After using this tool, I tested the iso in virtualbox, it just uses 1gb of memory out of 4gb! But when i installed it in a 4gb ram HP laptop, it uses 1.5gb of memory, I don't know why. And also laptop shows 3.9gb as total memory instead of 4.
@Deeps_Morgan You will never have two computers with the same OS behave identically, let alone a VM vs real hardware. There will always be differences. Also, the 3.9gb thing is just hardware reserve for addressing and such. Simply put: RAM consumption is fine and your RAM is all there, being used.
@ I installed Whatsapp using this tool (Github: m-jishnu/alt-app-installer). This tool installs apps without store. But now i can't open it and this popup comes, "This app has been blocked by your system administrator"
I don't understand? Why do people who want different UWP apps keep posting in this thread - I want a store, I want -bla, bla, bla, - DON'T YOU UNDERSTAND THAT THIS SCRIPT IS ABOUT MAX PRIVACY?? These - your - additions break the basic assumptions of this script! The author has already written about it! If you don't like it - look for something else!!! Do you want maximum privacy - and at the same time - install an app - that violate this privacy? Sorry for the capital letters - but I can't read the last posts anymore. DO YOU UNDERSTAND WHAT IS PRIVACY AND TELEMETRY?
which is actually what the script does Code: REM Disable Background UWP Apps Reg add "HKLM\TK_NTUSER\SOFTWARE\Microsoft\Windows\CurrentVersion\BackgroundAccessApplications" /v "GlobalUserDisabled" /t REG_DWORD /d 1 /f >nul Reg add "HKLM\TK_NTUSER\SOFTWARE\Microsoft\Windows\CurrentVersion\Search" /v "BackgroundAppGlobalToggle" /t REG_DWORD /d 0 /f >nul Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" /v "LetAppsRunInBackground" /t REG_DWORD /d 2 /f >nul Reg add "HKLM\TK_NTUSER\SOFTWARE\Microsoft\Windows\CurrentVersion\BackgroundAccessApplications\Microsoft.Windows.CloudExperienceHost_cw5n1h2txyewy" /v "Disabled" /t REG_DWORD /d 1 /f >nul REM Privacy Restrictions for UWP apps Reg add "HKLM\TK_SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\activity" /v "Value" /t REG_SZ /d "Deny" /f >nul Reg add "HKLM\TK_SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\appDiagnostics" /v "Value" /t REG_SZ /d "Deny" /f >nul Reg add "HKLM\TK_SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\appointments" /v "Value" /t REG_SZ /d "Deny" /f >nul Reg add "HKLM\TK_SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\contacts" /v "Value" /t REG_SZ /d "Deny" /f >nul Reg add "HKLM\TK_SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\gazeInput" /v "Value" /t REG_SZ /d "Deny" /f >nul Reg add "HKLM\TK_SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\microphone" /v "Value" /t REG_SZ /d "Deny" /f >nul Reg add "HKLM\TK_SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\phoneCall" /v "Value" /t REG_SZ /d "Deny" /f >nul Reg add "HKLM\TK_SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\phoneCallHistory" /v "Value" /t REG_SZ /d "Deny" /f >nul Reg add "HKLM\TK_SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\radios" /v "Value" /t REG_SZ /d "Deny" /f >nul Reg add "HKLM\TK_SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\userAccountInformation" /v "Value" /t REG_SZ /d "Deny" /f >nul Reg add "HKLM\TK_SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\userDataTasks" /v "Value" /t REG_SZ /d "Deny" /f >nul Reg add "HKLM\TK_SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\webcam" /v "Value" /t REG_SZ /d "Deny" /f >nul Reg add "HKLM\TK_NTUSER\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\activity" /v "Value" /t REG_SZ /d "Deny" /f >nul Reg add "HKLM\TK_NTUSER\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\appDiagnostics" /v "Value" /t REG_SZ /d "Deny" /f >nul Reg add "HKLM\TK_NTUSER\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\appointments" /v "Value" /t REG_SZ /d "Deny" /f >nul Reg add "HKLM\TK_NTUSER\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\contacts" /v "Value" /t REG_SZ /d "Deny" /f >nul Reg add "HKLM\TK_NTUSER\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\gazeInput" /v "Value" /t REG_SZ /d "Deny" /f >nul Reg add "HKLM\TK_NTUSER\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\microphone" /v "Value" /t REG_SZ /d "Deny" /f >nul Reg add "HKLM\TK_NTUSER\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\phoneCall" /v "Value" /t REG_SZ /d "Deny" /f >nul Reg add "HKLM\TK_NTUSER\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\phoneCallHistory" /v "Value" /t REG_SZ /d "Deny" /f >nul Reg add "HKLM\TK_NTUSER\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\radios" /v "Value" /t REG_SZ /d "Deny" /f >nul Reg add "HKLM\TK_NTUSER\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\userAccountInformation" /v "Value" /t REG_SZ /d "Deny" /f >nul Reg add "HKLM\TK_NTUSER\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\userDataTasks" /v "Value" /t REG_SZ /d "Deny" /f >nul Reg add "HKLM\TK_NTUSER\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\webcam" /v "Value" /t REG_SZ /d "Deny" /f >nul Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" /v "LetAppsGetDiagnosticInfo" /t REG_DWORD /d 2 /f >nul Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" /v "LetAppsAccessAccountInfo" /t REG_DWORD /d 2 /f >nul Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" /v "LetAppsAccessMotion" /t REG_DWORD /d 2 /f >nul Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" /v "LetAppsAccessGazeInput" /t REG_DWORD /d 2 /f >nul Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" /v "LetAppsAccessBackgroundSpatialPerception" /t REG_DWORD /d 2 /f >nul Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" /v "LetAppsAccessContacts" /t REG_DWORD /d 2 /f >nul Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" /v "LetAppsAccessCalendar" /t REG_DWORD /d 2 /f >nul Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" /v "LetAppsAccessCallHistory" /t REG_DWORD /d 2 /f >nul Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" /v "LetAppsAccessTasks" /t REG_DWORD /d 2 /f >nul Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" /v "LetAppsAccessPhone" /t REG_DWORD /d 2 /f >nul Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" /v "LetAppsAccessRadios" /t REG_DWORD /d 2 /f >nul Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" /v "LetAppsSyncWithDevices" /t REG_DWORD /d 2 /f >nul rem Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" /v "LetAppsAccessTrustedDevices" /t REG_DWORD /d 2 /f >nul REM Disable Autoupdate Offline Maps Data Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows\Maps" /v "AutoDownloadAndUpdateMapData" /t REG_DWORD /d 0 /f >nul Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows\Maps" /v "AllowUntriggeredNetworkTrafficOnSettingsPage" /t REG_DWORD /d 0 /f >nul REM Disable UWP Messaging Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" /v "LetAppsAccessMessaging " /t REG_DWORD /d 2 /f >nul Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows\Messaging" /v "AllowMessageSync" /t REG_DWORD /d 0 /f >nul Reg add "HKLM\TK_NTUSER\SOFTWARE\Microsoft\Messaging" /v "CloudServiceSyncEnabled" /t REG_DWORD /d 0 /f >nul REM Disable Windows Mail UWP App Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows Mail" /v "ManualLaunchAllowed" /t REG_DWORD /d 0 /f >nul Reg add "HKLM\TK_SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\email" /v "Value" /t REG_SZ /d "Deny" /f >nul Reg add "HKLM\TK_NTUSER\SOFTWARE\Microsoft\Windows\CurrentVersion\CapabilityAccessManager\ConsentStore\email" /v "Value" /t REG_SZ /d "Deny" /f >nul Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows\AppPrivacy" /v "LetAppsAccessEmail" /t REG_DWORD /d 2 /f >nul
Yes, my goal was to create something like modernized Windows 7 like OS or something even more slim than Windows 10 LTSC. But, I will rethink this after march 2023 updates. Maybe some option to enable entire UWP/appx functionality like set EnableStore=1 would be good. Of course, people who choose such option, will have hybrid OS (less privacy, more original Win10 functionality). But it will be their choice.
