win2019-eval.xml 17 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194195196197198199200201202203204205206207208209210211212213214215216217218219220221222223224225226227228229230231232233234235236237238239240241242243244245246247248249250251252253254255256257258259260261262263264265266267268269270271272273274275276277278279280281282283284285286287288289290291292293294295296297298299300301302303304305306307308309310311312313314315316317318319320321322323324325326327328329330331332333334335336337338339340341342
  1. <?xml version="1.0" encoding="UTF-8"?>
  2. <unattend xmlns="urn:schemas-microsoft-com:unattend" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State">
  3. <settings pass="windowsPE">
  4. <component name="Microsoft-Windows-International-Core-WinPE" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
  5. <SetupUILanguage>
  6. <UILanguage>en-US</UILanguage>
  7. </SetupUILanguage>
  8. <InputLocale>0409:00000409</InputLocale>
  9. <SystemLocale>en-US</SystemLocale>
  10. <UILanguage>en-US</UILanguage>
  11. <UILanguageFallback>en-US</UILanguageFallback>
  12. <UserLocale>en-US</UserLocale>
  13. </component>
  14. <component name="Microsoft-Windows-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
  15. <DiskConfiguration>
  16. <Disk wcm:action="add">
  17. <DiskID>0</DiskID>
  18. <WillWipeDisk>true</WillWipeDisk>
  19. <CreatePartitions>
  20. <!-- System partition (ESP) -->
  21. <CreatePartition wcm:action="add">
  22. <Order>1</Order>
  23. <Type>EFI</Type>
  24. <Size>128</Size>
  25. </CreatePartition>
  26. <!-- Microsoft reserved partition (MSR) -->
  27. <CreatePartition wcm:action="add">
  28. <Order>2</Order>
  29. <Type>MSR</Type>
  30. <Size>128</Size>
  31. </CreatePartition>
  32. <!-- Windows partition -->
  33. <CreatePartition wcm:action="add">
  34. <Order>3</Order>
  35. <Type>Primary</Type>
  36. <Extend>true</Extend>
  37. </CreatePartition>
  38. </CreatePartitions>
  39. <ModifyPartitions>
  40. <!-- System partition (ESP) -->
  41. <ModifyPartition wcm:action="add">
  42. <Order>1</Order>
  43. <PartitionID>1</PartitionID>
  44. <Label>System</Label>
  45. <Format>FAT32</Format>
  46. </ModifyPartition>
  47. <!-- MSR partition does not need to be modified -->
  48. <ModifyPartition wcm:action="add">
  49. <Order>2</Order>
  50. <PartitionID>2</PartitionID>
  51. </ModifyPartition>
  52. <!-- Windows partition -->
  53. <ModifyPartition wcm:action="add">
  54. <Order>3</Order>
  55. <PartitionID>3</PartitionID>
  56. <Label>Windows</Label>
  57. <Letter>C</Letter>
  58. <Format>NTFS</Format>
  59. </ModifyPartition>
  60. </ModifyPartitions>
  61. </Disk>
  62. </DiskConfiguration>
  63. <ImageInstall>
  64. <OSImage>
  65. <InstallFrom>
  66. <MetaData wcm:action="add">
  67. <Key>/IMAGE/NAME</Key>
  68. <Value>Windows Server 2019 SERVERSTANDARD</Value>
  69. </MetaData>
  70. </InstallFrom>
  71. <InstallTo>
  72. <DiskID>0</DiskID>
  73. <PartitionID>3</PartitionID>
  74. </InstallTo>
  75. <WillShowUI>OnError</WillShowUI>
  76. <InstallToAvailablePartition>false</InstallToAvailablePartition>
  77. </OSImage>
  78. </ImageInstall>
  79. <DynamicUpdate>
  80. <Enable>true</Enable>
  81. <WillShowUI>Never</WillShowUI>
  82. </DynamicUpdate>
  83. <UpgradeData>
  84. <Upgrade>false</Upgrade>
  85. <WillShowUI>Never</WillShowUI>
  86. </UpgradeData>
  87. <UserData>
  88. <AcceptEula>true</AcceptEula>
  89. <FullName>Docker</FullName>
  90. <Organization>Windows for Docker</Organization>
  91. </UserData>
  92. <EnableFirewall>false</EnableFirewall>
  93. <Diagnostics>
  94. <OptIn>false</OptIn>
  95. </Diagnostics>
  96. </component>
  97. </settings>
  98. <settings pass="offlineServicing">
  99. <component name="Microsoft-Windows-LUA-Settings" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
  100. <EnableLUA>false</EnableLUA>
  101. </component>
  102. </settings>
  103. <settings pass="generalize">
