Skip to content

Commit d1b1a53

Browse files
authored
Removed forced Pro edition, remove browser policies, defined new list of services. (#191)
* ### v2.1.0 Changes #### `autounattend.xml` Changes - Removed the forced Pro edition enforcement. This is so the answer file can still be used with Home and especially Enterprise versions like LTSC. - Added an order to temporarily disable all network adapters so Windows Updates aren't installed during the OOBE phase. (This should stop Windows Defender from being Enabled automatically.) - Added a FirstLogon command that enables the network adapter again when the first user loads in after the OOBE phase. #### `autounattend.xml` & `UWScript.ps1` Changes - Removed Microsoft Edge and Google Chrome Policies as it seems to negatively impact user browsing experience. - Defined a new list of services that should be set to Disabled and Manual as the original list in v2.0.0 caused issues. The process count isn't as low as before but Windows should be more functional.
1 parent f971a88 commit d1b1a53

File tree

3 files changed

+206
-127
lines changed

3 files changed

+206
-127
lines changed

CHANGELOG.md

Lines changed: 11 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,16 @@
11
# Updates
22

3+
## 28/11/2024
4+
### v2.1.0 Changes
5+
#### `autounattend.xml` Changes
6+
- Removed the forced Pro edition enforcement. This is so the answer file can still be used with Home and especially Enterprise versions like LTSC.
7+
- Added an order to temporarily disable all network adapters so Windows Updates aren't installed during the OOBE phase. (This should stop Windows Defender from being Enabled automatically.)
8+
- Added a FirstLogon command that enables the network adapter again when the first user loads in after the OOBE phase.
9+
10+
#### `autounattend.xml` & `UWScript.ps1` Changes
11+
- Removed Microsoft Edge and Google Chrome Policies as it seems to negatively impact user browsing experience.
12+
- Defined a new list of services that should be set to Disabled and Manual as the original list in v2.0.0 caused issues. The process count isn't as low as before but Windows should be more functional.
13+
314
## 1/11/2024
415
- Released UnattendedWinstall v2.0.0
516

UWScript.ps1

Lines changed: 50 additions & 62 deletions
Original file line numberDiff line numberDiff line change
@@ -1185,37 +1185,6 @@ Windows Registry Editor Version 5.00
11851185
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsStore]
11861186
"AutoDownload"=dword:00000002
11871187
1188-
; EDGE
1189-
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge]
1190-
"StartupBoostEnabled"=dword:00000000
1191-
"HardwareAccelerationModeEnabled"=dword:00000000
1192-
"BackgroundModeEnabled"=dword:00000000
1193-
1194-
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MicrosoftEdgeElevationService]
1195-
"Start"=dword:00000004
1196-
1197-
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\edgeupdate]
1198-
"Start"=dword:00000004
1199-
1200-
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\edgeupdatem]
1201-
"Start"=dword:00000004
1202-
1203-
; CHROME
1204-
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome]
1205-
"StartupBoostEnabled"=dword:00000000
1206-
"HardwareAccelerationModeEnabled"=dword:00000000
1207-
"BackgroundModeEnabled"=dword:00000000
1208-
"HighEfficiencyModeEnabled"=dword:00000001
1209-
1210-
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\GoogleChromeElevationService]
1211-
"Start"=dword:00000004
1212-
1213-
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gupdate]
1214-
"Start"=dword:00000004
1215-
1216-
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gupdatem]
1217-
"Start"=dword:00000004
1218-
12191188
; UWP APPS
12201189
; disable background apps
12211190
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\AppPrivacy]
@@ -1455,30 +1424,6 @@ Windows Registry Editor Version 5.00
14551424
; Enable update Microsoft Store apps automatically
14561425
[-HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsStore]
14571426
1458-
; EDGE
1459-
[-HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Edge]
1460-
1461-
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MicrosoftEdgeElevationService]
1462-
"Start"=dword:00000002
1463-
1464-
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\edgeupdate]
1465-
"Start"=dword:00000002
1466-
1467-
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\edgeupdatem]
1468-
"Start"=dword:00000002
1469-
1470-
; CHROME
1471-
[-HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome]
1472-
1473-
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\GoogleChromeElevationService]
1474-
"Start"=dword:00000002
1475-
1476-
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gupdate]
1477-
"Start"=dword:00000002
1478-
1479-
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\gupdatem]
1480-
"Start"=dword:00000002
1481-
14821427
; --CAN'T DO NATIVELY--
14831428
; UWP APPS
14841429
; background apps
@@ -2398,20 +2343,63 @@ Windows Registry Editor Version 5.00
23982343
}
23992344
# End of Registry Optimizations
24002345

2346+
# Start of Tasks and Services Functions
24012347
# Start of Tasks and Services Functions
24022348
function Set-ServiceStartup {
24032349
# List of services to set to Disabled
24042350
$disabledServices = @(
2405-
'AJRouter', 'AssignedAccessManagerSvc', 'AppIDSvc', 'BDESVC', 'DiagTrack',
2406-
'DPS', 'EFS', 'FontCache', 'PcaSvc', 'RmSvc', 'WSearch', 'WbioSrvc', 'lfsvc'
2407-
)
2351+
'AJRouter', 'AppVClient', 'AssignedAccessManagerSvc',
2352+
'DiagTrack', 'DialogBlockingService', 'NetTcpPortSharing',
2353+
'RemoteAccess', 'RemoteRegistry', 'shpamsvc',
2354+
'ssh-agent', 'tzautoupdate', 'uhssvc',
2355+
'UevAgentService'
2356+
)
24082357

