Multi-OEM/Retail Project {MRP} - Mk3

Discussion in 'MDL Projects and Applications' started by mxman2k, Oct 15, 2016.

  1. Carlos Detweiller

    Carlos Detweiller Emperor of Ice-Cream
    Staff Member

    Dec 21, 2012
    7,050
    8,334
    240
    Mhm, OK, then I don't need to try 1.08e against the Server 2012 DC at this time.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  2. LuKaWin10

    LuKaWin10 MDL Member

    Oct 6, 2023
    117
    81
    10
    I got SLIC 2.3 modded on my old motherboard. Gonna try MRP on Server 2012 R2 when I make the ISO and tell you the results!
     
  3. Dubioza Kolektiv

    Dubioza Kolektiv MDL Addicted

    Dec 27, 2012
    895
    1,496
    30
  4. Enthousiast

    Enthousiast MDL Tester

    Oct 30, 2009
    50,502
    107,368
    450
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  5. mxman2k

    mxman2k MDL Developer

    Jun 20, 2007
    6,534
    21,765
    210
    #12045 mxman2k, Mar 8, 2025
    Last edited: Mar 8, 2025
    (OP)
    Hmm it seems the license channel (ProductKeyChannel) has got really muddy recently with ESU, TSForge etc so i may just either leave it as it is or remove that routine and just simplify things and not have that data shown.

    This will be for MRP and the GUI QT.

    I not have the time at the moment to spend adjusting the routine to then have something throw another spanner in the works. :(

    -------

    On a different off topic note some good news i found out that my landlord has finally approved of the 'Managed Move' , not sure when but the only hold up at the moment seems to be no suitable places for me to move into.

    Only taken 5 months of battling with several departments, councils and social prescribers ...

    Have more scans shortly, a CT chest scan to see if the 'lumps' have increased or decreased and two days later a MRI on my liver as the Sarcoidosis has spread to that area... :(

    Once moved and settled in i will hopefully be able to restart on the GUI QT v2.xx as i will have access to my main PC again :).

    MRP will probably have a re-write too and make things more modular therefore making it easier to understand , if the time comes i have to pass on the MRP baton so they can quickly resume working on the projects. The GUI QT is fairly modular due to the nature of how Autoit works - no goto statement makes things a lot harder to accomplish as you have to think outside the box at times. :D
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  6. abbodi1406

    abbodi1406 MDL KB0000001

    Feb 19, 2011
    17,438
    92,370
    340
    You could read ProductKeyChannel from DigitalProductId4 registry (using powershell)
     
  7. mxman2k

    mxman2k MDL Developer

    Jun 20, 2007
    6,534
    21,765
    210
    #12047 mxman2k, Mar 8, 2025
    Last edited: Mar 8, 2025
    (OP)
    :eek: powershell:D

    Something like?
    Code:
    
    $did4 = Get-ItemProperty -EA 0 "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion" | select -EA 0 -Expand DigitalProductId4 ; if ($null -NE $did4) { $ProductKeyChannel = ([System.Text.Encoding]::Unicode.GetString($did4, 1016, 128)).Trim([char]$null) } ; Write-Host $ProductKeyChannel
    
    
    Now the fun part to convert for the GUI QT , mrp will be easy enough with a FOR loop , autoit its a bit more involved but possible to get a single result.

    Getting powershell to be a 'one liner' was a trial and error as i thought the ';' was a 'REM' like in autoit :oops:
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  8. haris_mdlf69

    haris_mdlf69 MDL Addicted

    Oct 23, 2018
    601
    1,058
    30
    -------------------------------------------------------------------------------------------------------------------
    Query Tool GUI v1.08e
    -------------------------------------------------------------------------------------------------------------------

    Log Date {UTC}: 03/08/2025 -- 17:55 {24-hour}

    Some results may be shortened to fit the output stage, such as RAM information or storage drive names.

    This is the postable report that does not contain full serial or sensitive information.

    On Hypervisors some results may be missing due to being undefined within the VM's configuration file{s}.

    GUI Font Used : Lucida Console | Size: 10 | DPI Scale: 1

    ===================================================================================================================
    Operating System Information
    ===================================================================================================================
    Installation Type : Client
    Name : Microsoft Windows 10 Pro
    Edition Name {Registry} : Professional
    Composition Name {Registry} : Enterprise
    OS/CPU Architecture : CPU and OS is 64 bit
    Build : 10.0.19045 {UBR:5487} {22H2}
    Initial Full Build Information : 19041.1.amd64fre.vb_release.191206-1406
    Build Branch : vb_release {Vibranium}
    Setup/Install Locale : English (United States)
    GeoID Nation ISO Location : India
    Current Keyboard Language : {16393}
    Current Keyboard Name : Enhanced (101- or 102-key)
    Number of Function Keys : 12
    Keyboard Description : Standard PS/2 Keyboard
    Installed/Available Languages : en-US
    Stock Keeping Unit {SKU} : 48
    Experience Pack : 1000.19061.1000.0
    Installation Date/Time {UTC} : 03/08/2025 at 12:11 PM
    Last Boot Up Date/Time {UTC} : 03/08/2025 at 17:51 PM
    Product ID : 00330-80000-00000-AA384 {Extended: 03612-03308-000-000000-00-16393-19045.0000-0672025}
    Time Zone Data : India Standard Time
    Hours offset from GMT : 5.5
    Daylight Saving In Effect : --
    Daylight Adjust Clock Mode : Enabled/Checked
    Upgrade or Clean Installation : Clean
    Previous OS Upgraded From : N/A
    Touch Device : No Touch device detected