  104. <component name="Microsoft-Windows-PnPSysprep" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
  105. <PersistAllDeviceInstalls>true</PersistAllDeviceInstalls>
  106. </component>
  107. <component name="Microsoft-Windows-Security-SPP" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
  108. <SkipRearm>1</SkipRearm>
  109. </component>
  110. </settings>
  111. <settings pass="specialize">
  112. <component name="Microsoft-Windows-Security-SPP-UX" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
  113. <SkipAutoActivation>true</SkipAutoActivation>
  114. </component>
  115. <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
  116. <ComputerName>*</ComputerName>
  117. <OEMInformation>
  118. <Manufacturer>Dockur</Manufacturer>
  119. <Model>Windows for Docker</Model>
  120. <SupportHours>24/7</SupportHours>
  121. <SupportPhone />
  122. <SupportProvider>Dockur</SupportProvider>
  123. <SupportURL>https://github.com/dockur/windows/issues</SupportURL>
  124. </OEMInformation>
  125. <OEMName>Windows for Docker</OEMName>
  126. </component>
  127. <component name="Microsoft-Windows-ErrorReportingCore" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
  128. <DisableWER>1</DisableWER>
  129. </component>
  130. <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
  131. <DisableAccelerators>true</DisableAccelerators>
  132. <DisableFirstRunWizard>true</DisableFirstRunWizard>
  133. <Home_Page>https://google.com</Home_Page>
  134. <Help_Page>about:blank</Help_Page>
  135. </component>
  136. <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="wow64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
  137. <DisableAccelerators>true</DisableAccelerators>
  138. <DisableFirstRunWizard>true</DisableFirstRunWizard>
  139. <Home_Page>https://google.com</Home_Page>
  140. <Help_Page>about:blank</Help_Page>
  141. </component>
  142. <component name="Microsoft-Windows-SQMApi" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
  143. <CEIPEnabled>0</CEIPEnabled>
  144. </component>
  145. <component name="Microsoft-Windows-SystemRestore-Main" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
  146. <DisableSR>1</DisableSR>
  147. </component>
  148. <component name="Microsoft-Windows-International-Core" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
  149. <InputLocale>0409:00000409</InputLocale>
  150. <SystemLocale>en-US</SystemLocale>
  151. <UILanguage>en-US</UILanguage>
  152. <UILanguageFallback>en-US</UILanguageFallback>
  153. <UserLocale>en-US</UserLocale>
  154. </component>
  155. <component name="Microsoft-Windows-Deployment" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
  156. <RunSynchronous>
  157. <RunSynchronousCommand wcm:action="add">
  158. <Order>1</Order>
  159. <Path>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\CurrentVersion\NetworkList\Signatures\FirstNetwork" /v Category /t REG_DWORD /d 1 /f</Path>
  160. <Description>Set Network Location to Home</Description>
  161. </RunSynchronousCommand>
  162. </RunSynchronous>
  163. </component>
  164. <component name="Microsoft-Windows-ServerManager-SvrMgrNc" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
  165. <DoNotOpenServerManagerAtLogon>true</DoNotOpenServerManagerAtLogon>
  166. </component>
  167. <component name="Microsoft-Windows-OutOfBoxExperience" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
  168. <DoNotOpenInitialConfigurationTasksAtLogon>true</DoNotOpenInitialConfigurationTasksAtLogon>
  169. </component>
  170. <component name="Microsoft-Windows-TerminalServices-LocalSessionManager" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
  171. <fDenyTSConnections>false</fDenyTSConnections>
  172. </component>
  173. <component name="Microsoft-Windows-TerminalServices-RDP-WinStationExtensions" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
  174. <UserAuthentication>0</UserAuthentication>
  175. </component>
