MSMG ToolKit

Discussion in 'MDL Projects and Applications' started by MSMG, Nov 21, 2013.

  1. haz367

    haz367 MDL Senior Member

    Jan 11, 2020
    325
    415
    10
    #18701 haz367, Mar 6, 2021
    Last edited: Mar 7, 2021
    @MSMG

    edit

    It's good now...got it fixed by using a template for the random folder permission bug. It's created properly every time now from HOST OS. :)

    Thx for the guide/hints and the example.tpk's
     
  2. bou7a

    bou7a MDL Junior Member

    Aug 6, 2018
    85
    70
    0
    #18703 bou7a, Mar 7, 2021
    Last edited: Mar 8, 2021
    Deleted, Sorry.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  3. Thvle

    Thvle MDL Member

    Oct 7, 2012
    246
    58
    10
    It is possible delete components in a running windows installation?
     
  4. zero cool root

    zero cool root MDL Senior Member

    Jun 17, 2011
    298
    89
    10
    @MSMG

    How do I use the command below on the image mounted with MSMG Toolkit..??

    Code:
    Dism.exe /online /Cleanup-Image /StartComponentCleanup
    
    Thanks in advance..!!
     
  5. Enthousiast

    Enthousiast MDL Tester

    Oct 30, 2009
    35,561
    59,622
    450
    /online is meant for servicing the running OS.

    For offline usage:
    Code:
    Dism /Image:x:\ToolKit_v11.3\Mount\Install\1\ /Cleanup-Image /StartComponentCleanup
    example:
    Code:
    ===============================================================================
                   MSMG ToolKit - Select Source from <DVD> folder
    ===============================================================================
    
    -------------------------------------------------------------------------------
    ####Selecting Source Images####################################################
    -------------------------------------------------------------------------------
    
    Reading Image Information...
    
    ===============================================================================
    | Index | Arch | Name
    ===============================================================================
    |   1   | x64  | Windows 10 Pro
    ===============================================================================
    
    Enter the Image Index # ['Q'uit] : 1
    
    Do you want to mount Windows Setup Boot Image ? ['Y'es/'N'o] : N
    Do you want to mount Windows Recovery Image ? ['Y'es/'N'o] : N
    
    -------------------------------------------------------------------------------
    ####Source Image Information###################################################
    -------------------------------------------------------------------------------
    
        Image                    :  Install.wim
        Image Index No           :  1
        Image Architecture       :  x64
        Image Version            :  10.0.19041
        Image Service Pack Build :  631
        Image Service Pack Level :  0
        Image Build              :  19041
        Image Default Language   :  en-US
    
    -------------------------------------------------------------------------------
    ####Mounting Source Images#####################################################
    -------------------------------------------------------------------------------
    
    -------------------------------------------------------------------------------
    Mounting [Install.wim, Index : 1] Image at <\Mount\Install\1>...
    -------------------------------------------------------------------------------
    
    Deployment Image Servicing and Management tool
    Version: 10.0.20279.1
    
    Mounting image
    [==========================100.0%==========================]
    The operation completed successfully.
    
    -------------------------------------------------------------------------------
    ####Finished Selecting & Mounting Source Images################################
    -------------------------------------------------------------------------------
    
    ===============================================================================
    
    Press any key to continue . . .
    Startcomponentcleanup:
    Code:
    Microsoft Windows [Version 10.0.19042.844]
    (c) 2020 Microsoft Corporation. All rights reserved.
    
    C:\Windows\system32>Dism /Image:d:\ToolKit_v11.3\Mount\Install\1\ /Cleanup-Image /StartComponentCleanup
    
    Deployment Image Servicing and Management tool
    Version: 10.0.19041.844
    
    Image Version: 10.0.19042.631
    
    [===========                20.0%                          ]
    The operation completed successfully.
    
    C:\Windows\system32>
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  6. zero cool root

    zero cool root MDL Senior Member

    Jun 17, 2011
    298
    89
    10
    Thank you so much @Enthousiast
     
  7. Rr0

    Rr0 MDL Member

    Jul 8, 2017
    151
    13
    10
    Does integrating the new Powershell replace the old one?
    How to avoid SFC integrity violations? Should I download Windows from UUP dump or Rg-Adguard TechBench by WZT?
    I don't understand what's this "latest" update bug? So if I use one older 21h1 and 19h1 it sfc scan should return all good?

