Windows 11 IoT LTSC Reinstallation Guide

I heard that Microsoft released the public version of Windows 11 LTSC earlier this month, and I was so done with Microsoft stuffing the system with AI clutter every other day! Without hesitation, I immediately installed the new system on all three of my computers. My last Windows reinstallation guide was written four years ago, and many contents are now outdated. So, I decided to take this opportunity to write a new guide focused specifically on reinstalling Windows 11 IoT LTSC.

LTSC VS. IoT LTSC

LTSC, or the Long-Term Servicing Channel, is a streamlined version of Windows designed for long-term stability by removing many built-in apps like Photos, Videos, Copilot, and others. It also lacks the Microsoft Store (though it can be installed manually). Future updates for LTSC focus only on security and bug fixes, without feature updates, preventing the addition of unnecessary features (and bugs) from Microsoft. While IoT LTSC is tailored for IoT devices but can be installed on regular home PCs as well. Below is a detailed comparison between the two:

FeatureEnterprise LTSCIoT Enterprise LTSC
Hardware restrictions (TPM / Secure Boot / UEFI / 4GB+ memory)RestrictedUnrestricted
BitLocker encryptionEnabledDisabled
Update support duration5 years10 years
Digital license activationNot supportedSupported
Ability to uninstall Edge browserYesRegion must be set to a European country
Multi-language supportSupportedEnglish only by default; other languages can be added after installation

File Backup

The methods provided in this guide will erase all disk contents for a fresh installation, so be sure to back up everything!

A fresh install has the advantage of not carrying over any strange issues from the old system (like files that can’t be deleted). However, it will erase all content on the disk.

If possible, use a spare USB drive or external hard drive to copy all important data. For an extra measure, you can go as far as physically disconnecting additional drives, leaving only the system drive connected to avoid formatting the wrong drive by mistake.

System Image Download

First, we need to download the system image. You can obtain it from the following two websites. NEXT, I TELL YOU offers BT and ED2K download links, while MAS provides download options from Microsoft’s official sources as well as their own cloud storage. Try both sites and choose the one with the faster download speed.

Create a Bootable USB Drive

Next, we need to create a bootable USB drive for the new system installation. Follow these steps:

  1. First, download and install the Rufus tool for creating bootable USB drives. It’s recommended to use the portable version since the system will be reinstalled shortly.
  2. Insert an empty USB drive with at least 8GB of space into your computer. Note that this USB drive will be formatted, so make sure to back up any important data.
  3. Open Rufus. Set the device to the USB drive, select the system image you just downloaded as the boot selection, and leave the other settings as default. Then, click START.
  4. Rufus will prompt you to customize the installation options, such as bypassing hardware restrictions. Since the IoT LTSC version doesn’t have these restrictions, you can simply click OK to skip this. Rufus will then warn about formatting the USB drive; click OK to continue.
  5. Finally, wait for the process to complete, which usually takes around ten minutes.

Adjust Boot Order

Next, we need to enter the BIOS to adjust the boot order. This is one of the most challenging steps in the reinstallation process—successfully completing it means you’re 80% done. Follow these steps:

  1. Different motherboard brands have various shortcut keys to access the BIOS, typically one of F2, F10, F12, or Del. Continuously press these keys during startup until you reach the BIOS setup page.
  2. The default language of the BIOS page is usually English. Once inside, use the Tab key to navigate to the Boot submenu. Then, set the bootable USB drive as the first boot option (Boot Option 1). The exact settings may vary by device.
  3. After configuring the boot order, use the Tab key to switch to the Save & Exit submenu, choose Save Changes or a similar option, and press the Esc key to exit the BIOS. You may see a prompt to confirm the changes; choose to save.