  176. <component name="Networking-MPSSVC-Svc" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
  177. <FirewallGroups>
  178. <FirewallGroup wcm:action="add" wcm:keyValue="RemoteDesktop">
  179. <Active>true</Active>
  180. <Profile>all</Profile>
  181. <Group>@FirewallAPI.dll,-28752</Group>
  182. </FirewallGroup>
  183. </FirewallGroups>
  184. </component>
  185. </settings>
  186. <settings pass="oobeSystem">
  187. <component name="Microsoft-Windows-SecureStartup-FilterDriver" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
  188. <PreventDeviceEncryption>true</PreventDeviceEncryption>
  189. </component>
  190. <component name="Microsoft-Windows-EnhancedStorage-Adm" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
  191. <TCGSecurityActivationDisabled>1</TCGSecurityActivationDisabled>
  192. </component>
  193. <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
  194. <UserAccounts>
  195. <LocalAccounts>
  196. <LocalAccount wcm:action="add">
  197. <Name>Docker</Name>
  198. <Group>Administrators</Group>
  199. <Password>
  200. <Value />
  201. <PlainText>true</PlainText>
  202. </Password>
  203. </LocalAccount>
  204. </LocalAccounts>
  205. <AdministratorPassword>
  206. <Value>password</Value>
  207. <PlainText>true</PlainText>
  208. </AdministratorPassword>
  209. </UserAccounts>
  210. <AutoLogon>
  211. <Username>Docker</Username>
  212. <Enabled>true</Enabled>
  213. <LogonCount>65432</LogonCount>
  214. <Password>
  215. <Value />
  216. <PlainText>true</PlainText>
  217. </Password>
  218. </AutoLogon>
  219. <Display>
  220. <ColorDepth>32</ColorDepth>
  221. <HorizontalResolution>1920</HorizontalResolution>
  222. <VerticalResolution>1080</VerticalResolution>
  223. </Display>
  224. <OOBE>
  225. <HideEULAPage>true</HideEULAPage>
  226. <HideLocalAccountScreen>true</HideLocalAccountScreen>
  227. <HideOEMRegistrationScreen>true</HideOEMRegistrationScreen>
  228. <HideOnlineAccountScreens>true</HideOnlineAccountScreens>
  229. <HideWirelessSetupInOOBE>true</HideWirelessSetupInOOBE>
  230. <NetworkLocation>Home</NetworkLocation>
  231. <ProtectYourPC>3</ProtectYourPC>
  232. <SkipUserOOBE>true</SkipUserOOBE>
  233. <SkipMachineOOBE>true</SkipMachineOOBE>
  234. </OOBE>
  235. <RegisteredOrganization>Dockur</RegisteredOrganization>
  236. <RegisteredOwner>Windows for Docker</RegisteredOwner>
  237. <FirstLogonCommands>
  238. <SynchronousCommand wcm:action="add">
  239. <Order>1</Order>
  240. <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" /v "AllowInsecureGuestAuth" /t REG_DWORD /d 1 /f</CommandLine>
  241. <Description>Allow guest access to network shares</Description>
  242. </SynchronousCommand>
  243. <SynchronousCommand wcm:action="add">
  244. <Order>2</Order>
  245. <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" /v LimitBlankPasswordUse /t REG_DWORD /d 0 /f</CommandLine>
  246. <Description>Allow RDP login with blank password</Description>
  247. </SynchronousCommand>
  248. <SynchronousCommand wcm:action="add">
  249. <Order>3</Order>
  250. <CommandLine>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PasswordLess\Device" /v "DevicePasswordLessBuildVersion" /t REG_DWORD /d 0 /f</CommandLine>
  251. <Description>Enable option for passwordless sign-in</Description>
  252. </SynchronousCommand>
  253. <SynchronousCommand wcm:action="add">
  254. <Order>4</Order>
  255. <CommandLine>cmd /C wmic useraccount where name="Docker" set PasswordExpires=false</CommandLine>
  256. <Description>Password Never Expires</Description>
  257. </SynchronousCommand>
  258. <SynchronousCommand wcm:action="add">
  259. <Order>5</Order>
  260. <CommandLine>cmd /C POWERCFG -H OFF</CommandLine>
  261. <Description>Disable Hibernation</Description>
  262. </SynchronousCommand>
  263. <SynchronousCommand wcm:action="add">
  264. <Order>6</Order>
  265. <CommandLine>cmd /C POWERCFG -X -monitor-timeout-ac 0</CommandLine>
  266. <Description>Disable monitor blanking</Description>