    StorageSense Policy : N/A N/A N/A
    Number of Licensed Users : 1
    Data Execution Prevention : OptIn/Default {Ref: 2}
    DEP Available : Yes
    DEP 32Bit Applications : Yes
    DEP Drivers : Yes
    DEP Support Policy : Enabled for OS Kernel, essential binaries and all Windows-based Services.
    Clipboard History Service : Manual {Value:3}
    Clipboard History : Disabled {0}
    Allow Cross Device History : Enabled {Default}
    Allow Clipboard History : Enabled {Default}
    Current Power Policy Used : Home/Office Desk
    Power Plans Available : Balanced Only {Others may be 'hidden'}
    Current Active Power Plan : Balanced
    Long File Paths Enabled : No {0x0} NTFS is not set to allow file paths greater than 260 characters
    Part of a Domain : No
    Domain/Device Role : Standalone Workstation {0}
    Portable OS {Win to Go} : No
    Feature Update Status : Not paused
    Quality Update Status : Not paused
    WSH Availability Status : Windows Scripting Host is not restricted. {All Users}
    WSH 'DisplayLogo' Value : Enabled {1} [All Users]
    HVCI Protection Status : N/A
    Download Over Metered Internet : Not Configured {default}
    Exclude Drivers from MS/WU : Not Configured {default}
    Pointing Device {Mouse} : PS/2 Compatible Mouse
    WMIC.EXE information : WMIC.exe appears to be operative in this build.

    Hypervisor Present/Installed : No
    Virtual Machine Data : VMware {Hypervisor}
    Shipped with Reserved 7GB : Yes
    Dirty Shutdown Count : N/A
    VL/KMS Capable/Permitted : Yes
    KMS Activation In Use : No
    Win7 ESU {POS7} Patch {exp} : Not required on this OS

    Windows Key 1 Installed : 3V66T (Last 5 digits shown)
    Windows DpID4 Installed : 3V66T (Last 5 digits shown)
    Windows Default Installed : 8HV2C (Last 5 digits shown)
    Windows Default4 Installed : 8HV2C (Last 5 digits shown)

    TPM Information : Active : N/A, Enabled : N/A, Owned : N/A, Version : N/A, Vendor : N/A

    =============== Windows 11 Checks ===============
    Checked for W11 Target Upgrade : No
    Target Build Number : N/A
    Device is OEM Specific : N/A
    DirectX 12 Detected : N/A
    Device is Genuine : N/A
    Touch Capable Hardware : N/A
    Upgrade Experience {1} : N/A
    Upgrade Experience {2} : N/A
    Upgrade Fail Reason{s} : N/A
    Bypass TPM Check : N/A
    Bypass Secure Boot Check : N/A
    Bypass RAM Check : N/A
    Allow W11 WU Upgrade : N/A
    CompatTelRunner.exe {Appraiser} : Process is not running. {File is present in C:\Windows\System32}

    If 'N/A' is shown then the data may not of been fully compiled by the OS or via WU yet.
    When Fail Reason's are listed then they are not compatible and will be blocked for the upgrade.
    If any Upgrade Experience's are listed as 'Orange' then they will require attention to pass the OS checks.
    If CompatTelRunner.exe is prevented from running then the W11 checks will not be performed.

    ===================================================================================================================
    Booted System Drive Partition Information
    ===================================================================================================================
    Drive Type : SSD
    BUS Type : NVMe
    Total Space : 39.37 GB
    Free Space : 17.15 GB
    Partition Type : GPT
    Firmware Boot Type : UEFI Mode {R:1}
    Secure Boot Status : Disabled [Ref:1]
    File System : NTFS
    System Drive Letter : C:
    Bitlocker Protection Status : Volume C: is not a BitLocker volume {2}.

    Interface Information : What mode an interface is in
    IDE Controller Mode : Integrated Drive Electronics {IDE}
    SCSI Controller Mode : Microsoft Storage Spaces

    Disk and Partition Information : Driveletter | Disk #, Partition # | Model Name {50 Chars max} | Size 'GB'
    \\.\PHYSICALDRIVE0 C: | Disk #0, Partition #1 | VMware Virtual NVMe Disk | 39.37 GB

    Drive letters/Partitions are shown as they are defined via the connected ports in the BIOS.
    Partitions without Drive letters assigned are not shown.

