666 lines
27 KiB
XML
666 lines
27 KiB
XML
|
<?xml version="1.0" encoding="utf-8"?>
|
||
|
|
<unattend xmlns="urn:schemas-microsoft-com:unattend" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State">
|
||
|
|
<!--https://schneegans.de/windows/unattend-generator/?LanguageMode=Interactive&ProcessorArchitecture=amd64&ComputerNameMode=Random&CompactOsMode=Default&TimeZoneMode=Implicit&PartitionMode=Interactive&DiskAssertionMode=Skip&WindowsEditionMode=Generic&WindowsEdition=pro&InstallFromMode=Automatic&PEMode=Default&UserAccountMode=InteractiveLocal&PasswordExpirationMode=Unlimited&LockoutMode=Default&HideFiles=None&ShowFileExtensions=true&ClassicContextMenu=true&LaunchToThisPC=true&ShowEndTask=true&TaskbarSearch=Hide&TaskbarIconsMode=Empty&DisableWidgets=true&HideTaskViewButton=true&DisableBingResults=true&StartTilesMode=Default&StartPinsMode=Empty&EnableLongPaths=true&PreventAutomaticReboot=true&DisableAppSuggestions=true&HideEdgeFre=true&DisableEdgeStartupBoost=true&DisablePointerPrecision=true&DeleteWindowsOld=true&EffectsMode=Default&DesktopIconsMode=Default&StartFoldersMode=Default&WifiMode=Skip&ExpressSettings=DisableAll&LockKeysMode=Skip&StickyKeysMode=Disabled&ColorMode=Default&WallpaperMode=Default&LockScreenMode=Default&RemoveBingSearch=true&RemoveClipchamp=true&RemoveCopilot=true&RemoveCortana=true&RemoveDevHome=true&RemoveWindowsHello=true&RemoveFamily=true&RemoveFeedbackHub=true&RemoveGameAssist=true&RemoveGetHelp=true&RemoveHandwriting=true&RemoveMailCalendar=true&RemoveMaps=true&RemoveMathInputPanel=true&RemoveMediaFeatures=true&RemoveMixedReality=true&RemoveZuneVideo=true&RemoveNews=true&RemoveOffice365=true&RemoveOneNote=true&RemoveOneSync=true&RemoveOpenSSHClient=true&RemoveOutlook=true&RemovePeople=true&RemovePowerAutomate=true&RemoveQuickAssist=true&RemoveRecall=true&RemoveSkype=true&RemoveSolitaire=true&RemoveSpeech=true&RemoveStepsRecorder=true&RemoveStickyNotes=true&RemoveTeams=true&RemoveGetStarted=true&RemoveToDo=true&RemoveVoiceRecorder=true&RemoveWallet=true&RemoveWeather=true&RemoveFaxAndScan=true&RemoveXboxApps=true&RemoveYourPhone=true&WdacMode=Skip-->
|
||
|
|
<settings pass="offlineServicing"></settings>
|
||
|
|
<settings pass="windowsPE">
|
||
|
|
<component name="Microsoft-Windows-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
|
||
|
|
<UserData>
|
||
|
|
<ProductKey>
|
||
|
|
<Key>VK7JG-NPHTM-C97JM-9MPGT-3V66T</Key>
|
||
|
|
<WillShowUI>OnError</WillShowUI>
|
||
|
|
</ProductKey>
|
||
|
|
<AcceptEula>true</AcceptEula>
|
||
|
|
</UserData>
|
||
|
|
<UseConfigurationSet>false</UseConfigurationSet>
|
||
|
|
</component>
|
||
|
|
</settings>
|
||
|
|
<settings pass="generalize"></settings>
|
||
|
|
<settings pass="specialize">
|
||
|
|
<component name="Microsoft-Windows-Deployment" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
|
||
|
|
<RunSynchronous>
|
||
|
|
<RunSynchronousCommand wcm:action="add">
|
||
|
|
<Order>1</Order>
|
||
|
|
<Path>powershell.exe -WindowStyle Normal -NoProfile -Command "$xml = [xml]::new(); $xml.Load('C:\Windows\Panther\unattend.xml'); $sb = [scriptblock]::Create( $xml.unattend.Extensions.ExtractScript ); Invoke-Command -ScriptBlock $sb -ArgumentList $xml;"</Path>
|
||
|
|
</RunSynchronousCommand>
|
||
|
|
<RunSynchronousCommand wcm:action="add">
|
||
|
|
<Order>2</Order>
|
||
|
|
<Path>powershell.exe -WindowStyle Normal -NoProfile -Command "Get-Content -LiteralPath 'C:\Windows\Setup\Scripts\Specialize.ps1' -Raw | Invoke-Expression;"</Path>
|
||
|
|
</RunSynchronousCommand>
|
||
|
|
<RunSynchronousCommand wcm:action="add">
|
||
|
|
<Order>3</Order>
|
||
|
|
<Path>reg.exe load "HKU\DefaultUser" "C:\Users\Default\NTUSER.DAT"</Path>
|
||
|
|
</RunSynchronousCommand>
|
||
|
|
