Upload folder using huggingface_hub

.dockerignore

@@ -0,0 +1,13 @@
+.dockerignore
+.git
+.github
+.gitignore
+.gitlab-ci.yml
+.gitmodules
+Dockerfile
+Dockerfile.archive
+compose.yml
+compose.yaml
+docker-compose.yml
+docker-compose.yaml
+*.md

.github/ISSUE_TEMPLATE/1-issue.yml

@@ -0,0 +1,39 @@
+name: "\U0001F6A8 Technical issue"
+description: When you're experiencing problems using the container
+body:
+ - type: input
+ id: os
+ attributes:
+ label: Operating system
+ description: Your Linux distribution (can be shown by `lsb_release -a`).
+ placeholder: e.g. Ubuntu 24.04
+ validations:
+ required: true
+ - type: textarea
+ id: summary
+ attributes:
+ label: Description
+ description: A clear and concise description of your issue.
+ validations:
+ required: true
+ - type: textarea
+ id: compose
+ attributes:
+ label: Docker compose
+ description: The compose file (or otherwise the `docker run` command used).
+ validations:
+ required: true
+ - type: textarea
+ id: log
+ attributes:
+ label: Docker log
+ description: The logfile of the container (as shown by `docker logs windows`).
+ validations:
+ required: true
+ - type: textarea
+ id: screenshot
+ attributes:
+ label: Screenshots (optional)
+ description: Screenshots that might help to make the problem more clear.
+ validations:
+ required: false

.github/ISSUE_TEMPLATE/2-feature.yml

@@ -0,0 +1,37 @@
+name: "\U0001F680 Feature request"
+description: Suggest an idea for improving the container
+title: "[Feature]: "
+labels: ["enhancement"]
+body:
+ - type: textarea
+ id: problem
+ attributes:
+ label: Is your proposal related to a problem?
+ description: |
+ Provide a clear and concise description of what the problem is.
+ For example, "I'm always frustrated when..."
+ validations:
+ required: true
+ - type: textarea
+ id: solution
+ attributes:
+ label: Describe the solution you'd like.
+ description: |
+ Provide a clear and concise description of what you want to happen.
+ validations:
+ required: true
+ - type: textarea
+ id: alternatives
+ attributes:
+ label: Describe alternatives you've considered.
+ description: |
+ Let us know about other solutions you've tried or researched.
+ validations:
+ required: true
+ - type: textarea
+ id: context
+ attributes:
+ label: Additional context
+ description: |
+ Is there anything else you can add about the proposal?
+ You might want to link to related issues here, if you haven't already.

.github/ISSUE_TEMPLATE/3-bug.yml

@@ -0,0 +1,41 @@
+name: "\U0001F41E Bug report"
+description: Create a report to help us improve the container
+title: "[Bug]: "
+labels: ["bug"]
+body:
+ - type: input
+ id: os
+ attributes:
+ label: Operating system
+ description: Your Linux distribution (can be shown by `lsb_release -a`).
+ placeholder: e.g. Ubuntu 24.04
+ validations:
+ required: true
+ - type: textarea
+ id: summary
+ attributes:
+ label: Description
+ description: Describe the expected behaviour, the actual behaviour, and the steps to reproduce.
+ validations:
+ required: true
+ - type: textarea
+ id: compose
+ attributes:
+ label: Docker compose
+ description: The compose file (or otherwise the `docker run` command used).
+ validations:
+ required: true
+ - type: textarea
+ id: log
+ attributes:
+ label: Docker log
+ description: The logfile of the container (as shown by `docker logs windows`).
+ validations:
+ required: true
+ - type: textarea
+ id: screenshot
+ attributes:
+ label: Screenshots (optional)
+ description: Screenshots that might help to make the problem more clear.
+ validations:
+ required: false

.github/ISSUE_TEMPLATE/4-question.yml

@@ -0,0 +1,26 @@
+name: "\U00002753 General question"
+description: Questions about the container not related to an issue
+title: "[Question]: "
+labels: ["question"]
+body:
+ - type: checkboxes
+ attributes:
+ label: Is your question not already answered in the FAQ?
+ description: Please read the [FAQ](https://github.com/dockur/windows/blob/master/readme.md) carefully to avoid asking duplicate questions.
+ options:
+ - label: I made sure the question is not listed in the [FAQ](https://github.com/dockur/windows/blob/master/readme.md).
+ required: true
+ - type: checkboxes
+ attributes:
+ label: Is this a general question and not a technical issue?
+ description: For questions related to issues you must use the [technical issue](https://github.com/dockur/windows/issues/new?assignees=&labels=&projects=&template=1-issue.yml) form instead. It contains all the right fields (system info, logfiles, etc.) we need in order to be able to help you.
+ options:
+ - label: I am sure my question is not about a technical issue.
+ required: true
+ - type: textarea
+ id: question
+ attributes:
+ label: Question
+ description: What's the question you have about the container?
+ validations:
+ required: true

.github/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1 @@
+blank_issues_enabled: false

.github/dependabot.yml

@@ -0,0 +1,10 @@
+version: 2
+updates:
+ - package-ecosystem: docker
+ directory: /
+ schedule:
+ interval: weekly
+ - package-ecosystem: github-actions
+ directory: /
+ schedule:
+ interval: weekly

.github/renovate.json

@@ -0,0 +1,4 @@
+{
+ "$schema": "https://docs.renovatebot.com/renovate-schema.json",
+ "extends": ["config:recommended", ":disableDependencyDashboard"]
+}

.github/workflows/build.yml

@@ -0,0 +1,113 @@
+name: Build
+
+on:
+ workflow_dispatch:
+ push:
+ branches:
+ - master
+ paths-ignore:
+ - '**/*.md'
+ - '**/*.yml'
+ - '.gitignore'
+ - '.dockerignore'
+ - '.github/**'
+ - '.github/workflows/**'
+
+concurrency:
+ group: build
+ cancel-in-progress: false
+
+jobs:
+ shellcheck:
+ name: Test
+ uses: ./.github/workflows/check.yml
+ build:
+ name: Build
+ needs: shellcheck
+ runs-on: ubuntu-latest
+ permissions:
+ actions: write
+ packages: write
+ contents: read
+ steps:
+ -
+ name: Checkout
+ uses: actions/checkout@v4
+ with:
+ fetch-depth: 0
+ -
+ name: Docker metadata
+ id: meta
+ uses: docker/metadata-action@v5
+ with:
+ context: git
+ images: |
+ ${{ secrets.DOCKERHUB_REPO }}
+ ghcr.io/${{ github.repository }}
+ tags: |
+ type=raw,value=latest,priority=100
+ type=raw,value=${{ vars.MAJOR }}.${{ vars.MINOR }}
+ labels: |
+ org.opencontainers.image.title=${{ vars.NAME }}
+ env:
+ DOCKER_METADATA_ANNOTATIONS_LEVELS: manifest,index 
+ - 
+ name: Set up Docker Buildx
+ uses: docker/setup-buildx-action@v3
+ -
+ name: Login into Docker Hub
+ uses: docker/login-action@v3
+ with:
+ username: ${{ secrets.DOCKERHUB_USERNAME }}
+ password: ${{ secrets.DOCKERHUB_TOKEN }}
+ -
+ name: Login to GitHub Container Registry
+ uses: docker/login-action@v3
+ with:
+ registry: ghcr.io
+ username: ${{ github.actor }}
+ password: ${{ secrets.GITHUB_TOKEN }}
+ -
+ name: Build Docker image
+ uses: docker/build-push-action@v6
+ with:
+ context: .
+ push: true
+ provenance: false
+ platforms: linux/amd64,linux/arm64
+ tags: ${{ steps.meta.outputs.tags }}
+ labels: ${{ steps.meta.outputs.labels }}
+ annotations: ${{ steps.meta.outputs.annotations }}
+ build-args: |
+ VERSION_ARG=${{ steps.meta.outputs.version }}
+ -
+ name: Create a release
+ uses: action-pack/github-release@v2
+ with:
+ tag: "v${{ steps.meta.outputs.version }}"
+ title: "v${{ steps.meta.outputs.version }}"
+ token: ${{ secrets.REPO_ACCESS_TOKEN }}
+ -
+ name: Increment version variable
+ uses: action-pack/bump@v2
+ with:
+ token: ${{ secrets.REPO_ACCESS_TOKEN }}
+ -
+ name: Push to Gitlab mirror
+ uses: action-pack/gitlab-sync@v3
+ with:
+ url: ${{ secrets.GITLAB_URL }}
+ token: ${{ secrets.GITLAB_TOKEN }}
+ username: ${{ secrets.GITLAB_USERNAME }}
+ -
+ name: Send mail
+ uses: action-pack/send-mail@v1
+ with:
+ to: ${{secrets.MAILTO}}
+ from: Github Actions <${{secrets.MAILTO}}>
+ connection_url: ${{secrets.MAIL_CONNECTION}}
+ subject: Build of ${{ github.event.repository.name }} v${{ steps.meta.outputs.version }} completed
+ body: |
+ The build job of ${{ github.event.repository.name }} v${{ steps.meta.outputs.version }} was completed successfully! 
+ 
+ See https://github.com/${{ github.repository }}/actions for more information.

.github/workflows/check.yml

@@ -0,0 +1,25 @@
+on: [workflow_call]
+name: "Check"
+permissions: {}
+
+jobs:
+ shellcheck:
+ name: shellcheck
+ runs-on: ubuntu-latest
+ steps:
+ - uses: actions/checkout@v4
+ - name: Run ShellCheck
+ uses: ludeeus/action-shellcheck@master
+ env:
+ SHELLCHECK_OPTS: -x --source-path=src -e SC1091 -e SC2001 -e SC2002 -e SC2034 -e SC2064 -e SC2153 -e SC2317 -e SC2028
+ - name: Validate XML
+ uses: action-pack/valid-xml@v1
+ with:
+ path: "assets"
+ file-endings: ".xml"
+ - name: Lint Dockerfile
+ uses: hadolint/[email protected]
+ with:
+ dockerfile: Dockerfile
+ ignore: DL3008
+ failure-threshold: warning

.github/workflows/hub.yml

@@ -0,0 +1,24 @@
+name: Update
+on:
+ push:
+ branches:
+ - master
+ paths:
+ - readme.md
+ - README.md
+ - .github/workflows/hub.yml
+
+jobs:
+ dockerHubDescription:
+ runs-on: ubuntu-latest
+ steps:
+ - uses: actions/checkout@v4
+ - 
+ name: Docker Hub Description
+ uses: peter-evans/dockerhub-description@v4
+ with:
+ username: ${{ secrets.DOCKERHUB_USERNAME }}
+ password: ${{ secrets.DOCKERHUB_TOKEN }}
+ repository: ${{ secrets.DOCKERHUB_REPO }}
+ short-description: ${{ github.event.repository.description }}
+ readme-filepath: ./readme.md

.github/workflows/test.yml

@@ -0,0 +1,17 @@
+on:
+ workflow_dispatch:
+ pull_request:
+ paths:
+ - '**/*.sh'
+ - '**/*.xml'
+ - '.github/workflows/test.yml'
+ - '.github/workflows/check.yml'
+ - 'Dockerfile'
+
+name: "Test"
+permissions: {}
+
+jobs:
+ shellcheck:
+ name: Test
+ uses: ./.github/workflows/check.yml

.gitignore

@@ -0,0 +1 @@
+

Dockerfile

@@ -0,0 +1,41 @@
+FROM scratch
+COPY --from=qemux/qemu-docker:6.04 / /
+
+ARG VERSION_ARG="0.0"
+ARG DEBCONF_NOWARNINGS="yes"
+ARG DEBIAN_FRONTEND="noninteractive"
+ARG DEBCONF_NONINTERACTIVE_SEEN="true"
+
+RUN set -eu && \
+ apt-get update && \
+ apt-get --no-install-recommends -y install \
+ bc \
+ curl \
+ 7zip \
+ wsdd \
+ samba \
+ xz-utils \
+ wimtools \
+ dos2unix \
+ cabextract \
+ genisoimage \
+ libxml2-utils && \
+ apt-get clean && \
+ echo "$VERSION_ARG" > /run/version && \
+ rm -rf /var/lib/apt/lists/* /tmp/* /var/tmp/*
+
+COPY --chmod=755 ./src /run/
+COPY --chmod=755 ./assets /run/assets
+
+ADD --chmod=755 https://raw.githubusercontent.com/christgau/wsdd/v0.8/src/wsdd.py /usr/sbin/wsdd
+ADD --chmod=664 https://github.com/qemus/virtiso-whql/releases/download/v1.9.43-0/virtio-win-1.9.43.tar.xz /drivers.txz
+
+EXPOSE 8006 3389
+VOLUME /storage
+
+ENV RAM_SIZE="4G"
+ENV CPU_CORES="2"
+ENV DISK_SIZE="64G"
+ENV VERSION="win11"
+
+ENTRYPOINT ["/usr/bin/tini", "-s", "/run/entry.sh"]

assets/win10x64-enterprise-eval.xml

@@ -0,0 +1,424 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<unattend xmlns="urn:schemas-microsoft-com:unattend" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State">
+ <settings pass="windowsPE">
+ <component name="Microsoft-Windows-International-Core-WinPE" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SetupUILanguage>
+ <UILanguage>en-US</UILanguage>
+ </SetupUILanguage>
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DiskConfiguration>
+ <Disk wcm:action="add">
+ <DiskID>0</DiskID>
+ <WillWipeDisk>true</WillWipeDisk>
+ <CreatePartitions>
+ <!-- System partition (ESP) -->
+ <CreatePartition wcm:action="add">
+ <Order>1</Order>
+ <Type>EFI</Type>
+ <Size>128</Size>
+ </CreatePartition>
+ <!-- Microsoft reserved partition (MSR) -->
+ <CreatePartition wcm:action="add">
+ <Order>2</Order>
+ <Type>MSR</Type>
+ <Size>128</Size>
+ </CreatePartition>
+ <!-- Windows partition -->
+ <CreatePartition wcm:action="add">
+ <Order>3</Order>
+ <Type>Primary</Type>
+ <Extend>true</Extend>
+ </CreatePartition>
+ </CreatePartitions>
+ <ModifyPartitions>
+ <!-- System partition (ESP) -->
+ <ModifyPartition wcm:action="add">
+ <Order>1</Order>
+ <PartitionID>1</PartitionID>
+ <Label>System</Label>
+ <Format>FAT32</Format>
+ </ModifyPartition>
+ <!-- MSR partition does not need to be modified -->
+ <ModifyPartition wcm:action="add">
+ <Order>2</Order>
+ <PartitionID>2</PartitionID>
+ </ModifyPartition>
+ <!-- Windows partition -->
+ <ModifyPartition wcm:action="add">
+ <Order>3</Order>
+ <PartitionID>3</PartitionID>
+ <Label>Windows</Label>
+ <Letter>C</Letter>
+ <Format>NTFS</Format>
+ </ModifyPartition>
+ </ModifyPartitions>
+ </Disk>
+ </DiskConfiguration>
+ <ImageInstall>
+ <OSImage>
+ <InstallTo>
+ <DiskID>0</DiskID>
+ <PartitionID>3</PartitionID>
+ </InstallTo>
+ <InstallToAvailablePartition>false</InstallToAvailablePartition>
+ </OSImage>
+ </ImageInstall>
+ <DynamicUpdate>
+ <Enable>true</Enable>
+ <WillShowUI>Never</WillShowUI>
+ </DynamicUpdate>
+ <UpgradeData>
+ <Upgrade>false</Upgrade>
+ <WillShowUI>Never</WillShowUI>
+ </UpgradeData>
+ <UserData>
+ <AcceptEula>true</AcceptEula>
+ <FullName>Docker</FullName>
+ <Organization>Windows for Docker</Organization>
+ </UserData>
+ <EnableFirewall>false</EnableFirewall>
+ <Diagnostics>
+ <OptIn>false</OptIn>
+ </Diagnostics>
+ </component>
+ </settings>
+ <settings pass="offlineServicing">
+ <component name="Microsoft-Windows-LUA-Settings" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <EnableLUA>false</EnableLUA>
+ </component>
+ </settings>
+ <settings pass="generalize">
+ <component name="Microsoft-Windows-PnPSysprep" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <PersistAllDeviceInstalls>true</PersistAllDeviceInstalls>
+ </component>
+ <component name="Microsoft-Windows-Security-SPP" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipRearm>1</SkipRearm>
+ </component>
+ </settings>
+ <settings pass="specialize">
+ <component name="Microsoft-Windows-Security-SPP-UX" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipAutoActivation>true</SkipAutoActivation>
+ </component>
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <ComputerName>*</ComputerName>
+ <OEMInformation>
+ <Manufacturer>Dockur</Manufacturer>
+ <Model>Windows for Docker</Model>
+ <SupportHours>24/7</SupportHours>
+ <SupportPhone />
+ <SupportProvider>Dockur</SupportProvider>
+ <SupportURL>https://github.com/dockur/windows/issues</SupportURL>
+ </OEMInformation>
+ <OEMName>Windows for Docker</OEMName>
+ </component>
+ <component name="Microsoft-Windows-ErrorReportingCore" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableWER>1</DisableWER>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableAccelerators>true</DisableAccelerators>
+ <DisableFirstRunWizard>true</DisableFirstRunWizard>
+ <Home_Page>https://google.com</Home_Page>
+ <Help_Page>about:blank</Help_Page>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="wow64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableAccelerators>true</DisableAccelerators>
+ <DisableFirstRunWizard>true</DisableFirstRunWizard>
+ <Home_Page>https://google.com</Home_Page>
+ <Help_Page>about:blank</Help_Page>
+ </component>
+ <component name="Microsoft-Windows-SQMApi" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <CEIPEnabled>0</CEIPEnabled>
+ </component>
+ <component name="Microsoft-Windows-SystemRestore-Main" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableSR>1</DisableSR>
+ </component>
+ <component name="Microsoft-Windows-International-Core" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-Deployment" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <RunSynchronous>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>1</Order>
+ <Path>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OOBE" /v BypassNRO /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>2</Order>
+ <Path>reg.exe load "HKU\mount" "C:\Users\Default\NTUSER.DAT"</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>3</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "ContentDeliveryAllowed" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>4</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "FeatureManagementEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>5</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "OEMPreInstalledAppsEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>6</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "PreInstalledAppsEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>7</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "PreInstalledAppsEverEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>8</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SilentInstalledAppsEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>9</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SoftLandingEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>10</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContentEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>11</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-310093Enabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>12</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-338387Enabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>13</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-338388Enabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>14</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-338389Enabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>15</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-338393Enabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>16</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-353698Enabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>17</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SystemPaneSuggestionsEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>18</Order>
+ <Path>reg.exe add "HKU\mount\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableCloudOptimizedContent" /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>19</Order>
+ <Path>reg.exe add "HKU\mount\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableWindowsConsumerFeatures" /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>20</Order>
+ <Path>reg.exe add "HKU\mount\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableConsumerAccountStateContent" /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>21</Order>
+ <Path>reg.exe unload "HKU\mount"</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>22</Order>
+ <Path>reg.exe add "HKLM\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableCloudOptimizedContent" /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>23</Order>
+ <Path>reg.exe add "HKLM\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableWindowsConsumerFeatures" /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>24</Order>
+ <Path>reg.exe add "HKLM\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableConsumerAccountStateContent" /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>25</Order>
+ <Path>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\CurrentVersion\NetworkList\Signatures\FirstNetwork" /v Category /t REG_DWORD /d 1 /f</Path>
+ <Description>Set Network Location to Home</Description>
+ </RunSynchronousCommand>
+ </RunSynchronous>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-LocalSessionManager" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <fDenyTSConnections>false</fDenyTSConnections>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-RDP-WinStationExtensions" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAuthentication>0</UserAuthentication>
+ </component>
+ <component name="Networking-MPSSVC-Svc" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <FirewallGroups>
+ <FirewallGroup wcm:action="add" wcm:keyValue="RemoteDesktop">
+ <Active>true</Active>
+ <Profile>all</Profile>
+ <Group>@FirewallAPI.dll,-28752</Group>
+ </FirewallGroup>
+ </FirewallGroups>
+ </component>
+ </settings>
+ <settings pass="auditSystem" />
+ <settings pass="auditUser" />
+ <settings pass="oobeSystem">
+ <component name="Microsoft-Windows-SecureStartup-FilterDriver" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <PreventDeviceEncryption>true</PreventDeviceEncryption>
+ </component>
+ <component name="Microsoft-Windows-EnhancedStorage-Adm" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <TCGSecurityActivationDisabled>1</TCGSecurityActivationDisabled>
+ </component>
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAccounts>
+ <LocalAccounts>
+ <LocalAccount wcm:action="add">
+ <Name>Docker</Name>
+ <Group>Administrators</Group>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </LocalAccount>
+ </LocalAccounts>
+ <AdministratorPassword>
+ <Value>password</Value>
+ <PlainText>true</PlainText>
+ </AdministratorPassword>
+ </UserAccounts>
+ <AutoLogon>
+ <Username>Docker</Username>
+ <Enabled>true</Enabled>
+ <LogonCount>65432</LogonCount>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </AutoLogon>
+ <Display>
+ <ColorDepth>32</ColorDepth>
+ <HorizontalResolution>1920</HorizontalResolution>
+ <VerticalResolution>1080</VerticalResolution>
+ </Display>
+ <OOBE>
+ <HideEULAPage>true</HideEULAPage>
+ <HideLocalAccountScreen>true</HideLocalAccountScreen>
+ <HideOEMRegistrationScreen>true</HideOEMRegistrationScreen>
+ <HideOnlineAccountScreens>true</HideOnlineAccountScreens>
+ <HideWirelessSetupInOOBE>true</HideWirelessSetupInOOBE>
+ <NetworkLocation>Home</NetworkLocation>
+ <ProtectYourPC>3</ProtectYourPC>
+ <SkipUserOOBE>true</SkipUserOOBE>
+ <SkipMachineOOBE>true</SkipMachineOOBE>
+ </OOBE>
+ <RegisteredOrganization>Dockur</RegisteredOrganization>
+ <RegisteredOwner>Windows for Docker</RegisteredOwner>
+ <FirstLogonCommands>
+ <SynchronousCommand wcm:action="add">
+ <Order>1</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" /v "AllowInsecureGuestAuth" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Allow guest access to network shares</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>2</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" /v LimitBlankPasswordUse /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Allow RDP login with blank password</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>3</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PasswordLess\Device" /v "DevicePasswordLessBuildVersion" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Enable option for passwordless sign-in</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>4</Order>
+ <CommandLine>cmd /C wmic useraccount where name="Docker" set PasswordExpires=false</CommandLine>
+ <Description>Password Never Expires</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>5</Order>
+ <CommandLine>cmd /C POWERCFG -H OFF</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>6</Order>
+ <CommandLine>cmd /C POWERCFG -X -monitor-timeout-ac 0</CommandLine>
+ <Description>Disable monitor blanking</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>7</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Edge" /v "HideFirstRunExperience" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Disable first-run experience in Edge</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>8</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "HideFileExt" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Show file extensions in Explorer</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>9</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateFileSizePercent" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Zero Hibernation File</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>10</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateEnabled" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>11</Order>
+ <CommandLine>cmd /C POWERCFG -X -standby-timeout-ac 0</CommandLine>
+ <Description>Disable Sleep</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>12</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" /v "fAllowUnlistedRemotePrograms" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Enable RemoteAPP to launch unlisted programs</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>13</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Search" /v "SearchboxTaskbarMode" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Search from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>14</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "ShowTaskViewButton" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Task View from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>15</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "TaskbarDa" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Widgets from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>16</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "TaskbarMn" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Chat from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>17</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" /v "NoAutoUpdate" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Turn off Windows Update auto download</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>18</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-32752" new enable=Yes</CommandLine>
+ <Description>Enable Network Discovery</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>19</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-28502" new enable=Yes</CommandLine>
+ <Description>Enable File Sharing</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>20</Order>
+ <CommandLine>cmd /C if exist "C:\OEM\install.bat" start "Install" "cmd /C C:\OEM\install.bat"</CommandLine>
+ <Description>Execute custom script from the OEM folder if exists</Description>
+ </SynchronousCommand>
+ </FirstLogonCommands>
+ </component>
+ </settings>
+</unattend>

assets/win10x64-enterprise.xml

@@ -0,0 +1,427 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<unattend xmlns="urn:schemas-microsoft-com:unattend" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State">
+ <settings pass="windowsPE">
+ <component name="Microsoft-Windows-International-Core-WinPE" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SetupUILanguage>
+ <UILanguage>en-US</UILanguage>
+ </SetupUILanguage>
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DiskConfiguration>
+ <Disk wcm:action="add">
+ <DiskID>0</DiskID>
+ <WillWipeDisk>true</WillWipeDisk>
+ <CreatePartitions>
+ <!-- System partition (ESP) -->
+ <CreatePartition wcm:action="add">
+ <Order>1</Order>
+ <Type>EFI</Type>
+ <Size>128</Size>
+ </CreatePartition>
+ <!-- Microsoft reserved partition (MSR) -->
+ <CreatePartition wcm:action="add">
+ <Order>2</Order>
+ <Type>MSR</Type>
+ <Size>128</Size>
+ </CreatePartition>
+ <!-- Windows partition -->
+ <CreatePartition wcm:action="add">
+ <Order>3</Order>
+ <Type>Primary</Type>
+ <Extend>true</Extend>
+ </CreatePartition>
+ </CreatePartitions>
+ <ModifyPartitions>
+ <!-- System partition (ESP) -->
+ <ModifyPartition wcm:action="add">
+ <Order>1</Order>
+ <PartitionID>1</PartitionID>
+ <Label>System</Label>
+ <Format>FAT32</Format>
+ </ModifyPartition>
+ <!-- MSR partition does not need to be modified -->
+ <ModifyPartition wcm:action="add">
+ <Order>2</Order>
+ <PartitionID>2</PartitionID>
+ </ModifyPartition>
+ <!-- Windows partition -->
+ <ModifyPartition wcm:action="add">
+ <Order>3</Order>
+ <PartitionID>3</PartitionID>
+ <Label>Windows</Label>
+ <Letter>C</Letter>
+ <Format>NTFS</Format>
+ </ModifyPartition>
+ </ModifyPartitions>
+ </Disk>
+ </DiskConfiguration>
+ <ImageInstall>
+ <OSImage>
+ <InstallTo>
+ <DiskID>0</DiskID>
+ <PartitionID>3</PartitionID>
+ </InstallTo>
+ <InstallToAvailablePartition>false</InstallToAvailablePartition>
+ </OSImage>
+ </ImageInstall>
+ <DynamicUpdate>
+ <Enable>true</Enable>
+ <WillShowUI>Never</WillShowUI>
+ </DynamicUpdate>
+ <UpgradeData>
+ <Upgrade>false</Upgrade>
+ <WillShowUI>Never</WillShowUI>
+ </UpgradeData>
+ <UserData>
+ <AcceptEula>true</AcceptEula>
+ <FullName>Docker</FullName>
+ <Organization>Windows for Docker</Organization>
+ <ProductKey>
+ <Key>NPPR9-FWDCX-D2C8J-H872K-2YT43</Key>
+ </ProductKey>
+ </UserData>
+ <EnableFirewall>false</EnableFirewall>
+ <Diagnostics>
+ <OptIn>false</OptIn>
+ </Diagnostics>
+ </component>
+ </settings>
+ <settings pass="offlineServicing">
+ <component name="Microsoft-Windows-LUA-Settings" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <EnableLUA>false</EnableLUA>
+ </component>
+ </settings>
+ <settings pass="generalize">
+ <component name="Microsoft-Windows-PnPSysprep" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <PersistAllDeviceInstalls>true</PersistAllDeviceInstalls>
+ </component>
+ <component name="Microsoft-Windows-Security-SPP" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipRearm>1</SkipRearm>
+ </component>
+ </settings>
+ <settings pass="specialize">
+ <component name="Microsoft-Windows-Security-SPP-UX" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipAutoActivation>true</SkipAutoActivation>
+ </component>
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <ComputerName>*</ComputerName>
+ <OEMInformation>
+ <Manufacturer>Dockur</Manufacturer>
+ <Model>Windows for Docker</Model>
+ <SupportHours>24/7</SupportHours>
+ <SupportPhone />
+ <SupportProvider>Dockur</SupportProvider>
+ <SupportURL>https://github.com/dockur/windows/issues</SupportURL>
+ </OEMInformation>
+ <OEMName>Windows for Docker</OEMName>
+ </component>
+ <component name="Microsoft-Windows-ErrorReportingCore" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableWER>1</DisableWER>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableAccelerators>true</DisableAccelerators>
+ <DisableFirstRunWizard>true</DisableFirstRunWizard>
+ <Home_Page>https://google.com</Home_Page>
+ <Help_Page>about:blank</Help_Page>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="wow64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableAccelerators>true</DisableAccelerators>
+ <DisableFirstRunWizard>true</DisableFirstRunWizard>
+ <Home_Page>https://google.com</Home_Page>
+ <Help_Page>about:blank</Help_Page>
+ </component>
+ <component name="Microsoft-Windows-SQMApi" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <CEIPEnabled>0</CEIPEnabled>
+ </component>
+ <component name="Microsoft-Windows-SystemRestore-Main" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableSR>1</DisableSR>
+ </component>
+ <component name="Microsoft-Windows-International-Core" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-Deployment" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <RunSynchronous>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>1</Order>
+ <Path>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OOBE" /v BypassNRO /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>2</Order>
+ <Path>reg.exe load "HKU\mount" "C:\Users\Default\NTUSER.DAT"</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>3</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "ContentDeliveryAllowed" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>4</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "FeatureManagementEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>5</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "OEMPreInstalledAppsEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>6</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "PreInstalledAppsEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>7</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "PreInstalledAppsEverEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>8</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SilentInstalledAppsEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>9</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SoftLandingEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>10</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContentEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>11</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-310093Enabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>12</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-338387Enabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>13</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-338388Enabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>14</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-338389Enabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>15</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-338393Enabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>16</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-353698Enabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>17</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SystemPaneSuggestionsEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>18</Order>
+ <Path>reg.exe add "HKU\mount\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableCloudOptimizedContent" /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>19</Order>
+ <Path>reg.exe add "HKU\mount\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableWindowsConsumerFeatures" /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>20</Order>
+ <Path>reg.exe add "HKU\mount\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableConsumerAccountStateContent" /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>21</Order>
+ <Path>reg.exe unload "HKU\mount"</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>22</Order>
+ <Path>reg.exe add "HKLM\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableCloudOptimizedContent" /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>23</Order>
+ <Path>reg.exe add "HKLM\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableWindowsConsumerFeatures" /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>24</Order>
+ <Path>reg.exe add "HKLM\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableConsumerAccountStateContent" /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>25</Order>
+ <Path>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\CurrentVersion\NetworkList\Signatures\FirstNetwork" /v Category /t REG_DWORD /d 1 /f</Path>
+ <Description>Set Network Location to Home</Description>
+ </RunSynchronousCommand>
+ </RunSynchronous>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-LocalSessionManager" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <fDenyTSConnections>false</fDenyTSConnections>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-RDP-WinStationExtensions" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAuthentication>0</UserAuthentication>
+ </component>
+ <component name="Networking-MPSSVC-Svc" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <FirewallGroups>
+ <FirewallGroup wcm:action="add" wcm:keyValue="RemoteDesktop">
+ <Active>true</Active>
+ <Profile>all</Profile>
+ <Group>@FirewallAPI.dll,-28752</Group>
+ </FirewallGroup>
+ </FirewallGroups>
+ </component>
+ </settings>
+ <settings pass="auditSystem" />
+ <settings pass="auditUser" />
+ <settings pass="oobeSystem">
+ <component name="Microsoft-Windows-SecureStartup-FilterDriver" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <PreventDeviceEncryption>true</PreventDeviceEncryption>
+ </component>
+ <component name="Microsoft-Windows-EnhancedStorage-Adm" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <TCGSecurityActivationDisabled>1</TCGSecurityActivationDisabled>
+ </component>
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAccounts>
+ <LocalAccounts>
+ <LocalAccount wcm:action="add">
+ <Name>Docker</Name>
+ <Group>Administrators</Group>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </LocalAccount>
+ </LocalAccounts>
+ <AdministratorPassword>
+ <Value>password</Value>
+ <PlainText>true</PlainText>
+ </AdministratorPassword>
+ </UserAccounts>
+ <AutoLogon>
+ <Username>Docker</Username>
+ <Enabled>true</Enabled>
+ <LogonCount>65432</LogonCount>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </AutoLogon>
+ <Display>
+ <ColorDepth>32</ColorDepth>
+ <HorizontalResolution>1920</HorizontalResolution>
+ <VerticalResolution>1080</VerticalResolution>
+ </Display>
+ <OOBE>
+ <HideEULAPage>true</HideEULAPage>
+ <HideLocalAccountScreen>true</HideLocalAccountScreen>
+ <HideOEMRegistrationScreen>true</HideOEMRegistrationScreen>
+ <HideOnlineAccountScreens>true</HideOnlineAccountScreens>
+ <HideWirelessSetupInOOBE>true</HideWirelessSetupInOOBE>
+ <NetworkLocation>Home</NetworkLocation>
+ <ProtectYourPC>3</ProtectYourPC>
+ <SkipUserOOBE>true</SkipUserOOBE>
+ <SkipMachineOOBE>true</SkipMachineOOBE>
+ </OOBE>
+ <RegisteredOrganization>Dockur</RegisteredOrganization>
+ <RegisteredOwner>Windows for Docker</RegisteredOwner>
+ <FirstLogonCommands>
+ <SynchronousCommand wcm:action="add">
+ <Order>1</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" /v "AllowInsecureGuestAuth" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Allow guest access to network shares</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>2</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" /v LimitBlankPasswordUse /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Allow RDP login with blank password</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>3</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PasswordLess\Device" /v "DevicePasswordLessBuildVersion" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Enable option for passwordless sign-in</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>4</Order>
+ <CommandLine>cmd /C wmic useraccount where name="Docker" set PasswordExpires=false</CommandLine>
+ <Description>Password Never Expires</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>5</Order>
+ <CommandLine>cmd /C POWERCFG -H OFF</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>6</Order>
+ <CommandLine>cmd /C POWERCFG -X -monitor-timeout-ac 0</CommandLine>
+ <Description>Disable monitor blanking</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>7</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Edge" /v "HideFirstRunExperience" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Disable first-run experience in Edge</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>8</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "HideFileExt" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Show file extensions in Explorer</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>9</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateFileSizePercent" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Zero Hibernation File</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>10</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateEnabled" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>11</Order>
+ <CommandLine>cmd /C POWERCFG -X -standby-timeout-ac 0</CommandLine>
+ <Description>Disable Sleep</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>12</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" /v "fAllowUnlistedRemotePrograms" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Enable RemoteAPP to launch unlisted programs</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>13</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Search" /v "SearchboxTaskbarMode" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Search from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>14</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "ShowTaskViewButton" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Task View from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>15</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "TaskbarDa" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Widgets from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>16</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "TaskbarMn" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Chat from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>17</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" /v "NoAutoUpdate" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Turn off Windows Update auto download</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>18</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-32752" new enable=Yes</CommandLine>
+ <Description>Enable Network Discovery</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>19</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-28502" new enable=Yes</CommandLine>
+ <Description>Enable File Sharing</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>20</Order>
+ <CommandLine>cmd /C if exist "C:\OEM\install.bat" start "Install" "cmd /C C:\OEM\install.bat"</CommandLine>
+ <Description>Execute custom script from the OEM folder if exists</Description>
+ </SynchronousCommand>
+ </FirstLogonCommands>
+ </component>
+ </settings>
+</unattend>

