Unverified Commit 42d4e075 authored by Kroese's avatar Kroese Committed by GitHub
Browse files

feat: Disable SMB signing requirement (#787)

parent 89834cf6

assets/win11x64-enterprise-eval.xml

+24 −19
Original line number Diff line number Diff line
@@ -343,101 +343,106 @@ 
        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>2</Order>

          <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" /v "RequireSecuritySignature" /t REG_DWORD /d 0 /f</CommandLine>

          <Description>Disable SMB signing requirement</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>3</Order>

          <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" /v LimitBlankPasswordUse /t REG_DWORD /d 0 /f</CommandLine>

          <Description>Allow RDP login with blank password</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>3</Order>

          <Order>4</Order>

          <CommandLine>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PasswordLess\Device" /v "DevicePasswordLessBuildVersion" /t REG_DWORD /d 0 /f</CommandLine>

          <Description>Enable option for passwordless sign-in</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>4</Order>

          <Order>5</Order>

          <CommandLine>cmd /C wmic useraccount where name="Docker" set PasswordExpires=false</CommandLine>

          <Description>Password Never Expires</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>5</Order>

          <Order>6</Order>

          <CommandLine>cmd /C POWERCFG -H OFF</CommandLine>

          <Description>Disable Hibernation</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>6</Order>

          <Order>7</Order>

          <CommandLine>cmd /C POWERCFG -X -monitor-timeout-ac 0</CommandLine>

          <Description>Disable monitor blanking</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>7</Order>

          <Order>8</Order>

          <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Edge" /v "HideFirstRunExperience" /t REG_DWORD /d 1 /f</CommandLine>

          <Description>Disable first-run experience in Edge</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>8</Order>

          <Order>9</Order>

          <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "HideFileExt" /t REG_DWORD /d 0 /f</CommandLine>

          <Description>Show file extensions in Explorer</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>9</Order>

          <Order>10</Order>

          <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateFileSizePercent" /t REG_DWORD /d 0 /f</CommandLine>

          <Description>Zero Hibernation File</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>10</Order>

          <Order>11</Order>

          <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateEnabled" /t REG_DWORD /d 0 /f</CommandLine>

          <Description>Disable Hibernation</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>11</Order>

          <Order>12</Order>

          <CommandLine>cmd /C POWERCFG -X -standby-timeout-ac 0</CommandLine>

          <Description>Disable Sleep</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>12</Order>

          <Order>13</Order>

          <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" /v "fAllowUnlistedRemotePrograms" /t REG_DWORD /d 1 /f</CommandLine>

          <Description>Enable RemoteAPP to launch unlisted programs</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>13</Order>

          <Order>14</Order>

          <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "ShowTaskViewButton" /t REG_DWORD /d 0 /f</CommandLine>

          <Description>Remove Task View from the Taskbar</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>14</Order>

          <Order>15</Order>

          <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "TaskbarDa" /t REG_DWORD /d 0 /f</CommandLine>

          <Description>Remove Widgets from the Taskbar</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>15</Order>

          <Order>16</Order>

          <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "TaskbarMn" /t REG_DWORD /d 0 /f</CommandLine>

          <Description>Remove Chat from the Taskbar</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>16</Order>

          <Order>17</Order>

          <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" /v "NoAutoUpdate" /t REG_DWORD /d 1 /f</CommandLine>

          <Description>Turn off Windows Update auto download</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>17</Order>

          <Order>18</Order>

          <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-32752" new enable=Yes</CommandLine>

          <Description>Enable Network Discovery</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>18</Order>

          <Order>19</Order>

          <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-28502" new enable=Yes</CommandLine>

          <Description>Enable File Sharing</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>19</Order>

          <Order>20</Order>

          <CommandLine>reg.exe add "HKCU\Control Panel\UnsupportedHardwareNotificationCache" /v SV1 /d 0 /t REG_DWORD /f</CommandLine>

          <Description>Disable unsupported hardware notifications</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>20</Order>

          <Order>21</Order>

          <CommandLine>reg.exe add "HKCU\Control Panel\UnsupportedHardwareNotificationCache" /v SV2 /d 0 /t REG_DWORD /f</CommandLine>

          <Description>Disable unsupported hardware notifications</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>21</Order>

          <Order>22</Order>

          <CommandLine>cmd /C if exist "C:\OEM\install.bat" start "Install" "cmd /C C:\OEM\install.bat"</CommandLine>

