[1903, au] Windows 10 Golden Image Tidying/Decrapifyer - When and How?

[JRA]

Hi all - trying to race W10 through before the deadline. Honestly the nightmares with this are starting even before it's starting!

 

Used Nlite to knock up a stripped down W10 iso, which is just so riddled with problems I've abandoned it. Next of all, needed a new FOG server to cope with W10 and a failed migration and wasted fortnight on both has robbed me hugely of time I'm not getting back :/

 

Desperate to get things underway now, looking at the swiftest way to build a golden image, free of as much junk and xbox related special offers etc.

 

Pleading now. :/

 

Does ANYONE have either a walkthrough on when and how to run the decrapifyer or a simple guide on stripping the garbage out of W10 so I can control the rest with GP? I've tried half-heartedly with the decrapifyer, but don't know how to run it.

 

Anybody feeling really patient?

 

Thanks everyone for reading.

[BOOT]

I'm just using a vanilla install via WDS. Simple unattend.xml, join to the domain etc.

The only thing I do after install, is run a single powershell script to unprovision (not remove) a few apps.

All other settings\customisation is done via GPO.

Seems to keep the need for troubleshooting to a minimum.

[Jcx500]

Also WDS Here with an unattended.xml

[JRA]

I'm just using a vanilla install via WDS. Simple unattend.xml, join to the domain etc.

The only thing I do after install, is run a single powershell script to unprovision (not remove) a few apps.

All other settings\customisation is done via GPO.

Seems to keep the need for troubleshooting to a minimum.

 

...Any chance you could send the admx-es/script? Will buy you a beer or two if you send PayPal too!

 

Thank you both!

 

- - - Updated - - -

 

I'm just using a vanilla install via WDS. Simple unattend.xml, join to the domain etc.

The only thing I do after install, is run a single powershell script to unprovision (not remove) a few apps.

All other settings\customisation is done via GPO.

Seems to keep the need for troubleshooting to a minimum.

 

...Any chance you could send the admx-es/script? Will buy you a beer or two if you send PayPal too!

 

Thank you both!

[Zoom7000]

Running the Windows 10 Decrapifier is relatively easy. Lucky for you, I literally ran it on an updated image a few minutes ago.

 

Make sure your newly installed Windows 10 (1903) build is running in Audit Mode. You can get to Audit Mode by pressing Ctrl+Shift+F3

 

1. Create a folder called Scripts on your C:\ drive.

2. Download this txt file here: Win10Decrap.txt and save it in C:\Scripts

3. Change the 3 letter extension from .txt to .ps1

4. Hit "Win+X" and select Windows Powershell (Admin)

5. Type the following and press Enter:

set-executionpolicy unrestricted

6. Push "A" when it prompts you and press Enter.

7. Type the following and press Enter:

cd C:\Scripts

8. Type the following and press Enter:

Win10Decrap.ps1

9. When the script has completed, type the following and press Enter:

set-executionpolicy restricted

10. Push "A" when it prompts you and press Enter.

11. Reboot the PC.

 

This should do a basic "decrapifier" of Windows 10. If you a more thorough decrap, you can choose from some of these switches, but if you are unsure of them, then best to leave alone:

-allapps: Removes ALL apps including the store. Make sure this is what you want before you do it. It can be tough to get the store back.

-leavetasks: Leaves scheduled tasks alone.

-leaveservices: Leaves services alone.

-appaccess: Leaves privacy/access options alone - depending on your usage, some issues can be prevented by leaving them with default (unrestricted) permissions. They are set to restricted by default in this script.

-clearstart: Empties the start menu completely leaving you with just the apps list.

-onedrive: Leaves all OneDrive content fully functional.

-tablet: Use this for tablets or 2-in-1s to leave location and sensors enabled.

-cortana: Leave Cortana and web enabled search on.

-xbox: Leave xbox apps and related items.

-nolog: Prevents transcript from being created at SYSTEMDRIVE\WindowsDCtranscript.txt.

-appsonly: Only removes apps, doesn't touch privacy settings, services, and scheduled tasks. Cannot be used with -settingsonly switch. Can be used with all the others.

-settingsonly: Only adjusts privacy settings, services, and scheduled tasks. Leaves apps. Cannot be used with -appsonly switch. Can be used with all others (-allapps won't do anything in that case).

 

Hope that helps!

[altecsole]

We do a standard installation of Windows using SCCM, including Office 365 ProPlus and a couple of other things. Everything else is controlled, or restricted, using Group Policies and Preferences.

