Deploy)

This doesn't need a new PC. It can be sent as a BIOS/Firmware Update.

Code Implementation: Microsoft writes a "RMAU UEFI Extension" and sends it via Windows Update. It installs into the motherboard's firmware.

The "Silent Guard": Once installed, it sits dormant. It never turns on unless it detects a Kernel Panic or a Boot Loop, ensuring zero impact on battery or performance.

Final Verdict for the Forum:

"Microsoft, we need to stop relying on 'Safe Mode.' We need a system that assumes the OS is dead and fixes it from the outside. RMAU is the answer."

(Pronunciation: Ram Moo

0.011W Power Floor on i7-1255U: A Step Toward Microsoft’s Sustainability Vision

vietanh2801 — Thu, 05 Feb 2026 11:47:57 GMT

It is inspiring to see Microsoft leading the tech industry toward a greener future. Initiatives such as the Carbon Negative 2030 goal and the Energy Saver features in Windows 11 are important steps in environmental stewardship. These efforts show that software and hardware can work in harmony to preserve our planet.

As a researcher, I have spent 18 months exploring how to further support this vision by identifying the absolute efficiency “floors” of the Intel Core i7-1255U (Alder Lake). My study focuses on a configuration that enhances Microsoft’s energy-saving protocols to achieve maximum hardware longevity.

Key Technical Findings (18-Month Case Study):

Dynamic Power Floors: Through precise optimization, I observed CPU power draw dropping to a floor of 0.011W at 1.8MHz during deep idle/sleep states, with the GPU reaching a 0W floor.
Efficiency in Motion: During active productivity tasks, the system can reach 0.4W – 0.5W at a voltage range of 0.6V – 0.8V, demonstrating impressive scaling flexibility.
Thermal Performance: The system consistently operates between 25°C – 35°C. In cooler ambient environments (15°C – 25°C), hardware can maintain 16°C – 20°C, virtually eliminating thermal stress.
Battery Endurance: Using a standard 3-cell battery with 5% wear (originally marketed for 6 hours), these optimizations enabled up to 10 hours of continuous video playback.
Uncompromised Stability: Over 18 months of daily usage, the system has encountered zero Blue Screen of Death (BSOD) events. This confirms that pushing efficiency boundaries can be done while maintaining the rock-solid reliability expected of the Windows platform.

This study is a tribute to the versatility of Windows 11 and the engineering behind modern silicon. By maximizing the life of the devices we already own, we contribute directly to reducing global e-waste.

Detailed technical logs (HWiNFO) and configuration data are available for verification here: 👉 [[Intel 12th] 0.011W Package Power Floor via Custom Optimization | Microsoft Community Hub]

I look forward to discussing these efficiency milestones with the community and Microsoft engineers.

[Intel 12th] 0.011W Package Power Floor via Custom Optimization

vietanh2801 — Sun, 01 Feb 2026 03:33:12 GMT

The Challenge

Current Windows 11 power management protocols often fail to reach the theoretical hardware residency limits of modern silicon. My research focuses on bridging this gap through a custom-developed optimization framework that interacts directly with kernel-level registers.

The Breakthrough

Using a proprietary optimization solution I have developed over the past 18 months, I have successfully triggered unprecedented power residency floors on Intel 12th Gen hardware:

Package Power Floor: 0.011W (11mW).

GPU Power: Fully gated at 0W during idle transitions.

Clock Frequency: Observed dips to 1.8MHz during state transitions.

Thermal/Active Range: Sustained 0.4W - 0.5W at 25°C - 35°C under light workloads.

Technical Context

These metrics (0.011W and 1.8MHz) represent peak optimization floors during system fluctuations and state transitions. They demonstrate a significant threshold of hardware residency that is normally bypassed by standard OS power profiles.

Verification and Engineering Review

The methodology involves complex synchronization of MSR and PCIe offsets that I have integrated into a unified optimization environment. To protect the intellectual property of this software-level integration:

Preliminary HWiNFO logs are available for review on Microsoft Q&A: Breaking the Efficiency Barrier: Intel 12th Gen achieving 16°C - 19°C Idle and 0.011W Deep Sleep on Windows 11 - Microsoft Q&A.

The entire optimized environment has been preserved via a verified disk image for formal validation.

I am seeking a technical review with a Senior Power Management Engineer or Kernel Architect to discuss these findings. I am prepared to provide a full demonstration of the software framework and the resulting residency logs under a Non-Disclosure Agreement (NDA).

