Windows 11

Smart App Control is a security feature that needs to be continuously running after Windows is installed. The point is to block malicious apps, and if you disable it at any time, Windows doesn't trust the image.

By default, on newer builds, it's set in evaluation mode. Windows will test if your system qualifies based on HW requirements, and disables SAC if your PC will have problems. This evaluation period lasts a unknown period time of time. SAC will either be enabled or disabled afterwards.

Your options are:
  • Default (Allow eval mode) -- Do nothing --> Windows qualifies system is fast enough (enabled), too slow (disabled)
  • Allow eval mode -- Manual change to enabled or disabled, before eval is done
  • Enable SAC -- Reg change integrated in the image
  • Disable SAC -- Reg change integrated in the image
Any time SAC is disabled, it can NEVER be re-enabled in any mode. You can integrate the reg key to make a decision to skip eval, and make a permanent choice.
 
seems like a premium feature for who use a genuine key :) (and i like it)
but i need to make an image with the capability of activating a key
Under compatibility>Activation>Activasion (KMS) is all the requirement to put a key in unattended or later ?

Imagine i don't like to be signed in windows, i just want the activation of windows with a genuine key and SAC On.
How can i do that? :oops:
 
KMS is a separate topic, in a legitimate setting it involves an external server. For a personal system, you use a normal activation key.
Add your unique Windows key to the very last Unattended setting.

To force SAC on or off in the image, add this file under Registry:
Code: 
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CI\Policy]
"VerifiedAndReputablePolicyState"=dword:00000001
 
i see, thankyou
of course i need to setup some other things before this step.
buuut there is some mandatory services, component, setting, feature, idk, to be able to communicate with activation server?
maybe i missing something
like, they ignore the fact of bypassing TPM RAM etc? no matter?
 
Compatibility has a Windows Activation setting to protect the required components. Unless you disable it, NTLite knows what it needs.
As long as your network allows remote access, it should just work. If not, you have a default grace period to activate a copy.

There's no service to run activation. However SPP (Software Protection) runs to disable features if you haven't activated your Windows.
 
Looking into this on my Windows 11 computer it was in eval mode. Weird that it never changed at all since it's been installed for many months. I ended up disabling it with a backup to see what craziness happens over a period of time.
 
Necrosaro said:
Looking into this on my Windows 11 computer it was in eval mode. Weird that it never changed at all since it's been installed for many months. I ended up disabling it with a backup to see what craziness happens over a period of time.
Click to expand...
If you believe the Elevenforum comments, no one has exited eval.
I'm guessing since it's pre-release, they're happy to collect data until they figure a cutoff point.
 
garlin said:
If you believe the Elevenforum comments, no one has exited eval.
I'm guessing since it's pre-release, they're happy to collect data until they figure a cutoff point.
Click to expand...
Ms don't really care any more on Windows home user activation/license verification, they only care where they $ee they can make more money like (bigger is better) organizations or business where they can sale (cloud) services like office + mail (there we have "Windows As A Service" or "WAAS").
Otherwise, nobody could activate Windows 11 with a Windows 11 license key (imagine activating Vista with Windows 95 license key).

Ms is digging info wherever they can, that is true.

Had a legit activation and no internet wasn't an issue.
No activation and always ignored the activation watermark for months while telemetry removed, and only programs installed were allowed to connect to the internet.

I would tell more but there are things that is better to keep for ourselves because Ms won't pay a penny, Ms is stealing code from github users (there are users that tooks Ms to the court).

Ms is late joining to the "alphabet" business model
 
aVRage said:
seems like a premium feature for who use a genuine key :) (and i like it)
but i need to make an image with the capability of activating a key
Under compatibility>Activation>Activasion (KMS) is all the requirement to put a key in unattended or later ?

Imagine i don't like to be signed in windows, i just want the activation of windows with a genuine key and SAC On.
How can i do that? :oops:
Click to expand...
No, the compatibility protection is due to my tests, here is the story:

Is it "Safe to Remove?"

There are many components that most of us don't know if it safe to remove or not because some needs an explanation more than a description and i would like to post here the apps' name and what (i think) they do. Hardware Support Internet Printing Client Needed for printing from Windows Apps...
www.ntlite.com www.ntlite.com

Long story short: "Activation (KMS)" locks "DNS Client" from removals.
 
i made 2 version of Windows 11 pro 22H2, one with defender smartscreen sac in evaluation mode, and another one only with windows firewall

atm running without defender smartscreen sac but with windows firewall + antivirus (have to decide between norton 360"for gamers" or bitdefender or avira licensed)
anyway this time everything working smooth and fine :cool:
i have 3 screen from fresh install / after installation of offline software / after installation of online software + steam / discord / brave open
if someone want to look/try the preset is welcome
 

Attachments

  • fresh install.jpg
    fresh install.jpg
    1.8 MB
  • offline+programs.png
    offline+programs.png
    509.8 KB
  • online+programsSteamDiscord running.png
    online+programsSteamDiscord running.png
    1.2 MB
  • aVRage11.xml
    aVRage11.xml
    60.5 KB
garlin said:
If you believe the Elevenforum comments, no one has exited eval.
I'm guessing since it's pre-release, they're happy to collect data until they figure a cutoff point.
Click to expand...
I don't follow them anymore. For all I care that forum can keep there windows closed to unique individuals
 
Is this functional on Windows 11? I don't know what it removes.

1673032139929.png


Another question does anyone experienced problems about sharing printer on network by disabling or removing certain things? It seems I can't see network printers when shared...
 
crypticus said:
Is this functional on Windows 11? I don't know what it removes.

View attachment 8976


Another question does anyone experienced problems about sharing printer on network by disabling or removing certain things? It seems I can't see network printers when shared...
Click to expand...
I just removed that yesterday "action center" along with windows update. Action center provided a small boost and did not affect anything on my end. Windows update didn't do anything for me. Action center is just for the right hand corner stuff( just garbage for me)

Printers I hated that when I was a technician but will try and take a look later if nobody else has help you out.

Edit.........Just the action center not the other ones above for clarification
 
I think the action center you are talking about is notification center? I am talking about security and maintance I remembered what it is now... Its not perfectly clear on description so I forget about it sometimes. I will test if it still gets removed on W11
 
Last edited:
Question: There is an appx for WMware the Hyper-V i deleted in my image? (i was thinking VirtualBox running without it :confused: )
 
garlin said:
None for official download.
On MDL, they occasionally share the updated links that WU uses to push the SecHealthUI self-installer EXE.

Security Health UI - no official downloads
Defender platform (engine): x86, x64
Defender definitions: x86, x64, arm64
Click to expand...
I had problems with hostrefresh to bring it back. it seems my deprovision reg file was working so damn good even secui was not getting installed back... Removed my reg file and made hostrefresh again...
 
You must log in or register to reply here.
Back
Top