SwizzleStick

On Dell server hardware with the right cards/licensing, you can remove the need for physical access to the server to input an FDE password by leaning on iDRAC. This provides access to the console remotely during the boot process (and thereafter).

Alternatives exist that supposedly do the same thing, but I’ve never had to try them. Airconsole, pikvm, blikvm etc.

You can keep this interface unexposed by using wireguard to dial in when you’re away, as per your original thinking. Just make sure the endpoint isn’t on the server you’re rebooting…

Half the shit I actually want I just run directly these days, rather than nosing through either.

• ncpa.cpl
• diskmgmt.msc
• devmgmt.msc
• control userpasswords2
• cmd
• mstsc
• regedit
• taskmgr

Just to name a few.

It’s utter bollocks. It used to be the OEM crap that had to be removed or clean installed over. Now you have to spend time unfucking fresh installs.

My 11 image is just about usable, but only after a lot of gutting, reg entries, powershell scripts and openshell.

The railroading to sign in with an MS account has become worse too, but still just about bypassable.