assets/win10x64-iot.xml

@@ -0,0 +1,433 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<unattend xmlns="urn:schemas-microsoft-com:unattend" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State">
+ <settings pass="windowsPE">
+ <component name="Microsoft-Windows-International-Core-WinPE" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SetupUILanguage>
+ <UILanguage>en-US</UILanguage>
+ </SetupUILanguage>
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DiskConfiguration>
+ <Disk wcm:action="add">
+ <DiskID>0</DiskID>
+ <WillWipeDisk>true</WillWipeDisk>
+ <CreatePartitions>
+ <!-- System partition (ESP) -->
+ <CreatePartition wcm:action="add">
+ <Order>1</Order>
+ <Type>EFI</Type>
+ <Size>128</Size>
+ </CreatePartition>
+ <!-- Microsoft reserved partition (MSR) -->
+ <CreatePartition wcm:action="add">
+ <Order>2</Order>
+ <Type>MSR</Type>
+ <Size>128</Size>
+ </CreatePartition>
+ <!-- Windows partition -->
+ <CreatePartition wcm:action="add">
+ <Order>3</Order>
+ <Type>Primary</Type>
+ <Extend>true</Extend>
+ </CreatePartition>
+ </CreatePartitions>
+ <ModifyPartitions>
+ <!-- System partition (ESP) -->
+ <ModifyPartition wcm:action="add">
+ <Order>1</Order>
+ <PartitionID>1</PartitionID>
+ <Label>System</Label>
+ <Format>FAT32</Format>
+ </ModifyPartition>
+ <!-- MSR partition does not need to be modified -->
+ <ModifyPartition wcm:action="add">
+ <Order>2</Order>
+ <PartitionID>2</PartitionID>
+ </ModifyPartition>
+ <!-- Windows partition -->
+ <ModifyPartition wcm:action="add">
+ <Order>3</Order>
+ <PartitionID>3</PartitionID>
+ <Label>Windows</Label>
+ <Letter>C</Letter>
+ <Format>NTFS</Format>
+ </ModifyPartition>
+ </ModifyPartitions>
+ </Disk>
+ </DiskConfiguration>
+ <ImageInstall>
+ <OSImage>
+ <InstallFrom>
+ <MetaData wcm:action="add">
+ <Key>/image/index</Key>
+ <Value>2</Value>
+ </MetaData>
+ </InstallFrom>
+ <InstallTo>
+ <DiskID>0</DiskID>
+ <PartitionID>3</PartitionID>
+ </InstallTo>
+ <InstallToAvailablePartition>false</InstallToAvailablePartition>
+ </OSImage>
+ </ImageInstall>
+ <DynamicUpdate>
+ <Enable>true</Enable>
+ <WillShowUI>Never</WillShowUI>
+ </DynamicUpdate>
+ <UpgradeData>
+ <Upgrade>false</Upgrade>
+ <WillShowUI>Never</WillShowUI>
+ </UpgradeData>
+ <UserData>
+ <AcceptEula>true</AcceptEula>
+ <FullName>Docker</FullName>
+ <Organization>Windows for Docker</Organization>
+ <ProductKey>
+ <Key />
+ </ProductKey>
+ </UserData>
+ <EnableFirewall>false</EnableFirewall>
+ <Diagnostics>
+ <OptIn>false</OptIn>
+ </Diagnostics>
+ </component>
+ </settings>
+ <settings pass="offlineServicing">
+ <component name="Microsoft-Windows-LUA-Settings" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <EnableLUA>false</EnableLUA>
+ </component>
+ </settings>
+ <settings pass="generalize">
+ <component name="Microsoft-Windows-PnPSysprep" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <PersistAllDeviceInstalls>true</PersistAllDeviceInstalls>
+ </component>
+ <component name="Microsoft-Windows-Security-SPP" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipRearm>1</SkipRearm>
+ </component>
+ </settings>
+ <settings pass="specialize">
+ <component name="Microsoft-Windows-Security-SPP-UX" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipAutoActivation>true</SkipAutoActivation>
+ </component>
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <ComputerName>*</ComputerName>
+ <OEMInformation>
+ <Manufacturer>Dockur</Manufacturer>
+ <Model>Windows for Docker</Model>
+ <SupportHours>24/7</SupportHours>
+ <SupportPhone />
+ <SupportProvider>Dockur</SupportProvider>
+ <SupportURL>https://github.com/dockur/windows/issues</SupportURL>
+ </OEMInformation>
+ <OEMName>Windows for Docker</OEMName>
+ </component>
+ <component name="Microsoft-Windows-ErrorReportingCore" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableWER>1</DisableWER>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableAccelerators>true</DisableAccelerators>
+ <DisableFirstRunWizard>true</DisableFirstRunWizard>
+ <Home_Page>https://google.com</Home_Page>
+ <Help_Page>about:blank</Help_Page>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="wow64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableAccelerators>true</DisableAccelerators>
+ <DisableFirstRunWizard>true</DisableFirstRunWizard>
+ <Home_Page>https://google.com</Home_Page>
+ <Help_Page>about:blank</Help_Page>
+ </component>
+ <component name="Microsoft-Windows-SQMApi" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <CEIPEnabled>0</CEIPEnabled>
+ </component>
+ <component name="Microsoft-Windows-SystemRestore-Main" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableSR>1</DisableSR>
+ </component>
+ <component name="Microsoft-Windows-International-Core" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-Deployment" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <RunSynchronous>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>1</Order>
+ <Path>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OOBE" /v BypassNRO /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>2</Order>
+ <Path>reg.exe load "HKU\mount" "C:\Users\Default\NTUSER.DAT"</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>3</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "ContentDeliveryAllowed" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>4</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "FeatureManagementEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>5</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "OEMPreInstalledAppsEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>6</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "PreInstalledAppsEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>7</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "PreInstalledAppsEverEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>8</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SilentInstalledAppsEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>9</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SoftLandingEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>10</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContentEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>11</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-310093Enabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>12</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-338387Enabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>13</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-338388Enabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>14</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-338389Enabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>15</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-338393Enabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>16</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-353698Enabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>17</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SystemPaneSuggestionsEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>18</Order>
+ <Path>reg.exe add "HKU\mount\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableCloudOptimizedContent" /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>19</Order>
+ <Path>reg.exe add "HKU\mount\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableWindowsConsumerFeatures" /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>20</Order>
+ <Path>reg.exe add "HKU\mount\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableConsumerAccountStateContent" /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>21</Order>
+ <Path>reg.exe unload "HKU\mount"</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>22</Order>
+ <Path>reg.exe add "HKLM\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableCloudOptimizedContent" /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>23</Order>
+ <Path>reg.exe add "HKLM\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableWindowsConsumerFeatures" /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>24</Order>
+ <Path>reg.exe add "HKLM\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableConsumerAccountStateContent" /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>25</Order>
+ <Path>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\CurrentVersion\NetworkList\Signatures\FirstNetwork" /v Category /t REG_DWORD /d 1 /f</Path>
+ <Description>Set Network Location to Home</Description>
+ </RunSynchronousCommand>
+ </RunSynchronous>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-LocalSessionManager" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <fDenyTSConnections>false</fDenyTSConnections>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-RDP-WinStationExtensions" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAuthentication>0</UserAuthentication>
+ </component>
+ <component name="Networking-MPSSVC-Svc" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <FirewallGroups>
+ <FirewallGroup wcm:action="add" wcm:keyValue="RemoteDesktop">
+ <Active>true</Active>
+ <Profile>all</Profile>
+ <Group>@FirewallAPI.dll,-28752</Group>
+ </FirewallGroup>
+ </FirewallGroups>
+ </component>
+ </settings>
+ <settings pass="auditSystem" />
+ <settings pass="auditUser" />
+ <settings pass="oobeSystem">
+ <component name="Microsoft-Windows-SecureStartup-FilterDriver" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <PreventDeviceEncryption>true</PreventDeviceEncryption>
+ </component>
+ <component name="Microsoft-Windows-EnhancedStorage-Adm" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <TCGSecurityActivationDisabled>1</TCGSecurityActivationDisabled>
+ </component>
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAccounts>
+ <LocalAccounts>
+ <LocalAccount wcm:action="add">
+ <Name>Docker</Name>
+ <Group>Administrators</Group>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </LocalAccount>
+ </LocalAccounts>
+ <AdministratorPassword>
+ <Value>password</Value>
+ <PlainText>true</PlainText>
+ </AdministratorPassword>
+ </UserAccounts>
+ <AutoLogon>
+ <Username>Docker</Username>
+ <Enabled>true</Enabled>
+ <LogonCount>65432</LogonCount>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </AutoLogon>
+ <Display>
+ <ColorDepth>32</ColorDepth>
+ <HorizontalResolution>1920</HorizontalResolution>
+ <VerticalResolution>1080</VerticalResolution>
+ </Display>
+ <OOBE>
+ <HideEULAPage>true</HideEULAPage>
+ <HideLocalAccountScreen>true</HideLocalAccountScreen>
+ <HideOEMRegistrationScreen>true</HideOEMRegistrationScreen>
+ <HideOnlineAccountScreens>true</HideOnlineAccountScreens>
+ <HideWirelessSetupInOOBE>true</HideWirelessSetupInOOBE>
+ <NetworkLocation>Home</NetworkLocation>
+ <ProtectYourPC>3</ProtectYourPC>
+ <SkipUserOOBE>true</SkipUserOOBE>
+ <SkipMachineOOBE>true</SkipMachineOOBE>
+ </OOBE>
+ <RegisteredOrganization>Dockur</RegisteredOrganization>
+ <RegisteredOwner>Windows for Docker</RegisteredOwner>
+ <FirstLogonCommands>
+ <SynchronousCommand wcm:action="add">
+ <Order>1</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" /v "AllowInsecureGuestAuth" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Allow guest access to network shares</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>2</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" /v LimitBlankPasswordUse /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Allow RDP login with blank password</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>3</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PasswordLess\Device" /v "DevicePasswordLessBuildVersion" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Enable option for passwordless sign-in</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>4</Order>
+ <CommandLine>cmd /C wmic useraccount where name="Docker" set PasswordExpires=false</CommandLine>
+ <Description>Password Never Expires</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>5</Order>
+ <CommandLine>cmd /C POWERCFG -H OFF</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>6</Order>
+ <CommandLine>cmd /C POWERCFG -X -monitor-timeout-ac 0</CommandLine>
+ <Description>Disable monitor blanking</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>7</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Edge" /v "HideFirstRunExperience" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Disable first-run experience in Edge</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>8</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "HideFileExt" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Show file extensions in Explorer</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>9</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateFileSizePercent" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Zero Hibernation File</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>10</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateEnabled" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>11</Order>
+ <CommandLine>cmd /C POWERCFG -X -standby-timeout-ac 0</CommandLine>
+ <Description>Disable Sleep</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>12</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" /v "fAllowUnlistedRemotePrograms" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Enable RemoteAPP to launch unlisted programs</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>13</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Search" /v "SearchboxTaskbarMode" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Search from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>14</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "ShowTaskViewButton" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Task View from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>15</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "TaskbarDa" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Widgets from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>16</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "TaskbarMn" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Chat from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>17</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" /v "NoAutoUpdate" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Turn off Windows Update auto download</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>18</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-32752" new enable=Yes</CommandLine>
+ <Description>Enable Network Discovery</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>19</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-28502" new enable=Yes</CommandLine>
+ <Description>Enable File Sharing</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>20</Order>
+ <CommandLine>cmd /C if exist "C:\OEM\install.bat" start "Install" "cmd /C C:\OEM\install.bat"</CommandLine>
+ <Description>Execute custom script from the OEM folder if exists</Description>
+ </SynchronousCommand>
+ </FirstLogonCommands>
+ </component>
+ </settings>
+</unattend>

assets/win10x64-ltsc.xml

@@ -0,0 +1,430 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<unattend xmlns="urn:schemas-microsoft-com:unattend" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State">
+ <settings pass="windowsPE">
+ <component name="Microsoft-Windows-International-Core-WinPE" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SetupUILanguage>
+ <UILanguage>en-US</UILanguage>
+ </SetupUILanguage>
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DiskConfiguration>
+ <Disk wcm:action="add">
+ <DiskID>0</DiskID>
+ <WillWipeDisk>true</WillWipeDisk>
+ <CreatePartitions>
+ <!-- System partition (ESP) -->
+ <CreatePartition wcm:action="add">
+ <Order>1</Order>
+ <Type>EFI</Type>
+ <Size>128</Size>
+ </CreatePartition>
+ <!-- Microsoft reserved partition (MSR) -->
+ <CreatePartition wcm:action="add">
+ <Order>2</Order>
+ <Type>MSR</Type>
+ <Size>128</Size>
+ </CreatePartition>
+ <!-- Windows partition -->
+ <CreatePartition wcm:action="add">
+ <Order>3</Order>
+ <Type>Primary</Type>
+ <Extend>true</Extend>
+ </CreatePartition>
+ </CreatePartitions>
+ <ModifyPartitions>
+ <!-- System partition (ESP) -->
+ <ModifyPartition wcm:action="add">
+ <Order>1</Order>
+ <PartitionID>1</PartitionID>
+ <Label>System</Label>
+ <Format>FAT32</Format>
+ </ModifyPartition>
+ <!-- MSR partition does not need to be modified -->
+ <ModifyPartition wcm:action="add">
+ <Order>2</Order>
+ <PartitionID>2</PartitionID>
+ </ModifyPartition>
+ <!-- Windows partition -->
+ <ModifyPartition wcm:action="add">
+ <Order>3</Order>
+ <PartitionID>3</PartitionID>
+ <Label>Windows</Label>
+ <Letter>C</Letter>
+ <Format>NTFS</Format>
+ </ModifyPartition>
+ </ModifyPartitions>
+ </Disk>
+ </DiskConfiguration>
+ <ImageInstall>
+ <OSImage>
+ <InstallFrom>
+ <MetaData wcm:action="add">
+ <Key>/image/index</Key>
+ <Value>1</Value>
+ </MetaData>
+ </InstallFrom>
+ <InstallTo>
+ <DiskID>0</DiskID>
+ <PartitionID>3</PartitionID>
+ </InstallTo>
+ <InstallToAvailablePartition>false</InstallToAvailablePartition>
+ </OSImage>
+ </ImageInstall>
+ <DynamicUpdate>
+ <Enable>true</Enable>
+ <WillShowUI>Never</WillShowUI>
+ </DynamicUpdate>
+ <UpgradeData>
+ <Upgrade>false</Upgrade>
+ <WillShowUI>Never</WillShowUI>
+ </UpgradeData>
+ <UserData>
+ <AcceptEula>true</AcceptEula>
+ <FullName>Docker</FullName>
+ <Organization>Windows for Docker</Organization>
+ </UserData>
+ <EnableFirewall>false</EnableFirewall>
+ <Diagnostics>
+ <OptIn>false</OptIn>
+ </Diagnostics>
+ </component>
+ </settings>
+ <settings pass="offlineServicing">
+ <component name="Microsoft-Windows-LUA-Settings" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <EnableLUA>false</EnableLUA>
+ </component>
+ </settings>
+ <settings pass="generalize">
+ <component name="Microsoft-Windows-PnPSysprep" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <PersistAllDeviceInstalls>true</PersistAllDeviceInstalls>
+ </component>
+ <component name="Microsoft-Windows-Security-SPP" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipRearm>1</SkipRearm>
+ </component>
+ </settings>
+ <settings pass="specialize">
+ <component name="Microsoft-Windows-Security-SPP-UX" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipAutoActivation>true</SkipAutoActivation>
+ </component>
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <ComputerName>*</ComputerName>
+ <OEMInformation>
+ <Manufacturer>Dockur</Manufacturer>
+ <Model>Windows for Docker</Model>
+ <SupportHours>24/7</SupportHours>
+ <SupportPhone />
+ <SupportProvider>Dockur</SupportProvider>
+ <SupportURL>https://github.com/dockur/windows/issues</SupportURL>
+ </OEMInformation>
+ <OEMName>Windows for Docker</OEMName>
+ </component>
+ <component name="Microsoft-Windows-ErrorReportingCore" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableWER>1</DisableWER>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableAccelerators>true</DisableAccelerators>
+ <DisableFirstRunWizard>true</DisableFirstRunWizard>
+ <Home_Page>https://google.com</Home_Page>
+ <Help_Page>about:blank</Help_Page>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="wow64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableAccelerators>true</DisableAccelerators>
+ <DisableFirstRunWizard>true</DisableFirstRunWizard>
+ <Home_Page>https://google.com</Home_Page>
+ <Help_Page>about:blank</Help_Page>
+ </component>
+ <component name="Microsoft-Windows-SQMApi" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <CEIPEnabled>0</CEIPEnabled>
+ </component>
+ <component name="Microsoft-Windows-SystemRestore-Main" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableSR>1</DisableSR>
+ </component>
+ <component name="Microsoft-Windows-International-Core" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-Deployment" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <RunSynchronous>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>1</Order>
+ <Path>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OOBE" /v BypassNRO /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>2</Order>
+ <Path>reg.exe load "HKU\mount" "C:\Users\Default\NTUSER.DAT"</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>3</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "ContentDeliveryAllowed" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>4</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "FeatureManagementEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>5</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "OEMPreInstalledAppsEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>6</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "PreInstalledAppsEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>7</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "PreInstalledAppsEverEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>8</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SilentInstalledAppsEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>9</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SoftLandingEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>10</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContentEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>11</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-310093Enabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>12</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-338387Enabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>13</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-338388Enabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>14</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-338389Enabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>15</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-338393Enabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>16</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-353698Enabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>17</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SystemPaneSuggestionsEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>18</Order>
+ <Path>reg.exe add "HKU\mount\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableCloudOptimizedContent" /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>19</Order>
+ <Path>reg.exe add "HKU\mount\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableWindowsConsumerFeatures" /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>20</Order>
+ <Path>reg.exe add "HKU\mount\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableConsumerAccountStateContent" /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>21</Order>
+ <Path>reg.exe unload "HKU\mount"</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>22</Order>
+ <Path>reg.exe add "HKLM\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableCloudOptimizedContent" /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>23</Order>
+ <Path>reg.exe add "HKLM\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableWindowsConsumerFeatures" /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>24</Order>
+ <Path>reg.exe add "HKLM\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableConsumerAccountStateContent" /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>25</Order>
+ <Path>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\CurrentVersion\NetworkList\Signatures\FirstNetwork" /v Category /t REG_DWORD /d 1 /f</Path>
+ <Description>Set Network Location to Home</Description>
+ </RunSynchronousCommand>
+ </RunSynchronous>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-LocalSessionManager" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <fDenyTSConnections>false</fDenyTSConnections>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-RDP-WinStationExtensions" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAuthentication>0</UserAuthentication>
+ </component>
+ <component name="Networking-MPSSVC-Svc" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <FirewallGroups>
+ <FirewallGroup wcm:action="add" wcm:keyValue="RemoteDesktop">
+ <Active>true</Active>
+ <Profile>all</Profile>
+ <Group>@FirewallAPI.dll,-28752</Group>
+ </FirewallGroup>
+ </FirewallGroups>
+ </component>
+ </settings>
+ <settings pass="auditSystem" />
+ <settings pass="auditUser" />
+ <settings pass="oobeSystem">
+ <component name="Microsoft-Windows-SecureStartup-FilterDriver" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <PreventDeviceEncryption>true</PreventDeviceEncryption>
+ </component>
+ <component name="Microsoft-Windows-EnhancedStorage-Adm" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <TCGSecurityActivationDisabled>1</TCGSecurityActivationDisabled>
+ </component>
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAccounts>
+ <LocalAccounts>
+ <LocalAccount wcm:action="add">
+ <Name>Docker</Name>
+ <Group>Administrators</Group>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </LocalAccount>
+ </LocalAccounts>
+ <AdministratorPassword>
+ <Value>password</Value>
+ <PlainText>true</PlainText>
+ </AdministratorPassword>
+ </UserAccounts>
+ <AutoLogon>
+ <Username>Docker</Username>
+ <Enabled>true</Enabled>
+ <LogonCount>65432</LogonCount>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </AutoLogon>
+ <Display>
+ <ColorDepth>32</ColorDepth>
+ <HorizontalResolution>1920</HorizontalResolution>
+ <VerticalResolution>1080</VerticalResolution>
+ </Display>
+ <OOBE>
+ <HideEULAPage>true</HideEULAPage>
+ <HideLocalAccountScreen>true</HideLocalAccountScreen>
+ <HideOEMRegistrationScreen>true</HideOEMRegistrationScreen>
+ <HideOnlineAccountScreens>true</HideOnlineAccountScreens>
+ <HideWirelessSetupInOOBE>true</HideWirelessSetupInOOBE>
+ <NetworkLocation>Home</NetworkLocation>
+ <ProtectYourPC>3</ProtectYourPC>
+ <SkipUserOOBE>true</SkipUserOOBE>
+ <SkipMachineOOBE>true</SkipMachineOOBE>
+ </OOBE>
+ <RegisteredOrganization>Dockur</RegisteredOrganization>
+ <RegisteredOwner>Windows for Docker</RegisteredOwner>
+ <FirstLogonCommands>
+ <SynchronousCommand wcm:action="add">
+ <Order>1</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" /v "AllowInsecureGuestAuth" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Allow guest access to network shares</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>2</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" /v LimitBlankPasswordUse /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Allow RDP login with blank password</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>3</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PasswordLess\Device" /v "DevicePasswordLessBuildVersion" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Enable option for passwordless sign-in</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>4</Order>
+ <CommandLine>cmd /C wmic useraccount where name="Docker" set PasswordExpires=false</CommandLine>
+ <Description>Password Never Expires</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>5</Order>
+ <CommandLine>cmd /C POWERCFG -H OFF</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>6</Order>
+ <CommandLine>cmd /C POWERCFG -X -monitor-timeout-ac 0</CommandLine>
+ <Description>Disable monitor blanking</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>7</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Edge" /v "HideFirstRunExperience" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Disable first-run experience in Edge</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>8</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "HideFileExt" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Show file extensions in Explorer</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>9</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateFileSizePercent" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Zero Hibernation File</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>10</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateEnabled" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>11</Order>
+ <CommandLine>cmd /C POWERCFG -X -standby-timeout-ac 0</CommandLine>
+ <Description>Disable Sleep</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>12</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" /v "fAllowUnlistedRemotePrograms" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Enable RemoteAPP to launch unlisted programs</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>13</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Search" /v "SearchboxTaskbarMode" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Search from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>14</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "ShowTaskViewButton" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Task View from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>15</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "TaskbarDa" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Widgets from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>16</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "TaskbarMn" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Chat from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>17</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" /v "NoAutoUpdate" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Turn off Windows Update auto download</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>18</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-32752" new enable=Yes</CommandLine>
+ <Description>Enable Network Discovery</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>19</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-28502" new enable=Yes</CommandLine>
+ <Description>Enable File Sharing</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>20</Order>
+ <CommandLine>cmd /C if exist "C:\OEM\install.bat" start "Install" "cmd /C C:\OEM\install.bat"</CommandLine>
+ <Description>Execute custom script from the OEM folder if exists</Description>
+ </SynchronousCommand>
+ </FirstLogonCommands>
+ </component>
+ </settings>
+</unattend>

assets/win10x64.xml

@@ -0,0 +1,427 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<unattend xmlns="urn:schemas-microsoft-com:unattend" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State">
+ <settings pass="windowsPE">
+ <component name="Microsoft-Windows-International-Core-WinPE" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SetupUILanguage>
+ <UILanguage>en-US</UILanguage>
+ </SetupUILanguage>
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DiskConfiguration>
+ <Disk wcm:action="add">
+ <DiskID>0</DiskID>
+ <WillWipeDisk>true</WillWipeDisk>
+ <CreatePartitions>
+ <!-- System partition (ESP) -->
+ <CreatePartition wcm:action="add">
+ <Order>1</Order>
+ <Type>EFI</Type>
+ <Size>128</Size>
+ </CreatePartition>
+ <!-- Microsoft reserved partition (MSR) -->
+ <CreatePartition wcm:action="add">
+ <Order>2</Order>
+ <Type>MSR</Type>
+ <Size>128</Size>
+ </CreatePartition>
+ <!-- Windows partition -->
+ <CreatePartition wcm:action="add">
+ <Order>3</Order>
+ <Type>Primary</Type>
+ <Extend>true</Extend>
+ </CreatePartition>
+ </CreatePartitions>
+ <ModifyPartitions>
+ <!-- System partition (ESP) -->
+ <ModifyPartition wcm:action="add">
+ <Order>1</Order>
+ <PartitionID>1</PartitionID>
+ <Label>System</Label>
+ <Format>FAT32</Format>
+ </ModifyPartition>
+ <!-- MSR partition does not need to be modified -->
+ <ModifyPartition wcm:action="add">
+ <Order>2</Order>
+ <PartitionID>2</PartitionID>
+ </ModifyPartition>
+ <!-- Windows partition -->
+ <ModifyPartition wcm:action="add">
+ <Order>3</Order>
+ <PartitionID>3</PartitionID>
+ <Label>Windows</Label>
+ <Letter>C</Letter>
+ <Format>NTFS</Format>
+ </ModifyPartition>
+ </ModifyPartitions>
+ </Disk>
+ </DiskConfiguration>
+ <ImageInstall>
+ <OSImage>
+ <InstallTo>
+ <DiskID>0</DiskID>
+ <PartitionID>3</PartitionID>
+ </InstallTo>
+ <InstallToAvailablePartition>false</InstallToAvailablePartition>
+ </OSImage>
+ </ImageInstall>
+ <DynamicUpdate>
+ <Enable>true</Enable>
+ <WillShowUI>Never</WillShowUI>
+ </DynamicUpdate>
+ <UpgradeData>
+ <Upgrade>false</Upgrade>
+ <WillShowUI>Never</WillShowUI>
+ </UpgradeData>
+ <UserData>
+ <AcceptEula>true</AcceptEula>
+ <FullName>Docker</FullName>
+ <Organization>Windows for Docker</Organization>
+ <ProductKey>
+ <Key>VK7JG-NPHTM-C97JM-9MPGT-3V66T</Key>
+ </ProductKey>
+ </UserData>
+ <EnableFirewall>false</EnableFirewall>
+ <Diagnostics>
+ <OptIn>false</OptIn>
+ </Diagnostics>
+ </component>
+ </settings>
+ <settings pass="offlineServicing">
+ <component name="Microsoft-Windows-LUA-Settings" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <EnableLUA>false</EnableLUA>
+ </component>
+ </settings>
+ <settings pass="generalize">
+ <component name="Microsoft-Windows-PnPSysprep" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <PersistAllDeviceInstalls>true</PersistAllDeviceInstalls>
+ </component>
+ <component name="Microsoft-Windows-Security-SPP" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipRearm>1</SkipRearm>
+ </component>
+ </settings>
+ <settings pass="specialize">
+ <component name="Microsoft-Windows-Security-SPP-UX" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipAutoActivation>true</SkipAutoActivation>
+ </component>
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <ComputerName>*</ComputerName>
+ <OEMInformation>
+ <Manufacturer>Dockur</Manufacturer>
+ <Model>Windows for Docker</Model>
+ <SupportHours>24/7</SupportHours>
+ <SupportPhone />
+ <SupportProvider>Dockur</SupportProvider>
+ <SupportURL>https://github.com/dockur/windows/issues</SupportURL>
+ </OEMInformation>
+ <OEMName>Windows for Docker</OEMName>
+ </component>
+ <component name="Microsoft-Windows-ErrorReportingCore" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableWER>1</DisableWER>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableAccelerators>true</DisableAccelerators>
+ <DisableFirstRunWizard>true</DisableFirstRunWizard>
+ <Home_Page>https://google.com</Home_Page>
+ <Help_Page>about:blank</Help_Page>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="wow64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableAccelerators>true</DisableAccelerators>
+ <DisableFirstRunWizard>true</DisableFirstRunWizard>
+ <Home_Page>https://google.com</Home_Page>
+ <Help_Page>about:blank</Help_Page>
+ </component>
+ <component name="Microsoft-Windows-SQMApi" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <CEIPEnabled>0</CEIPEnabled>
+ </component>
+ <component name="Microsoft-Windows-SystemRestore-Main" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableSR>1</DisableSR>
+ </component>
+ <component name="Microsoft-Windows-International-Core" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-Deployment" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <RunSynchronous>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>1</Order>
+ <Path>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OOBE" /v BypassNRO /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>2</Order>
+ <Path>reg.exe load "HKU\mount" "C:\Users\Default\NTUSER.DAT"</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>3</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "ContentDeliveryAllowed" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>4</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "FeatureManagementEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>5</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "OEMPreInstalledAppsEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>6</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "PreInstalledAppsEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>7</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "PreInstalledAppsEverEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>8</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SilentInstalledAppsEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>9</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SoftLandingEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>10</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContentEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>11</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-310093Enabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>12</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-338387Enabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>13</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-338388Enabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>14</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-338389Enabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>15</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-338393Enabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>16</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-353698Enabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>17</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SystemPaneSuggestionsEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>18</Order>
+ <Path>reg.exe add "HKU\mount\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableCloudOptimizedContent" /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>19</Order>
+ <Path>reg.exe add "HKU\mount\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableWindowsConsumerFeatures" /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>20</Order>
+ <Path>reg.exe add "HKU\mount\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableConsumerAccountStateContent" /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>21</Order>
+ <Path>reg.exe unload "HKU\mount"</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>22</Order>
+ <Path>reg.exe add "HKLM\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableCloudOptimizedContent" /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>23</Order>
+ <Path>reg.exe add "HKLM\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableWindowsConsumerFeatures" /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>24</Order>
+ <Path>reg.exe add "HKLM\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableConsumerAccountStateContent" /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>25</Order>
+ <Path>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\CurrentVersion\NetworkList\Signatures\FirstNetwork" /v Category /t REG_DWORD /d 1 /f</Path>
+ <Description>Set Network Location to Home</Description>
+ </RunSynchronousCommand>
+ </RunSynchronous>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-LocalSessionManager" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <fDenyTSConnections>false</fDenyTSConnections>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-RDP-WinStationExtensions" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAuthentication>0</UserAuthentication>
+ </component>
+ <component name="Networking-MPSSVC-Svc" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <FirewallGroups>
+ <FirewallGroup wcm:action="add" wcm:keyValue="RemoteDesktop">
+ <Active>true</Active>
+ <Profile>all</Profile>
+ <Group>@FirewallAPI.dll,-28752</Group>
+ </FirewallGroup>
+ </FirewallGroups>
+ </component>
+ </settings>
+ <settings pass="auditSystem" />
+ <settings pass="auditUser" />
+ <settings pass="oobeSystem">
+ <component name="Microsoft-Windows-SecureStartup-FilterDriver" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <PreventDeviceEncryption>true</PreventDeviceEncryption>
+ </component>
+ <component name="Microsoft-Windows-EnhancedStorage-Adm" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <TCGSecurityActivationDisabled>1</TCGSecurityActivationDisabled>
+ </component>
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAccounts>
+ <LocalAccounts>
+ <LocalAccount wcm:action="add">
+ <Name>Docker</Name>
+ <Group>Administrators</Group>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </LocalAccount>
+ </LocalAccounts>
+ <AdministratorPassword>
+ <Value>password</Value>
+ <PlainText>true</PlainText>
+ </AdministratorPassword>
+ </UserAccounts>
+ <AutoLogon>
+ <Username>Docker</Username>
+ <Enabled>true</Enabled>
+ <LogonCount>65432</LogonCount>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </AutoLogon>
+ <Display>
+ <ColorDepth>32</ColorDepth>
+ <HorizontalResolution>1920</HorizontalResolution>
+ <VerticalResolution>1080</VerticalResolution>
+ </Display>
+ <OOBE>
+ <HideEULAPage>true</HideEULAPage>
+ <HideLocalAccountScreen>true</HideLocalAccountScreen>
+ <HideOEMRegistrationScreen>true</HideOEMRegistrationScreen>
+ <HideOnlineAccountScreens>true</HideOnlineAccountScreens>
+ <HideWirelessSetupInOOBE>true</HideWirelessSetupInOOBE>
+ <NetworkLocation>Home</NetworkLocation>
+ <ProtectYourPC>3</ProtectYourPC>
+ <SkipUserOOBE>true</SkipUserOOBE>
+ <SkipMachineOOBE>true</SkipMachineOOBE>
+ </OOBE>
+ <RegisteredOrganization>Dockur</RegisteredOrganization>
+ <RegisteredOwner>Windows for Docker</RegisteredOwner>
+ <FirstLogonCommands>
+ <SynchronousCommand wcm:action="add">
+ <Order>1</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" /v "AllowInsecureGuestAuth" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Allow guest access to network shares</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>2</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" /v LimitBlankPasswordUse /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Allow RDP login with blank password</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>3</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PasswordLess\Device" /v "DevicePasswordLessBuildVersion" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Enable option for passwordless sign-in</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>4</Order>
+ <CommandLine>cmd /C wmic useraccount where name="Docker" set PasswordExpires=false</CommandLine>
+ <Description>Password Never Expires</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>5</Order>
+ <CommandLine>cmd /C POWERCFG -H OFF</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>6</Order>
+ <CommandLine>cmd /C POWERCFG -X -monitor-timeout-ac 0</CommandLine>
+ <Description>Disable monitor blanking</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>7</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Edge" /v "HideFirstRunExperience" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Disable first-run experience in Edge</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>8</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "HideFileExt" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Show file extensions in Explorer</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>9</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateFileSizePercent" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Zero Hibernation File</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>10</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateEnabled" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>11</Order>
+ <CommandLine>cmd /C POWERCFG -X -standby-timeout-ac 0</CommandLine>
+ <Description>Disable Sleep</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>12</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" /v "fAllowUnlistedRemotePrograms" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Enable RemoteAPP to launch unlisted programs</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>13</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Search" /v "SearchboxTaskbarMode" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Search from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>14</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "ShowTaskViewButton" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Task View from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>15</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "TaskbarDa" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Widgets from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>16</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "TaskbarMn" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Chat from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>17</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" /v "NoAutoUpdate" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Turn off Windows Update auto download</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>18</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-32752" new enable=Yes</CommandLine>
+ <Description>Enable Network Discovery</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>19</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-28502" new enable=Yes</CommandLine>
+ <Description>Enable File Sharing</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>20</Order>
+ <CommandLine>cmd /C if exist "C:\OEM\install.bat" start "Install" "cmd /C C:\OEM\install.bat"</CommandLine>
+ <Description>Execute custom script from the OEM folder if exists</Description>
+ </SynchronousCommand>
+ </FirstLogonCommands>
+ </component>
+ </settings>
+</unattend>