<RunSynchronousCommand wcm:action="add">
|
||
|
|
<Order>4</Order>
|
||
|
|
<Path>powershell.exe -WindowStyle Normal -NoProfile -Command "Get-Content -LiteralPath 'C:\Windows\Setup\Scripts\DefaultUser.ps1' -Raw | Invoke-Expression;"</Path>
|
||
|
|
</RunSynchronousCommand>
|
||
|
|
<RunSynchronousCommand wcm:action="add">
|
||
|
|
<Order>5</Order>
|
||
|
|
<Path>reg.exe unload "HKU\DefaultUser"</Path>
|
||
|
|
</RunSynchronousCommand>
|
||
|
|
</RunSynchronous>
|
||
|
|
</component>
|
||
|
|
</settings>
|
||
|
|
<settings pass="auditSystem"></settings>
|
||
|
|
<settings pass="auditUser"></settings>
|
||
|
|
<settings pass="oobeSystem">
|
||
|
|
<component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
|
||
|
|
<OOBE>
|
||
|
|
<ProtectYourPC>3</ProtectYourPC>
|
||
|
|
<HideEULAPage>true</HideEULAPage>
|
||
|
|
<HideWirelessSetupInOOBE>true</HideWirelessSetupInOOBE>
|
||
|
|
<HideOnlineAccountScreens>true</HideOnlineAccountScreens>
|
||
|
|
</OOBE>
|
||
|
|
<FirstLogonCommands>
|
||
|
|
<SynchronousCommand wcm:action="add">
|
||
|
|
<Order>1</Order>
|
||
|
|
<CommandLine>powershell.exe -WindowStyle Normal -NoProfile -Command "Get-Content -LiteralPath 'C:\Windows\Setup\Scripts\FirstLogon.ps1' -Raw | Invoke-Expression;"</CommandLine>
|
||
|
|
</SynchronousCommand>
|
||
|
|
</FirstLogonCommands>
|
||
|
|
</component>
|
||
|
|
</settings>
|
||
|
|
<Extensions xmlns="https://schneegans.de/windows/unattend-generator/">
|
||
|
|
<ExtractScript>
|
||
|
|
param(
|
||
|
|
[xml] $Document
|
||
|
|
);
|
||
|
|
|
||
|
|
foreach( $file in $Document.unattend.Extensions.File ) {
|
||
|
|
$path = [System.Environment]::ExpandEnvironmentVariables( $file.GetAttribute( 'path' ) );
|
||
|
|
mkdir -Path( $path | Split-Path -Parent ) -ErrorAction 'SilentlyContinue';
|
||
|
|
$encoding = switch( [System.IO.Path]::GetExtension( $path ) ) {
|
||
|
|
{ $_ -in '.ps1', '.xml' } { [System.Text.Encoding]::UTF8; }
|
||
|
|
{ $_ -in '.reg', '.vbs', '.js' } { [System.Text.UnicodeEncoding]::new( $false, $true ); }
|
||
|
|
default { [System.Text.Encoding]::Default; }
|
||
|
|
};
|
||
|
|
$bytes = $encoding.GetPreamble() + $encoding.GetBytes( $file.InnerText.Trim() );
|
||
|
|
[System.IO.File]::WriteAllBytes( $path, $bytes );
|
||
|
|
}
|
||
|
|
</ExtractScript>
|
||
|
|
<File path="C:\Windows\Setup\Scripts\RemovePackages.ps1">
|
||
|
|
$selectors = @(
|
||
|
|
'Microsoft.BingSearch';
|
||
|
|
'Clipchamp.Clipchamp';
|
||
|
|
'Microsoft.549981C3F5F10';
|
||
|
|
'Microsoft.Windows.DevHome';
|
||
|
|
'MicrosoftCorporationII.MicrosoftFamily';
|
||
|
|
'Microsoft.WindowsFeedbackHub';
|
||
|
|
'Microsoft.Edge.GameAssist';
|
||
|
|
'Microsoft.GetHelp';
|
||
|
|
'Microsoft.Getstarted';
|
||
|
|
'microsoft.windowscommunicationsapps';
|
||
|
|
'Microsoft.WindowsMaps';
|
||
|
|
'Microsoft.MixedReality.Portal';
|
||
|
|
'Microsoft.BingNews';
|
||
|
|
'Microsoft.MicrosoftOfficeHub';
|
||
|
|
'Microsoft.Office.OneNote';
|
||
|
|
'Microsoft.OutlookForWindows';
|
||
|
|
'Microsoft.People';
|
||
|
|
'Microsoft.PowerAutomateDesktop';
|
||
|
|
'MicrosoftCorporationII.QuickAssist';
|
||
|
|
'Microsoft.SkypeApp';
|
||
|
|
'Microsoft.MicrosoftSolitaireCollection';
|
||
|
|
'Microsoft.MicrosoftStickyNotes';
|
||
|
|
'MicrosoftTeams';
|
||
|
|
'MSTeams';
|
||
|
|
'Microsoft.Todos';
|
||
|
|
'Microsoft.WindowsSoundRecorder';
|
||
|
|
'Microsoft.Wallet';
|
||
|
|
'Microsoft.BingWeather';
|
||
|
|
'Microsoft.Xbox.TCUI';
|
||
|
|
'Microsoft.XboxApp';
|
||
|
|
'Microsoft.XboxGameOverlay';
|
||
|
|
'Microsoft.XboxGamingOverlay';
|
||
|
|
'Microsoft.XboxIdentityProvider';
|
||
|
|
'Microsoft.XboxSpeechToTextOverlay';
|
||
|
|
'Microsoft.GamingApp';
|
||
|
|
'Microsoft.YourPhone';
|
||
|
|
'Microsoft.ZuneVideo';
|
||
|
|
);
|
||
|
|