[JRA]

Okay I must be failing horribly here, but I can't get into audit mode. I'm not seeing the following screen at any point in the setup, which I think is when I'm supposed to press ctrl shift f3

 

Installing from an iso/rufus fwiw. SW_DVD9_Win_Pro_10_1903_64BIT_English_Pro_Ent_EDU_N_MLF_X22-02890

Urgh?

 

Thanks all.

Edited October 9, 2019 by JRA

[Jawloms]

Desperate to get things underway now, looking at the swiftest way to build a golden image, free of as much junk and xbox related special offers etc.

 

We just use LTSC, and then a registry key to turn Photo Viewer back on.

[AJWhite1970]

I have a batch file that runs post a vanilla install or upgrade of 1903 which includes calling the decrapifier script

@echo on @echo Updating System Folder

rmdir /S /Q c:\build\1709

rmdir /S /Q c:\build\1803

rmdir /S /Q c:\build\1809

robocopy \\quartz\cdcopies\_Drivers\_1903_Update\System\Fastcopy c:\system\fastcopy

robocopy \\ds2\pdq$\UWT\4.6 c:\system\UWT4

robocopy /IS /TEE /NP \\quartz\cdcopies\_Drivers\_1903_Update\System\ c:\system\ bginfo.exe

robocopy /IS /TEE /NP \\quartz\cdcopies\_Drivers\_1903_Update\Build\ c:\build\ Build_GB.txt

robocopy /IS /TEE /NP \\quartz\cdcopies\_Drivers\_1903_Update\Clean_up\ c:\build\Clean_up\

call c:\system\Bginfo.exe c:\system\Bishops7.bgi /SILENT /NOLICPROMPT /TIMER:0 @echo Updating Registry Keys

regedit /s c:\build\1903\disable_edge_shortcut.reg

regedit /s c:\build\1903\disable_login_screen.reg

regedit /s c:\build\1903\Ipevo_allow.reg.reg @echo Run Workstation Cleanup script

call c:\build\clean_up\cleanup.bat @echo Update Start Menu

"\\ds2\pdq$\IvoSoft\Open Shell\OpenShellSetup_4_4_138.exe" /qn ADDLOCAL=StartMenu @echo Install post 1903 Service Packs

wusa.exe /i c:\build\1903\Win10-1903-SSU-x64-kb4520390.msu /quiet /norestart

wusa.exe /i c:\build\1903\Win10-1903-20190926-x64-kb4517211.msu /quiet /norestart

shutdown /r /t 0

 

Cleanup.bat contains the following line:-

powershell.exe -Noninteractive -ExecutionPolicy Bypass -file " C:\build\Clean_up\cleanup.ps1 "

 

HTH, not the prettiest solution but works for me

Andrew

[garethEds]

Hi all - trying to race W10 through before the deadline. Honestly the nightmares with this are starting even before it's starting!

 

Used Nlite to knock up a stripped down W10 iso, which is just so riddled with problems I've abandoned it. Next of all, needed a new FOG server to cope with W10 and a failed migration and wasted fortnight on both has robbed me hugely of time I'm not getting back :/

 

Desperate to get things underway now, looking at the swiftest way to build a golden image, free of as much junk and xbox related special offers etc.

 

Pleading now. :/

 

Does ANYONE have either a walkthrough on when and how to run the decrapifyer or a simple guide on stripping the garbage out of W10 so I can control the rest with GP? I've tried half-heartedly with the decrapifyer, but don't know how to run it.

 

Anybody feeling really patient?

 

Thanks everyone for reading.

 

Hi @JRA

 

Take a look at OSDBuilder from David Segura - we use it to customize our WIM. We do not install any apps into the image - instead we use a mixture of PDQDeploy and GPOs.

 

WimWitch is also a good GUI for OSDBuilder too.

 

Regards

 

Gareth

[Arthur]

Take a look at OSDBuilder from David Segura - we use it to customize our WIM. We do not install any apps into the image

 

WimWitch is also a good GUI for OSDBuilder too.

+1. I would also recommend the same.

 

OSDBuilder can do a lot more than WimWitch, but if all you want to do is remove apps, integrate the latest updates and is easy to use go with the latter.

 

Personally I wouldn't recommend booting into Audit Mode as you'll probably end up with Store apps updating in the background and preventing SysPrep from working or Edge breaking.

Edited October 9, 2019 by Arthur