          <Description>Execute custom script from the OEM folder if exists</Description>

        </SynchronousCommand>

assets/win11x64-enterprise.xml

+25 −19
Original line number Diff line number Diff line
@@ -346,101 +346,106 @@ 
        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>2</Order>

          <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" /v "RequireSecuritySignature" /t REG_DWORD /d 0 /f</CommandLine>

          <Description>Disable SMB signing requirement</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>3</Order>

          <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" /v LimitBlankPasswordUse /t REG_DWORD /d 0 /f</CommandLine>

          <Description>Allow RDP login with blank password</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>3</Order>

          <Order>4</Order>

          <CommandLine>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PasswordLess\Device" /v "DevicePasswordLessBuildVersion" /t REG_DWORD /d 0 /f</CommandLine>

          <Description>Enable option for passwordless sign-in</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>4</Order>

          <Order>5</Order>

          <CommandLine>cmd /C wmic useraccount where name="Docker" set PasswordExpires=false</CommandLine>

          <Description>Password Never Expires</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>5</Order>

          <Order>6</Order>

          <CommandLine>cmd /C POWERCFG -H OFF</CommandLine>

          <Description>Disable Hibernation</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>6</Order>

          <Order>7</Order>

          <CommandLine>cmd /C POWERCFG -X -monitor-timeout-ac 0</CommandLine>

          <Description>Disable monitor blanking</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>7</Order>

          <Order>8</Order>

          <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Edge" /v "HideFirstRunExperience" /t REG_DWORD /d 1 /f</CommandLine>

          <Description>Disable first-run experience in Edge</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>8</Order>

          <Order>9</Order>

          <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "HideFileExt" /t REG_DWORD /d 0 /f</CommandLine>

          <Description>Show file extensions in Explorer</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>9</Order>

          <Order>10</Order>

          <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateFileSizePercent" /t REG_DWORD /d 0 /f</CommandLine>

          <Description>Zero Hibernation File</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>10</Order>

          <Order>11</Order>

          <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateEnabled" /t REG_DWORD /d 0 /f</CommandLine>

          <Description>Disable Hibernation</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>11</Order>

          <Order>12</Order>

          <CommandLine>cmd /C POWERCFG -X -standby-timeout-ac 0</CommandLine>

          <Description>Disable Sleep</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>12</Order>

          <Order>13</Order>

          <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" /v "fAllowUnlistedRemotePrograms" /t REG_DWORD /d 1 /f</CommandLine>

          <Description>Enable RemoteAPP to launch unlisted programs</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>13</Order>

          <Order>14</Order>

          <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "ShowTaskViewButton" /t REG_DWORD /d 0 /f</CommandLine>

          <Description>Remove Task View from the Taskbar</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>14</Order>

          <Order>15</Order>

          <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "TaskbarDa" /t REG_DWORD /d 0 /f</CommandLine>

          <Description>Remove Widgets from the Taskbar</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>15</Order>

          <Order>16</Order>

          <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "TaskbarMn" /t REG_DWORD /d 0 /f</CommandLine>

          <Description>Remove Chat from the Taskbar</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>16</Order>

          <Order>17</Order>

          <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" /v "NoAutoUpdate" /t REG_DWORD /d 1 /f</CommandLine>

          <Description>Turn off Windows Update auto download</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>17</Order>

          <Order>18</Order>

          <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-32752" new enable=Yes</CommandLine>

          <Description>Enable Network Discovery</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>18</Order>

          <Order>19</Order>

          <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-28502" new enable=Yes</CommandLine>

          <Description>Enable File Sharing</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>19</Order>

          <Order>20</Order>

          <CommandLine>reg.exe add "HKCU\Control Panel\UnsupportedHardwareNotificationCache" /v SV1 /d 0 /t REG_DWORD /f</CommandLine>

          <Description>Disable unsupported hardware notifications</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>20</Order>

          <Order>21</Order>

          <CommandLine>reg.exe add "HKCU\Control Panel\UnsupportedHardwareNotificationCache" /v SV2 /d 0 /t REG_DWORD /f</CommandLine>

          <Description>Disable unsupported hardware notifications</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>21</Order>

          <Order>22</Order>

          <CommandLine>cmd /C if exist "C:\OEM\install.bat" start "Install" "cmd /C C:\OEM\install.bat"</CommandLine>

          <Description>Execute custom script from the OEM folder if exists</Description>

        </SynchronousCommand>
@@ -448,3 +453,4 @@ 
    </component>

  </settings>

</unattend>

assets/win11x64-iot.xml

+24 −19
Original line number Diff line number Diff line
@@ -352,101 +352,106 @@ 
        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>2</Order>

