[GUIDE] [DISCUSSION] Windows Editions Reconstructions

Discussion in 'Windows 10' started by TesterMachineOS, Sep 3, 2024.

  1. xinso

    xinso MDL Guru

    Mar 5, 2009
    15,023
    15,280
    340
    #3441 xinso, Nov 26, 2025
    Last edited: Nov 26, 2025
    Hey. I believe that I do as your instruction, but still no go.

    The constructed images got corrupted at 94% for mismatched Servicing. Official packages in Official structures.

    The corruption is the very same as that of ESU Update Offline.
     
  2. xinso

    xinso MDL Guru

    Mar 5, 2009
    15,023
    15,280
    340
    #3442 xinso, Nov 26, 2025
    Last edited: Nov 27, 2025
    Q: How do gailium119 and zhanglin know so much tweak to bypass Integrity Verification?

    [gailium119]
    Patch
    Hook

    [zhanglin]
    Catalogs
    ServicingStack
    Version
     
  3. pp03

    pp03 MDL Expert

    Apr 12, 2014
    1,416
    471
    60
    #3443 pp03, Nov 27, 2025
    Last edited: Nov 27, 2025
    wnc with desktop pl-pl custom 1742 successfully

    trying to add 7171, but

    An error occurred - Package_for_RollupFix Error: 0x800f0982

    2025-11-27 10:27:25, Error CSI 00000011@2025/11/27:09:27:25.573 (F) onecore\base\wcp\rtllib\win32lib\delta_library.cpp(428): Error NTSTATUS_FROM_WIN32(774) originated in function Windows::Rtl:: deltaDecompressBuffer expression: g_pfnApplyDeltaGetReverseB( ( (DELTA_FLAG_TYPE)0x00000000 ), ReferenceInput, CompressedInput, &FileTimeInDeltaHeader, &UncompressedOutput, &ReverseOutput)
    [gle=0x80004005]
     
  4. winosr25

    winosr25 MDL Senior Member

    May 14, 2024
    420
    527
    10
  5. pp03

    pp03 MDL Expert

    Apr 12, 2014
    1,416
    471
    60
    #3445 pp03, Nov 27, 2025
    Last edited: Nov 27, 2025
    as xinso wrote after wnc with desktop pl-pl custom 1742 i integrated 2894, then 3037 and success :)


    now i try 3476


    Image Version: 10.0.26100.3037

    Processing 1 of 1 - Adding package Package_for_RollupFix~31bf3856ad364e35~amd64~~26100.3476.1.12
    [==========================100.0%==========================]
    Package_for_RollupFix: The specified image is no longer serviceable and may be corrupted.
    Discard the modified image and start again.
    Error: 0x80073713

    Error: 14099


    edit: 3194 success
     
  6. zhanglin

    zhanglin MDL Expert

    Jan 11, 2018
    1,058
    623
    60
    + these
    Replace the .dll in these locations with 26100.1
    amd64_microsoft-windows-s..-installers-onecore_31bf3856ad364e35_10.0.28000.1_none_b92e6aea441b556e
    EventsInstaller.dll
    wmicmiplugin.dll
    amd64_microsoft-windows-s..llers-onecore-extra_31bf3856ad364e35_10.0.28000.1_none_f14cbd8461edd5e7
    sppinst.dll

    Code:
    Microsoft Windows [版本 10.0.26200.7171]
    (c) Microsoft Corporation。保留所有权利。
    
    C:\Windows\System32>Dism /image:D:\1 /get-CurrentEdition
    
    部署映像服务和管理工具
    版本: 10.0.26100.5074
    
    映像版本: 10.0.28000.1
    
    当前版本为:
    
    当前版本 : Enterprise
    
    操作成功完成。
    
    C:\Windows\System32>DISM /Image:D:\1 /Apply-Unattend:D:\TOOL\xxxEdition\install.xml
    
    部署映像服务和管理工具
    版本: 10.0.26100.5074
    
    映像版本: 10.0.28000.1
    
    正在删除程序包 Microsoft-Windows-ProfessionalEdition~31bf3856ad364e35~amd64~~10.0.28000.1
    [==========================100.0%==========================]
    操作成功完成。
    
