There was a Qubes thread on >>>4/g/ recently. It disgusted me how quick a glownigger hopped in and began a concern-troll campaign, gaslighting OP that he must be schizophrenic to want to use Qubes OS. Be safe out there, frens; they're trying to psyop you into avoiding good tools. AI-assisted security penetration is already growing at a quickening pace, Qubes OS is a prudent choice for your everything-but-gaming daily needs.
Anyone needing a Windows TemplateVM is implored to choose Windows Server Evaluation, which you will then convert to full Datacenter edition with the dism command, then use the massgrave KMS activator; follow the Qubes OS project's instructions for installing Qubes Windows Tools into the TemplateVM; open wf.msc and delete inbound and outbound all rules; open gpedit.msc and delete all inbound and outbound rules, set inbound and outbound to Block [All] for Domain, Public, and Private profiles in the Windows Firewall properties (in gpedit.msc), and while setting Block [All] settings be sure to click Customize right next to "Specify settings that control Windows Defender Firewall Behavior" and make sure both Rule Merging settings are set to No (SO STRONGLY IMPLORED, IT'S ALMOST A REQUIREMENT HERE!), then add the tab-separated rules I will paste below and make sure they are DISABLED; Enable "Turn Off KMS Client Online AVS Validation" under Administrative Templates in gpedit.msc.
Firewall rules (Tab Separated Values):
Name Group Profile Enabled Action Override Program Local Address Remote Address Protocol Local Port Remote Port Authorized Computers Authorized Local Principals Local User Owner PolicyAppId Application Package
Core Networking [custom] - DNS (UDP-Out) (RESTRICTIVE) All Yes Allow No %systemroot%\\system32\\svchost.exe Any 10.139.1.1-10.139.1.2 UDP Any 53 Any Any Any None Any
Core Networking - Dynamic Host Configuration Protocol (DHCP-Out) Core Networking All No Allow No %SystemRoot%\\system32\\svchost.exe Any Any UDP 68 67 Any Any Any None Any
Core Networking Diagnostics - ICMP Echo Request (ICMPv4-Out) Core Networking Diagnostics All No Allow No System Any Any ICMPv4 Any Any Any Any Any None Any
Ping ICMPv4 +Administrator All No Allow No c:\\windows\\system32\\ping.EXE Any Any ICMPv4 Any Any Any COMPUTERNAME\\Administrator Any None Any
PowerShell ALL TCP +Administrator All No Allow No %SystemRoot%\\system32\\WindowsPowerShell\\v1.0\\powershell.exe Any Any TCP Any Any Any COMPUTERNAME\\Administrator Any None Any
PowerShell ALL TCP +User All No Allow No %SystemRoot%\\system32\\WindowsPowerShell\\v1.0\\powershell.exe Any Any TCP Any Any Any COMPUTERNAME\\User Any None Any
PowerShell ALL UDP +User All No Allow No %SystemRoot%\\system32\\WindowsPowerShell\\v1.0\\powershell.exe Any Any UDP Any Any Any COMPUTERNAME\\User Any None Any
PowerShell UDP +Administrator All No Allow No %SystemRoot%\\system32\\WindowsPowerShell\\v1.0\\powershell.exe Any Any UDP Any Any Any COMPUTERNAME\\Administrator Any None Any