1. Enthousiast

    Enthousiast MDL Tester

    Oct 30, 2009
    49,668
    103,487
    450
    Installing stuff in audit mode is standard msft and when properly done, it can be deployed on multiple systems.
     
  2. onlinegill

    onlinegill MDL Novice

    Sep 26, 2020
    3
    0
    0
    Ok after setting up everything in audit mode can I create ISO file ? because i think audit mode will create Wim file right ?
     
  3. Enthousiast

    Enthousiast MDL Tester

    Oct 30, 2009
    49,668
    103,487
    450
  4. Supern00b

    Supern00b MDL Addicted

    Dec 30, 2010
    762
    556
    30
    #16544 Supern00b, Sep 27, 2020
    Last edited: Sep 27, 2020
    @MSMG
    Some feedback on the latest Toolkit 10.5:

    - Image 1809 LTSC spanish x86
    - Integrated some features
    - Integrated the recommended updates, especially the CU 1457
    - Removed components with Toolkithelper method (list) including defender and smartscreen
    - From a console, integrated the latest preview CU windows10.0-kb4577069-x86.msu
    - Cleanup + resetbase and applied changes to image.

    The process was successful, especially the issue with defender removal on x86 images seems to have been resolved. Yeah!
    Although it left me with a couple of observations:
    - It takes more time now, the CU has to be integrated twice, once to bring the image up to the build that toolkithelper supports for removing components, and once more to integrate the latest preview CU after removing components.
    - Current method may need an updated Toolkit for each new CU?
    - Can we integrate the 1457 CU into a source image and use that as a base image from now on? But if the Toolkit is updated for a more recent CU, that base image + 1457 CU won't be valid anymore for use with the Toolkit?

    Edit:
    The x86 image was OK, but applying the same procedure to the x64 image, the latest preview CU cannot be added:
    Code:
    M:\msmg\CUnew\windows10.0-kb4577069-x64.msu: An error occurred applying the Unattend.xml file from the .msu package.
    For more information, review the log file.
    Error: 0x80070002
    Error: 2
    The system cannot find the file specified.
    
    The DISM log file can be found at C:\Windows\Logs\DISM\dism.log
    Press any key to continue . . .
    And the log entry shows this:
    Code:
    Info                  CBS    FLOW: Enter Installation Stage: Closure Analysis, Current Operation Stage: Installing
    2020-09-26 20:17:47, Error                 CSI    00000b97 (F) STATUS_OBJECT_NAME_NOT_FOUND #4666968# from Windows::Rtl::SystemImplementation::DirectRegistryProvider::SysOpenKey(flg = (AllowAccessDenied), key = {provider=NULL, handle=0, name= ("null")}, da = (KEY_READ|KEY_WOW64_64KEY), oa = @0xb75ca7ac68->OBJECT_ATTRIBUTES {s:48; rd:NULL; on:[276]'\Registry\Machine\{bf1a281b-ad7b-4476-ac95-f47682990ce7}M:/msmg/mount/install/Windows/System32/config/COMPONENTS\DerivedData\VersionedIndex\10.0.17763.1450 (WinBuild.160101.0800)\ComponentFamilies\amd64_windows-[gle=0xd0000034]
    2020-09-26 20:17:47, Error                 CSI    defender-events.resources_31bf3856ad364e35_es-es_bfdb7d752952c540'; a:(OBJ_CASE_INSENSITIVE)}, disp = Unmapped disposition: 1554491976)[gle=0xd0000034]
    2020-09-26 20:17:47, Error                 CSI    00000b98@2020/9/27:01:17:47.03 (F) onecore\base\wcp\sil\ntsystem.cpp(5348): Error STATUS_OBJECT_NAME_NOT_FOUND originated in function Windows::Rtl::SystemImplementation::DirectRegistryProvider::SysOpenKey expression: (null)
    [gle=0x80004005]
    2020-09-26 20:17:47, Info                  CBS    Added C:\Windows\Logs\DISM\dism.log to WER report.
    2020-09-26 20:17:47, Info                  CBS    Not able to add pending.xml to offline WER report. [HRESULT = 0x80070002 - ERROR_FILE_NOT_FOUND]
    2020-09-26 20:17:47, Error                 CSI    00000b99 (F) STATUS_OBJECT_NAME_NOT_FOUND #4666967# from Windows::Rtl::SystemImplementation::DirectRegistryProvider::SysOpenKey(flg = 0, key = {provider=NULL, handle=0, name= ("null")}, da = (KEY_READ|KEY_WOW64_64KEY), oa = @0xb75ca7ac68->OBJECT_ATTRIBUTES {s:48; rd:NULL; on:[276]'\Registry\Machine\{bf1a281b-ad7b-4476-ac95-f47682990ce7}M:/msmg/mount/install/Windows/System32/config/COMPONENTS\DerivedData\VersionedIndex\10.0.17763.1450 (WinBuild.160101.0800)\ComponentFamilies\amd64_windows-defender-events.re[gle=0xd0000034]
    2020-09-26 20:17:47, Error                 CSI    sources_31bf3856ad364e35_es-es_bfdb7d752952c540'; a:(OBJ_CASE_INSENSITIVE)}, disp = Unmapped disposition: 1554492972)[gle=0xd0000034]
    2020-09-26 20:17:47, Error                 CSI    00000b9a@2020/9/27:01:17:47.125 (F) onecore\base\wcp\sil\ntsystem.cpp(5348): Error STATUS_OBJECT_NAME_NOT_FOUND originated in function Windows::Rtl::SystemImplementation::DirectRegistryProvider::SysOpenKey expression: (null)
    Again pointing to Defender being the issue, strange enough this time it's the x64 image.