assets/win11x64-enterprise-eval.xml

@@ -0,0 +1,447 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<unattend xmlns="urn:schemas-microsoft-com:unattend" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State">
+ <settings pass="windowsPE">
+ <component name="Microsoft-Windows-International-Core-WinPE" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SetupUILanguage>
+ <UILanguage>en-US</UILanguage>
+ </SetupUILanguage>
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DiskConfiguration>
+ <Disk wcm:action="add">
+ <DiskID>0</DiskID>
+ <WillWipeDisk>true</WillWipeDisk>
+ <CreatePartitions>
+ <!-- System partition (ESP) -->
+ <CreatePartition wcm:action="add">
+ <Order>1</Order>
+ <Type>EFI</Type>
+ <Size>128</Size>
+ </CreatePartition>
+ <!-- Microsoft reserved partition (MSR) -->
+ <CreatePartition wcm:action="add">
+ <Order>2</Order>
+ <Type>MSR</Type>
+ <Size>128</Size>
+ </CreatePartition>
+ <!-- Windows partition -->
+ <CreatePartition wcm:action="add">
+ <Order>3</Order>
+ <Type>Primary</Type>
+ <Extend>true</Extend>
+ </CreatePartition>
+ </CreatePartitions>
+ <ModifyPartitions>
+ <!-- System partition (ESP) -->
+ <ModifyPartition wcm:action="add">
+ <Order>1</Order>
+ <PartitionID>1</PartitionID>
+ <Label>System</Label>
+ <Format>FAT32</Format>
+ </ModifyPartition>
+ <!-- MSR partition does not need to be modified -->
+ <ModifyPartition wcm:action="add">
+ <Order>2</Order>
+ <PartitionID>2</PartitionID>
+ </ModifyPartition>
+ <!-- Windows partition -->
+ <ModifyPartition wcm:action="add">
+ <Order>3</Order>
+ <PartitionID>3</PartitionID>
+ <Label>Windows</Label>
+ <Letter>C</Letter>
+ <Format>NTFS</Format>
+ </ModifyPartition>
+ </ModifyPartitions>
+ </Disk>
+ </DiskConfiguration>
+ <ImageInstall>
+ <OSImage>
+ <InstallTo>
+ <DiskID>0</DiskID>
+ <PartitionID>3</PartitionID>
+ </InstallTo>
+ <InstallToAvailablePartition>false</InstallToAvailablePartition>
+ </OSImage>
+ </ImageInstall>
+ <DynamicUpdate>
+ <Enable>true</Enable>
+ <WillShowUI>Never</WillShowUI>
+ </DynamicUpdate>
+ <UpgradeData>
+ <Upgrade>false</Upgrade>
+ <WillShowUI>Never</WillShowUI>
+ </UpgradeData>
+ <UserData>
+ <AcceptEula>true</AcceptEula>
+ <FullName>Docker</FullName>
+ <Organization>Windows for Docker</Organization>
+ </UserData>
+ <EnableFirewall>false</EnableFirewall>
+ <Diagnostics>
+ <OptIn>false</OptIn>
+ </Diagnostics>
+ <RunSynchronous>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>1</Order>
+ <Path>reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassTPMCheck /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>2</Order>
+ <Path>reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassSecureBootCheck /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>3</Order>
+ <Path>reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassRAMCheck /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>4</Order>
+ <Path>reg.exe add "HKLM\SYSTEM\Setup\MoSetup" /v AllowUpgradesWithUnsupportedTPMOrCPU /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ </RunSynchronous>
+ </component>
+ </settings>
+ <settings pass="offlineServicing">
+ <component name="Microsoft-Windows-LUA-Settings" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <EnableLUA>false</EnableLUA>
+ </component>
+ </settings>
+ <settings pass="generalize">
+ <component name="Microsoft-Windows-PnPSysprep" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <PersistAllDeviceInstalls>true</PersistAllDeviceInstalls>
+ </component>
+ <component name="Microsoft-Windows-Security-SPP" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipRearm>1</SkipRearm>
+ </component>
+ </settings>
+ <settings pass="specialize">
+ <component name="Microsoft-Windows-Security-SPP-UX" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipAutoActivation>true</SkipAutoActivation>
+ </component>
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <ComputerName>*</ComputerName>
+ <OEMInformation>
+ <Manufacturer>Dockur</Manufacturer>
+ <Model>Windows for Docker</Model>
+ <SupportHours>24/7</SupportHours>
+ <SupportPhone />
+ <SupportProvider>Dockur</SupportProvider>
+ <SupportURL>https://github.com/dockur/windows/issues</SupportURL>
+ </OEMInformation>
+ <OEMName>Windows for Docker</OEMName>
+ </component>
+ <component name="Microsoft-Windows-ErrorReportingCore" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableWER>1</DisableWER>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableAccelerators>true</DisableAccelerators>
+ <DisableFirstRunWizard>true</DisableFirstRunWizard>
+ <Home_Page>https://google.com</Home_Page>
+ <Help_Page>about:blank</Help_Page>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="wow64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableAccelerators>true</DisableAccelerators>
+ <DisableFirstRunWizard>true</DisableFirstRunWizard>
+ <Home_Page>https://google.com</Home_Page>
+ <Help_Page>about:blank</Help_Page>
+ </component>
+ <component name="Microsoft-Windows-SQMApi" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <CEIPEnabled>0</CEIPEnabled>
+ </component>
+ <component name="Microsoft-Windows-SystemRestore-Main" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableSR>1</DisableSR>
+ </component>
+ <component name="Microsoft-Windows-International-Core" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-Deployment" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <RunSynchronous>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>1</Order>
+ <Path>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OOBE" /v BypassNRO /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>2</Order>
+ <Path>reg.exe load "HKU\mount" "C:\Users\Default\NTUSER.DAT"</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>3</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "ContentDeliveryAllowed" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>4</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "FeatureManagementEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>5</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "OEMPreInstalledAppsEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>6</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "PreInstalledAppsEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>7</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "PreInstalledAppsEverEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>8</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SilentInstalledAppsEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>9</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SoftLandingEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>10</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContentEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>11</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-310093Enabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>12</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-338387Enabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>13</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-338388Enabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>14</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-338389Enabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>15</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-338393Enabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>16</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-353698Enabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>17</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SystemPaneSuggestionsEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>18</Order>
+ <Path>reg.exe add "HKU\mount\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableCloudOptimizedContent" /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>19</Order>
+ <Path>reg.exe add "HKU\mount\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableWindowsConsumerFeatures" /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>20</Order>
+ <Path>reg.exe add "HKU\mount\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableConsumerAccountStateContent" /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>21</Order>
+ <Path>reg.exe unload "HKU\mount"</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>22</Order>
+ <Path>reg.exe add "HKLM\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableCloudOptimizedContent" /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>23</Order>
+ <Path>reg.exe add "HKLM\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableWindowsConsumerFeatures" /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>24</Order>
+ <Path>reg.exe add "HKLM\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableConsumerAccountStateContent" /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>25</Order>
+ <Path>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\CurrentVersion\NetworkList\Signatures\FirstNetwork" /v Category /t REG_DWORD /d 1 /f</Path>
+ <Description>Set Network Location to Home</Description>
+ </RunSynchronousCommand>
+ </RunSynchronous>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-LocalSessionManager" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <fDenyTSConnections>false</fDenyTSConnections>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-RDP-WinStationExtensions" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAuthentication>0</UserAuthentication>
+ </component>
+ <component name="Networking-MPSSVC-Svc" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <FirewallGroups>
+ <FirewallGroup wcm:action="add" wcm:keyValue="RemoteDesktop">
+ <Active>true</Active>
+ <Profile>all</Profile>
+ <Group>@FirewallAPI.dll,-28752</Group>
+ </FirewallGroup>
+ </FirewallGroups>
+ </component>
+ </settings>
+ <settings pass="auditSystem" />
+ <settings pass="auditUser" />
+ <settings pass="oobeSystem">
+ <component name="Microsoft-Windows-SecureStartup-FilterDriver" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <PreventDeviceEncryption>true</PreventDeviceEncryption>
+ </component>
+ <component name="Microsoft-Windows-EnhancedStorage-Adm" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <TCGSecurityActivationDisabled>1</TCGSecurityActivationDisabled>
+ </component>
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAccounts>
+ <LocalAccounts>
+ <LocalAccount wcm:action="add">
+ <Name>Docker</Name>
+ <Group>Administrators</Group>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </LocalAccount>
+ </LocalAccounts>
+ <AdministratorPassword>
+ <Value>password</Value>
+ <PlainText>true</PlainText>
+ </AdministratorPassword>
+ </UserAccounts>
+ <AutoLogon>
+ <Username>Docker</Username>
+ <Enabled>true</Enabled>
+ <LogonCount>65432</LogonCount>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </AutoLogon>
+ <Display>
+ <ColorDepth>32</ColorDepth>
+ <HorizontalResolution>1920</HorizontalResolution>
+ <VerticalResolution>1080</VerticalResolution>
+ </Display>
+ <OOBE>
+ <HideEULAPage>true</HideEULAPage>
+ <HideLocalAccountScreen>true</HideLocalAccountScreen>
+ <HideOEMRegistrationScreen>true</HideOEMRegistrationScreen>
+ <HideOnlineAccountScreens>true</HideOnlineAccountScreens>
+ <HideWirelessSetupInOOBE>true</HideWirelessSetupInOOBE>
+ <NetworkLocation>Home</NetworkLocation>
+ <ProtectYourPC>3</ProtectYourPC>
+ <SkipUserOOBE>true</SkipUserOOBE>
+ <SkipMachineOOBE>true</SkipMachineOOBE>
+ </OOBE>
+ <RegisteredOrganization>Dockur</RegisteredOrganization>
+ <RegisteredOwner>Windows for Docker</RegisteredOwner>
+ <FirstLogonCommands>
+ <SynchronousCommand wcm:action="add">
+ <Order>1</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" /v "AllowInsecureGuestAuth" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Allow guest access to network shares</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>2</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" /v LimitBlankPasswordUse /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Allow RDP login with blank password</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>3</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PasswordLess\Device" /v "DevicePasswordLessBuildVersion" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Enable option for passwordless sign-in</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>4</Order>
+ <CommandLine>cmd /C wmic useraccount where name="Docker" set PasswordExpires=false</CommandLine>
+ <Description>Password Never Expires</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>5</Order>
+ <CommandLine>cmd /C POWERCFG -H OFF</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>6</Order>
+ <CommandLine>cmd /C POWERCFG -X -monitor-timeout-ac 0</CommandLine>
+ <Description>Disable monitor blanking</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>7</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Edge" /v "HideFirstRunExperience" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Disable first-run experience in Edge</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>8</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "HideFileExt" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Show file extensions in Explorer</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>9</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateFileSizePercent" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Zero Hibernation File</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>10</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateEnabled" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>11</Order>
+ <CommandLine>cmd /C POWERCFG -X -standby-timeout-ac 0</CommandLine>
+ <Description>Disable Sleep</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>12</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" /v "fAllowUnlistedRemotePrograms" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Enable RemoteAPP to launch unlisted programs</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>13</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "ShowTaskViewButton" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Task View from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>14</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "TaskbarDa" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Widgets from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>15</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "TaskbarMn" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Chat from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>16</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" /v "NoAutoUpdate" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Turn off Windows Update auto download</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>17</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-32752" new enable=Yes</CommandLine>
+ <Description>Enable Network Discovery</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>18</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-28502" new enable=Yes</CommandLine>
+ <Description>Enable File Sharing</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>19</Order>
+ <CommandLine>reg.exe add "HKCU\Control Panel\UnsupportedHardwareNotificationCache" /v SV1 /d 0 /t REG_DWORD /f</CommandLine>
+ <Description>Disable unsupported hardware notifications</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>20</Order>
+ <CommandLine>reg.exe add "HKCU\Control Panel\UnsupportedHardwareNotificationCache" /v SV2 /d 0 /t REG_DWORD /f</CommandLine>
+ <Description>Disable unsupported hardware notifications</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>21</Order>
+ <CommandLine>cmd /C if exist "C:\OEM\install.bat" start "Install" "cmd /C C:\OEM\install.bat"</CommandLine>
+ <Description>Execute custom script from the OEM folder if exists</Description>
+ </SynchronousCommand>
+ </FirstLogonCommands>
+ </component>
+ </settings>
+</unattend>

assets/win11x64-enterprise.xml

@@ -0,0 +1,450 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<unattend xmlns="urn:schemas-microsoft-com:unattend" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State">
+ <settings pass="windowsPE">
+ <component name="Microsoft-Windows-International-Core-WinPE" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SetupUILanguage>
+ <UILanguage>en-US</UILanguage>
+ </SetupUILanguage>
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DiskConfiguration>
+ <Disk wcm:action="add">
+ <DiskID>0</DiskID>
+ <WillWipeDisk>true</WillWipeDisk>
+ <CreatePartitions>
+ <!-- System partition (ESP) -->
+ <CreatePartition wcm:action="add">
+ <Order>1</Order>
+ <Type>EFI</Type>
+ <Size>128</Size>
+ </CreatePartition>
+ <!-- Microsoft reserved partition (MSR) -->
+ <CreatePartition wcm:action="add">
+ <Order>2</Order>
+ <Type>MSR</Type>
+ <Size>128</Size>
+ </CreatePartition>
+ <!-- Windows partition -->
+ <CreatePartition wcm:action="add">
+ <Order>3</Order>
+ <Type>Primary</Type>
+ <Extend>true</Extend>
+ </CreatePartition>
+ </CreatePartitions>
+ <ModifyPartitions>
+ <!-- System partition (ESP) -->
+ <ModifyPartition wcm:action="add">
+ <Order>1</Order>
+ <PartitionID>1</PartitionID>
+ <Label>System</Label>
+ <Format>FAT32</Format>
+ </ModifyPartition>
+ <!-- MSR partition does not need to be modified -->
+ <ModifyPartition wcm:action="add">
+ <Order>2</Order>
+ <PartitionID>2</PartitionID>
+ </ModifyPartition>
+ <!-- Windows partition -->
+ <ModifyPartition wcm:action="add">
+ <Order>3</Order>
+ <PartitionID>3</PartitionID>
+ <Label>Windows</Label>
+ <Letter>C</Letter>
+ <Format>NTFS</Format>
+ </ModifyPartition>
+ </ModifyPartitions>
+ </Disk>
+ </DiskConfiguration>
+ <ImageInstall>
+ <OSImage>
+ <InstallTo>
+ <DiskID>0</DiskID>
+ <PartitionID>3</PartitionID>
+ </InstallTo>
+ <InstallToAvailablePartition>false</InstallToAvailablePartition>
+ </OSImage>
+ </ImageInstall>
+ <DynamicUpdate>
+ <Enable>true</Enable>
+ <WillShowUI>Never</WillShowUI>
+ </DynamicUpdate>
+ <UpgradeData>
+ <Upgrade>false</Upgrade>
+ <WillShowUI>Never</WillShowUI>
+ </UpgradeData>
+ <UserData>
+ <AcceptEula>true</AcceptEula>
+ <FullName>Docker</FullName>
+ <Organization>Windows for Docker</Organization>
+ <ProductKey>
+ <Key>NPPR9-FWDCX-D2C8J-H872K-2YT43</Key>
+ </ProductKey>
+ </UserData>
+ <EnableFirewall>false</EnableFirewall>
+ <Diagnostics>
+ <OptIn>false</OptIn>
+ </Diagnostics>
+ <RunSynchronous>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>1</Order>
+ <Path>reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassTPMCheck /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>2</Order>
+ <Path>reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassSecureBootCheck /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>3</Order>
+ <Path>reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassRAMCheck /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>4</Order>
+ <Path>reg.exe add "HKLM\SYSTEM\Setup\MoSetup" /v AllowUpgradesWithUnsupportedTPMOrCPU /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ </RunSynchronous>
+ </component>
+ </settings>
+ <settings pass="offlineServicing">
+ <component name="Microsoft-Windows-LUA-Settings" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <EnableLUA>false</EnableLUA>
+ </component>
+ </settings>
+ <settings pass="generalize">
+ <component name="Microsoft-Windows-PnPSysprep" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <PersistAllDeviceInstalls>true</PersistAllDeviceInstalls>
+ </component>
+ <component name="Microsoft-Windows-Security-SPP" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipRearm>1</SkipRearm>
+ </component>
+ </settings>
+ <settings pass="specialize">
+ <component name="Microsoft-Windows-Security-SPP-UX" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipAutoActivation>true</SkipAutoActivation>
+ </component>
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <ComputerName>*</ComputerName>
+ <OEMInformation>
+ <Manufacturer>Dockur</Manufacturer>
+ <Model>Windows for Docker</Model>
+ <SupportHours>24/7</SupportHours>
+ <SupportPhone />
+ <SupportProvider>Dockur</SupportProvider>
+ <SupportURL>https://github.com/dockur/windows/issues</SupportURL>
+ </OEMInformation>
+ <OEMName>Windows for Docker</OEMName>
+ </component>
+ <component name="Microsoft-Windows-ErrorReportingCore" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableWER>1</DisableWER>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableAccelerators>true</DisableAccelerators>
+ <DisableFirstRunWizard>true</DisableFirstRunWizard>
+ <Home_Page>https://google.com</Home_Page>
+ <Help_Page>about:blank</Help_Page>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="wow64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableAccelerators>true</DisableAccelerators>
+ <DisableFirstRunWizard>true</DisableFirstRunWizard>
+ <Home_Page>https://google.com</Home_Page>
+ <Help_Page>about:blank</Help_Page>
+ </component>
+ <component name="Microsoft-Windows-SQMApi" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <CEIPEnabled>0</CEIPEnabled>
+ </component>
+ <component name="Microsoft-Windows-SystemRestore-Main" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableSR>1</DisableSR>
+ </component>
+ <component name="Microsoft-Windows-International-Core" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-Deployment" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <RunSynchronous>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>1</Order>
+ <Path>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OOBE" /v BypassNRO /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>2</Order>
+ <Path>reg.exe load "HKU\mount" "C:\Users\Default\NTUSER.DAT"</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>3</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "ContentDeliveryAllowed" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>4</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "FeatureManagementEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>5</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "OEMPreInstalledAppsEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>6</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "PreInstalledAppsEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>7</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "PreInstalledAppsEverEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>8</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SilentInstalledAppsEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>9</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SoftLandingEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>10</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContentEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>11</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-310093Enabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>12</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-338387Enabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>13</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-338388Enabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>14</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-338389Enabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>15</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-338393Enabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>16</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-353698Enabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>17</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SystemPaneSuggestionsEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>18</Order>
+ <Path>reg.exe add "HKU\mount\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableCloudOptimizedContent" /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>19</Order>
+ <Path>reg.exe add "HKU\mount\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableWindowsConsumerFeatures" /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>20</Order>
+ <Path>reg.exe add "HKU\mount\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableConsumerAccountStateContent" /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>21</Order>
+ <Path>reg.exe unload "HKU\mount"</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>22</Order>
+ <Path>reg.exe add "HKLM\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableCloudOptimizedContent" /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>23</Order>
+ <Path>reg.exe add "HKLM\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableWindowsConsumerFeatures" /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>24</Order>
+ <Path>reg.exe add "HKLM\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableConsumerAccountStateContent" /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>25</Order>
+ <Path>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\CurrentVersion\NetworkList\Signatures\FirstNetwork" /v Category /t REG_DWORD /d 1 /f</Path>
+ <Description>Set Network Location to Home</Description>
+ </RunSynchronousCommand>
+ </RunSynchronous>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-LocalSessionManager" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <fDenyTSConnections>false</fDenyTSConnections>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-RDP-WinStationExtensions" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAuthentication>0</UserAuthentication>
+ </component>
+ <component name="Networking-MPSSVC-Svc" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <FirewallGroups>
+ <FirewallGroup wcm:action="add" wcm:keyValue="RemoteDesktop">
+ <Active>true</Active>
+ <Profile>all</Profile>
+ <Group>@FirewallAPI.dll,-28752</Group>
+ </FirewallGroup>
+ </FirewallGroups>
+ </component>
+ </settings>
+ <settings pass="auditSystem" />
+ <settings pass="auditUser" />
+ <settings pass="oobeSystem">
+ <component name="Microsoft-Windows-SecureStartup-FilterDriver" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <PreventDeviceEncryption>true</PreventDeviceEncryption>
+ </component>
+ <component name="Microsoft-Windows-EnhancedStorage-Adm" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <TCGSecurityActivationDisabled>1</TCGSecurityActivationDisabled>
+ </component>
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAccounts>
+ <LocalAccounts>
+ <LocalAccount wcm:action="add">
+ <Name>Docker</Name>
+ <Group>Administrators</Group>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </LocalAccount>
+ </LocalAccounts>
+ <AdministratorPassword>
+ <Value>password</Value>
+ <PlainText>true</PlainText>
+ </AdministratorPassword>
+ </UserAccounts>
+ <AutoLogon>
+ <Username>Docker</Username>
+ <Enabled>true</Enabled>
+ <LogonCount>65432</LogonCount>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </AutoLogon>
+ <Display>
+ <ColorDepth>32</ColorDepth>
+ <HorizontalResolution>1920</HorizontalResolution>
+ <VerticalResolution>1080</VerticalResolution>
+ </Display>
+ <OOBE>
+ <HideEULAPage>true</HideEULAPage>
+ <HideLocalAccountScreen>true</HideLocalAccountScreen>
+ <HideOEMRegistrationScreen>true</HideOEMRegistrationScreen>
+ <HideOnlineAccountScreens>true</HideOnlineAccountScreens>
+ <HideWirelessSetupInOOBE>true</HideWirelessSetupInOOBE>
+ <NetworkLocation>Home</NetworkLocation>
+ <ProtectYourPC>3</ProtectYourPC>
+ <SkipUserOOBE>true</SkipUserOOBE>
+ <SkipMachineOOBE>true</SkipMachineOOBE>
+ </OOBE>
+ <RegisteredOrganization>Dockur</RegisteredOrganization>
+ <RegisteredOwner>Windows for Docker</RegisteredOwner>
+ <FirstLogonCommands>
+ <SynchronousCommand wcm:action="add">
+ <Order>1</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" /v "AllowInsecureGuestAuth" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Allow guest access to network shares</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>2</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" /v LimitBlankPasswordUse /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Allow RDP login with blank password</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>3</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PasswordLess\Device" /v "DevicePasswordLessBuildVersion" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Enable option for passwordless sign-in</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>4</Order>
+ <CommandLine>cmd /C wmic useraccount where name="Docker" set PasswordExpires=false</CommandLine>
+ <Description>Password Never Expires</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>5</Order>
+ <CommandLine>cmd /C POWERCFG -H OFF</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>6</Order>
+ <CommandLine>cmd /C POWERCFG -X -monitor-timeout-ac 0</CommandLine>
+ <Description>Disable monitor blanking</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>7</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Edge" /v "HideFirstRunExperience" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Disable first-run experience in Edge</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>8</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "HideFileExt" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Show file extensions in Explorer</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>9</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateFileSizePercent" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Zero Hibernation File</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>10</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateEnabled" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>11</Order>
+ <CommandLine>cmd /C POWERCFG -X -standby-timeout-ac 0</CommandLine>
+ <Description>Disable Sleep</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>12</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" /v "fAllowUnlistedRemotePrograms" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Enable RemoteAPP to launch unlisted programs</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>13</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "ShowTaskViewButton" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Task View from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>14</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "TaskbarDa" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Widgets from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>15</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "TaskbarMn" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Chat from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>16</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" /v "NoAutoUpdate" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Turn off Windows Update auto download</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>17</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-32752" new enable=Yes</CommandLine>
+ <Description>Enable Network Discovery</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>18</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-28502" new enable=Yes</CommandLine>
+ <Description>Enable File Sharing</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>19</Order>
+ <CommandLine>reg.exe add "HKCU\Control Panel\UnsupportedHardwareNotificationCache" /v SV1 /d 0 /t REG_DWORD /f</CommandLine>
+ <Description>Disable unsupported hardware notifications</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>20</Order>
+ <CommandLine>reg.exe add "HKCU\Control Panel\UnsupportedHardwareNotificationCache" /v SV2 /d 0 /t REG_DWORD /f</CommandLine>
+ <Description>Disable unsupported hardware notifications</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>21</Order>
+ <CommandLine>cmd /C if exist "C:\OEM\install.bat" start "Install" "cmd /C C:\OEM\install.bat"</CommandLine>
+ <Description>Execute custom script from the OEM folder if exists</Description>
+ </SynchronousCommand>
+ </FirstLogonCommands>
+ </component>
+ </settings>
+</unattend>

assets/win11x64-iot.xml

@@ -0,0 +1,456 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<unattend xmlns="urn:schemas-microsoft-com:unattend" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State">
+ <settings pass="windowsPE">
+ <component name="Microsoft-Windows-International-Core-WinPE" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SetupUILanguage>
+ <UILanguage>en-US</UILanguage>
+ </SetupUILanguage>
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DiskConfiguration>
+ <Disk wcm:action="add">
+ <DiskID>0</DiskID>
+ <WillWipeDisk>true</WillWipeDisk>
+ <CreatePartitions>
+ <!-- System partition (ESP) -->
+ <CreatePartition wcm:action="add">
+ <Order>1</Order>
+ <Type>EFI</Type>
+ <Size>128</Size>
+ </CreatePartition>
+ <!-- Microsoft reserved partition (MSR) -->
+ <CreatePartition wcm:action="add">
+ <Order>2</Order>
+ <Type>MSR</Type>
+ <Size>128</Size>
+ </CreatePartition>
+ <!-- Windows partition -->
+ <CreatePartition wcm:action="add">
+ <Order>3</Order>
+ <Type>Primary</Type>
+ <Extend>true</Extend>
+ </CreatePartition>
+ </CreatePartitions>
+ <ModifyPartitions>
+ <!-- System partition (ESP) -->
+ <ModifyPartition wcm:action="add">
+ <Order>1</Order>
+ <PartitionID>1</PartitionID>
+ <Label>System</Label>
+ <Format>FAT32</Format>
+ </ModifyPartition>
+ <!-- MSR partition does not need to be modified -->
+ <ModifyPartition wcm:action="add">
+ <Order>2</Order>
+ <PartitionID>2</PartitionID>
+ </ModifyPartition>
+ <!-- Windows partition -->
+ <ModifyPartition wcm:action="add">
+ <Order>3</Order>
+ <PartitionID>3</PartitionID>
+ <Label>Windows</Label>
+ <Letter>C</Letter>
+ <Format>NTFS</Format>
+ </ModifyPartition>
+ </ModifyPartitions>
+ </Disk>
+ </DiskConfiguration>
+ <ImageInstall>
+ <OSImage>
+ <InstallFrom>
+ <MetaData wcm:action="add">
+ <Key>/image/index</Key>
+ <Value>2</Value>
+ </MetaData>
+ </InstallFrom>
+ <InstallTo>
+ <DiskID>0</DiskID>
+ <PartitionID>3</PartitionID>
+ </InstallTo>
+ <InstallToAvailablePartition>false</InstallToAvailablePartition>
+ </OSImage>
+ </ImageInstall>
+ <DynamicUpdate>
+ <Enable>true</Enable>
+ <WillShowUI>Never</WillShowUI>
+ </DynamicUpdate>
+ <UpgradeData>
+ <Upgrade>false</Upgrade>
+ <WillShowUI>Never</WillShowUI>
+ </UpgradeData>
+ <UserData>
+ <AcceptEula>true</AcceptEula>
+ <FullName>Docker</FullName>
+ <Organization>Windows for Docker</Organization>
+ <ProductKey>
+ <Key />
+ </ProductKey>
+ </UserData>
+ <EnableFirewall>false</EnableFirewall>
+ <Diagnostics>
+ <OptIn>false</OptIn>
+ </Diagnostics>
+ <RunSynchronous>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>1</Order>
+ <Path>reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassTPMCheck /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>2</Order>
+ <Path>reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassSecureBootCheck /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>3</Order>
+ <Path>reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassRAMCheck /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>4</Order>
+ <Path>reg.exe add "HKLM\SYSTEM\Setup\MoSetup" /v AllowUpgradesWithUnsupportedTPMOrCPU /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ </RunSynchronous>
+ </component>
+ </settings>
+ <settings pass="offlineServicing">
+ <component name="Microsoft-Windows-LUA-Settings" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <EnableLUA>false</EnableLUA>
+ </component>
+ </settings>
+ <settings pass="generalize">
+ <component name="Microsoft-Windows-PnPSysprep" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <PersistAllDeviceInstalls>true</PersistAllDeviceInstalls>
+ </component>
+ <component name="Microsoft-Windows-Security-SPP" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipRearm>1</SkipRearm>
+ </component>
+ </settings>
+ <settings pass="specialize">
+ <component name="Microsoft-Windows-Security-SPP-UX" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipAutoActivation>true</SkipAutoActivation>
+ </component>
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <ComputerName>*</ComputerName>
+ <OEMInformation>
+ <Manufacturer>Dockur</Manufacturer>
+ <Model>Windows for Docker</Model>
+ <SupportHours>24/7</SupportHours>
+ <SupportPhone />
+ <SupportProvider>Dockur</SupportProvider>
+ <SupportURL>https://github.com/dockur/windows/issues</SupportURL>
+ </OEMInformation>
+ <OEMName>Windows for Docker</OEMName>
+ </component>
+ <component name="Microsoft-Windows-ErrorReportingCore" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableWER>1</DisableWER>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableAccelerators>true</DisableAccelerators>
+ <DisableFirstRunWizard>true</DisableFirstRunWizard>
+ <Home_Page>https://google.com</Home_Page>
+ <Help_Page>about:blank</Help_Page>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="wow64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableAccelerators>true</DisableAccelerators>
+ <DisableFirstRunWizard>true</DisableFirstRunWizard>
+ <Home_Page>https://google.com</Home_Page>
+ <Help_Page>about:blank</Help_Page>
+ </component>
+ <component name="Microsoft-Windows-SQMApi" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <CEIPEnabled>0</CEIPEnabled>
+ </component>
+ <component name="Microsoft-Windows-SystemRestore-Main" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableSR>1</DisableSR>
+ </component>
+ <component name="Microsoft-Windows-International-Core" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-Deployment" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <RunSynchronous>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>1</Order>
+ <Path>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OOBE" /v BypassNRO /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>2</Order>
+ <Path>reg.exe load "HKU\mount" "C:\Users\Default\NTUSER.DAT"</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>3</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "ContentDeliveryAllowed" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>4</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "FeatureManagementEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>5</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "OEMPreInstalledAppsEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>6</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "PreInstalledAppsEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>7</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "PreInstalledAppsEverEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>8</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SilentInstalledAppsEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>9</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SoftLandingEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>10</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContentEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>11</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-310093Enabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>12</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-338387Enabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>13</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-338388Enabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>14</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-338389Enabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>15</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-338393Enabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>16</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-353698Enabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>17</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SystemPaneSuggestionsEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>18</Order>
+ <Path>reg.exe add "HKU\mount\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableCloudOptimizedContent" /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>19</Order>
+ <Path>reg.exe add "HKU\mount\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableWindowsConsumerFeatures" /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>20</Order>
+ <Path>reg.exe add "HKU\mount\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableConsumerAccountStateContent" /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>21</Order>
+ <Path>reg.exe unload "HKU\mount"</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>22</Order>
+ <Path>reg.exe add "HKLM\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableCloudOptimizedContent" /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>23</Order>
+ <Path>reg.exe add "HKLM\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableWindowsConsumerFeatures" /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>24</Order>
+ <Path>reg.exe add "HKLM\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableConsumerAccountStateContent" /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>25</Order>
+ <Path>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\CurrentVersion\NetworkList\Signatures\FirstNetwork" /v Category /t REG_DWORD /d 1 /f</Path>
+ <Description>Set Network Location to Home</Description>
+ </RunSynchronousCommand>
+ </RunSynchronous>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-LocalSessionManager" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <fDenyTSConnections>false</fDenyTSConnections>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-RDP-WinStationExtensions" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAuthentication>0</UserAuthentication>
+ </component>
+ <component name="Networking-MPSSVC-Svc" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <FirewallGroups>
+ <FirewallGroup wcm:action="add" wcm:keyValue="RemoteDesktop">
+ <Active>true</Active>
+ <Profile>all</Profile>
+ <Group>@FirewallAPI.dll,-28752</Group>
+ </FirewallGroup>
+ </FirewallGroups>
+ </component>
+ </settings>
+ <settings pass="auditSystem" />
+ <settings pass="auditUser" />
+ <settings pass="oobeSystem">
+ <component name="Microsoft-Windows-SecureStartup-FilterDriver" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <PreventDeviceEncryption>true</PreventDeviceEncryption>
+ </component>
+ <component name="Microsoft-Windows-EnhancedStorage-Adm" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <TCGSecurityActivationDisabled>1</TCGSecurityActivationDisabled>
+ </component>
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAccounts>
+ <LocalAccounts>
+ <LocalAccount wcm:action="add">
+ <Name>Docker</Name>
+ <Group>Administrators</Group>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </LocalAccount>
+ </LocalAccounts>
+ <AdministratorPassword>
+ <Value>password</Value>
+ <PlainText>true</PlainText>
+ </AdministratorPassword>
+ </UserAccounts>
+ <AutoLogon>
+ <Username>Docker</Username>
+ <Enabled>true</Enabled>
+ <LogonCount>65432</LogonCount>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </AutoLogon>
+ <Display>
+ <ColorDepth>32</ColorDepth>
+ <HorizontalResolution>1920</HorizontalResolution>
+ <VerticalResolution>1080</VerticalResolution>
+ </Display>
+ <OOBE>
+ <HideEULAPage>true</HideEULAPage>
+ <HideLocalAccountScreen>true</HideLocalAccountScreen>
+ <HideOEMRegistrationScreen>true</HideOEMRegistrationScreen>
+ <HideOnlineAccountScreens>true</HideOnlineAccountScreens>
+ <HideWirelessSetupInOOBE>true</HideWirelessSetupInOOBE>
+ <NetworkLocation>Home</NetworkLocation>
+ <ProtectYourPC>3</ProtectYourPC>
+ <SkipUserOOBE>true</SkipUserOOBE>
+ <SkipMachineOOBE>true</SkipMachineOOBE>
+ </OOBE>
+ <RegisteredOrganization>Dockur</RegisteredOrganization>
+ <RegisteredOwner>Windows for Docker</RegisteredOwner>
+ <FirstLogonCommands>
+ <SynchronousCommand wcm:action="add">
+ <Order>1</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" /v "AllowInsecureGuestAuth" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Allow guest access to network shares</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>2</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" /v LimitBlankPasswordUse /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Allow RDP login with blank password</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>3</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PasswordLess\Device" /v "DevicePasswordLessBuildVersion" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Enable option for passwordless sign-in</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>4</Order>
+ <CommandLine>cmd /C wmic useraccount where name="Docker" set PasswordExpires=false</CommandLine>
+ <Description>Password Never Expires</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>5</Order>
+ <CommandLine>cmd /C POWERCFG -H OFF</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>6</Order>
+ <CommandLine>cmd /C POWERCFG -X -monitor-timeout-ac 0</CommandLine>
+ <Description>Disable monitor blanking</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>7</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Edge" /v "HideFirstRunExperience" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Disable first-run experience in Edge</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>8</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "HideFileExt" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Show file extensions in Explorer</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>9</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateFileSizePercent" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Zero Hibernation File</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>10</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateEnabled" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>11</Order>
+ <CommandLine>cmd /C POWERCFG -X -standby-timeout-ac 0</CommandLine>
+ <Description>Disable Sleep</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>12</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" /v "fAllowUnlistedRemotePrograms" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Enable RemoteAPP to launch unlisted programs</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>13</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "ShowTaskViewButton" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Task View from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>14</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "TaskbarDa" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Widgets from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>15</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "TaskbarMn" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Chat from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>16</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" /v "NoAutoUpdate" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Turn off Windows Update auto download</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>17</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-32752" new enable=Yes</CommandLine>
+ <Description>Enable Network Discovery</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>18</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-28502" new enable=Yes</CommandLine>
+ <Description>Enable File Sharing</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>19</Order>
+ <CommandLine>reg.exe add "HKCU\Control Panel\UnsupportedHardwareNotificationCache" /v SV1 /d 0 /t REG_DWORD /f</CommandLine>
+ <Description>Disable unsupported hardware notifications</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>20</Order>
+ <CommandLine>reg.exe add "HKCU\Control Panel\UnsupportedHardwareNotificationCache" /v SV2 /d 0 /t REG_DWORD /f</CommandLine>
+ <Description>Disable unsupported hardware notifications</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>21</Order>
+ <CommandLine>cmd /C if exist "C:\OEM\install.bat" start "Install" "cmd /C C:\OEM\install.bat"</CommandLine>
+ <Description>Execute custom script from the OEM folder if exists</Description>
+ </SynchronousCommand>
+ </FirstLogonCommands>
+ </component>
+ </settings>
+</unattend>

