Skip to content

Instantly share code, notes, and snippets.

@rma92
Created November 21, 2025 11:40
Show Gist options
  • Select an option

  • Save rma92/97dc15b65a991542723c732e1e13aa51 to your computer and use it in GitHub Desktop.

Select an option

Save rma92/97dc15b65a991542723c732e1e13aa51 to your computer and use it in GitHub Desktop.
Windows 10 LTSC 2021 rma92 Lite
<?xml version="1.0" encoding="utf-8"?>
<Preset isAutoSaved="true" xmlns="urn:schemas-nliteos-com:pn.v1">
<Date>09/12/2022 13:25:18</Date>
<AppInfo>
<Version>2.3.8.8890</Version>
<Licensed>No</Licensed>
<Protections>Yes</Protections>
<Host>Windows Server 2022 Standard x64 - 10.0.20348.405 (en-US)</Host>
</AppInfo>
<ImageInfo>
<Version mode="offline">Windows 10 EnterpriseS (21H2) x64 - 10.0.19044.1288 (en-US)</Version>
<GUID>{11E47343-10A6-4BE3-AF4C-3D62398129A7}</GUID>
</ImageInfo>
<RemoveComponents AppRemovalMode="DISM"></RemoveComponents>
<Compatibility protectHidden="false">
<ComponentFeatures>
<Feature enabled="no">AppGuard</Feature>
<Feature enabled="no">Bluetooth</Feature>
<Feature enabled="no">CapFrameX</Feature>
<Feature enabled="yes">Discord</Feature>
<Feature enabled="yes">FileSharing</Feature>
<Feature enabled="no">Hyper-V</Feature>
<Feature enabled="no">iCloud</Feature>
<Feature enabled="yes">ManualSetup</Feature>
<Feature enabled="yes">OfficeSupport</Feature>
<Feature enabled="yes">AppxSupport</Feature>
<Feature enabled="yes">Netflix</Feature>
<Feature enabled="no">NetworkDiscovery</Feature>
<Feature enabled="no">NightLight</Feature>
<Feature enabled="yes">NvidiaSetup</Feature>
<Feature enabled="yes">OOBE</Feature>
<Feature enabled="yes">Printing</Feature>
<Feature enabled="yes">Recommended-All</Feature>
<Feature enabled="no">SamsungSwitch</Feature>
<Feature enabled="yes">Scanning</Feature>
<Feature enabled="yes">ServicingStack</Feature>
<Feature enabled="yes">ShellSearchSupport</Feature>
<Feature enabled="yes">Spotify</Feature>
<Feature enabled="yes">SFC</Feature>
<Feature enabled="yes">DefaultFonts</Feature>
<Feature enabled="no">SafeMode</Feature>
<Feature enabled="yes">TeamViewer</Feature>
<Feature enabled="no">Recommended-Tablet</Feature>
<Feature enabled="yes">USBModem</Feature>
<Feature enabled="yes">USB</Feature>
<Feature enabled="yes">VideoPlayback</Feature>
<Feature enabled="no">VPN</Feature>
<Feature enabled="no">VisualStudio</Feature>
<Feature enabled="no">VSS</Feature>
<Feature enabled="yes">ActivationKMS</Feature>
<Feature enabled="yes">Activation</Feature>
<Feature enabled="yes">WindowsStore</Feature>
<Feature enabled="yes">WindowsUpdate</Feature>
<Feature enabled="yes">WLAN</Feature>
<Feature enabled="no">YubiKey</Feature>
</ComponentFeatures>
<MachineDrivers>
<Machine enabled="yes">HostMachine</Machine>
<Machine enabled="no">Hyper-V VM</Machine>
<Machine enabled="no">Parallels VM</Machine>
<Machine enabled="no">Virtual Box VM</Machine>
<Machine enabled="no">VMware VM</Machine>
</MachineDrivers>
</Compatibility>
<Features></Features>
<Packages></Packages>
<Commands>
<PostUpdates>
<!--<Command>cmd /c echo Example from [MOUNTDIR]\Windows &amp; pause</Command>-->
<!--<Command>dism /image:[MOUNTDIR] /get-intl</Command>-->
</PostUpdates>
</Commands>
<Drivers showHidden="false"></Drivers>
<Unattended mode="1">
<OEMSetupComplete>false</OEMSetupComplete>
<AnswerFileLocationPanther>false</AnswerFileLocationPanther>
<AnswerFileLocationBoot>false</AnswerFileLocationBoot>
<SaveBothArch>false</SaveBothArch>
<EditionPrompt>false</EditionPrompt>
<settings pass="oobeSystem">
<component name="Microsoft-Windows-International-Core">
<SystemLocale>en-US</SystemLocale>
<UILanguage>en-US</UILanguage>
<UILanguageFallback>en-US</UILanguageFallback>
<UserLocale>en-US</UserLocale>