$getCommand = {
|
||
|
|
Get-AppxProvisionedPackage -Online;
|
||
|
|
};
|
||
|
|
$filterCommand = {
|
||
|
|
$_.DisplayName -eq $selector;
|
||
|
|
};
|
||
|
|
$removeCommand = {
|
||
|
|
[CmdletBinding()]
|
||
|
|
param(
|
||
|
|
[Parameter( Mandatory, ValueFromPipeline )]
|
||
|
|
$InputObject
|
||
|
|
);
|
||
|
|
process {
|
||
|
|
$InputObject | Remove-AppxProvisionedPackage -AllUsers -Online -ErrorAction 'Continue';
|
||
|
|
}
|
||
|
|
};
|
||
|
|
$type = 'Package';
|
||
|
|
$logfile = 'C:\Windows\Setup\Scripts\RemovePackages.log';
|
||
|
|
& {
|
||
|
|
$installed = & $getCommand;
|
||
|
|
foreach( $selector in $selectors ) {
|
||
|
|
$result = [ordered] @{
|
||
|
|
Selector = $selector;
|
||
|
|
};
|
||
|
|
$found = $installed | Where-Object -FilterScript $filterCommand;
|
||
|
|
if( $found ) {
|
||
|
|
$result.Output = $found | & $removeCommand;
|
||
|
|
if( $? ) {
|
||
|
|
$result.Message = "$type removed.";
|
||
|
|
} else {
|
||
|
|
$result.Message = "$type not removed.";
|
||
|
|
$result.Error = $Error[0];
|
||
|
|
}
|
||
|
|
} else {
|
||
|
|
$result.Message = "$type not installed.";
|
||
|
|
}
|
||
|
|
$result | ConvertTo-Json -Depth 3 -Compress;
|
||
|
|
}
|
||
|
|
} *>&1 >> $logfile;
|
||
|
|
</File>
|
||
|
|
<File path="C:\Windows\Setup\Scripts\RemoveCapabilities.ps1">
|
||
|
|
$selectors = @(
|
||
|
|
'Print.Fax.Scan';
|
||
|
|
'Language.Handwriting';
|
||
|
|
'MathRecognizer';
|
||
|
|
'OneCoreUAP.OneSync';
|
||
|
|
'OpenSSH.Client';
|
||
|
|
'App.Support.QuickAssist';
|
||
|
|
'Language.Speech';
|
||
|
|
'Language.TextToSpeech';
|
||
|
|
'App.StepsRecorder';
|
||
|
|
'Hello.Face.18967';
|
||
|
|
'Hello.Face.Migration.18967';
|
||
|
|
'Hello.Face.20134';
|
||
|
|
);
|
||
|
|
$getCommand = {
|
||
|
|
Get-WindowsCapability -Online | Where-Object -Property 'State' -NotIn -Value @(
|
||
|
|
'NotPresent';
|
||
|
|
'Removed';
|
||
|
|
);
|
||
|
|
};
|
||
|
|
$filterCommand = {
|
||
|
|
($_.Name -split '~')[0] -eq $selector;
|
||
|
|
};
|
||
|
|
$removeCommand = {
|
||
|
|
[CmdletBinding()]
|
||
|
|
param(
|
||
|
|
[Parameter( Mandatory, ValueFromPipeline )]
|
||
|
|
$InputObject
|
||
|
|
);
|
||
|
|
process {
|
||
|
|
$InputObject | Remove-WindowsCapability -Online -ErrorAction 'Continue';
|
||
|
|
}
|
||
|
|
};
|
||
|
|
$type = 'Capability';
|
||
|
|
$logfile = 'C:\Windows\Setup\Scripts\RemoveCapabilities.log';
|
||
|
|
& {
|
||
|
|
$installed = & $getCommand;
|
||
|
|
foreach( $selector in $selectors ) {
|
||
|
|
$result = [ordered] @{
|
||
|
|
Selector = $selector;
|
||
|
|
};
|
||
|
|
$found = $installed | Where-Object -FilterScript $filterCommand;
|
||
|
|
if( $found ) {
|
||
|
|
$result.Output = $found | & $removeCommand;
|
||
|
|
if( $? ) {
|
||
|
|
$result.Message = "$type removed.";
|
||
|
|
} else {
|
||
|
|
$result.Message = "$type not removed.";
|
||
|
|
$result.Error = $Error[0];
|
||
|
|
}
|
||
|
|
} else {
|
||
|
|
$result.Message = "$type not installed.";
|
||
|
|
}
|
||
|
|
$result | ConvertTo-Json -Depth 3 -Compress;
|
||
|
|
}
|
||
|
|
} *>&1 >> $logfile;
|
||
|
|
</File>
|
||
|
|
<File path="C:\Windows\Setup\Scripts\RemoveFeatures.ps1">
|
||
|
|
$selectors = @(
|
||
|
|
'MediaPlayback';
|
||
|
|
'Recall';
|
||
|
|
);
|
||
|
|
$getCommand = {
|
||
|
|
Get-WindowsOptionalFeature -Online | Where-Object -Property 'State' -NotIn -Value @(
|
||
|
|
'Disabled';
|
||
|
|
'DisabledWithPayloadRemoved';
|
||
|
|
);
|
||
|
|
};
|
||
|
|
$filterCommand = {
|
||
|
|
$_.FeatureName -eq $selector;
|
||
|
|
};
|
||
|
|
$removeCommand = {
|
||
|
|
[CmdletBinding()]
|
||
|
|
param(
|
||
|
|
[Parameter( Mandatory, ValueFromPipeline )]
|
||
|
|
$InputObject
|
||
|
|
);
|
||
|
|
process {
|
||
|
|
$InputObject | Disable-WindowsOptionalFeature -Online -Remove -NoRestart -ErrorAction 'Continue';
