For windows versions 7/8.1 there is no "8", it's "0", "1", "2" and "3". Should be the same for 10? FeatureSettingsOverrideMask is allways "3" Disable-MeltdownOnly.reg Code: Windows Registry Editor Version 5.00 ; 2 = Disable Meltdown (VA Shadow) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management] "FeatureSettingsOverride"=dword:00000002 "FeatureSettingsOverrideMask"=dword:00000003 Disable-Meltdown-Spectre.reg Code: Windows Registry Editor Version 5.00 ; Meltdown/Spectre ; Disable Both [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management] "FeatureSettingsOverride"=dword:00000003 "FeatureSettingsOverrideMask"=dword:00000003 Disable-SpectreOnly.reg Code: Windows Registry Editor Version 5.00 ; 1 = Disable Spectre (Branch Target Injection) [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management] "FeatureSettingsOverride"=dword:00000001 "FeatureSettingsOverrideMask"=dword:00000003 Enable-Meltdown-Spectre.reg Code: Windows Registry Editor Version 5.00 ; 0 = Enable both Meltdown/Spectre [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management] "FeatureSettingsOverride"=dword:00000000 "FeatureSettingsOverrideMask"=dword:00000003 Or is yours a new one i missed?
IMPORTANT NOTE: However, for this latest Speculative Store Bypass OS mitigation to be fully enabled and working, it does require (yet another) microcode update and I have not yet seen any details from Intel when these latest round of microcode updates are coming.
I ran it offline on a mounted wim 2 times, 1 time on a x64 mounted wim and 1 time on a mounted x86 wim. Next i ran it multpiple times on x86 and x64 installs (online) and on my main system, all without errors after the current CU was installed. Actually i ran it many times running this (i ran it for x86 and x64):
multi( customer business and chinaspec offical iso unifying) log. not finished and running. the Bold text are the error message.
No probs here: Code: ============================================================ 1. Target (x86) : "d:\W10UI_4.X\17134.1_Work_NL_x86" 2. Updates: "d:\W10UI_4.X\17134.1_Updates_x86" 3. DISM: "C:\WINDOWS\system32\dism.exe" 4. Enable .NET 3.5: YES 5. Cleanup System Image: YES 6. Reset Image Base: NO 7. Update WinRE.wim: YES ============================================================ 0. Start the process ============================================================ Change a menu option, press 0 to start, or 9 to exit: Code: ============================================================ Running W10UI v4.7 ============================================================ ============================================================ Extracting files from update cabinets (.cab) *** This will require some disk space, please be patient *** ============================================================ 1/2: Windows10.0-KB4284835-x86_CU_112.cab 2/2: Windows10.0-KB4287903-x86_Flash_June_6_2018.cab ============================================================ Mounting install.wim - index 1/2 ============================================================ Deployment Image Servicing and Management tool Version: 10.0.17134.1 Mounting image [==========================100.0%==========================] The operation completed successfully. ============================================================ Checking Updates... ============================================================ ============================================================ Installing updates... ============================================================ Deployment Image Servicing and Management tool Version: 10.0.17134.1 Image Version: 10.0.17134.1 Processing 1 of 1 - Adding package Package_for_KB4287903~31bf3856ad364e35~x86~~10.0.1.0 [==========================100.0%==========================] The operation completed successfully. Deployment Image Servicing and Management tool Version: 10.0.17134.1 Image Version: 10.0.17134.1 Processing 1 of 1 - Adding package Package_for_RollupFix~31bf3856ad364e35~x86~~17134.112.1.7 [==========================100.0%==========================] The operation completed successfully. ============================================================ Cleaning up OS image ============================================================ Deployment Image Servicing and Management tool Version: 10.0.17134.1 Image Version: 10.0.17134.112 [==========================100.0%==========================] The operation completed successfully. ============================================================ Adding .NET Framework 3.5 feature ============================================================ Deployment Image Servicing and Management tool Version: 10.0.17134.1 Image Version: 10.0.17134.112 Enabling feature(s) [==========================100.0%==========================] The operation completed successfully. ============================================================ Reinstalling cumulative update... ============================================================ Deployment Image Servicing and Management tool Version: 10.0.17134.1 Image Version: 10.0.17134.112 Processing 1 of 1 - Adding package Package_for_RollupFix~31bf3856ad364e35~x86~~17134.112.1.7 [==========================100.0%==========================] The operation completed successfully. ============================================================ Updating winre.wim ============================================================ Deployment Image Servicing and Management tool Version: 10.0.17134.1 