    ===================================================================================================================
    Memory Information
    ===================================================================================================================
    Total Physical : 4193336 KB (4 GB)
    Available Physical : 2849944 KB (2.72 GB)
    Total Page Size : 5635128 KB (5.37 GB)
    Available Page Size : 4478544 KB (4.27 GB)
    Total Virtual Size : 4194176 KB (4 GB)
    Available Virtual : 4009836 KB (3.82 GB)
    Memory Type : Synchronous DRAM {3}
    Memory Error Correction : Non-ECC
    Memory Slots Fitted : 64
    Memory Slots Used : 1
    Memory Slots Free : 63
    Motherboard's Max Memory : 68157440 KB (65 GB}
    DIMM Information {First Eight} : RAM slot #0 4096MB @ MHz

    On Hypervisors some results may be missing due to being undefined within the VM's configuration file{s}.

    ===================================================================================================================
    Graphics Information
    ===================================================================================================================
    Adaptor Name : Microsoft Basic Display Adapter
    Adaptor DACType : VMware
    Adaptor Driver Information : 10.0.19041.3636 {2006/06/21}
    Adaptor Video Ram {See Notes} : N/A
    Adaptor Status : Active

    Adaptor Name : Not Detected
    Adaptor DACType : N/A
    Adaptor Driver Information : N/A
    Adaptor Video Ram {See Notes} : N/A
    Adaptor Status : Inactive

    Virtual Desktop Resolution : 1024 x 768
    Bits Per Pixel : 32
    Video Mode Description : 1024 x 768 x 4294967296 colors {Ref:1}

    WinSAT Scores/Status : {Via WMIC}

    No assessment available. Run 'WinSAT Formal' from a command/PS prompt.


    Some values may not be accurate due to 32 bit API limitations.
    VRam does not include any 'Shared' or 'Dynamically' allocated memory.
    On Hypervisors some results may be missing due to being undefined within the VM's configuration file{s}.

    ===================================================================================================================
    Network Adaptor Information
    ===================================================================================================================
    Adaptor 1 Name : Intel(R) 82574L Gigabit Network Connection
    Connection Status : Media Disconnected
    MAC Address : 00:0C:29:xx:xx:00

    ===================================================================================================================
    Processor 1 Information
    ===================================================================================================================
    Name : Intel(R) Core(TM) i5-7200U CPU @ 2.50GHz
    Architecture {Bits} : 64
    L2 Cache Size {MB} : 256
    L3 Cache Size {MB} : 3072
    Current / Max Speed {MHz} : 2712 / 2712 {Not Turbo Speed}
    Physical Cores : 1
    Logical Cores : 1
    Processor Id : 0x0F8BFBFF000806E9
    Virtualization Mode : Query not present on this OS/Build
    Manufacturer : GenuineIntel [Intel]
    Description : Intel64 Family 6 Model 142 Stepping 9
    Motherboard Connection : CPU 1
    OS Loaded Microcode Revision : 0x00000000F6000000
    Bios Microcode Revision : 0x00000000F6000000
    Processor Family : 2
    Sockets/CPU's Present : 2
    Feature Set : 0x00000000311B3DFF
    FPU VME DE PSE TSC MSR PAE MCE CX8 APIC SEP MTRR PGE MCA CMOV PAT PSE36 CLFSH MMX FXSR SSE SSE2 SS

    SSE3 PCLMULQDQ SSSE3 FMA CX16 PCID SSE4.1 SSE4.2 X2APIC MOVBE POPCNT TSC-DEADLINE AES XSAVE OSXSAVE AVX F16C RDRND HYPERVISOR

    Motherboard Connection is based on a OS internal database, MS may not have updated it.
    Microcode registry values are converted from binary to hexadecimal, not reliable for all devices.

    ===================================================================================================================
    DMI/BIOS Information
    ===================================================================================================================
    System Manufacturer : VMware, Inc.
    System Product Name : VMware20,1
    BaseBoard Manufacturer : Intel Corporation
    BaseBoard Product : 440BX Desktop Reference Platform
    BaseBoard Version : None
    PC System Type : Desktop {1}
    UEFI Certifications : CA_2011 PCA_2011
    UEFI DBX Revocations {Exp} : Debian
    MS S/Boot CVE-2020-10713 : Boothole fix does not appear to be available in UEFI

    BIOS Vendor : VMware, Inc.
    BIOS Release Date : 12/05/2022
    BIOS Version : VMW201.00V.20904234.B64.2212051119
    Primary BIOS : Yes
    SMBIOS Present : Yes
    SMBIOS Version : 2.7
    SLIC/BIOS Data : INTEL - 6040000

    Valid SLIC Name : No Valid SLIC Table {See notes below}
    Possible Brand Theme : VMWare {System Manufacturer}

    SLIC Table Status : No valid SLIC table {See notes below}
    Emulated SLIC : Not required/used for this OS

    MSDM Key Description : No MSDM key Description found
    MSDM Key Detected : Not Present
    MSDM Key OS Version/Edition : N/A

    Notes : When in UEFI mode the SLIC information may not be shown fully as it may be partially 'hidden' by the OEM/BIOS.
    : On Hypervisors some results may be missing due to being undefined within the VM's configuration file{s}.

