How narcarsiss/aegis-win11 works
Aegis Win11 is a Windows 11 unattended deployment toolkit: installation media starts Windows Setup, which uses autounattend.xml to coordinate staging and execution of AegisWin11_Deploy.ps1. The script establishes the configured workstation baseline, spanning security, identity, performance compatibility, and optional software deployment. The README documents these capability areas and parameters, but no source excerpts were provided; internal call structure is therefore not inferred. Dashed links mark optional integrations described in the README.
Main entry points: AegisWin11_Deploy.ps1 Deployment Script · autounattend.xml Unattended Configuration
Components 20
Deployment
- Install Media
- Windows Setup
- Unattended Configuration
autounattend.xml - Deployment Script
AegisWin11_Deploy.ps1 - Disk Partitioning
autounattend.xml
Security Baseline
- Security Policies
AegisWin11_Deploy.ps1 - Telemetry Controls
AegisWin11_Deploy.ps1 - Anti-Forensic Mode
AegisWin11_Deploy.ps1 - Device Encryption
AegisWin11_Deploy.ps1 - Identity Anchor
AegisWin11_Deploy.ps1 - Network Boundaries
AegisWin11_Deploy.ps1
Workstation Setup
- Workload Compatibility
AegisWin11_Deploy.ps1 - Browser Policies
AegisWin11_Deploy.ps1 - Shell Cleanup
AegisWin11_Deploy.ps1 - Legacy Removal
AegisWin11_Deploy.ps1 - Package Installation
AegisWin11_Deploy.ps1
External Integrations
- Winget
- Microsoft Entra ID
Other components
- Deployment Operator
- Configured Workstation
Connections 31
- Deployment Operator → Install Media: prepares
- Install Media → Windows Setup: boots
- Windows Setup → Unattended Configuration: reads
- Unattended Configuration → Disk Partitioning: configures
- Unattended Configuration → Deployment Script: stages
- Windows Setup → Deployment Script: runs
- Deployment Script → Security Policies: applies
- Deployment Script → Telemetry Controls: configures
- Deployment Script → Anti-Forensic Mode: configures
- Deployment Script → Device Encryption: provisions
- Deployment Script → Identity Anchor: generates
- Deployment Script → Network Boundaries: configures
- Deployment Script → Workload Compatibility: tunes
- Deployment Script → Browser Policies: applies
- Deployment Script → Shell Cleanup: purges
- Deployment Script → Legacy Removal: removes
- Deployment Script → Package Installation: installs
- Package Installation → Winget: invokes
- Identity Anchor → Microsoft Entra ID: escrows keys
- Disk Partitioning → Configured Workstation: partitions
- Security Policies → Configured Workstation: secures
- Telemetry Controls → Configured Workstation: configures
- Anti-Forensic Mode → Configured Workstation: alters logs
- Device Encryption → Configured Workstation: encrypts
- Identity Anchor → Configured Workstation: establishes
- Network Boundaries → Configured Workstation: configures
- Workload Compatibility → Configured Workstation: tunes
- Browser Policies → Configured Workstation: configures
- Shell Cleanup → Configured Workstation: cleans
- Legacy Removal → Configured Workstation: removes
- Package Installation → Configured Workstation: installs