</component>
<component name="Microsoft-Windows-Shell-Setup">
<OOBE>
<HideEULAPage>true</HideEULAPage>
<HideLocalAccountScreen>true</HideLocalAccountScreen>
<HideOnlineAccountScreens>true</HideOnlineAccountScreens>
<HideWirelessSetupInOOBE>true</HideWirelessSetupInOOBE>
<NetworkLocation>Work</NetworkLocation>
<ProtectYourPC>3</ProtectYourPC>
<SkipMachineOOBE>true</SkipMachineOOBE>
<SkipUserOOBE>true</SkipUserOOBE>
</OOBE>
<UserAccounts>
<LocalAccounts>
<LocalAccount>
<Description>default user</Description>
<Group>Administrators</Group>
<Name>user</Name>
<Password>
<PlainText>false</PlainText>
<Value>MQBQAGEAcwBzAHcAbwByAGQA</Value>
</Password>
</LocalAccount>
</LocalAccounts>
</UserAccounts>
</component>
</settings>
<settings pass="specialize">
<component name="Microsoft-Windows-Security-SPP-UX">
<SkipAutoActivation>true</SkipAutoActivation>
</component>
</settings>
<settings pass="windowsPE">
<component name="Microsoft-Windows-Setup">
<Diagnostics>
<OptIn>false</OptIn>
</Diagnostics>
<DynamicUpdate>
<WillShowUI>OnError</WillShowUI>
</DynamicUpdate>
<ImageInstall>
<OSImage>
<Compact>true</Compact>
<WillShowUI>OnError</WillShowUI>
<InstallFrom>
<MetaData>
<Key>/IMAGE/INDEX</Key>
<Value>1</Value>
</MetaData>
</InstallFrom>
</OSImage>
</ImageInstall>
<UserData>
<AcceptEula>true</AcceptEula>
<ProductKey>
<Key></Key>
</ProductKey>
</UserData>
</component>
</settings>
</Unattended>
<Tweaks>
<Settings>
<TweakGroup name="CrashControl">
<Tweak name="CrashControl\CrashDumpEnabled">3</Tweak>
</TweakGroup>
<TweakGroup name="DesktopTweaks">
<Tweak name="Search\SearchboxTaskbarMode">0</Tweak>
<Tweak name="Advanced\TaskbarGlomLevel">2</Tweak>
<Tweak name="Advanced\TaskbarSmallIcons">1</Tweak>
</TweakGroup>
<TweakGroup name="Privacy">
<Tweak name="appointments\Value">Deny</Tweak>
<Tweak name="phoneCallHistory\Value">Deny</Tweak>
<Tweak name="webcam\Value">Allow</Tweak>
<Tweak name="contacts\Value">Deny</Tweak>
<Tweak name="appDiagnostics\Value">Deny</Tweak>
<Tweak name="documentsLibrary\Value">Deny</Tweak>
<Tweak name="email\Value">Deny</Tweak>
<Tweak name="broadFileSystemAccess\Value">Allow</Tweak>
<Tweak name="chat\Value">Deny</Tweak>
<Tweak name="microphone\Value">Allow</Tweak>
<Tweak name="userNotificationListener\Value">Allow</Tweak>
<Tweak name="phoneCall\Value">Deny</Tweak>
<Tweak name="picturesLibrary\Value">Deny</Tweak>
<Tweak name="radios\Value">Allow</Tweak>
<Tweak name="LooselyCoupled\Value">Deny</Tweak>
<Tweak name="userDataTasks\Value">Deny</Tweak>
<Tweak name="userAccountInformation\Value">Deny</Tweak>
<Tweak name="videosLibrary\Value">Deny</Tweak>
<Tweak name="Client\OptInOrOutPreference">0</Tweak>
<Tweak name="System\AllowExperimentation">0</Tweak>
<Tweak name="System\AllowLocation">0</Tweak>
<Tweak name="DataCollection\AllowTelemetry">0</Tweak>
<Tweak name="CloudContent\DisableWindowsConsumerFeatures">1</Tweak>
<Tweak name="features\PaidWifi">0</Tweak>
<Tweak name="features\WiFiSenseOpen">0</Tweak>
<Tweak name="ContentDeliveryManager\SilentInstalledAppsEnabled">0</Tweak>
<Tweak name="System\AllowClipboardHistory">0</Tweak>
<Tweak name="CloudContent\DisableCloudOptimizedContent">1</Tweak>
<Tweak name="AppCompat\DisableInventory">1</Tweak>
<Tweak name="TrainedDataStore\HarvestContacts">0</Tweak>
<Tweak name="InputPersonalization\RestrictImplicitTextCollection">1</Tweak>
<Tweak name="InputPersonalization\RestrictImplicitInkCollection">1</Tweak>
<Tweak name="Rules\NumberOfSIUFInPeriod">0</Tweak>
<Tweak name="TIPC\Enabled">0</Tweak>
<Tweak name="AppHost\EnableWebContentEvaluation">0</Tweak>
<Tweak name="MicrosoftEdge\PhishingFilter\Enabledv9">0</Tweak>
<Tweak name="Internet Explorer\PhishingFilter\Enabledv9">0</Tweak>
<Tweak name="Explorer\SmartScreenEnabled">Off</Tweak>