    ===================================================================================================================
    Miscellaneous Information
    ===================================================================================================================
    Which MRP Version Used : N/A

    Wallpaper Style : Fill image to display resolution
    Current Theme Used : aero.theme

    Installed Dot Net Frameworks : 4.8 4.0
    Installed Powershell Versions : 1.0, 2.0, 3.0, 4.0, 5.0, 5.1

    Windows Activation Status : Windows is in Notification mode
    Windows Licence Reason : C004F034
    Windows Product Key Channel : Retail {R:pKC}
    Device has KMS Enabled : No
    KMS Auto Renewal (hook) : No

    MS Office {MSI/Traditional} : Not Detected
    C2R MS Office : Not Detected
    C2R Excluded Apps : N/A
    C2R Last Update Channel : N/A
    C2R Office Activation Status : N/A
    C2R Partial Product Key : N/A
    Office Reason Information : No reason information to show/No Issues
    Office MAK/KMS Information : No MAK or KMS activation detected

    ===================================================================================================================
    Security Information
    ===================================================================================================================
    Defender Tamper Protection : Both Tamper and Cloud-delivered Protections are disabled
    Defender TProtection Exclusions : Disabled
    Defender Service Status : Disabled
    Defender Code Integrity Mode : N/A
    Defender Credential Guard : Disabled
    Windows Firewall Service State : Running {Reg: Auto}

    Security Product Details : {If detected}
    No Security Installed

    -------------------------------------------------------------------------------------------------------------------
    End of Report
    -------------------------------------------------------------------------------------------------------------------
    https://forums.mydigitallife.net/th...ows-10-installation.88040/page-5#post-1872562
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  9. mxman2k

    mxman2k MDL Developer

    Jun 20, 2007
    6,534
    21,765
    210
    I had to disable defender on my laptop as it was getting very aggressive with MRP files even when set as exceptions every time it updated its database the damn thing un-exceptioned my files :(

    Im using Panda Dome free, at least that respects my exceptions and it not just grab a file for the fun, it actually asks me first :D
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  10. mxman2k

    mxman2k MDL Developer

    Jun 20, 2007
    6,534
    21,765
    210
    #12050 mxman2k, Mar 8, 2025
    Last edited: Mar 8, 2025
    (OP)
    Hmm this command line works ok and in my case i got 'RETAIL' as the result.

    Code:
    
    powershell.exe -command "$did4 = Get-ItemProperty -EA 0 'HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion' | select -EA 0 -Expand DigitalProductId4 ; if ($null -NE $did4) { $ProductKeyChannel = ([System.Text.Encoding]::Unicode.GetString($did4, 1016, 128)).Trim([char]$null) } ; Write-Host $ProductKeyChannel"
    
    
    Yet when run in autoit i know it is 'run' ok but i just cannot parse the returned result and its so annoying!

    Here is the Autoit test script:
    Code:
    
    #include <AutoItConstants.au3>
    
    Local $sOutput
    Local $sText = "$did4 = Get-ItemProperty -EA 0 'HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion' | select -EA 0 -Expand DigitalProductId4 ; if ($null -NE $did4) { $ProductKeyChannel = ([System.Text.Encoding]::Unicode.GetString($did4, 1016, 128)).Trim([char]$null) } ; Write-Host $ProductKeyChannel"
    Local $sSTDOUT = "", $sSTDERR = ""
    Local $sCMD = "powershell.exe -command " & '"' & $sText & '"'
    Local $pid = Run($sCMD, @SystemDir, @SW_hide, $STDIN_CHILD + $STDOUT_CHILD + $STDERR_CHILD)
    
       ; StdinWrite($pid, @CRLF) ; Close STDIN
       ; StdinWrite($pid)
    
    ConsoleWrite("Using the Command line: " & @CRLF & $sCMD & @CRLF)
    
        While 1
            $sOutput = StdoutRead($pid)
                If @error Then
                $sSTDOUT = "Powershell output stream has ended."
                exitloop
            EndIf
    
            If $sOutput <> "" Then $sSTDOUT = $sSTDOUT & @CRLF & $sOutput ; Drops empty lines
        WEnd
    
        While 1
            $sOutput = StderrRead($pid)
            If @error Then
                $sSTDERR = "None."
                ExitLoop
            endif
            If $sOutput <> "" Then $sSTDERR = $sSTDERR & @CRLF & $sOutput ; Drops empty lines
        WEnd
    
        ConsoleWrite("Return : " & $sSTDOUT & @CRLF)
        ConsoleWrite("Errors : " & $sSTDERR & @CRLF)
    
    
    Autoit's console output:
    Code:
    
    Using the Command line:
    powershell.exe -command "$did4 = Get-ItemProperty -EA 0 'HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion' | select -EA 0 -Expand DigitalProductId4 ; if ($null -NE $did4) { $ProductKeyChannel = ([System.Text.Encoding]::Unicode.GetString($did4, 1016, 128)).Trim([char]$null) } ; Write-Host $ProductKeyChannel"
    Return : Powershell output stream has ended.
    Errors : None.
    