Mounting image [==========================100.0%==========================] The operation completed successfully. Deployment Image Servicing and Management tool Version: 10.0.17134.1 Image Version: 10.0.17134.1 Processing 1 of 1 - Adding package Package_for_RollupFix~31bf3856ad364e35~x86~~17134.112.1.7 [==========================100.0%==========================] The operation completed successfully. Deployment Image Servicing and Management tool Version: 10.0.17134.1 Image Version: 10.0.17134.112 [===========================99.6%========================= ] The operation completed successfully. Deployment Image Servicing and Management tool Version: 10.0.17134.1 Image Version: 10.0.17134.112 [==========================100.0%==========================] The operation completed successfully. Deployment Image Servicing and Management tool Version: 10.0.17134.1 Image File : D:\W10UI_4.X\winre.wim Image Index : 1 Saving image [==========================100.0%==========================] Unmounting image [==========================100.0%==========================] The operation completed successfully. Deployment Image Servicing and Management tool Version: 10.0.17134.1 Exporting image [==========================100.0%==========================] The operation completed successfully. ============================================================ Adding updated winre.wim ============================================================ 1 file(s) copied. ============================================================ Unmounting install.wim - index 1/2 ============================================================ Deployment Image Servicing and Management tool Version: 10.0.17134.1 Image File : d:\W10UI_4.X\17134.1_Work_NL_x86\sources\install.wim Image Index : 1 Saving image [==========================100.0%==========================] Unmounting image [==========================100.0%==========================] The operation completed successfully. ============================================================ Mounting install.wim - index 2/2 ============================================================ Deployment Image Servicing and Management tool Version: 10.0.17134.1 Mounting image [==========================100.0%==========================] The operation completed successfully. ============================================================ Checking Updates... ============================================================ ============================================================ Installing updates... ============================================================ Deployment Image Servicing and Management tool Version: 10.0.17134.1 Image Version: 10.0.17134.1 Processing 1 of 1 - Adding package Package_for_KB4287903~31bf3856ad364e35~x86~~10.0.1.0 [==========================100.0%==========================] The operation completed successfully. Deployment Image Servicing and Management tool Version: 10.0.17134.1 Image Version: 10.0.17134.1 Processing 1 of 1 - Adding package Package_for_RollupFix~31bf3856ad364e35~x86~~17134.112.1.7 [==========================100.0%==========================] The operation completed successfully. ============================================================ Cleaning up OS image ============================================================ Deployment Image Servicing and Management tool Version: 10.0.17134.1 Image Version: 10.0.17134.112 [===========================75.4%=========== ] Error: 1726 The remote procedure call failed. An error occurred closing a servicing component in the image. Wait a few minutes and try running the command again. The DISM log file can be found at C:\WINDOWS\Logs\DISM\dism.log ============================================================ Adding .NET Framework 3.5 feature ============================================================ Deployment Image Servicing and Management tool Version: 10.0.17134.1 Image Version: 10.0.17134.112 Enabling feature(s) [==========================100.0%==========================] The operation completed successfully. ============================================================ Reinstalling cumulative update... ============================================================ Deployment Image Servicing and Management tool Version: 10.0.17134.1 Image Version: 10.0.17134.112 Processing 1 of 1 - Adding package Package_for_RollupFix~31bf3856ad364e35~x86~~17134.112.1.7 [==========================100.0%==========================] The operation completed successfully. ============================================================ Adding updated winre.wim ============================================================ 1 file(s) copied. ============================================================ Unmounting install.wim - index 2/2 ============================================================ Deployment Image Servicing and Management tool Version: 10.0.17134.1 Image File : d:\W10UI_4.X\17134.1_Work_NL_x86\sources\install.wim Image Index : 2 Saving image [==========================100.0%==========================] Unmounting image [==========================100.0%==========================] The operation completed successfully. ============================================================ Rebuilding install.wim ============================================================ Deployment Image Servicing and Management tool Version: 10.0.17134.1 Exporting image [==========================100.0%==========================] Exporting image [==========================100.0%==========================] The operation completed successfully. ============================================================ Mounting boot.wim - index 1/2 ============================================================ Deployment Image Servicing and Management tool Version: 10.0.17134.1 Mounting image [==========================100.0%==========================] The operation completed successfully. ============================================================ Checking Updates... ============================================================ ============================================================ Installing updates... ============================================================ Deployment Image Servicing and Management tool Version: 10.0.17134.1 Image Version: 10.0.17134.1 Processing 1 of 1 - Adding package Package_for_RollupFix~31bf3856ad364e35~x86~~17134.112.1.7 [==========================100.0%==========================] The operation completed successfully. ============================================================ Resetting WinPE image base ============================================================ Deployment Image Servicing and Management tool Version: 10.0.17134.1 Image Version: 10.0.17134.112 [==========================100.0%==========================] The operation completed successfully. Deployment Image Servicing and Management tool Version: 10.0.17134.1 Image Version: 10.0.17134.112 [==========================100.0%==========================] The operation completed successfully. ============================================================ Unmounting boot.wim - index 1/2 ============================================================ Deployment Image Servicing and Management tool Version: 10.0.17134.1 Image File : d:\W10UI_4.X\17134.1_Work_NL_x86\sources\boot.wim Image Index : 1 Saving image [==========================100.0%==========================] Unmounting image [==========================100.0%==========================] The operation completed successfully. ============================================================ Mounting boot.wim - index 2/2 ============================================================ Deployment Image Servicing and Management tool Version: 10.0.17134.1 Mounting image [==========================100.0%==========================] The operation completed successfully. ============================================================ Checking Updates... ============================================================ ============================================================ Installing updates... ============================================================ Deployment Image Servicing and Management tool Version: 10.0.17134.1 Image Version: 10.0.17134.1 Processing 1 of 1 - Adding package Package_for_RollupFix~31bf3856ad364e35~x86~~17134.112.1.7 [==========================100.0%==========================] The operation completed successfully. ============================================================ Resetting WinPE image base ============================================================ Deployment Image Servicing and Management tool Version: 10.0.17134.1 Image Version: 10.0.17134.112 [===========================99.5%========================= ] The operation completed successfully. Deployment Image Servicing and Management tool Version: 10.0.17134.1 Image Version: 10.0.17134.112 [==========================100.0%==========================] The operation completed successfully. ============================================================ Unmounting boot.wim - index 2/2 ============================================================ Deployment Image Servicing and Management tool Version: 10.0.17134.1 Image File : d:\W10UI_4.X\17134.1_Work_NL_x86\sources\boot.wim Image Index : 2 Saving image [==========================100.0%==========================] Unmounting image [==========================100.0%==========================] The operation completed successfully. ============================================================ Rebuilding boot.wim ============================================================ Deployment Image Servicing and Management tool Version: 10.0.17134.1 Exporting image [==========================100.0%==========================] Exporting image [==========================100.0%==========================] The operation completed successfully. ============================================================ Removing temporary extracted files... ============================================================ ============================================================ Creating updated ISO file... ============================================================ CDIMAGE 2.53m CD-ROM and DVD-ROM Premastering Utility Copyright (C) Microsoft, 1993-2007. All rights reserved. For Microsoft internal use only. Scanning source tree (500 files in 32 directories) Scanning source tree complete (972 files in 85 directories) Computing directory information complete Image file is 3183181824 bytes (before optimization) Writing 972 files in 85 directories to Win10_17134.112_x86_2018-06-12.iso 100% complete Storage optimization saved 24 files, 14039040 bytes (1% of image) After optimization, image file is 3171338240 bytes Space saved because of embedding, sparseness or optimization = 14039040 Done. ============================================================ Finished ============================================================ Press any key to exit.