Sincerely, Viet Anh (email address removed for privacy reasons)

Serious problems in Ring0 kernel-mode modules and security in current versions of Windows

hiccups641 — Tue, 20 Jan 2026 16:19:54 GMT

We all know that in the X86 architecture CPUs have four different levels: Ring0(kernel-level), Ring1, Ring2 and Ring3 (user-level). The users, even administrators can only access Ring3, and Microsoft designed the operating system this way to make the system more safe and stable. On the other hand, Microsoft uses signs and security options like "Memory Integrity" in "Core Isolation" in Windows Defender. Normal applications need to use kernel-mode modules to gain access to the kernel (.sys), and if these modules need to be loaded by the system, it should be signed or it will be blocked by Windows Defender or other antivirus software.

But now I found a really serious problem in Microsoft's signing activities. BEDaisy.sys is the kernel-mode driver of BattlEye, an anti-cheat software, and it is signed by Microsoft. In BattlEye's EULA, it said that "BattlEye can prevent the cheaters from gaming on the servers which are protected by BattlEye. ", and to make it happen, BattlEye needs to create a service and install kernel-mode components. (Please remember that User Account Control window won't pop up if a service or trusted installer tries to install a kernel-mode driver. ) This EULA is really confusing because it makes the users think "BattlEye does this to protect me from being attacked by other cheaters. " and then accept the EULA and install BattlEye. However, after BattlEye is installed, it can't even block a simple attack from the other cheaters. The other cheaters can even force crash your game. On the contrary, BattlEye tries to block the modules from any other applications which it thinks they are suspicious from loading. It can even block the modules of the anti-cheat software, which makes the protections of the system reduce or even put the system at risk.

There is another case. There is a user found his computer attacked by the malware. He was really confused because he had installed the anti-virus software on his system. After looking into his system carefully, he found out that his anti-virus software was down and was killed by mhyprot2.sys, another kernel-mode module of an anti-cheat software. And mhyprotect2.sys is also signed by Microsoft.

Ransomware Actor Abuses Genshin Impact Anti-Cheat Driver to Kill Antivirus _ Trend Micro (US)

The kernel-mode drivers from both of the cases are signed by Microsoft, and as they run in Ring0 kernel-level, the users have nothing to do to stop them. And as they are signed, most of the anti-cheat software will be less sensitive to them and will be much easier to let them run. . Besides, Windows is designed for everyone, not just for game players. Not all the users would like to sacrifice the security of the system just to play the games. . On the other hand, unlike the cyber security companies, the game companies usually care more about the game itself than the entire system. And they are not responsible for any damage caused by the anti-cheat software. The thing that I am most angry with is that Microsoft actually signed these kinds of kernel-mode modules, which means Microsoft allow these kinds of dangerous things to happen.

In my opinion, it is the player's duty to obey the EULA of the games, but it is the game company's duty to do their anti-cheat jobs, and if you want to use the player's device to help you anti-cheat and even want to have Ring0 access, you need to warn the users and notify them. In BattlEye's case, there are three windows will pop up on the screen when you try to install them, but all of them said that BattlEye will minimize its authority and none of them said it needs to gain the authority to shut down other software or block their activities. . . And in total, it is the users who paid for the device and the operating system which they are using, but not the game companies. Taking fully control of the device without noticing the user is illegal.

In the end, I really hope that Microsoft can raise the standard of signing a kernel-mode module. These kinds of issues can happen not only in anti-cheat software, but also in any other software, only the problem occurred this time is the anti-cheat software. To tell you the truth, I think Microsoft can only sign the Ring0 kernel-level drivers of the hardware drivers and the anti-virus software. The other applications can only run in Ring3 user-mode like Android. I know it could be hard to make it happen, so you can add whitelist function for the users don't care too much about security or even let them turn off the security options. You can kill the malware by mistake because if that happens, the user can restore them and whitelist them. But you can't miss a malware, because if that happens, the responsibility is usually the one that you can't take. And if the software in the whitelist damages the system, then it is not you Microsoft's responsibility. And for the game players, you can also add isolated gaming environment like Hyper-V, but especially for games, and any other software can't run in it to prevent cheating.

Thank you.

The January 2026 update has a serious core system bug

sakurayz — Sat, 17 Jan 2026 23:22:22 GMT

After installing the January 2026 update (KB5073724) on Windows 10 LTSC 2021, some programs stop responding, processes cannot be terminated, and the system cannot shut down normally, requiring a forced shutdown.

I remember that in January 2022 there was also a serious core system bug where refs turned into raw.

The monthly updates are really getting worse and worse. Microsoft doesn't need to boost its presence like this, do they?

How to upgrade from Windows 10 to 11 with a clean install of Windows 11?

DAWO — Tue, 09 Dec 2025 10:54:22 GMT

Hi,

I have a Windows 10 PC that has the requirements to be upgraded to Windows 11.

I would like to do a complete clean install of Windows 11 and then reinstall all my software.

If I understand this correctly, I will in this case have my Windows 10 registration key at hand to be able to make a clean Windows 11 installation on the same computer. I do have a registration key for Windows 10, which I think belongs to this computer. Is there any way that I can verify that this registration key actually belongs to this computer?

