Adding Microsoft Update and disabling System Restore

[mooms]

Hi Lego,

I will be very happy if you can add:

- an option to have MS Update enabled (instead of Windows Update) done see this

- an option to disable system restore done see this

- an option to disable Windows Defender edit: not the service.

- an option to not not show the "send to recycle bin" confirmation when you hit the "supp" key.



Thank you !

Edited October 26, 2013 by mooms

[Thiersee]

....- an option to have MS Update enabled (instead of Windows Update)

...

Sorry for asking!

What is the difference between Windows- and Microsoft-Update?

TNX, Thiersee

[mooms]

Windows Update is only for Windows, Microsoft Update is for all Microsoft products.

[dareckibmw]

Hi Lego,

- an option to disable Windows Defender

Its there already.

[mooms]

Oh, i see, so disabling the service is enough ?

Thanks dareckibmw

edit: that's not the same thing!

Just tested, if you disable the service, you can't install Malicious Software Removal Tool from Windows/MS Update, and Windows Defender throws an error if you try to configure it.

The latter one is rather logical and expected, but the former is unexpected and proves that MRT relies on Windows Defender service.

Disabling the service is too much, disabling only the software is the better option i think. (It can be easily re-enabled by an average user, not the service, and errors frighten the average user)

Edited November 3, 2012 by mooms

[ricktendo]

Use autounattend.xml to disable it and system restore (the toolkit may have those options in unattended)

[mooms]

Thanks Ricks but i don't want to use autounattend.xml because i want to be able to choose any editions of win7 at install.

[ricktendo]

You can use autounattended and still have the option, just dont fill out certain parts

[mooms]

Even if I merge X86 and X64 images ? It's good to know i will try. Thanks !

[ricktendo]

Yea, but you may have to do a x86/x64 xml by hand

[geromichi]

Hi Lego,

I will be very happy if you can add:

- an option to have MS Update enabled (instead of Windows Update)

Thank you !

If it's possible, thx

[Etz]

If it's possible, thx

Not possible, as this component gets directly downloaded from MS servers if enabled.

Its not built in feature, so there is nothing you can enable in offline image.

Workaround is to integrate something from Microsoft as Installer (Silverlight, NET framework, Security Essentials, etc) and if network is available during install, it gets downloaded and enabled automatically.

Edited November 23, 2012 by Etz

[mooms]

It's certainly possible if we know what is done when you activate MS Update.

An addon would be great.

[Etz]

I`m actually doing a clean modified install this weekend, so I could actually do Packet Capturing to actually see what is getting downloaded and from where, when this option is activated by hand.

[ricktendo]

Its just a few reg entries I think

[mooms]

next time i install Windows 7 i will do a capture with regshot, but i don't know if it will be enough.

[Thiersee]

Last week I build a Win7-Prof-DVD with all the McRip-Updates with a couple of additional updates (prä-SP1 for post-SP1 and windows-Update-Agent); after Win-installation I installed Microsoft Office 2010; after this I checked Windows-Update and I got a couple of updates for windows and ALL the updates for other Microsoft products (in my case Office 2010).

@Etz

Workaround is to integrate something from Microsoft as Installer (Silverlight, NET framework, Security Essentials, etc) and if network is available during install, it gets downloaded and enabled automatically.

This is not enough I did an install together with Security Essentials, but the Box for "Other Microsoft Updates" was still present.

Regards, Thiersee

[Etz]

For me it is usually enough to install Silverlight via WinToolkit Installer to get it activated... :g:

[ricktendo]

If you install silverlight you can probably run this to enable it

"%ProgramFiles%\Microsoft Silverlight\5.1.10411.0\Silverlight.Configuration.exe" -enableMU

[mooms]

Its just a few reg entries I think

next time i install Windows 7 i will do a capture with regshot, but i don't know if it will be enough.

I have tested a capture with Regshot before and after enabling MS Update:

As i was afraid, it's not just some registry keys.

I don't use silverlight so i'm still looking for an other way.

edit:

I have attached the capture if someone want to look at it.

Hive.rar

Edited November 26, 2012 by mooms

[Etz]

It's certainly possible if we know what is done when you activate MS Update.

An addon would be great.

 

Discovered a way to do it...

 

Set ServiceManager = CreateObject("Microsoft.Update.ServiceManager")ServiceManager.ClientApplicationID = "My App"'add the Microsoft Update Service, GUIDSet NewUpdateService = ServiceManager.AddService2("7971f918-a847-4430-9279-4a52d1efe18d",7,"")

 

Save as *.vbs and run it for example with SetupComplete.cmd or create addon.

It will enable Microsoft Update instead of plain windows Update.

[mooms]

Thank you Etz, I've made a sfx for the fun and it works: MU.zip
 
 
System restore can be disabled with Autounattend.xml : (here example for AiO x86/x64)

<settings pass="specialize">        <component name="Microsoft-Windows-SystemRestore-Main" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">            <DisableSR>1</DisableSR>        </component>                       <component name="Microsoft-Windows-SystemRestore-Main" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">            <DisableSR>1</DisableSR>        </component>    </settings>   

 

If someone found a way to not not show the "send to recycle bin" confirmation when you hit the "supp" key it will be great.

[Etz]

Thank you Etz, I've made a sfx for the fun and it works: MU.zip

 

 

System restore can be disabled with Autounattend.xml : (here example for AiO x86/x64)

<settings pass="specialize">        <component name="Microsoft-Windows-SystemRestore-Main" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">            <DisableSR>1</DisableSR>        </component>                       <component name="Microsoft-Windows-SystemRestore-Main" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">            <DisableSR>1</DisableSR>        </component>    </settings>   

 

Well, it doesnt work on windows 8.1, System restore still runs as usual...debugging at the moment, why...

Still it works fine on Windows 7, dont know about Vista and Windows 8 though...as I skipped those...

Edited October 26, 2013 by Etz

[ricktendo]

It does work on windows 8.1, the only thing is for some reason when you install certain updates it turns itself back on

[Etz]

It does work on windows 8.1, the only thing is for some reason when you install certain updates it turns itself back on

 

Ok, thanks for the tip, then it must be one of those:

 

KB2883200

KB2884101

KB2884846

KB2886439

KB2894029

KB2894179

KB2895219

KB2896459

KB2901549

 

Which I integrate into image...

 

At least now, I know, why it didnt seem to work...

Edited October 26, 2013 by Etz