Tomorrow

Can you please add Malicious Software Removal Tool and KB971033 ? There might be others but off hand i remember these two buggers.

Can you please add Malicious Software Removal Tool and KB971033 ? There might be others but off hand i remember these two buggers.

How many accounts do you create? You can set the default picture with user.bmp (all users will have this) but as far as i know there is no way to set pic for a specific user. I suspect this setting might be stored on ntuser.dat and not in registry. Atleast thats the impression i got when i tried to set the icon order in the notification area. I used regshot to capture registry from before and after i changed the order. I suppose you could do the same with the account picture to see if its location is stored in the registry. http://sourceforge.n...ojects/regshot/

Not trough unnatend but trough OEM folders: $OEM$\$1\ProgramData\Microsoft\User Account Pictures\user.bmp will be the main user picture. You can include others in Default Pictures folder in the same folder. Let me know if anything is unclear.

This is great when adding or replacing files. But what about removing files? I was thinking maybe adding bogus 0 byte hidden files to replace the files i want to delete from the image. When i mount the WIM and run the script to take ownership and force delete the said files then mostly it fails with "Access Denied". This the delete script: REM Take Ownership: takeown /F "D:\7Work\WIM1" /R /D Y REM Remove/Delete: del /f /s /q "D:\7Work\WIM1\Windows\Help" del /f /s /q "D:\7Work\WIM1\Windows\LiveKernelReports" del /f /s /q "D:\7Work\WIM1\Windows\Media\*" del /f /s /q "D:\7Work\WIM1\Windows\Resources\Ease of Access Themes\classic.theme" del /f /s /q "D:\7Work\WIM1\Windows\Resources\Ease of Access Themes\hc1.theme" del /f /s /q "D:\7Work\WIM1\Windows\Resources\Ease of Access Themes\hc2.theme" del /f /s /q "D:\7Work\WIM1\Windows\Resources\Ease of Access Themes\hcblack.theme" del /f /s /q "D:\7Work\WIM1\Windows\Resources\Ease of Access Themes\hcwhite.theme" del /f /s /q "D:\7Work\WIM1\Windows\Resources\Themes\architecture.theme" del /f /s /q "D:\7Work\WIM1\Windows\Resources\Themes\characters.theme" del /f /s /q "D:\7Work\WIM1\Windows\Resources\Themes\landscapes.theme" del /f /s /q "D:\7Work\WIM1\Windows\Resources\Themes\nature.theme" del /f /s /q "D:\7Work\WIM1\Windows\Resources\Themes\scenes.theme" del /f /s /q "D:\7Work\WIM1\Windows\Web" del /f /s /q "D:\7Work\WIM1\Windows\HelpPane.exe" del /f /s /q "D:\7Work\WIM1\Windows\SysWOW64\ssText3d.scr" del /f /s /q "D:\7Work\WIM1\Windows\SysWOW64\Bubbles.scr" del /f /s /q "D:\7Work\WIM1\Windows\SysWOW64\Mystify.scr" del /f /s /q "D:\7Work\WIM1\Windows\SysWOW64\PhotoScreensaver.scr" del /f /s /q "D:\7Work\WIM1\Windows\SysWOW64\Ribbons.scr" del /f /s /q "D:\7Work\WIM1\Windows\System32\wdi\LogFiles\BootCKCL.etl" del /f /s /q "D:\7Work\WIM1\Windows\System32\wdi\LogFiles\ShutdownCKCL.etl" del /f /s /q "D:\7Work\WIM1\Windows\System32\ssText3d.scr" del /f /s /q "D:\7Work\WIM1\Windows\System32\Bubbles.scr" del /f /s /q "D:\7Work\WIM1\Windows\System32\Mystify.scr" del /f /s /q "D:\7Work\WIM1\Windows\System32\PhotoScreensaver.scr" del /f /s /q "D:\7Work\WIM1\Windows\System32\Ribbons.scr" del /f /s /q "D:\7Work\WIM1\ProgramData\Microsoft\User Account Pictures\Default Pictures\*" del /f /s /q "D:\7Work\WIM1\PerfLogs" del /f /s /q "D:\7Work\WIM1\ProgramData\Microsoft\Windows Defender" del /f /s /q "D:\7Work\WIM1\ProgramData\Microsoft\Windows\Ringtones" del /f /s /q "D:\7Work\WIM1\Users\Administrator\Favorites\Links" del /f /s /q "D:\7Work\WIM1\Users\Administrator\Favorites\Microsoft Websites" del /f /s /q "D:\7Work\WIM1\Users\Administrator\Favorites\MSN Websites" del /f /s /q "D:\7Work\WIM1\Users\Administrator\Favorites\Windows Live" del /f /s /q "D:\7Work\WIM1\Users\Administrator\AppData\Local\Microsoft\Media Player\Sync Playlists\et-EE\00010C6E" del /f /s /q "D:\7Work\WIM1\Users\Administrator\AppData\Local\Microsoft\Windows Mail" del /f /s /q "D:\7Work\WIM1\Users\Administrator\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\User Pinned\TaskBar\Desktop.ini" del /f /s /q "D:\7Work\WIM1\Program Files\Windows Defender" del /f /s /q "D:\7Work\WIM1\Program Files\Windows Mail" del /f /s /q "D:\7Work\WIM1\Program Files\Windows Media Player\wmpnetwk.exe" del /f /s /q "D:\7Work\WIM1\Program Files\Windows Media Player\wmpnscfg.exe" del /f /s /q "D:\7Work\WIM1\Program Files\Windows Media Player\Network Sharing" del /f /s /q "D:\7Work\WIM1\Program Files\Windows Sidebar\Gadgets\*" del /f /s /q "D:\7Work\WIM1\Program Files (x86)\Windows Defender" del /f /s /q "D:\7Work\WIM1\Program Files (x86)\Windows Mail" del /f /s /q "D:\7Work\WIM1\Program Files (x86)\Windows Sidebar\Gadgets\*"