assets/win11x64-ltsc.xml

@@ -0,0 +1,456 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<unattend xmlns="urn:schemas-microsoft-com:unattend" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State">
+ <settings pass="windowsPE">
+ <component name="Microsoft-Windows-International-Core-WinPE" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SetupUILanguage>
+ <UILanguage>en-US</UILanguage>
+ </SetupUILanguage>
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DiskConfiguration>
+ <Disk wcm:action="add">
+ <DiskID>0</DiskID>
+ <WillWipeDisk>true</WillWipeDisk>
+ <CreatePartitions>
+ <!-- System partition (ESP) -->
+ <CreatePartition wcm:action="add">
+ <Order>1</Order>
+ <Type>EFI</Type>
+ <Size>128</Size>
+ </CreatePartition>
+ <!-- Microsoft reserved partition (MSR) -->
+ <CreatePartition wcm:action="add">
+ <Order>2</Order>
+ <Type>MSR</Type>
+ <Size>128</Size>
+ </CreatePartition>
+ <!-- Windows partition -->
+ <CreatePartition wcm:action="add">
+ <Order>3</Order>
+ <Type>Primary</Type>
+ <Extend>true</Extend>
+ </CreatePartition>
+ </CreatePartitions>
+ <ModifyPartitions>
+ <!-- System partition (ESP) -->
+ <ModifyPartition wcm:action="add">
+ <Order>1</Order>
+ <PartitionID>1</PartitionID>
+ <Label>System</Label>
+ <Format>FAT32</Format>
+ </ModifyPartition>
+ <!-- MSR partition does not need to be modified -->
+ <ModifyPartition wcm:action="add">
+ <Order>2</Order>
+ <PartitionID>2</PartitionID>
+ </ModifyPartition>
+ <!-- Windows partition -->
+ <ModifyPartition wcm:action="add">
+ <Order>3</Order>
+ <PartitionID>3</PartitionID>
+ <Label>Windows</Label>
+ <Letter>C</Letter>
+ <Format>NTFS</Format>
+ </ModifyPartition>
+ </ModifyPartitions>
+ </Disk>
+ </DiskConfiguration>
+ <ImageInstall>
+ <OSImage>
+ <InstallFrom>
+ <MetaData wcm:action="add">
+ <Key>/image/index</Key>
+ <Value>1</Value>
+ </MetaData>
+ </InstallFrom>
+ <InstallTo>
+ <DiskID>0</DiskID>
+ <PartitionID>3</PartitionID>
+ </InstallTo>
+ <InstallToAvailablePartition>false</InstallToAvailablePartition>
+ </OSImage>
+ </ImageInstall>
+ <DynamicUpdate>
+ <Enable>true</Enable>
+ <WillShowUI>Never</WillShowUI>
+ </DynamicUpdate>
+ <UpgradeData>
+ <Upgrade>false</Upgrade>
+ <WillShowUI>Never</WillShowUI>
+ </UpgradeData>
+ <UserData>
+ <AcceptEula>true</AcceptEula>
+ <FullName>Docker</FullName>
+ <Organization>Windows for Docker</Organization>
+ <ProductKey>
+ <Key />
+ </ProductKey>
+ </UserData>
+ <EnableFirewall>false</EnableFirewall>
+ <Diagnostics>
+ <OptIn>false</OptIn>
+ </Diagnostics>
+ <RunSynchronous>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>1</Order>
+ <Path>reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassTPMCheck /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>2</Order>
+ <Path>reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassSecureBootCheck /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>3</Order>
+ <Path>reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassRAMCheck /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>4</Order>
+ <Path>reg.exe add "HKLM\SYSTEM\Setup\MoSetup" /v AllowUpgradesWithUnsupportedTPMOrCPU /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ </RunSynchronous>
+ </component>
+ </settings>
+ <settings pass="offlineServicing">
+ <component name="Microsoft-Windows-LUA-Settings" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <EnableLUA>false</EnableLUA>
+ </component>
+ </settings>
+ <settings pass="generalize">
+ <component name="Microsoft-Windows-PnPSysprep" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <PersistAllDeviceInstalls>true</PersistAllDeviceInstalls>
+ </component>
+ <component name="Microsoft-Windows-Security-SPP" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipRearm>1</SkipRearm>
+ </component>
+ </settings>
+ <settings pass="specialize">
+ <component name="Microsoft-Windows-Security-SPP-UX" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipAutoActivation>true</SkipAutoActivation>
+ </component>
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <ComputerName>*</ComputerName>
+ <OEMInformation>
+ <Manufacturer>Dockur</Manufacturer>
+ <Model>Windows for Docker</Model>
+ <SupportHours>24/7</SupportHours>
+ <SupportPhone />
+ <SupportProvider>Dockur</SupportProvider>
+ <SupportURL>https://github.com/dockur/windows/issues</SupportURL>
+ </OEMInformation>
+ <OEMName>Windows for Docker</OEMName>
+ </component>
+ <component name="Microsoft-Windows-ErrorReportingCore" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableWER>1</DisableWER>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableAccelerators>true</DisableAccelerators>
+ <DisableFirstRunWizard>true</DisableFirstRunWizard>
+ <Home_Page>https://google.com</Home_Page>
+ <Help_Page>about:blank</Help_Page>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="wow64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableAccelerators>true</DisableAccelerators>
+ <DisableFirstRunWizard>true</DisableFirstRunWizard>
+ <Home_Page>https://google.com</Home_Page>
+ <Help_Page>about:blank</Help_Page>
+ </component>
+ <component name="Microsoft-Windows-SQMApi" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <CEIPEnabled>0</CEIPEnabled>
+ </component>
+ <component name="Microsoft-Windows-SystemRestore-Main" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableSR>1</DisableSR>
+ </component>
+ <component name="Microsoft-Windows-International-Core" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-Deployment" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <RunSynchronous>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>1</Order>
+ <Path>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OOBE" /v BypassNRO /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>2</Order>
+ <Path>reg.exe load "HKU\mount" "C:\Users\Default\NTUSER.DAT"</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>3</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "ContentDeliveryAllowed" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>4</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "FeatureManagementEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>5</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "OEMPreInstalledAppsEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>6</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "PreInstalledAppsEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>7</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "PreInstalledAppsEverEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>8</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SilentInstalledAppsEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>9</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SoftLandingEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>10</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContentEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>11</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-310093Enabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>12</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-338387Enabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>13</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-338388Enabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>14</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-338389Enabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>15</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-338393Enabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>16</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-353698Enabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>17</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SystemPaneSuggestionsEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>18</Order>
+ <Path>reg.exe add "HKU\mount\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableCloudOptimizedContent" /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>19</Order>
+ <Path>reg.exe add "HKU\mount\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableWindowsConsumerFeatures" /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>20</Order>
+ <Path>reg.exe add "HKU\mount\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableConsumerAccountStateContent" /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>21</Order>
+ <Path>reg.exe unload "HKU\mount"</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>22</Order>
+ <Path>reg.exe add "HKLM\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableCloudOptimizedContent" /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>23</Order>
+ <Path>reg.exe add "HKLM\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableWindowsConsumerFeatures" /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>24</Order>
+ <Path>reg.exe add "HKLM\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableConsumerAccountStateContent" /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>25</Order>
+ <Path>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\CurrentVersion\NetworkList\Signatures\FirstNetwork" /v Category /t REG_DWORD /d 1 /f</Path>
+ <Description>Set Network Location to Home</Description>
+ </RunSynchronousCommand>
+ </RunSynchronous>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-LocalSessionManager" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <fDenyTSConnections>false</fDenyTSConnections>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-RDP-WinStationExtensions" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAuthentication>0</UserAuthentication>
+ </component>
+ <component name="Networking-MPSSVC-Svc" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <FirewallGroups>
+ <FirewallGroup wcm:action="add" wcm:keyValue="RemoteDesktop">
+ <Active>true</Active>
+ <Profile>all</Profile>
+ <Group>@FirewallAPI.dll,-28752</Group>
+ </FirewallGroup>
+ </FirewallGroups>
+ </component>
+ </settings>
+ <settings pass="auditSystem" />
+ <settings pass="auditUser" />
+ <settings pass="oobeSystem">
+ <component name="Microsoft-Windows-SecureStartup-FilterDriver" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <PreventDeviceEncryption>true</PreventDeviceEncryption>
+ </component>
+ <component name="Microsoft-Windows-EnhancedStorage-Adm" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <TCGSecurityActivationDisabled>1</TCGSecurityActivationDisabled>
+ </component>
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAccounts>
+ <LocalAccounts>
+ <LocalAccount wcm:action="add">
+ <Name>Docker</Name>
+ <Group>Administrators</Group>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </LocalAccount>
+ </LocalAccounts>
+ <AdministratorPassword>
+ <Value>password</Value>
+ <PlainText>true</PlainText>
+ </AdministratorPassword>
+ </UserAccounts>
+ <AutoLogon>
+ <Username>Docker</Username>
+ <Enabled>true</Enabled>
+ <LogonCount>65432</LogonCount>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </AutoLogon>
+ <Display>
+ <ColorDepth>32</ColorDepth>
+ <HorizontalResolution>1920</HorizontalResolution>
+ <VerticalResolution>1080</VerticalResolution>
+ </Display>
+ <OOBE>
+ <HideEULAPage>true</HideEULAPage>
+ <HideLocalAccountScreen>true</HideLocalAccountScreen>
+ <HideOEMRegistrationScreen>true</HideOEMRegistrationScreen>
+ <HideOnlineAccountScreens>true</HideOnlineAccountScreens>
+ <HideWirelessSetupInOOBE>true</HideWirelessSetupInOOBE>
+ <NetworkLocation>Home</NetworkLocation>
+ <ProtectYourPC>3</ProtectYourPC>
+ <SkipUserOOBE>true</SkipUserOOBE>
+ <SkipMachineOOBE>true</SkipMachineOOBE>
+ </OOBE>
+ <RegisteredOrganization>Dockur</RegisteredOrganization>
+ <RegisteredOwner>Windows for Docker</RegisteredOwner>
+ <FirstLogonCommands>
+ <SynchronousCommand wcm:action="add">
+ <Order>1</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" /v "AllowInsecureGuestAuth" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Allow guest access to network shares</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>2</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" /v LimitBlankPasswordUse /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Allow RDP login with blank password</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>3</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PasswordLess\Device" /v "DevicePasswordLessBuildVersion" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Enable option for passwordless sign-in</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>4</Order>
+ <CommandLine>cmd /C wmic useraccount where name="Docker" set PasswordExpires=false</CommandLine>
+ <Description>Password Never Expires</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>5</Order>
+ <CommandLine>cmd /C POWERCFG -H OFF</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>6</Order>
+ <CommandLine>cmd /C POWERCFG -X -monitor-timeout-ac 0</CommandLine>
+ <Description>Disable monitor blanking</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>7</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Edge" /v "HideFirstRunExperience" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Disable first-run experience in Edge</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>8</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "HideFileExt" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Show file extensions in Explorer</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>9</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateFileSizePercent" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Zero Hibernation File</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>10</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateEnabled" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>11</Order>
+ <CommandLine>cmd /C POWERCFG -X -standby-timeout-ac 0</CommandLine>
+ <Description>Disable Sleep</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>12</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" /v "fAllowUnlistedRemotePrograms" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Enable RemoteAPP to launch unlisted programs</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>13</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "ShowTaskViewButton" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Task View from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>14</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "TaskbarDa" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Widgets from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>15</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "TaskbarMn" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Chat from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>16</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" /v "NoAutoUpdate" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Turn off Windows Update auto download</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>17</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-32752" new enable=Yes</CommandLine>
+ <Description>Enable Network Discovery</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>18</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-28502" new enable=Yes</CommandLine>
+ <Description>Enable File Sharing</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>19</Order>
+ <CommandLine>reg.exe add "HKCU\Control Panel\UnsupportedHardwareNotificationCache" /v SV1 /d 0 /t REG_DWORD /f</CommandLine>
+ <Description>Disable unsupported hardware notifications</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>20</Order>
+ <CommandLine>reg.exe add "HKCU\Control Panel\UnsupportedHardwareNotificationCache" /v SV2 /d 0 /t REG_DWORD /f</CommandLine>
+ <Description>Disable unsupported hardware notifications</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>21</Order>
+ <CommandLine>cmd /C if exist "C:\OEM\install.bat" start "Install" "cmd /C C:\OEM\install.bat"</CommandLine>
+ <Description>Execute custom script from the OEM folder if exists</Description>
+ </SynchronousCommand>
+ </FirstLogonCommands>
+ </component>
+ </settings>
+</unattend>

assets/win11x64.xml

@@ -0,0 +1,450 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<unattend xmlns="urn:schemas-microsoft-com:unattend" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State">
+ <settings pass="windowsPE">
+ <component name="Microsoft-Windows-International-Core-WinPE" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SetupUILanguage>
+ <UILanguage>en-US</UILanguage>
+ </SetupUILanguage>
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DiskConfiguration>
+ <Disk wcm:action="add">
+ <DiskID>0</DiskID>
+ <WillWipeDisk>true</WillWipeDisk>
+ <CreatePartitions>
+ <!-- System partition (ESP) -->
+ <CreatePartition wcm:action="add">
+ <Order>1</Order>
+ <Type>EFI</Type>
+ <Size>128</Size>
+ </CreatePartition>
+ <!-- Microsoft reserved partition (MSR) -->
+ <CreatePartition wcm:action="add">
+ <Order>2</Order>
+ <Type>MSR</Type>
+ <Size>128</Size>
+ </CreatePartition>
+ <!-- Windows partition -->
+ <CreatePartition wcm:action="add">
+ <Order>3</Order>
+ <Type>Primary</Type>
+ <Extend>true</Extend>
+ </CreatePartition>
+ </CreatePartitions>
+ <ModifyPartitions>
+ <!-- System partition (ESP) -->
+ <ModifyPartition wcm:action="add">
+ <Order>1</Order>
+ <PartitionID>1</PartitionID>
+ <Label>System</Label>
+ <Format>FAT32</Format>
+ </ModifyPartition>
+ <!-- MSR partition does not need to be modified -->
+ <ModifyPartition wcm:action="add">
+ <Order>2</Order>
+ <PartitionID>2</PartitionID>
+ </ModifyPartition>
+ <!-- Windows partition -->
+ <ModifyPartition wcm:action="add">
+ <Order>3</Order>
+ <PartitionID>3</PartitionID>
+ <Label>Windows</Label>
+ <Letter>C</Letter>
+ <Format>NTFS</Format>
+ </ModifyPartition>
+ </ModifyPartitions>
+ </Disk>
+ </DiskConfiguration>
+ <ImageInstall>
+ <OSImage>
+ <InstallTo>
+ <DiskID>0</DiskID>
+ <PartitionID>3</PartitionID>
+ </InstallTo>
+ <InstallToAvailablePartition>false</InstallToAvailablePartition>
+ </OSImage>
+ </ImageInstall>
+ <DynamicUpdate>
+ <Enable>true</Enable>
+ <WillShowUI>Never</WillShowUI>
+ </DynamicUpdate>
+ <UpgradeData>
+ <Upgrade>false</Upgrade>
+ <WillShowUI>Never</WillShowUI>
+ </UpgradeData>
+ <UserData>
+ <AcceptEula>true</AcceptEula>
+ <FullName>Docker</FullName>
+ <Organization>Windows for Docker</Organization>
+ <ProductKey>
+ <Key>VK7JG-NPHTM-C97JM-9MPGT-3V66T</Key>
+ </ProductKey>
+ </UserData>
+ <EnableFirewall>false</EnableFirewall>
+ <Diagnostics>
+ <OptIn>false</OptIn>
+ </Diagnostics>
+ <RunSynchronous>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>1</Order>
+ <Path>reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassTPMCheck /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>2</Order>
+ <Path>reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassSecureBootCheck /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>3</Order>
+ <Path>reg.exe add "HKLM\SYSTEM\Setup\LabConfig" /v BypassRAMCheck /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>4</Order>
+ <Path>reg.exe add "HKLM\SYSTEM\Setup\MoSetup" /v AllowUpgradesWithUnsupportedTPMOrCPU /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ </RunSynchronous>
+ </component>
+ </settings>
+ <settings pass="offlineServicing">
+ <component name="Microsoft-Windows-LUA-Settings" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <EnableLUA>false</EnableLUA>
+ </component>
+ </settings>
+ <settings pass="generalize">
+ <component name="Microsoft-Windows-PnPSysprep" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <PersistAllDeviceInstalls>true</PersistAllDeviceInstalls>
+ </component>
+ <component name="Microsoft-Windows-Security-SPP" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipRearm>1</SkipRearm>
+ </component>
+ </settings>
+ <settings pass="specialize">
+ <component name="Microsoft-Windows-Security-SPP-UX" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipAutoActivation>true</SkipAutoActivation>
+ </component>
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <ComputerName>*</ComputerName>
+ <OEMInformation>
+ <Manufacturer>Dockur</Manufacturer>
+ <Model>Windows for Docker</Model>
+ <SupportHours>24/7</SupportHours>
+ <SupportPhone />
+ <SupportProvider>Dockur</SupportProvider>
+ <SupportURL>https://github.com/dockur/windows/issues</SupportURL>
+ </OEMInformation>
+ <OEMName>Windows for Docker</OEMName>
+ </component>
+ <component name="Microsoft-Windows-ErrorReportingCore" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableWER>1</DisableWER>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableAccelerators>true</DisableAccelerators>
+ <DisableFirstRunWizard>true</DisableFirstRunWizard>
+ <Home_Page>https://google.com</Home_Page>
+ <Help_Page>about:blank</Help_Page>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="wow64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableAccelerators>true</DisableAccelerators>
+ <DisableFirstRunWizard>true</DisableFirstRunWizard>
+ <Home_Page>https://google.com</Home_Page>
+ <Help_Page>about:blank</Help_Page>
+ </component>
+ <component name="Microsoft-Windows-SQMApi" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <CEIPEnabled>0</CEIPEnabled>
+ </component>
+ <component name="Microsoft-Windows-SystemRestore-Main" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableSR>1</DisableSR>
+ </component>
+ <component name="Microsoft-Windows-International-Core" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-Deployment" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <RunSynchronous>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>1</Order>
+ <Path>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OOBE" /v BypassNRO /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>2</Order>
+ <Path>reg.exe load "HKU\mount" "C:\Users\Default\NTUSER.DAT"</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>3</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "ContentDeliveryAllowed" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>4</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "FeatureManagementEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>5</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "OEMPreInstalledAppsEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>6</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "PreInstalledAppsEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>7</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "PreInstalledAppsEverEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>8</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SilentInstalledAppsEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>9</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SoftLandingEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>10</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContentEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>11</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-310093Enabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>12</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-338387Enabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>13</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-338388Enabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>14</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-338389Enabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>15</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-338393Enabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>16</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SubscribedContent-353698Enabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>17</Order>
+ <Path>reg.exe add "HKU\mount\Software\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v "SystemPaneSuggestionsEnabled" /t REG_DWORD /d 0 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>18</Order>
+ <Path>reg.exe add "HKU\mount\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableCloudOptimizedContent" /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>19</Order>
+ <Path>reg.exe add "HKU\mount\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableWindowsConsumerFeatures" /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>20</Order>
+ <Path>reg.exe add "HKU\mount\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableConsumerAccountStateContent" /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>21</Order>
+ <Path>reg.exe unload "HKU\mount"</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>22</Order>
+ <Path>reg.exe add "HKLM\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableCloudOptimizedContent" /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>23</Order>
+ <Path>reg.exe add "HKLM\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableWindowsConsumerFeatures" /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>24</Order>
+ <Path>reg.exe add "HKLM\Software\Policies\Microsoft\Windows\CloudContent" /v "DisableConsumerAccountStateContent" /t REG_DWORD /d 1 /f</Path>
+ </RunSynchronousCommand>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>25</Order>
+ <Path>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\CurrentVersion\NetworkList\Signatures\FirstNetwork" /v Category /t REG_DWORD /d 1 /f</Path>
+ <Description>Set Network Location to Home</Description>
+ </RunSynchronousCommand>
+ </RunSynchronous>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-LocalSessionManager" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <fDenyTSConnections>false</fDenyTSConnections>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-RDP-WinStationExtensions" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAuthentication>0</UserAuthentication>
+ </component>
+ <component name="Networking-MPSSVC-Svc" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <FirewallGroups>
+ <FirewallGroup wcm:action="add" wcm:keyValue="RemoteDesktop">
+ <Active>true</Active>
+ <Profile>all</Profile>
+ <Group>@FirewallAPI.dll,-28752</Group>
+ </FirewallGroup>
+ </FirewallGroups>
+ </component>
+ </settings>
+ <settings pass="auditSystem" />
+ <settings pass="auditUser" />
+ <settings pass="oobeSystem">
+ <component name="Microsoft-Windows-SecureStartup-FilterDriver" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <PreventDeviceEncryption>true</PreventDeviceEncryption>
+ </component>
+ <component name="Microsoft-Windows-EnhancedStorage-Adm" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <TCGSecurityActivationDisabled>1</TCGSecurityActivationDisabled>
+ </component>
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAccounts>
+ <LocalAccounts>
+ <LocalAccount wcm:action="add">
+ <Name>Docker</Name>
+ <Group>Administrators</Group>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </LocalAccount>
+ </LocalAccounts>
+ <AdministratorPassword>
+ <Value>password</Value>
+ <PlainText>true</PlainText>
+ </AdministratorPassword>
+ </UserAccounts>
+ <AutoLogon>
+ <Username>Docker</Username>
+ <Enabled>true</Enabled>
+ <LogonCount>65432</LogonCount>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </AutoLogon>
+ <Display>
+ <ColorDepth>32</ColorDepth>
+ <HorizontalResolution>1920</HorizontalResolution>
+ <VerticalResolution>1080</VerticalResolution>
+ </Display>
+ <OOBE>
+ <HideEULAPage>true</HideEULAPage>
+ <HideLocalAccountScreen>true</HideLocalAccountScreen>
+ <HideOEMRegistrationScreen>true</HideOEMRegistrationScreen>
+ <HideOnlineAccountScreens>true</HideOnlineAccountScreens>
+ <HideWirelessSetupInOOBE>true</HideWirelessSetupInOOBE>
+ <NetworkLocation>Home</NetworkLocation>
+ <ProtectYourPC>3</ProtectYourPC>
+ <SkipUserOOBE>true</SkipUserOOBE>
+ <SkipMachineOOBE>true</SkipMachineOOBE>
+ </OOBE>
+ <RegisteredOrganization>Dockur</RegisteredOrganization>
+ <RegisteredOwner>Windows for Docker</RegisteredOwner>
+ <FirstLogonCommands>
+ <SynchronousCommand wcm:action="add">
+ <Order>1</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" /v "AllowInsecureGuestAuth" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Allow guest access to network shares</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>2</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" /v LimitBlankPasswordUse /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Allow RDP login with blank password</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>3</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PasswordLess\Device" /v "DevicePasswordLessBuildVersion" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Enable option for passwordless sign-in</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>4</Order>
+ <CommandLine>cmd /C wmic useraccount where name="Docker" set PasswordExpires=false</CommandLine>
+ <Description>Password Never Expires</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>5</Order>
+ <CommandLine>cmd /C POWERCFG -H OFF</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>6</Order>
+ <CommandLine>cmd /C POWERCFG -X -monitor-timeout-ac 0</CommandLine>
+ <Description>Disable monitor blanking</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>7</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Edge" /v "HideFirstRunExperience" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Disable first-run experience in Edge</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>8</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "HideFileExt" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Show file extensions in Explorer</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>9</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateFileSizePercent" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Zero Hibernation File</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>10</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateEnabled" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>11</Order>
+ <CommandLine>cmd /C POWERCFG -X -standby-timeout-ac 0</CommandLine>
+ <Description>Disable Sleep</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>12</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" /v "fAllowUnlistedRemotePrograms" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Enable RemoteAPP to launch unlisted programs</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>13</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "ShowTaskViewButton" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Task View from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>14</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "TaskbarDa" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Widgets from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>15</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "TaskbarMn" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Chat from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>16</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" /v "NoAutoUpdate" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Turn off Windows Update auto download</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>17</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-32752" new enable=Yes</CommandLine>
+ <Description>Enable Network Discovery</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>18</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-28502" new enable=Yes</CommandLine>
+ <Description>Enable File Sharing</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>19</Order>
+ <CommandLine>reg.exe add "HKCU\Control Panel\UnsupportedHardwareNotificationCache" /v SV1 /d 0 /t REG_DWORD /f</CommandLine>
+ <Description>Disable unsupported hardware notifications</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>20</Order>
+ <CommandLine>reg.exe add "HKCU\Control Panel\UnsupportedHardwareNotificationCache" /v SV2 /d 0 /t REG_DWORD /f</CommandLine>
+ <Description>Disable unsupported hardware notifications</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>21</Order>
+ <CommandLine>cmd /C if exist "C:\OEM\install.bat" start "Install" "cmd /C C:\OEM\install.bat"</CommandLine>
+ <Description>Execute custom script from the OEM folder if exists</Description>
+ </SynchronousCommand>
+ </FirstLogonCommands>
+ </component>
+ </settings>
+</unattend>

assets/win2008r2-eval.xml

@@ -0,0 +1,299 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<unattend xmlns="urn:schemas-microsoft-com:unattend" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State">
+ <settings pass="windowsPE">
+ <component name="Microsoft-Windows-International-Core-WinPE" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SetupUILanguage>
+ <UILanguage>en-US</UILanguage>
+ </SetupUILanguage>
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DiskConfiguration>
+ <WillShowUI>OnError</WillShowUI>
+ <Disk wcm:action="add">
+ <DiskID>0</DiskID>
+ <WillWipeDisk>true</WillWipeDisk>
+ <CreatePartitions>
+ <CreatePartition wcm:action="add">
+ <Order>1</Order>
+ <Type>Primary</Type>
+ <Size>100</Size>
+ </CreatePartition>
+ <CreatePartition wcm:action="add">
+ <Order>2</Order>
+ <Type>Primary</Type>
+ <Extend>true</Extend>
+ </CreatePartition>
+ </CreatePartitions>
+ <ModifyPartitions>
+ <ModifyPartition wcm:action="add">
+ <Format>NTFS</Format>
+ <Label>System Reserved</Label>
+ <Order>1</Order>
+ <Active>true</Active>
+ <PartitionID>1</PartitionID>
+ <TypeID>0x27</TypeID>
+ </ModifyPartition>
+ <ModifyPartition wcm:action="add">
+ <Active>true</Active>
+ <Format>NTFS</Format>
+ <Label>Windows</Label>
+ <Letter>C</Letter>
+ <Order>2</Order>
+ <PartitionID>2</PartitionID>
+ </ModifyPartition>
+ </ModifyPartitions>
+ </Disk>
+ </DiskConfiguration>
+ <ImageInstall>
+ <OSImage>
+ <InstallFrom>
+ <MetaData wcm:action="add">
+ <Value>1</Value>
+ <Key>/IMAGE/INDEX</Key>
+ </MetaData>
+ </InstallFrom>
+ <InstallTo>
+ <DiskID>0</DiskID>
+ <PartitionID>2</PartitionID>
+ </InstallTo>
+ <InstallToAvailablePartition>false</InstallToAvailablePartition>
+ </OSImage>
+ </ImageInstall>
+ <DynamicUpdate>
+ <Enable>true</Enable>
+ <WillShowUI>Never</WillShowUI>
+ </DynamicUpdate>
+ <UpgradeData>
+ <Upgrade>false</Upgrade>
+ <WillShowUI>Never</WillShowUI>
+ </UpgradeData>
+ <UserData>
+ <AcceptEula>true</AcceptEula>
+ <FullName>Docker</FullName>
+ <Organization>Windows for Docker</Organization>
+ </UserData>
+ <EnableFirewall>false</EnableFirewall>
+ <Diagnostics>
+ <OptIn>false</OptIn>
+ </Diagnostics>
+ </component>
+ </settings>
+ <settings pass="offlineServicing">
+ <component name="Microsoft-Windows-LUA-Settings" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <EnableLUA>false</EnableLUA>
+ </component>
+ </settings>
+ <settings pass="generalize">
+ <component name="Microsoft-Windows-PnPSysprep" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <PersistAllDeviceInstalls>true</PersistAllDeviceInstalls>
+ </component>
+ <component name="Microsoft-Windows-Security-SPP" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipRearm>1</SkipRearm>
+ </component>
+ </settings>
+ <settings pass="specialize">
+ <component name="Microsoft-Windows-Security-SPP-UX" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipAutoActivation>true</SkipAutoActivation>
+ </component>
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <ComputerName>*</ComputerName>
+ <OEMInformation>
+ <Manufacturer>Dockur</Manufacturer>
+ <Model>Windows for Docker</Model>
+ </OEMInformation>
+ </component>
+ <component name="Microsoft-Windows-ErrorReportingCore" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableWER>1</DisableWER>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableAccelerators>true</DisableAccelerators>
+ <DisableFirstRunWizard>true</DisableFirstRunWizard>
+ <Home_Page>https://google.com</Home_Page>
+ <Help_Page>about:blank</Help_Page>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="wow64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableAccelerators>true</DisableAccelerators>
+ <DisableFirstRunWizard>true</DisableFirstRunWizard>
+ <Home_Page>https://google.com</Home_Page>
+ <Help_Page>about:blank</Help_Page>
+ </component>
+ <component name="Microsoft-Windows-SQMApi" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <CEIPEnabled>0</CEIPEnabled>
+ </component>
+ <component name="Microsoft-Windows-SystemRestore-Main" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableSR>1</DisableSR>
+ </component>
+ <component name="Microsoft-Windows-International-Core" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-ServerManager-SvrMgrNc" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DoNotOpenServerManagerAtLogon>true</DoNotOpenServerManagerAtLogon>
+ </component>
+ <component name="Microsoft-Windows-OutOfBoxExperience" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DoNotOpenInitialConfigurationTasksAtLogon>true</DoNotOpenInitialConfigurationTasksAtLogon>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-LocalSessionManager" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <fDenyTSConnections>false</fDenyTSConnections>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-RDP-WinStationExtensions" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAuthentication>0</UserAuthentication>
+ </component>
+ <component name="Networking-MPSSVC-Svc" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <FirewallGroups>
+ <FirewallGroup wcm:action="add" wcm:keyValue="RemoteDesktop">
+ <Active>true</Active>
+ <Profile>all</Profile>
+ <Group>@FirewallAPI.dll,-28752</Group>
+ </FirewallGroup>
+ </FirewallGroups>
+ </component>
+ </settings>
+ <settings pass="oobeSystem">
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAccounts>
+ <LocalAccounts>
+ <LocalAccount wcm:action="add">
+ <Name>Docker</Name>
+ <Group>Administrators</Group>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </LocalAccount>
+ </LocalAccounts>
+ <AdministratorPassword>
+ <Value>password</Value>
+ <PlainText>true</PlainText>
+ </AdministratorPassword>
+ </UserAccounts>
+ <AutoLogon>
+ <Username>Docker</Username>
+ <Enabled>true</Enabled>
+ <LogonCount>65432</LogonCount>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </AutoLogon>
+ <Display>
+ <ColorDepth>32</ColorDepth>
+ <HorizontalResolution>1920</HorizontalResolution>
+ <VerticalResolution>1080</VerticalResolution>
+ </Display>
+ <OOBE>
+ <HideEULAPage>true</HideEULAPage>
+ <HideWirelessSetupInOOBE>true</HideWirelessSetupInOOBE>
+ <NetworkLocation>Home</NetworkLocation>
+ <ProtectYourPC>3</ProtectYourPC>
+ <SkipUserOOBE>true</SkipUserOOBE>
+ <SkipMachineOOBE>true</SkipMachineOOBE>
+ </OOBE>
+ <RegisteredOrganization>Dockur</RegisteredOrganization>
+ <RegisteredOwner>Windows for Docker</RegisteredOwner>
+ <FirstLogonCommands>
+ <SynchronousCommand wcm:action="add">
+ <Order>1</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" /v "AllowInsecureGuestAuth" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Allow guest access to network shares</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>2</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" /v LimitBlankPasswordUse /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Allow RDP login with blank password</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>3</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PasswordLess\Device" /v "DevicePasswordLessBuildVersion" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Enable option for passwordless sign-in</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>4</Order>
+ <CommandLine>cmd /C wmic useraccount where name="Docker" set PasswordExpires=false</CommandLine>
+ <Description>Password Never Expires</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>5</Order>
+ <CommandLine>cmd /C POWERCFG -H OFF</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>6</Order>
+ <CommandLine>cmd /C POWERCFG -X -monitor-timeout-ac 0</CommandLine>
+ <Description>Disable monitor blanking</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>7</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Network\NewNetworkWindowOff" /f</CommandLine>
+ <Description>Disable Network Discovery popup</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>8</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Network\NetworkLocationWizard" /v "HideWizard" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Disable Network Discovery popup</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>9</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkList\NewNetworks" /v NetworkList /t REG_MULTI_SZ /d "" /f</CommandLine>
+ <Description>Disable Network Discovery popup</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>10</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Edge" /v "HideFirstRunExperience" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Disable first-run experience in Edge</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>11</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "HideFileExt" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Show file extensions in Explorer</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>12</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateFileSizePercent" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Zero Hibernation File</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>13</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateEnabled" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>14</Order>
+ <CommandLine>cmd /C POWERCFG -X -standby-timeout-ac 0</CommandLine>
+ <Description>Disable Sleep</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>15</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" /v "fAllowUnlistedRemotePrograms" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Enable RemoteAPP to launch unlisted programs</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>16</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" /v "NoAutoUpdate" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Turn off Windows Update auto download</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>17</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-32752" new enable=Yes</CommandLine>
+ <Description>Enable Network Discovery</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>18</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-28502" new enable=Yes</CommandLine>
+ <Description>Enable File Sharing</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>19</Order>
+ <CommandLine>cmd /C if exist "C:\OEM\install.bat" start "Install" "cmd /C C:\OEM\install.bat"</CommandLine>
+ <Description>Execute custom script from the OEM folder if exists</Description>
+ </SynchronousCommand>
+ </FirstLogonCommands>
+ </component>
+ </settings>
+</unattend>

assets/win2008r2.xml

@@ -0,0 +1,302 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<unattend xmlns="urn:schemas-microsoft-com:unattend" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State">
+ <settings pass="windowsPE">
+ <component name="Microsoft-Windows-International-Core-WinPE" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SetupUILanguage>
+ <UILanguage>en-US</UILanguage>
+ </SetupUILanguage>
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DiskConfiguration>
+ <WillShowUI>OnError</WillShowUI>
+ <Disk wcm:action="add">
+ <DiskID>0</DiskID>
+ <WillWipeDisk>true</WillWipeDisk>
+ <CreatePartitions>
+ <CreatePartition wcm:action="add">
+ <Order>1</Order>
+ <Type>Primary</Type>
+ <Size>100</Size>
+ </CreatePartition>
+ <CreatePartition wcm:action="add">
+ <Order>2</Order>
+ <Type>Primary</Type>
+ <Extend>true</Extend>
+ </CreatePartition>
+ </CreatePartitions>
+ <ModifyPartitions>
+ <ModifyPartition wcm:action="add">
+ <Format>NTFS</Format>
+ <Label>System Reserved</Label>
+ <Order>1</Order>
+ <Active>true</Active>
+ <PartitionID>1</PartitionID>
+ <TypeID>0x27</TypeID>
+ </ModifyPartition>
+ <ModifyPartition wcm:action="add">
+ <Active>true</Active>
+ <Format>NTFS</Format>
+ <Label>Windows</Label>
+ <Letter>C</Letter>
+ <Order>2</Order>
+ <PartitionID>2</PartitionID>
+ </ModifyPartition>
+ </ModifyPartitions>
+ </Disk>
+ </DiskConfiguration>
+ <ImageInstall>
+ <OSImage>
+ <InstallFrom>
+ <MetaData wcm:action="add">
+ <Value>1</Value>
+ <Key>/IMAGE/INDEX</Key>
+ </MetaData>
+ </InstallFrom>
+ <InstallTo>
+ <DiskID>0</DiskID>
+ <PartitionID>2</PartitionID>
+ </InstallTo>
+ <InstallToAvailablePartition>false</InstallToAvailablePartition>
+ </OSImage>
+ </ImageInstall>
+ <DynamicUpdate>
+ <Enable>true</Enable>
+ <WillShowUI>Never</WillShowUI>
+ </DynamicUpdate>
+ <UpgradeData>
+ <Upgrade>false</Upgrade>
+ <WillShowUI>Never</WillShowUI>
+ </UpgradeData>
+ <UserData>
+ <AcceptEula>true</AcceptEula>
+ <FullName>Docker</FullName>
+ <Organization>Windows for Docker</Organization>
+ <ProductKey>
+ <Key>YC6KT-GKW9T-YTKYR-T4X34-R7VHC</Key>
+ </ProductKey>
+ </UserData>
+ <EnableFirewall>false</EnableFirewall>
+ <Diagnostics>
+ <OptIn>false</OptIn>
+ </Diagnostics>
+ </component>
+ </settings>
+ <settings pass="offlineServicing">
+ <component name="Microsoft-Windows-LUA-Settings" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <EnableLUA>false</EnableLUA>
+ </component>
+ </settings>
+ <settings pass="generalize">
+ <component name="Microsoft-Windows-PnPSysprep" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <PersistAllDeviceInstalls>true</PersistAllDeviceInstalls>
+ </component>
+ <component name="Microsoft-Windows-Security-SPP" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipRearm>1</SkipRearm>
+ </component>
+ </settings>
+ <settings pass="specialize">
+ <component name="Microsoft-Windows-Security-SPP-UX" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipAutoActivation>true</SkipAutoActivation>
+ </component>
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <ComputerName>*</ComputerName>
+ <OEMInformation>
+ <Manufacturer>Dockur</Manufacturer>
+ <Model>Windows for Docker</Model>
+ </OEMInformation>
+ </component>
+ <component name="Microsoft-Windows-ErrorReportingCore" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableWER>1</DisableWER>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableAccelerators>true</DisableAccelerators>
+ <DisableFirstRunWizard>true</DisableFirstRunWizard>
+ <Home_Page>https://google.com</Home_Page>
+ <Help_Page>about:blank</Help_Page>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="wow64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableAccelerators>true</DisableAccelerators>
+ <DisableFirstRunWizard>true</DisableFirstRunWizard>
+ <Home_Page>https://google.com</Home_Page>
+ <Help_Page>about:blank</Help_Page>
+ </component>
+ <component name="Microsoft-Windows-SQMApi" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <CEIPEnabled>0</CEIPEnabled>
+ </component>
+ <component name="Microsoft-Windows-SystemRestore-Main" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableSR>1</DisableSR>
+ </component>
+ <component name="Microsoft-Windows-International-Core" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-ServerManager-SvrMgrNc" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DoNotOpenServerManagerAtLogon>true</DoNotOpenServerManagerAtLogon>
+ </component>
+ <component name="Microsoft-Windows-OutOfBoxExperience" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DoNotOpenInitialConfigurationTasksAtLogon>true</DoNotOpenInitialConfigurationTasksAtLogon>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-LocalSessionManager" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <fDenyTSConnections>false</fDenyTSConnections>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-RDP-WinStationExtensions" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAuthentication>0</UserAuthentication>
+ </component>
+ <component name="Networking-MPSSVC-Svc" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <FirewallGroups>
+ <FirewallGroup wcm:action="add" wcm:keyValue="RemoteDesktop">
+ <Active>true</Active>
+ <Profile>all</Profile>
+ <Group>@FirewallAPI.dll,-28752</Group>
+ </FirewallGroup>
+ </FirewallGroups>
+ </component>
+ </settings>
+ <settings pass="oobeSystem">
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAccounts>
+ <LocalAccounts>
+ <LocalAccount wcm:action="add">
+ <Name>Docker</Name>
+ <Group>Administrators</Group>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </LocalAccount>
+ </LocalAccounts>
+ <AdministratorPassword>
+ <Value>password</Value>
+ <PlainText>true</PlainText>
+ </AdministratorPassword>
+ </UserAccounts>
+ <AutoLogon>
+ <Username>Docker</Username>
+ <Enabled>true</Enabled>
+ <LogonCount>65432</LogonCount>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </AutoLogon>
+ <Display>
+ <ColorDepth>32</ColorDepth>
+ <HorizontalResolution>1920</HorizontalResolution>
+ <VerticalResolution>1080</VerticalResolution>
+ </Display>
+ <OOBE>
+ <HideEULAPage>true</HideEULAPage>
+ <HideWirelessSetupInOOBE>true</HideWirelessSetupInOOBE>
+ <NetworkLocation>Home</NetworkLocation>
+ <ProtectYourPC>3</ProtectYourPC>
+ <SkipUserOOBE>true</SkipUserOOBE>
+ <SkipMachineOOBE>true</SkipMachineOOBE>
+ </OOBE>
+ <RegisteredOrganization>Dockur</RegisteredOrganization>
+ <RegisteredOwner>Windows for Docker</RegisteredOwner>
+ <FirstLogonCommands>
+ <SynchronousCommand wcm:action="add">
+ <Order>1</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" /v "AllowInsecureGuestAuth" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Allow guest access to network shares</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>2</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" /v LimitBlankPasswordUse /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Allow RDP login with blank password</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>3</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PasswordLess\Device" /v "DevicePasswordLessBuildVersion" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Enable option for passwordless sign-in</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>4</Order>
+ <CommandLine>cmd /C wmic useraccount where name="Docker" set PasswordExpires=false</CommandLine>
+ <Description>Password Never Expires</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>5</Order>
+ <CommandLine>cmd /C POWERCFG -H OFF</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>6</Order>
+ <CommandLine>cmd /C POWERCFG -X -monitor-timeout-ac 0</CommandLine>
+ <Description>Disable monitor blanking</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>7</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Network\NewNetworkWindowOff" /f</CommandLine>
+ <Description>Disable Network Discovery popup</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>8</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Network\NetworkLocationWizard" /v "HideWizard" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Disable Network Discovery popup</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>9</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkList\NewNetworks" /v NetworkList /t REG_MULTI_SZ /d "" /f</CommandLine>
+ <Description>Disable Network Discovery popup</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>10</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Edge" /v "HideFirstRunExperience" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Disable first-run experience in Edge</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>11</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "HideFileExt" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Show file extensions in Explorer</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>12</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateFileSizePercent" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Zero Hibernation File</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>13</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateEnabled" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>14</Order>
+ <CommandLine>cmd /C POWERCFG -X -standby-timeout-ac 0</CommandLine>
+ <Description>Disable Sleep</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>15</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" /v "fAllowUnlistedRemotePrograms" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Enable RemoteAPP to launch unlisted programs</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>16</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" /v "NoAutoUpdate" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Turn off Windows Update auto download</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>17</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-32752" new enable=Yes</CommandLine>
+ <Description>Enable Network Discovery</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>18</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-28502" new enable=Yes</CommandLine>
+ <Description>Enable File Sharing</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>19</Order>
+ <CommandLine>cmd /C if exist "C:\OEM\install.bat" start "Install" "cmd /C C:\OEM\install.bat"</CommandLine>
+ <Description>Execute custom script from the OEM folder if exists</Description>
+ </SynchronousCommand>
+ </FirstLogonCommands>
+ </component>
+ </settings>
+</unattend>