Adjust Boot Order on Surface Devices

If your device is a Surface (like my old Surface 3), there’s no need to enter the BIOS. When only a USB drive is inserted, Surface devices will automatically prioritize it as the boot option. Here’s how to proceed:

  1. Disconnect all USB devices, including any TF card in the back slot.
  2. Insert the system USB drive.
  3. Hold down the volume-down button, and then press the power button.
  4. Keep holding the volume-down button until the Windows spinning circle icon appears.
  5. The system will enter the installation program, ready for reinstallation.
  6. During the installation process, you’ll need to use the Surface’s magnetic keyboard and trackpad, as the touchscreen and stylus will be unavailable until the drivers are installed.

Installation

If all goes well, after rebooting, your computer will enter the Windows installation program. The steps from here are straightforward — just follow the prompts step-by-step, though there are quite a few of them. I’ve captured each key screen during the installation process, so I’ll just provide the images here instead of detailing every step, as writing it all out would be a bit much. Additional explanations for certain sections will be included in yellow text boxes below.

Command Line Disk Wipe Instructions

This method is ideal for those who want a completely clean install by wiping all content on the disk, as I do for every reinstallation.

Important: If your computer has multiple physical disks or one physical disk with multiple partitions and you only want to format the C: drive, do not use this method!

  1. On the “Select location to install Windows 11” screen, press Shift+F10 to open the cmd window (some devices may require Fn to be pressed along with Shift and F10).
  2. Type diskpart and press Enter.
  3. Use the list disk command to list all mounted disks.
  4. Use the command select disk [number] to choose the disk based on your setup.
    • Here, I’m installing on a virtual machine with a single disk, so the command is select disk 0.
    • Typically, you will see at least two disks listed (your USB drive and the main disk). If you have multiple physical drives, they will all appear here, so take care not to accidentally select the USB drive. You can differentiate them by checking the disk sizes.
    • Note: Here you’re selecting a physical disk, so even if one physical disk has multiple partitions, it’s still viewed as a single disk.
  5. Enter clean and press Enter to erase all contents on the selected disk.
  6. Type convert gpt and press Enter to format the disk as GPT.
  7. Finally, use the list disk command again to verify the disk status.

Partitioning Guide

If you’ve used the command line to clear your disk, you can proceed directly with partition creation by selecting the main disk and creating a new partition.

When creating a new partition on an unpartitioned disk, the system will automatically divide the disk into three parts:

  • A 100MB System Partition (for EFI boot).
  • A Recovery Partition (MSR (Reserved)) of a few hundred MBs.
  • The largest Primary Partition (C: drive) where the system will be installed. Select this primary partition and click Next to begin the installation.

You can also partition other disks at this stage or wait until after the installation to use Disk Management.

If you skipped the command line disk cleaning, select your previous system’s C: drive partition and format it (Format Partition) before proceeding with the installation.

Activation

Below are two activation methods. It’s important to note that systems activated using these methods are not legally considered genuine. Only a key purchased directly from Microsoft is legally legitimate. Microsoft, however, turns a blind eye to this practice. The following methods are for testing purposes only.

First, right-click the Start menu button (Windows icon) on the taskbar and select Windows PowerShell (Admin).

Before activating, check PowerShell’s execution policy by typing the following command:

1
get-executionpolicy

If the return value is Restricted, you’ll need to change the execution policy, or else the script won’t execute.

1
Set-ExecutionPolicy RemoteSigned

Then press a and hit enter to confirm the change.

About PowerShell’s execution policy

Content generated by ChatGPT:

The PowerShell Execution Policy is a security feature used to control the permissions and behavior of running scripts on Windows. It restricts the execution of scripts and configuration files to help prevent malicious scripts or unauthorized code from running on the system. The execution policy itself is not a true security measure; it is merely a mechanism to control script execution, not to prevent malicious scripts from running. It is primarily used to help users avoid accidentally running untrusted scripts.

