Slimdown10_v2.0.2 (continued)

• If you want to include defender-dism-x64.cab it doesnt get copied into the uup folder for W10UI to integrate it as the only cab which gets copied is "Windows10.0-KB5011048-%ImageArchitecture%.cab"
• If CreateIso is activated and the ISO is generated the next time you start Slimdown this ISO is used as source (maybe warn if 2 isos exist or write iso to subfolder "_Done")
• if no ISO exists (original script had a check and warning) and you choose index 1 nontheless all files in the root dir of Slimdown get deleted
• Authroot could also be updated regularly
• "net accounts /maxpwage:unlimited" gets written to setupcomplete.cmd twice
• "RD /S /Q %systemdrive%\SETUP\Files\" in Cleanup.cmd fails as %systemdrive% points to e.g "C:\". You should use "%SystemRoot%" instead.

For me disabling Sounds never really worked in the script.

Spoiler: Fix

After the line " for /f "tokens=1 delims=" %%b in ('reg query "%%a" 2^>nul ^| find /i "%%a\"') do ("

add

" reg add "%%b\.None" /f >nul"

If you want to have Defender active but also wannna switch it on/off constantly where Tamper Protection is interfering you could go the following route:

Spoiler: Defender On/Off User Based

Choose "2" in the initial settings and add the following block after "if %DisableDefender% EQU 0 goto skipDefenderRealTime" (copied from "Disable Completely")

Code:

Reg add "HKLM\TK_SOFTWARE\Microsoft\Windows Defender Security Center\Notifications" /v "DisableNotifications" /t REG_DWORD /d "1" /f >nul
Reg add "HKLM\TK_SOFTWARE\Microsoft\Windows Defender Security Center\Notifications" /v "DisableEnhancedNotifications" /t REG_DWORD /d "1" /f >nul
Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows Defender\MpEngine" /v "MpEnablePus" /t REG_DWORD /d "0" /f >nul
Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows Defender" /v "ServiceKeepAlive" /t REG_DWORD /d "0" /f >nul
Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows Defender" /v "PUAProtection" /t REG_DWORD /d "0" /f >nul
Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows Defender\Signature Updates" /v "DisableUpdateOnStartupWithoutEngine" /t REG_DWORD /d 1 /f >nul
"%~dp0tools\%HostArchitecture%\NSudo.exe" -U:T -P:E -UseCurrentConsole -Wait Reg add "HKLM\TK_SOFTWARE\Microsoft\Windows Defender\Features" /v "TamperProtection" /t REG_DWORD /d "4" /f >nul
"%~dp0tools\%HostArchitecture%\NSudo.exe" -U:T -P:E -UseCurrentConsole -Wait Reg add "HKLM\TK_SOFTWARE\Microsoft\Windows Defender\Features" /v "TamperProtectionSource" /t REG_DWORD /d "2" /f >nul
"%~dp0tools\%HostArchitecture%\NSudo.exe" -U:T -P:E -UseCurrentConsole -Wait Reg add "HKLM\TK_SOFTWARE\Microsoft\Windows Defender\Features" /v "SenseDevMode" /t REG_DWORD /d "0" /f >nul
"%~dp0tools\%HostArchitecture%\NSudo.exe" -U:T -P:E -UseCurrentConsole -Wait Reg add "HKLM\TK_SOFTWARE\Microsoft\Windows Defender\Signature Updates" /v "FirstAuGracePeriod" /t REG_DWORD /d "0" /f >nul
"%~dp0tools\%HostArchitecture%\NSudo.exe" -U:T -P:E -UseCurrentConsole -Wait Reg add "HKLM\TK_SOFTWARE\Microsoft\Windows Defender\UX Configuration" /v "DisablePrivacyMode" /t REG_DWORD /d "1" /f >nul

and deactivate ("REM") the following line:

"Reg add "HKLM\TK_SOFTWARE\Policies\Microsoft\Windows Defender\Real-Time Protection" /v "DisableRealtimeMonitoring" /t REG_DWORD /d "1" /f >nul"

 

Will download again & do more testing.

