Search results

  1. bseklecki_ge

    New Feature in WinSvr2022 21H2 - "Azure Arc"

    Thanks! Out of pure morbid curiosity, I was just doing the research; seems it was added in October 2023 in KB5031364 (and its relatives) https://support.microsoft.com/en-us/topic/october-10-2023-kb5031364-os-build-20348-2031-7f1d69e7-c468-4566-887a-1902af791bbc I'll try it on my next build...
  2. bseklecki_ge

    New Feature in WinSvr2022 21H2 - "Azure Arc"

    Three is a new applet that Microsoft is forcing on users in one of the recent SSU/CUs called "Azure Arc". It is a Windows Optional Feature, but unfortunately it is coming from a SSU/CU KB/MSU being added, so when working with the Server 2022 21H2 LTSC RTM image , even-if it was a optional...
  3. bseklecki_ge

    DefaultUser0 Error - Newly added UAC Warning

    Thank you for adding that; I had the problem earlier this year where I burned a hundred hours troubleshooting PANTHER. I think I finally agreed not to adjust UAC during the OEM setup cmd. Finally, to set the desired resulting setting of UAC that does not interfere with OEM Setup process, I have...
  4. bseklecki_ge

    Add the ability to integrate Microsoft Defender CAB's into Windows 10 and 11 images

    Yes I agree. But the perception from most OT Vendors (names omitted for their own protection) is that any changes done to a Windows OS image that improves cyber security could potentially impact performance and thus invalidates whatever limited warranty they provide about the reliability and...
  5. bseklecki_ge

    Add the ability to integrate Microsoft Defender CAB's into Windows 10 and 11 images

    A lot of OT/ICS environments rely on air-gapped configuration, and only receive pre-validated/tested update definition, periodically, through something like LANDESK / Ivanti. Would you hook up your Windows SCADA for your plutonium enrichment centrifuges to the Internet? >:}
  6. bseklecki_ge

    Add the ability to integrate Microsoft Defender CAB's into Windows 10 and 11 images

    Testing it now. Thanks again and have wonderful weekend. For the purposes of documentation, question on usage: We should add both the? 1) Latest MPAM-FE (microsoft.com) 2) The updateplatform.{amd64fre|arm64fre}_######.msi/msu ? (catalog.update.microsoft.com) Update for Microsoft...
  7. bseklecki_ge

    Add the ability to integrate Microsoft Defender CAB's into Windows 10 and 11 images

    For comparison, in reading the change logs, I understand that there is native support for Windows Defender update in the most recent versions?
  8. bseklecki_ge

    Remove RDP Client (mstsc)

    FYI just for the record of the forum archives; as far as restoring RDP Server, it was more than just <c>rdpserver</c> ----------------------------------------------------------- It was more than just: <c>rdpserver 'Remote Desktop Server'</c> It was one of the additional associated...
  9. bseklecki_ge

    Remove RDP Client (mstsc)

    Follow-up question: For component removal tweak: <c>rdpserver 'Remote Desktop Server'</c> ...To hotfix repair this on an image (without reinstall) that was accidentally built with this (windows 10 EntIOT LTSC 2021 / 21H2), is that simply a matter of placing [ termsrv.dll ] from a...
  10. bseklecki_ge

    Black Screen After First Reboot Windows 10 21H2

    Oh and FYI, obviously when "Getting Devices Ready" crashes mid-way, the system ends up in a reboot loop with the following error:
  11. bseklecki_ge

    Black Screen After First Reboot Windows 10 21H2

    I have a very similar problem with an embedded Industrial PC Platform (PanelPC), with the legacy style BIOS/CMOS menu. In my case, my ISO works fine when CSM is enabled, but when I turn off CSM, the image crashes (soft reset) about 5-10% into "Getting Devices Ready". In this legacy style...
  12. bseklecki_ge

    Windows 10 - Help with pre-installed software

    > So far I've found you need to mark 'OEM Setup Complete' in Unattended to have > SetupComplete to Run in Windows 10, though I have no idea why. It's because the lawyers and product engineer managers at Microsoft shared a moment at the Sweat Lodge...
  13. bseklecki_ge

    SetupComplete.cmd: "Client non-Enterprise OS edition detected with OEM license; will not run user-provided scripts."

    > NTLite works around it by calling SetupComplete, from inside autounttend.xml (if you check the OEM SetupComplete box Oh I love you sending hugs and chocolates ; passe un bonne week-end!
  14. bseklecki_ge

    SetupComplete.cmd: "Client non-Enterprise OS edition detected with OEM license; will not run user-provided scripts."

    Not really an NTLite question, but OOBE Question: Apparently if one customizes a Win10Pro image, and the target hardware happens to have an embedded OEM key, then the OOBE system will disable SetupCompelted.cmd ? But maybe there is some creative way to work-around this? This is like a product...
  15. bseklecki_ge

    .NET 3.5 Addition to Virgin Image - Error 0x800F0806 '[2054]: DISM update cleanup skipped due to pending changes on the image.

    Would it be possible to modify NTLite behavior so that this popup error is not blocking the continuation of the tasks/process in the background?
  16. bseklecki_ge

    Machine Inactivity Timeout (DISA-STIG)

    In UNIX shops, if you leave a unlocked terminal with an active SUDO cookie or root shell visible, instead of filing CyberSecurity incident report, a "friend" may simply write on the current terminal: # # rm -rf / # lock your terminal next time Just hope you don't press the enter key when you...
  17. bseklecki_ge

    Feature Request: Trigger a clean/trim/erase of the Temporary Directory, Scratch directory, and Extracted Updates Cache before Apply

    Correct; cleaning up corrupted Temp directories from previously crashed/failed build cycle. Yes, [demi-]auto-building from a scheduled task in Enterprise environment, so could handle it with wrapper script as-well. Merci for consideration.
  18. bseklecki_ge

    Integrating DotNet4.8 Feature Pack and [latest] DotNet CU/Service Pack

    I did; In fact I tried adding .Net3.5 (SFX source .cab) and .Net4.8 KB (.msu) in independent NTLite apply sessions, so the same result/no-avail. Thank you for all that reply. It seems that applying .Net4.x SP/CU at first boot/first login is the best solution until someone at Microsoft takes...
  19. bseklecki_ge

    Integrating DotNet4.8 Feature Pack and [latest] DotNet CU/Service Pack

    All: On v1607 (Server 2016 to Win10EntIOT/LTSB), has as anyone successfully integrated the DotNet4.8 Feature Pack [kb4486129] and it's latest Service Pack [kb5020873] at the same time ? In my experience, it will succeed during NTLite apply, but the CU/SP will roll-back failed during OOBE...
  20. bseklecki_ge

    .NET 3.5 Addition to Virgin Image - Error 0x800F0806 '[2054]: DISM update cleanup skipped due to pending changes on the image.

    I'm seeing this on other platforms/scenarios. Possibly related question: On v1607/Server2016, we use NTLite to integrate KB4486129 [DotNet4.8 Feature pack] However, if we also try to install the latest DotNet4.8 ServicePack [KB5020873] (December 2022), it integrates during the NTLite apply...
Back
Top