assets/win2012r2-eval.xml

@@ -0,0 +1,317 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<unattend xmlns="urn:schemas-microsoft-com:unattend" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State">
+ <settings pass="windowsPE">
+ <component name="Microsoft-Windows-International-Core-WinPE" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SetupUILanguage>
+ <UILanguage>en-US</UILanguage>
+ </SetupUILanguage>
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UILanguageFallback>en-US</UILanguageFallback>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DiskConfiguration>
+ <Disk wcm:action="add">
+ <DiskID>0</DiskID>
+ <WillWipeDisk>true</WillWipeDisk>
+ <CreatePartitions>
+ <!-- System partition (ESP) -->
+ <CreatePartition wcm:action="add">
+ <Order>1</Order>
+ <Type>EFI</Type>
+ <Size>128</Size>
+ </CreatePartition>
+ <!-- Microsoft reserved partition (MSR) -->
+ <CreatePartition wcm:action="add">
+ <Order>2</Order>
+ <Type>MSR</Type>
+ <Size>128</Size>
+ </CreatePartition>
+ <!-- Windows partition -->
+ <CreatePartition wcm:action="add">
+ <Order>3</Order>
+ <Type>Primary</Type>
+ <Extend>true</Extend>
+ </CreatePartition>
+ </CreatePartitions>
+ <ModifyPartitions>
+ <!-- System partition (ESP) -->
+ <ModifyPartition wcm:action="add">
+ <Order>1</Order>
+ <PartitionID>1</PartitionID>
+ <Label>System</Label>
+ <Format>FAT32</Format>
+ </ModifyPartition>
+ <!-- MSR partition does not need to be modified -->
+ <ModifyPartition wcm:action="add">
+ <Order>2</Order>
+ <PartitionID>2</PartitionID>
+ </ModifyPartition>
+ <!-- Windows partition -->
+ <ModifyPartition wcm:action="add">
+ <Order>3</Order>
+ <PartitionID>3</PartitionID>
+ <Label>Windows</Label>
+ <Letter>C</Letter>
+ <Format>NTFS</Format>
+ </ModifyPartition>
+ </ModifyPartitions>
+ </Disk>
+ </DiskConfiguration>
+ <ImageInstall>
+ <OSImage>
+ <InstallFrom>
+ <MetaData wcm:action="add">
+ <Key>/image/index</Key>
+ <Value>2</Value>
+ </MetaData>
+ </InstallFrom>
+ <InstallTo>
+ <DiskID>0</DiskID>
+ <PartitionID>3</PartitionID>
+ </InstallTo>
+ <WillShowUI>OnError</WillShowUI>
+ <InstallToAvailablePartition>false</InstallToAvailablePartition>
+ </OSImage>
+ </ImageInstall>
+ <DynamicUpdate>
+ <Enable>true</Enable>
+ <WillShowUI>Never</WillShowUI>
+ </DynamicUpdate>
+ <UpgradeData>
+ <Upgrade>false</Upgrade>
+ <WillShowUI>Never</WillShowUI>
+ </UpgradeData>
+ <UserData>
+ <AcceptEula>true</AcceptEula>
+ <FullName>Docker</FullName>
+ <Organization>Windows for Docker</Organization>
+ </UserData>
+ <EnableFirewall>false</EnableFirewall>
+ <Diagnostics>
+ <OptIn>false</OptIn>
+ </Diagnostics>
+ </component>
+ </settings>
+ <settings pass="offlineServicing">
+ <component name="Microsoft-Windows-LUA-Settings" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <EnableLUA>false</EnableLUA>
+ </component>
+ </settings>
+ <settings pass="generalize">
+ <component name="Microsoft-Windows-PnPSysprep" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <PersistAllDeviceInstalls>true</PersistAllDeviceInstalls>
+ </component>
+ <component name="Microsoft-Windows-Security-SPP" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipRearm>1</SkipRearm>
+ </component>
+ </settings>
+ <settings pass="specialize">
+ <component name="Microsoft-Windows-Security-SPP-UX" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipAutoActivation>true</SkipAutoActivation>
+ </component>
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <ComputerName>*</ComputerName>
+ <OEMInformation>
+ <Manufacturer>Dockur</Manufacturer>
+ <Model>Windows for Docker</Model>
+ </OEMInformation>
+ <OEMName>Windows for Docker</OEMName>
+ </component>
+ <component name="Microsoft-Windows-ErrorReportingCore" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableWER>1</DisableWER>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableAccelerators>true</DisableAccelerators>
+ <DisableFirstRunWizard>true</DisableFirstRunWizard>
+ <Home_Page>https://google.com</Home_Page>
+ <Help_Page>about:blank</Help_Page>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="wow64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableAccelerators>true</DisableAccelerators>
+ <DisableFirstRunWizard>true</DisableFirstRunWizard>
+ <Home_Page>https://google.com</Home_Page>
+ <Help_Page>about:blank</Help_Page>
+ </component>
+ <component name="Microsoft-Windows-SQMApi" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <CEIPEnabled>0</CEIPEnabled>
+ </component>
+ <component name="Microsoft-Windows-SystemRestore-Main" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableSR>1</DisableSR>
+ </component>
+ <component name="Microsoft-Windows-International-Core" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UILanguageFallback>en-US</UILanguageFallback>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-Deployment" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <RunSynchronous>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>1</Order>
+ <Path>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\CurrentVersion\NetworkList\Signatures\FirstNetwork" /v Category /t REG_DWORD /d 1 /f</Path>
+ <Description>Set Network Location to Home</Description>
+ </RunSynchronousCommand>
+ </RunSynchronous>
+ </component>
+ <component name="Microsoft-Windows-ServerManager-SvrMgrNc" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DoNotOpenServerManagerAtLogon>true</DoNotOpenServerManagerAtLogon>
+ </component>
+ <component name="Microsoft-Windows-OutOfBoxExperience" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DoNotOpenInitialConfigurationTasksAtLogon>true</DoNotOpenInitialConfigurationTasksAtLogon>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-LocalSessionManager" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <fDenyTSConnections>false</fDenyTSConnections>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-RDP-WinStationExtensions" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAuthentication>0</UserAuthentication>
+ </component>
+ <component name="Networking-MPSSVC-Svc" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <FirewallGroups>
+ <FirewallGroup wcm:action="add" wcm:keyValue="RemoteDesktop">
+ <Active>true</Active>
+ <Profile>all</Profile>
+ <Group>@FirewallAPI.dll,-28752</Group>
+ </FirewallGroup>
+ </FirewallGroups>
+ </component>
+ </settings>
+ <settings pass="oobeSystem">
+ <component name="Microsoft-Windows-SecureStartup-FilterDriver" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <PreventDeviceEncryption>true</PreventDeviceEncryption>
+ </component>
+ <component name="Microsoft-Windows-EnhancedStorage-Adm" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <TCGSecurityActivationDisabled>1</TCGSecurityActivationDisabled>
+ </component>
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAccounts>
+ <LocalAccounts>
+ <LocalAccount wcm:action="add">
+ <Name>Docker</Name>
+ <Group>Administrators</Group>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </LocalAccount>
+ </LocalAccounts>
+ <AdministratorPassword>
+ <Value>password</Value>
+ <PlainText>true</PlainText>
+ </AdministratorPassword>
+ </UserAccounts>
+ <AutoLogon>
+ <Username>Docker</Username>
+ <Enabled>true</Enabled>
+ <LogonCount>65432</LogonCount>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </AutoLogon>
+ <Display>
+ <ColorDepth>32</ColorDepth>
+ <HorizontalResolution>1920</HorizontalResolution>
+ <VerticalResolution>1080</VerticalResolution>
+ </Display>
+ <OOBE>
+ <HideEULAPage>true</HideEULAPage>
+ <HideLocalAccountScreen>true</HideLocalAccountScreen>
+ <HideOEMRegistrationScreen>true</HideOEMRegistrationScreen>
+ <HideOnlineAccountScreens>true</HideOnlineAccountScreens>
+ <HideWirelessSetupInOOBE>true</HideWirelessSetupInOOBE>
+ <NetworkLocation>Home</NetworkLocation>
+ <ProtectYourPC>3</ProtectYourPC>
+ <SkipUserOOBE>true</SkipUserOOBE>
+ <SkipMachineOOBE>true</SkipMachineOOBE>
+ </OOBE>
+ <RegisteredOrganization>Dockur</RegisteredOrganization>
+ <RegisteredOwner>Windows for Docker</RegisteredOwner>
+ <FirstLogonCommands>
+ <SynchronousCommand wcm:action="add">
+ <Order>1</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" /v "AllowInsecureGuestAuth" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Allow guest access to network shares</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>2</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" /v LimitBlankPasswordUse /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Allow RDP login with blank password</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>3</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PasswordLess\Device" /v "DevicePasswordLessBuildVersion" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Enable option for passwordless sign-in</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>4</Order>
+ <CommandLine>cmd /C wmic useraccount where name="Docker" set PasswordExpires=false</CommandLine>
+ <Description>Password Never Expires</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>5</Order>
+ <CommandLine>cmd /C POWERCFG -H OFF</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>6</Order>
+ <CommandLine>cmd /C POWERCFG -X -monitor-timeout-ac 0</CommandLine>
+ <Description>Disable monitor blanking</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>7</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Edge" /v "HideFirstRunExperience" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Disable first-run experience in Edge</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>8</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "HideFileExt" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Show file extensions in Explorer</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>9</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateFileSizePercent" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Zero Hibernation File</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>10</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateEnabled" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>11</Order>
+ <CommandLine>cmd /C POWERCFG -X -standby-timeout-ac 0</CommandLine>
+ <Description>Disable Sleep</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>12</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" /v "fAllowUnlistedRemotePrograms" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Enable RemoteAPP to launch unlisted programs</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>13</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" /v "NoAutoUpdate" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Turn off Windows Update auto download</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>14</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-32752" new enable=Yes</CommandLine>
+ <Description>Enable Network Discovery</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>15</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-28502" new enable=Yes</CommandLine>
+ <Description>Enable File Sharing</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>16</Order>
+ <CommandLine>cmd /C if exist "C:\OEM\install.bat" start "Install" "cmd /C C:\OEM\install.bat"</CommandLine>
+ <Description>Execute custom script from the OEM folder if exists</Description>
+ </SynchronousCommand>
+ </FirstLogonCommands>
+ </component>
+ </settings>
+</unattend>

assets/win2012r2.xml

@@ -0,0 +1,320 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<unattend xmlns="urn:schemas-microsoft-com:unattend" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State">
+ <settings pass="windowsPE">
+ <component name="Microsoft-Windows-International-Core-WinPE" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SetupUILanguage>
+ <UILanguage>en-US</UILanguage>
+ </SetupUILanguage>
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UILanguageFallback>en-US</UILanguageFallback>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DiskConfiguration>
+ <Disk wcm:action="add">
+ <DiskID>0</DiskID>
+ <WillWipeDisk>true</WillWipeDisk>
+ <CreatePartitions>
+ <!-- System partition (ESP) -->
+ <CreatePartition wcm:action="add">
+ <Order>1</Order>
+ <Type>EFI</Type>
+ <Size>128</Size>
+ </CreatePartition>
+ <!-- Microsoft reserved partition (MSR) -->
+ <CreatePartition wcm:action="add">
+ <Order>2</Order>
+ <Type>MSR</Type>
+ <Size>128</Size>
+ </CreatePartition>
+ <!-- Windows partition -->
+ <CreatePartition wcm:action="add">
+ <Order>3</Order>
+ <Type>Primary</Type>
+ <Extend>true</Extend>
+ </CreatePartition>
+ </CreatePartitions>
+ <ModifyPartitions>
+ <!-- System partition (ESP) -->
+ <ModifyPartition wcm:action="add">
+ <Order>1</Order>
+ <PartitionID>1</PartitionID>
+ <Label>System</Label>
+ <Format>FAT32</Format>
+ </ModifyPartition>
+ <!-- MSR partition does not need to be modified -->
+ <ModifyPartition wcm:action="add">
+ <Order>2</Order>
+ <PartitionID>2</PartitionID>
+ </ModifyPartition>
+ <!-- Windows partition -->
+ <ModifyPartition wcm:action="add">
+ <Order>3</Order>
+ <PartitionID>3</PartitionID>
+ <Label>Windows</Label>
+ <Letter>C</Letter>
+ <Format>NTFS</Format>
+ </ModifyPartition>
+ </ModifyPartitions>
+ </Disk>
+ </DiskConfiguration>
+ <ImageInstall>
+ <OSImage>
+ <InstallFrom>
+ <MetaData wcm:action="add">
+ <Key>/image/index</Key>
+ <Value>2</Value>
+ </MetaData>
+ </InstallFrom>
+ <InstallTo>
+ <DiskID>0</DiskID>
+ <PartitionID>3</PartitionID>
+ </InstallTo>
+ <WillShowUI>OnError</WillShowUI>
+ <InstallToAvailablePartition>false</InstallToAvailablePartition>
+ </OSImage>
+ </ImageInstall>
+ <DynamicUpdate>
+ <Enable>true</Enable>
+ <WillShowUI>Never</WillShowUI>
+ </DynamicUpdate>
+ <UpgradeData>
+ <Upgrade>false</Upgrade>
+ <WillShowUI>Never</WillShowUI>
+ </UpgradeData>
+ <UserData>
+ <AcceptEula>true</AcceptEula>
+ <FullName>Docker</FullName>
+ <Organization>Windows for Docker</Organization>
+ <ProductKey>
+ <Key>D2N9P-3P6X9-2R39C-7RTCD-MDVJX</Key>
+ </ProductKey>
+ </UserData>
+ <EnableFirewall>false</EnableFirewall>
+ <Diagnostics>
+ <OptIn>false</OptIn>
+ </Diagnostics>
+ </component>
+ </settings>
+ <settings pass="offlineServicing">
+ <component name="Microsoft-Windows-LUA-Settings" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <EnableLUA>false</EnableLUA>
+ </component>
+ </settings>
+ <settings pass="generalize">
+ <component name="Microsoft-Windows-PnPSysprep" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <PersistAllDeviceInstalls>true</PersistAllDeviceInstalls>
+ </component>
+ <component name="Microsoft-Windows-Security-SPP" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipRearm>1</SkipRearm>
+ </component>
+ </settings>
+ <settings pass="specialize">
+ <component name="Microsoft-Windows-Security-SPP-UX" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipAutoActivation>true</SkipAutoActivation>
+ </component>
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <ComputerName>*</ComputerName>
+ <OEMInformation>
+ <Manufacturer>Dockur</Manufacturer>
+ <Model>Windows for Docker</Model>
+ </OEMInformation>
+ <OEMName>Windows for Docker</OEMName>
+ </component>
+ <component name="Microsoft-Windows-ErrorReportingCore" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableWER>1</DisableWER>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableAccelerators>true</DisableAccelerators>
+ <DisableFirstRunWizard>true</DisableFirstRunWizard>
+ <Home_Page>https://google.com</Home_Page>
+ <Help_Page>about:blank</Help_Page>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="wow64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableAccelerators>true</DisableAccelerators>
+ <DisableFirstRunWizard>true</DisableFirstRunWizard>
+ <Home_Page>https://google.com</Home_Page>
+ <Help_Page>about:blank</Help_Page>
+ </component>
+ <component name="Microsoft-Windows-SQMApi" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <CEIPEnabled>0</CEIPEnabled>
+ </component>
+ <component name="Microsoft-Windows-SystemRestore-Main" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableSR>1</DisableSR>
+ </component>
+ <component name="Microsoft-Windows-International-Core" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UILanguageFallback>en-US</UILanguageFallback>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-Deployment" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <RunSynchronous>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>1</Order>
+ <Path>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\CurrentVersion\NetworkList\Signatures\FirstNetwork" /v Category /t REG_DWORD /d 1 /f</Path>
+ <Description>Set Network Location to Home</Description>
+ </RunSynchronousCommand>
+ </RunSynchronous>
+ </component>
+ <component name="Microsoft-Windows-ServerManager-SvrMgrNc" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DoNotOpenServerManagerAtLogon>true</DoNotOpenServerManagerAtLogon>
+ </component>
+ <component name="Microsoft-Windows-OutOfBoxExperience" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DoNotOpenInitialConfigurationTasksAtLogon>true</DoNotOpenInitialConfigurationTasksAtLogon>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-LocalSessionManager" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <fDenyTSConnections>false</fDenyTSConnections>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-RDP-WinStationExtensions" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAuthentication>0</UserAuthentication>
+ </component>
+ <component name="Networking-MPSSVC-Svc" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <FirewallGroups>
+ <FirewallGroup wcm:action="add" wcm:keyValue="RemoteDesktop">
+ <Active>true</Active>
+ <Profile>all</Profile>
+ <Group>@FirewallAPI.dll,-28752</Group>
+ </FirewallGroup>
+ </FirewallGroups>
+ </component>
+ </settings>
+ <settings pass="oobeSystem">
+ <component name="Microsoft-Windows-SecureStartup-FilterDriver" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <PreventDeviceEncryption>true</PreventDeviceEncryption>
+ </component>
+ <component name="Microsoft-Windows-EnhancedStorage-Adm" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <TCGSecurityActivationDisabled>1</TCGSecurityActivationDisabled>
+ </component>
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAccounts>
+ <LocalAccounts>
+ <LocalAccount wcm:action="add">
+ <Name>Docker</Name>
+ <Group>Administrators</Group>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </LocalAccount>
+ </LocalAccounts>
+ <AdministratorPassword>
+ <Value>password</Value>
+ <PlainText>true</PlainText>
+ </AdministratorPassword>
+ </UserAccounts>
+ <AutoLogon>
+ <Username>Docker</Username>
+ <Enabled>true</Enabled>
+ <LogonCount>65432</LogonCount>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </AutoLogon>
+ <Display>
+ <ColorDepth>32</ColorDepth>
+ <HorizontalResolution>1920</HorizontalResolution>
+ <VerticalResolution>1080</VerticalResolution>
+ </Display>
+ <OOBE>
+ <HideEULAPage>true</HideEULAPage>
+ <HideLocalAccountScreen>true</HideLocalAccountScreen>
+ <HideOEMRegistrationScreen>true</HideOEMRegistrationScreen>
+ <HideOnlineAccountScreens>true</HideOnlineAccountScreens>
+ <HideWirelessSetupInOOBE>true</HideWirelessSetupInOOBE>
+ <NetworkLocation>Home</NetworkLocation>
+ <ProtectYourPC>3</ProtectYourPC>
+ <SkipUserOOBE>true</SkipUserOOBE>
+ <SkipMachineOOBE>true</SkipMachineOOBE>
+ </OOBE>
+ <RegisteredOrganization>Dockur</RegisteredOrganization>
+ <RegisteredOwner>Windows for Docker</RegisteredOwner>
+ <FirstLogonCommands>
+ <SynchronousCommand wcm:action="add">
+ <Order>1</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" /v "AllowInsecureGuestAuth" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Allow guest access to network shares</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>2</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" /v LimitBlankPasswordUse /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Allow RDP login with blank password</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>3</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PasswordLess\Device" /v "DevicePasswordLessBuildVersion" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Enable option for passwordless sign-in</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>4</Order>
+ <CommandLine>cmd /C wmic useraccount where name="Docker" set PasswordExpires=false</CommandLine>
+ <Description>Password Never Expires</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>5</Order>
+ <CommandLine>cmd /C POWERCFG -H OFF</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>6</Order>
+ <CommandLine>cmd /C POWERCFG -X -monitor-timeout-ac 0</CommandLine>
+ <Description>Disable monitor blanking</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>7</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Edge" /v "HideFirstRunExperience" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Disable first-run experience in Edge</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>8</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "HideFileExt" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Show file extensions in Explorer</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>9</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateFileSizePercent" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Zero Hibernation File</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>10</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateEnabled" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>11</Order>
+ <CommandLine>cmd /C POWERCFG -X -standby-timeout-ac 0</CommandLine>
+ <Description>Disable Sleep</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>12</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" /v "fAllowUnlistedRemotePrograms" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Enable RemoteAPP to launch unlisted programs</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>13</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" /v "NoAutoUpdate" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Turn off Windows Update auto download</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>14</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-32752" new enable=Yes</CommandLine>
+ <Description>Enable Network Discovery</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>15</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-28502" new enable=Yes</CommandLine>
+ <Description>Enable File Sharing</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>16</Order>
+ <CommandLine>cmd /C if exist "C:\OEM\install.bat" start "Install" "cmd /C C:\OEM\install.bat"</CommandLine>
+ <Description>Execute custom script from the OEM folder if exists</Description>
+ </SynchronousCommand>
+ </FirstLogonCommands>
+ </component>
+ </settings>
+</unattend>

assets/win2016-eval.xml

@@ -0,0 +1,337 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<unattend xmlns="urn:schemas-microsoft-com:unattend" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State">
+ <settings pass="windowsPE">
+ <component name="Microsoft-Windows-International-Core-WinPE" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SetupUILanguage>
+ <UILanguage>en-US</UILanguage>
+ </SetupUILanguage>
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UILanguageFallback>en-US</UILanguageFallback>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DiskConfiguration>
+ <Disk wcm:action="add">
+ <DiskID>0</DiskID>
+ <WillWipeDisk>true</WillWipeDisk>
+ <CreatePartitions>
+ <!-- System partition (ESP) -->
+ <CreatePartition wcm:action="add">
+ <Order>1</Order>
+ <Type>EFI</Type>
+ <Size>128</Size>
+ </CreatePartition>
+ <!-- Microsoft reserved partition (MSR) -->
+ <CreatePartition wcm:action="add">
+ <Order>2</Order>
+ <Type>MSR</Type>
+ <Size>128</Size>
+ </CreatePartition>
+ <!-- Windows partition -->
+ <CreatePartition wcm:action="add">
+ <Order>3</Order>
+ <Type>Primary</Type>
+ <Extend>true</Extend>
+ </CreatePartition>
+ </CreatePartitions>
+ <ModifyPartitions>
+ <!-- System partition (ESP) -->
+ <ModifyPartition wcm:action="add">
+ <Order>1</Order>
+ <PartitionID>1</PartitionID>
+ <Label>System</Label>
+ <Format>FAT32</Format>
+ </ModifyPartition>
+ <!-- MSR partition does not need to be modified -->
+ <ModifyPartition wcm:action="add">
+ <Order>2</Order>
+ <PartitionID>2</PartitionID>
+ </ModifyPartition>
+ <!-- Windows partition -->
+ <ModifyPartition wcm:action="add">
+ <Order>3</Order>
+ <PartitionID>3</PartitionID>
+ <Label>Windows</Label>
+ <Letter>C</Letter>
+ <Format>NTFS</Format>
+ </ModifyPartition>
+ </ModifyPartitions>
+ </Disk>
+ </DiskConfiguration>
+ <ImageInstall>
+ <OSImage>
+ <InstallFrom>
+ <MetaData wcm:action="add">
+ <Key>/IMAGE/NAME</Key>
+ <Value>Windows Server 2016 SERVERSTANDARD</Value>
+ </MetaData>
+ </InstallFrom>
+ <InstallTo>
+ <DiskID>0</DiskID>
+ <PartitionID>3</PartitionID>
+ </InstallTo>
+ <WillShowUI>OnError</WillShowUI>
+ <InstallToAvailablePartition>false</InstallToAvailablePartition>
+ </OSImage>
+ </ImageInstall>
+ <DynamicUpdate>
+ <Enable>true</Enable>
+ <WillShowUI>Never</WillShowUI>
+ </DynamicUpdate>
+ <UpgradeData>
+ <Upgrade>false</Upgrade>
+ <WillShowUI>Never</WillShowUI>
+ </UpgradeData>
+ <UserData>
+ <AcceptEula>true</AcceptEula>
+ <FullName>Docker</FullName>
+ <Organization>Windows for Docker</Organization>
+ </UserData>
+ <EnableFirewall>false</EnableFirewall>
+ <Diagnostics>
+ <OptIn>false</OptIn>
+ </Diagnostics>
+ </component>
+ </settings>
+ <settings pass="offlineServicing">
+ <component name="Microsoft-Windows-LUA-Settings" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <EnableLUA>false</EnableLUA>
+ </component>
+ </settings>
+ <settings pass="generalize">
+ <component name="Microsoft-Windows-PnPSysprep" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <PersistAllDeviceInstalls>true</PersistAllDeviceInstalls>
+ </component>
+ <component name="Microsoft-Windows-Security-SPP" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipRearm>1</SkipRearm>
+ </component>
+ </settings>
+ <settings pass="specialize">
+ <component name="Microsoft-Windows-Security-SPP-UX" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipAutoActivation>true</SkipAutoActivation>
+ </component>
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <ComputerName>*</ComputerName>
+ <OEMInformation>
+ <Manufacturer>Dockur</Manufacturer>
+ <Model>Windows for Docker</Model>
+ </OEMInformation>
+ <OEMName>Windows for Docker</OEMName>
+ </component>
+ <component name="Microsoft-Windows-ErrorReportingCore" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableWER>1</DisableWER>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableAccelerators>true</DisableAccelerators>
+ <DisableFirstRunWizard>true</DisableFirstRunWizard>
+ <Home_Page>https://google.com</Home_Page>
+ <Help_Page>about:blank</Help_Page>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="wow64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableAccelerators>true</DisableAccelerators>
+ <DisableFirstRunWizard>true</DisableFirstRunWizard>
+ <Home_Page>https://google.com</Home_Page>
+ <Help_Page>about:blank</Help_Page>
+ </component>
+ <component name="Microsoft-Windows-SQMApi" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <CEIPEnabled>0</CEIPEnabled>
+ </component>
+ <component name="Microsoft-Windows-SystemRestore-Main" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableSR>1</DisableSR>
+ </component>
+ <component name="Microsoft-Windows-International-Core" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UILanguageFallback>en-US</UILanguageFallback>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-Deployment" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <RunSynchronous>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>1</Order>
+ <Path>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\CurrentVersion\NetworkList\Signatures\FirstNetwork" /v Category /t REG_DWORD /d 1 /f</Path>
+ <Description>Set Network Location to Home</Description>
+ </RunSynchronousCommand>
+ </RunSynchronous>
+ </component>
+ <component name="Microsoft-Windows-ServerManager-SvrMgrNc" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DoNotOpenServerManagerAtLogon>true</DoNotOpenServerManagerAtLogon>
+ </component>
+ <component name="Microsoft-Windows-OutOfBoxExperience" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DoNotOpenInitialConfigurationTasksAtLogon>true</DoNotOpenInitialConfigurationTasksAtLogon>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-LocalSessionManager" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <fDenyTSConnections>false</fDenyTSConnections>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-RDP-WinStationExtensions" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAuthentication>0</UserAuthentication>
+ </component>
+ <component name="Networking-MPSSVC-Svc" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <FirewallGroups>
+ <FirewallGroup wcm:action="add" wcm:keyValue="RemoteDesktop">
+ <Active>true</Active>
+ <Profile>all</Profile>
+ <Group>@FirewallAPI.dll,-28752</Group>
+ </FirewallGroup>
+ </FirewallGroups>
+ </component>
+ </settings>
+ <settings pass="oobeSystem">
+ <component name="Microsoft-Windows-SecureStartup-FilterDriver" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <PreventDeviceEncryption>true</PreventDeviceEncryption>
+ </component>
+ <component name="Microsoft-Windows-EnhancedStorage-Adm" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <TCGSecurityActivationDisabled>1</TCGSecurityActivationDisabled>
+ </component>
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAccounts>
+ <LocalAccounts>
+ <LocalAccount wcm:action="add">
+ <Name>Docker</Name>
+ <Group>Administrators</Group>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </LocalAccount>
+ </LocalAccounts>
+ <AdministratorPassword>
+ <Value>password</Value>
+ <PlainText>true</PlainText>
+ </AdministratorPassword>
+ </UserAccounts>
+ <AutoLogon>
+ <Username>Docker</Username>
+ <Enabled>true</Enabled>
+ <LogonCount>65432</LogonCount>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </AutoLogon>
+ <Display>
+ <ColorDepth>32</ColorDepth>
+ <HorizontalResolution>1920</HorizontalResolution>
+ <VerticalResolution>1080</VerticalResolution>
+ </Display>
+ <OOBE>
+ <HideEULAPage>true</HideEULAPage>
+ <HideLocalAccountScreen>true</HideLocalAccountScreen>
+ <HideOEMRegistrationScreen>true</HideOEMRegistrationScreen>
+ <HideOnlineAccountScreens>true</HideOnlineAccountScreens>
+ <HideWirelessSetupInOOBE>true</HideWirelessSetupInOOBE>
+ <NetworkLocation>Home</NetworkLocation>
+ <ProtectYourPC>3</ProtectYourPC>
+ <SkipUserOOBE>true</SkipUserOOBE>
+ <SkipMachineOOBE>true</SkipMachineOOBE>
+ </OOBE>
+ <RegisteredOrganization>Dockur</RegisteredOrganization>
+ <RegisteredOwner>Windows for Docker</RegisteredOwner>
+ <FirstLogonCommands>
+ <SynchronousCommand wcm:action="add">
+ <Order>1</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" /v "AllowInsecureGuestAuth" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Allow guest access to network shares</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>2</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" /v LimitBlankPasswordUse /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Allow RDP login with blank password</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>3</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PasswordLess\Device" /v "DevicePasswordLessBuildVersion" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Enable option for passwordless sign-in</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>4</Order>
+ <CommandLine>cmd /C wmic useraccount where name="Docker" set PasswordExpires=false</CommandLine>
+ <Description>Password Never Expires</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>5</Order>
+ <CommandLine>cmd /C POWERCFG -H OFF</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>6</Order>
+ <CommandLine>cmd /C POWERCFG -X -monitor-timeout-ac 0</CommandLine>
+ <Description>Disable monitor blanking</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>7</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Edge" /v "HideFirstRunExperience" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Disable first-run experience in Edge</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>8</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "HideFileExt" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Show file extensions in Explorer</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>9</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateFileSizePercent" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Zero Hibernation File</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>10</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateEnabled" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>11</Order>
+ <CommandLine>cmd /C POWERCFG -X -standby-timeout-ac 0</CommandLine>
+ <Description>Disable Sleep</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>12</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" /v "fAllowUnlistedRemotePrograms" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Enable RemoteAPP to launch unlisted programs</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>13</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Search" /v "SearchboxTaskbarMode" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Search from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>14</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "ShowTaskViewButton" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Task View from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>15</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "TaskbarDa" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Widgets from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>16</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "TaskbarMn" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Chat from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>17</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" /v "NoAutoUpdate" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Turn off Windows Update auto download</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>18</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-32752" new enable=Yes</CommandLine>
+ <Description>Enable Network Discovery</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>19</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-28502" new enable=Yes</CommandLine>
+ <Description>Enable File Sharing</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>20</Order>
+ <CommandLine>cmd /C if exist "C:\OEM\install.bat" start "Install" "cmd /C C:\OEM\install.bat"</CommandLine>
+ <Description>Execute custom script from the OEM folder if exists</Description>
+ </SynchronousCommand>
+ </FirstLogonCommands>
+ </component>
+ </settings>
+</unattend>

assets/win2016.xml

@@ -0,0 +1,340 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<unattend xmlns="urn:schemas-microsoft-com:unattend" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State">
+ <settings pass="windowsPE">
+ <component name="Microsoft-Windows-International-Core-WinPE" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SetupUILanguage>
+ <UILanguage>en-US</UILanguage>
+ </SetupUILanguage>
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UILanguageFallback>en-US</UILanguageFallback>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DiskConfiguration>
+ <Disk wcm:action="add">
+ <DiskID>0</DiskID>
+ <WillWipeDisk>true</WillWipeDisk>
+ <CreatePartitions>
+ <!-- System partition (ESP) -->
+ <CreatePartition wcm:action="add">
+ <Order>1</Order>
+ <Type>EFI</Type>
+ <Size>128</Size>
+ </CreatePartition>
+ <!-- Microsoft reserved partition (MSR) -->
+ <CreatePartition wcm:action="add">
+ <Order>2</Order>
+ <Type>MSR</Type>
+ <Size>128</Size>
+ </CreatePartition>
+ <!-- Windows partition -->
+ <CreatePartition wcm:action="add">
+ <Order>3</Order>
+ <Type>Primary</Type>
+ <Extend>true</Extend>
+ </CreatePartition>
+ </CreatePartitions>
+ <ModifyPartitions>
+ <!-- System partition (ESP) -->
+ <ModifyPartition wcm:action="add">
+ <Order>1</Order>
+ <PartitionID>1</PartitionID>
+ <Label>System</Label>
+ <Format>FAT32</Format>
+ </ModifyPartition>
+ <!-- MSR partition does not need to be modified -->
+ <ModifyPartition wcm:action="add">
+ <Order>2</Order>
+ <PartitionID>2</PartitionID>
+ </ModifyPartition>
+ <!-- Windows partition -->
+ <ModifyPartition wcm:action="add">
+ <Order>3</Order>
+ <PartitionID>3</PartitionID>
+ <Label>Windows</Label>
+ <Letter>C</Letter>
+ <Format>NTFS</Format>
+ </ModifyPartition>
+ </ModifyPartitions>
+ </Disk>
+ </DiskConfiguration>
+ <ImageInstall>
+ <OSImage>
+ <InstallFrom>
+ <MetaData wcm:action="add">
+ <Key>/IMAGE/NAME</Key>
+ <Value>Windows Server 2016 SERVERSTANDARD</Value>
+ </MetaData>
+ </InstallFrom>
+ <InstallTo>
+ <DiskID>0</DiskID>
+ <PartitionID>3</PartitionID>
+ </InstallTo>
+ <WillShowUI>OnError</WillShowUI>
+ <InstallToAvailablePartition>false</InstallToAvailablePartition>
+ </OSImage>
+ </ImageInstall>
+ <DynamicUpdate>
+ <Enable>true</Enable>
+ <WillShowUI>Never</WillShowUI>
+ </DynamicUpdate>
+ <UpgradeData>
+ <Upgrade>false</Upgrade>
+ <WillShowUI>Never</WillShowUI>
+ </UpgradeData>
+ <UserData>
+ <AcceptEula>true</AcceptEula>
+ <FullName>Docker</FullName>
+ <Organization>Windows for Docker</Organization>
+ <ProductKey>
+ <Key>WC2BQ-8NRM3-FDDYY-2BFGV-KHKQY</Key>
+ </ProductKey>
+ </UserData>
+ <EnableFirewall>false</EnableFirewall>
+ <Diagnostics>
+ <OptIn>false</OptIn>
+ </Diagnostics>
+ </component>
+ </settings>
+ <settings pass="offlineServicing">
+ <component name="Microsoft-Windows-LUA-Settings" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <EnableLUA>false</EnableLUA>
+ </component>
+ </settings>
+ <settings pass="generalize">
+ <component name="Microsoft-Windows-PnPSysprep" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <PersistAllDeviceInstalls>true</PersistAllDeviceInstalls>
+ </component>
+ <component name="Microsoft-Windows-Security-SPP" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipRearm>1</SkipRearm>
+ </component>
+ </settings>
+ <settings pass="specialize">
+ <component name="Microsoft-Windows-Security-SPP-UX" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipAutoActivation>true</SkipAutoActivation>
+ </component>
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <ComputerName>*</ComputerName>
+ <OEMInformation>
+ <Manufacturer>Dockur</Manufacturer>
+ <Model>Windows for Docker</Model>
+ </OEMInformation>
+ <OEMName>Windows for Docker</OEMName>
+ </component>
+ <component name="Microsoft-Windows-ErrorReportingCore" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableWER>1</DisableWER>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableAccelerators>true</DisableAccelerators>
+ <DisableFirstRunWizard>true</DisableFirstRunWizard>
+ <Home_Page>https://google.com</Home_Page>
+ <Help_Page>about:blank</Help_Page>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="wow64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableAccelerators>true</DisableAccelerators>
+ <DisableFirstRunWizard>true</DisableFirstRunWizard>
+ <Home_Page>https://google.com</Home_Page>
+ <Help_Page>about:blank</Help_Page>
+ </component>
+ <component name="Microsoft-Windows-SQMApi" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <CEIPEnabled>0</CEIPEnabled>
+ </component>
+ <component name="Microsoft-Windows-SystemRestore-Main" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableSR>1</DisableSR>
+ </component>
+ <component name="Microsoft-Windows-International-Core" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UILanguageFallback>en-US</UILanguageFallback>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-Deployment" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <RunSynchronous>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>1</Order>
+ <Path>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\CurrentVersion\NetworkList\Signatures\FirstNetwork" /v Category /t REG_DWORD /d 1 /f</Path>
+ <Description>Set Network Location to Home</Description>
+ </RunSynchronousCommand>
+ </RunSynchronous>
+ </component>
+ <component name="Microsoft-Windows-ServerManager-SvrMgrNc" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DoNotOpenServerManagerAtLogon>true</DoNotOpenServerManagerAtLogon>
+ </component>
+ <component name="Microsoft-Windows-OutOfBoxExperience" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DoNotOpenInitialConfigurationTasksAtLogon>true</DoNotOpenInitialConfigurationTasksAtLogon>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-LocalSessionManager" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <fDenyTSConnections>false</fDenyTSConnections>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-RDP-WinStationExtensions" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAuthentication>0</UserAuthentication>
+ </component>
+ <component name="Networking-MPSSVC-Svc" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <FirewallGroups>
+ <FirewallGroup wcm:action="add" wcm:keyValue="RemoteDesktop">
+ <Active>true</Active>
+ <Profile>all</Profile>
+ <Group>@FirewallAPI.dll,-28752</Group>
+ </FirewallGroup>
+ </FirewallGroups>
+ </component>
+ </settings>
+ <settings pass="oobeSystem">
+ <component name="Microsoft-Windows-SecureStartup-FilterDriver" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <PreventDeviceEncryption>true</PreventDeviceEncryption>
+ </component>
+ <component name="Microsoft-Windows-EnhancedStorage-Adm" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <TCGSecurityActivationDisabled>1</TCGSecurityActivationDisabled>
+ </component>
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAccounts>
+ <LocalAccounts>
+ <LocalAccount wcm:action="add">
+ <Name>Docker</Name>
+ <Group>Administrators</Group>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </LocalAccount>
+ </LocalAccounts>
+ <AdministratorPassword>
+ <Value>password</Value>
+ <PlainText>true</PlainText>
+ </AdministratorPassword>
+ </UserAccounts>
+ <AutoLogon>
+ <Username>Docker</Username>
+ <Enabled>true</Enabled>
+ <LogonCount>65432</LogonCount>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </AutoLogon>
+ <Display>
+ <ColorDepth>32</ColorDepth>
+ <HorizontalResolution>1920</HorizontalResolution>
+ <VerticalResolution>1080</VerticalResolution>
+ </Display>
+ <OOBE>
+ <HideEULAPage>true</HideEULAPage>
+ <HideLocalAccountScreen>true</HideLocalAccountScreen>
+ <HideOEMRegistrationScreen>true</HideOEMRegistrationScreen>
+ <HideOnlineAccountScreens>true</HideOnlineAccountScreens>
+ <HideWirelessSetupInOOBE>true</HideWirelessSetupInOOBE>
+ <NetworkLocation>Home</NetworkLocation>
+ <ProtectYourPC>3</ProtectYourPC>
+ <SkipUserOOBE>true</SkipUserOOBE>
+ <SkipMachineOOBE>true</SkipMachineOOBE>
+ </OOBE>
+ <RegisteredOrganization>Dockur</RegisteredOrganization>
+ <RegisteredOwner>Windows for Docker</RegisteredOwner>
+ <FirstLogonCommands>
+ <SynchronousCommand wcm:action="add">
+ <Order>1</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" /v "AllowInsecureGuestAuth" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Allow guest access to network shares</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>2</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" /v LimitBlankPasswordUse /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Allow RDP login with blank password</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>3</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PasswordLess\Device" /v "DevicePasswordLessBuildVersion" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Enable option for passwordless sign-in</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>4</Order>
+ <CommandLine>cmd /C wmic useraccount where name="Docker" set PasswordExpires=false</CommandLine>
+ <Description>Password Never Expires</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>5</Order>
+ <CommandLine>cmd /C POWERCFG -H OFF</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>6</Order>
+ <CommandLine>cmd /C POWERCFG -X -monitor-timeout-ac 0</CommandLine>
+ <Description>Disable monitor blanking</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>7</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Edge" /v "HideFirstRunExperience" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Disable first-run experience in Edge</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>8</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "HideFileExt" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Show file extensions in Explorer</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>9</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateFileSizePercent" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Zero Hibernation File</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>10</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateEnabled" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>11</Order>
+ <CommandLine>cmd /C POWERCFG -X -standby-timeout-ac 0</CommandLine>
+ <Description>Disable Sleep</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>12</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" /v "fAllowUnlistedRemotePrograms" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Enable RemoteAPP to launch unlisted programs</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>13</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Search" /v "SearchboxTaskbarMode" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Search from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>14</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "ShowTaskViewButton" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Task View from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>15</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "TaskbarDa" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Widgets from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>16</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "TaskbarMn" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Chat from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>17</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" /v "NoAutoUpdate" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Turn off Windows Update auto download</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>18</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-32752" new enable=Yes</CommandLine>
+ <Description>Enable Network Discovery</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>19</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-28502" new enable=Yes</CommandLine>
+ <Description>Enable File Sharing</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>20</Order>
+ <CommandLine>cmd /C if exist "C:\OEM\install.bat" start "Install" "cmd /C C:\OEM\install.bat"</CommandLine>
+ <Description>Execute custom script from the OEM folder if exists</Description>
+ </SynchronousCommand>
+ </FirstLogonCommands>
+ </component>
+ </settings>
+</unattend>