    
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  11. abbodi1406

    abbodi1406 MDL KB0000001

    Feb 19, 2011
    17,438
    92,370
    340
    I think you should use Write-Output
    Write-Host is un-redirectable (except on PS 5.0+)
     
  12. mxman2k

    mxman2k MDL Developer

    Jun 20, 2007
    6,534
    21,765
    210
    #12052 mxman2k, Mar 8, 2025
    Last edited: Mar 8, 2025
    (OP)
    Sadly still no go :(

    Seems autoit gets the correct process ID number from the run'ed line but it not pull the result from the stdout/in references.

    Other pshell one liners work ok, just somehow this one got me stumped!
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  13. mxman2k

    mxman2k MDL Developer

    Jun 20, 2007
    6,534
    21,765
    210
    #12053 mxman2k, Mar 8, 2025
    Last edited: Mar 8, 2025
    (OP)
    I think the only way will to be redirect output to a text file then read that text file's first line in and if it matches the channel key name in a list to then put it in a variable.

    Still a long winding road way to achieve the desired result.

    It's late here and been trying different ways and still no go, so it seems that the intermediate text file is the 'simplest' method for this scenario. Time to call it a night and resume when I have time.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  14. Carlos Detweiller

    Carlos Detweiller Emperor of Ice-Cream
    Staff Member

    Dec 21, 2012
    7,050
    8,334
    240
    No rush.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  15. abbodi1406

    abbodi1406 MDL KB0000001

    Feb 19, 2011
    17,438
    92,370
    340
    Maybe you need to escape '$' in powershell command, i don't know if or how AutoIt interpret it

    or get rid of it :D
    Code:
    powershell.exe -command "([System.Text.Encoding]::Unicode.GetString((Get-ItemProperty -EA 0 'HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion' | select -EA 0 -Expand DigitalProductId4), 1016, 128)).Trim(\"`0\")"
     
  16. mxman2k

    mxman2k MDL Developer

    Jun 20, 2007
    6,534
    21,765
    210
    $ in autoit is for variables string and numeric. Took me a while to remember that. Similar to powershell.

    Escaping a variable is something I will look into as not needed to do before as far as I remember.

    I have used pshell lines with $ in before and all worked ok.

    The run and runwait commands are like

    run ("commands to run")

    I have even tried calling the script via powershell -file script.ps1 which runs ok but it just not give back the result I can use in this case.

    I even made sure execution bypass is used when I tried .ps1 way.

    I have used pshell one liners before and got the value returned.

    I not give up easy and will plug away at it until I beat it into submission. :D
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  17. mxman2k

    mxman2k MDL Developer

    Jun 20, 2007
    6,534
    21,765
    210
    Will give your line a try as soon as I can.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  18. mxman2k

    mxman2k MDL Developer

    Jun 20, 2007
    6,534
    21,765
    210
    #12058 mxman2k, Mar 10, 2025
    Last edited: Mar 10, 2025
    (OP)
    Totally a no go with powershell via autoit, it would not read the 64 bit registry at all - no idea why but i had a play about and using a binary to string conversion skipping the chr$ 00 (null) and finding the offset in the binary key result i have managed to get a working script and its way faster than powershell too!


    Exit code: 0 Time: 0.8799 :eek:

    Needs a bit of refining but only took me 4 hours to work out the offset, then work out how to skip every two numbers which was 00 and hope to get a result in a human string of letters. :D
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  19. haris_mdlf69

    haris_mdlf69 MDL Addicted

    Oct 23, 2018
    601
    1,058
    30
    When Tamper Protection set to 0 instead of 4
    Code:
    -------------------------------------------------------------------------------------------------------------------
                                                 Query Tool GUI v1.08e
    -------------------------------------------------------------------------------------------------------------------
    
    Log Date {UTC}: 03/11/2025 -- 02:49 {24-hour}
    
    Some results may be shortened to fit the output stage, such as RAM information or storage drive names.
    
    This is the postable report that does not contain full serial or sensitive information.
    
    GUI Font Used : Lucida Console | Size: 10 | DPI Scale: 1
    
    ===================================================================================================================
                                                 Operating System Information
    ===================================================================================================================
    Installation Type               : Client
    Name                            : Microsoft Windows 10 Pro
    Edition Name {Registry}         : Professional
    Composition Name {Registry}     : Enterprise
    OS/CPU Architecture             : CPU and OS is 64 bit
    Build                           : 10.0.19045 {UBR:5487} {22H2}
    Initial Full Build Information  : 19041.1.amd64fre.vb_release.191206-1406
    Build Branch                    : vb_release {Vibranium}
    Setup/Install Locale            : English (United States)
    GeoID Nation ISO Location       : India
    Current Keyboard Language       : English - United States {1033}
    Current Keyboard Name           : Enhanced (101- or 102-key)
    Number of Function Keys         : 12
    Keyboard Description            : Standard PS/2 Keyboard
    Installed/Available Languages   : en-US
    Stock Keeping Unit {SKU}        : 48
    Experience Pack                 : 1000.19061.1000.0
    Installation Date/Time {UTC}    : 03/10/2025 at 20:29 PM
    Last Boot Up Date/Time {UTC}    : 03/11/2025 at 2:35 AM
    Product ID                      : 00330-80000-00000-AA360  {Extended: 03612-03308-000-000000-00-16393-19045.0000-0702025}
    Time Zone Data                  : India Standard Time
    Hours offset from GMT           : 5.5
    Daylight Saving In Effect       : --
    Daylight Adjust Clock Mode      : Enabled/Checked
    Upgrade or Clean Installation   : Clean
    Previous OS Upgraded From       : N/A
    Touch Device                    : ELAN Touchpad {ACPI\ETD0712\4&2D7C964C&0}
    
    StorageSense Policy             : Disabled {0x0}
    Number of Licensed Users        : 1
    Data Execution Prevention       : OptIn/Default {Ref: 2}
    DEP Available                   : Yes
    DEP 32Bit Applications          : Yes
    DEP Drivers                     : Yes
    DEP Support Policy              : Enabled for OS Kernel, essential binaries and all Windows-based Services.
    Clipboard History Service       : Manual {Value:3}
    Clipboard History               : Disabled {0}
    Allow Cross Device History      : Enabled {Default}
    Allow Clipboard History         : Enabled {Default}
    Current Power Policy Used       : Home/Office Desk
    Power Plans Available           : Balanced Only {Others may be 'hidden'}
    Current Active Power Plan       : Balanced
    Long File Paths Enabled         : No {0x0} NTFS is not set to allow file paths greater than 260 characters
    Part of a Domain                : No
    Domain/Device Role              : Standalone Workstation {0}
    Portable OS {Win to Go}         : No
    Feature Update Status           : Not paused
    Quality Update Status           : Not paused
    WSH Availability Status         : Windows Scripting Host is not restricted. {All Users}
    WSH 'DisplayLogo' Value         : Enabled {1} [All Users]
    HVCI Protection Status          : N/A
    Download Over Metered Internet  : Not Configured {default}
    Exclude Drivers from MS/WU      : Not Configured {default}
    Pointing Device {Mouse}         : ELAN Touchpad
    WMIC.EXE information            : WMIC.exe appears to be operative in this build.
    
    Hypervisor Present/Installed    : No
    Virtual Machine Data            : This computer does not appear to be a virtual machine
    Shipped with Reserved 7GB       : Yes
    Dirty Shutdown Count            : N/A
    VL/KMS Capable/Permitted        : Yes
    KMS Activation In Use           : No
    Win7 ESU {POS7} Patch {exp}     : Not required on this OS
    
    Windows Key 1 Installed         : 3V66T (Last 5 digits shown)
    Windows DpID4 Installed         : 3V66T (Last 5 digits shown)
    Windows Default Installed       : 8HV2C (Last 5 digits shown)
    Windows Default4 Installed      : 8HV2C (Last 5 digits shown)
    
    TPM Information                 : Active : Yes, Enabled : Yes, Owned : Yes, Version : 2.0, Vendor : Intel
    
    =============== Windows 11 Checks ===============
    Checked for W11 Target Upgrade  : No
    Target Build Number             : N/A
    Device is OEM Specific          : N/A
    DirectX 12 Detected             : N/A
    Device is Genuine               : N/A
    Touch Capable Hardware          : N/A
    Upgrade Experience {1}          : N/A
    Upgrade Experience {2}          : N/A
    Upgrade Fail Reason{s}          : N/A
    Bypass TPM Check                : N/A
    Bypass Secure Boot Check        : N/A
    Bypass RAM Check                : N/A
    Allow W11 WU Upgrade            : N/A
    CompatTelRunner.exe {Appraiser} : Process is not running. {File is present in C:\Windows\System32}
    
    If 'N/A' is shown then the data may not of been fully compiled by the OS or via WU yet.
    When Fail Reason's are listed then they are not compatible and will be blocked for the upgrade.
    If any Upgrade Experience's are listed as 'Orange' then they will require attention to pass the OS checks.
    If CompatTelRunner.exe is prevented from running then the W11 checks will not be performed.
    
    ===================================================================================================================
                                      Booted System Drive Partition Information
    ===================================================================================================================
    Drive Type                      : SSD
    BUS Type                        : SATA
    Total Space                     : 79.37 GB
    Free Space                      : 49.88 GB
    Partition Type                  : GPT
    Firmware Boot Type              : UEFI Mode {R:1}
    Secure Boot Status              : Enabled [Ref:1]
    File System                     : NTFS
    System Drive Letter             : C:
    Bitlocker Protection Status     : Volume C: is not a BitLocker volume {2}.
    