I had these "access denied" errors the first time I used this tool. It turned out to be my firewall blocking some processes. Try running it in an administrator account with firewall off. Also, if you have SuRun installed, disable that also, it can interfere even when the tool is running with privileges.
Sure, just edit the "Slimdown10.cmd" and add the reg tweaks! However, I'm unsure whether they will be inserted better in SetupComplete.cmd or UserSetup.cmd or better in the tweaks section of the Slimdown10.cmd directly. I will give you some hints, how I do some configuration. When you want to add something to the Slimdown10.cmd I think the best start to edit the script is at line 916. At the start and at the end of my custom sections I always write a reminder, for a better overview e.g. Code: ::CustomSection1Start reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient" /v "EnableMDNS" /t REG_DWORD /d 0 /f >nul reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient" /v "EnableMulticast" /t REG_DWORD /d 0 /f >nul ::CustomSection1End When you want something added to the UserSetup.cmd, then look at line 884 there begins the configuration of this file. (UserSetup.cmd starts on first login after the installation of the OS and set things up for the new created User Account) I do it this way... Code: ::StartCustomUS echo reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\Serialize /v "StartupDelayInMSec" /t REG_DWORD /d 0x0 /f ^>nul 2^>^&^1>>"%~dp0mount\Windows\UserSetup.cmd" ::EndCustomUS When you want something added to the SetupComplete.cmd look at line 857, this is where SetupComplete.cmd configuration starts. I would try it this way, but I haven't done it yet! Code: ::StartCustomSC echo set "LOCALAPPDATA=%USERPROFILE%AppDataLocal">>"%~dp0mount\Windows\Setup\Scripts\SetupComplete.cmd" echo set "PSExecutionPolicyPreference=Unrestricted">>"%~dp0mount\Windows\Setup\Scripts\SetupComplete.cmd" echo powershell "%systemdrive%MyScript.ps1" -Argument >"%systemdrive%myscript_log.txt" ^>nul 2^>^&^1>>"%~dp0mount\Windows\Setup\Scripts\SetupComplete.cmd" ::EndCustomSC Hope this helps a bit... Edit: 1. Don't except to get support from @wkeller, when something goes wrong. The tool has its own config section at the beginning of the script! 2. I'm no pro I'm a noob in coding, but it should work this way! 3. About the SetupComplete.cmd editing I'm absolutely unsure, because I haven't done it myself yet. @wkeller, would you answer two Questions, please. 1. Why creates the tool no "OEM" Folder? 2. Why are most of the download links for the updates http instead of https, would it be not better to get it from https? (Edit: Wrong thread I mean in the Integrate7 Tool)
Thanks for the tip¡ already made a separate bat with all reg needed to run in first log in. Inside OEM FOLDER of course. ps: had to export the SetupComplete from install.wim after running the script to edit & call the 2nd bat.
If I am doing something, I always have a reason. Settings should be included directly in vast majority of cases. But sometimes, Windows does not honor integrated settings and always restores default ones. In such case setup scripts have to be used. Disabling Sounds and Animations is good example. 1. And why it should ? 2. It doesn't matter. Windows updates are digitally signed. If signature is ok, it is unimportant how you downloaded it. But http will always work. https could not work, if your date/time is set incorrectly or your root certificate store is obsolete.
