Recent content by garlin

What is the exact error message? Do you this error in Event Viewer?

Why did you disable the Video kernel driver? That's a mandatory service. <ExtraServices> <TweakGroup name="drivers"> <Tweak name="Vid\Vid">4</Tweak> </TweakGroup> </ExtraServices>

Please attach your preset, after removing any user passwords or license keys.

You should point out this is a modded driver, because some users only want the official drivers.

When using Unattended mode, NTLite defaults to writing the currently loaded image's index number in the autounattend.xml. By checking the "Prompt edition selection" box, no image will be pre-selected for install.

There isn't a single component for File Type Associations, it's handled by File Explorer. The problem is the imported XML (written to \Windows\System32\OEMDefaultAssociations.xml) is a baseline, and the default UWP apps which are provisioned later can overwrite the registry CLSID's. You may...

That's unsupported, but you already know that as a MS Partner. Most users want to remove different Windows features to improve system performance or to protect privacy, but not necessarily to lock users out of their own system. The typical presets and templates tend to protect critical...

You can manually copy the missing lines to autounattend.xml if you don't want to remake the entire ISO. Copy any lines which are NOT ALREADY present. <settings pass="oobeSystem"> <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64"...

Nothing. But Windows doesn't re-enable Defender services on its own. Defender is solely responsible for "defending itself". No one has complained they need to run a scheduled task to play Defender whack-a-mole after the services are properly disabled.

You need to launch RegEdit from PowerRun.

None of these extra steps are required if you integrated the reg file directly from the Registry screen. All the settings are "baked in", so the mutual protection the services provide each other are canceled out, when Windows runs the first time. And Security Center still works for all the...

Starting state after installing a clean ISO: AMServiceEnabled : True AntivirusEnabled : True RealTimeProtectionEnabled : True 1. Turn off Tamper Protection. Restart. 2. PowerRun reg import (partial error). Restart. 3. PowerRun reg import (no errors). Restart...

You may need a tool like PowerRun to give yourself TrustedInstaller rights.

If you wanted to test the reg file: 1. Open Security Center. 2. Disable Tamper Protection in the UI. Reboot to make the change effective, Tamper Protection is only enabled at boot time. 3. reg import the reg file. 4. Reboot again (or manually disable the same services by hand).

All you need to disable the 5 Defender services. Everything else is moot because nothing is running in the background. The reason many scripts or reg files fail is because Tamper Protection is running on a live system to prevent you from using reg changes to disable Defender. MS requires you...