Enable FIPS Mode on SLES 15 and Verify the Boot State
Follow SUSE’s SP7 procedure to enable FIPS mode, reboot safely, verify the active policy, and check whether your compliance requirement calls for validated modules.
Windows 10 is the latest operating system, adding a lot of exciting new features. However, besides there are many features that are rarely used or never used, they are "useless" so that it has no effect but also makes the computer run slower.
So what are these features? How to disable?
On Windows 10 you can manage features through the Windows Features dialog box. Therefore, the first thing to do is to launch this tool. Right-click the Start button , select Programs and Features.

Programs and Features window appears, click the Turn Windows features on or off option on the left side of the screen.
When the Windows Features dialog box appears, follow the instructions below to disable unnecessary features, help the computer run faster:
Note: After each operation will display a message window reminding you to press Yes . Then restart Windows for the changes to take effect.
Browsers Internet Explorer fewer user, in Version latest Microsoft operating system has replaced Microsoft Edge as the default browser. This is a brand new web browser that brings a very interesting browsing experience, so look to the Internet Explorer 11 series , uncheck it.
DirectPlay is an API function of Microsoft DirectX API, used for gaming system on Windows Live a long time ago, new game genres are no longer used. So it is best to disable them by: Go to the Legacy Components line , click on the + icon to open more sub-categories, then uncheck the DirectPlay box .
Although Windows Media Player is a music player so popular on Windows, but OS this latest Groove Music has been the default setting or you want to use the video player 3rd party such as VLC Media Player , KMPlayer to There are more attractive features.
Therefore, if not used to the best, please disable by: Navigate to the Media Features line , click on the + icon to open more sub-categories, then uncheck the box in Windows Media Player .
Microsoft Print to PDF is a virtual printer service that allows users to print any format to PDF. However, if you are using the Microsoft Office office toolkit , this feature is no longer needed. So disable it by unchecking the box in Microsoft Print to PDF .
This feature allows you to perform printing, connecting to a Fax or Scan machine. If there is no need to use it is best to disable them by: Navigate to the Print and Document Services line , click the + symbol next to open more sub-items:
Then, uncheck the box here.
This feature helps users to manage server systems remotely better, if you are a regular user is not related to best server disable go by: Put tick in the box Remote Differential Compression API Support go .
PowerShell is a command line interpreter and scripting language on Windows. However, currently the latest version is P owerShell 5.0, so the commands from the old version no longer work on Windows 10. It is best to turn them off by: Navigate to the Windows PowerShell 2.0 line , click the sign icon + next to open a sub item, then uncheck the box in Windows PowerShell 2.0 Engine .
Windows Process Activation Service is often used for application developers, if you are the best normal user, please disable it by: Navigate to the Windows Process Activation Service line , click the + symbol next to add a sub item, then uncheck the Process Model box .
This feature allows syncing folders from a corporate network to your computer. If your computer is not related to work, it is best to turn it off by unchecking the box in the Work Folders Client.
XPS is a format designed by Microsoft to replace the PDF format, allowing users to create, print and view XPS documents on a computer. If you do not use this format, it is best to turn it off by unchecking the boxes of XPS Services and XPS Viewer .
Check that you do not use any features, please turn them off, reduce the burden on the computer, help the computer run faster!
I wish you successful implementation!
Follow SUSE’s SP7 procedure to enable FIPS mode, reboot safely, verify the active policy, and check whether your compliance requirement calls for validated modules.
Compare YaST and cryptsetup for a new encrypted SLES data volume, choose LUKS1 or LUKS2, and verify unlock and mount behavior safely.
Create, refine, and verify a least-privilege AppArmor profile on SLES 15 SP7, with a clear note on SLES 16’s SELinux default.
Set up RMT on SLES 15, mirror entitled repositories, and verify HTTPS registration and package access from a test client.
Connect SLES 15 to AD with YaST’s SSSD-based logon management, then verify directory lookup, domain login, and Kerberos tickets.
Set up the right Live Patching path for SLES 16.0 or 15 SP7, apply eligible kernel fixes, and confirm what is active without confusing it with a reboot-required kernel update.
Load a custom SLES 15 kernel module without disabling Secure Boot. Match the running kernel, sign the .ko file, enroll a MOK key, and verify loading.
SLES 15 SP5 can migrate online to SP6, but each node must reboot. Use a tested rolling upgrade or blue-green cutover to keep workloads reachable.
Use SUSE’s supported STIG profile to scan SLES 15, test remediation, review remaining findings, and retain assessment evidence.
Trace a failed Cockpit connection through DNS, port 9090, the systemd socket, firewalld, TLS, and login settings using current SUSE guidance.