[DISCUSSION] Server 2022 LTSC (21H2) 20348.1 (fe_release)

Discussion in 'Windows Server' started by Enthousiast, Mar 2, 2021.

  1. xscess

    xscess MDL Senior Member

    Jul 27, 2009
    371
    367
    10
    Thanks a lot for the detail reply but is it possible to remove features / services from installed OS (Server 2022)?

    I am not concerned with space; I would like to make OS "lighter / faster".
     
  2. Aldegard

    Aldegard MDL Novice

    Aug 19, 2021
    23
    13
    0
    #582 Aldegard, Sep 4, 2021
    Last edited: Sep 4, 2021
    Yes. This is possible. But the best results you will achieve with the installation already cleaned wim.
    I would not say that the removal of unnecessary features and capabilities will make the system faster. For this purpose, it is better to disable all telemetry and bloatware. I did so with my system. But in your case, it will break its functionality 100%. Just everyone sets up the system for itself. That one disable, another may be vital. It is impossible to simply apply everything. Here, for example, I always disable the Remote Desktop. So, as I think it is a direct threat to security. For you, this is how I understand it is unacceptable.

    This command will show all features:
    Dism /Online /Get-Features

    This command just disable feature:
    Dism /Online /Disable-Feature /FeatureName:XXXXXXXXXX

    This command disable feature and remove it completely:
    Dism /Online /Disable-Feature /FeatureName:XXXXXXXXXX /Remove

    This command will show all capabilities:
    Dism /Online /Get-Capabilities

    This command remove completely capability:
    Dism /Online /Remove-Capability /CapabilityName:XXXXXXXXXXX

    But as I said, it is best to disable telemetry and another %$&*%. Only then the system will be quick and responsive.

    PS: First, it is better to simply disable the features (without remove). If disable something important, then you can enable everything back. When will figure it out in everything, then may use /Remove option. Be careful with this.
     
  3. xscess

    xscess MDL Senior Member

    Jul 27, 2009
    371
    367
    10
    Thank you so much. It sounds, with the latest Windows Server 2022, there's not much to remove (from installed OS).

    Here's what I get:

    Code:
    dism /online /get-features /format:table | find """Enabled""" | more
    
    Server-Core                                                 | Enabled
    NetFx4ServerFeatures                                        | Enabled
    NetFx4                                                      | Enabled
    WCF-Services45                                              | Enabled
    WCF-TCP-PortSharing45                                       | Enabled
    MicrosoftWindowsPowerShellRoot                              | Enabled
    MicrosoftWindowsPowerShell                                  | Enabled
    KeyDistributionService-PSH-Cmdlets                          | Enabled
    TlsSessionTicketKey-PSH-Cmdlets                             | Enabled
    Tpm-PSH-Cmdlets                                             | Enabled
    MicrosoftWindowsPowerShellV2                                | Enabled
    Server-Psh-Cmdlets                                          | Enabled
    ServerCore-WOW64                                            | Enabled
    Printing-Client                                             | Enabled
    Printing-Client-Gui                                         | Enabled
    MediaPlayback                                               | Enabled
    WindowsMediaPlayer                                          | Enabled
    Printing-XPSServices-Features                               | Enabled
    SmbDirect                                                   | Enabled
    Windows-Defender                                            | Enabled
    WindowsServerBackupSnapin                                   | Enabled
    Printing-PrintToPDFServices-Features                        | Enabled
    Xps-Foundation-Xps-Viewer                                   | Enabled
    Server-Drivers-General                                      | Enabled
    Server-Drivers-Printers                                     | Enabled
    Server-Shell                                                | Enabled
    Internet-Explorer-Optional-amd64                            | Enabled
    Server-Gui-Mgmt                                             | Enabled
    RSAT                                                        | Enabled
    Microsoft-Windows-MultiPoint-Connector                      | Enabled
    Microsoft-Windows-PhotoBasic                                | Enabled
    Microsoft-Windows-Printing-PremiumTools                     | Enabled
    Microsoft-Windows-StorageService                            | Enabled
    SearchEngine-Client-Package                                 | Enabled
    FileAndStorage-Services                                     | Enabled
    Storage-Services                                            | Enabled
    ServerCoreFonts-NonCritical-Fonts-MinConsoleFonts           | Enabled
    ServerCoreFonts-NonCritical-Fonts-BitmapFonts               | Enabled
    ServerCoreFonts-NonCritical-Fonts-TrueType                  | Enabled
    ServerCoreFonts-NonCritical-Fonts-UAPFonts                  | Enabled
    ServerCoreFonts-NonCritical-Fonts-Support                   | Enabled
    SystemDataArchiver                                          | Enabled
    ServerCore-Drivers-General                                  | Enabled
    ServerCore-Drivers-General-WOW64                            | Enabled
    
    Code:
    dism /online /get-capabilities /format:table | find """Installed""" | more
    
    App.StepsRecorder~~~~0.0.1.0                           | Installed
    Browser.InternetExplorer~~~~0.0.11.0                   | Installed
    DirectX.Configuration.Database~~~~0.0.1.0              | Installed
    Downlevel.NLS.Sorting.Versions.Server~~~~0.0.1.0       | Installed
    Language.Basic~~~en-US~0.0.1.0                         | Installed
    Language.Handwriting~~~en-US~0.0.1.0                   | Installed
    Language.OCR~~~en-US~0.0.1.0                           | Installed
    Language.Speech~~~en-US~0.0.1.0                        | Installed
    Language.TextToSpeech~~~en-US~0.0.1.0                  | Installed
    MathRecognizer~~~~0.0.1.0                              | Installed
    Media.WindowsMediaPlayer~~~~0.0.12.0                   | Installed
    Microsoft.Windows.MSPaint~~~~0.0.1.0                   | Installed
    Microsoft.Windows.Notepad~~~~0.0.1.0                   | Installed
    Microsoft.Windows.PowerShell.ISE~~~~0.0.1.0            | Installed
    Microsoft.Windows.WordPad~~~~0.0.1.0                   | Installed
    OpenSSH.Client~~~~0.0.1.0                              | Installed
    Windows.Client.ShellComponents~~~~0.0.1.0              | Installed
    XPS.Viewer~~~~0.0.1.0                                  | Installed
    