    What do I need to be able to download free packages from Microsoft Store. Only free.
     
  8. RaiyvaN

    RaiyvaN MDL Senior Member

    Sep 23, 2009
    302
    347
    10
    #18711 RaiyvaN, Mar 8, 2021
    Last edited: Mar 9, 2021
    @Tiger-1,

    First of all, perform a deeper scan of your disk partition drive.
    Eventually, a restart may be required to perform this check, as the partition must be unmounted.
    ChkDsk D: /X /R /F
    or
    ChkDsk D: /X /F

    In this new file, there is a "Start" file for the script to be executed with nsudo.
    I added a choice for CMD command or recursive PowerShell command to delete folders.
    Extract it in the Toolkit folder so that the nsudo is found and executed correctly.

    If this attempt fails, you will have to:

    add the user "Everyone" to this folder and files then enable "Full Control" permissions for folders and files. right click, properties, security, edit, add user "Everyone", delete users not present on that computer, explore "advanced", change Owner to "Everyone". In the "Permissions" tab: Add user "Everyone", In the "Effective Access" tab: Select user "everyone".

    Note: translator translate "Todos" to "Everyone" maybe the user is "All". I dont know.


    Edit: I'm helping @Bira and wrongly renamed your zip, Sorry. Corrected zip file name.
     

    Attached Files:

  9. digitalized

    digitalized MDL Novice

    Nov 17, 2017
    29
    9
    0
    I currently run Toolkithelper separately with the mounted image location and a component list passed in.

    This works, however, Windows Store isn't being removed. I noticed in the changelog that there has been a change to the way this is removed. What do I update my component list with?

    I was previously using "WindowsStore"

    The component list has the following:

    • WindowsStoreApp
    • StorePurchaseApp
    • ServicesStoreEngagement
    • WindowsStoreClient

    Do all need to be removed to get rid of the Windows Store application? Or are some of these bits needed for core Windows functionality?

    Thanks
     
  10. Tiger-1

    Tiger-1 MDL Guru

    Oct 18, 2014
    6,208
    7,533
    210
    good friend I give up file s**t the only solution I found was to "hide" this crap file because it always appears in the prompt as access is denied ...;):mad:
     

    Attached Files:

  11. RaiyvaN

    RaiyvaN MDL Senior Member

    Sep 23, 2009
    302
    347
    10
    Get a Gparted Live or PartedMagic distro
    Place it on the USB stick with Ventoy, Rufus or Balena Etcher. Ventoy is the best for me. Just prepare the thumb drive and put the iso on it.

    boot the live, go to the terminal and type:
    blkid --> to identify your partitions and then
    ntfsfix /dev/sdax --> where x is your partition number. then enter the file manager that is available and delete the damn folder. :eek::):p:D;)
     
  12. haz367

    haz367 MDL Senior Member

    Jan 11, 2020
    325
    415
    10
    @MSMG

    Can you explain 1 more thing for me?

    For example there's >>

    Code:
    Administrators LocalSystem [b]s: d:3 136[b]
    
    same for
    
    TrustedInstaller TrustedInstaller d:13 424
    
    Code:
    Administrators LocalSystem d:3 120[b]
    
    TrustedInstaller TrustedInstaller s: d:9 328
    
    What's the differents in those? Can't find anything about it...Thx!
     
  13. Windows 10 User

    Windows 10 User MDL Expert

    Feb 2, 2017
    1,229
    74
    60
    #18716 Windows 10 User, Mar 10, 2021
    Last edited: Mar 10, 2021
    .
     
  14. rorewe4314

    rorewe4314 MDL Junior Member

    Jun 18, 2020
    70
    17
    0
    Code:
    