PowerShell has several execution policy levels, each with different permissions and restrictions. Common execution policies include:

  1. Restricted (default setting):
    • Description: This is the default execution policy in PowerShell. In this mode, no scripts are allowed to run; only PowerShell commands and functions (command-line inputs) can be executed. Users can run commands interactively, but cannot directly execute .ps1 script files.
    • Use case: The most secure setting to prevent any scripts or automation from running.
  2. AllSigned:
    • Description: Requires that all scripts and configuration files (including your own scripts) be digitally signed by a trusted publisher before they can be executed. Even local scripts must be signed, or they will be blocked.
    • Use case: Strong control over the scripts that are executed, ensuring that all scripts are signed by trusted developers.
  3. RemoteSigned:
    • Description: Requires scripts downloaded from the Internet to be signed by a trusted publisher before they can be executed. Locally created scripts (not downloaded from the web) do not need to be signed.
    • Use case: A commonly used setting that allows local scripts to run freely, but requires signature verification for scripts downloaded from the Internet.
  4. Unrestricted:
    • Description: Allows any script to be executed, regardless of whether it is signed. For scripts downloaded from the Internet, users will see a warning prompt, but can still run the script. This setting has no signature verification, making it less secure.
    • Use case: Suitable for environments where security is not a concern or all script sources are trusted.
  5. Bypass:
    • Description: No restrictions; all scripts are allowed to execute, completely bypassing any execution policy checks. This policy is suitable for certain automation tasks or when running scripts without any security warnings or prompts.
    • Use case: Typically used in specific automation or testing environments, but due to its low security, it is generally not recommended for use in production environments.
  6. Undefined:
    • Description: Indicates that no execution policy has been set for the scope (such as user, computer, session, etc.). If the execution policy for a scope is “Undefined,” it will inherit the settings of the parent scope.
    • Use case: This state means no execution policy is configured. If all scopes on the system are “Undefined,” PowerShell will use the default policy (usually Restricted).

MAS PowerShell Script Activation

Microsoft Activation Scripts (MAS) is a set of open-source automation scripts developed by a third party, used for activating Windows and Office. They are commonly used to bypass genuine verification or activate Windows or Office products without a proper official key.

To run the activation in PowerShell, execute the following command:

1
irm https://get.activated.win | iex

Since get.activated.win is a new domain, it might be blocked by your ISP or DNS. If PowerShell throws an error and cannot connect, use the following command as an alternative. Note that this command might be deprecated at any time:

1
irm https://massgrave.dev/get | iex

Then, in the new window that appears, enter 1 to activate using the HWID digital license. Once the script completes execution, press any key to exit the script.

PowerShell command explanation

Content generated by ChatGPT:

The PowerShell command mentioned above contains two parts linked by the pipe |. The whole command is designed to download a script from a remote URL and execute it directly. Here’s a breakdown of each part:

  1. irm https://get.activated.win:
    • irm stands for Invoke-RestMethod, a command in PowerShell that downloads data from a specified URL (usually in formats like JSON, XML, or plain text). It’s similar to tools like curl or wget, but designed for PowerShell environments.
    • The URL https://get.activated.win is a remote website address. The command attempts to access this site and download data. Typically, this data will be a PowerShell script or some other content that PowerShell can process.
  2. | (Pipe symbol):
    • The pipe symbol | passes the output of the irm command to the iex command as input. In this case, it sends the data downloaded from the URL to the iex command.
  3. iex:
    • iex stands for Invoke-Expression, a command in PowerShell used to execute a string of text as PowerShell commands. In other words, iex will treat the content it receives (in this case, the script downloaded via irm) as PowerShell code and execute it.

In summary, this command will download content from the URL https://get.activated.win and pass the downloaded content (which should be a PowerShell script) to iex for execution. Typically, such scripts are used to perform background tasks like activating software, installing programs, or modifying system settings.

If you are unable to execute the command successfully, you can download the script source files directly from GitHub and run them locally. Here are the steps:

  1. First, visit the MAS script GitHub repository and click the Code button in the upper-right corner. Select Download ZIP to download the compressed file.
  2. Edge browser may prompt you to confirm if you want to download and keep the file, so make sure to confirm the download.
  3. Once downloaded, unzip the file and navigate to the directory ./Microsoft-Activation-Scripts-master/MAS/All-In-One-Version-KL.
  4. Right-click on MAS_AIO.cmd and choose Run as administrator.
  5. In the popup window, input 1 to proceed with the HWID digital license activation.
  6. Wait for the script to finish executing, then press any key to exit the script.