          <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" /v "RequireSecuritySignature" /t REG_DWORD /d 0 /f</CommandLine>

          <Description>Disable SMB signing requirement</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>3</Order>

          <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" /v LimitBlankPasswordUse /t REG_DWORD /d 0 /f</CommandLine>

          <Description>Allow RDP login with blank password</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>3</Order>

          <Order>4</Order>

          <CommandLine>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PasswordLess\Device" /v "DevicePasswordLessBuildVersion" /t REG_DWORD /d 0 /f</CommandLine>

          <Description>Enable option for passwordless sign-in</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>4</Order>

          <Order>5</Order>

          <CommandLine>cmd /C wmic useraccount where name="Docker" set PasswordExpires=false</CommandLine>

          <Description>Password Never Expires</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>5</Order>

          <Order>6</Order>

          <CommandLine>cmd /C POWERCFG -H OFF</CommandLine>

          <Description>Disable Hibernation</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>6</Order>

          <Order>7</Order>

          <CommandLine>cmd /C POWERCFG -X -monitor-timeout-ac 0</CommandLine>

          <Description>Disable monitor blanking</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>7</Order>

          <Order>8</Order>

          <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Edge" /v "HideFirstRunExperience" /t REG_DWORD /d 1 /f</CommandLine>

          <Description>Disable first-run experience in Edge</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>8</Order>

          <Order>9</Order>

          <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "HideFileExt" /t REG_DWORD /d 0 /f</CommandLine>

          <Description>Show file extensions in Explorer</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>9</Order>

          <Order>10</Order>

          <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateFileSizePercent" /t REG_DWORD /d 0 /f</CommandLine>

          <Description>Zero Hibernation File</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>10</Order>

          <Order>11</Order>

          <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateEnabled" /t REG_DWORD /d 0 /f</CommandLine>

          <Description>Disable Hibernation</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>11</Order>

          <Order>12</Order>

          <CommandLine>cmd /C POWERCFG -X -standby-timeout-ac 0</CommandLine>

          <Description>Disable Sleep</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>12</Order>

          <Order>13</Order>

          <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" /v "fAllowUnlistedRemotePrograms" /t REG_DWORD /d 1 /f</CommandLine>

          <Description>Enable RemoteAPP to launch unlisted programs</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>13</Order>

          <Order>14</Order>

          <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "ShowTaskViewButton" /t REG_DWORD /d 0 /f</CommandLine>

          <Description>Remove Task View from the Taskbar</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>14</Order>

          <Order>15</Order>

          <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "TaskbarDa" /t REG_DWORD /d 0 /f</CommandLine>

          <Description>Remove Widgets from the Taskbar</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>15</Order>

          <Order>16</Order>

          <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "TaskbarMn" /t REG_DWORD /d 0 /f</CommandLine>

          <Description>Remove Chat from the Taskbar</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>16</Order>

          <Order>17</Order>

          <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" /v "NoAutoUpdate" /t REG_DWORD /d 1 /f</CommandLine>

          <Description>Turn off Windows Update auto download</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>17</Order>

          <Order>18</Order>

          <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-32752" new enable=Yes</CommandLine>

          <Description>Enable Network Discovery</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>18</Order>

          <Order>19</Order>

          <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-28502" new enable=Yes</CommandLine>

          <Description>Enable File Sharing</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>19</Order>

          <Order>20</Order>

          <CommandLine>reg.exe add "HKCU\Control Panel\UnsupportedHardwareNotificationCache" /v SV1 /d 0 /t REG_DWORD /f</CommandLine>

          <Description>Disable unsupported hardware notifications</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>20</Order>

          <Order>21</Order>

          <CommandLine>reg.exe add "HKCU\Control Panel\UnsupportedHardwareNotificationCache" /v SV2 /d 0 /t REG_DWORD /f</CommandLine>

          <Description>Disable unsupported hardware notifications</Description>

        </SynchronousCommand>

        <SynchronousCommand wcm:action="add">

          <Order>21</Order>

          <Order>22</Order>

          <CommandLine>cmd /C if exist "C:\OEM\install.bat" start "Install" "cmd /C C:\OEM\install.bat"</CommandLine>

          <Description>Execute custom script from the OEM folder if exists</Description>

        </SynchronousCommand>

assets/win11x64-ltsc.xml

+24 −19

File changed.

Preview size limit exceeded, changes collapsed.

assets/win11x64.xml

+24 −19

File changed.

Preview size limit exceeded, changes collapsed.