Goals:

• As a Windows admin, I like to prepare (configure using scripts, install Windows Updates and applications from ISOs) my VMs, while they have no network access, yet, so that the process is as deterministic as possible.

• As an VM admin, I like to execute applications in my VMs (e.g. to run a security scanner), while I might have either no knowledge or permissions to access the VM via network.

• Both scenarios might be triggered via ansible (CNV-40697).

• Authentication and authorization should happen inside the guest by the guest to enter the desired execution context.

• The access is non-interactive for security reasons

• The feature should work on a fresh installed Windows guest, only content from virtio drivers iso installed, without network access.

• The request to copy files from and to the VM is likely to come up in the future, so it would be great if it could be already addressed.