---

Add-WindowsCapability -Online -Name OpenSSH.Server~~~~0.0.1.0
Set-Service sshd -StartupType Automatic; Start-Service sshd
New-NetFirewallRule -Name sshd-lan -DisplayName 'SSH LAN' -Direction Inbound -Protocol TCP -LocalPort 22 -Action Allow -RemoteAddress LocalSubnet -Profile Any
New-ItemProperty HKLM:\SOFTWARE\OpenSSH -Name DefaultShell -Value "$env:SystemRoot\System32\WindowsPowerShell\v1.0\powershell.exe" -Force
$key = 'ssh-ed25519 AAAAC3NzaC1lZDI1NTE5AAAAIB+pckYkpvXAT9Zy4orQbfAsVkYEf4Fi5YYBaw62eKZj claude-mac->rtx5080-pc'
$adm = "$env:ProgramData\ssh\administrators_authorized_keys"
Add-Content $adm $key -Encoding ascii
icacls $adm /inheritance:r /grant '*S-1-5-32-544:F' /grant '*S-1-5-18:F'
mkdir "$HOME\.ssh" -Force | Out-Null; Add-Content "$HOME\.ssh\authorized_keys" $key -Encoding ascii
whoami; ipconfig | findstr IPv4