    C:\Windows\System32>dism /image:D:\1 /add-package:E:\Packs\28000.1\10.0.28000.1\lp.esd
    
    部署映像服务和管理工具
    版本: 10.0.26100.5074
    
    映像版本: 10.0.28000.1
    
    正在处理 1 (共 1) - 正在添加程序包 Microsoft-Windows-Client-LanguagePack-Package~31bf3856ad364e35~amd64~zh-CN~10.0.28000.1
    [==========================100.0%==========================]
    操作成功完成。
    
    C:\Windows\System32>Dism /image:D:\1 /get-CurrentEdition
    
    部署映像服务和管理工具
    版本: 10.0.26100.5074
    
    映像版本: 10.0.28000.1
    
    当前版本为:
    
    当前版本 : EnterpriseG
    
    操作成功完成。
    
    C:\Windows\System32>
     
  7. pp03

    pp03 MDL Expert

    Apr 12, 2014
    1,416
    471
    60
    #3447 pp03, Nov 27, 2025
    Last edited: Nov 27, 2025
    trying integrate custom 3476 to pl-pl wnc with desktop 26100.3194

    99% and


    Image Version: 10.0.26100.3194

    Processing 1 of 1 - Adding package Package_for_RollupFix~31bf3856ad364e35~amd64~~26100.3476.1.12
    [==========================100.0%==========================]
    Package_for_RollupFix: The specified image is no longer serviceable and may be corrupted.
    Discard the modified image and start again.
    Error: 0x80073713

    Error: 14099


    i'll try 3321 first
     
  8. pp03

    pp03 MDL Expert

    Apr 12, 2014
    1,416
    471
    60
    #3448 pp03, Nov 27, 2025
    Last edited: Nov 27, 2025
    trying integrate custom 3321 to pl-pl wnc with desktop 26100.3194

    99% and


    Deployment Image Servicing and Management tool
    Version: 10.0.26100.5074

    Image Version: 10.0.26100.3194

    Processing 1 of 1 - Adding package Package_for_RollupFix~31bf3856ad364e35~amd64~~26100.3321.1.14
    [==========================100.0%==========================]
    Package_for_RollupFix: The specified image is no longer serviceable and may be corrupted.
    Discard the modified image and start again.
    Error: 0x80073713

    Error: 14099
     
  9. xinso

    xinso MDL Guru

    Mar 5, 2009
    15,023
    15,280
    340
    #3449 xinso, Nov 28, 2025
    Last edited: Nov 28, 2025
    I tried it to no avail.

    Q: Did you mean #3429 + #3446? Thanks.
     
  10. zhanglin

    zhanglin MDL Expert

    Jan 11, 2018
    1,058
    623
    60
    Did you mean #3429 + #3446?
    Yes

    19044
    EnterpriseS
    EnterpriseG
    Win10-ClipESU-Enabled 0

    IoTEnterpriseS
    Enterprise
    Win10-ClipESU-Enabled 1


    19044 EnterpriseS EnterpriseG IoTEnterpriseS
    These can all be updated online to 19044.6575

    Enterprise cannot.

    I feel that it should be controlled by Microsoft-Windows-Security-SPP-Component-ExtendedSecurityUpdatesAI.
     
  11. xinso

    xinso MDL Guru

    Mar 5, 2009
    15,023
    15,280
    340
    #3451 xinso, Nov 28, 2025
    Last edited: Nov 28, 2025
    You'd better check if new CU had any new update\modification\feature, etc. alike 19045 ESU.

    Rome is not made in one day. So CU is.
     
  12. pp03

    pp03 MDL Expert

    Apr 12, 2014
    1,416
    471
    60
    #3452 pp03, Nov 28, 2025
    Last edited: Nov 28, 2025
    Error CSI 0000000d (F) Component directory missing. Dir: \SystemRoot\WinSxS\amd64_userexperience-aix_31bf3856ad364e35_10.0.26100.1591_none_3af30c2876f0ce59, File: AIX\appxmanifest.xml, Comp: UserExperience-AIX, version 10.0.26100.3321, arch amd64, nonSxS, pkt {l:8 b:31bf3856ad364e35}[gle=0x80004005]

    Error CSI 000017eb (F) Duplicate object MicrosoftWindows.Client.Core_cw5n1h2txyewy found during Install operation.
    [gle=0x80004005]
     
  13. pp03

    pp03 MDL Expert

    Apr 12, 2014
    1,416
    471
    60
  14. xinso

    xinso MDL Guru

    Mar 5, 2009
    15,023
    15,280
    340
  15. zhanglin

    zhanglin MDL Expert

    Jan 11, 2018
    1,058
    623
    60
    I don't have the CMGE EnterpriseG version. I tested 19044.1288 EnterpriseG, and after installation, it was directly updated to 19044.6575.

    捕获.PNG 捕获1.PNG
     
  16. zhanglin

    zhanglin MDL Expert

    Jan 11, 2018
    1,058
    623
    60
    #3457 zhanglin, Nov 28, 2025
    Last edited: Nov 28, 2025
    The test version is 19044, not 19045.
    捕获.PNG

    It indicates that the official version only supports 19044 EnterpriseS and EnterpriseG, not 19045.
     
  17. xinso

    xinso MDL Guru

    Mar 5, 2009
    15,023
    15,280
    340
    #3458 xinso, Nov 28, 2025
    Last edited: Nov 28, 2025
    Thanks. I test 19045 to see if there is any difference.
     
  18. pp03

    pp03 MDL Expert

    Apr 12, 2014
    1,416
    471
    60
    #3459 pp03, Nov 28, 2025
    Last edited: Nov 28, 2025
    differences between 26100.3194 and 26100.3321

    for example userexperience-nxt-package

    edit: success :)


    edit2: 3321 can be skipped - 3323 should be after 3194

    edit3: 3476 success :)

    edit4: 4188 success :)

    edit5: 4946 success :)

    edit6: 6584 success :)

    edit7: trying 7171 and

    Error CSI 00000016 (F) Cannot identify matching versions for component Microsoft-Windows-License-Default-WNC.Resources, version 10.0.26100.7171, arch x86, culture [l:5]'en-US', nonSxS, pkt {l:8 b:31bf3856ad364e35}.[gle=0x80004005]

    6899 also has component Microsoft-Windows-License-Default-WNC.Resources x86 in en-us (6584 is the last one with pl-pl)
     