    Edit 2: I also tried only adding the recommended CU and not the preview CU, but I got the same error at the cleanup state.

    Steps to reproduce the issue:
    - Image 1809 LTSC x64 spanish
    - Integrate 457 recommended CU
    - Remove defender with toolkit method
    - Cleanup and resetbase, and get an error halfway through.

    When not removing Defender from the x64 image, everything completes OK and I can even integrate the preview CU after removing the other components.

    Cheers.
     
  5. Dusktilldawn

    Dusktilldawn MDL Junior Member

    Oct 24, 2009
    51
    10
    0
    #16545 Dusktilldawn, Sep 27, 2020
    Last edited: Sep 27, 2020
    Hello .master & brothers

    According to read me file on win8.1 update: if I follow to order:
    I have to enable "Microsoft .NET Framework 3.5 Feature" after integrate Optional> Integrate the required Windows Custom Features

    [H] - <Optional> Integrate the required Windows Custom Features using [Integrate->Windows Custom Features] menu.
    - <Optional> Customize the Image using [Customize] menu.
    [J] - Cleanup the Source Image using [Apply->Cleanup Source Images] menu.
    [K] - Integrate Microsoft .NET Framework 3.5 Feature using [Integrate->Windows Features->Microsoft .NET Framework 3.5) menu.
    [L] - Apply & Save Changes to Source Images using [Apply->Apply & Save Changes to Source Images] menu.
    [M] - Re-Build Source Images using [Apply->Re-Build Source Images] menu.

    my question is: there are .NET Framework 3.5 Update files ( in step H) come from first before the enable (in step K) .NET Framework 3.5!!
    have I though wrong? or is there any suggestion
    thanks in advance to all
     
  6. windows builder

    windows builder MDL Guru

    Sep 13, 2017
    2,219
    1,555
    90
    No red and blue please
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  7. rorewe4314

    rorewe4314 MDL Member

    Jun 18, 2020
    107
    22
    10
    MSMG, I have disabled Windows defender and I also need to remove the system tray icon for all users, how can I do this?

    p.s
    Registry Tweaks
     
  8. kovadimka

    kovadimka MDL Novice

    Mar 19, 2020
    40
    12
    0
    #16548 kovadimka, Sep 27, 2020
    Last edited: Sep 27, 2020
    You may put the following registry file:
    Code:
    Windows Registry Editor Version 5.00
    
    [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
    "SecurityHealth"=-
    
    into Custom\Registry\<OS>\<Arch> folder and use [5]Customize ->[7]Import Custom Registry Setting from Registry File
     
  9. MSMG

    MSMG MDL Developer

    Jul 15, 2011
    6,414
    15,608
    210
    Edge was removed while installing the OS and a new version was installed later, will check without the Edge later.

