Windows 11

Smart App Control is a security feature that needs to be continuously running after Windows is installed. The point is to block malicious apps, and if you disable it at any time, Windows doesn't trust the image.

By default, on newer builds, it's set in evaluation mode. Windows will test if your system qualifies based on HW requirements, and disables SAC if your PC will have problems. This evaluation period lasts a unknown period time of time. SAC will either be enabled or disabled afterwards.

Your options are:
  • Default (Allow eval mode) -- Do nothing --> Windows qualifies system is fast enough (enabled), too slow (disabled)
  • Allow eval mode -- Manual change to enabled or disabled, before eval is done
  • Enable SAC -- Reg change integrated in the image
  • Disable SAC -- Reg change integrated in the image
Any time SAC is disabled, it can NEVER be re-enabled in any mode. You can integrate the reg key to make a decision to skip eval, and make a permanent choice.
 
seems like a premium feature for who use a genuine key :) (and i like it)
but i need to make an image with the capability of activating a key
Under compatibility>Activation>Activasion (KMS) is all the requirement to put a key in unattended or later ?

Imagine i don't like to be signed in windows, i just want the activation of windows with a genuine key and SAC On.
How can i do that? :oops:
 
KMS is a separate topic, in a legitimate setting it involves an external server. For a personal system, you use a normal activation key.
Add your unique Windows key to the very last Unattended setting.

To force SAC on or off in the image, add this file under Registry:
Code:
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CI\Policy]
"VerifiedAndReputablePolicyState"=dword:00000001
 
i see, thankyou
of course i need to setup some other things before this step.
buuut there is some mandatory services, component, setting, feature, idk, to be able to communicate with activation server?
maybe i missing something
like, they ignore the fact of bypassing TPM RAM etc? no matter?
 
Compatibility has a Windows Activation setting to protect the required components. Unless you disable it, NTLite knows what it needs.
As long as your network allows remote access, it should just work. If not, you have a default grace period to activate a copy.

There's no service to run activation. However SPP (Software Protection) runs to disable features if you haven't activated your Windows.
 
Looking into this on my Windows 11 computer it was in eval mode. Weird that it never changed at all since it's been installed for many months. I ended up disabling it with a backup to see what craziness happens over a period of time.
 
Looking into this on my Windows 11 computer it was in eval mode. Weird that it never changed at all since it's been installed for many months. I ended up disabling it with a backup to see what craziness happens over a period of time.
If you believe the Elevenforum comments, no one has exited eval.
I'm guessing since it's pre-release, they're happy to collect data until they figure a cutoff point.
 
If you believe the Elevenforum comments, no one has exited eval.
I'm guessing since it's pre-release, they're happy to collect data until they figure a cutoff point.
Ms don't really care any more on Windows home user activation/license verification, they only care where they $ee they can make more money like (bigger is better) organizations or business where they can sale (cloud) services like office + mail (there we have "Windows As A Service" or "WAAS").
Otherwise, nobody could activate Windows 11 with a Windows 11 license key (imagine activating Vista with Windows 95 license key).

Ms is digging info wherever they can, that is true.

Had a legit activation and no internet wasn't an issue.
No activation and always ignored the activation watermark for months while telemetry removed, and only programs installed were allowed to connect to the internet.

I would tell more but there are things that is better to keep for ourselves because Ms won't pay a penny, Ms is stealing code from github users (there are users that tooks Ms to the court).

Ms is late joining to the "alphabet" business model
 
seems like a premium feature for who use a genuine key :) (and i like it)
but i need to make an image with the capability of activating a key
Under compatibility>Activation>Activasion (KMS) is all the requirement to put a key in unattended or later ?

Imagine i don't like to be signed in windows, i just want the activation of windows with a genuine key
and SAC On.
How can i do that? :oops:
No, the compatibility protection is due to my tests, here is the story:

Long story short: "Activation (KMS)" locks "DNS Client" from removals.
 
i made 2 version of Windows 11 pro 22H2, one with defender smartscreen sac in evaluation mode, and another one only with windows firewall

atm running without defender smartscreen sac but with windows firewall + antivirus (have to decide between norton 360"for gamers" or bitdefender or avira licensed)
anyway this time everything working smooth and fine :cool:
i have 3 screen from fresh install / after installation of offline software / after installation of online software + steam / discord / brave open
if someone want to look/try the preset is welcome
 

Attachments

  • fresh install.jpg
    fresh install.jpg
    1.8 MB
  • offline+programs.png
    offline+programs.png
    509.8 KB
  • online+programsSteamDiscord running.png
    online+programsSteamDiscord running.png
    1.2 MB
  • aVRage11.xml
    60.5 KB
If you believe the Elevenforum comments, no one has exited eval.
I'm guessing since it's pre-release, they're happy to collect data until they figure a cutoff point.
I don't follow them anymore. For all I care that forum can keep there windows closed to unique individuals
 
Is this functional on Windows 11? I don't know what it removes.

1673032139929.png


Another question does anyone experienced problems about sharing printer on network by disabling or removing certain things? It seems I can't see network printers when shared...
 
Is this functional on Windows 11? I don't know what it removes.

View attachment 8976


Another question does anyone experienced problems about sharing printer on network by disabling or removing certain things? It seems I can't see network printers when shared...
I just removed that yesterday "action center" along with windows update. Action center provided a small boost and did not affect anything on my end. Windows update didn't do anything for me. Action center is just for the right hand corner stuff( just garbage for me)

Printers I hated that when I was a technician but will try and take a look later if nobody else has help you out.

Edit.........Just the action center not the other ones above for clarification
 
I think the action center you are talking about is notification center? I am talking about security and maintance I remembered what it is now... Its not perfectly clear on description so I forget about it sometimes. I will test if it still gets removed on W11
 
Last edited:
Question: There is an appx for WMware the Hyper-V i deleted in my image? (i was thinking VirtualBox running without it :confused: )
 
Back
Top