Using the powershell script damages the Workstation service

[rwasef1830]

Enabling optimizations with the Powershell script erases the default keys in
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters

Such as:
EnablePlainTextPassword
EnableSecuritySignature
RequireSecuritySignature
ServiceDll
ServiceDllUnloadOnStop

Which leads to breaking of the Workstation service on the next reboot and making it unable to start anymore with error code 2 "File not found"

I think the problem is New-Item -Force which is being used.

Here is a .reg file which repairs this damage:

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters]
"EnablePlainTextPassword"=dword:00000000
"RequireSecuritySignature"=dword:00000000
"EnableSecuritySignature"=dword:00000001
"ServiceDll"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,\
  00,74,00,25,00,5c,00,53,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,\
  77,00,6b,00,73,00,73,00,76,00,63,00,2e,00,64,00,6c,00,6c,00,00,00
"ServiceDllUnloadOnStop"=dword:00000001

[ldy985]

This is a critical bug

[BlueToast]

Writing to acknowledge existence of this Issue submission. Upinel appears to have reverted the PR for the PowerShell script - good. I will do some additional research and testing. Initial testing did not produce these issues, but will check and look again according to the specifics that were described in this issue. No timeline/ETA at the moment.

Vested interest. This is important to me because (a) of how often I use a Windows To Go (11 Enterprise) setup on a laptop when I WFH and (b) internal desire to write things I need to be beneficial to others. It is convenient to not only RDP but have NVIDIA eGPU hardware acceleration from my personal Intel NUC 8i7HVK.

[rwasef1830]

@BlueToast problem is that the entire reg key is deleted and then remade with only the options in the powershell, so just need to adjust it to preserve the existing values. It was working well otherwise.

[fstanis]

I made an easier-to-revert version of this script here: https://github.com/fstanis/RDP-Tweaks