Or can I do a clean installation of Windows 11 on this computer anyway (without first verifying that the Windows 10 belongs to this computer)?

Windows 10 11 Enterprise Restrict access to MS Store via group policy

LesPhotog1 — Mon, 08 Dec 2025 19:48:33 GMT

Issue presented: Multiple users are downloading and installing Remote Access tools that are deemed not supported as well as other applications in the environment. We want to restrict access to the MS Store to Administrators or a specific AD group without using AppLocker or InTune.

I have seen various threads in multiple sources that are conflicting about disabling the store or setting to the Company Portal for Windows 10/11. If you set the MS Store to Company Portal, in Windows 11 it disables the store.

Turn off the Store application GPO: Denies or allows access to the Store application. If you enable this setting, access to the Store application is denied. Access to the Store is required for installing app updates.

Other threads as well as the gpo verbiage itself indicate that if you disable the store, all installed applications will no longer update. There are some threads that state the opposite. Configure Access To The Microsoft Store App For Windows Devices | Microsoft Learn

Has anyone configured a way to restrict users or a specific group of users from using the MS Store while allowing existing applications the ability to update?

[On demand] AMA: Windows backup and restore

Heather_Poulsen — Wed, 03 Dec 2025 00:01:06 GMT

Now through Friday (12/5) at 12:00 p.m. PST: Get expert tips on backing up Windows 10 settings so you can transition users to Windows 11 seamlessly. Visit https://aka.ms/AMA/BackupRestore to explore Windows Backup for Organizations, now generally available—and to post your questions.

Prune list of

NJDave — Mon, 01 Dec 2025 19:10:06 GMT

I'm a bit of a hobbyist and often advise people on managing systems, so I frequently install and reinstall Windows on multiple systems. When I install a Windows 11 system and log in with my Microsoft account, I'm presented with a LONG list of past Windows installations from which I can import settings. The vast number of these are just trials I'd rather delete. Is there any way I can prune that list? If there's a way to access the list from my account on the Microsoft website, I don't know it.

Backing up to an external hard disk drive.

phillro — Sun, 23 Nov 2025 18:38:05 GMT

Backing up to an external hard disk drive.

Windows backup tells me that my target drive has 379.48GB free space:

It tells me that my back-up this time will occupy 77.21GB.

Yet it tells me that the backup cannot be run because my target disk does not have enough space.

What is going on here? Have I misunderstood the measures of size/capacity?

Does the CDN for Microsoft Windows Update seem to be malfunctioning?

NishizakiHayato — Sat, 15 Nov 2025 00:39:41 GMT

I purchased a code signing certificate, but strangely, Windows did not automatically download the missing root certificate.

When I tried to manually download the root certificate according to the manual, I found that the CDN seemed to return the wrong certificate and I was unable to establish a secure connection with the website. (At least in Chinese Mainland)

https://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/test/authrootstl.cab

Can other regions be accessed normally?

Password reset and recovery fail

geekdano — Tue, 11 Nov 2025 14:12:52 GMT

Hi there, good morning.

First i appreciate any ones assistance here, its been a little frustrating.

My regular windows account, for purchases, family content etc is "email address removed for privacy reasons". I cant sign in to that one any more. it is under 2fa with a code generator (I have that and the code is fine etc), it has a phone number (i have that!), and email account of course.

I tried to enter the password to login to microsoft account - account.microsoft.com - and it gives the error "there have been too many failed login attempts".

So i go through the password reset and works fine and i have a new password. I try again straight away and it fails with the same error.

I try again for password reset... see above..

So i try for account recovery and go through the form - but i get an email saying because i have 2fa this is ignored and done automatically.

However the automatic process does not seem to work - as indicated above.

I tried to find a microsoft chat to have a live session, but it says i need to login... so i have logged in with a secondary account. I cant find the live chat sessions though.

So i am posting here for any help - if i have the wrong forum i apologize - it was confusing to me about where i should actually make a post...

this is making me feel old...lol...

thanks

Dan

Too many restarts... why?

Johan1 — Sun, 12 Oct 2025 11:11:53 GMT

Dear fellow users, can anyone tell me why Windows needs to restart twice in a row allmost every two weeks? (Dell precision 5490, Windows 11 Education). My employer forced me to accept a Windows machine after my former laptop (Macbook) got out of order. Updating of the Mac was never a problem, allways succesfull updates in the background. With Windows it's quite the opposite. A simple switch between external screens seems to be prohibited before updating. Quite anoying when in class!

Unable to install Windows 10 ESU due to unknown MDM

TomD22 — Mon, 06 Oct 2025 01:45:26 GMT

I have been trying to get the Windows 10 ESU program enrollment done, but an unable to. It appears that I am connected to some MDM, but I have never to my knowledge done so. Also, there are no options listed in "Accounts-> Work or School."