The only difference is that you also integrated the microcode update, i will re-test with that update too. My source images are clean/untouched by dism.
@ananhaid With the microcode update from may 2018 included it doesn't seem to work: Code: [code]============================================================ 1. Target (x86) : "d:\W10UI_4.X\17134.1_Work_NL_x86" 2. Updates: "d:\W10UI_4.X\17134.1_Updates_x86" 3. DISM: "C:\WINDOWS\system32\dism.exe" 4. Enable .NET 3.5: YES 5. Cleanup System Image: YES 6. Reset Image Base: NO 7. Update WinRE.wim: YES ============================================================ 0. Start the process ============================================================ Change a menu option, press 0 to start, or 9 to exit: Code: ============================================================ Running W10UI v4.7 ============================================================ ============================================================ Extracting files from update cabinets (.cab) *** This will require some disk space, please be patient *** ============================================================ 1/3: Windows10.0-KB4100347-x86_MicroCode_May_2018.cab 2/3: Windows10.0-KB4284835-x86_CU_112.cab 3/3: Windows10.0-KB4287903-x86_Flash_June_6_2018.cab ============================================================ Mounting install.wim - index 1/2 ============================================================ Deployment Image Servicing and Management tool Version: 10.0.17134.1 Mounting image [==========================100.0%==========================] The operation completed successfully. ============================================================ Checking Updates... ============================================================ ============================================================ Installing updates... ============================================================ Deployment Image Servicing and Management tool Version: 10.0.17134.1 Image Version: 10.0.17134.1 Processing 1 of 2 - Adding package Package_for_KB4100347~31bf3856ad364e35~x86~~10.0.1.0 [==========================100.0%==========================] Processing 2 of 2 - Adding package Package_for_KB4287903~31bf3856ad364e35~x86~~10.0.1.0 [==========================100.0%==========================] The operation completed successfully. Deployment Image Servicing and Management tool Version: 10.0.17134.1 Image Version: 10.0.17134.1 Processing 1 of 1 - Adding package Package_for_RollupFix~31bf3856ad364e35~x86~~17134.112.1.7 [==========================100.0%==========================] The operation completed successfully. ============================================================ Cleaning up OS image ============================================================ Deployment Image Servicing and Management tool Version: 10.0.17134.1 Image Version: 10.0.17134.112 [==================== 35.2% ] Error: 1726 The remote procedure call failed. An error occurred closing a servicing component in the image. Wait a few minutes and try running the command again. The DISM log file can be found at C:\WINDOWS\Logs\DISM\dism.log ============================================================ Adding .NET Framework 3.5 feature ============================================================ Deployment Image Servicing and Management tool Version: 10.0.17134.1 Image Version: 10.0.17134.112 Enabling feature(s) [==========================100.0%==========================] The operation completed successfully. ============================================================ Reinstalling cumulative update... ============================================================ Deployment Image Servicing and Management tool Version: 10.0.17134.1 Image Version: 10.0.17134.112 Processing 1 of 1 - Adding package Package_for_RollupFix~31bf3856ad364e35~x86~~17134.112.1.7 [===== 9.1% ][code]
You can't. Iirc, you could extract kb890830 and put the mrt.exe inside "iso:\install.wim\x\windows\system32" and msft will think it's installed. Not really the correct way to do it, the correct way would be installing windows in a VM in audit mode and install the exe files, sysprep and capture it.