Skip to content

Commit

Permalink
Removed forced Pro edition, remove browser policies, defined new list…
Browse files Browse the repository at this point in the history
… of services. (#191)

* ### v2.1.0 Changes
#### `autounattend.xml` Changes
- Removed the forced Pro edition enforcement. This is so the answer file can still be used with Home and especially Enterprise versions like LTSC.
- Added an order to temporarily disable all network adapters so Windows Updates aren't installed during the OOBE phase. (This should stop Windows Defender from being Enabled automatically.)
- Added a FirstLogon command that enables the network adapter again when the first user loads in after the OOBE phase.

#### `autounattend.xml` & `UWScript.ps1` Changes
- Removed Microsoft Edge and Google Chrome Policies as it seems to negatively impact user browsing experience.
- Defined a new list of services that should be set to Disabled and Manual as the original list in v2.0.0 caused issues. The process count isn't as low as before but Windows should be more functional.
  • Loading branch information
memstechtips authored Nov 28, 2024
1 parent f971a88 commit d1b1a53
Show file tree
Hide file tree
Showing 3 changed files with 206 additions and 127 deletions.
11 changes: 11 additions & 0 deletions CHANGELOG.md
Original file line number Diff line number Diff line change
@@ -1,5 +1,16 @@
# Updates

## 28/11/2024
### v2.1.0 Changes
#### `autounattend.xml` Changes
- Removed the forced Pro edition enforcement. This is so the answer file can still be used with Home and especially Enterprise versions like LTSC.
- Added an order to temporarily disable all network adapters so Windows Updates aren't installed during the OOBE phase. (This should stop Windows Defender from being Enabled automatically.)
- Added a FirstLogon command that enables the network adapter again when the first user loads in after the OOBE phase.

#### `autounattend.xml` & `UWScript.ps1` Changes
- Removed Microsoft Edge and Google Chrome Policies as it seems to negatively impact user browsing experience.
- Defined a new list of services that should be set to Disabled and Manual as the original list in v2.0.0 caused issues. The process count isn't as low as before but Windows should be more functional.

## 1/11/2024
- Released UnattendedWinstall v2.0.0

Expand Down
112 changes: 50 additions & 62 deletions UWScript.ps1
Original file line number Diff line number Diff line change
Expand Up @@ -1185,37 +1185,6 @@ Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsStore]
"AutoDownload"=dword:00000002
; EDGE
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge]
"StartupBoostEnabled"=dword:00000000
"HardwareAccelerationModeEnabled"=dword:00000000
"BackgroundModeEnabled"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MicrosoftEdgeElevationService]
"Start"=dword:00000004
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\edgeupdate]
"Start"=dword:00000004
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\edgeupdatem]
"Start"=dword:00000004
; CHROME
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome]
"StartupBoostEnabled"=dword:00000000
"HardwareAccelerationModeEnabled"=dword:00000000
"BackgroundModeEnabled"=dword:00000000
"HighEfficiencyModeEnabled"=dword:00000001
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\GoogleChromeElevationService]
"Start"=dword:00000004
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gupdate]
"Start"=dword:00000004
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gupdatem]
"Start"=dword:00000004
; UWP APPS
; disable background apps
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy]
Expand Down Expand Up @@ -1455,30 +1424,6 @@ Windows Registry Editor Version 5.00
; Enable update Microsoft Store apps automatically
[-HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsStore]
; EDGE
[-HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MicrosoftEdgeElevationService]
"Start"=dword:00000002
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\edgeupdate]
"Start"=dword:00000002
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\edgeupdatem]
"Start"=dword:00000002
; CHROME
[-HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome]
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\GoogleChromeElevationService]
"Start"=dword:00000002
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gupdate]
"Start"=dword:00000002
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gupdatem]
"Start"=dword:00000002
; --CAN'T DO NATIVELY--
; UWP APPS
; background apps
Expand Down Expand Up @@ -2398,20 +2343,63 @@ Windows Registry Editor Version 5.00
}
# End of Registry Optimizations

# Start of Tasks and Services Functions
# Start of Tasks and Services Functions
function Set-ServiceStartup {
# List of services to set to Disabled
$disabledServices = @(
'AJRouter', 'AssignedAccessManagerSvc', 'AppIDSvc', 'BDESVC', 'DiagTrack',
'DPS', 'EFS', 'FontCache', 'PcaSvc', 'RmSvc', 'WSearch', 'WbioSrvc', 'lfsvc'
)
'AJRouter', 'AppVClient', 'AssignedAccessManagerSvc',
'DiagTrack', 'DialogBlockingService', 'NetTcpPortSharing',
'RemoteAccess', 'RemoteRegistry', 'shpamsvc',
'ssh-agent', 'tzautoupdate', 'uhssvc',
'UevAgentService'
)