24092358
# List of services to set to Manual
24102359
$manualServices = @(
2411-
'BITS', 'CDPSvc', 'DusmSvc', 'LanmanServer', 'LanmanWorkstation',
2412-
'Spooler', 'StateRepository', 'StorSvc', 'SysMain', 'TokenBroker',
2413-
'TrkWks', 'UsoSvc', 'WpnService', 'edgeupdate', 'edgeupdatem',
2414-
'iphlpsvc', 'sppsvc'
2360+
'ALG', 'AppIDSvc', 'AppMgmt', 'AppReadiness', 'AppXSvc', 'Appinfo',
2361+
'AxInstSV', 'BDESVC', 'BITS', 'BTAGService', 'BcastDVRUserService_*',
2362+
'Browser', 'CDPSvc', 'CDPUserSvc_*', 'COMSysApp', 'CaptureService_*',
2363+
'CertPropSvc', 'ClipSVC', 'ConsentUxUserSvc_*', 'CscService', 'DcpSvc',
2364+
'DevQueryBroker', 'DeviceAssociationBrokerSvc_*', 'DeviceAssociationService',
2365+
'DeviceInstall', 'DevicePickerUserSvc_*', 'DevicesFlowUserSvc_*',
2366+
'DisplayEnhancementService', 'DmEnrollmentSvc', 'DoSvc', 'DsSvc', 'DsmSvc',
2367+
'EFS', 'EapHost', 'EntAppSvc', 'FDResPub', 'Fax', 'FrameServer',
2368+
'FrameServerMonitor', 'GraphicsPerfSvc', 'HomeGroupListener',
2369+
'HomeGroupProvider', 'HvHost', 'IEEtwCollectorService', 'IKEEXT',
2370+
'InstallService', 'InventorySvc', 'IpxlatCfgSvc', 'KtmRm', 'LicenseManager',
2371+
'LxpSvc', 'MSDTC', 'MSiSCSI', 'MapsBroker', 'McpManagementService',
2372+
'MessagingService_*', 'MicrosoftEdgeElevationService',
2373+
'MixedRealityOpenXRSvc', 'MsKeyboardFilter', 'NPSMSvc_*', 'NaturalAuthentication',
2374+
'NcaSvc', 'NcbService', 'NcdAutoSetup', 'Netman', 'NgcCtnrSvc', 'NgcSvc',
2375+
'NlaSvc', 'P9RdrService_*', 'PNRPAutoReg', 'PNRPsvc', 'PcaSvc', 'PeerDistSvc',
2376+
'PenService_*', 'PerfHost', 'PhoneSvc', 'PimIndexMaintenanceSvc_*', 'PlugPlay',
2377+
'PolicyAgent', 'PrintNotify', 'PrintWorkflowUserSvc_*', 'PushToInstall', 'QWAVE',
2378+
'RasAuto', 'RasMan', 'RetailDemo', 'RmSvc', 'RpcLocator', 'SCPolicySvc',
2379+
'SCardSvr', 'SDRSVC', 'SEMgrSvc', 'SecurityHealthService',
2380+
'SensorDataService', 'SensorService', 'SensrSvc', 'SessionEnv',
2381+
'SharedAccess', 'SharedRealitySvc', 'SmsRouter', 'SstpSvc',
2382+
'StateRepository', 'StiSvc', 'StorSvc', 'TabletInputService', 'TapiSrv',
2383+
'TextInputManagementService', 'TieringEngineService', 'TimeBroker',
2384+
'TimeBrokerSvc', 'TokenBroker', 'TroubleshootingSvc', 'TrustedInstaller',
2385+
'UI0Detect', 'UdkUserSvc_*', 'UmRdpService', 'UnistoreSvc_*',
2386+
'UserDataSvc_*', 'UsoSvc', 'VSS', 'VacSvc', 'W32Time', 'WEPHOSTSVC',
2387+
'WFDSConMgrSvc', 'WMPNetworkSvc', 'WManSvc', 'WPDBusEnum', 'WSService',
2388+
'WSearch', 'WaaSMedicSvc', 'WalletService', 'WarpJITSvc', 'WbioSrvc',
2389+
'WcsPlugInService', 'WdiServiceHost', 'WdiSystemHost', 'WebClient', 'Wecsvc',
2390+
'WerSvc', 'WiaRpc', 'WinHttpAutoProxySvc', 'WinRM', 'WpcMonSvc',
2391+
'WpnService', 'WwanSvc', 'XblAuthManager', 'XblGameSave', 'XboxGipSvc',
2392+
'XboxNetApiSvc', 'autotimesvc', 'bthserv', 'camsvc', 'cbdhsvc_*',
2393+
'cloudidsvc', 'dcsvc', 'defragsvc', 'diagnosticshub.standardcollector.service',
2394+
'diagsvc', 'dmwappushservice', 'dot3svc', 'edgeupdate', 'edgeupdatem',
2395+
'embeddedmode', 'fdPHost', 'fhsvc', 'hidserv', 'icssvc', 'lfsvc',
2396+
'lltdsvc', 'lmhosts', 'msiserver', 'netprofm', 'p2pimsvc', 'p2psvc',
2397+
'perceptionsimulation', 'pla', 'seclogon', 'smphost', 'spectrum',
2398+
'sppsvc', 'svsvc', 'swprv', 'upnphost', 'vds', 'vm3dservice',
2399+
'vmicguestinterface', 'vmicheartbeat', 'vmickvpexchange', 'vmicrdv',
2400+
'vmicshutdown', 'vmictimesync', 'vmicvmsession', 'vmicvss', 'wbengine',
2401+
'wcncsvc', 'webthreatdefsvc', 'wercplsupport', 'wisvc', 'wlidsvc',
2402+
'wlpasvc', 'wmiApSrv', 'workfolderssvc', 'wuauserv', 'wudfsvc'
24152403
)
24162404

24172405
# Set the services in the disabledServices list to Disabled

0 commit comments

Comments
 (0)