'Data Integrity Scan' causes the Firewall to not work

[changfoster036]

Remove the following scheduled tasks before logging in, causing Windows Defender Firewall to have error '0x6d9' and all ports to be disabled;

<TweakGroup name="Tree\Microsoft\Windows\Data Integrity Scan">

    <Tweak name="Data Integrity Scan\Data Integrity Scan">remove</Tweak>

    <Tweak name="Data Integrity Scan for Crash Recovery\Data Integrity Scan for Crash Recovery">remove</Tweak>

</TweakGroup>

This seems like a weird question, why are they related to firewalls；
Can someone tell me what the 'Data Integrity Scan' does when the system first logs in?

 

[changfoster036]

Because I have enabled deep removal including "<c>manifestbackup 'Manifest Backup (WinSxS\Backup)'</c>", I don't want it to perform a Data Integrity Scan

 

[garlin]

Data Integrity Scan is a data scrubber task for ReFS volumes.

Scrubbers will perform a low-level check of ReFS volume data by comparing written data blocks against their stored checksums, and help detect early signs of disk corruption. Many high-end RAID systems have a scrubbing feature which runs in the background, based on a weekly or monthly schedule.

ReFS integrity streams

I don't believe Defender cares about Data Integrity Scans, since almost nobody uses ReFS except on enterprise-class servers. If you think it's a problem, why not simply disable the tasks? NTLite only allows you to remove (not disable) tasks in an offline image because all tasks are protected from editing by a security hash. The only available option for offline images is to delete a specific task.

Run these commands from Post-Setup:

schtasks /disable /tn "\Microsoft\Windows\Data Integrity Scan\Data Integrity Scan\Data Integrity Scan"
schtasks /disable /tn "\Microsoft\Windows\Data Integrity Scan\Data Integrity Scan for Crash Recovery\Data Integrity Scan for Crash Recovery"

None of this is related to WinSxS, or SFC integrity checks, which are based on component files.

 

[garlin]

I tried installing a clean copy of W11 23H, after removing all of the "Data Integrity Scan" scheduled tasks.
As expected, it has no apparent problems with Defender Firewall.

 

[changfoster036]

Thanks to garlin.
I tested it and it was indeed as you said. After checking the XML and comparing it with the error '0x6d9', I found that a total of 4 scheduled tasks were removed. I tested it again and removed these 4 scheduled tasks while retaining the ReFS component. The firewall will have an error '0x6d9'

<TweakGroup name="Tree\Microsoft\Windows\TPM">
                <Tweak name="Tpm-HASCertRetr\Tpm-HASCertRetr">remove</Tweak>
                <Tweak name="Tpm-Maintenance\Tpm-Maintenance">remove</Tweak>
            </TweakGroup>
            <TweakGroup name="Tree\Microsoft\Windows\Data Integrity Scan">
                <Tweak name="Data Integrity Scan\Data Integrity Scan">remove</Tweak>
                <Tweak name="Data Integrity Scan for Crash Recovery\Data Integrity Scan for Crash Recovery">remove</Tweak>
            </TweakGroup>

 

[changfoster036]

I chose to remove the ReFS components and then disable these four tasks after the system logs in
Thanks again garlin.