    Think there should any file related program installed for Open With to work, in my case VSCode was installed.

     
  10. MSMG

    MSMG MDL Developer

    Jul 15, 2011
    6,414
    15,608
    210
    The DISM can't work with more than one image at once and Using WimLib if you only removing the components or modifying the registry then you can use the WimLib update method without mounting the Wim images.

    As Enthousiast said you can service one image and upgrade the edition to next level and append the changes to the image but there's no catch if there is any pending operations then it will give errors while edition upgrade.

    Just add the Containers-ApplicationGuard-Package to the RemovePkgs.txt and then use the Remove Windows Components using Package List -> DISM Method.

     
  11. MSMG

    MSMG MDL Developer

    Jul 15, 2011
    6,414
    15,608
    210
    It's the Cleanup image which is causing the SFC error and the Do more across devices with activity history missing might be due to the bug in the update, wait for the next CU and try-out.

     
  12. MSMG

    MSMG MDL Developer

    Jul 15, 2011
    6,414
    15,608
    210
    Some shared packages might be breaking the Narrator, will do find out.

     
  13. MSMG

    MSMG MDL Developer

    Jul 15, 2011
    6,414
    15,608
    210
    The Toolkit uses the Image info from DISM /Get-WimInfo and when the mounted image is updated with a new update, until you commit the changes to the image the DISM will not update the Image info.

    The ToolkitHelper reads the Image info from the registry and so it gets the info instantly, now I have made changes to the Toolkit script to read the info from registry when updates are integrated.

     
  14. MSMG

    MSMG MDL Developer

    Jul 15, 2011
    6,414
    15,608
    210
    The ToolkitHelper checks for the existence of component folder/file name, if present it will continue with the removal but any new files/keys added by the update will be leftover.

     
  15. Feartamixg

    Feartamixg MDL Addicted

    May 15, 2016
    783
    629
    30
    Should I skip Cleanup (6 > 1) step from my below method?
    Extract ISO (1 > 3)

    Select source (1 > 1) (also mount boot and recovery images)

    Integrate Win32 calculator (3 > 3 > C)

    Apply SSU and CU updates (3 > 4 > 2 > 1 > 4)

    Apply setup media update (3 > 4 > 2 > 2)

    Remove using RemovePkgsList.txt (4 > 3)
    GameExplorer
    MapControl
    OneDrive
    PeopleExperienceHost
    RetailDemoContent
    SecureAssessmentBrowser
    SkypeORTC
    WindowsMixedReality
    XboxGameCallableUI
    3DViewer
    AdvertisingXaml
    Alarms
    BingWeather
    Calculator
    Camera
    CommunicationsApps
    Cortana
    DesktopAppInstaller
    FeedbackHub
    GetHelp
    Getstarted
    HEIFImageExtension
    Maps
    MixedRealityPortal
    OfficeHub
    OfficeOneNote
    Paint3D
    People
    Photos
    ScreenSketch
    SkypeApp
    SolitaireCollection
    SoundRecorder
    StickyNotes
    VP9VideoExtensions
    WalletService
    WebMediaExtensions
    WebpImageExtensions
    WindowsStore
    XboxApp
    XboxIdentityProvider
    YourPhone
    ZuneMusic
    ZuneVideo

    Unpin all Start menu icons (5 > 6)

    Tweaks for Task View, App Downloads, Photo Viewer (5 > 8 > B/D/J)

    Cleanup (6 > 1)

    Apply changes to image (6 > 2 > Y)

    Rebuild (6 > 1)

    Convert WIM to ESD (2 > 4)

    Make ISO (7 > 1)
     
  16. rorewe4314

    rorewe4314 MDL Member

    Jun 18, 2020
    107
    22
    10
    Doubtful!
     
  17. MSMG

    MSMG MDL Developer

    Jul 15, 2011
    6,414
    15,608
    210
    Yes the current method needs the ToolkitHelper to be updated for newer CU's if there are changes to the removed components in the new CU.

    Will check with the LTSC x64 build, may be resetbase is breaking the OS.

     
  18. rorewe4314

    rorewe4314 MDL Member

    Jun 18, 2020
    107
    22
    10