# List of services to set to Manual
$manualServices = @(
'BITS', 'CDPSvc', 'DusmSvc', 'LanmanServer', 'LanmanWorkstation',
'Spooler', 'StateRepository', 'StorSvc', 'SysMain', 'TokenBroker',
'TrkWks', 'UsoSvc', 'WpnService', 'edgeupdate', 'edgeupdatem',
'iphlpsvc', 'sppsvc'
'ALG', 'AppIDSvc', 'AppMgmt', 'AppReadiness', 'AppXSvc', 'Appinfo',
'AxInstSV', 'BDESVC', 'BITS', 'BTAGService', 'BcastDVRUserService_*',
'Browser', 'CDPSvc', 'CDPUserSvc_*', 'COMSysApp', 'CaptureService_*',
'CertPropSvc', 'ClipSVC', 'ConsentUxUserSvc_*', 'CscService', 'DcpSvc',
'DevQueryBroker', 'DeviceAssociationBrokerSvc_*', 'DeviceAssociationService',
'DeviceInstall', 'DevicePickerUserSvc_*', 'DevicesFlowUserSvc_*',
'DisplayEnhancementService', 'DmEnrollmentSvc', 'DoSvc', 'DsSvc', 'DsmSvc',
'EFS', 'EapHost', 'EntAppSvc', 'FDResPub', 'Fax', 'FrameServer',
'FrameServerMonitor', 'GraphicsPerfSvc', 'HomeGroupListener',
'HomeGroupProvider', 'HvHost', 'IEEtwCollectorService', 'IKEEXT',
'InstallService', 'InventorySvc', 'IpxlatCfgSvc', 'KtmRm', 'LicenseManager',
'LxpSvc', 'MSDTC', 'MSiSCSI', 'MapsBroker', 'McpManagementService',
'MessagingService_*', 'MicrosoftEdgeElevationService',
'MixedRealityOpenXRSvc', 'MsKeyboardFilter', 'NPSMSvc_*', 'NaturalAuthentication',
'NcaSvc', 'NcbService', 'NcdAutoSetup', 'Netman', 'NgcCtnrSvc', 'NgcSvc',
'NlaSvc', 'P9RdrService_*', 'PNRPAutoReg', 'PNRPsvc', 'PcaSvc', 'PeerDistSvc',
'PenService_*', 'PerfHost', 'PhoneSvc', 'PimIndexMaintenanceSvc_*', 'PlugPlay',
'PolicyAgent', 'PrintNotify', 'PrintWorkflowUserSvc_*', 'PushToInstall', 'QWAVE',
'RasAuto', 'RasMan', 'RetailDemo', 'RmSvc', 'RpcLocator', 'SCPolicySvc',
'SCardSvr', 'SDRSVC', 'SEMgrSvc', 'SecurityHealthService',
'SensorDataService', 'SensorService', 'SensrSvc', 'SessionEnv',
'SharedAccess', 'SharedRealitySvc', 'SmsRouter', 'SstpSvc',
'StateRepository', 'StiSvc', 'StorSvc', 'TabletInputService', 'TapiSrv',
'TextInputManagementService', 'TieringEngineService', 'TimeBroker',
'TimeBrokerSvc', 'TokenBroker', 'TroubleshootingSvc', 'TrustedInstaller',
'UI0Detect', 'UdkUserSvc_*', 'UmRdpService', 'UnistoreSvc_*',
'UserDataSvc_*', 'UsoSvc', 'VSS', 'VacSvc', 'W32Time', 'WEPHOSTSVC',
'WFDSConMgrSvc', 'WMPNetworkSvc', 'WManSvc', 'WPDBusEnum', 'WSService',
'WSearch', 'WaaSMedicSvc', 'WalletService', 'WarpJITSvc', 'WbioSrvc',
'WcsPlugInService', 'WdiServiceHost', 'WdiSystemHost', 'WebClient', 'Wecsvc',
'WerSvc', 'WiaRpc', 'WinHttpAutoProxySvc', 'WinRM', 'WpcMonSvc',
'WpnService', 'WwanSvc', 'XblAuthManager', 'XblGameSave', 'XboxGipSvc',
'XboxNetApiSvc', 'autotimesvc', 'bthserv', 'camsvc', 'cbdhsvc_*',
'cloudidsvc', 'dcsvc', 'defragsvc', 'diagnosticshub.standardcollector.service',
'diagsvc', 'dmwappushservice', 'dot3svc', 'edgeupdate', 'edgeupdatem',
'embeddedmode', 'fdPHost', 'fhsvc', 'hidserv', 'icssvc', 'lfsvc',
'lltdsvc', 'lmhosts', 'msiserver', 'netprofm', 'p2pimsvc', 'p2psvc',
'perceptionsimulation', 'pla', 'seclogon', 'smphost', 'spectrum',
'sppsvc', 'svsvc', 'swprv', 'upnphost', 'vds', 'vm3dservice',
'vmicguestinterface', 'vmicheartbeat', 'vmickvpexchange', 'vmicrdv',
'vmicshutdown', 'vmictimesync', 'vmicvmsession', 'vmicvss', 'wbengine',
'wcncsvc', 'webthreatdefsvc', 'wercplsupport', 'wisvc', 'wlidsvc',
'wlpasvc', 'wmiApSrv', 'workfolderssvc', 'wuauserv', 'wudfsvc'
)

# Set the services in the disabledServices list to Disabled
Expand Down
Loading

0 comments on commit d1b1a53

Please sign in to comment.