assets/win2019-eval.xml

@@ -0,0 +1,341 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<unattend xmlns="urn:schemas-microsoft-com:unattend" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State">
+ <settings pass="windowsPE">
+ <component name="Microsoft-Windows-International-Core-WinPE" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SetupUILanguage>
+ <UILanguage>en-US</UILanguage>
+ </SetupUILanguage>
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UILanguageFallback>en-US</UILanguageFallback>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DiskConfiguration>
+ <Disk wcm:action="add">
+ <DiskID>0</DiskID>
+ <WillWipeDisk>true</WillWipeDisk>
+ <CreatePartitions>
+ <!-- System partition (ESP) -->
+ <CreatePartition wcm:action="add">
+ <Order>1</Order>
+ <Type>EFI</Type>
+ <Size>128</Size>
+ </CreatePartition>
+ <!-- Microsoft reserved partition (MSR) -->
+ <CreatePartition wcm:action="add">
+ <Order>2</Order>
+ <Type>MSR</Type>
+ <Size>128</Size>
+ </CreatePartition>
+ <!-- Windows partition -->
+ <CreatePartition wcm:action="add">
+ <Order>3</Order>
+ <Type>Primary</Type>
+ <Extend>true</Extend>
+ </CreatePartition>
+ </CreatePartitions>
+ <ModifyPartitions>
+ <!-- System partition (ESP) -->
+ <ModifyPartition wcm:action="add">
+ <Order>1</Order>
+ <PartitionID>1</PartitionID>
+ <Label>System</Label>
+ <Format>FAT32</Format>
+ </ModifyPartition>
+ <!-- MSR partition does not need to be modified -->
+ <ModifyPartition wcm:action="add">
+ <Order>2</Order>
+ <PartitionID>2</PartitionID>
+ </ModifyPartition>
+ <!-- Windows partition -->
+ <ModifyPartition wcm:action="add">
+ <Order>3</Order>
+ <PartitionID>3</PartitionID>
+ <Label>Windows</Label>
+ <Letter>C</Letter>
+ <Format>NTFS</Format>
+ </ModifyPartition>
+ </ModifyPartitions>
+ </Disk>
+ </DiskConfiguration>
+ <ImageInstall>
+ <OSImage>
+ <InstallFrom>
+ <MetaData wcm:action="add">
+ <Key>/IMAGE/NAME</Key>
+ <Value>Windows Server 2019 SERVERSTANDARD</Value>
+ </MetaData>
+ </InstallFrom>
+ <InstallTo>
+ <DiskID>0</DiskID>
+ <PartitionID>3</PartitionID>
+ </InstallTo>
+ <WillShowUI>OnError</WillShowUI>
+ <InstallToAvailablePartition>false</InstallToAvailablePartition>
+ </OSImage>
+ </ImageInstall>
+ <DynamicUpdate>
+ <Enable>true</Enable>
+ <WillShowUI>Never</WillShowUI>
+ </DynamicUpdate>
+ <UpgradeData>
+ <Upgrade>false</Upgrade>
+ <WillShowUI>Never</WillShowUI>
+ </UpgradeData>
+ <UserData>
+ <AcceptEula>true</AcceptEula>
+ <FullName>Docker</FullName>
+ <Organization>Windows for Docker</Organization>
+ </UserData>
+ <EnableFirewall>false</EnableFirewall>
+ <Diagnostics>
+ <OptIn>false</OptIn>
+ </Diagnostics>
+ </component>
+ </settings>
+ <settings pass="offlineServicing">
+ <component name="Microsoft-Windows-LUA-Settings" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <EnableLUA>false</EnableLUA>
+ </component>
+ </settings>
+ <settings pass="generalize">
+ <component name="Microsoft-Windows-PnPSysprep" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <PersistAllDeviceInstalls>true</PersistAllDeviceInstalls>
+ </component>
+ <component name="Microsoft-Windows-Security-SPP" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipRearm>1</SkipRearm>
+ </component>
+ </settings>
+ <settings pass="specialize">
+ <component name="Microsoft-Windows-Security-SPP-UX" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipAutoActivation>true</SkipAutoActivation>
+ </component>
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <ComputerName>*</ComputerName>
+ <OEMInformation>
+ <Manufacturer>Dockur</Manufacturer>
+ <Model>Windows for Docker</Model>
+ <SupportHours>24/7</SupportHours>
+ <SupportPhone />
+ <SupportProvider>Dockur</SupportProvider>
+ <SupportURL>https://github.com/dockur/windows/issues</SupportURL>
+ </OEMInformation>
+ <OEMName>Windows for Docker</OEMName>
+ </component>
+ <component name="Microsoft-Windows-ErrorReportingCore" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableWER>1</DisableWER>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableAccelerators>true</DisableAccelerators>
+ <DisableFirstRunWizard>true</DisableFirstRunWizard>
+ <Home_Page>https://google.com</Home_Page>
+ <Help_Page>about:blank</Help_Page>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="wow64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableAccelerators>true</DisableAccelerators>
+ <DisableFirstRunWizard>true</DisableFirstRunWizard>
+ <Home_Page>https://google.com</Home_Page>
+ <Help_Page>about:blank</Help_Page>
+ </component>
+ <component name="Microsoft-Windows-SQMApi" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <CEIPEnabled>0</CEIPEnabled>
+ </component>
+ <component name="Microsoft-Windows-SystemRestore-Main" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableSR>1</DisableSR>
+ </component>
+ <component name="Microsoft-Windows-International-Core" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UILanguageFallback>en-US</UILanguageFallback>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-Deployment" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <RunSynchronous>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>1</Order>
+ <Path>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\CurrentVersion\NetworkList\Signatures\FirstNetwork" /v Category /t REG_DWORD /d 1 /f</Path>
+ <Description>Set Network Location to Home</Description>
+ </RunSynchronousCommand>
+ </RunSynchronous>
+ </component>
+ <component name="Microsoft-Windows-ServerManager-SvrMgrNc" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DoNotOpenServerManagerAtLogon>true</DoNotOpenServerManagerAtLogon>
+ </component>
+ <component name="Microsoft-Windows-OutOfBoxExperience" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DoNotOpenInitialConfigurationTasksAtLogon>true</DoNotOpenInitialConfigurationTasksAtLogon>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-LocalSessionManager" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <fDenyTSConnections>false</fDenyTSConnections>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-RDP-WinStationExtensions" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAuthentication>0</UserAuthentication>
+ </component>
+ <component name="Networking-MPSSVC-Svc" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <FirewallGroups>
+ <FirewallGroup wcm:action="add" wcm:keyValue="RemoteDesktop">
+ <Active>true</Active>
+ <Profile>all</Profile>
+ <Group>@FirewallAPI.dll,-28752</Group>
+ </FirewallGroup>
+ </FirewallGroups>
+ </component>
+ </settings>
+ <settings pass="oobeSystem">
+ <component name="Microsoft-Windows-SecureStartup-FilterDriver" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <PreventDeviceEncryption>true</PreventDeviceEncryption>
+ </component>
+ <component name="Microsoft-Windows-EnhancedStorage-Adm" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <TCGSecurityActivationDisabled>1</TCGSecurityActivationDisabled>
+ </component>
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAccounts>
+ <LocalAccounts>
+ <LocalAccount wcm:action="add">
+ <Name>Docker</Name>
+ <Group>Administrators</Group>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </LocalAccount>
+ </LocalAccounts>
+ <AdministratorPassword>
+ <Value>password</Value>
+ <PlainText>true</PlainText>
+ </AdministratorPassword>
+ </UserAccounts>
+ <AutoLogon>
+ <Username>Docker</Username>
+ <Enabled>true</Enabled>
+ <LogonCount>65432</LogonCount>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </AutoLogon>
+ <Display>
+ <ColorDepth>32</ColorDepth>
+ <HorizontalResolution>1920</HorizontalResolution>
+ <VerticalResolution>1080</VerticalResolution>
+ </Display>
+ <OOBE>
+ <HideEULAPage>true</HideEULAPage>
+ <HideLocalAccountScreen>true</HideLocalAccountScreen>
+ <HideOEMRegistrationScreen>true</HideOEMRegistrationScreen>
+ <HideOnlineAccountScreens>true</HideOnlineAccountScreens>
+ <HideWirelessSetupInOOBE>true</HideWirelessSetupInOOBE>
+ <NetworkLocation>Home</NetworkLocation>
+ <ProtectYourPC>3</ProtectYourPC>
+ <SkipUserOOBE>true</SkipUserOOBE>
+ <SkipMachineOOBE>true</SkipMachineOOBE>
+ </OOBE>
+ <RegisteredOrganization>Dockur</RegisteredOrganization>
+ <RegisteredOwner>Windows for Docker</RegisteredOwner>
+ <FirstLogonCommands>
+ <SynchronousCommand wcm:action="add">
+ <Order>1</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" /v "AllowInsecureGuestAuth" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Allow guest access to network shares</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>2</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" /v LimitBlankPasswordUse /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Allow RDP login with blank password</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>3</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PasswordLess\Device" /v "DevicePasswordLessBuildVersion" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Enable option for passwordless sign-in</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>4</Order>
+ <CommandLine>cmd /C wmic useraccount where name="Docker" set PasswordExpires=false</CommandLine>
+ <Description>Password Never Expires</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>5</Order>
+ <CommandLine>cmd /C POWERCFG -H OFF</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>6</Order>
+ <CommandLine>cmd /C POWERCFG -X -monitor-timeout-ac 0</CommandLine>
+ <Description>Disable monitor blanking</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>7</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Edge" /v "HideFirstRunExperience" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Disable first-run experience in Edge</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>8</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "HideFileExt" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Show file extensions in Explorer</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>9</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateFileSizePercent" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Zero Hibernation File</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>10</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateEnabled" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>11</Order>
+ <CommandLine>cmd /C POWERCFG -X -standby-timeout-ac 0</CommandLine>
+ <Description>Disable Sleep</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>12</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" /v "fAllowUnlistedRemotePrograms" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Enable RemoteAPP to launch unlisted programs</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>13</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Search" /v "SearchboxTaskbarMode" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Search from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>14</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "ShowTaskViewButton" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Task View from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>15</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "TaskbarDa" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Widgets from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>16</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "TaskbarMn" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Chat from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>17</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" /v "NoAutoUpdate" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Turn off Windows Update auto download</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>18</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-32752" new enable=Yes</CommandLine>
+ <Description>Enable Network Discovery</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>19</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-28502" new enable=Yes</CommandLine>
+ <Description>Enable File Sharing</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>20</Order>
+ <CommandLine>cmd /C if exist "C:\OEM\install.bat" start "Install" "cmd /C C:\OEM\install.bat"</CommandLine>
+ <Description>Execute custom script from the OEM folder if exists</Description>
+ </SynchronousCommand>
+ </FirstLogonCommands>
+ </component>
+ </settings>
+</unattend>

assets/win2019.xml

@@ -0,0 +1,344 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<unattend xmlns="urn:schemas-microsoft-com:unattend" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State">
+ <settings pass="windowsPE">
+ <component name="Microsoft-Windows-International-Core-WinPE" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SetupUILanguage>
+ <UILanguage>en-US</UILanguage>
+ </SetupUILanguage>
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UILanguageFallback>en-US</UILanguageFallback>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DiskConfiguration>
+ <Disk wcm:action="add">
+ <DiskID>0</DiskID>
+ <WillWipeDisk>true</WillWipeDisk>
+ <CreatePartitions>
+ <!-- System partition (ESP) -->
+ <CreatePartition wcm:action="add">
+ <Order>1</Order>
+ <Type>EFI</Type>
+ <Size>128</Size>
+ </CreatePartition>
+ <!-- Microsoft reserved partition (MSR) -->
+ <CreatePartition wcm:action="add">
+ <Order>2</Order>
+ <Type>MSR</Type>
+ <Size>128</Size>
+ </CreatePartition>
+ <!-- Windows partition -->
+ <CreatePartition wcm:action="add">
+ <Order>3</Order>
+ <Type>Primary</Type>
+ <Extend>true</Extend>
+ </CreatePartition>
+ </CreatePartitions>
+ <ModifyPartitions>
+ <!-- System partition (ESP) -->
+ <ModifyPartition wcm:action="add">
+ <Order>1</Order>
+ <PartitionID>1</PartitionID>
+ <Label>System</Label>
+ <Format>FAT32</Format>
+ </ModifyPartition>
+ <!-- MSR partition does not need to be modified -->
+ <ModifyPartition wcm:action="add">
+ <Order>2</Order>
+ <PartitionID>2</PartitionID>
+ </ModifyPartition>
+ <!-- Windows partition -->
+ <ModifyPartition wcm:action="add">
+ <Order>3</Order>
+ <PartitionID>3</PartitionID>
+ <Label>Windows</Label>
+ <Letter>C</Letter>
+ <Format>NTFS</Format>
+ </ModifyPartition>
+ </ModifyPartitions>
+ </Disk>
+ </DiskConfiguration>
+ <ImageInstall>
+ <OSImage>
+ <InstallFrom>
+ <MetaData wcm:action="add">
+ <Key>/IMAGE/NAME</Key>
+ <Value>Windows Server 2019 SERVERSTANDARD</Value>
+ </MetaData>
+ </InstallFrom>
+ <InstallTo>
+ <DiskID>0</DiskID>
+ <PartitionID>3</PartitionID>
+ </InstallTo>
+ <WillShowUI>OnError</WillShowUI>
+ <InstallToAvailablePartition>false</InstallToAvailablePartition>
+ </OSImage>
+ </ImageInstall>
+ <DynamicUpdate>
+ <Enable>true</Enable>
+ <WillShowUI>Never</WillShowUI>
+ </DynamicUpdate>
+ <UpgradeData>
+ <Upgrade>false</Upgrade>
+ <WillShowUI>Never</WillShowUI>
+ </UpgradeData>
+ <UserData>
+ <AcceptEula>true</AcceptEula>
+ <FullName>Docker</FullName>
+ <Organization>Windows for Docker</Organization>
+ <ProductKey>
+ <Key>N69G4-B89J2-4G8F4-WWYCC-J464C</Key>
+ </ProductKey>
+ </UserData>
+ <EnableFirewall>false</EnableFirewall>
+ <Diagnostics>
+ <OptIn>false</OptIn>
+ </Diagnostics>
+ </component>
+ </settings>
+ <settings pass="offlineServicing">
+ <component name="Microsoft-Windows-LUA-Settings" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <EnableLUA>false</EnableLUA>
+ </component>
+ </settings>
+ <settings pass="generalize">
+ <component name="Microsoft-Windows-PnPSysprep" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <PersistAllDeviceInstalls>true</PersistAllDeviceInstalls>
+ </component>
+ <component name="Microsoft-Windows-Security-SPP" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipRearm>1</SkipRearm>
+ </component>
+ </settings>
+ <settings pass="specialize">
+ <component name="Microsoft-Windows-Security-SPP-UX" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipAutoActivation>true</SkipAutoActivation>
+ </component>
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <ComputerName>*</ComputerName>
+ <OEMInformation>
+ <Manufacturer>Dockur</Manufacturer>
+ <Model>Windows for Docker</Model>
+ <SupportHours>24/7</SupportHours>
+ <SupportPhone />
+ <SupportProvider>Dockur</SupportProvider>
+ <SupportURL>https://github.com/dockur/windows/issues</SupportURL>
+ </OEMInformation>
+ <OEMName>Windows for Docker</OEMName>
+ </component>
+ <component name="Microsoft-Windows-ErrorReportingCore" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableWER>1</DisableWER>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableAccelerators>true</DisableAccelerators>
+ <DisableFirstRunWizard>true</DisableFirstRunWizard>
+ <Home_Page>https://google.com</Home_Page>
+ <Help_Page>about:blank</Help_Page>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="wow64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableAccelerators>true</DisableAccelerators>
+ <DisableFirstRunWizard>true</DisableFirstRunWizard>
+ <Home_Page>https://google.com</Home_Page>
+ <Help_Page>about:blank</Help_Page>
+ </component>
+ <component name="Microsoft-Windows-SQMApi" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <CEIPEnabled>0</CEIPEnabled>
+ </component>
+ <component name="Microsoft-Windows-SystemRestore-Main" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableSR>1</DisableSR>
+ </component>
+ <component name="Microsoft-Windows-International-Core" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UILanguageFallback>en-US</UILanguageFallback>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-Deployment" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <RunSynchronous>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>1</Order>
+ <Path>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\CurrentVersion\NetworkList\Signatures\FirstNetwork" /v Category /t REG_DWORD /d 1 /f</Path>
+ <Description>Set Network Location to Home</Description>
+ </RunSynchronousCommand>
+ </RunSynchronous>
+ </component>
+ <component name="Microsoft-Windows-ServerManager-SvrMgrNc" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DoNotOpenServerManagerAtLogon>true</DoNotOpenServerManagerAtLogon>
+ </component>
+ <component name="Microsoft-Windows-OutOfBoxExperience" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DoNotOpenInitialConfigurationTasksAtLogon>true</DoNotOpenInitialConfigurationTasksAtLogon>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-LocalSessionManager" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <fDenyTSConnections>false</fDenyTSConnections>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-RDP-WinStationExtensions" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAuthentication>0</UserAuthentication>
+ </component>
+ <component name="Networking-MPSSVC-Svc" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <FirewallGroups>
+ <FirewallGroup wcm:action="add" wcm:keyValue="RemoteDesktop">
+ <Active>true</Active>
+ <Profile>all</Profile>
+ <Group>@FirewallAPI.dll,-28752</Group>
+ </FirewallGroup>
+ </FirewallGroups>
+ </component>
+ </settings>
+ <settings pass="oobeSystem">
+ <component name="Microsoft-Windows-SecureStartup-FilterDriver" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <PreventDeviceEncryption>true</PreventDeviceEncryption>
+ </component>
+ <component name="Microsoft-Windows-EnhancedStorage-Adm" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <TCGSecurityActivationDisabled>1</TCGSecurityActivationDisabled>
+ </component>
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAccounts>
+ <LocalAccounts>
+ <LocalAccount wcm:action="add">
+ <Name>Docker</Name>
+ <Group>Administrators</Group>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </LocalAccount>
+ </LocalAccounts>
+ <AdministratorPassword>
+ <Value>password</Value>
+ <PlainText>true</PlainText>
+ </AdministratorPassword>
+ </UserAccounts>
+ <AutoLogon>
+ <Username>Docker</Username>
+ <Enabled>true</Enabled>
+ <LogonCount>65432</LogonCount>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </AutoLogon>
+ <Display>
+ <ColorDepth>32</ColorDepth>
+ <HorizontalResolution>1920</HorizontalResolution>
+ <VerticalResolution>1080</VerticalResolution>
+ </Display>
+ <OOBE>
+ <HideEULAPage>true</HideEULAPage>
+ <HideLocalAccountScreen>true</HideLocalAccountScreen>
+ <HideOEMRegistrationScreen>true</HideOEMRegistrationScreen>
+ <HideOnlineAccountScreens>true</HideOnlineAccountScreens>
+ <HideWirelessSetupInOOBE>true</HideWirelessSetupInOOBE>
+ <NetworkLocation>Home</NetworkLocation>
+ <ProtectYourPC>3</ProtectYourPC>
+ <SkipUserOOBE>true</SkipUserOOBE>
+ <SkipMachineOOBE>true</SkipMachineOOBE>
+ </OOBE>
+ <RegisteredOrganization>Dockur</RegisteredOrganization>
+ <RegisteredOwner>Windows for Docker</RegisteredOwner>
+ <FirstLogonCommands>
+ <SynchronousCommand wcm:action="add">
+ <Order>1</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" /v "AllowInsecureGuestAuth" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Allow guest access to network shares</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>2</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" /v LimitBlankPasswordUse /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Allow RDP login with blank password</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>3</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PasswordLess\Device" /v "DevicePasswordLessBuildVersion" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Enable option for passwordless sign-in</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>4</Order>
+ <CommandLine>cmd /C wmic useraccount where name="Docker" set PasswordExpires=false</CommandLine>
+ <Description>Password Never Expires</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>5</Order>
+ <CommandLine>cmd /C POWERCFG -H OFF</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>6</Order>
+ <CommandLine>cmd /C POWERCFG -X -monitor-timeout-ac 0</CommandLine>
+ <Description>Disable monitor blanking</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>7</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Edge" /v "HideFirstRunExperience" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Disable first-run experience in Edge</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>8</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "HideFileExt" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Show file extensions in Explorer</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>9</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateFileSizePercent" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Zero Hibernation File</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>10</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateEnabled" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>11</Order>
+ <CommandLine>cmd /C POWERCFG -X -standby-timeout-ac 0</CommandLine>
+ <Description>Disable Sleep</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>12</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" /v "fAllowUnlistedRemotePrograms" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Enable RemoteAPP to launch unlisted programs</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>13</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Search" /v "SearchboxTaskbarMode" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Search from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>14</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "ShowTaskViewButton" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Task View from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>15</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "TaskbarDa" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Widgets from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>16</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "TaskbarMn" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Chat from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>17</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" /v "NoAutoUpdate" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Turn off Windows Update auto download</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>18</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-32752" new enable=Yes</CommandLine>
+ <Description>Enable Network Discovery</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>19</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-28502" new enable=Yes</CommandLine>
+ <Description>Enable File Sharing</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>20</Order>
+ <CommandLine>cmd /C if exist "C:\OEM\install.bat" start "Install" "cmd /C C:\OEM\install.bat"</CommandLine>
+ <Description>Execute custom script from the OEM folder if exists</Description>
+ </SynchronousCommand>
+ </FirstLogonCommands>
+ </component>
+ </settings>
+</unattend>

assets/win2022-eval.xml

@@ -0,0 +1,341 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<unattend xmlns="urn:schemas-microsoft-com:unattend" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State">
+ <settings pass="windowsPE">
+ <component name="Microsoft-Windows-International-Core-WinPE" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SetupUILanguage>
+ <UILanguage>en-US</UILanguage>
+ </SetupUILanguage>
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UILanguageFallback>en-US</UILanguageFallback>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DiskConfiguration>
+ <Disk wcm:action="add">
+ <DiskID>0</DiskID>
+ <WillWipeDisk>true</WillWipeDisk>
+ <CreatePartitions>
+ <!-- System partition (ESP) -->
+ <CreatePartition wcm:action="add">
+ <Order>1</Order>
+ <Type>EFI</Type>
+ <Size>128</Size>
+ </CreatePartition>
+ <!-- Microsoft reserved partition (MSR) -->
+ <CreatePartition wcm:action="add">
+ <Order>2</Order>
+ <Type>MSR</Type>
+ <Size>128</Size>
+ </CreatePartition>
+ <!-- Windows partition -->
+ <CreatePartition wcm:action="add">
+ <Order>3</Order>
+ <Type>Primary</Type>
+ <Extend>true</Extend>
+ </CreatePartition>
+ </CreatePartitions>
+ <ModifyPartitions>
+ <!-- System partition (ESP) -->
+ <ModifyPartition wcm:action="add">
+ <Order>1</Order>
+ <PartitionID>1</PartitionID>
+ <Label>System</Label>
+ <Format>FAT32</Format>
+ </ModifyPartition>
+ <!-- MSR partition does not need to be modified -->
+ <ModifyPartition wcm:action="add">
+ <Order>2</Order>
+ <PartitionID>2</PartitionID>
+ </ModifyPartition>
+ <!-- Windows partition -->
+ <ModifyPartition wcm:action="add">
+ <Order>3</Order>
+ <PartitionID>3</PartitionID>
+ <Label>Windows</Label>
+ <Letter>C</Letter>
+ <Format>NTFS</Format>
+ </ModifyPartition>
+ </ModifyPartitions>
+ </Disk>
+ </DiskConfiguration>
+ <ImageInstall>
+ <OSImage>
+ <InstallFrom>
+ <MetaData wcm:action="add">
+ <Key>/IMAGE/NAME</Key>
+ <Value>Windows Server 2022 SERVERSTANDARD</Value>
+ </MetaData>
+ </InstallFrom>
+ <InstallTo>
+ <DiskID>0</DiskID>
+ <PartitionID>3</PartitionID>
+ </InstallTo>
+ <WillShowUI>OnError</WillShowUI>
+ <InstallToAvailablePartition>false</InstallToAvailablePartition>
+ </OSImage>
+ </ImageInstall>
+ <DynamicUpdate>
+ <Enable>true</Enable>
+ <WillShowUI>Never</WillShowUI>
+ </DynamicUpdate>
+ <UpgradeData>
+ <Upgrade>false</Upgrade>
+ <WillShowUI>Never</WillShowUI>
+ </UpgradeData>
+ <UserData>
+ <AcceptEula>true</AcceptEula>
+ <FullName>Docker</FullName>
+ <Organization>Windows for Docker</Organization>
+ </UserData>
+ <EnableFirewall>false</EnableFirewall>
+ <Diagnostics>
+ <OptIn>false</OptIn>
+ </Diagnostics>
+ </component>
+ </settings>
+ <settings pass="offlineServicing">
+ <component name="Microsoft-Windows-LUA-Settings" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <EnableLUA>false</EnableLUA>
+ </component>
+ </settings>
+ <settings pass="generalize">
+ <component name="Microsoft-Windows-PnPSysprep" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <PersistAllDeviceInstalls>true</PersistAllDeviceInstalls>
+ </component>
+ <component name="Microsoft-Windows-Security-SPP" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipRearm>1</SkipRearm>
+ </component>
+ </settings>
+ <settings pass="specialize">
+ <component name="Microsoft-Windows-Security-SPP-UX" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipAutoActivation>true</SkipAutoActivation>
+ </component>
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <ComputerName>*</ComputerName>
+ <OEMInformation>
+ <Manufacturer>Dockur</Manufacturer>
+ <Model>Windows for Docker</Model>
+ <SupportHours>24/7</SupportHours>
+ <SupportPhone />
+ <SupportProvider>Dockur</SupportProvider>
+ <SupportURL>https://github.com/dockur/windows/issues</SupportURL>
+ </OEMInformation>
+ <OEMName>Windows for Docker</OEMName>
+ </component>
+ <component name="Microsoft-Windows-ErrorReportingCore" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableWER>1</DisableWER>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableAccelerators>true</DisableAccelerators>
+ <DisableFirstRunWizard>true</DisableFirstRunWizard>
+ <Home_Page>https://google.com</Home_Page>
+ <Help_Page>about:blank</Help_Page>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="wow64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableAccelerators>true</DisableAccelerators>
+ <DisableFirstRunWizard>true</DisableFirstRunWizard>
+ <Home_Page>https://google.com</Home_Page>
+ <Help_Page>about:blank</Help_Page>
+ </component>
+ <component name="Microsoft-Windows-SQMApi" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <CEIPEnabled>0</CEIPEnabled>
+ </component>
+ <component name="Microsoft-Windows-SystemRestore-Main" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableSR>1</DisableSR>
+ </component>
+ <component name="Microsoft-Windows-International-Core" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UILanguageFallback>en-US</UILanguageFallback>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-Deployment" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <RunSynchronous>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>1</Order>
+ <Path>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\CurrentVersion\NetworkList\Signatures\FirstNetwork" /v Category /t REG_DWORD /d 1 /f</Path>
+ <Description>Set Network Location to Home</Description>
+ </RunSynchronousCommand>
+ </RunSynchronous>
+ </component>
+ <component name="Microsoft-Windows-ServerManager-SvrMgrNc" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DoNotOpenServerManagerAtLogon>true</DoNotOpenServerManagerAtLogon>
+ </component>
+ <component name="Microsoft-Windows-OutOfBoxExperience" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DoNotOpenInitialConfigurationTasksAtLogon>true</DoNotOpenInitialConfigurationTasksAtLogon>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-LocalSessionManager" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <fDenyTSConnections>false</fDenyTSConnections>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-RDP-WinStationExtensions" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAuthentication>0</UserAuthentication>
+ </component>
+ <component name="Networking-MPSSVC-Svc" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <FirewallGroups>
+ <FirewallGroup wcm:action="add" wcm:keyValue="RemoteDesktop">
+ <Active>true</Active>
+ <Profile>all</Profile>
+ <Group>@FirewallAPI.dll,-28752</Group>
+ </FirewallGroup>
+ </FirewallGroups>
+ </component>
+ </settings>
+ <settings pass="oobeSystem">
+ <component name="Microsoft-Windows-SecureStartup-FilterDriver" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <PreventDeviceEncryption>true</PreventDeviceEncryption>
+ </component>
+ <component name="Microsoft-Windows-EnhancedStorage-Adm" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <TCGSecurityActivationDisabled>1</TCGSecurityActivationDisabled>
+ </component>
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAccounts>
+ <LocalAccounts>
+ <LocalAccount wcm:action="add">
+ <Name>Docker</Name>
+ <Group>Administrators</Group>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </LocalAccount>
+ </LocalAccounts>
+ <AdministratorPassword>
+ <Value>password</Value>
+ <PlainText>true</PlainText>
+ </AdministratorPassword>
+ </UserAccounts>
+ <AutoLogon>
+ <Username>Docker</Username>
+ <Enabled>true</Enabled>
+ <LogonCount>65432</LogonCount>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </AutoLogon>
+ <Display>
+ <ColorDepth>32</ColorDepth>
+ <HorizontalResolution>1920</HorizontalResolution>
+ <VerticalResolution>1080</VerticalResolution>
+ </Display>
+ <OOBE>
+ <HideEULAPage>true</HideEULAPage>
+ <HideLocalAccountScreen>true</HideLocalAccountScreen>
+ <HideOEMRegistrationScreen>true</HideOEMRegistrationScreen>
+ <HideOnlineAccountScreens>true</HideOnlineAccountScreens>
+ <HideWirelessSetupInOOBE>true</HideWirelessSetupInOOBE>
+ <NetworkLocation>Home</NetworkLocation>
+ <ProtectYourPC>3</ProtectYourPC>
+ <SkipUserOOBE>true</SkipUserOOBE>
+ <SkipMachineOOBE>true</SkipMachineOOBE>
+ </OOBE>
+ <RegisteredOrganization>Dockur</RegisteredOrganization>
+ <RegisteredOwner>Windows for Docker</RegisteredOwner>
+ <FirstLogonCommands>
+ <SynchronousCommand wcm:action="add">
+ <Order>1</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" /v "AllowInsecureGuestAuth" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Allow guest access to network shares</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>2</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" /v LimitBlankPasswordUse /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Allow RDP login with blank password</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>3</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PasswordLess\Device" /v "DevicePasswordLessBuildVersion" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Enable option for passwordless sign-in</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>4</Order>
+ <CommandLine>cmd /C wmic useraccount where name="Docker" set PasswordExpires=false</CommandLine>
+ <Description>Password Never Expires</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>5</Order>
+ <CommandLine>cmd /C POWERCFG -H OFF</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>6</Order>
+ <CommandLine>cmd /C POWERCFG -X -monitor-timeout-ac 0</CommandLine>
+ <Description>Disable monitor blanking</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>7</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Edge" /v "HideFirstRunExperience" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Disable first-run experience in Edge</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>8</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "HideFileExt" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Show file extensions in Explorer</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>9</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateFileSizePercent" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Zero Hibernation File</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>10</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateEnabled" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>11</Order>
+ <CommandLine>cmd /C POWERCFG -X -standby-timeout-ac 0</CommandLine>
+ <Description>Disable Sleep</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>12</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" /v "fAllowUnlistedRemotePrograms" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Enable RemoteAPP to launch unlisted programs</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>13</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Search" /v "SearchboxTaskbarMode" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Search from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>14</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "ShowTaskViewButton" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Task View from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>15</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "TaskbarDa" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Widgets from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>16</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "TaskbarMn" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Chat from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>17</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" /v "NoAutoUpdate" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Turn off Windows Update auto download</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>18</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-32752" new enable=Yes</CommandLine>
+ <Description>Enable Network Discovery</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>19</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-28502" new enable=Yes</CommandLine>
+ <Description>Enable File Sharing</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>20</Order>
+ <CommandLine>cmd /C if exist "C:\OEM\install.bat" start "Install" "cmd /C C:\OEM\install.bat"</CommandLine>
+ <Description>Execute custom script from the OEM folder if exists</Description>
+ </SynchronousCommand>
+ </FirstLogonCommands>
+ </component>
+ </settings>
+</unattend>