|
||
|
|
}
|
||
|
|
};
|
||
|
|
$type = 'Feature';
|
||
|
|
$logfile = 'C:\Windows\Setup\Scripts\RemoveFeatures.log';
|
||
|
|
& {
|
||
|
|
$installed = & $getCommand;
|
||
|
|
foreach( $selector in $selectors ) {
|
||
|
|
$result = [ordered] @{
|
||
|
|
Selector = $selector;
|
||
|
|
};
|
||
|
|
$found = $installed | Where-Object -FilterScript $filterCommand;
|
||
|
|
if( $found ) {
|
||
|
|
$result.Output = $found | & $removeCommand;
|
||
|
|
if( $? ) {
|
||
|
|
$result.Message = "$type removed.";
|
||
|
|
} else {
|
||
|
|
$result.Message = "$type not removed.";
|
||
|
|
$result.Error = $Error[0];
|
||
|
|
}
|
||
|
|
} else {
|
||
|
|
$result.Message = "$type not installed.";
|
||
|
|
}
|
||
|
|
$result | ConvertTo-Json -Depth 3 -Compress;
|
||
|
|
}
|
||
|
|
} *>&1 >> $logfile;
|
||
|
|
</File>
|
||
|
|
<File path="C:\Windows\Setup\Scripts\TaskbarLayoutModification.xml">
|
||
|
|
<LayoutModificationTemplate xmlns="http://schemas.microsoft.com/Start/2014/LayoutModification" xmlns:defaultlayout="http://schemas.microsoft.com/Start/2014/FullDefaultLayout" xmlns:start="http://schemas.microsoft.com/Start/2014/StartLayout" xmlns:taskbar="http://schemas.microsoft.com/Start/2014/TaskbarLayout" Version="1">
|
||
|
|
<CustomTaskbarLayoutCollection PinListPlacement="Replace">
|
||
|
|
<defaultlayout:TaskbarLayout>
|
||
|
|
<taskbar:TaskbarPinList>
|
||
|
|
<taskbar:DesktopApp DesktopApplicationLinkPath="#leaveempty" />
|
||
|
|
</taskbar:TaskbarPinList>
|
||
|
|
</defaultlayout:TaskbarLayout>
|
||
|
|
</CustomTaskbarLayoutCollection>
|
||
|
|
</LayoutModificationTemplate>
|
||
|
|
</File>
|
||
|
|
<File path="C:\Windows\Setup\Scripts\UnlockStartLayout.vbs">
|
||
|
|
HKU = &H80000003
|
||
|
|
Set reg = GetObject("winmgmts://./root/default:StdRegProv")
|
||
|
|
Set fso = CreateObject("Scripting.FileSystemObject")
|
||
|
|
|
||
|
|
If reg.EnumKey(HKU, "", sids) = 0 Then
|
||
|
|
If Not IsNull(sids) Then
|
||
|
|
For Each sid In sids
|
||
|
|
key = sid + "\Software\Policies\Microsoft\Windows\Explorer"
|
||
|
|
name = "LockedStartLayout"
|
||
|
|
If reg.GetDWORDValue(HKU, key, name, existing) = 0 Then
|
||
|
|
reg.SetDWORDValue HKU, key, name, 0
|
||
|
|
End If
|
||
|
|
Next
|
||
|
|
End If
|
||
|
|
End If
|
||
|
|
</File>
|
||
|
|
<File path="C:\Windows\Setup\Scripts\UnlockStartLayout.xml">
|
||
|
|
<Task version="1.2" xmlns="http://schemas.microsoft.com/windows/2004/02/mit/task">
|
||
|
|
<Triggers>
|
||
|
|
<EventTrigger>
|
||
|
|
<Enabled>true</Enabled>
|
||
|
|
<Subscription>&lt;QueryList&gt;&lt;Query Id="0" Path="Application"&gt;&lt;Select Path="Application"&gt;*[System[Provider[@Name='UnattendGenerator'] and EventID=1]]&lt;/Select&gt;&lt;/Query&gt;&lt;/QueryList&gt;</Subscription>
|
||
|
|
</EventTrigger>
|
||
|
|
</Triggers>
|
||
|
|
<Principals>
|
||
|
|
<Principal id="Author">
|
||
|
|
<UserId>S-1-5-18</UserId>
|
||
|
|
<RunLevel>LeastPrivilege</RunLevel>
|
||
|
|
</Principal>
|
||
|
|
</Principals>
|
||
|
|
<Settings>
|
||
|
|
<MultipleInstancesPolicy>IgnoreNew</MultipleInstancesPolicy>
|
||
|
|
<DisallowStartIfOnBatteries>false</DisallowStartIfOnBatteries>
|
||
|
|
<StopIfGoingOnBatteries>false</StopIfGoingOnBatteries>
|
||
|
|
<AllowHardTerminate>true</AllowHardTerminate>
|
||
|
|
<StartWhenAvailable>false</StartWhenAvailable>
|
||
|
|
<RunOnlyIfNetworkAvailable>false</RunOnlyIfNetworkAvailable>
|
||
|
|
<IdleSettings>
|
||
|
|
<StopOnIdleEnd>true</StopOnIdleEnd>
|
||
|
|
<RestartOnIdle>false</RestartOnIdle>
|
||
|
|
</IdleSettings>
|
||
|
|
<AllowStartOnDemand>true</AllowStartOnDemand>
|
||
|
|
<Enabled>true</Enabled>
|
||
|
|
<Hidden>false</Hidden>
|
||
|
|
<RunOnlyIfIdle>false</RunOnlyIfIdle>
|
||
|
|
