🛰️ Windows 11 Astro Imaging PC
Full Build Guide
From Bare Metal to Stable Observatory Appliance
This guide describes a complete rebuild from scratch of a Windows 11 PC used exclusively for astrophotography.
The goal is not convenience.
The goal is stability, predictability, and control.
If Windows Update or background services ruin even one clear night, this guide is for you.
This is NOT for daily-use PCs.
CORE PRINCIPLES
Windows is treated as an appliance
Updates are fully disabled
Drivers are installed once
Internet access is controlled
LAN/RDP monitoring is preserved
Imaging happens in a frozen state
PHASE 0 — REQUIREMENTS
Windows 11 Pro (Home is not sufficient)
USB installer created with Microsoft Media Creation Tool
Keyboard + screen attached
Internet available later, not during install
PHASE 1 — CLEAN WINDOWS INSTALL (CRITICAL)
1️⃣ Boot from USB installer
At the disk selection screen:
DELETE ALL PARTITIONS on the system disk
Select Unallocated Space
Click Next
Let Windows create partitions automatically
This removes:
Old drivers
Broken update state
Ghost USB enumerations
Corrupt recovery partitions
2️⃣ OOBE SETUP
DO NOT CONNECT TO WIFI
This step is critical and often missed.
When you reach:
“Let’s connect you to a network”
DO THIS:
Press:
Shift + F10
Command prompt opens.
Type:
OOBE\BYPASSNRO
Press Enter → system reboots.
After reboot:
Select I don’t have internet
Select Continue with limited setup
Create a local account
Do NOT sign in with Microsoft
Do NOT connect Wi-Fi
Do NOT plug Ethernet
This prevents:
Automatic driver downloads
Account sync
Early Windows Update corruption
PHASE 2 —BASE WINDOWS HARDENING (RUN ONCE)
Open PowerShell as Administrator.
Save and run this script once:
BASE_WINDOWS_HARDEN.ps1
# ================================
# BASE WINDOWS HARDENING
# ================================
# Kill Windows Update services
$services = @(
"wuauserv","bits","usosvc","dosvc",
"InstallService","WaaSMedicSvc"
)
foreach ($s in $services) {
Stop-Service $s -Force -ErrorAction SilentlyContinue
sc.exe config $s start= disabled
}
# Block updates via policy
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" /v DisableWindowsUpdateAccess /t REG_DWORD /d 1 /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" /v NoAutoUpdate /t REG_DWORD /d 1 /f
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate" /v ExcludeWUDriversInQualityUpdate /t REG_DWORD /d 1 /f
# Disable update scheduler resurrection
$tasks = @(
"\Microsoft\Windows\WindowsUpdate\Scheduled Start",
"\Microsoft\Windows\UpdateOrchestrator\Schedule Scan",
"\Microsoft\Windows\UpdateOrchestrator\USO_UxBroker",
"\Microsoft\Windows\UpdateOrchestrator\Reboot"
)
foreach ($t in $tasks) {
schtasks /Change /TN $t /Disable 2>$null
}
# Disable telemetry
reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\DataCollection" /v AllowTelemetry /t REG_DWORD /d 0 /f
sc.exe stop DiagTrack
sc.exe config DiagTrack start= disabled
# Power & sleep
powercfg /hibernate off
powercfg /setactive SCHEME_MIN
powercfg /change standby-timeout-ac 0
powercfg /change monitor-timeout-ac 0
# USB & PCIe stability
reg add "HKLM\SYSTEM\CurrentControlSet\Services\USB" /v DisableSelectiveSuspend /t REG_DWORD /d 1 /f
powercfg -setacvalueindex SCHEME_MIN SUB_PCIEXPRESS ASPM 0
# Defender noise reduction
Set-MpPreference -MAPSReporting Disabled
Set-MpPreference -SubmitSamplesConsent 2
Write-Host "Base hardening complete"
➡ Reboot immediately after running
PHASE 3 — REMOVE CONSUMER BLOAT
Remove:
Xbox services
Clipchamp
Teams (consumer)
Cortana
Widgets
Phone Link
Feedback Hub
Optional PowerShell sweep:
Get-AppxPackage | Where-Object {
$_.Name -match "Xbox|Gaming|Clipchamp|Teams|Cortana|Feedback|Widget|Phone"
} | Remove-AppxPackage
Reboot once.
PHASE 4
DRIVER INSTALL (CONTROLLED INTERNET WINDOW)
Now you may briefly connect to the internet.
Install order:
Chipset driver
GPU driver (Minimal install only)
Reboot
Do not enable auto-updates in any vendor software.
PHASE 5
ASTRO SOFTWARE STACK
Install in this order:
ASCOM Platform (will enable .NET 3.5 automatically)
ASTAP + star database
Mount control software
Powerbox / hub software
Camera / guider / focuser drivers
SharpCap
NINA
PHD2
Reboot when prompted.
PHASE 6
CONFIGURE SOFTWARE (NO HARDWARE)
Before plugging in anything:
Configure NINA
Configure plate solving
Configure PHD2 profiles
Launch each app once
This isolates software problems early.
PHASE 7
LAN-ONLY IMAGING MODE (IMPORTANT)
We allow LAN + RDP, but block internet traffic.
Imaging Mode Script
# LAN-only imaging mode
Set-MpPreference -DisableRealtimeMonitoring $true
netsh advfirewall firewall add rule name="BLOCK_ALL_OUT" dir=out action=block profile=any
netsh advfirewall firewall add rule name="ALLOW_LAN" dir=out action=allow remoteip=LocalSubnet profile=any
netsh advfirewall firewall add rule name="ALLOW_RDP" dir=in action=allow protocol=TCP localport=3389 profile=any
Maintenance Mode Script
# Restore internet access
netsh advfirewall firewall delete rule name="BLOCK_ALL_OUT"
netsh advfirewall firewall delete rule name="ALLOW_LAN"
netsh advfirewall firewall delete rule name="ALLOW_RDP"
Set-MpPreference -DisableRealtimeMonitoring $false
PHASE 8
HARDWARE INTEGRATION
Rule:
One device → reboot → test
Order:
Mount
Main camera
Guide camera
Filter wheel
Focuser
Rotator
Powerbox last
PHASE 9
SYSTEM IMAGE (DO NOT SKIP)
Before observatory deployment:
Create a full system image to external storage
Use Macrium Reflect or similar
This turns disaster into a 30-minute restore.
FINAL RESULT
You now have:
A stable Windows imaging appliance
LAN/RDP monitoring intact
No forced updates
No driver churn
Predictable nights
Clear skies should be your only variable not Windows.