    Interface Information           : What mode an interface is in
    IDE Controller Mode             : Advanced Host Controller Interface {AHCI}
    SCSI Controller Mode            : Microsoft Storage Spaces
    
    Disk and Partition Information  : Driveletter | Disk #, Partition # | Model Name {50 Chars max} | Size 'GB'
    \\.\PHYSICALDRIVE0                C: | Disk #0, Partition #1 | WD Blue SA510 2.5 500GB                            | 79.37 GB
    \\.\PHYSICALDRIVE0                D: | Disk #0, Partition #3 | WD Blue SA510 2.5 500GB                            | 385.76 GB
    
    Drive letters/Partitions are shown as they are defined via the connected ports in the BIOS.
    Partitions without Drive letters assigned are not shown.
    
    ===================================================================================================================
                                              Memory Information                                                     
    ===================================================================================================================
    Total Physical                  : 8293412 KB (7.91 GB)
    Available Physical              : 4330592 KB (4.13 GB)
    Total Page Size                 : 10259492 KB (9.78 GB)
    Available Page Size             : 5988944 KB (5.71 GB)
    Total Virtual Size              : 4194176 KB (4 GB)
    Available Virtual               : 3991248 KB (3.81 GB)
    Memory Type                     : DDR4 {26}
    Memory Error Correction         : Non-ECC
    Memory Slots Fitted             : 2
    Memory Slots Used               : 1
    Memory Slots Free               : 1
    Motherboard's Max Memory        : 33554432 KB (32 GB}
    DIMM Information {First Eight}  : Bottom-Slot 2(right) 8192MB @ 2133MHz
    
    ===================================================================================================================
                                              Graphics Information                                                   
    ===================================================================================================================
    Adaptor Name                    : Intel(R) HD Graphics 620
    Adaptor DACType                 : Internal {iGPU}
    Adaptor Driver Information      : 21.20.16.4526 {2016/09/23}
    Adaptor Video Ram {See Notes}   : 1024 MB {Routine:1R1}
    Adaptor Status                  : Active
    
    Adaptor Name                    : Not Detected
    Adaptor DACType                 : N/A
    Adaptor Driver Information      : N/A
    Adaptor Video Ram {See Notes}   : N/A
    Adaptor Status                  : Inactive
    
    Virtual Desktop Resolution      : 1366 x 768
    Bits Per Pixel                  : 32
    Video Mode Description          : 1366 x 768 x 4294967296 colors {Ref:1}
    
    WinSAT Scores/Status            : {Via WMIC}
    
    No assessment available. Run 'WinSAT Formal' from a command/PS prompt.
    
    
    Some values may not be accurate due to 32 bit API limitations.
    VRam does not include any 'Shared' or 'Dynamically' allocated memory.
    
    ===================================================================================================================
                                            Network Adaptor Information                                             
    ===================================================================================================================
    Adaptor 1 Name                  : Realtek PCIe GbE Family Controller
    Connection Status               : Media Disconnected
    MAC Address                     : 10:E7:C6:xx:xx:81
    
    Adaptor 2 Name                  : Realtek RTL8723BE 802.11 bgn Wi-Fi Adapter
    Connection Status               : Connected
    MAC Address                     : B0:52:16:xx:xx:37
    
    ===================================================================================================================
                                              Processor 1 Information                                               
    ===================================================================================================================
    Name                            : Intel(R) Core(TM) i5-7200U CPU @ 2.50GHz
    Architecture  {Bits}            : 64
    L2 Cache Size {MB}              : 512
    L3 Cache Size {MB}              : 3072
    Current / Max Speed {MHz}       : 2511 / 2712 {Not Turbo Speed}
    Physical Cores                  : 2
    Logical Cores                   : 4
    Processor Id                    : 0xBFEBFBFF000806E9
    Virtualization Mode             : Enabled
    Manufacturer                    : GenuineIntel [Intel]
    Description                     : Intel64 Family 6 Model 142 Stepping 9
    Motherboard Connection          : U3E1
    OS Loaded Microcode Revision    : 0x00000000F6000000
    Bios Microcode Revision         : 0x00000000F6000000
    Processor Family                : 205
    Sockets/CPU's Present           : 1
    Feature Set                     : 0x000000003D1B3FFF
    FPU VME DE PSE TSC MSR PAE MCE CX8 APIC SEP MTRR PGE MCA CMOV PAT PSE36 CLFSH DS ACPI MMX FXSR SSE SSE2 SS HTT TM PBE
    
    SSE3 PCLMULQDQ DTES64 MONITOR DS-CPL VMX EST TM2 SSSE3 SDBG FMA CX16 XTPR PDCM PCID SSE4.1 SSE4.2 X2APIC MOVBE POPCNT TSC-DEADLINE AES XSAVE OSXSAVE AVX F16C RDRND
    
    Motherboard Connection is based on a OS internal database, MS may not have updated it.
    Microcode registry values are converted from binary to hexadecimal, not reliable for all devices.
    