And you have achieved your goal, the OS is wonderfully slim and performant! That's so good to hear, you are for real one of my heroes here on MDL! More Options are always welcome, here from my side. What do you think about adding this lines in the config section of the script? I think it's a little confusing, that there are some configurations in the middle of the script after the configuration settings at the start... Code: :: Disable the following trackers/loggers :: Some trackers are also added to the list below in their appropriate subsections, eg. Windows Defender set DisableTrackers="AutoLogger-Diagtrack-Listener","Circular Kernel Context Logger","DiagLog","Diagtrack-Listener","LwtNetLog","Microsoft-Windows-Rdp-Graphics-RdpIdd-Trace","NetCore","NtfsLog","RadioMgr","ReadyBoot","SQMLogger","UBPM","WdiContextLog","WiFiSession" :: All user UWP applications listed in \Program Files\WindowsApps will be removed with the exception of the following list :: In other words: It is the list of UWP apps that you want to keep. set "IncludeUWPapps=Microsoft.VCLibs,Microsoft.NET.Native,Microsoft.HEIFImageExtension,Microsoft.VP9VideoExtensions,Microsoft.WebMediaExtensions,Microsoft.WebpImageExtension" :: Disable these permisions for system UWP apps :: eg. if you want to prevent system UWP apps from accessing cellular data, WiFi data, microphone and camera :: replace the following line with set DisableSysUWPpermissions=cellularData,wifiData,microphone,webcam set DisableSysUWPpermissions= :: By default disable most permisions for UWP apps set DisableUWPpermissions=activity,appDiagnostics,appointments,bluetooth,bluetoothSync,cellularData,chat,contacts,email,gazeInput,location,microphone,phoneCall,phoneCallHistory,radios,sensors.custom,serialCommunication,usb,userAccountInformation,userDataTasks,userNotificationListener,webcam,wifiData,wiFiDirect :: By default remove all system UWP apps unless they are really necessary :: Can be changed to minimal version set "RemoveSystemUWPapps=Microsoft.MicrosoftEdge,Microsoft.MicrosoftEdgeDevToolsClient,Microsoft.Windows.ContentDeliveryManager" set "RemoveSystemUWPapps=Microsoft.AccountsControl,Microsoft.AsyncTextService,Microsoft.BioEnrollment,microsoft.creddialoghost,Microsoft.ECApp,Microsoft.LockApp,Microsoft.MicrosoftEdge,Microsoft.MicrosoftEdgeDevToolsClient,Microsoft.Windows.AddSuggestedFoldersToLibraryDialog,Microsoft.Windows.AppRep.ChxApp,Microsoft.Windows.AppResolverUX,Microsoft.Windows.AssignedAccessLockApp,Microsoft.Windows.CallingShellApp,Microsoft.Windows.CapturePicker,Microsoft.Windows.ContentDeliveryManager,microsoft.windows.narratorquickstart,Microsoft.Windows.OOBENetworkCaptivePortal,Microsoft.Windows.OOBENetworkConnectionFlow,Microsoft.Windows.PeopleExperienceHost,Microsoft.Windows.PinningConfirmationDialog,Microsoft.Windows.SecureAssessmentBrowser,Microsoft.XboxGameCallableUI,MicrosoftWindows.Client.CBS,MicrosoftWindows.UndockedDevKit,NcsiUwpApp,ParentalControls,Windows.CBSPreview" :: By default UWP apps are only removed from the Registry, leaving files on the disk :: thus possibly preventing their reinstallations by futere Windows updates. :: This setting causes system UWP apps to be also removed from the disk. set RemoveSystemUWPappsAlsoFromDisk=0 Ok, good to know... Thx, this helps! 1. It shouldn't, I just wanted to know if there was a specific reason for it. It makes editing afterwards a little bit complicated, e.g. when someone wants to include KMS_VL_All from @abbodi1406 or when someone wants to install Programs silently with the SetupComplete.cmd! But for me it's Ok that way you do it. For the most parts I know now, how I have to edit your script to accomplish this, thx to you and the whole MDL Forums with the knowledge Members here. 2. Ok, thx!
Shut down defender & comodo IS .. very weird Even so it still Working fine, good tool I thing that option to enable WU / Appx will be great
I came across Slimdown10 and decided to test this script. Question: I have bg-en_win_10_ent_ltsc_2021_x64_dec2022.iso as a base. I ran the script and it automatically selected and indicated only English language. Although this iso also contains another language. Isn't there a way to add a language preference option to the iso so we can choose a language other than English?! Because finally, the source file is again only in English: Windows10_x64_en-US.iso.
You can easily change display language in Settings after setup but it would be better if it kept original language. I'll try Swedish ISO
I have explained many a time, which ISOs are 100% tested and supported. Even the topic title suggest it. And people are still using random ISOs, random versions and complaining that it doesn't work as they expect. Sorry. I am not able to support every version and everyone's needs. No enough resources.