KMS Activation

If the MAS script fails to activate your system, you can try the more traditional KMS activation. KMS, or Key Management Service, is primarily used for bulk activation of computers within enterprises. The activation is valid for 180 days but can be set for automatic renewal.

Here’s how to activate using KMS:

  1. Right-click the Start menu button (Windows icon) on the taskbar and open Windows Powershell (Administrator). Then, sequentially enter the following commands and press Enter. Note that activation requires a network connection, and after executing the last two commands, you will see some activation popups—click OK to complete.
  2. Set the KMS server:
    1
    slmgr -skms kms.03k.org
  3. Set the product key. If you’re installing a different version, replace the key accordingly:
    1
    slmgr -ipk KBN8V-HFGQ4-MGXVD-347P6-PDQGT
  4. Start Windows activation:
    1
    slmgr -ato
  5. (Optional) Display detailed license and activation information:
    1
    slmgr -dlv

KMS Keys

The corresponding product keys for different versions of Windows are as follows. Note that the keys for Windows 11 and Windows 10 are the same and have not changed. For more KMS keys, please refer to the Microsoft official documentation. In this documentation, the versions with an “N” suffix are for the European edition, and those with a “G” suffix are for the Government edition. However, these are generally not relevant for regular users.

Operating system editionKMS Client Product Key
ProW269N-WFGWX-YVC9B-4J6C9-T83GX
Pro NMH37W-N47XK-V7XM9-C7227-GCQG9
Pro for WorkstationsNRG8B-VKK3Q-CXVCJ-9G2XF-6Q84J
Pro for Workstations N9FNHH-K3HBT-3W4TD-6383H-6XYWF
Pro Education6TP4R-GNPTD-KYYHQ-7B7DP-J447Y
Pro Education NYVWGF-BXNMC-HTQYQ-CPQ99-66QFC
EducationNW6C2-QMPVW-D7KKK-3GKT6-VCFB2
Education N2WH4N-8QGBV-H22JP-CT43Q-MDWWJ
EnterpriseNPPR9-FWDCX-D2C8J-H872K-2YT43
Enterprise NDPH2V-TTNVB-4X9Q3-TJR4H-KHJW4
Enterprise GYYVX9-NTFWV-6MDM3-9PT4T-4M68B
Enterprise G N44RPN-FTY23-9VTTB-MP9BX-T84FV
Enterprise LTSC 2024/2021/2019M7XTQ-FN8P6-TTKYV-9D4CC-J462D
Enterprise N LTSC 2024/2021/201992NFX-8DJQP-P6BBQ-THF9C-7CG2H
IoT Enterprise LTSC 2024/21KBN8V-HFGQ4-MGXVD-347P6-PDQGT
Server 2025 StandardTVRH6-WHNXV-R9WG3-9XRFY-MY832
Server 2025 DatacenterD764K-2NDRG-47T6Q-P8T8W-YP6DF

slmgr command

Content generated by ChatGPT:

In Windows, the slmgr (Software Licensing Management Tool) is a command-line utility used to manage and configure Windows activation and license information. The four commands mentioned above are related to KMS (Key Management Service) activation. Here is a detailed explanation of each command:

