Capturing an Image (WIM) W7, W8.1, W10 1809

No mine :)

yes, NSudo automatically change directory to where it reside

but you may need to specify the path to NSudo.exe itself, because if you ran the .cmd file as administrator it change directory to %windir%\system32
or just double click the script
 
I tried it with something and it showed as System in task manager. I was 99% certain it was yours, Thanks abbodi :)

I usually use Sordums Power Run and stuff works great but your knowledge is, err, you know your stuff :D
 
Final updates list.
Installed during Post Setup
01-2016-07-27-Windows6.1-KB3177467-x64-SS.msu
02-2016-04-25-Windows6.1-KB3125574-v4-x64-SP2.msu
03-2016-03-29-Windows6.1-KB3145739-x64.msu
04-2016-04-10-Windows6.1-KB3153199-x64.msu
05-2017-03-12-Windows6.1-KB4012215-x64.msu

Manual install after 1st logon
NET-Framework-4.7.2-x86-x64.exe
Windows6.1-KB4095874-x64.msu

Build number is .23710. I can delete my updates archive and just keep these few. Now to finalise my tweaks.
 
Last edited:
Why you don't integrate KB4095874?

sacrificing Monthly Rollup because of the CPU detection thing doesn't seem very convenient :)
 
4095874 was listed as an update for 472 so i put 472 in 1st, not had any problems doing it. Dont need to constantly update because w7 will be on my offline pc n using linux online, update update update gets on my nerves, i just wanna get stuff done.
 
Actually i may leave it out because 4012215 may have .neet updates inside, as long as its stable.
 
Registry files question. I want to bake as many tweaks as i can into the capture.

Most of my reg files are HKCU, some are HKLM, some have entries for both, see below
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Attachments]
"SaveZoneInformation"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Attachments]
"SaveZoneInformation"=dword:00000001

If i only add the HKLM entry would that setting then be applied to the Administrator and any other user accounts that are created or would i have to run the HKCU entry for every account created including the Admin? If i am correct the Admin User folder isnt copied on capture.
 
Last edited:
I want to disable the action centre icon in taskbar notification area and export the reg file for further installs.
Using RegFromApp(reading mmc.exe) i get the following value,

[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects\{4CCDEAB7-95B9-4F82-9F44-CCFA5A38EA4E}User\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"HideSCAHealth"=dword:00000000


Its been a while since i have played with this but as far as i can wemember the value in bold differs when i do a fresh install. If i change it to
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"HideSCAHealth"=dword:00000000

then it should apply to the current user during post setup or would the default group policy setting above override it?

What i want to do is disable for all users and make it the default system value in a mounted registry so if i change it to
HKEY_USERS\.DEFAULT\Software\Policies\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"HideSCAHealth"=dword:00000000

would it then apply to all users because its the default system value? Or would i have to put it in another location like HKLM?

There are some more taskbar(and other settings) i want to change in group policy - taskbar and other places.
 
Last edited:
I found this topic about exporting and importing policies. I have found the GroupPolicy and GroupPolicyUsers folders inside system32, can i put both inside an $OEM$ folder instead? IF registry files and importing group policies are possible i would like to be able to choose which method depending on circumstances, reg files so i can share tweaks here.

Exporting all the Group Policies is overkill when i only need to change a few settings.
 
Last edited:
If Group Policy takes precedent then it doesant matter what HKCU says because it will always revery to default policy.
 
The GroupPolicy folder is only 663bytes, GroupPolicyUsers is empty. I will take the easy route and use the $OEM$ folder.
 
abbodi, i need to pick your brains again. I am working on a untouched w8.1 pro u3 mounted registry. I am using the following information, is it correct?

HKEY_CLASSES_ROOT. Contains information about registered applications, including file associations and OLE object classes. (This hive displays the same settings as the HKEY_LOCAL_MACHINE\Software\Classes key.)
HKEY_CURRENT_USER. This hive is a subset of the HKEY_USERS hive, pertaining to the current user of the PC. It contains all attributes for the desktop environment and network connections.
HKEY_LOCAL_MACHINE. Contains most of the settings for your PC's hardware, system software, and individual applications.
HKEY_USERS. Contains subkeys corresponding to the HKEY_CURRENT_USER hives for all users of the PC, not just the current user.
HKEY_CURRENT_CONFIG. Contains information gathered when Windows first launches, such as settings pertaining to your PC's display and printers. The data stored in this hive is not permanently stored on disk, but rather is regenerated each time your PC boots.

If i have HKCU values i can change them to HKEY_USERS\.Default if HKCU takes its values from HKEY_USERS\.Default so they apply to all users?

The image only has HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001, HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet is on a running system.
So if i change my tweaks to HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001 then every CurrentControlSetXXX takes its value from there too?

If i capture the image then can i safely delete any CurrentControlSetXXX tree because they all come from ControlSet001?
I want to get all my tweaks to apply to all users by default from 1st logon and not have to run HKCU each time.
 
Back
Top