</TweakGroup>
<TweakGroup name="System">
<Tweak name="Windows\DisableATMFD">1</Tweak>
</TweakGroup>
<TweakGroup name="WindowsDefender">
<Tweak name="Features\TamperProtection">0</Tweak>
<Tweak name="Windows Defender\DisableAntiSpyware">1</Tweak>
</TweakGroup>
</Settings>
<Services>
<TweakGroup name="services">
<Tweak name="AJRouter\AJRouter">4</Tweak>
<Tweak name="DiagTrack\DiagTrack">4</Tweak>
<Tweak name="diagsvc\diagsvc">4</Tweak>
<Tweak name="DPS\DPS">4</Tweak>
<Tweak name="WdiServiceHost\WdiServiceHost">4</Tweak>
<Tweak name="WdiSystemHost\WdiSystemHost">4</Tweak>
<Tweak name="MapsBroker\MapsBroker">4</Tweak>
<Tweak name="SSDPSRV\SSDPSRV">4</Tweak>
<Tweak name="SysMain\SysMain">4</Tweak>
<Tweak name="upnphost\upnphost">4</Tweak>
<Tweak name="WinDefend\WinDefend">4</Tweak>
<Tweak name="WSearch\WSearch">4</Tweak>
<Tweak name="wuauserv\wuauserv">4</Tweak>
<Tweak name="XboxGipSvc\XboxGipSvc">4</Tweak>
<Tweak name="XblAuthManager\XblAuthManager">4</Tweak>
<Tweak name="XblGameSave\XblGameSave">4</Tweak>
<Tweak name="XboxNetApiSvc\XboxNetApiSvc">4</Tweak>
</TweakGroup>
</Services>
<ExtraServices></ExtraServices>
<ScheduledTasks></ScheduledTasks>
</Tweaks>
<ApplyOptions>
<ImageTasks>
<Task>imageSaveTrim</Task>
<Task>imageFormatEsd</Task>
<Task>imageOptionsCreateIso</Task>
</ImageTasks>
<AutoIsoFile>C:\iso\Windows 10 Enterprise LTSC 2021\Win10-Unattend-DefenderUpdateDisabled.iso</AutoIsoFile>
<AutoIsoLabel>LTSC2021-DefendDisablex</AutoIsoLabel>
<AutoSplitSize>4000</AutoSplitSize>
<CleanHotfixedLeftovers>0</CleanHotfixedLeftovers>
<OptimizeAppX>false</OptimizeAppX>
<ReuseDriverCache>false</ReuseDriverCache>
</ApplyOptions>
<Execution>
<Remove></Remove>
<Change></Change>
<Add></Add>
</Execution>
<Registry></Registry>
</Preset>
<?xml version="1.0" encoding="utf-8"?>
<unattend xmlns="urn:schemas-microsoft-com:unattend">
<settings pass="oobeSystem">
<component name="Microsoft-Windows-International-Core" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<SystemLocale>en-US</SystemLocale>
<UILanguage>en-US</UILanguage>
<UILanguageFallback>en-US</UILanguageFallback>
<UserLocale>en-US</UserLocale>
</component>
<component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<OOBE>
<HideEULAPage>true</HideEULAPage>
<HideLocalAccountScreen>true</HideLocalAccountScreen>
<HideOnlineAccountScreens>true</HideOnlineAccountScreens>
<HideWirelessSetupInOOBE>true</HideWirelessSetupInOOBE>
<NetworkLocation>Work</NetworkLocation>
<ProtectYourPC>3</ProtectYourPC>
<SkipMachineOOBE>true</SkipMachineOOBE>
<SkipUserOOBE>true</SkipUserOOBE>
</OOBE>
<UserAccounts>
<LocalAccounts>
<LocalAccount wcm:action="add">
<Description>default user</Description>
<Group>Administrators</Group>
<Name>user</Name>
<Password>
<PlainText>false</PlainText>
<Value>MQBQAGEAcwBzAHcAbwByAGQA</Value>
</Password>
</LocalAccount>
</LocalAccounts>
</UserAccounts>
</component>
</settings>
<settings pass="specialize">
<component name="Microsoft-Windows-Security-SPP-UX" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<SkipAutoActivation>true</SkipAutoActivation>
</component>
</settings>
<settings pass="windowsPE">
<component name="Microsoft-Windows-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
<Diagnostics>
<OptIn>false</OptIn>
</Diagnostics>
<DynamicUpdate>
<WillShowUI>OnError</WillShowUI>
</DynamicUpdate>
<ImageInstall>
<OSImage>
<Compact>true</Compact>
<WillShowUI>OnError</WillShowUI>
<InstallFrom>
<MetaData wcm:action="add">
<Key>/IMAGE/INDEX</Key>
<Value>1</Value>
</MetaData>
</InstallFrom>
</OSImage>
</ImageInstall>
<UserData>
<AcceptEula>true</AcceptEula>
<ProductKey>
<Key></Key>
</ProductKey>
</UserData>
</component>
</settings>
</unattend>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment