1. mhussain

    mhussain MDL Senior Member

    Oct 1, 2012
    368
    144
    10
    @MSMG
    I will test your build with nvda my current screen reader and jaws for windows another screen reader.
    cheers!
     
  2. inTerActionVRI

    inTerActionVRI MDL Expert

    Sep 23, 2009
    1,748
    3,575
    60
    Oh, ok!

    This is why I put this verification of the "ToolkitHelper Help Command" in the "removal loop through ToolkitHelper" so that this can check in all indexes the presence of each supported component.

    Now that after component removal, when we fill, many components are still present. And this is kind of confused ...
    But I only consider that a verification is only valid if it occurs for the first time, in each index, before the removal process.
     
  3. 正义羊

    正义羊 MDL Senior Member

    Feb 21, 2016
    258
    152
    10
    For Gaming App, when I integrate manually, the dependencies specify both x64 and x86, and the integration process completes successfully.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  4. 正义羊

    正义羊 MDL Senior Member

    Feb 21, 2016
    258
    152
    10
    #22665 正义羊, May 23, 2022
    Last edited: May 24, 2022
    @MSMG ,(UPD 5/24/2022)I made some change for Integrate News & Gaming App:

    I introduced variables NETNativeFramework22x64_Appx, NETNativeRuntime22x64_Appx, UIXaml21x64_Appx, UIXaml27x64_Appx and VCLibs14_Appx.

    Code:
    for /f %%i IN ('"dir /b Microsoft.NET.Native.Framework.2.2*x64*.Appx" 2^>nul') do set "NETNativeFramework22x64_Appx=/DependencyPackagePath:%Apps%\%%i"
    for /f %%i IN ('"dir /b Microsoft.NET.Native.Runtime.2.2*x64*.Appx" 2^>nul') do set "NETNativeRuntime22x64_Appx=/DependencyPackagePath:%Apps%\%%i"
    for /f %%i IN ('"dir /b Microsoft.UI.Xaml.2.1*x64*.Appx" 2^>nul') do set "UIXaml21x64_Appx=/DependencyPackagePath:%Apps%\%%i"
    for /f %%i IN ('"dir /b Microsoft.UI.Xaml.2.7*x64*.Appx" 2^>nul') do set "UIXaml27x64_Appx=/DependencyPackagePath:%Apps%\%%i"
    for /f %%i IN ('"dir /b Microsoft.VCLibs.140.00_*x64*.Appx" 2^>nul') do set "VCLibs14x64_Appx=/DependencyPackagePath:%Apps%\%%i"
    Integrate Apps code had follow changes:

    Code:
    if "%%j" equ "I_BingNews" call :AddProvisionedAppxPackage "%InstallMount%\%%i", "资讯", "%BingNews_Appx%", "%NETNativeFramework22_Appx% %NETNativeRuntime22_Appx% %UIXaml21_Appx% %VCLibs14_Appx% %NETNativeFramework22x64_Appx% %NETNativeRuntime22x64_Appx% %UIXaml21x64_Appx% %VCLibs14x64_Appx%", "%BingNews_License%"
    
    if "%%j" equ "I_GamingApp" call :AddProvisionedAppxPackage "%InstallMount%\%%i", " Gaming 应用", "%GamingApp_Appx%", "%UIXaml27_Appx% %VCLibsUWPDesktop14_Appx% %VCLibs14_Appx% %UIXaml27x64_Appx% %VCLibsUWPDesktop14x64_Appx% %VCLibs14x64_Appx%", "%GamingApp_License%"
    I test these changes in process of integrate News & Gaming App, continuue seeing error about App License.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  5. bala1

    bala1 MDL Member

    May 2, 2015
    179
    150
    10
    Is there a GUI version of this tool?

     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  6. graver.x

    graver.x MDL Senior Member

    Jan 18, 2020
    347
    484
    10
  7. sergey130270

    sergey130270 MDL Senior Member

    May 15, 2014
    275
    295
    10
    Good afternoon guys! Help please, who can give me a tweak that disables in the
    SecurityCenter registry
    Smart screen
    Windows Defender
    for version Win10 21H2 19044.1706
     
  8. Mr.X

    Mr.X MDL Guru

    Jul 14, 2013
    8,556
    15,642
    270
  9. inTerActionVRI

    inTerActionVRI MDL Expert

    Sep 23, 2009
    1,748
    3,575
    60
    @MSMG,

    This does not interfere with anything.
    But... For 22621, it should be from "v23H2" to "v22H2"?


    And here, did anything change or be a error caused by those mass substitutions?
    from
    Code:
               if "%ImageBuild%" geq "22621" set "C_GamingApp=-"
    
    to
    Code:
               if "%ImageBuild%" geq "22000" set "C_GamingApp=-"
    

    I went to use Checkhealth and Scanhealth, and it didn't work.
    from
    Code:
        call :CleanupImage "%InstallMount%", "ComponentCleanup", "%CleanupOption%"
    
    to
    Code:
        call :CleanupImage "%InstallMount%", "%CleanupOption%"
    
     
  10. MSMG

    MSMG MDL Developer

    Jul 15, 2011
    6,414
    15,608
    210
    Have fixed C_GamingApp and CleanupImage bugs and have uploaded the newer Toolkit.cmd


    The below code is for post W11 22H2 builds

    Code:
    :: Checking whether the selected Source OS is a Windows 11 v23H2 Client
    if "%SelectedSourceOS%" equ "w11" if "%ImageBuild%" gtr "22621" if "%ImageInstallationType%" equ "Client" (
        echo.  [1]   Remove Windows Apps Using Apps List
        echo.
        echo.  [2]   Remove Windows Components Using Package List
        echo.
        echo.
        echo.
        echo.
    )
    
     
  11. sergey130270

    sergey130270 MDL Senior Member

    May 15, 2014
    275
    295
    10
    Hello dear MSMG! Can you help post a registry file that can disable windows defender that you use in your Toolkit? I will be very grateful.
     
  12. MSMG

    MSMG MDL Developer

    Jul 15, 2011
    6,414
    15,608
    210
    For Windows 7 - Windows 10

    Code:
    Windows Registry Editor Version 5.00
    
    [HKEY_CURRENT_USER\Software\Microsoft\Windows Security Health\State]
    "AccountProtection_MicrosoftAccount_Disconnected"=dword:00000000
    
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender Security Center\Notifications]
    "DisableNotifications"=dword:00000001
    "DisableEnhancedNotifications"=dword:00000001
    
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender]
    "DisableAntiSpyware"=dword:00000001
    "DisableAntiVirus"=dword:00000001
    
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Features]
    "TamperProtection"=dword:00000000
    "TamperProtectionSource"=dword:00000002
    
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Signature Updates]
    "FirstAuGracePeriod"=dword:00000000
    
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\UX Configuration]
    "DisablePrivacyMode"=dword:00000001
    
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]
    "SecurityHealth"=hex:03,00,00,00,00,00,00,00,00,00,00,00
    
    [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MRT]
    "DontOfferThroughWUAU"=dword:00000001
    "DontReportInfectionInformation"=dword:00000001
    
    [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Systray]
    "HideSystray"=dword:00000001
    
    [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender]
    "DisableAntiSpyware"=dword:00000001
    "PUAProtection"=dword:00000000
    "RandomizeScheduleTaskTimes"=dword:00000000
    
    [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Exclusions]
    "DisableAutoExclusions"=dword:00000001
    
    [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\MpEngine]
    "MpEnablePus"=dword:00000000
    
    [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Quarantine]
    "LocalSettingOverridePurgeItemsAfterDelay"=dword:00000000
    "PurgeItemsAfterDelay"=dword:00000000
    
    [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection]
    "DisableBehaviorMonitoring"=dword:00000001
    "DisableIOAVProtection"=dword:00000001
    "DisableOnAccessProtection"=dword:00000001
    "DisableRealtimeMonitoring"=dword:00000001
    "DisableRoutinelyTakingAction"=dword:00000001
    "DisableScanOnRealtimeEnable"=dword:00000001
    "DisableScriptScanning"=dword:00000001
    
    [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Remediation]
    "Scan_ScheduleDay"=dword:00000008
    "Scan_ScheduleTime"=dword:00000000
    
    [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Reporting]
    "AdditionalActionTimeOut"=dword:00000000
    "CriticalFailureTimeOut"=dword:00000000
    "DisableEnhancedNotifications"=dword:00000001
    "DisableGenericRePorts"=dword:00000001
    "NonCriticalTimeOut"=dword:00000000
    
    [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Scan]
    "AvgCPULoadFactor"=dword:00000010
    "DisableArchiveScanning"=dword:00000001
    "DisableCatchupFullScan"=dword:00000001
    "DisableCatchupQuickScan"=dword:00000001
    "DisableRemovableDriveScanning"=dword:00000001
    "DisableRestorePoint"=dword:00000001
    "DisableScanningMappedNetworkDrivesForFullScan"=dword:00000001
    "DisableScanningNetworkFiles"=dword:00000001
    "PurgeItemsAfterDelay"=dword:00000000
    "ScanOnlyIfIdle"=dword:00000000
    "ScanParameters"=dword:00000000
    "ScheduleDay"=dword:00000008
    "ScheduleTime"=dword:00000000
    
    [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Signature Updates]
    "DisableUpdateOnStartupWithoutEngine"=dword:00000001
    "ScheduleDay"=dword:00000008
    "ScheduleTime"=dword:00000000
    "SignatureUpdateCatchupInterval"=dword:00000000
    
    [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\SpyNet]
    "DisableBlockAtFirstSeen"=dword:00000001
    "LocalSettingOverrideSpynetReporting"=dword:00000000
    "SpyNetReporting"=dword:00000000
    "SpyNetReportingLocation"=hex(7):30,00,00,00
    "SubmitSamplesConsent"=dword:00000002
    
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\EventLog\System\Microsoft-Antimalware-ShieldProvider]
    "Start"=dword:00000004
    
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\EventLog\System\WinDefend]
    "Start"=dword:00000004
    
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MsSecFlt]
    "Start"=dword:00000004
    
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SecurityHealthService]
    "Start"=dword:00000004
    
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Sense]
    "Start"=dword:00000004
    
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WdBoot]
    "Start"=dword:00000004
    
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WdFilter]
    "Start"=dword:00000004
    
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WdNisDrv]
    "Start"=dword:00000004
    
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WdNisSvc]
    "Start"=dword:00000004
    
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WinDefend]
    "Start"=dword:00000004
    
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WMI\Autologger\DefenderApiLogger]
    "Start"=dword:00000000
    
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WMI\Autologger\DefenderAuditLogger]
    "Start"=dword:00000000
    
    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows Security Health\State]
    "AccountProtection_MicrosoftAccount_Disconnected"=dword:00000000
    
    
    For Windows 11

    Code:
    Windows Registry Editor Version 5.00
    
    [HKEY_CURRENT_USER\Software\Microsoft\Windows Security Health\State]
    "AccountProtection_MicrosoftAccount_Disconnected"=dword:00000000
    
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender Security Center\Notifications]
    "DisableNotifications"=dword:00000001
    "DisableEnhancedNotifications"=dword:00000001
    
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender]
    "DisableAntiSpyware"=dword:00000001
    "DisableAntiVirus"=dword:00000001
    
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Features]
    "TamperProtection"=dword:00000004
    "TamperProtectionSource"=dword:00000002
    
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\Signature Updates]
    "FirstAuGracePeriod"=dword:00000000
    
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows Defender\UX Configuration]
    "DisablePrivacyMode"=dword:00000001
    
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run]
    "SecurityHealth"=hex:03,00,00,00,00,00,00,00,00,00,00,00
    
    [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\MRT]
    "DontOfferThroughWUAU"=dword:00000001
    "DontReportInfectionInformation"=dword:00000001
    
    [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Systray]
    "HideSystray"=dword:00000001
    
    [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender]
    "DisableAntiSpyware"=dword:00000001
    "PUAProtection"=dword:00000000
    "RandomizeScheduleTaskTimes"=dword:00000000
    
    [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Exclusions]
    "DisableAutoExclusions"=dword:00000001
    
    [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\MpEngine]
    "MpEnablePus"=dword:00000000
    
    [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Quarantine]
    "LocalSettingOverridePurgeItemsAfterDelay"=dword:00000000
    "PurgeItemsAfterDelay"=dword:00000000
    
    [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection]
    "DisableBehaviorMonitoring"=dword:00000001
    "DisableIOAVProtection"=dword:00000001
    "DisableOnAccessProtection"=dword:00000001
    "DisableRealtimeMonitoring"=dword:00000001
    "DisableRoutinelyTakingAction"=dword:00000001
    "DisableScanOnRealtimeEnable"=dword:00000001
    "DisableScriptScanning"=dword:00000001
    
    [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Remediation]
    "Scan_ScheduleDay"=dword:00000008
    "Scan_ScheduleTime"=dword:00000000
    
    [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Reporting]
    "AdditionalActionTimeOut"=dword:00000000
    "CriticalFailureTimeOut"=dword:00000000
    "DisableEnhancedNotifications"=dword:00000001
    "DisableGenericRePorts"=dword:00000001
    "NonCriticalTimeOut"=dword:00000000
    
    [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Scan]
    "AvgCPULoadFactor"=dword:00000010
    "DisableArchiveScanning"=dword:00000001
    "DisableCatchupFullScan"=dword:00000001
    "DisableCatchupQuickScan"=dword:00000001
    "DisableRemovableDriveScanning"=dword:00000001
    "DisableRestorePoint"=dword:00000001
    "DisableScanningMappedNetworkDrivesForFullScan"=dword:00000001
    "DisableScanningNetworkFiles"=dword:00000001
    "PurgeItemsAfterDelay"=dword:00000000
    "ScanOnlyIfIdle"=dword:00000000
    "ScanParameters"=dword:00000000
    "ScheduleDay"=dword:00000008
    "ScheduleTime"=dword:00000000
    
    [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\Signature Updates]
    "DisableUpdateOnStartupWithoutEngine"=dword:00000001
    "ScheduleDay"=dword:00000008
    "ScheduleTime"=dword:00000000
    "SignatureUpdateCatchupInterval"=dword:00000000
    
    [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows Defender\SpyNet]
    "DisableBlockAtFirstSeen"=dword:00000001
    "LocalSettingOverrideSpynetReporting"=dword:00000000
    "SpyNetReporting"=dword:00000000
    "SpyNetReportingLocation"=hex(7):30,00,00,00
    "SubmitSamplesConsent"=dword:00000002
    
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\EventLog\System\Microsoft-Antimalware-ShieldProvider]
    "Start"=dword:00000004
    
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\EventLog\System\WinDefend]
    "Start"=dword:00000004
    
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\MsSecFlt]
    "Start"=dword:00000004
    
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SecurityHealthService]
    "Start"=dword:00000004
    
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Sense]
    "Start"=dword:00000004
    
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WdBoot]
    "Start"=dword:00000004
    
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WdFilter]
    "Start"=dword:00000004
    
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WdNisDrv]
    "Start"=dword:00000004
    
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WdNisSvc]
    "Start"=dword:00000004
    
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\WinDefend]
    "Start"=dword:00000004
    
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WMI\Autologger\DefenderApiLogger]
    "Start"=dword:00000000
    
    [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\WMI\Autologger\DefenderAuditLogger]
    "Start"=dword:00000000
    
    [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows Security Health\State]
    "AccountProtection_MicrosoftAccount_Disconnected"=dword:00000000
    
     
  13. sergey130270

    sergey130270 MDL Senior Member

    May 15, 2014
    275
    295
    10
    #22675 sergey130270, May 29, 2022
    Last edited: Sep 8, 2024
    сpasibo
     
  14. maka213

    maka213 MDL Novice

    Aug 24, 2012
    41
    12
    0

    Does it also support 1904X.1706?
     
  15. inTerActionVRI

    inTerActionVRI MDL Expert

    Sep 23, 2009
    1,748
    3,575
    60
    This informed builds are the upper marking of the support. So below these informed builds, should work.

    If you find a problem, please say here on the topic.
     
  16. MSMG

    MSMG MDL Developer

    Jul 15, 2011
    6,414
    15,608
    210
    No, Only

    19041.1
    19042.1
    19043.1
    19044.1

    19041.1739
    19042.1739
    19043.1739
    19044.1739


    Usually component removal support is only updated for Patch Tuesday builds but since recent Patch Tuesday builds are having serious issues, this time support for preview builds are added.
     
  17. maka213

    maka213 MDL Novice

    Aug 24, 2012
    41
    12
    0

    How stable would you say the preview is? Maybe it would be worth skipping this month's patching and waiting until next month?