    Reg add "HKLM\TK_DEFAULT\SOFTWARE\Microsoft\Windows Security Health\State" /v "AccountProtection_MicrosoftAccount_Disconnected" /t REG_DWORD /d "0" /f >nul 2>&1
                Reg add "HKLM\TK_SOFTWARE\Microsoft\Windows Defender Security Center\Notifications" /v "DisableNotifications" /t REG_DWORD /d "1" /f >nul 2>&1
                Reg add "HKLM\TK_SOFTWARE\Microsoft\Windows Defender Security Center\Notifications" /v "DisableEnhancedNotifications" /t REG_DWORD /d "1" /f >nul 2>&1
                Reg add "HKLM\TK_NTUSER\SOFTWARE\Microsoft\Windows Security Health\State" /v "AccountProtection_MicrosoftAccount_Disconnected" /t REG_DWORD /d "0" /f >nul 2>&1
                Reg add "HKLM\TK_SOFTWARE\Microsoft\Windows Defender" /v "DisableAntiSpyware" /t REG_DWORD /d "1" /f >nul 2>&1
                Reg add "HKLM\TK_SOFTWARE\Microsoft\Windows Defender" /v "DisableAntiVirus" /t REG_DWORD /d "1" /f >nul 2>&1
                Reg add "HKLM\TK_SOFTWARE\Microsoft\Windows Defender\Features" /v "TamperProtection" /t REG_DWORD /d "0" /f >nul 2>&1
                Reg add "HKLM\TK_SOFTWARE\Microsoft\Windows Defender\Features" /v "TamperProtectionSource" /t REG_DWORD /d "2" /f >nul 2>&1
                Reg add "HKLM\TK_SOFTWARE\Microsoft\Windows Defender\Signature Updates" /v "FirstAuGracePeriod" /t REG_DWORD /d "0" /f >nul 2>&1
                Reg add "HKLM\TK_SOFTWARE\Microsoft\Windows Defender\UX Configuration" /v "DisablePrivacyMode" /t REG_DWORD /d "1" /f >nul 2>&1
                Reg add "HKLM\TK_SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartupApproved\Run" /v "SecurityHealth" /t REG_BINARY /d "030000000000000000000000" /f >nul 2>&1
                Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\MRT" /v "DontOfferThroughWUAU" /t REG_DWORD /d "1" /f >nul 2>&1
                Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\MRT" /v "DontReportInfectionInformation" /t REG_DWORD /d "1" /f >nul 2>&1
                Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows Defender Security Center\Systray" /v "HideSystray" /t REG_DWORD /d "1" /f >nul 2>&1
                Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows Defender" /v "DisableAntiSpyware" /t REG_DWORD /d "1" /f >nul 2>&1
                Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows Defender" /v "PUAProtection" /t REG_DWORD /d "0" /f >nul 2>&1
                Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows Defender" /v "RandomizeScheduleTaskTimes" /t REG_DWORD /d "0" /f >nul 2>&1
                Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows Defender\Exclusions" /v "DisableAutoExclusions" /t REG_DWORD /d "1" /f >nul 2>&1
                Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows Defender\MpEngine" /v "MpEnablePus" /t REG_DWORD /d "0" /f >nul 2>&1
                Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows Defender\Quarantine" /v "LocalSettingOverridePurgeItemsAfterDelay" /t REG_DWORD /d "0" /f >nul 2>&1
                Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows Defender\Quarantine" /v "PurgeItemsAfterDelay" /t REG_DWORD /d "0" /f >nul 2>&1
                Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" /v "DisableBehaviorMonitoring" /t REG_DWORD /d "1" /f >nul 2>&1
                Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" /v "DisableIOAVProtection" /t REG_DWORD /d "1" /f >nul 2>&1
                Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" /v "DisableOnAccessProtection" /t REG_DWORD /d "1" /f >nul 2>&1
                Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" /v "DisableRealtimeMonitoring" /t REG_DWORD /d "1" /f >nul 2>&1
                Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" /v "DisableRoutinelyTakingAction" /t REG_DWORD /d "1" /f >nul 2>&1
                Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" /v "DisableScanOnRealtimeEnable" /t REG_DWORD /d "1" /f >nul 2>&1
                Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" /v "DisableScriptScanning" /t REG_DWORD /d "1" /f >nul 2>&1
                Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows Defender\Remediation" /v "Scan_ScheduleDay" /t REG_DWORD /d "8" /f >nul 2>&1
                Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows Defender\Remediation" /v "Scan_ScheduleTime" /t REG_DWORD /d 0 /f >nul 2>&1
                Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows Defender\Reporting" /v "AdditionalActionTimeOut" /t REG_DWORD /d 0 /f >nul 2>&1
                Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows Defender\Reporting" /v "CriticalFailureTimeOut" /t REG_DWORD /d 0 /f >nul 2>&1
                Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows Defender\Reporting" /v "DisableEnhancedNotifications" /t REG_DWORD /d "1" /f >nul 2>&1
                Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows Defender\Reporting" /v "DisableGenericRePorts" /t REG_DWORD /d 1 /f >nul 2>&1
                Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows Defender\Reporting" /v "NonCriticalTimeOut" /t REG_DWORD /d 0 /f >nul 2>&1
                Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows Defender\Scan" /v "AvgCPULoadFactor" /t REG_DWORD /d "10" /f >nul 2>&1
                Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows Defender\Scan" /v "DisableArchiveScanning" /t REG_DWORD /d "1" /f >nul 2>&1
                Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows Defender\Scan" /v "DisableCatchupFullScan" /t REG_DWORD /d "1" /f >nul 2>&1
                Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows Defender\Scan" /v "DisableCatchupQuickScan" /t REG_DWORD /d "1" /f >nul 2>&1
                Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows Defender\Scan" /v "DisableRemovableDriveScanning" /t REG_DWORD /d "1" /f >nul 2>&1
                Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows Defender\Scan" /v "DisableRestorePoint" /t REG_DWORD /d "1" /f >nul 2>&1
                Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows Defender\Scan" /v "DisableScanningMappedNetworkDrivesForFullScan" /t REG_DWORD /d "1" /f >nul 2>&1
                Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows Defender\Scan" /v "DisableScanningNetworkFiles" /t REG_DWORD /d "1" /f >nul 2>&1
                Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows Defender\Scan" /v "PurgeItemsAfterDelay" /t REG_DWORD /d 0 /f >nul 2>&1
                Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows Defender\Scan" /v "ScanOnlyIfIdle" /t REG_DWORD /d 0 /f >nul 2>&1
                Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows Defender\Scan" /v "ScanParameters" /t REG_DWORD /d 0 /f >nul 2>&1
                Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows Defender\Scan" /v "ScheduleDay" /t REG_DWORD /d 8 /f >nul 2>&1
                Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows Defender\Scan" /v "ScheduleTime" /t REG_DWORD /d 0 /f >nul 2>&1
                Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows Defender\Signature Updates" /v "DisableUpdateOnStartupWithoutEngine" /t REG_DWORD /d 1 /f >nul 2>&1
                Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows Defender\Signature Updates" /v "ScheduleDay" /t REG_DWORD /d 8 /f >nul 2>&1
                Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows Defender\Signature Updates" /v "ScheduleTime" /t REG_DWORD /d 0 /f >nul 2>&1
                Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows Defender\Signature Updates" /v "SignatureUpdateCatchupInterval" /t REG_DWORD /d 0 /f >nul 2>&1
                Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows Defender\SpyNet" /v "DisableBlockAtFirstSeen" /t REG_DWORD /d "1" /f >nul 2>&1
                Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows Defender\Spynet" /v "LocalSettingOverrideSpynetReporting" /t REG_DWORD /d 0 /f >nul 2>&1
                Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows Defender\Spynet" /v "SpyNetReporting" /t REG_DWORD /d "0" /f >nul 2>&1
                Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows Defender\Spynet" /v "SpyNetReportingLocation" /t REG_MULTI_SZ /d "0" /f >nul 2>&1
                Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows Defender\Spynet" /v "SubmitSamplesConsent" /t REG_DWORD /d "2" /f >nul 2>&1
                Reg add "HKLM\TK_SYSTEM\ControlSet001\Control\WMI\Autologger\DefenderApiLogger" /v "Start" /t REG_DWORD /d "0" /f >nul 2>&1
                Reg add "HKLM\TK_SYSTEM\ControlSet001\Control\WMI\Autologger\DefenderAuditLogger" /v "Start" /t REG_DWORD /d "0" /f >nul 2>&1

    MSMG, Are all these settings necessary for LTSC or only a part of them?

    p.s

    I think there are a lot here!
     
  15. zero cool root

    zero cool root MDL Senior Member

    Jun 17, 2011
    298
    89
    10
    @Enthousiast

    Can I break the OS using the command below..??

    Code:
    Dism /Image:x:\ToolKit_v11.3\Mount\Install\1\ /Cleanup-Image /StartComponentCleanup
    
    Thanks in advance..!!
     
  16. Windows 10 User

    Windows 10 User MDL Expert

    Feb 2, 2017
    1,229
    74
    60
    Do I have to integrate the separate LCU and SSU CAB files on MSMG ToolKit or just the entire LCU MSU file?