 

You need to login to view this posts content.

 

Guys been away for a few days, retested now using the SD10v202_64_Lite.cmd. If I omit the updated calc in the appx dir the std calc now works fine.

EDIT: When I do the same test with the SD10v202_64_without_EDGE_Start.cmd it reverts back to my previous findings where the calculator app appears in the app list though fails to open, is there any other file association that may prevent this from working? I do have windows calculator in my UWP inclusion list.

 

I have time weekend, would test new releases. my preference SD10v202_64_Lite.cmd/SD10v202_64_without_EDGE.cmd.

 

You need to login to view this posts content.

 

You need to login to view this posts content.

 

HeHe,

I am lucky. my favorite SD10v202_70_Lite.cmd can run Classic Calculator. that's good for me.
indeed I prefer SD10 as classic as possible. Otherwise go W11 24H2.
my test on Dell OptiPlex 7070 went smooth, W10 22H2 x64. no issue. (python macro Office discord java pdf_read/write , , ,). Office 2007/2010 run fine. (but Office97 macro crashed. can you fixed that? On Windows 7, Office97 macro runs fine. no any problem)

One suggestion on file/folder management. either W7 or W11, can pin active folders like this (below) on taskbar. However it's noticed this SD10v202_70 has no this feature. I strongly suggest adding this feature.
presently, SD10v202_70 can see "fixed" file/folder but NOT most active folders.

At final, thank you very much for your hard work. SD10v202_70 will run on my Dell awhile. and I will update its report a week or a month later again.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Update for pin on Windows 10

1. for apps, pin to Start
2. for folders, pin to Quick Access

That's easy, similar to Windows 7 or 11.

 

I carried out another test this time I removed windows Calc from the appx dir & the std calc now works fine, this is good for me.

On another thing, how difficult is it to code in the removal of WordPad?

 

here is my test note

1. Clean-stall OS size, some 16 GB when done. That's similar to 24H2.
2. my run was SD10v202_70_Lite.cmd. but I saw EDGE installed when install done. The Lite ver shouldn't have EDGE installed per its specs.
3. After 2nd day running (24 to 48 hrs), when restart/shutdown, it's prompted "update and restart". no other choice, hence had to go ahead. at end of update (2023-10 Update for W10), my Dell computer crashed and BSOD. I did manually power off. then re-started computer and run fine.

Presently, I set Updated paused until 2/2/2025.

 

In the "Removing capabilities..." section, add "WordPad" to the RemoveCapabilities variable, for example:

ECHO.
ECHO.
ECHO ===========================================================
ECHO Removing capabilities...
ECHO ===========================================================

set "RemoveCapabilities=App.StepsRecorder,App.Support.QuickAssist,Hello.Face,OneCoreUAP.OneSync,Browser.InternetExplorer,WordPad"

Here is my list, I remove everything except Notepad:

set "RemoveCapabilities=App.StepsRecorder,App.Support.QuickAssist,Hello.Face,OneCoreUAP.OneSync,Browser.InternetExplorer,MathRecognizer,WindowsMediaPlayer,PowerShell.ISE,WordPad,Print.Fax.Scan,Print.Management.Console,OpenSSH.Client"

 

Yes that did the trick thank you!

Also if I wanted to add a feature eg:
"Microsoft-Windows-Subsystem-Linux"
What the best way to install this?

 

As far as I'm aware of, you can enable Windows Subsystem for Linux and Virtual Machine in an offline image, but installing the Linux kernel and setting WSL should be done after system setup.
Personally, I don't think this feature has any beneficial uses for the average user to add it to the script, just my opinion.

 

@SunLion

Regarding 8dot3name (will call it 8.3 for convenience)

I think that the script isn't working as intended, install in VM, after first login there are ~65K files with 8.3.
I have added the strip command to the end of SetupComplete, after first login there are ~7 files with 8.3.
I tested with the added command in SetupComplete on real enviroment, there are ~1.8K files with 8.3.

Is it normal behavior or maybe the position of the command should be changed?