  19. xinso

    xinso MDL Guru

    Mar 5, 2009
    15,023
    15,280
    340
    #3460 xinso, Nov 29, 2025
    Last edited: Nov 29, 2025
    [CMGE GptTmpl.inf]
    Code:
    [Unicode]
    Unicode=yes
    [System Access]
    MinimumPasswordAge = 1
    MaximumPasswordAge = 90
    MinimumPasswordLength = 8
    PasswordComplexity = 1
    PasswordHistorySize = 5
    LockoutBadCount = 5
    ResetLockoutCount = 30
    LockoutDuration = 30
    RequireLogonToChangePassword = 0
    ForceLogoffWhenHourExpire = 0
    NewAdministratorName = "Administrator"
    NewGuestName = "Guest"
    ClearTextPassword = 0
    LSAAnonymousNameLookup = 0
    EnableAdminAccount = 0
    EnableGuestAccount = 0
    [Event Audit]
    AuditSystemEvents = 3
    AuditLogonEvents = 3
    AuditObjectAccess = 3
    AuditPrivilegeUse = 3
    AuditPolicyChange = 3
    AuditAccountManage = 3
    AuditProcessTracking = 0
    AuditDSAccess = 0
    AuditAccountLogon = 3
    [Registry Values]
    MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Setup\RecoveryConsole\SecurityLevel=4,0
    MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Setup\RecoveryConsole\SetCommand=4,0
    MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\CachedLogonsCount=1,"10"
    MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\ForceUnlockLogon=4,0
    MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\PasswordExpiryWarning=4,5
    MACHINE\Software\Microsoft\Windows NT\CurrentVersion\Winlogon\ScRemoveOption=1,"0"
    MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\ConsentPromptBehaviorAdmin=4,5
    MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\ConsentPromptBehaviorUser=4,3
    MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\DisableCAD=4,0
    MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\DontDisplayLastUserName=4,0
    MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\EnableInstallerDetection=4,1
    MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA=4,1
    MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\EnableSecureUIAPaths=4,1
    MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\EnableUIADesktopToggle=4,0
    MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\EnableVirtualization=4,1
    MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\FilterAdministratorToken=4,1
    MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\LegalNoticeCaption=1,""
    MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\LegalNoticeText=7,
    MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\NoConnectedUser=4,3
    MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\PromptOnSecureDesktop=4,1
    MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\ScForceOption=4,0
    MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\ShutdownWithoutLogon=4,1
    MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\UndockWithoutLogon=4,1
    MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\ValidateAdminCodeSignatures=4,0
    MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers\AuthenticodeEnabled=4,0
    MACHINE\System\CurrentControlSet\Control\Lsa\AuditBaseObjects=4,0
    MACHINE\System\CurrentControlSet\Control\Lsa\CrashOnAuditFail=4,0
    MACHINE\System\CurrentControlSet\Control\Lsa\DisableDomainCreds=4,0
    MACHINE\System\CurrentControlSet\Control\Lsa\EveryoneIncludesAnonymous=4,0
    MACHINE\System\CurrentControlSet\Control\Lsa\FIPSAlgorithmPolicy\Enabled=4,0
    MACHINE\System\CurrentControlSet\Control\Lsa\ForceGuest=4,1
    MACHINE\System\CurrentControlSet\Control\Lsa\FullPrivilegeAuditing=3,0
    MACHINE\System\CurrentControlSet\Control\Lsa\LimitBlankPasswordUse=4,1
    MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0\NTLMMinClientSec=4,536870912
    MACHINE\System\CurrentControlSet\Control\Lsa\MSV1_0\NTLMMinServerSec=4,536870912
    MACHINE\System\CurrentControlSet\Control\Lsa\NoLMHash=4,1
    MACHINE\System\CurrentControlSet\Control\Lsa\RestrictAnonymous=4,1
    MACHINE\System\CurrentControlSet\Control\Lsa\RestrictAnonymousSAM=4,1
    MACHINE\System\CurrentControlSet\Control\Print\Providers\LanMan Print Services\Servers\AddPrinterDrivers=4,0
    MACHINE\System\CurrentControlSet\Control\SecurePipeServers\Winreg\AllowedExactPaths\Machine=7,System\CurrentControlSet\Control\ProductOptions,System\CurrentControlSet\Control\Server Applications,Software\Microsoft\Windows NT\CurrentVersion
    MACHINE\System\CurrentControlSet\Control\SecurePipeServers\Winreg\AllowedPaths\Machine=7,System\CurrentControlSet\Control\Print\Printers,System\CurrentControlSet\Services\Eventlog,Software\Microsoft\OLAP Server,Software\Microsoft\Windows NT\CurrentVersion\Print,Software\Microsoft\Windows NT\CurrentVersion\Windows,System\CurrentControlSet\Control\ContentIndex,System\CurrentControlSet\Control\Terminal Server,System\CurrentControlSet\Control\Terminal Server\UserConfig,System\CurrentControlSet\Control\Terminal Server\DefaultUserConfiguration,Software\Microsoft\Windows NT\CurrentVersion\Perflib,System\CurrentControlSet\Services\SysmonLog
    MACHINE\System\CurrentControlSet\Control\Session Manager\Kernel\ObCaseInsensitive=4,1
    MACHINE\System\CurrentControlSet\Control\Session Manager\Memory Management\ClearPageFileAtShutdown=4,1
    MACHINE\System\CurrentControlSet\Control\Session Manager\ProtectionMode=4,1
    MACHINE\System\CurrentControlSet\Control\Session Manager\SubSystems\optional=7,
    MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\AutoDisconnect=4,15
    MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\EnableForcedLogOff=4,1
    MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\EnableSecuritySignature=4,0
    MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\NullSessionPipes=7,
    MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\RequireSecuritySignature=4,0
    MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\RestrictNullSessAccess=4,1
    MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters\EnablePlainTextPassword=4,0
    MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters\EnableSecuritySignature=4,1
    MACHINE\System\CurrentControlSet\Services\LanmanWorkstation\Parameters\RequireSecuritySignature=4,0
    MACHINE\System\CurrentControlSet\Services\LDAP\LDAPClientIntegrity=4,1
    MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\DisablePasswordChange=4,0
    MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\MaximumPasswordAge=4,30
    MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\RequireSignOrSeal=4,1
    MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\RequireStrongKey=4,1
    MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\SealSecureChannel=4,1
    MACHINE\System\CurrentControlSet\Services\Netlogon\Parameters\SignSecureChannel=4,1
    [Privilege Rights]
    SeNetworkLogonRight = 
    SeBackupPrivilege = *S-1-5-32-544,*S-1-5-32-551
    SeChangeNotifyPrivilege = *S-1-1-0,*S-1-5-19,*S-1-5-20,*S-1-5-32-544,*S-1-5-32-545,*S-1-5-32-551
    SeSystemtimePrivilege = *S-1-5-19,*S-1-5-32-544
    SeCreatePagefilePrivilege = *S-1-5-32-544
    SeDebugPrivilege = *S-1-5-32-544
    SeRemoteShutdownPrivilege = 
    SeAuditPrivilege = *S-1-5-19,*S-1-5-20
    SeIncreaseQuotaPrivilege = *S-1-5-19,*S-1-5-20,*S-1-5-32-544
    SeIncreaseBasePriorityPrivilege = *S-1-5-32-544
    SeLoadDriverPrivilege = *S-1-5-32-544
    SeBatchLogonRight = *S-1-5-32-544,*S-1-5-32-551,*S-1-5-32-559
    SeServiceLogonRight = *S-1-5-19,*S-1-5-20
    SeInteractiveLogonRight = Guest,*S-1-5-32-544,*S-1-5-32-545,*S-1-5-32-551
    SeSecurityPrivilege = *S-1-5-32-544
    SeSystemEnvironmentPrivilege = *S-1-5-32-544
    SeProfileSingleProcessPrivilege = *S-1-5-32-544
    SeSystemProfilePrivilege = *S-1-5-32-544
    SeAssignPrimaryTokenPrivilege = *S-1-5-19,*S-1-5-20
    SeRestorePrivilege = *S-1-5-32-544,*S-1-5-32-551
    SeShutdownPrivilege = *S-1-5-32-544,*S-1-5-32-545,*S-1-5-32-551
    SeTakeOwnershipPrivilege = *S-1-5-32-544
    SeDenyNetworkLogonRight = Guest
    SeDenyBatchLogonRight = Guest
    SeDenyInteractiveLogonRight = Guest
    SeUndockPrivilege = *S-1-5-32-544,*S-1-5-32-545
    SeManageVolumePrivilege = *S-1-5-32-544
    SeRemoteInteractiveLogonRight = 
    SeImpersonatePrivilege = *S-1-5-19,*S-1-5-20,*S-1-5-32-544,*S-1-5-6
    SeCreateGlobalPrivilege = *S-1-5-19,*S-1-5-20,*S-1-5-32-544
    SeIncreaseWorkingSetPrivilege = *S-1-5-32-545
    SeTimeZonePrivilege = *S-1-5-19,*S-1-5-32-544,*S-1-5-32-545
    SeCreateSymbolicLinkPrivilege = *S-1-5-32-544
    SeDelegateSessionUserImpersonatePrivilege = *S-1-5-32-544
    [Version]
    signature="$CHICAGO$"
    Revision=1
    
    --->
    Code:
    MinimumPasswordLength = 8
    PasswordComplexity = 1