<WakeToRun>false</WakeToRun>
|
||
|
|
<ExecutionTimeLimit>PT72H</ExecutionTimeLimit>
|
||
|
|
<Priority>7</Priority>
|
||
|
|
</Settings>
|
||
|
|
<Actions Context="Author">
|
||
|
|
<Exec>
|
||
|
|
<Command>C:\Windows\System32\wscript.exe</Command>
|
||
|
|
<Arguments>C:\Windows\Setup\Scripts\UnlockStartLayout.vbs</Arguments>
|
||
|
|
</Exec>
|
||
|
|
</Actions>
|
||
|
|
</Task>
|
||
|
|
</File>
|
||
|
|
<File path="C:\Windows\Setup\Scripts\MoveActiveHours.vbs">
|
||
|
|
HKLM = &H80000002
|
||
|
|
key = "SOFTWARE\Microsoft\WindowsUpdate\UX\Settings"
|
||
|
|
Set reg = GetObject("winmgmts://./root/default:StdRegProv")
|
||
|
|
current = Hour(Now)
|
||
|
|
reg.SetDWORDValue HKLM, key, "ActiveHoursStart", ( current + 23 ) Mod 24
|
||
|
|
reg.SetDWORDValue HKLM, key, "ActiveHoursEnd", ( current + 11 ) Mod 24
|
||
|
|
reg.SetDWORDValue HKLM, key, "SmartActiveHoursState", 2
|
||
|
|
</File>
|
||
|
|
<File path="C:\Windows\Setup\Scripts\MoveActiveHours.xml">
|
||
|
|
<Task version="1.2" xmlns="http://schemas.microsoft.com/windows/2004/02/mit/task">
|
||
|
|
<Triggers>
|
||
|
|
<BootTrigger>
|
||
|
|
<Repetition>
|
||
|
|
<Interval>PT4H</Interval>
|
||
|
|
<StopAtDurationEnd>false</StopAtDurationEnd>
|
||
|
|
</Repetition>
|
||
|
|
<Enabled>true</Enabled>
|
||
|
|
</BootTrigger>
|
||
|
|
<RegistrationTrigger>
|
||
|
|
<Repetition>
|
||
|
|
<Interval>PT4H</Interval>
|
||
|
|
<StopAtDurationEnd>false</StopAtDurationEnd>
|
||
|
|
</Repetition>
|
||
|
|
<Enabled>true</Enabled>
|
||
|
|
</RegistrationTrigger>
|
||
|
|
</Triggers>
|
||
|
|
<Principals>
|
||
|
|
<Principal id="Author">
|
||
|
|
<UserId>S-1-5-19</UserId>
|
||
|
|
<RunLevel>LeastPrivilege</RunLevel>
|
||
|
|
</Principal>
|
||
|
|
</Principals>
|
||
|
|
<Settings>
|
||
|
|
<MultipleInstancesPolicy>IgnoreNew</MultipleInstancesPolicy>
|
||
|
|
<DisallowStartIfOnBatteries>false</DisallowStartIfOnBatteries>
|
||
|
|
<StopIfGoingOnBatteries>false</StopIfGoingOnBatteries>
|
||
|
|
<AllowHardTerminate>true</AllowHardTerminate>
|
||
|
|
<StartWhenAvailable>false</StartWhenAvailable>
|
||
|
|
<RunOnlyIfNetworkAvailable>false</RunOnlyIfNetworkAvailable>
|
||
|
|
<IdleSettings>
|
||
|
|
<StopOnIdleEnd>true</StopOnIdleEnd>
|
||
|
|
<RestartOnIdle>false</RestartOnIdle>
|
||
|
|
</IdleSettings>
|
||
|
|
<AllowStartOnDemand>true</AllowStartOnDemand>
|
||
|
|
<Enabled>true</Enabled>
|
||
|
|
<Hidden>false</Hidden>
|
||
|
|
<RunOnlyIfIdle>false</RunOnlyIfIdle>
|
||
|
|
<WakeToRun>false</WakeToRun>
|
||
|
|
<ExecutionTimeLimit>PT72H</ExecutionTimeLimit>
|
||
|
|
<Priority>7</Priority>
|
||
|
|
</Settings>
|
||
|
|
<Actions Context="Author">
|
||
|
|
<Exec>
|
||
|
|
<Command>C:\Windows\System32\wscript.exe</Command>
|
||
|
|
<Arguments>C:\Windows\Setup\Scripts\MoveActiveHours.vbs</Arguments>
|
||
|
|
</Exec>
|
||
|
|
</Actions>
|
||
|
|
</Task>
|
||
|
|
</File>
|
||
|
|
<File path="C:\Windows\Setup\Scripts\SetStartPins.ps1">
|
||
|
|
$json = '{"pinnedList":[]}';
|
||
|
|
if( [System.Environment]::OSVersion.Version.Build -lt 20000 ) {
|
||
|
|
return;
|
||
|
|
}
|
||
|
|
$key = 'Registry::HKLM\SOFTWARE\Microsoft\PolicyManager\current\device\Start';
|
||
|
|
New-Item -Path $key -ItemType 'Directory' -ErrorAction 'SilentlyContinue';
|
||
|
|
Set-ItemProperty -LiteralPath $key -Name 'ConfigureStartPins' -Value $json -Type 'String';
|
||
|
|
</File>
|
||
|
|
<File path="C:\Windows\Setup\Scripts\Specialize.ps1">
|
||
|
|
$scripts = @(
|
||
|
|
{
|
||
|
|
Remove-Item -LiteralPath 'Registry::HKLM\Software\Microsoft\WindowsUpdate\Orchestrator\UScheduler_Oobe\DevHomeUpdate' -Force -ErrorAction 'SilentlyContinue';
|
||
|
|
};
|
||
|
|
{
|
||
|
|
Remove-Item -LiteralPath 'Registry::HKLM\Software\Microsoft\WindowsUpdate\Orchestrator\UScheduler_Oobe\OutlookUpdate' -Force -ErrorAction 'SilentlyContinue';