assets/win2022.xml

@@ -0,0 +1,344 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<unattend xmlns="urn:schemas-microsoft-com:unattend" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State">
+ <settings pass="windowsPE">
+ <component name="Microsoft-Windows-International-Core-WinPE" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SetupUILanguage>
+ <UILanguage>en-US</UILanguage>
+ </SetupUILanguage>
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UILanguageFallback>en-US</UILanguageFallback>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DiskConfiguration>
+ <Disk wcm:action="add">
+ <DiskID>0</DiskID>
+ <WillWipeDisk>true</WillWipeDisk>
+ <CreatePartitions>
+ <!-- System partition (ESP) -->
+ <CreatePartition wcm:action="add">
+ <Order>1</Order>
+ <Type>EFI</Type>
+ <Size>128</Size>
+ </CreatePartition>
+ <!-- Microsoft reserved partition (MSR) -->
+ <CreatePartition wcm:action="add">
+ <Order>2</Order>
+ <Type>MSR</Type>
+ <Size>128</Size>
+ </CreatePartition>
+ <!-- Windows partition -->
+ <CreatePartition wcm:action="add">
+ <Order>3</Order>
+ <Type>Primary</Type>
+ <Extend>true</Extend>
+ </CreatePartition>
+ </CreatePartitions>
+ <ModifyPartitions>
+ <!-- System partition (ESP) -->
+ <ModifyPartition wcm:action="add">
+ <Order>1</Order>
+ <PartitionID>1</PartitionID>
+ <Label>System</Label>
+ <Format>FAT32</Format>
+ </ModifyPartition>
+ <!-- MSR partition does not need to be modified -->
+ <ModifyPartition wcm:action="add">
+ <Order>2</Order>
+ <PartitionID>2</PartitionID>
+ </ModifyPartition>
+ <!-- Windows partition -->
+ <ModifyPartition wcm:action="add">
+ <Order>3</Order>
+ <PartitionID>3</PartitionID>
+ <Label>Windows</Label>
+ <Letter>C</Letter>
+ <Format>NTFS</Format>
+ </ModifyPartition>
+ </ModifyPartitions>
+ </Disk>
+ </DiskConfiguration>
+ <ImageInstall>
+ <OSImage>
+ <InstallFrom>
+ <MetaData wcm:action="add">
+ <Key>/IMAGE/NAME</Key>
+ <Value>Windows Server 2022 SERVERSTANDARD</Value>
+ </MetaData>
+ </InstallFrom>
+ <InstallTo>
+ <DiskID>0</DiskID>
+ <PartitionID>3</PartitionID>
+ </InstallTo>
+ <WillShowUI>OnError</WillShowUI>
+ <InstallToAvailablePartition>false</InstallToAvailablePartition>
+ </OSImage>
+ </ImageInstall>
+ <DynamicUpdate>
+ <Enable>true</Enable>
+ <WillShowUI>Never</WillShowUI>
+ </DynamicUpdate>
+ <UpgradeData>
+ <Upgrade>false</Upgrade>
+ <WillShowUI>Never</WillShowUI>
+ </UpgradeData>
+ <UserData>
+ <AcceptEula>true</AcceptEula>
+ <FullName>Docker</FullName>
+ <Organization>Windows for Docker</Organization>
+ <ProductKey>
+ <Key>VDYBN-27WPP-V4HQT-9VMD4-VMK7H</Key>
+ </ProductKey>
+ </UserData>
+ <EnableFirewall>false</EnableFirewall>
+ <Diagnostics>
+ <OptIn>false</OptIn>
+ </Diagnostics>
+ </component>
+ </settings>
+ <settings pass="offlineServicing">
+ <component name="Microsoft-Windows-LUA-Settings" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <EnableLUA>false</EnableLUA>
+ </component>
+ </settings>
+ <settings pass="generalize">
+ <component name="Microsoft-Windows-PnPSysprep" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <PersistAllDeviceInstalls>true</PersistAllDeviceInstalls>
+ </component>
+ <component name="Microsoft-Windows-Security-SPP" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipRearm>1</SkipRearm>
+ </component>
+ </settings>
+ <settings pass="specialize">
+ <component name="Microsoft-Windows-Security-SPP-UX" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipAutoActivation>true</SkipAutoActivation>
+ </component>
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <ComputerName>*</ComputerName>
+ <OEMInformation>
+ <Manufacturer>Dockur</Manufacturer>
+ <Model>Windows for Docker</Model>
+ <SupportHours>24/7</SupportHours>
+ <SupportPhone />
+ <SupportProvider>Dockur</SupportProvider>
+ <SupportURL>https://github.com/dockur/windows/issues</SupportURL>
+ </OEMInformation>
+ <OEMName>Windows for Docker</OEMName>
+ </component>
+ <component name="Microsoft-Windows-ErrorReportingCore" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableWER>1</DisableWER>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableAccelerators>true</DisableAccelerators>
+ <DisableFirstRunWizard>true</DisableFirstRunWizard>
+ <Home_Page>https://google.com</Home_Page>
+ <Help_Page>about:blank</Help_Page>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="wow64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableAccelerators>true</DisableAccelerators>
+ <DisableFirstRunWizard>true</DisableFirstRunWizard>
+ <Home_Page>https://google.com</Home_Page>
+ <Help_Page>about:blank</Help_Page>
+ </component>
+ <component name="Microsoft-Windows-SQMApi" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <CEIPEnabled>0</CEIPEnabled>
+ </component>
+ <component name="Microsoft-Windows-SystemRestore-Main" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableSR>1</DisableSR>
+ </component>
+ <component name="Microsoft-Windows-International-Core" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UILanguageFallback>en-US</UILanguageFallback>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-Deployment" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <RunSynchronous>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>1</Order>
+ <Path>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\CurrentVersion\NetworkList\Signatures\FirstNetwork" /v Category /t REG_DWORD /d 1 /f</Path>
+ <Description>Set Network Location to Home</Description>
+ </RunSynchronousCommand>
+ </RunSynchronous>
+ </component>
+ <component name="Microsoft-Windows-ServerManager-SvrMgrNc" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DoNotOpenServerManagerAtLogon>true</DoNotOpenServerManagerAtLogon>
+ </component>
+ <component name="Microsoft-Windows-OutOfBoxExperience" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DoNotOpenInitialConfigurationTasksAtLogon>true</DoNotOpenInitialConfigurationTasksAtLogon>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-LocalSessionManager" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <fDenyTSConnections>false</fDenyTSConnections>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-RDP-WinStationExtensions" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAuthentication>0</UserAuthentication>
+ </component>
+ <component name="Networking-MPSSVC-Svc" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <FirewallGroups>
+ <FirewallGroup wcm:action="add" wcm:keyValue="RemoteDesktop">
+ <Active>true</Active>
+ <Profile>all</Profile>
+ <Group>@FirewallAPI.dll,-28752</Group>
+ </FirewallGroup>
+ </FirewallGroups>
+ </component>
+ </settings>
+ <settings pass="oobeSystem">
+ <component name="Microsoft-Windows-SecureStartup-FilterDriver" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <PreventDeviceEncryption>true</PreventDeviceEncryption>
+ </component>
+ <component name="Microsoft-Windows-EnhancedStorage-Adm" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <TCGSecurityActivationDisabled>1</TCGSecurityActivationDisabled>
+ </component>
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAccounts>
+ <LocalAccounts>
+ <LocalAccount wcm:action="add">
+ <Name>Docker</Name>
+ <Group>Administrators</Group>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </LocalAccount>
+ </LocalAccounts>
+ <AdministratorPassword>
+ <Value>password</Value>
+ <PlainText>true</PlainText>
+ </AdministratorPassword>
+ </UserAccounts>
+ <AutoLogon>
+ <Username>Docker</Username>
+ <Enabled>true</Enabled>
+ <LogonCount>65432</LogonCount>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </AutoLogon>
+ <Display>
+ <ColorDepth>32</ColorDepth>
+ <HorizontalResolution>1920</HorizontalResolution>
+ <VerticalResolution>1080</VerticalResolution>
+ </Display>
+ <OOBE>
+ <HideEULAPage>true</HideEULAPage>
+ <HideLocalAccountScreen>true</HideLocalAccountScreen>
+ <HideOEMRegistrationScreen>true</HideOEMRegistrationScreen>
+ <HideOnlineAccountScreens>true</HideOnlineAccountScreens>
+ <HideWirelessSetupInOOBE>true</HideWirelessSetupInOOBE>
+ <NetworkLocation>Home</NetworkLocation>
+ <ProtectYourPC>3</ProtectYourPC>
+ <SkipUserOOBE>true</SkipUserOOBE>
+ <SkipMachineOOBE>true</SkipMachineOOBE>
+ </OOBE>
+ <RegisteredOrganization>Dockur</RegisteredOrganization>
+ <RegisteredOwner>Windows for Docker</RegisteredOwner>
+ <FirstLogonCommands>
+ <SynchronousCommand wcm:action="add">
+ <Order>1</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" /v "AllowInsecureGuestAuth" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Allow guest access to network shares</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>2</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" /v LimitBlankPasswordUse /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Allow RDP login with blank password</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>3</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PasswordLess\Device" /v "DevicePasswordLessBuildVersion" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Enable option for passwordless sign-in</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>4</Order>
+ <CommandLine>cmd /C wmic useraccount where name="Docker" set PasswordExpires=false</CommandLine>
+ <Description>Password Never Expires</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>5</Order>
+ <CommandLine>cmd /C POWERCFG -H OFF</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>6</Order>
+ <CommandLine>cmd /C POWERCFG -X -monitor-timeout-ac 0</CommandLine>
+ <Description>Disable monitor blanking</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>7</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Edge" /v "HideFirstRunExperience" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Disable first-run experience in Edge</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>8</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "HideFileExt" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Show file extensions in Explorer</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>9</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateFileSizePercent" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Zero Hibernation File</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>10</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateEnabled" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>11</Order>
+ <CommandLine>cmd /C POWERCFG -X -standby-timeout-ac 0</CommandLine>
+ <Description>Disable Sleep</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>12</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" /v "fAllowUnlistedRemotePrograms" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Enable RemoteAPP to launch unlisted programs</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>13</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Search" /v "SearchboxTaskbarMode" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Search from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>14</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "ShowTaskViewButton" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Task View from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>15</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "TaskbarDa" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Widgets from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>16</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "TaskbarMn" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Chat from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>17</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" /v "NoAutoUpdate" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Turn off Windows Update auto download</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>18</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-32752" new enable=Yes</CommandLine>
+ <Description>Enable Network Discovery</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>19</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-28502" new enable=Yes</CommandLine>
+ <Description>Enable File Sharing</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>20</Order>
+ <CommandLine>cmd /C if exist "C:\OEM\install.bat" start "Install" "cmd /C C:\OEM\install.bat"</CommandLine>
+ <Description>Execute custom script from the OEM folder if exists</Description>
+ </SynchronousCommand>
+ </FirstLogonCommands>
+ </component>
+ </settings>
+</unattend>

assets/win2025-eval.xml

@@ -0,0 +1,341 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<unattend xmlns="urn:schemas-microsoft-com:unattend" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State">
+ <settings pass="windowsPE">
+ <component name="Microsoft-Windows-International-Core-WinPE" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SetupUILanguage>
+ <UILanguage>en-US</UILanguage>
+ </SetupUILanguage>
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UILanguageFallback>en-US</UILanguageFallback>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DiskConfiguration>
+ <Disk wcm:action="add">
+ <DiskID>0</DiskID>
+ <WillWipeDisk>true</WillWipeDisk>
+ <CreatePartitions>
+ <!-- System partition (ESP) -->
+ <CreatePartition wcm:action="add">
+ <Order>1</Order>
+ <Type>EFI</Type>
+ <Size>128</Size>
+ </CreatePartition>
+ <!-- Microsoft reserved partition (MSR) -->
+ <CreatePartition wcm:action="add">
+ <Order>2</Order>
+ <Type>MSR</Type>
+ <Size>128</Size>
+ </CreatePartition>
+ <!-- Windows partition -->
+ <CreatePartition wcm:action="add">
+ <Order>3</Order>
+ <Type>Primary</Type>
+ <Extend>true</Extend>
+ </CreatePartition>
+ </CreatePartitions>
+ <ModifyPartitions>
+ <!-- System partition (ESP) -->
+ <ModifyPartition wcm:action="add">
+ <Order>1</Order>
+ <PartitionID>1</PartitionID>
+ <Label>System</Label>
+ <Format>FAT32</Format>
+ </ModifyPartition>
+ <!-- MSR partition does not need to be modified -->
+ <ModifyPartition wcm:action="add">
+ <Order>2</Order>
+ <PartitionID>2</PartitionID>
+ </ModifyPartition>
+ <!-- Windows partition -->
+ <ModifyPartition wcm:action="add">
+ <Order>3</Order>
+ <PartitionID>3</PartitionID>
+ <Label>Windows</Label>
+ <Letter>C</Letter>
+ <Format>NTFS</Format>
+ </ModifyPartition>
+ </ModifyPartitions>
+ </Disk>
+ </DiskConfiguration>
+ <ImageInstall>
+ <OSImage>
+ <InstallFrom>
+ <MetaData wcm:action="add">
+ <Key>/IMAGE/NAME</Key>
+ <Value>Windows Server 2025 SERVERSTANDARD</Value>
+ </MetaData>
+ </InstallFrom>
+ <InstallTo>
+ <DiskID>0</DiskID>
+ <PartitionID>3</PartitionID>
+ </InstallTo>
+ <WillShowUI>OnError</WillShowUI>
+ <InstallToAvailablePartition>false</InstallToAvailablePartition>
+ </OSImage>
+ </ImageInstall>
+ <DynamicUpdate>
+ <Enable>true</Enable>
+ <WillShowUI>Never</WillShowUI>
+ </DynamicUpdate>
+ <UpgradeData>
+ <Upgrade>false</Upgrade>
+ <WillShowUI>Never</WillShowUI>
+ </UpgradeData>
+ <UserData>
+ <AcceptEula>true</AcceptEula>
+ <FullName>Docker</FullName>
+ <Organization>Windows for Docker</Organization>
+ </UserData>
+ <EnableFirewall>false</EnableFirewall>
+ <Diagnostics>
+ <OptIn>false</OptIn>
+ </Diagnostics>
+ </component>
+ </settings>
+ <settings pass="offlineServicing">
+ <component name="Microsoft-Windows-LUA-Settings" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <EnableLUA>false</EnableLUA>
+ </component>
+ </settings>
+ <settings pass="generalize">
+ <component name="Microsoft-Windows-PnPSysprep" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <PersistAllDeviceInstalls>true</PersistAllDeviceInstalls>
+ </component>
+ <component name="Microsoft-Windows-Security-SPP" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipRearm>1</SkipRearm>
+ </component>
+ </settings>
+ <settings pass="specialize">
+ <component name="Microsoft-Windows-Security-SPP-UX" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipAutoActivation>true</SkipAutoActivation>
+ </component>
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <ComputerName>*</ComputerName>
+ <OEMInformation>
+ <Manufacturer>Dockur</Manufacturer>
+ <Model>Windows for Docker</Model>
+ <SupportHours>24/7</SupportHours>
+ <SupportPhone />
+ <SupportProvider>Dockur</SupportProvider>
+ <SupportURL>https://github.com/dockur/windows/issues</SupportURL>
+ </OEMInformation>
+ <OEMName>Windows for Docker</OEMName>
+ </component>
+ <component name="Microsoft-Windows-ErrorReportingCore" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableWER>1</DisableWER>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableAccelerators>true</DisableAccelerators>
+ <DisableFirstRunWizard>true</DisableFirstRunWizard>
+ <Home_Page>https://google.com</Home_Page>
+ <Help_Page>about:blank</Help_Page>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="wow64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableAccelerators>true</DisableAccelerators>
+ <DisableFirstRunWizard>true</DisableFirstRunWizard>
+ <Home_Page>https://google.com</Home_Page>
+ <Help_Page>about:blank</Help_Page>
+ </component>
+ <component name="Microsoft-Windows-SQMApi" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <CEIPEnabled>0</CEIPEnabled>
+ </component>
+ <component name="Microsoft-Windows-SystemRestore-Main" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableSR>1</DisableSR>
+ </component>
+ <component name="Microsoft-Windows-International-Core" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UILanguageFallback>en-US</UILanguageFallback>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-Deployment" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <RunSynchronous>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>1</Order>
+ <Path>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\CurrentVersion\NetworkList\Signatures\FirstNetwork" /v Category /t REG_DWORD /d 1 /f</Path>
+ <Description>Set Network Location to Home</Description>
+ </RunSynchronousCommand>
+ </RunSynchronous>
+ </component>
+ <component name="Microsoft-Windows-ServerManager-SvrMgrNc" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DoNotOpenServerManagerAtLogon>true</DoNotOpenServerManagerAtLogon>
+ </component>
+ <component name="Microsoft-Windows-OutOfBoxExperience" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DoNotOpenInitialConfigurationTasksAtLogon>true</DoNotOpenInitialConfigurationTasksAtLogon>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-LocalSessionManager" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <fDenyTSConnections>false</fDenyTSConnections>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-RDP-WinStationExtensions" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAuthentication>0</UserAuthentication>
+ </component>
+ <component name="Networking-MPSSVC-Svc" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <FirewallGroups>
+ <FirewallGroup wcm:action="add" wcm:keyValue="RemoteDesktop">
+ <Active>true</Active>
+ <Profile>all</Profile>
+ <Group>@FirewallAPI.dll,-28752</Group>
+ </FirewallGroup>
+ </FirewallGroups>
+ </component>
+ </settings>
+ <settings pass="oobeSystem">
+ <component name="Microsoft-Windows-SecureStartup-FilterDriver" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <PreventDeviceEncryption>true</PreventDeviceEncryption>
+ </component>
+ <component name="Microsoft-Windows-EnhancedStorage-Adm" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <TCGSecurityActivationDisabled>1</TCGSecurityActivationDisabled>
+ </component>
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAccounts>
+ <LocalAccounts>
+ <LocalAccount wcm:action="add">
+ <Name>Docker</Name>
+ <Group>Administrators</Group>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </LocalAccount>
+ </LocalAccounts>
+ <AdministratorPassword>
+ <Value>password</Value>
+ <PlainText>true</PlainText>
+ </AdministratorPassword>
+ </UserAccounts>
+ <AutoLogon>
+ <Username>Docker</Username>
+ <Enabled>true</Enabled>
+ <LogonCount>65432</LogonCount>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </AutoLogon>
+ <Display>
+ <ColorDepth>32</ColorDepth>
+ <HorizontalResolution>1920</HorizontalResolution>
+ <VerticalResolution>1080</VerticalResolution>
+ </Display>
+ <OOBE>
+ <HideEULAPage>true</HideEULAPage>
+ <HideLocalAccountScreen>true</HideLocalAccountScreen>
+ <HideOEMRegistrationScreen>true</HideOEMRegistrationScreen>
+ <HideOnlineAccountScreens>true</HideOnlineAccountScreens>
+ <HideWirelessSetupInOOBE>true</HideWirelessSetupInOOBE>
+ <NetworkLocation>Home</NetworkLocation>
+ <ProtectYourPC>3</ProtectYourPC>
+ <SkipUserOOBE>true</SkipUserOOBE>
+ <SkipMachineOOBE>true</SkipMachineOOBE>
+ </OOBE>
+ <RegisteredOrganization>Dockur</RegisteredOrganization>
+ <RegisteredOwner>Windows for Docker</RegisteredOwner>
+ <FirstLogonCommands>
+ <SynchronousCommand wcm:action="add">
+ <Order>1</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" /v "AllowInsecureGuestAuth" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Allow guest access to network shares</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>2</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" /v LimitBlankPasswordUse /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Allow RDP login with blank password</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>3</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PasswordLess\Device" /v "DevicePasswordLessBuildVersion" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Enable option for passwordless sign-in</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>4</Order>
+ <CommandLine>cmd /C wmic useraccount where name="Docker" set PasswordExpires=false</CommandLine>
+ <Description>Password Never Expires</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>5</Order>
+ <CommandLine>cmd /C POWERCFG -H OFF</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>6</Order>
+ <CommandLine>cmd /C POWERCFG -X -monitor-timeout-ac 0</CommandLine>
+ <Description>Disable monitor blanking</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>7</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Edge" /v "HideFirstRunExperience" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Disable first-run experience in Edge</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>8</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "HideFileExt" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Show file extensions in Explorer</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>9</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateFileSizePercent" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Zero Hibernation File</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>10</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateEnabled" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>11</Order>
+ <CommandLine>cmd /C POWERCFG -X -standby-timeout-ac 0</CommandLine>
+ <Description>Disable Sleep</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>12</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" /v "fAllowUnlistedRemotePrograms" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Enable RemoteAPP to launch unlisted programs</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>13</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Search" /v "SearchboxTaskbarMode" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Search from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>14</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "ShowTaskViewButton" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Task View from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>15</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "TaskbarDa" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Widgets from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>16</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "TaskbarMn" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Chat from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>17</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" /v "NoAutoUpdate" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Turn off Windows Update auto download</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>18</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-32752" new enable=Yes</CommandLine>
+ <Description>Enable Network Discovery</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>19</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-28502" new enable=Yes</CommandLine>
+ <Description>Enable File Sharing</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>20</Order>
+ <CommandLine>cmd /C if exist "C:\OEM\install.bat" start "Install" "cmd /C C:\OEM\install.bat"</CommandLine>
+ <Description>Execute custom script from the OEM folder if exists</Description>
+ </SynchronousCommand>
+ </FirstLogonCommands>
+ </component>
+ </settings>
+</unattend>

assets/win2025.xml

@@ -0,0 +1,344 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<unattend xmlns="urn:schemas-microsoft-com:unattend" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State">
+ <settings pass="windowsPE">
+ <component name="Microsoft-Windows-International-Core-WinPE" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SetupUILanguage>
+ <UILanguage>en-US</UILanguage>
+ </SetupUILanguage>
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UILanguageFallback>en-US</UILanguageFallback>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DiskConfiguration>
+ <Disk wcm:action="add">
+ <DiskID>0</DiskID>
+ <WillWipeDisk>true</WillWipeDisk>
+ <CreatePartitions>
+ <!-- System partition (ESP) -->
+ <CreatePartition wcm:action="add">
+ <Order>1</Order>
+ <Type>EFI</Type>
+ <Size>128</Size>
+ </CreatePartition>
+ <!-- Microsoft reserved partition (MSR) -->
+ <CreatePartition wcm:action="add">
+ <Order>2</Order>
+ <Type>MSR</Type>
+ <Size>128</Size>
+ </CreatePartition>
+ <!-- Windows partition -->
+ <CreatePartition wcm:action="add">
+ <Order>3</Order>
+ <Type>Primary</Type>
+ <Extend>true</Extend>
+ </CreatePartition>
+ </CreatePartitions>
+ <ModifyPartitions>
+ <!-- System partition (ESP) -->
+ <ModifyPartition wcm:action="add">
+ <Order>1</Order>
+ <PartitionID>1</PartitionID>
+ <Label>System</Label>
+ <Format>FAT32</Format>
+ </ModifyPartition>
+ <!-- MSR partition does not need to be modified -->
+ <ModifyPartition wcm:action="add">
+ <Order>2</Order>
+ <PartitionID>2</PartitionID>
+ </ModifyPartition>
+ <!-- Windows partition -->
+ <ModifyPartition wcm:action="add">
+ <Order>3</Order>
+ <PartitionID>3</PartitionID>
+ <Label>Windows</Label>
+ <Letter>C</Letter>
+ <Format>NTFS</Format>
+ </ModifyPartition>
+ </ModifyPartitions>
+ </Disk>
+ </DiskConfiguration>
+ <ImageInstall>
+ <OSImage>
+ <InstallFrom>
+ <MetaData wcm:action="add">
+ <Key>/IMAGE/NAME</Key>
+ <Value>Windows Server 2025 SERVERSTANDARD</Value>
+ </MetaData>
+ </InstallFrom>
+ <InstallTo>
+ <DiskID>0</DiskID>
+ <PartitionID>3</PartitionID>
+ </InstallTo>
+ <WillShowUI>OnError</WillShowUI>
+ <InstallToAvailablePartition>false</InstallToAvailablePartition>
+ </OSImage>
+ </ImageInstall>
+ <DynamicUpdate>
+ <Enable>true</Enable>
+ <WillShowUI>Never</WillShowUI>
+ </DynamicUpdate>
+ <UpgradeData>
+ <Upgrade>false</Upgrade>
+ <WillShowUI>Never</WillShowUI>
+ </UpgradeData>
+ <UserData>
+ <AcceptEula>true</AcceptEula>
+ <FullName>Docker</FullName>
+ <Organization>Windows for Docker</Organization>
+ <ProductKey>
+ <Key>TVRH6-WHNXV-R9WG3-9XRFY-MY832</Key>
+ </ProductKey>
+ </UserData>
+ <EnableFirewall>false</EnableFirewall>
+ <Diagnostics>
+ <OptIn>false</OptIn>
+ </Diagnostics>
+ </component>
+ </settings>
+ <settings pass="offlineServicing">
+ <component name="Microsoft-Windows-LUA-Settings" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <EnableLUA>false</EnableLUA>
+ </component>
+ </settings>
+ <settings pass="generalize">
+ <component name="Microsoft-Windows-PnPSysprep" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <PersistAllDeviceInstalls>true</PersistAllDeviceInstalls>
+ </component>
+ <component name="Microsoft-Windows-Security-SPP" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipRearm>1</SkipRearm>
+ </component>
+ </settings>
+ <settings pass="specialize">
+ <component name="Microsoft-Windows-Security-SPP-UX" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipAutoActivation>true</SkipAutoActivation>
+ </component>
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <ComputerName>*</ComputerName>
+ <OEMInformation>
+ <Manufacturer>Dockur</Manufacturer>
+ <Model>Windows for Docker</Model>
+ <SupportHours>24/7</SupportHours>
+ <SupportPhone />
+ <SupportProvider>Dockur</SupportProvider>
+ <SupportURL>https://github.com/dockur/windows/issues</SupportURL>
+ </OEMInformation>
+ <OEMName>Windows for Docker</OEMName>
+ </component>
+ <component name="Microsoft-Windows-ErrorReportingCore" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableWER>1</DisableWER>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableAccelerators>true</DisableAccelerators>
+ <DisableFirstRunWizard>true</DisableFirstRunWizard>
+ <Home_Page>https://google.com</Home_Page>
+ <Help_Page>about:blank</Help_Page>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="wow64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableAccelerators>true</DisableAccelerators>
+ <DisableFirstRunWizard>true</DisableFirstRunWizard>
+ <Home_Page>https://google.com</Home_Page>
+ <Help_Page>about:blank</Help_Page>
+ </component>
+ <component name="Microsoft-Windows-SQMApi" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <CEIPEnabled>0</CEIPEnabled>
+ </component>
+ <component name="Microsoft-Windows-SystemRestore-Main" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableSR>1</DisableSR>
+ </component>
+ <component name="Microsoft-Windows-International-Core" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UILanguageFallback>en-US</UILanguageFallback>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-Deployment" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <RunSynchronous>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>1</Order>
+ <Path>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\CurrentVersion\NetworkList\Signatures\FirstNetwork" /v Category /t REG_DWORD /d 1 /f</Path>
+ <Description>Set Network Location to Home</Description>
+ </RunSynchronousCommand>
+ </RunSynchronous>
+ </component>
+ <component name="Microsoft-Windows-ServerManager-SvrMgrNc" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DoNotOpenServerManagerAtLogon>true</DoNotOpenServerManagerAtLogon>
+ </component>
+ <component name="Microsoft-Windows-OutOfBoxExperience" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DoNotOpenInitialConfigurationTasksAtLogon>true</DoNotOpenInitialConfigurationTasksAtLogon>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-LocalSessionManager" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <fDenyTSConnections>false</fDenyTSConnections>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-RDP-WinStationExtensions" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAuthentication>0</UserAuthentication>
+ </component>
+ <component name="Networking-MPSSVC-Svc" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <FirewallGroups>
+ <FirewallGroup wcm:action="add" wcm:keyValue="RemoteDesktop">
+ <Active>true</Active>
+ <Profile>all</Profile>
+ <Group>@FirewallAPI.dll,-28752</Group>
+ </FirewallGroup>
+ </FirewallGroups>
+ </component>
+ </settings>
+ <settings pass="oobeSystem">
+ <component name="Microsoft-Windows-SecureStartup-FilterDriver" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <PreventDeviceEncryption>true</PreventDeviceEncryption>
+ </component>
+ <component name="Microsoft-Windows-EnhancedStorage-Adm" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <TCGSecurityActivationDisabled>1</TCGSecurityActivationDisabled>
+ </component>
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAccounts>
+ <LocalAccounts>
+ <LocalAccount wcm:action="add">
+ <Name>Docker</Name>
+ <Group>Administrators</Group>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </LocalAccount>
+ </LocalAccounts>
+ <AdministratorPassword>
+ <Value>password</Value>
+ <PlainText>true</PlainText>
+ </AdministratorPassword>
+ </UserAccounts>
+ <AutoLogon>
+ <Username>Docker</Username>
+ <Enabled>true</Enabled>
+ <LogonCount>65432</LogonCount>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </AutoLogon>
+ <Display>
+ <ColorDepth>32</ColorDepth>
+ <HorizontalResolution>1920</HorizontalResolution>
+ <VerticalResolution>1080</VerticalResolution>
+ </Display>
+ <OOBE>
+ <HideEULAPage>true</HideEULAPage>
+ <HideLocalAccountScreen>true</HideLocalAccountScreen>
+ <HideOEMRegistrationScreen>true</HideOEMRegistrationScreen>
+ <HideOnlineAccountScreens>true</HideOnlineAccountScreens>
+ <HideWirelessSetupInOOBE>true</HideWirelessSetupInOOBE>
+ <NetworkLocation>Home</NetworkLocation>
+ <ProtectYourPC>3</ProtectYourPC>
+ <SkipUserOOBE>true</SkipUserOOBE>
+ <SkipMachineOOBE>true</SkipMachineOOBE>
+ </OOBE>
+ <RegisteredOrganization>Dockur</RegisteredOrganization>
+ <RegisteredOwner>Windows for Docker</RegisteredOwner>
+ <FirstLogonCommands>
+ <SynchronousCommand wcm:action="add">
+ <Order>1</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" /v "AllowInsecureGuestAuth" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Allow guest access to network shares</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>2</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" /v LimitBlankPasswordUse /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Allow RDP login with blank password</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>3</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PasswordLess\Device" /v "DevicePasswordLessBuildVersion" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Enable option for passwordless sign-in</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>4</Order>
+ <CommandLine>cmd /C wmic useraccount where name="Docker" set PasswordExpires=false</CommandLine>
+ <Description>Password Never Expires</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>5</Order>
+ <CommandLine>cmd /C POWERCFG -H OFF</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>6</Order>
+ <CommandLine>cmd /C POWERCFG -X -monitor-timeout-ac 0</CommandLine>
+ <Description>Disable monitor blanking</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>7</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Edge" /v "HideFirstRunExperience" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Disable first-run experience in Edge</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>8</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "HideFileExt" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Show file extensions in Explorer</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>9</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateFileSizePercent" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Zero Hibernation File</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>10</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateEnabled" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>11</Order>
+ <CommandLine>cmd /C POWERCFG -X -standby-timeout-ac 0</CommandLine>
+ <Description>Disable Sleep</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>12</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" /v "fAllowUnlistedRemotePrograms" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Enable RemoteAPP to launch unlisted programs</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>13</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Search" /v "SearchboxTaskbarMode" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Search from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>14</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "ShowTaskViewButton" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Task View from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>15</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "TaskbarDa" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Widgets from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>16</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "TaskbarMn" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Remove Chat from the Taskbar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>17</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" /v "NoAutoUpdate" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Turn off Windows Update auto download</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>18</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-32752" new enable=Yes</CommandLine>
+ <Description>Enable Network Discovery</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>19</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-28502" new enable=Yes</CommandLine>
+ <Description>Enable File Sharing</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>20</Order>
+ <CommandLine>cmd /C if exist "C:\OEM\install.bat" start "Install" "cmd /C C:\OEM\install.bat"</CommandLine>
+ <Description>Execute custom script from the OEM folder if exists</Description>
+ </SynchronousCommand>
+ </FirstLogonCommands>
+ </component>
+ </settings>
+</unattend>

assets/win7x64-enterprise.xml

@@ -0,0 +1,287 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<unattend xmlns="urn:schemas-microsoft-com:unattend" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State">
+ <settings pass="windowsPE">
+ <component name="Microsoft-Windows-International-Core-WinPE" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SetupUILanguage>
+ <UILanguage>en-US</UILanguage>
+ </SetupUILanguage>
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DiskConfiguration>
+ <WillShowUI>OnError</WillShowUI>
+ <Disk wcm:action="add">
+ <DiskID>0</DiskID>
+ <WillWipeDisk>true</WillWipeDisk>
+ <CreatePartitions>
+ <CreatePartition wcm:action="add">
+ <Order>1</Order>
+ <Type>Primary</Type>
+ <Size>100</Size>
+ </CreatePartition>
+ <CreatePartition wcm:action="add">
+ <Order>2</Order>
+ <Type>Primary</Type>
+ <Extend>true</Extend>
+ </CreatePartition>
+ </CreatePartitions>
+ <ModifyPartitions>
+ <ModifyPartition wcm:action="add">
+ <Format>NTFS</Format>
+ <Label>System Reserved</Label>
+ <Order>1</Order>
+ <Active>true</Active>
+ <PartitionID>1</PartitionID>
+ <TypeID>0x27</TypeID>
+ </ModifyPartition>
+ <ModifyPartition wcm:action="add">
+ <Active>true</Active>
+ <Format>NTFS</Format>
+ <Label>Windows</Label>
+ <Letter>C</Letter>
+ <Order>2</Order>
+ <PartitionID>2</PartitionID>
+ </ModifyPartition>
+ </ModifyPartitions>
+ </Disk>
+ </DiskConfiguration>
+ <ImageInstall>
+ <OSImage>
+ <InstallFrom>
+ <MetaData wcm:action="add">
+ <Value>Windows 7 Enterprise</Value>
+ <Key>/IMAGE/NAME</Key>
+ </MetaData>
+ </InstallFrom>
+ <InstallTo>
+ <DiskID>0</DiskID>
+ <PartitionID>2</PartitionID>
+ </InstallTo>
+ <InstallToAvailablePartition>false</InstallToAvailablePartition>
+ </OSImage>
+ </ImageInstall>
+ <DynamicUpdate>
+ <Enable>true</Enable>
+ <WillShowUI>Never</WillShowUI>
+ </DynamicUpdate>
+ <UpgradeData>
+ <Upgrade>false</Upgrade>
+ <WillShowUI>Never</WillShowUI>
+ </UpgradeData>
+ <UserData>
+ <AcceptEula>true</AcceptEula>
+ <FullName>Docker</FullName>
+ <Organization>Windows for Docker</Organization>
+ <ProductKey>
+ <Key>H7X92-3VPBB-Q799D-Y6JJ3-86WC6</Key>
+ <WillShowUI>OnError</WillShowUI>
+ </ProductKey>
+ </UserData>
+ <EnableFirewall>false</EnableFirewall>
+ <Diagnostics>
+ <OptIn>false</OptIn>
+ </Diagnostics>
+ </component>
+ </settings>
+ <settings pass="offlineServicing">
+ <component name="Microsoft-Windows-LUA-Settings" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <EnableLUA>false</EnableLUA>
+ </component>
+ </settings>
+ <settings pass="generalize">
+ <component name="Microsoft-Windows-PnPSysprep" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <PersistAllDeviceInstalls>true</PersistAllDeviceInstalls>
+ </component>
+ <component name="Microsoft-Windows-Security-SPP" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipRearm>1</SkipRearm>
+ </component>
+ </settings>
+ <settings pass="specialize">
+ <component name="Microsoft-Windows-Security-SPP-UX" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipAutoActivation>true</SkipAutoActivation>
+ </component>
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <ComputerName>*</ComputerName>
+ <OEMInformation>
+ <Manufacturer>Dockur</Manufacturer>
+ <Model>Windows for Docker</Model>
+ </OEMInformation>
+ </component>
+ <component name="Microsoft-Windows-ErrorReportingCore" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableWER>1</DisableWER>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableAccelerators>true</DisableAccelerators>
+ <DisableFirstRunWizard>true</DisableFirstRunWizard>
+ <Home_Page>https://google.com</Home_Page>
+ <Help_Page>about:blank</Help_Page>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="wow64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableAccelerators>true</DisableAccelerators>
+ <DisableFirstRunWizard>true</DisableFirstRunWizard>
+ <Home_Page>https://google.com</Home_Page>
+ <Help_Page>about:blank</Help_Page>
+ </component>
+ <component name="Microsoft-Windows-SQMApi" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <CEIPEnabled>0</CEIPEnabled>
+ </component>
+ <component name="Microsoft-Windows-SystemRestore-Main" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableSR>1</DisableSR>
+ </component>
+ <component name="Microsoft-Windows-International-Core" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-LocalSessionManager" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <fDenyTSConnections>false</fDenyTSConnections>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-RDP-WinStationExtensions" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAuthentication>0</UserAuthentication>
+ </component>
+ <component name="Networking-MPSSVC-Svc" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <FirewallGroups>
+ <FirewallGroup wcm:action="add" wcm:keyValue="RemoteDesktop">
+ <Active>true</Active>
+ <Profile>all</Profile>
+ <Group>@FirewallAPI.dll,-28752</Group>
+ </FirewallGroup>
+ </FirewallGroups>
+ </component>
+ </settings>
+ <settings pass="oobeSystem">
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAccounts>
+ <LocalAccounts>
+ <LocalAccount wcm:action="add">
+ <Name>Docker</Name>
+ <Group>Administrators</Group>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </LocalAccount>
+ </LocalAccounts>
+ <AdministratorPassword>
+ <Value>password</Value>
+ <PlainText>true</PlainText>
+ </AdministratorPassword>
+ </UserAccounts>
+ <AutoLogon>
+ <Username>Docker</Username>
+ <Enabled>true</Enabled>
+ <LogonCount>65432</LogonCount>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </AutoLogon>
+ <Display>
+ <ColorDepth>32</ColorDepth>
+ <HorizontalResolution>1920</HorizontalResolution>
+ <VerticalResolution>1080</VerticalResolution>
+ </Display>
+ <OOBE>
+ <HideEULAPage>true</HideEULAPage>
+ <HideWirelessSetupInOOBE>true</HideWirelessSetupInOOBE>
+ <NetworkLocation>Home</NetworkLocation>
+ <ProtectYourPC>3</ProtectYourPC>
+ <SkipUserOOBE>true</SkipUserOOBE>
+ <SkipMachineOOBE>true</SkipMachineOOBE>
+ </OOBE>
+ <RegisteredOrganization>Dockur</RegisteredOrganization>
+ <RegisteredOwner>Windows for Docker</RegisteredOwner>
+ <FirstLogonCommands>
+ <SynchronousCommand wcm:action="add">
+ <Order>1</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" /v "AllowInsecureGuestAuth" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Allow guest access to network shares</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>2</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" /v LimitBlankPasswordUse /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Allow RDP login with blank password</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>3</Order>
+ <CommandLine>cmd /C wmic useraccount where name="Docker" set PasswordExpires=false</CommandLine>
+ <Description>Password Never Expires</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>4</Order>
+ <CommandLine>cmd /C POWERCFG -H OFF</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>5</Order>
+ <CommandLine>cmd /C POWERCFG -X -monitor-timeout-ac 0</CommandLine>
+ <Description>Disable monitor blanking</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>6</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Network\NewNetworkWindowOff" /f</CommandLine>
+ <Description>Disable Network Discovery popup</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>7</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Network\NetworkLocationWizard" /v "HideWizard" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Disable Network Discovery popup</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>8</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkList\NewNetworks" /v NetworkList /t REG_MULTI_SZ /d "" /f</CommandLine>
+ <Description>Disable Network Discovery popup</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>9</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Edge" /v "HideFirstRunExperience" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Disable first-run experience in Edge</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>10</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "HideFileExt" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Show file extensions in Explorer</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>11</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateFileSizePercent" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Zero Hibernation File</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>12</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateEnabled" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>13</Order>
+ <CommandLine>cmd /C POWERCFG -X -standby-timeout-ac 0</CommandLine>
+ <Description>Disable Sleep</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>14</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" /v "fAllowUnlistedRemotePrograms" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Enable RemoteAPP to launch unlisted programs</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>15</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-32752" new enable=Yes</CommandLine>
+ <Description>Enable Network Discovery</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>16</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-28502" new enable=Yes</CommandLine>
+ <Description>Enable File Sharing</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>17</Order>
+ <CommandLine>cmd /C if exist "C:\OEM\install.bat" start "Install" "cmd /C C:\OEM\install.bat"</CommandLine>
+ <Description>Execute custom script from the OEM folder if exists</Description>
+ </SynchronousCommand>
+ </FirstLogonCommands>
+ </component>
+ </settings>
+</unattend>

