https://memv.ennbee.uk/posts/windows-11-risk-based-deployment-part1/