Use root, not ec2-user for remote actions
Improved commenting, different ami for Windows