  1. slmgr -skms kms.03k.org
    • Purpose: This command sets the activation server address for Windows to kms.03k.org, which is the specified KMS server address.
    • Explanation:
      • -skms is the parameter used to specify the KMS server address.
      • kms.03k.org is the domain name of the KMS server. The Windows system will communicate with this server to complete the activation process.
    • This command instructs the operating system to use the specified KMS server for activation.
  2. slmgr -ipk [corresponding version key]
    • Purpose: This command installs a Windows product key for activation.
    • Explanation:
      • -ipk is the parameter used to install a product key.
      • [corresponding version key] should be replaced with the actual product key for the version of Windows you wish to activate (e.g., the key for Windows 10 Professional).
    • This command installs the specified key into the system to be used during activation. For KMS activation, it typically installs the KMS client key corresponding to the specific version of Windows.
  3. slmgr -ato
    • Purpose: This command initiates the activation process for Windows.
    • Explanation:
      • -ato stands for “Activate Online,” which instructs Windows to attempt activation immediately using the KMS server that has been set up.
    • When this command is executed, Windows will try to connect to the specified KMS server and activate the operating system. If everything is correctly set up (server and key), activation will succeed.
  4. slmgr -dlv
    • Purpose: This command displays detailed license and activation information.
    • Explanation:
      • -dlv stands for “Display License Information and Verification,” which shows detailed information about the current system’s license.
    • When executed, this command provides detailed information about the activation status, license type, KMS server information, expiration date, etc. It’s useful for verifying whether the activation was successful or for obtaining more details about the system’s activation state.

Settings

Use the Windows + I shortcut to open the Settings menu.

(Optional) Change Language

Before making further adjustments, you may want to change the language to your native language. Here’s how to switch to Simplified Chinese as an example:

  1. Click on the Time & language option in the left sidebar, then select Language & region on the right.
  2. Click the three dots next to the Chinese entry and select Language options from the menu.
  3. Click the Download button next to Language pack.
  4. Return to the Language & region page and switch the Windows display language to 中文(中华人民共和国).
  5. Restart the computer. Although the system suggests logging out, I encountered a mixed language bug after logging out, so a full restart is recommended.

Personalization Settings

By default, only the Recycle Bin icon appears on the desktop. Here’s how to add the “This PC” icon to the desktop:

  1. Click on the Personalization option in the left sidebar.
  2. Open Themes settings.
  3. Click on Desktop icon settings.
  4. Check the box for Computer.
  5. Click OK to save the changes.

Next, add icons such as Settings and File Explorer to the Start Menu:

  1. Switch to the Start settings.
  2. Click on Folders at the bottom.
  3. Toggle on the switches for the desired options to add them to the Start Menu.

Updates

Finally, go to Settings - Windows Update - Check for updates to manually check for updates. After all updates have been installed, click Restart now if prompted. This process can take some time, depending on your internet speed and computer performance. Additionally, the system will automatically install drivers in the background, so if the screen resolution looks unusual, don’t worry—this should normalize once the graphics driver is installed.

Disk Partition

If you have an unpartitioned hard drive remaining from the system installation process, you can use the Disk Management tool to create partitions now.

To do this, right-click the Start button (Windows icon) on the taskbar and open Disk Management.

Create New Partition

If there’s unallocated space on the disk (indicated by a black bar), you can create a new partition:

  1. Right-click on the black Unallocated space.
  2. Select New Simple Volume and follow the wizard instructions.
  3. Choose the partition size (either the maximum capacity or a custom size in MB, where 1GB = 1024MB), then click Next.
  4. Select a drive letter (e.g., D: or E:) and click Next.
  5. Choose the partition format, keeping the default as NTFS with a quick format. Click Next.
  6. Click Finish to create the new partition.

If your SSD is smaller than 512GB, it’s usually unnecessary to have multiple partitions. When creating new partitions on a basic disk, the first three will be formatted as primary partitions, while starting from the fourth, each partition will be configured as a logical drive within an extended partition.

Delete Partition

To delete an existing partition and free up space (note that this will erase all data on the partition):

  1. Right-click on the partition you want to delete.
  2. Select Delete Volume.
  3. Confirm by clicking Yes in the pop-up window.
  4. The deleted space will now be shown as Unallocated (black), which can be used to create a new partition.

Format Partition

Formatting a partition erases all data and re-establishes the file system:

  1. Right-click on the partition you want to format.
  2. Select Format.
  3. Keep the default options.
  4. Click OK to proceed with formatting.

