I don't know the answer. But most of the newer security features are implemented by VM isolation, sometimes in a container-like instance.But if you delete
Code:Microsoft-Windows-HVSI-Package Microsoft-Windows-HVSI-WOW64-Package
will delete the container,Is there any influences?
install_tweak_wim works on live images, but you have to turn off AV because all tweak tools are EVIL.cbsenum is a good alternative to install_wim_tweak for live testing, but it doesnt work on mounted images as far as i know.
Necessary evil.all tweak tools are EVIL.
10. Conclusion:
Removing the Defender feature packages removes Defender from the Security Center, while keeping non-Defender features (firewall, VBS isolation, application security) visible. If NTLite isn't separating the packages this way, then it should.
687,688d686
< <Tweak name="DefenderApiLogger\Start">1</Tweak>
< <Tweak name="DefenderAuditLogger\Start">1</Tweak>
1776,1777d1773
< <Tweak name="Microsoft-Windows-WDAG-PolicyEvaluator-CSP\Operational\Enabled">1</Tweak>
< <Tweak name="Microsoft-Windows-WDAG-PolicyEvaluator-GP\Operational\Enabled">1</Tweak>
1803,1804d1798
< <Tweak name="Microsoft-Windows-Windows Defender\Operational\Enabled">1</Tweak>
< <Tweak name="Microsoft-Windows-Windows Defender\WHC\Enabled">1</Tweak>
1897d1890
< <Tweak name="NIS-Driver-WFP\Diagnostic\Enabled">0</Tweak>
2345d2337
< <Tweak name="WdNisSvc\WdNisSvc">3</Tweak>
2349d2340
< <Tweak name="WinDefend\WinDefend">2</Tweak>
2736,2737d2726
< <Tweak name="WdBoot\WdBoot">0</Tweak>
< <Tweak name="WdFilter\WdFilter">0</Tweak>
2740d2728
< <Tweak name="WdNisDrv\WdNisDrv">3</Tweak>
3130,3135d3117
< </TweakGroup>
< <TweakGroup name="Tree\Microsoft\Windows\Windows Defender">
< <Tweak name="Windows Defender Cache Maintenance\Windows Defender Cache Maintenance"></Tweak>
< <Tweak name="Windows Defender Cleanup\Windows Defender Cleanup"></Tweak>
< <Tweak name="Windows Defender Scheduled Scan\Windows Defender Scheduled Scan"></Tweak>
< <Tweak name="Windows Defender Verification\Windows Defender Verification"></Tweak>
Actually it works quite well on mounted NTL image from 8 to 11.cbsenum is a good alternative to install_wim_tweak for live testing, but it doesnt work on mounted images as far as i know.
Sure you already tested your hee-haws out to make 7 work the way you likeI wouldnt dism out anything major, on w7 it would be daft stuff like gadgets localisation packs, things of that sort that shouldnt be in a Pro edition. 8.1 would be similar but with those naff vpns, trimming the fat but leaving the meat. Anything more advanced would be lited out.
And on a live install:@echo off
cd /d "%~dp0"
echo Uninstalling ...
CLS
install_wim_tweak_NET4.6.exe /p D:\NTLite\Temp\NLTmpMnt01\ /l
echo Finished
pause
install_wim_tweak.exe /p <MountPath>
This will list all the packages available in the selected image and write them to a text file in the same directory
Open - list and close - we'll prefer different - but as long it's working who cares?@echo off
cd /d "%~dp0"
echo Uninstalling ...
CLS
install_wim_tweak_NET4.6.exe /o /d /l
install_wim_tweak_NET4.6.exe /h /o /d /l
echo Finished
pause