I ran the following in Powershell and got outputs 0 True 0 2, indicating the MDM registration.

$t = [AppDomain]::CurrentDomain.DefineDynamicAssembly((Get-Random), 1).DefineDynamicModule((Get-Random), $False).DefineType((Get-Random)) $t.DefinePInvokeMethod('IsDeviceRegisteredWithManagement', 'mdmregistration.dll', 22, 1, [Int32], @([Boolean].MakeByRefType(), [IntPtr], [IntPtr]), 1, 3).SetImplementationFlags(128) $t.DefinePInvokeMethod('NetGetJoinInformation', 'wkscli.dll', 22, 1, [Int32], @([IntPtr], [IntPtr].MakeByRefType(), [UInt32].MakeByRefType()), 1, 3).SetImplementationFlags(128) $Win32 = $t.CreateType() $JoinedMDM = $False; $Win32::IsDeviceRegisteredWithManagement([ref]$JoinedMDM, 0, 0); $JoinedMDM $JoinedDomain = 0; $Buf = 0; $Win32::NetGetJoinInformation(0, [ref]$Buf, [ref]$JoinedDomain); $JoinedDomain

Thanks for any ideas,

Tom

Moved 2.5"ssd from old Intel NUC to new Intel Nuc, can't find docs/pics

sudiki — Mon, 15 Sep 2025 17:58:18 GMT

So not sure if this is the right place after wading through all the options so here goes: I moved a ssd from my old NUC that was on it's last legs (pwr supply). It was windows 10 and I needed a new system as the hardware was too old to upgrade to WN11 and the pwr supply was on the blink anyways.

I installed two brand new SSD's in the new NUC and installed a new version of WN11 on one (Linux mint on the other). I got the new system up running both OS's w/o much trouble (other than my old HP laser printer which is so old that HP doesn't support it anymore).

I took the old 2.5" ssd out of the failing nuc and connected it to the new system via usb-c.

wn11 recognizes it as drive F but show two identical F drives...? why two F's?
I can open it via File explorer but I can't find any of my word docs. Doing a search in the search box with drive F selected, all wn11 does is state : "working on it" and never finds anything (the little spinning circle spins itself senseless) and I finally give up and end the task :)
If I boot my Linux ssd, I can find the docs and also pics too.

What am I doing wrong? I can find docs using the linux OS but I can't in the OS that they originally were created in (windows/word)

Microsoft Lens The Ultimate PDF Scanner Mobile App

JohnNaguib — Sat, 16 Aug 2025 09:17:51 GMT

In today’s fast-paced world, having a reliable document scanning app on your mobile device is essential. Microsoft Lens, formerly known as Office Lens, is a powerful PDF scanner that helps users digitize documents, receipts, whiteboards, business cards, and more with ease. Whether you’re a professional, student, or simply someone looking for an efficient way to manage paperwork, Microsoft Lens is a must-have app.

https://dellenny.com/microsoft-lens-the-ultimate-pdf-scanner-mobile-app/

Unlocking Productivity with the Microsoft Remote Desktop Mobile App

JohnNaguib — Sat, 16 Aug 2025 09:16:39 GMT

In today’s fast-paced digital world, professionals need seamless access to their work environments, no matter where they are. Microsoft’s Remote Desktop Mobile App is a powerful tool that enables users to connect to their Windows devices remotely from their smartphones or tablets. Whether you’re working from home, on the go, or managing remote servers, this app ensures you stay productive and connected.

https://dellenny.com/unlocking-productivity-with-the-microsoft-remote-desktop-mobile-app/

Fetch Email of Login User Using Command or Script

moinkhanengr — Mon, 11 Aug 2025 06:02:03 GMT

Dear Team,

We are working on retrieving email address of the user joined to Entra ID from Entra-joined Windows devices, specifically while running in a system context.The whoami /upn command successfully returns the joined user’s email address in a user context, but it does not work in a system context, particularly when using an elevated terminal via the psexec utility. We also tested the dsregcmd /status command; however, in a system context, the User Identity tab in the SSO State section only appears when there is an error in AzureAdPrt. Under normal, healthy operating conditions, this command does not provide the user identity or the full domain username.

We would greatly appreciate guidance on how to retrieve the Entra ID joined user’s email address in a system context, especially from those with prior experience in this area.

Thank you for your support.

Deploy 802.1x Policies to Windows 10 Devices using traditional management tools

Curious_Kevin16 — Wed, 14 May 2025 14:45:00 GMT

Hi Folks,

We've been asked to implement 802.1x endpoint policies to Windows 10 devices using traditional tools such as AD, GPO etc.. Has anyone achieved this and is it a possibility?

Thanks and much appreciate any helpful information!