Extend Partition

If a partition is running low on space and there’s unallocated space on the disk, you can extend it:

  1. Right-click on the partition you want to extend.
  2. Select Extend Volume.
  3. In the wizard, choose the amount of space to add (by default, it uses the maximum available).
  4. Click Next, then Finish.

Shrink Partition

If you want to reduce a partition’s size, you can shrink it:

  1. Right-click on the partition you want to shrink.
  2. Select Shrink Volume.
  3. Enter the amount of space to shrink.
  4. Click Shrink. The freed space will appear as Unallocated (black).

Change Drive Letter and Paths

You can assign a different drive letter to a partition:

  1. Right-click on the partition or drive.
  2. Select Change Drive Letter and Paths.
  3. In the pop-up window, choose Change, then select the new letter.
  4. Click OK.

Microsoft Store Installation

The LTSC version of Windows doesn’t include the Microsoft Store by default, so it needs to be installed manually. Here are the steps:

  1. First, download the installation package provided by the LTSC-Add-MicrosoftStore project.
  2. Extract the downloaded files and open the folder.
  3. Right-click on the Add-Store script and select Run as administrator.
  4. During installation, some errors may appear for components that cannot be installed. This is normal, as certain components are already pre-installed on the system, leading to version conflicts.
  5. After the installation is complete, press any key to exit the script.
  6. The project also offers offline installation packages for certain Microsoft Store apps; download and double-click to install as needed.
  7. LTSC lacks certain media extensions, which can be installed directly from the Store. Search and install the following as needed:
    • MPEG-2 Video Extension
    • VP9 Video Extension
    • Raw Image Extension
    • Web Media Extension
    • HEIF Image Extension
    • HEVC Video Extension
    • WebP Image Extension

Office LTSC 2024

Installation

I am also installing the LTSC version of Office. Here are the steps:

  1. First, download the installation tool, Office Tool Plus.
  2. Extract the downloaded files, open the folder, and right-click to Run as Administrator on the Office Tool Plus application.
  3. Click Yes to accept the license terms.
  4. In the left sidebar, click on the Deploy tab.
  5. Set the architecture to 64-bit.
  6. Select the update channel as needed; here, I set it to Office 2024 Perpetual Enterprise.
  7. Choose whether to Create desktop shortcuts.
  8. Click the Add products button.
  9. Enter LTSC 2024 in the search bar.
  10. Select Office LTSC Professional Plus 2024 - Volume License.
  11. Click OK.
  12. Select the applications you want to install.
  13. Click Add languages.
  14. Search for English.
  15. Choose English (United States).
  16. Click OK.
  17. At the top of the page, click Start deploy.
  18. In the popup, confirm the details and click Yes to begin installation.
  19. If a message appears stating that the signature cannot be verified, click Yes to proceed.
  20. Wait for the installation to complete.

Activation

To activate Office, you can also use the MAS script, following similar steps as for system activation:

  1. Run the MAS script using the same command as for system activation.
  2. In the window that appears, type 2 to choose the Ohook activation method.
  3. Then, type 1 to proceed with the activation.

System Adjustments and Bug Fixes

Additionally, my PC encountered a bug where certain software took a long time to launch. After troubleshooting with Task Manager, I found that it was caused by Windows Defender. The antimalware service executable process used a lot of resources during the software launch. This bug only appeared on the computer where I had installed additional antivirus software, while the other two computers were completely fine, which was puzzling. If you do not have other valid antivirus software installed, please DO NOT disable this option, as your system may be exposed to risks!

  1. First, right-click the Start menu button, click Run, and type gpedit.msc to open the Local Group Policy Editor.
  2. Navigate to Computer Configuration - Administrative Templates - Windows Components - Microsoft Defender Antivirus.
  3. Double-click on Turn off Microsoft Defender Antivirus on the right side.
  4. Select Enabled, then click OK to save the changes.

Software