  267. </SynchronousCommand>
  268. <SynchronousCommand wcm:action="add">
  269. <Order>7</Order>
  270. <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Edge" /v "HideFirstRunExperience" /t REG_DWORD /d 1 /f</CommandLine>
  271. <Description>Disable first-run experience in Edge</Description>
  272. </SynchronousCommand>
  273. <SynchronousCommand wcm:action="add">
  274. <Order>8</Order>
  275. <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "HideFileExt" /t REG_DWORD /d 0 /f</CommandLine>
  276. <Description>Show file extensions in Explorer</Description>
  277. </SynchronousCommand>
  278. <SynchronousCommand wcm:action="add">
  279. <Order>9</Order>
  280. <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateFileSizePercent" /t REG_DWORD /d 0 /f</CommandLine>
  281. <Description>Zero Hibernation File</Description>
  282. </SynchronousCommand>
  283. <SynchronousCommand wcm:action="add">
  284. <Order>10</Order>
  285. <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateEnabled" /t REG_DWORD /d 0 /f</CommandLine>
  286. <Description>Disable Hibernation</Description>
  287. </SynchronousCommand>
  288. <SynchronousCommand wcm:action="add">
  289. <Order>11</Order>
  290. <CommandLine>cmd /C POWERCFG -X -standby-timeout-ac 0</CommandLine>
  291. <Description>Disable Sleep</Description>
  292. </SynchronousCommand>
  293. <SynchronousCommand wcm:action="add">
  294. <Order>12</Order>
  295. <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" /v "fAllowUnlistedRemotePrograms" /t REG_DWORD /d 1 /f</CommandLine>
  296. <Description>Enable RemoteAPP to launch unlisted programs</Description>
  297. </SynchronousCommand>
  298. <SynchronousCommand wcm:action="add">
  299. <Order>13</Order>
  300. <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Search" /v "SearchboxTaskbarMode" /t REG_DWORD /d 0 /f</CommandLine>
  301. <Description>Remove Search from the Taskbar</Description>
  302. </SynchronousCommand>
  303. <SynchronousCommand wcm:action="add">
  304. <Order>14</Order>
  305. <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "ShowTaskViewButton" /t REG_DWORD /d 0 /f</CommandLine>
  306. <Description>Remove Task View from the Taskbar</Description>
  307. </SynchronousCommand>
  308. <SynchronousCommand wcm:action="add">
  309. <Order>15</Order>
  310. <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "TaskbarDa" /t REG_DWORD /d 0 /f</CommandLine>
  311. <Description>Remove Widgets from the Taskbar</Description>
  312. </SynchronousCommand>
  313. <SynchronousCommand wcm:action="add">
  314. <Order>16</Order>
  315. <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "TaskbarMn" /t REG_DWORD /d 0 /f</CommandLine>
  316. <Description>Remove Chat from the Taskbar</Description>
  317. </SynchronousCommand>
  318. <SynchronousCommand wcm:action="add">
  319. <Order>17</Order>
  320. <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" /v "NoAutoUpdate" /t REG_DWORD /d 1 /f</CommandLine>
  321. <Description>Turn off Windows Update auto download</Description>
  322. </SynchronousCommand>
  323. <SynchronousCommand wcm:action="add">
  324. <Order>18</Order>
  325. <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-32752" new enable=Yes</CommandLine>
  326. <Description>Enable Network Discovery</Description>
  327. </SynchronousCommand>
  328. <SynchronousCommand wcm:action="add">
  329. <Order>19</Order>
  330. <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-28502" new enable=Yes</CommandLine>
  331. <Description>Enable File Sharing</Description>
  332. </SynchronousCommand>
  333. <SynchronousCommand wcm:action="add">
  334. <Order>20</Order>
  335. <CommandLine>cmd /C if exist "C:\OEM\install.bat" start "Install" "cmd /C C:\OEM\install.bat"</CommandLine>
  336. <Description>Execute custom script from the OEM folder if exists</Description>
  337. </SynchronousCommand>
  338. </FirstLogonCommands>
  339. </component>
  340. </settings>
  341. </unattend>