Thats odd. I have KB2603229 and KB2533552 integrated. Captured the sysprepped image with imagex and install goes just fine. Meaning i didnt try to integrate into offline image but rather installed os. Installed these updates. Then sysprepped and sealed the image and captured it.

Both good ideas. Will look into those as soon as i can and report back.

See this for guidance: Add a Custom Script to Windows Setup Notice it says that setupcomplete.cmd runs using the LOCAL SYSTEM priviledge. Because of Session 0 Isolation, anything running under this type of account is prohibited to interact with the Desktop. So to sum it up, you won't see a progress bar for example. Try using FirstLogonCommands instead. I am already using FirstLogonCommands in my autounattend file but for obvious reasons i just dont want to bloat the xml file with hundreds of lines of extra code. I have a few commands now that do some essential stuff like resizing the pagefile,disabling hibernation,DEP and automatic pagefile management. Still it would be good to get the SetupComplete to work. Regarding the progressbar:

I sucessfully inserted SetupComplete.cmd to the WIM @ Windows\Setup\scripts and by the looks it ran for about 6 minutes (setupact.log says so), but most of the commands were ignored. I made it call 2 .VBS batch files in the scripts directory, but from what i saw neither were executed. Alse the .REG files were not imported. Only the unattended files were cleaned up and WinSAT was run. Attached zip with setupcomplete,setupact and the 2 vbs files. One of the VBS should have shown a progress bar for the setupcomplete progress and the second should have cleaned the taskbar of the default pinned icons like WMP and so on. Can anyone guess as to what went wrong? scripts.zip

Sorry for the delayed answer. No luck im afraid. Still got the prompt. But it's not a big problem. It would be a problem if my install was fully automated, but since i always configure disk to install to manually then these few extra clicks arent killing me. Besides im ok with my current xml anyway and it's not every time that the dialog box is displayed. Sometimes it goes directly to disk config like it should. EDIT 10.01.2013: Ok so i could not let it go so easily. Atleast not without finding the cause. Apparently no matter the settings in the xml: if i boot in EFI mode the dialog always pops up. However if i boot in normal MBR mode everything works as it should and the xml settings are respected. So for some reason in EFI setup mode the xml settings are not respected. The next thing i did was looking at how i achieve the EFI install. Unfortunately when using USB stick i have to use a hack to get the EFI setup to even boot (detailed here: http://forums.bit-tech.net/showthread.php?t=209045 ). Apparently when booting from DVD the hack is unnesesary (cannot confirm this as i dont have a DVD anymore for over a year now). Also does not seem to matter if i use my sysprepped ISO or unmodified MSDN ISO. With both the problem above stands. So it's not ISO/Customization specific issue tho it is entirely possible that the dialog pops up because i use a hack to get into EFI setup. If someone could test and try to launch EFI setup from DVD without the hack and see if the xml setting are respected it would put my mind at ease. Btw also rearranged the passes as per first post. Apparently the offlineservicing pass was at the wrong place (too late).

1. MBR and UEFI mode is determined by the boot method of the installation media. 2. Attach your XML file, but redact product key and any sensitive information such as login credentials or domain info, etc. <?xml version="1.0" encoding="utf-8"?> <unattend xmlns="urn:schemas-microsoft-com:unattend"> <settings pass="windowsPE"> <component name="Microsoft-Windows-International-Core-WinPE" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> <InputLocale>0425:00000425;0409:00000409</InputLocale> <SetupUILanguage> <UILanguage>en-US</UILanguage> </SetupUILanguage> <SystemLocale>et-EE</SystemLocale> <UserLocale>et-EE</UserLocale> <UILanguage>en-US</UILanguage> <UILanguageFallback>en-US</UILanguageFallback> </component> <component name="Microsoft-Windows-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> <ImageInstall> <OSImage> <InstallFrom> <MetaData wcm:action="add"> <Key>/IMAGE/NAME</Key> <value>Windows 7 ULTIMATE</value> </MetaData> </InstallFrom> <InstallToAvailablePartition>false</InstallToAvailablePartition> <WillShowUI>OnError</WillShowUI> </OSImage> </ImageInstall> <UpgradeData> <Upgrade>false</Upgrade> <WillShowUI>Never</WillShowUI> </UpgradeData> <ComplianceCheck> <DisplayReport>OnError</DisplayReport> </ComplianceCheck> <DynamicUpdate> <Enable>true</Enable> <WillShowUI>Never</WillShowUI> </DynamicUpdate> <Diagnostics> <OptIn>false</OptIn> </Diagnostics> <DiskConfiguration> <WillShowUI>Always</WillShowUI> </DiskConfiguration> <UserData> <AcceptEula>true</AcceptEula> <FullName>ME</FullName> </UserData> </component> </settings> <settings pass="specialize"> <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> <ComputerName>PHOENIX</ComputerName> <ProductKey>removed</ProductKey> <DoNotCleanTaskBar>false</DoNotCleanTaskBar> <TimeZone>FLE Standard Time</TimeZone> <CopyProfile>true</CopyProfile> <DisableAutoDaylightTimeSet>false</DisableAutoDaylightTimeSet> <RegisteredOwner>ME</RegisteredOwner> <VisualEffects> <FontSmoothing>ClearType</FontSmoothing> </VisualEffects> </component> <component name="Microsoft-Windows-powercpl" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> <PreferredPlan>8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c</PreferredPlan> </component> <component name="Microsoft-Windows-Printing-Spooler-Core" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> <RemoveMXDW>1</RemoveMXDW> </component> <component name="Microsoft-Windows-RemoteAssistance-Exe" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> <fAllowFullControl>false</fAllowFullControl> <fAllowToGetHelp>false</fAllowToGetHelp> </component> <component name="Microsoft-Windows-Security-SPP-UX" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> <SkipAutoActivation>true</SkipAutoActivation> </component> <component name="Microsoft-Windows-SystemRestore-Main" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> <DisableSR>1</DisableSR> </component> <component name="Microsoft-Windows-ErrorReportingCore" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> <DisableWER>1</DisableWER> </component> <component name="Microsoft-Windows-SQMApi" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> <CEIPEnabled>0</CEIPEnabled> </component> <component name="Security-Malware-Windows-Defender" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> <DisableAntiSpyware>true</DisableAntiSpyware> </component> <component name="Microsoft-Windows-Deployment" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> <RunSynchronous> <RunSynchronousCommand wcm:action="add"> <Order>1</Order> <Description>Disable Automatic Pagefile Management</Description> <Path>cmd /c wmic computersystem where name="%computername%" set AutomaticManagedPagefile=False</Path> </RunSynchronousCommand> <RunSynchronousCommand wcm:action="add"> <Order>2</Order> <Description>Set pagefile to 200MB fixed size</Description> <Path>cmd /c wmic pagefileset where name="c:\\pagefile.sys" set InitialSize=200,MaximumSize=200</Path> </RunSynchronousCommand> <RunSynchronousCommand wcm:action="add"> <Order>3</Order> <Description>Disable DEP</Description> <Path>bcdedit.exe /set {current} nx AlwaysOff</Path> </RunSynchronousCommand> <RunSynchronousCommand wcm:action="add"> <Order>4</Order> <Description>Hibernation Off</Description> <Path>powercfg.exe -h off</Path> </RunSynchronousCommand> </RunSynchronous> </component> </settings> <settings pass="oobeSystem"> <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> <Themes> <ThemeName>Aero Theme</ThemeName> <DefaultThemesOff>false</DefaultThemesOff> <WindowColor>Twilight</WindowColor> </Themes> <OEMInformation> <HelpCustomized>false</HelpCustomized> <SupportHours>24/7</SupportHours> <SupportPhone></SupportPhone> <Manufacturer>Custom</Manufacturer> </OEMInformation> <OOBE> <HideEULAPage>true</HideEULAPage> <NetworkLocation>Home</NetworkLocation> <ProtectYourPC>3</ProtectYourPC> <HideWirelessSetupInOOBE>true</HideWirelessSetupInOOBE> </OOBE> <UserAccounts> <AdministratorPassword> <Value>Administrator</Value> <PlainText>true</PlainText> </AdministratorPassword> <LocalAccounts> <LocalAccount wcm:action="add"> <Name>ME</Name> <Group>Administrators</Group> <Password> <Value>UABhAHMAcwB3AG8AcgBkAA==</Value> <PlainText>false</PlainText> </Password> <DisplayName>ME</DisplayName> <Description>ME</Description> </LocalAccount> <LocalAccount wcm:action="add"> <Name>ME2</Name> <Group>Administrators</Group> <Password> <Value>UABhAHMAcwB3AG8AcgBkAA==</Value> <PlainText>false</PlainText> </Password> <DisplayName>ME2</DisplayName> <Description>ME2</Description> </LocalAccount> </LocalAccounts> </UserAccounts> <AutoLogon> <Password> <Value>password2</Value> <PlainText>false</PlainText> </Password> <Enabled>true</Enabled> <LogonCount>99999</LogonCount> <Username>ME</Username> </AutoLogon> <FirstLogonCommands> <SynchronousCommand wcm:action="add"> <Order>1</Order> <Description>Disable Automatic Pagefile Management</Description> <CommandLine>cmd /c wmic computersystem where name="%computername%" set AutomaticManagedPagefile=False</CommandLine> <RequiresUserInput>false</RequiresUserInput> </SynchronousCommand> <SynchronousCommand wcm:action="add"> <Order>2</Order> <Description>Set pagefile to 200MB fixed size</Description> <CommandLine>cmd /c wmic pagefileset where name="c:\\pagefile.sys" set InitialSize=200,MaximumSize=200</CommandLine> <RequiresUserInput>false</RequiresUserInput> </SynchronousCommand> <SynchronousCommand wcm:action="add"> <Order>3</Order> <Description>Disable DEP</Description> <CommandLine>bcdedit.exe /set {current} nx AlwaysOff</CommandLine> <RequiresUserInput>false</RequiresUserInput> </SynchronousCommand> <SynchronousCommand wcm:action="add"> <Order>4</Order> <Description>Hibernation Off</Description> <CommandLine>powercfg.exe -h off</CommandLine> <RequiresUserInput>false</RequiresUserInput> </SynchronousCommand> </FirstLogonCommands> </component> </settings> <settings pass="offlineServicing"> <component name="Microsoft-Windows-LUA-Settings" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> <EnableLUA>false</EnableLUA> </component> </settings> </unattend>

2 questions: 1. If my xml file does not touch the partitions (meaning i select the disk and format manually during install) then is there any other difference in the xml between installing in normal (MBR) or UEFI (GPT) mode? 2. About after inserting the DVD/USB and after the "Loading windows files" bar has completed part: i know i have a working xml but for some reason im still asked for language,currency and timezone at the beginning of the install. Is automating this part somehow more complicated?

All

Usually second tuesday every month.

Regarding WUA updates: defenetly use DISM althought Win7 Toolkit and RT7Lite should have no problem integrating .cab updates either. Regarding rvkroots.exe - no this cant be integrated using standard methods. Like KB2533552 the only way is reverse integration. Install windows. Install updates on live system. Sysprep-generalize-shutdown and capture the .wim image from another OS install. Replace default wim in iso and should be ok.<br style="font-family: Verdana;">

Not sure about KB2503665. KB2533552 cannot be integrated trough standard means (meaning by DISM that RT7Lite is also using). KB971033 is the Windows Activation Technologies update that is entirely optional. Again not sure about KB2647753. And the .NET updates are missing from the list so this should explain most of the popups from WU. Regarding pre-updating WU itself - yes it can be done. You need to integrate some .cab-s from here: Repository Also. By including the old file from your current install to the new ISO (need to mount and dismount) the WU in the new install will retain your hide settings: "C:\Windows\SoftwareDistribution\DataStore\DataStore.edb"

Thank you for your detailed answer. It helps me alot.

Ah i see. Also can i request an UEFI version of the previously posted xml that creates the nessesary partitions? Not that im expecting to run UEFI based image in VirtualBox any time soon (atleast not windows), but it would be nice to have the code handy. UEFI setup creates one extra partition so the partition order looks like this: Part1: 128MB (MSR) Part2: 100MB (System) Part3: (Windows) GPT Conf

Why doesent the powercfg setting work? http://technet.microsoft.com/en-us/library/cc749019(v=ws.10) I pre set to high performance but after install it's still Balanced. I checked the GUID's on a fresh install via powercfg -list and these were correct. 8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c was the high performance scheme and i have this in my .xml under Microsoft-Windows-Shell-Setup: <component name="Microsoft-Windows-powercpl" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> <PreferredPlan>8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c</PreferredPlan> </component>

Worked like a charm. Much appreciated mate I will use this only for virtual machine as im not comfortable using it on real drives (bad suprise to see your data drive wiped out of existance lol).

Can someone provide working code for automating the partion creating/disk selecting? I tried numerous combinations but everything failed. It seems real simple when explained on technet. I need this for my Virtual Machine xml where there is only one disk (no partitions). Or maybe i cant be done? meaning there should be atleast one partition on the drive. It cant create partition unattended?

You need Windows Updates Downloader 2.50 Build 1002. The website for it is down (on sale by the looks of it), but the program can still be downloaded from various places. Silmple google search will help you. After you've downloaded and installed it you can just doubleclick the .ulz files to add them and then open the program.

Generally new .NET versions are not included in SP releases (even if theyre stable RTM releases). Why? - i have no idea. New .NET releases are only bundled with a new OS version (Windows 8 in this case). Not sure about IE10 tho...

For fully updated .NET 4 runtime please use ricktendo64-s updated installer that includes all .NET 4 Updates: http://www.wincert.n...86x64-5-8-2012/

http://go.microsoft....inkId=210143