    ===================================================================================================================
                                                 DMI/BIOS Information                                               
    ===================================================================================================================
    System Manufacturer             : HP
    System Product Name             : HP 348 G4
    BaseBoard Manufacturer          : HP
    BaseBoard Product               : 82C7
    BaseBoard Version               : KBC Version 46.06
    PC System Type                  : Mobile {2}
    UEFI Certifications             : CA_2011 PCA_2011
    UEFI DBX Revocations {Exp}      : None detected
    MS S/Boot CVE-2020-10713        : Boothole fix does not appear to be available in UEFI
    
    BIOS Vendor                     : Insyde
    BIOS Release Date               : 10/18/2024
    BIOS Version                    : F.71
    Primary BIOS                    : Yes
    SMBIOS Present                  : Yes
    SMBIOS Version                  : 2.8
    SLIC/BIOS Data                  : HPQOEM - 0
    
    Valid SLIC Name                 : HP {See notes below}
    Possible Brand Theme            : HP {System Manufacturer}
    
    SLIC Table Status               : No valid SLIC table {See notes below}
    Emulated SLIC                   : Not required/used for this OS
    
    MSDM Key Description            : No MSDM key Description found
    MSDM Key Detected               : Not Present
    MSDM Key OS Version/Edition     : N/A
    
    Notes                           : When in UEFI mode the SLIC information may not be shown fully as it may be partially 'hidden' by the OEM/BIOS.
    
    ===================================================================================================================
                                              Miscellaneous Information                                             
    ===================================================================================================================
    Which MRP Version Used          : CY25M02D22-R160.BT4
    
    Wallpaper Style                 : Fill image to display resolution
    Current Theme Used              : Custom.theme
    
    Installed Dot Net Frameworks    : 4.8  4.0
    Installed Powershell Versions   : 1.0, 2.0, 3.0, 4.0, 5.0, 5.1
    
    Windows Activation Status       : Activated
    Windows Licence Reason          : Digital Store Licence
    Windows Product Key Channel     : Retail {RETAIL} with HWID {R:PKC}
    Device has KMS Enabled          : No
    KMS Auto Renewal (hook)         : No
    
    MS Office {MSI/Traditional}     : Not Detected
    C2R MS Office                   : Not Detected
    C2R Excluded Apps               : N/A
    C2R Last Update Channel         : N/A
    C2R Office Activation Status    : N/A
    C2R Partial Product Key         : N/A
    Office Reason Information       : No reason information to show/No Issues
    Office MAK/KMS Information      : No MAK or KMS activation detected
    
    ===================================================================================================================
                                                 Security Information                                               
    ===================================================================================================================
    Defender Tamper Protection      : Disabled
    Defender TProtection Exclusions : Disabled
    Defender Service Status         : Disabled
    Defender Code Integrity Mode    : N/A
    Defender Credential Guard       : Disabled
    Windows Firewall Service State  : Running {Reg: Auto}
    
    Security Product Details        : {If detected}
    No Security Installed
    
    -------------------------------------------------------------------------------------------------------------------
                                                  End of Report
    -------------------------------------------------------------------------------------------------------------------
    
    Specialize.cmd[Extract]
    Code:
    echo.
    echo =====================================================
    echo SECTION 2: DISABLE TAMPER PROTECTION
    echo =====================================================
    
    REM Disable Tamper Protection (Windows 10 1903+ and Windows 11)
    echo Disabling Tamper Protection...
    reg add "HKLM\SOFTWARE\Microsoft\Windows Defender\Features" /v "TamperProtection" /t REG_DWORD /d "0" /f
    if %errorlevel% neq 0 echo [ERROR] Failed to modify TamperProtection registry: %errorlevel%
    
    reg add "HKLM\SOFTWARE\Microsoft\Windows Defender\Features" /v "TamperProtectionSource" /t REG_DWORD /d "2" /f
    if %errorlevel% neq 0 echo [ERROR] Failed to modify TamperProtectionSource registry: %errorlevel%
    
    reg add "HKLM\SOFTWARE\Microsoft\Windows Defender\Windows Defender Exploit Guard\Controlled Folder Access" /v "EnableControlledFolderAccess" /t REG_DWORD /d "0" /f
    if %errorlevel% neq 0 echo [ERROR] Failed to modify EnableControlledFolderAccess registry: %errorlevel%
    
    
    Log
    Code:
    =====================================================
    SECTION 2: DISABLE TAMPER PROTECTION
    =====================================================
    Disabling Tamper Protection...
    The operation completed successfully.
    
    The operation completed successfully.
    
    The operation completed successfully.
    
    
    
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  20. mxman2k

    mxman2k MDL Developer

    Jun 20, 2007
    6,534
    21,765
    210
    #12060 mxman2k, Mar 10, 2025
    Last edited: Mar 10, 2025
    (OP)
    Tamperprotection can be 0 or 4 both equal disabled but one also means to disable cloud protection as well.

    As usual ms changed it in defender when I think win11 came out.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...