    So far I've removed only 2 capabilities:

    Code:
    dism /online /remove-capability /capabilityname:Browser.InternetExplorer~~~~0.0.11.0
    dism /online /remove-capability /capabilityname:Media.WindowsMediaPlayer~~~~0.0.12.0
    
    Though I still have to go through the list of services I've got with:

    Code:
    get-service | find """Running""" | set-content -path C:\Users\Administrator\Downloads\Services.txt
    
     
  4. taylorcole

    taylorcole MDL Novice

    Jul 1, 2021
    28
    12
    0
  5. Aldegard

    Aldegard MDL Novice

    Aug 19, 2021
    23
    13
    0
    You can do even more. Removal of unnecessary features and capabilities can significantly reduce the size of the system and wim itself. Note the basic rule used in GNU\Linux systems. What you do not use, disable and delete, or attacker uses it against you. You need somewhere to train. Only not on the main machine.
    But as I said, it is best to disable first telemetry and another %^&*%. At least the basics.
    https://forums.mydigitallife.net/threads/repo-windows-10-telemetry-repository.63874/
     
  6. Enthousiast

    Enthousiast MDL Tester

    Oct 30, 2009
    49,768
    103,930
    450
    This is turning into a chopping frenzy, not the purpose of this thread.
     
  7. #587 Deleted member 1385001, Sep 4, 2021
    Last edited by a moderator: Sep 4, 2021
    Why dont you guys use pwsh module with User Grid View for removing features n capabilities .
    A GUI Prop for removal.

    Edit =======>
    Example :
    Code:
    
    Powershell -Command "Get-WindowsOptionalFeature -Online | Where-Object {$_.State -eq 'Enabled' } | Out-GridView -PassThru -Title 'Select Windows Optional Features to Disable' | Disable-WindowsOptionalFeature -Online -Verbose"
    
    Powershell -Command "Get-WindowsCapability -Online | Where-Object {$_.State -eq 'Installed' } | Out-GridView -PassThru -Title 'Select Windows Capabilities to Remove' | Remove-WindowsCapability -Online -Verbose"
    
    
     
  8. Hacker?pcs

    Hacker?pcs MDL Member

    May 28, 2009
    180
    78
    10
    Why not use the Core version if resources are scarce, managing it with RSAT or Admin Center is a piece of cake
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  9. bear_aussie

    bear_aussie MDL Senior Member

    Jun 8, 2015
    275
    304
    10
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  10. acer-5100

    acer-5100 MDL Guru

    Dec 8, 2018
    4,003
    2,924
    150
    @taylorcole

    Install_wm_tweak is indispensable on clients, but a bit overkill on servers, here you can disable most of the features (including defender) from the serer manager.

    The problem is just the huge winsxs folder which still contains all the unnenedd features and roles.

    So just enable anything you need and then remove all the unneeded payload with a single line

    Code:
    for /f %%a in ('dism /online /get-features /format:table ^|find "| Disabled"') do (dism /online /disable-feature:%%a /remove)
    
    

    This way you can have a fully functional server, w/o a single component forcefully removed in less than 5GB (if you use the LZX compression).

    And if one day you need a feature with the removed payload, you'll need just the iso like in the XP days, no need to do a full in place upgrade to restore a missing thing.

    P.S. that obviously work also for server Core/aCore/Hypercore
     
  11. xscess

    xscess MDL Senior Member

    Jul 27, 2009
    371
    367
    10
    @Enthousiast sorry pal, even I didn't know that, this would happen, when I asked you for a guide to slim down.

    Now if I need help any further, I will create a new thread.

    @taylorcole @Aldegard many thanks for the detailed replies.

    I am gonna implement all of these removals and see if it breaks anything.

    Since this Server 2022 is inside a virtual machine; and a "single purpose VM" (to connect to remote PCs) too... if something breaks I'm not gonna lose any valuble data at all.
     
  12. ch100

    ch100 MDL Addicted

    Sep 11, 2016
    841
    704
    30
    Let's keep this thread clean for those who are interested in the information for the product as it is meant to be used.
    There are a number of other threads dealing with tweaking operating systems beyond the original purpose.
     
  13. Enthousiast

    Enthousiast MDL Tester

    Oct 30, 2009
    49,768
    103,930
    450
    Yeah, @luzea told me it had to do with the upper-case in the link, i have edited the link at the OP with upper-case.
     
  14. Mike22112211

    Mike22112211 MDL Novice

    Apr 22, 2014
    29
    0
    0
    Not sure if this is the right place...Can I get a Download to SCOM 2019? I have the EVAL from Technet. I need a link. Can I convert to VL? Then Activate? Permanently? Are there any new versions/builds? Updated SCOM 2019? Please reply. Thanks
     
  15. cyberbot

    cyberbot MDL Addicted

    Jul 30, 2011
    501
    25
    30
    thank you my friend
     
  16. maur0

    maur0 MDL Senior Member

    Aug 3, 2012
    402
    188
    10
    whats version WDDM windows server 2022 support? 3.0?