|
||
|
|
};
|
||
|
|
{
|
||
|
|
reg.exe add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Communications" /v ConfigureChatAutoInstall /t REG_DWORD /d 0 /f;
|
||
|
|
};
|
||
|
|
{
|
||
|
|
Get-Content -LiteralPath 'C:\Windows\Setup\Scripts\RemovePackages.ps1' -Raw | Invoke-Expression;
|
||
|
|
};
|
||
|
|
{
|
||
|
|
Get-Content -LiteralPath 'C:\Windows\Setup\Scripts\RemoveCapabilities.ps1' -Raw | Invoke-Expression;
|
||
|
|
};
|
||
|
|
{
|
||
|
|
Get-Content -LiteralPath 'C:\Windows\Setup\Scripts\RemoveFeatures.ps1' -Raw | Invoke-Expression;
|
||
|
|
};
|
||
|
|
{
|
||
|
|
net.exe accounts /maxpwage:UNLIMITED;
|
||
|
|
};
|
||
|
|
{
|
||
|
|
reg.exe add "HKLM\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableCloudOptimizedContent" /t REG_DWORD /d 1 /f;
|
||
|
|
[System.Diagnostics.EventLog]::CreateEventSource( 'UnattendGenerator', 'Application' );
|
||
|
|
};
|
||
|
|
{
|
||
|
|
Register-ScheduledTask -TaskName 'UnlockStartLayout' -Xml $( Get-Content -LiteralPath 'C:\Windows\Setup\Scripts\UnlockStartLayout.xml' -Raw );
|
||
|
|
};
|
||
|
|
{
|
||
|
|
reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\FileSystem" /v LongPathsEnabled /t REG_DWORD /d 1 /f
|
||
|
|
};
|
||
|
|
{
|
||
|
|
reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" /v AUOptions /t REG_DWORD /d 4 /f;
|
||
|
|
reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" /v NoAutoRebootWithLoggedOnUsers /t REG_DWORD /d 1 /f;
|
||
|
|
};
|
||
|
|
{
|
||
|
|
Register-ScheduledTask -TaskName 'MoveActiveHours' -Xml $( Get-Content -LiteralPath 'C:\Windows\Setup\Scripts\MoveActiveHours.xml' -Raw );
|
||
|
|
};
|
||
|
|
{
|
||
|
|
reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Dsh" /v AllowNewsAndInterests /t REG_DWORD /d 0 /f;
|
||
|
|
};
|
||
|
|
{
|
||
|
|
reg.exe add "HKLM\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableWindowsConsumerFeatures" /t REG_DWORD /d 1 /f;
|
||
|
|
};
|
||
|
|
{
|
||
|
|
reg.exe add "HKLM\Software\Policies\Microsoft\Edge" /v HideFirstRunExperience /t REG_DWORD /d 1 /f;
|
||
|
|
};
|
||
|
|
{
|
||
|
|
reg.exe add "HKLM\Software\Policies\Microsoft\Edge\Recommended" /v BackgroundModeEnabled /t REG_DWORD /d 0 /f;
|
||
|
|
reg.exe add "HKLM\Software\Policies\Microsoft\Edge\Recommended" /v StartupBoostEnabled /t REG_DWORD /d 0 /f;
|
||
|
|
};
|
||
|
|
{
|
||
|
|
Get-Content -LiteralPath 'C:\Windows\Setup\Scripts\SetStartPins.ps1' -Raw | Invoke-Expression;
|
||
|
|
};
|
||
|
|
{
|
||
|
|
reg.exe add "HKU\.DEFAULT\Control Panel\Accessibility\StickyKeys" /v Flags /t REG_SZ /d 10 /f;
|
||
|
|
};
|
||
|
|
);
|
||
|
|
|
||
|
|
& {
|
||
|
|
[float] $complete = 0;
|
||
|
|
[float] $increment = 100 / $scripts.Count;
|
||
|
|
foreach( $script in $scripts ) {
|
||
|
|
Write-Progress -Activity 'Running scripts to customize your Windows installation. Do not close this window.' -PercentComplete $complete;
|
||
|
|
'*** Will now execute command «{0}».' -f $(
|
||
|
|
$str = $script.ToString().Trim() -replace '\s+', ' ';
|
||
|
|
$max = 100;
|
||
|
|
if( $str.Length -le $max ) {
|
||
|
|
$str;
|
||
|
|
} else {
|
||
|
|
$str.Substring( 0, $max - 1 ) + '…';
|
||
|
|
}
|
||
|
|
);
|
||
|
|
$start = [datetime]::Now;
|
||
|
|
& $script;
|
||
|
|
'*** Finished executing command after {0:0} ms.' -f [datetime]::Now.Subtract( $start ).TotalMilliseconds;
|
||
|
|
"`r`n" * 3;
|
||
|
|
$complete += $increment;
|
||
|
|
}
|
||
|
|
} *>&1 >> "C:\Windows\Setup\Scripts\Specialize.log";
|
||
|
|
</File>
|
||
|
|
<File path="C:\Windows\Setup\Scripts\UserOnce.ps1">
|
||
|
|
$scripts = @(
|
||
|
|
{
|
||
|
|
Get-AppxPackage -Name 'Microsoft.Windows.Ai.Copilot.Provider' | Remove-AppxPackage;
|
||
|
|
};
|
||
|
|
{
|
||
|
|
[System.Diagnostics.EventLog]::WriteEntry( 'UnattendGenerator', "User '$env:USERNAME' has requested to unlock the Start menu layout.", [System.Diagnostics.EventLogEntryType]::Information, 1 );
|
||
|
|
};
|
||
|
|
{
|
||
|
|
reg.exe add "HKCU\Software\Classes\CLSID\{86ca1aa0-34aa-4e8b-a509-50c905bae2a2}\InprocServer32" /ve /f;
|
||
|
|
};
|
||
|
|
{
|
||
|
|
Set-ItemProperty -LiteralPath 'Registry::HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced' -Name 'LaunchTo' -Type 'DWord' -Value 1;
|
||
|
|
};
|
||
|
|
{
|
||
|
|
Set-ItemProperty -LiteralPath 'Registry::HKCU\Software\Microsoft\Windows\CurrentVersion\Search' -Name 'SearchboxTaskbarMode' -Type 'DWord' -Value 0;
|
||
|
|
};
|
||
|
|
{
|
||
|
|
Get-Process -Name 'explorer' -ErrorAction 'SilentlyContinue' | Where-Object -FilterScript {
|
||
|
|
$_.SessionId -eq ( Get-Process -Id $PID ).SessionId;
|
||
|
|
} | Stop-Process -Force;
|
||
|
|
};
|
||
|
|
);
|
||
|
|
|
||
|
|
& {
|
||
|
|
[float] $complete = 0;
|
||
|
|
[float] $increment = 100 / $scripts.Count;
|
||
|
|
foreach( $script in $scripts ) {
|
||
|
|
Write-Progress -Activity 'Running scripts to configure this user account. Do not close this window.' -PercentComplete $complete;
|
||
|
|
'*** Will now execute command «{0}».' -f $(
|
||
|
|
$str = $script.ToString().Trim() -replace '\s+', ' ';
|
||
|
|
$max = 100;
|
||
|
|
if( $str.Length -le $max ) {
|
||
|
|
$str;
|
||
|
|
} else {
|
||
|
|
$str.Substring( 0, $max - 1 ) + '…';
|
||
|
|
}
|
||
|
|
);
|
||
|
|
$start = [datetime]::Now;
|
||
|
|
& $script;
|
||
|
|
'*** Finished executing command after {0:0} ms.' -f [datetime]::Now.Subtract( $start ).TotalMilliseconds;
|
||
|
|
"`r`n" * 3;
|
||
|
|
$complete += $increment;
|
||
|
|
}
|
||
|
|
} *>&1 >> "$env:TEMP\UserOnce.log";
|
||
|
|
</File>
|
||
|
|
<File path="C:\Windows\Setup\Scripts\DefaultUser.ps1">
|
||
|
|
$scripts = @(
|
||
|
|
{
|
||
|
|
reg.exe add "HKU\DefaultUser\Software\Policies\Microsoft\Windows\WindowsCopilot" /v TurnOffWindowsCopilot /t REG_DWORD /d 1 /f;
|
||
|
|
};
|
||
|
|
{
|
||
|
|
reg.exe add "HKU\DefaultUser\Software\Microsoft\Windows\CurrentVersion\GameDVR" /v AppCaptureEnabled /t REG_DWORD /d 0 /f;
|
||
|
|
};
|
||
|
|
{
|
||
|
|
reg.exe add "HKU\DefaultUser\Software\Policies\Microsoft\Windows\Explorer" /v "StartLayoutFile" /t REG_SZ /d "C:\Windows\Setup\Scripts\TaskbarLayoutModification.xml" /f;
|
||
|
|
reg.exe add "HKU\DefaultUser\Software\Policies\Microsoft\Windows\Explorer" /v "LockedStartLayout" /t REG_DWORD /d 1 /f;
|
||
|
|
};
|
||
|
|
{
|
||
|
|
reg.exe add "HKU\DefaultUser\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "HideFileExt" /t REG_DWORD /d 0 /f;
|
||
|
|
};
|
||
|
|
{
|
||
|
|
reg.exe add "HKU\DefaultUser\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "Hidden" /t REG_DWORD /d 1 /f;
|
||
|
|
};
|
||
|
|
{
|
||
|
|
reg.exe add "HKU\DefaultUser\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "ShowSuperHidden" /t REG_DWORD /d 1 /f;
|
||
|
|
};
|
||
|
|
{
|
||
|
|
reg.exe add "HKU\DefaultUser\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v ShowTaskViewButton /t REG_DWORD /d 0 /f;
|
||
|
|
};
|
||
|
|
{
|
||
|
|
$names = @(
|
||
|
|
'ContentDeliveryAllowed';
|
||
|
|
'FeatureManagementEnabled';
|
||
|
|
'OEMPreInstalledAppsEnabled';
|
||
|
|
'PreInstalledAppsEnabled';
|
||
|
|
'PreInstalledAppsEverEnabled';
|
||
|
|
'SilentInstalledAppsEnabled';
|
||
|
|
'SoftLandingEnabled';
|
||
|
|
'SubscribedContentEnabled';
|
||
|
|
'SubscribedContent-310093Enabled';
|
||
|
|
'SubscribedContent-338387Enabled';
|
||
|
|
'SubscribedContent-338388Enabled';
|
||
|
|
'SubscribedContent-338389Enabled';
|
||
|
|
'SubscribedContent-338393Enabled';
|
||
|
|
'SubscribedContent-353694Enabled';
|
||
|
|
'SubscribedContent-353696Enabled';
|
||
|
|
'SubscribedContent-353698Enabled';
|
||
|
|
'SystemPaneSuggestionsEnabled';
|
||
|
|
);
|
||
|
|
|
||
|
|
foreach( $name in $names ) {
|
||
|
|
reg.exe add "HKU\DefaultUser\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v $name /t REG_DWORD /d 0 /f;
|
||
|
|
}
|
||
|
|
};
|
||
|
|
{
|
||
|
|
$params = @{
|
||
|
|
LiteralPath = 'Registry::HKU\DefaultUser\Control Panel\Mouse';
|
||
|
|
Type = 'String';
|
||
|
|
Value = 0;
|
||
|
|
Force = $true;
|
||
|
|
};
|
||
|
|
Set-ItemProperty @params -Name 'MouseSpeed';
|
||
|
|
Set-ItemProperty @params -Name 'MouseThreshold1';
|
||
|
|
Set-ItemProperty @params -Name 'MouseThreshold2';
|
||
|
|
};
|
||
|
|
{
|
||
|
|
reg.exe add "HKU\DefaultUser\Software\Policies\Microsoft\Windows\Explorer" /v DisableSearchBoxSuggestions /t REG_DWORD /d 1 /f;
|
||
|
|
};
|
||
|
|
{
|
||
|
|
reg.exe add "HKU\DefaultUser\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced\TaskbarDeveloperSettings" /v TaskbarEndTask /t REG_DWORD /d 1 /f;
|
||
|
|
};
|
||
|
|
{
|
||
|
|
reg.exe add "HKU\DefaultUser\Control Panel\Accessibility\StickyKeys" /v Flags /t REG_SZ /d 10 /f;
|
||
|
|
};
|
||
|
|
{
|
||
|
|
reg.exe add "HKU\DefaultUser\Software\Microsoft\Windows\CurrentVersion\RunOnce" /v "UnattendedSetup" /t REG_SZ /d "powershell.exe -WindowStyle Normal -NoProfile -Command \""Get-Content -LiteralPath 'C:\Windows\Setup\Scripts\UserOnce.ps1' -Raw | Invoke-Expression;\""" /f;
|
||
|
|
};
|
||
|
|
);
|
||
|
|
|
||
|
|
& {
|
||
|
|
[float] $complete = 0;
|
||
|
|
[float] $increment = 100 / $scripts.Count;
|
||
|
|
foreach( $script in $scripts ) {
|
||
|
|
Write-Progress -Activity 'Running scripts to modify the default user’’s registry hive. Do not close this window.' -PercentComplete $complete;
|
||
|
|
'*** Will now execute command «{0}».' -f $(
|
||
|
|
$str = $script.ToString().Trim() -replace '\s+', ' ';
|
||
|
|
$max = 100;
|
||
|
|
if( $str.Length -le $max ) {
|
||
|
|
$str;
|
||
|
|
} else {
|
||
|
|
$str.Substring( 0, $max - 1 ) + '…';
|
||
|
|
}
|
||
|
|
);
|
||
|
|
$start = [datetime]::Now;
|
||
|
|
& $script;
|
||
|
|
'*** Finished executing command after {0:0} ms.' -f [datetime]::Now.Subtract( $start ).TotalMilliseconds;
|
||
|
|
"`r`n" * 3;
|
||
|
|
$complete += $increment;
|
||
|
|
}
|
||
|
|
} *>&1 >> "C:\Windows\Setup\Scripts\DefaultUser.log";
|
||
|
|
</File>
|
||
|
|
<File path="C:\Windows\Setup\Scripts\FirstLogon.ps1">
|
||
|
|
$scripts = @(
|
||
|
|
{
|
||
|
|
cmd.exe /c "rmdir C:\Windows.old";
|
||
|
|
};
|
||
|
|
{
|
||
|
|
Remove-Item -LiteralPath @(
|
||
|
|
'C:\Windows\Panther\unattend.xml';
|
||
|
|
'C:\Windows\Panther\unattend-original.xml';
|
||
|
|
'C:\Windows\Setup\Scripts\Wifi.xml';
|
||
|
|
) -Force -ErrorAction 'SilentlyContinue' -Verbose;
|
||
|
|
};
|
||
|
|
);
|
||
|
|
|
||
|
|
& {
|
||
|
|
[float] $complete = 0;
|
||
|
|
[float] $increment = 100 / $scripts.Count;
|
||
|
|
foreach( $script in $scripts ) {
|
||
|
|
Write-Progress -Activity 'Running scripts to finalize your Windows installation. Do not close this window.' -PercentComplete $complete;
|
||
|
|
'*** Will now execute command «{0}».' -f $(
|
||
|
|
$str = $script.ToString().Trim() -replace '\s+', ' ';
|
||
|
|
$max = 100;
|
||
|
|
if( $str.Length -le $max ) {
|
||
|
|
$str;
|
||
|
|
} else {
|
||
|
|
$str.Substring( 0, $max - 1 ) + '…';
|
||
|
|
}
|
||
|
|
);
|
||
|
|
$start = [datetime]::Now;
|
||
|
|
& $script;
|
||
|
|
'*** Finished executing command after {0:0} ms.' -f [datetime]::Now.Subtract( $start ).TotalMilliseconds;
|
||
|
|
"`r`n" * 3;
|
||
|
|
$complete += $increment;
|
||
|
|
}
|
||
|
|
} *>&1 >> "C:\Windows\Setup\Scripts\FirstLogon.log";
|
||
|
|
</File>
|
||
|
|
</Extensions>
|
||
|
|
</unattend>
|