assets/win7x64-ultimate.xml

@@ -0,0 +1,287 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<unattend xmlns="urn:schemas-microsoft-com:unattend" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State">
+ <settings pass="windowsPE">
+ <component name="Microsoft-Windows-International-Core-WinPE" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SetupUILanguage>
+ <UILanguage>en-US</UILanguage>
+ </SetupUILanguage>
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DiskConfiguration>
+ <WillShowUI>OnError</WillShowUI>
+ <Disk wcm:action="add">
+ <DiskID>0</DiskID>
+ <WillWipeDisk>true</WillWipeDisk>
+ <CreatePartitions>
+ <CreatePartition wcm:action="add">
+ <Order>1</Order>
+ <Type>Primary</Type>
+ <Size>100</Size>
+ </CreatePartition>
+ <CreatePartition wcm:action="add">
+ <Order>2</Order>
+ <Type>Primary</Type>
+ <Extend>true</Extend>
+ </CreatePartition>
+ </CreatePartitions>
+ <ModifyPartitions>
+ <ModifyPartition wcm:action="add">
+ <Format>NTFS</Format>
+ <Label>System Reserved</Label>
+ <Order>1</Order>
+ <Active>true</Active>
+ <PartitionID>1</PartitionID>
+ <TypeID>0x27</TypeID>
+ </ModifyPartition>
+ <ModifyPartition wcm:action="add">
+ <Active>true</Active>
+ <Format>NTFS</Format>
+ <Label>Windows</Label>
+ <Letter>C</Letter>
+ <Order>2</Order>
+ <PartitionID>2</PartitionID>
+ </ModifyPartition>
+ </ModifyPartitions>
+ </Disk>
+ </DiskConfiguration>
+ <ImageInstall>
+ <OSImage>
+ <InstallFrom>
+ <MetaData wcm:action="add">
+ <Value>Windows 7 Ultimate</Value>
+ <Key>/IMAGE/NAME</Key>
+ </MetaData>
+ </InstallFrom>
+ <InstallTo>
+ <DiskID>0</DiskID>
+ <PartitionID>2</PartitionID>
+ </InstallTo>
+ <InstallToAvailablePartition>false</InstallToAvailablePartition>
+ </OSImage>
+ </ImageInstall>
+ <DynamicUpdate>
+ <Enable>true</Enable>
+ <WillShowUI>Never</WillShowUI>
+ </DynamicUpdate>
+ <UpgradeData>
+ <Upgrade>false</Upgrade>
+ <WillShowUI>Never</WillShowUI>
+ </UpgradeData>
+ <UserData>
+ <AcceptEula>true</AcceptEula>
+ <FullName>Docker</FullName>
+ <Organization>Windows for Docker</Organization>
+ <ProductKey>
+ <Key>D4F6K-QK3RD-TMVMJ-BBMRX-3MBMV</Key>
+ <WillShowUI>OnError</WillShowUI>
+ </ProductKey>
+ </UserData>
+ <EnableFirewall>false</EnableFirewall>
+ <Diagnostics>
+ <OptIn>false</OptIn>
+ </Diagnostics>
+ </component>
+ </settings>
+ <settings pass="offlineServicing">
+ <component name="Microsoft-Windows-LUA-Settings" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <EnableLUA>false</EnableLUA>
+ </component>
+ </settings>
+ <settings pass="generalize">
+ <component name="Microsoft-Windows-PnPSysprep" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <PersistAllDeviceInstalls>true</PersistAllDeviceInstalls>
+ </component>
+ <component name="Microsoft-Windows-Security-SPP" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipRearm>1</SkipRearm>
+ </component>
+ </settings>
+ <settings pass="specialize">
+ <component name="Microsoft-Windows-Security-SPP-UX" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipAutoActivation>true</SkipAutoActivation>
+ </component>
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <ComputerName>*</ComputerName>
+ <OEMInformation>
+ <Manufacturer>Dockur</Manufacturer>
+ <Model>Windows for Docker</Model>
+ </OEMInformation>
+ </component>
+ <component name="Microsoft-Windows-ErrorReportingCore" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableWER>1</DisableWER>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableAccelerators>true</DisableAccelerators>
+ <DisableFirstRunWizard>true</DisableFirstRunWizard>
+ <Home_Page>https://google.com</Home_Page>
+ <Help_Page>about:blank</Help_Page>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="wow64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableAccelerators>true</DisableAccelerators>
+ <DisableFirstRunWizard>true</DisableFirstRunWizard>
+ <Home_Page>https://google.com</Home_Page>
+ <Help_Page>about:blank</Help_Page>
+ </component>
+ <component name="Microsoft-Windows-SQMApi" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <CEIPEnabled>0</CEIPEnabled>
+ </component>
+ <component name="Microsoft-Windows-SystemRestore-Main" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableSR>1</DisableSR>
+ </component>
+ <component name="Microsoft-Windows-International-Core" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-LocalSessionManager" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <fDenyTSConnections>false</fDenyTSConnections>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-RDP-WinStationExtensions" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAuthentication>0</UserAuthentication>
+ </component>
+ <component name="Networking-MPSSVC-Svc" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <FirewallGroups>
+ <FirewallGroup wcm:action="add" wcm:keyValue="RemoteDesktop">
+ <Active>true</Active>
+ <Profile>all</Profile>
+ <Group>@FirewallAPI.dll,-28752</Group>
+ </FirewallGroup>
+ </FirewallGroups>
+ </component>
+ </settings>
+ <settings pass="oobeSystem">
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAccounts>
+ <LocalAccounts>
+ <LocalAccount wcm:action="add">
+ <Name>Docker</Name>
+ <Group>Administrators</Group>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </LocalAccount>
+ </LocalAccounts>
+ <AdministratorPassword>
+ <Value>password</Value>
+ <PlainText>true</PlainText>
+ </AdministratorPassword>
+ </UserAccounts>
+ <AutoLogon>
+ <Username>Docker</Username>
+ <Enabled>true</Enabled>
+ <LogonCount>65432</LogonCount>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </AutoLogon>
+ <Display>
+ <ColorDepth>32</ColorDepth>
+ <HorizontalResolution>1920</HorizontalResolution>
+ <VerticalResolution>1080</VerticalResolution>
+ </Display>
+ <OOBE>
+ <HideEULAPage>true</HideEULAPage>
+ <HideWirelessSetupInOOBE>true</HideWirelessSetupInOOBE>
+ <NetworkLocation>Home</NetworkLocation>
+ <ProtectYourPC>3</ProtectYourPC>
+ <SkipUserOOBE>true</SkipUserOOBE>
+ <SkipMachineOOBE>true</SkipMachineOOBE>
+ </OOBE>
+ <RegisteredOrganization>Dockur</RegisteredOrganization>
+ <RegisteredOwner>Windows for Docker</RegisteredOwner>
+ <FirstLogonCommands>
+ <SynchronousCommand wcm:action="add">
+ <Order>1</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" /v "AllowInsecureGuestAuth" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Allow guest access to network shares</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>2</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" /v LimitBlankPasswordUse /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Allow RDP login with blank password</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>3</Order>
+ <CommandLine>cmd /C wmic useraccount where name="Docker" set PasswordExpires=false</CommandLine>
+ <Description>Password Never Expires</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>4</Order>
+ <CommandLine>cmd /C POWERCFG -H OFF</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>5</Order>
+ <CommandLine>cmd /C POWERCFG -X -monitor-timeout-ac 0</CommandLine>
+ <Description>Disable monitor blanking</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>6</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Network\NewNetworkWindowOff" /f</CommandLine>
+ <Description>Disable Network Discovery popup</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>7</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Network\NetworkLocationWizard" /v "HideWizard" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Disable Network Discovery popup</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>8</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkList\NewNetworks" /v NetworkList /t REG_MULTI_SZ /d "" /f</CommandLine>
+ <Description>Disable Network Discovery popup</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>9</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Edge" /v "HideFirstRunExperience" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Disable first-run experience in Edge</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>10</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "HideFileExt" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Show file extensions in Explorer</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>11</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateFileSizePercent" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Zero Hibernation File</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>12</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateEnabled" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>13</Order>
+ <CommandLine>cmd /C POWERCFG -X -standby-timeout-ac 0</CommandLine>
+ <Description>Disable Sleep</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>14</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" /v "fAllowUnlistedRemotePrograms" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Enable RemoteAPP to launch unlisted programs</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>15</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-32752" new enable=Yes</CommandLine>
+ <Description>Enable Network Discovery</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>16</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-28502" new enable=Yes</CommandLine>
+ <Description>Enable File Sharing</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>17</Order>
+ <CommandLine>cmd /C if exist "C:\OEM\install.bat" start "Install" "cmd /C C:\OEM\install.bat"</CommandLine>
+ <Description>Execute custom script from the OEM folder if exists</Description>
+ </SynchronousCommand>
+ </FirstLogonCommands>
+ </component>
+ </settings>
+</unattend>

assets/win7x64.xml

@@ -0,0 +1,287 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<unattend xmlns="urn:schemas-microsoft-com:unattend" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State">
+ <settings pass="windowsPE">
+ <component name="Microsoft-Windows-International-Core-WinPE" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SetupUILanguage>
+ <UILanguage>en-US</UILanguage>
+ </SetupUILanguage>
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DiskConfiguration>
+ <WillShowUI>OnError</WillShowUI>
+ <Disk wcm:action="add">
+ <DiskID>0</DiskID>
+ <WillWipeDisk>true</WillWipeDisk>
+ <CreatePartitions>
+ <CreatePartition wcm:action="add">
+ <Order>1</Order>
+ <Type>Primary</Type>
+ <Size>100</Size>
+ </CreatePartition>
+ <CreatePartition wcm:action="add">
+ <Order>2</Order>
+ <Type>Primary</Type>
+ <Extend>true</Extend>
+ </CreatePartition>
+ </CreatePartitions>
+ <ModifyPartitions>
+ <ModifyPartition wcm:action="add">
+ <Format>NTFS</Format>
+ <Label>System Reserved</Label>
+ <Order>1</Order>
+ <Active>true</Active>
+ <PartitionID>1</PartitionID>
+ <TypeID>0x27</TypeID>
+ </ModifyPartition>
+ <ModifyPartition wcm:action="add">
+ <Active>true</Active>
+ <Format>NTFS</Format>
+ <Label>Windows</Label>
+ <Letter>C</Letter>
+ <Order>2</Order>
+ <PartitionID>2</PartitionID>
+ </ModifyPartition>
+ </ModifyPartitions>
+ </Disk>
+ </DiskConfiguration>
+ <ImageInstall>
+ <OSImage>
+ <InstallFrom>
+ <MetaData wcm:action="add">
+ <Value>Windows 7 PROFESSIONAL</Value>
+ <Key>/IMAGE/NAME</Key>
+ </MetaData>
+ </InstallFrom>
+ <InstallTo>
+ <DiskID>0</DiskID>
+ <PartitionID>2</PartitionID>
+ </InstallTo>
+ <InstallToAvailablePartition>false</InstallToAvailablePartition>
+ </OSImage>
+ </ImageInstall>
+ <DynamicUpdate>
+ <Enable>true</Enable>
+ <WillShowUI>Never</WillShowUI>
+ </DynamicUpdate>
+ <UpgradeData>
+ <Upgrade>false</Upgrade>
+ <WillShowUI>Never</WillShowUI>
+ </UpgradeData>
+ <UserData>
+ <AcceptEula>true</AcceptEula>
+ <FullName>Docker</FullName>
+ <Organization>Windows for Docker</Organization>
+ <ProductKey>
+ <Key>HYF8J-CVRMY-CM74G-RPHKF-PW487</Key>
+ <WillShowUI>OnError</WillShowUI>
+ </ProductKey>
+ </UserData>
+ <EnableFirewall>false</EnableFirewall>
+ <Diagnostics>
+ <OptIn>false</OptIn>
+ </Diagnostics>
+ </component>
+ </settings>
+ <settings pass="offlineServicing">
+ <component name="Microsoft-Windows-LUA-Settings" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <EnableLUA>false</EnableLUA>
+ </component>
+ </settings>
+ <settings pass="generalize">
+ <component name="Microsoft-Windows-PnPSysprep" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <PersistAllDeviceInstalls>true</PersistAllDeviceInstalls>
+ </component>
+ <component name="Microsoft-Windows-Security-SPP" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipRearm>1</SkipRearm>
+ </component>
+ </settings>
+ <settings pass="specialize">
+ <component name="Microsoft-Windows-Security-SPP-UX" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipAutoActivation>true</SkipAutoActivation>
+ </component>
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <ComputerName>*</ComputerName>
+ <OEMInformation>
+ <Manufacturer>Dockur</Manufacturer>
+ <Model>Windows for Docker</Model>
+ </OEMInformation>
+ </component>
+ <component name="Microsoft-Windows-ErrorReportingCore" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableWER>1</DisableWER>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableAccelerators>true</DisableAccelerators>
+ <DisableFirstRunWizard>true</DisableFirstRunWizard>
+ <Home_Page>https://google.com</Home_Page>
+ <Help_Page>about:blank</Help_Page>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="wow64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableAccelerators>true</DisableAccelerators>
+ <DisableFirstRunWizard>true</DisableFirstRunWizard>
+ <Home_Page>https://google.com</Home_Page>
+ <Help_Page>about:blank</Help_Page>
+ </component>
+ <component name="Microsoft-Windows-SQMApi" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <CEIPEnabled>0</CEIPEnabled>
+ </component>
+ <component name="Microsoft-Windows-SystemRestore-Main" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableSR>1</DisableSR>
+ </component>
+ <component name="Microsoft-Windows-International-Core" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-LocalSessionManager" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <fDenyTSConnections>false</fDenyTSConnections>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-RDP-WinStationExtensions" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAuthentication>0</UserAuthentication>
+ </component>
+ <component name="Networking-MPSSVC-Svc" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <FirewallGroups>
+ <FirewallGroup wcm:action="add" wcm:keyValue="RemoteDesktop">
+ <Active>true</Active>
+ <Profile>all</Profile>
+ <Group>@FirewallAPI.dll,-28752</Group>
+ </FirewallGroup>
+ </FirewallGroups>
+ </component>
+ </settings>
+ <settings pass="oobeSystem">
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAccounts>
+ <LocalAccounts>
+ <LocalAccount wcm:action="add">
+ <Name>Docker</Name>
+ <Group>Administrators</Group>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </LocalAccount>
+ </LocalAccounts>
+ <AdministratorPassword>
+ <Value>password</Value>
+ <PlainText>true</PlainText>
+ </AdministratorPassword>
+ </UserAccounts>
+ <AutoLogon>
+ <Username>Docker</Username>
+ <Enabled>true</Enabled>
+ <LogonCount>65432</LogonCount>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </AutoLogon>
+ <Display>
+ <ColorDepth>32</ColorDepth>
+ <HorizontalResolution>1920</HorizontalResolution>
+ <VerticalResolution>1080</VerticalResolution>
+ </Display>
+ <OOBE>
+ <HideEULAPage>true</HideEULAPage>
+ <HideWirelessSetupInOOBE>true</HideWirelessSetupInOOBE>
+ <NetworkLocation>Home</NetworkLocation>
+ <ProtectYourPC>3</ProtectYourPC>
+ <SkipUserOOBE>true</SkipUserOOBE>
+ <SkipMachineOOBE>true</SkipMachineOOBE>
+ </OOBE>
+ <RegisteredOrganization>Dockur</RegisteredOrganization>
+ <RegisteredOwner>Windows for Docker</RegisteredOwner>
+ <FirstLogonCommands>
+ <SynchronousCommand wcm:action="add">
+ <Order>1</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" /v "AllowInsecureGuestAuth" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Allow guest access to network shares</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>2</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" /v LimitBlankPasswordUse /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Allow RDP login with blank password</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>3</Order>
+ <CommandLine>cmd /C wmic useraccount where name="Docker" set PasswordExpires=false</CommandLine>
+ <Description>Password Never Expires</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>4</Order>
+ <CommandLine>cmd /C POWERCFG -H OFF</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>5</Order>
+ <CommandLine>cmd /C POWERCFG -X -monitor-timeout-ac 0</CommandLine>
+ <Description>Disable monitor blanking</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>6</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Network\NewNetworkWindowOff" /f</CommandLine>
+ <Description>Disable Network Discovery popup</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>7</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Network\NetworkLocationWizard" /v "HideWizard" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Disable Network Discovery popup</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>8</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkList\NewNetworks" /v NetworkList /t REG_MULTI_SZ /d "" /f</CommandLine>
+ <Description>Disable Network Discovery popup</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>9</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Edge" /v "HideFirstRunExperience" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Disable first-run experience in Edge</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>10</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "HideFileExt" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Show file extensions in Explorer</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>11</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateFileSizePercent" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Zero Hibernation File</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>12</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateEnabled" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>13</Order>
+ <CommandLine>cmd /C POWERCFG -X -standby-timeout-ac 0</CommandLine>
+ <Description>Disable Sleep</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>14</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" /v "fAllowUnlistedRemotePrograms" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Enable RemoteAPP to launch unlisted programs</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>15</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-32752" new enable=Yes</CommandLine>
+ <Description>Enable Network Discovery</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>16</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-28502" new enable=Yes</CommandLine>
+ <Description>Enable File Sharing</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>17</Order>
+ <CommandLine>cmd /C if exist "C:\OEM\install.bat" start "Install" "cmd /C C:\OEM\install.bat"</CommandLine>
+ <Description>Execute custom script from the OEM folder if exists</Description>
+ </SynchronousCommand>
+ </FirstLogonCommands>
+ </component>
+ </settings>
+</unattend>

assets/win7x86-enterprise.xml

@@ -0,0 +1,287 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<unattend xmlns="urn:schemas-microsoft-com:unattend" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State">
+ <settings pass="windowsPE">
+ <component name="Microsoft-Windows-International-Core-WinPE" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SetupUILanguage>
+ <UILanguage>en-US</UILanguage>
+ </SetupUILanguage>
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-Setup" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DiskConfiguration>
+ <WillShowUI>OnError</WillShowUI>
+ <Disk wcm:action="add">
+ <DiskID>0</DiskID>
+ <WillWipeDisk>true</WillWipeDisk>
+ <CreatePartitions>
+ <CreatePartition wcm:action="add">
+ <Order>1</Order>
+ <Type>Primary</Type>
+ <Size>100</Size>
+ </CreatePartition>
+ <CreatePartition wcm:action="add">
+ <Order>2</Order>
+ <Type>Primary</Type>
+ <Extend>true</Extend>
+ </CreatePartition>
+ </CreatePartitions>
+ <ModifyPartitions>
+ <ModifyPartition wcm:action="add">
+ <Format>NTFS</Format>
+ <Label>System Reserved</Label>
+ <Order>1</Order>
+ <Active>true</Active>
+ <PartitionID>1</PartitionID>
+ <TypeID>0x27</TypeID>
+ </ModifyPartition>
+ <ModifyPartition wcm:action="add">
+ <Active>true</Active>
+ <Format>NTFS</Format>
+ <Label>Windows</Label>
+ <Letter>C</Letter>
+ <Order>2</Order>
+ <PartitionID>2</PartitionID>
+ </ModifyPartition>
+ </ModifyPartitions>
+ </Disk>
+ </DiskConfiguration>
+ <ImageInstall>
+ <OSImage>
+ <InstallFrom>
+ <MetaData wcm:action="add">
+ <Value>Windows 7 Enterprise</Value>
+ <Key>/IMAGE/NAME</Key>
+ </MetaData>
+ </InstallFrom>
+ <InstallTo>
+ <DiskID>0</DiskID>
+ <PartitionID>2</PartitionID>
+ </InstallTo>
+ <InstallToAvailablePartition>false</InstallToAvailablePartition>
+ </OSImage>
+ </ImageInstall>
+ <DynamicUpdate>
+ <Enable>true</Enable>
+ <WillShowUI>Never</WillShowUI>
+ </DynamicUpdate>
+ <UpgradeData>
+ <Upgrade>false</Upgrade>
+ <WillShowUI>Never</WillShowUI>
+ </UpgradeData>
+ <UserData>
+ <AcceptEula>true</AcceptEula>
+ <FullName>Docker</FullName>
+ <Organization>Windows for Docker</Organization>
+ <ProductKey>
+ <Key>H7X92-3VPBB-Q799D-Y6JJ3-86WC6</Key>
+ <WillShowUI>OnError</WillShowUI>
+ </ProductKey>
+ </UserData>
+ <EnableFirewall>false</EnableFirewall>
+ <Diagnostics>
+ <OptIn>false</OptIn>
+ </Diagnostics>
+ </component>
+ </settings>
+ <settings pass="offlineServicing">
+ <component name="Microsoft-Windows-LUA-Settings" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <EnableLUA>false</EnableLUA>
+ </component>
+ </settings>
+ <settings pass="generalize">
+ <component name="Microsoft-Windows-PnPSysprep" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <PersistAllDeviceInstalls>true</PersistAllDeviceInstalls>
+ </component>
+ <component name="Microsoft-Windows-Security-SPP" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipRearm>1</SkipRearm>
+ </component>
+ </settings>
+ <settings pass="specialize">
+ <component name="Microsoft-Windows-Security-SPP-UX" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipAutoActivation>true</SkipAutoActivation>
+ </component>
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <ComputerName>*</ComputerName>
+ <OEMInformation>
+ <Manufacturer>Dockur</Manufacturer>
+ <Model>Windows for Docker</Model>
+ </OEMInformation>
+ </component>
+ <component name="Microsoft-Windows-ErrorReportingCore" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableWER>1</DisableWER>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableAccelerators>true</DisableAccelerators>
+ <DisableFirstRunWizard>true</DisableFirstRunWizard>
+ <Home_Page>https://google.com</Home_Page>
+ <Help_Page>about:blank</Help_Page>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="wow64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableAccelerators>true</DisableAccelerators>
+ <DisableFirstRunWizard>true</DisableFirstRunWizard>
+ <Home_Page>https://google.com</Home_Page>
+ <Help_Page>about:blank</Help_Page>
+ </component>
+ <component name="Microsoft-Windows-SQMApi" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <CEIPEnabled>0</CEIPEnabled>
+ </component>
+ <component name="Microsoft-Windows-SystemRestore-Main" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableSR>1</DisableSR>
+ </component>
+ <component name="Microsoft-Windows-International-Core" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-LocalSessionManager" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <fDenyTSConnections>false</fDenyTSConnections>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-RDP-WinStationExtensions" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAuthentication>0</UserAuthentication>
+ </component>
+ <component name="Networking-MPSSVC-Svc" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <FirewallGroups>
+ <FirewallGroup wcm:action="add" wcm:keyValue="RemoteDesktop">
+ <Active>true</Active>
+ <Profile>all</Profile>
+ <Group>@FirewallAPI.dll,-28752</Group>
+ </FirewallGroup>
+ </FirewallGroups>
+ </component>
+ </settings>
+ <settings pass="oobeSystem">
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAccounts>
+ <LocalAccounts>
+ <LocalAccount wcm:action="add">
+ <Name>Docker</Name>
+ <Group>Administrators</Group>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </LocalAccount>
+ </LocalAccounts>
+ <AdministratorPassword>
+ <Value>password</Value>
+ <PlainText>true</PlainText>
+ </AdministratorPassword>
+ </UserAccounts>
+ <AutoLogon>
+ <Username>Docker</Username>
+ <Enabled>true</Enabled>
+ <LogonCount>65432</LogonCount>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </AutoLogon>
+ <Display>
+ <ColorDepth>32</ColorDepth>
+ <HorizontalResolution>1920</HorizontalResolution>
+ <VerticalResolution>1080</VerticalResolution>
+ </Display>
+ <OOBE>
+ <HideEULAPage>true</HideEULAPage>
+ <HideWirelessSetupInOOBE>true</HideWirelessSetupInOOBE>
+ <NetworkLocation>Home</NetworkLocation>
+ <ProtectYourPC>3</ProtectYourPC>
+ <SkipUserOOBE>true</SkipUserOOBE>
+ <SkipMachineOOBE>true</SkipMachineOOBE>
+ </OOBE>
+ <RegisteredOrganization>Dockur</RegisteredOrganization>
+ <RegisteredOwner>Windows for Docker</RegisteredOwner>
+ <FirstLogonCommands>
+ <SynchronousCommand wcm:action="add">
+ <Order>1</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" /v "AllowInsecureGuestAuth" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Allow guest access to network shares</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>2</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" /v LimitBlankPasswordUse /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Allow RDP login with blank password</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>3</Order>
+ <CommandLine>cmd /C wmic useraccount where name="Docker" set PasswordExpires=false</CommandLine>
+ <Description>Password Never Expires</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>4</Order>
+ <CommandLine>cmd /C POWERCFG -H OFF</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>5</Order>
+ <CommandLine>cmd /C POWERCFG -X -monitor-timeout-ac 0</CommandLine>
+ <Description>Disable monitor blanking</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>6</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Network\NewNetworkWindowOff" /f</CommandLine>
+ <Description>Disable Network Discovery popup</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>7</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Network\NetworkLocationWizard" /v "HideWizard" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Disable Network Discovery popup</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>8</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkList\NewNetworks" /v NetworkList /t REG_MULTI_SZ /d "" /f</CommandLine>
+ <Description>Disable Network Discovery popup</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>9</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Edge" /v "HideFirstRunExperience" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Disable first-run experience in Edge</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>10</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "HideFileExt" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Show file extensions in Explorer</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>11</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateFileSizePercent" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Zero Hibernation File</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>12</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateEnabled" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>13</Order>
+ <CommandLine>cmd /C POWERCFG -X -standby-timeout-ac 0</CommandLine>
+ <Description>Disable Sleep</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>14</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" /v "fAllowUnlistedRemotePrograms" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Enable RemoteAPP to launch unlisted programs</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>15</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-32752" new enable=Yes</CommandLine>
+ <Description>Enable Network Discovery</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>16</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-28502" new enable=Yes</CommandLine>
+ <Description>Enable File Sharing</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>17</Order>
+ <CommandLine>cmd /C if exist "C:\OEM\install.bat" start "Install" "cmd /C C:\OEM\install.bat"</CommandLine>
+ <Description>Execute custom script from the OEM folder if exists</Description>
+ </SynchronousCommand>
+ </FirstLogonCommands>
+ </component>
+ </settings>
+</unattend>

assets/win7x86-ultimate.xml

@@ -0,0 +1,287 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<unattend xmlns="urn:schemas-microsoft-com:unattend" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State">
+ <settings pass="windowsPE">
+ <component name="Microsoft-Windows-International-Core-WinPE" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SetupUILanguage>
+ <UILanguage>en-US</UILanguage>
+ </SetupUILanguage>
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-Setup" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DiskConfiguration>
+ <WillShowUI>OnError</WillShowUI>
+ <Disk wcm:action="add">
+ <DiskID>0</DiskID>
+ <WillWipeDisk>true</WillWipeDisk>
+ <CreatePartitions>
+ <CreatePartition wcm:action="add">
+ <Order>1</Order>
+ <Type>Primary</Type>
+ <Size>100</Size>
+ </CreatePartition>
+ <CreatePartition wcm:action="add">
+ <Order>2</Order>
+ <Type>Primary</Type>
+ <Extend>true</Extend>
+ </CreatePartition>
+ </CreatePartitions>
+ <ModifyPartitions>
+ <ModifyPartition wcm:action="add">
+ <Format>NTFS</Format>
+ <Label>System Reserved</Label>
+ <Order>1</Order>
+ <Active>true</Active>
+ <PartitionID>1</PartitionID>
+ <TypeID>0x27</TypeID>
+ </ModifyPartition>
+ <ModifyPartition wcm:action="add">
+ <Active>true</Active>
+ <Format>NTFS</Format>
+ <Label>Windows</Label>
+ <Letter>C</Letter>
+ <Order>2</Order>
+ <PartitionID>2</PartitionID>
+ </ModifyPartition>
+ </ModifyPartitions>
+ </Disk>
+ </DiskConfiguration>
+ <ImageInstall>
+ <OSImage>
+ <InstallFrom>
+ <MetaData wcm:action="add">
+ <Value>Windows 7 Ultimate</Value>
+ <Key>/IMAGE/NAME</Key>
+ </MetaData>
+ </InstallFrom>
+ <InstallTo>
+ <DiskID>0</DiskID>
+ <PartitionID>2</PartitionID>
+ </InstallTo>
+ <InstallToAvailablePartition>false</InstallToAvailablePartition>
+ </OSImage>
+ </ImageInstall>
+ <DynamicUpdate>
+ <Enable>true</Enable>
+ <WillShowUI>Never</WillShowUI>
+ </DynamicUpdate>
+ <UpgradeData>
+ <Upgrade>false</Upgrade>
+ <WillShowUI>Never</WillShowUI>
+ </UpgradeData>
+ <UserData>
+ <AcceptEula>true</AcceptEula>
+ <FullName>Docker</FullName>
+ <Organization>Windows for Docker</Organization>
+ <ProductKey>
+ <Key>D4F6K-QK3RD-TMVMJ-BBMRX-3MBMV</Key>
+ <WillShowUI>OnError</WillShowUI>
+ </ProductKey>
+ </UserData>
+ <EnableFirewall>false</EnableFirewall>
+ <Diagnostics>
+ <OptIn>false</OptIn>
+ </Diagnostics>
+ </component>
+ </settings>
+ <settings pass="offlineServicing">
+ <component name="Microsoft-Windows-LUA-Settings" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <EnableLUA>false</EnableLUA>
+ </component>
+ </settings>
+ <settings pass="generalize">
+ <component name="Microsoft-Windows-PnPSysprep" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <PersistAllDeviceInstalls>true</PersistAllDeviceInstalls>
+ </component>
+ <component name="Microsoft-Windows-Security-SPP" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipRearm>1</SkipRearm>
+ </component>
+ </settings>
+ <settings pass="specialize">
+ <component name="Microsoft-Windows-Security-SPP-UX" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipAutoActivation>true</SkipAutoActivation>
+ </component>
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <ComputerName>*</ComputerName>
+ <OEMInformation>
+ <Manufacturer>Dockur</Manufacturer>
+ <Model>Windows for Docker</Model>
+ </OEMInformation>
+ </component>
+ <component name="Microsoft-Windows-ErrorReportingCore" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableWER>1</DisableWER>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableAccelerators>true</DisableAccelerators>
+ <DisableFirstRunWizard>true</DisableFirstRunWizard>
+ <Home_Page>https://google.com</Home_Page>
+ <Help_Page>about:blank</Help_Page>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="wow64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableAccelerators>true</DisableAccelerators>
+ <DisableFirstRunWizard>true</DisableFirstRunWizard>
+ <Home_Page>https://google.com</Home_Page>
+ <Help_Page>about:blank</Help_Page>
+ </component>
+ <component name="Microsoft-Windows-SQMApi" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <CEIPEnabled>0</CEIPEnabled>
+ </component>
+ <component name="Microsoft-Windows-SystemRestore-Main" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableSR>1</DisableSR>
+ </component>
+ <component name="Microsoft-Windows-International-Core" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-LocalSessionManager" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <fDenyTSConnections>false</fDenyTSConnections>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-RDP-WinStationExtensions" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAuthentication>0</UserAuthentication>
+ </component>
+ <component name="Networking-MPSSVC-Svc" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <FirewallGroups>
+ <FirewallGroup wcm:action="add" wcm:keyValue="RemoteDesktop">
+ <Active>true</Active>
+ <Profile>all</Profile>
+ <Group>@FirewallAPI.dll,-28752</Group>
+ </FirewallGroup>
+ </FirewallGroups>
+ </component>
+ </settings>
+ <settings pass="oobeSystem">
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAccounts>
+ <LocalAccounts>
+ <LocalAccount wcm:action="add">
+ <Name>Docker</Name>
+ <Group>Administrators</Group>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </LocalAccount>
+ </LocalAccounts>
+ <AdministratorPassword>
+ <Value>password</Value>
+ <PlainText>true</PlainText>
+ </AdministratorPassword>
+ </UserAccounts>
+ <AutoLogon>
+ <Username>Docker</Username>
+ <Enabled>true</Enabled>
+ <LogonCount>65432</LogonCount>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </AutoLogon>
+ <Display>
+ <ColorDepth>32</ColorDepth>
+ <HorizontalResolution>1920</HorizontalResolution>
+ <VerticalResolution>1080</VerticalResolution>
+ </Display>
+ <OOBE>
+ <HideEULAPage>true</HideEULAPage>
+ <HideWirelessSetupInOOBE>true</HideWirelessSetupInOOBE>
+ <NetworkLocation>Home</NetworkLocation>
+ <ProtectYourPC>3</ProtectYourPC>
+ <SkipUserOOBE>true</SkipUserOOBE>
+ <SkipMachineOOBE>true</SkipMachineOOBE>
+ </OOBE>
+ <RegisteredOrganization>Dockur</RegisteredOrganization>
+ <RegisteredOwner>Windows for Docker</RegisteredOwner>
+ <FirstLogonCommands>
+ <SynchronousCommand wcm:action="add">
+ <Order>1</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" /v "AllowInsecureGuestAuth" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Allow guest access to network shares</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>2</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" /v LimitBlankPasswordUse /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Allow RDP login with blank password</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>3</Order>
+ <CommandLine>cmd /C wmic useraccount where name="Docker" set PasswordExpires=false</CommandLine>
+ <Description>Password Never Expires</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>4</Order>
+ <CommandLine>cmd /C POWERCFG -H OFF</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>5</Order>
+ <CommandLine>cmd /C POWERCFG -X -monitor-timeout-ac 0</CommandLine>
+ <Description>Disable monitor blanking</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>6</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Network\NewNetworkWindowOff" /f</CommandLine>
+ <Description>Disable Network Discovery popup</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>7</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Network\NetworkLocationWizard" /v "HideWizard" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Disable Network Discovery popup</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>8</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkList\NewNetworks" /v NetworkList /t REG_MULTI_SZ /d "" /f</CommandLine>
+ <Description>Disable Network Discovery popup</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>9</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Edge" /v "HideFirstRunExperience" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Disable first-run experience in Edge</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>10</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "HideFileExt" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Show file extensions in Explorer</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>11</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateFileSizePercent" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Zero Hibernation File</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>12</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateEnabled" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>13</Order>
+ <CommandLine>cmd /C POWERCFG -X -standby-timeout-ac 0</CommandLine>
+ <Description>Disable Sleep</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>14</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" /v "fAllowUnlistedRemotePrograms" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Enable RemoteAPP to launch unlisted programs</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>15</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-32752" new enable=Yes</CommandLine>
+ <Description>Enable Network Discovery</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>16</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-28502" new enable=Yes</CommandLine>
+ <Description>Enable File Sharing</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>17</Order>
+ <CommandLine>cmd /C if exist "C:\OEM\install.bat" start "Install" "cmd /C C:\OEM\install.bat"</CommandLine>
+ <Description>Execute custom script from the OEM folder if exists</Description>
+ </SynchronousCommand>
+ </FirstLogonCommands>
+ </component>
+ </settings>
+</unattend>

assets/win7x86.xml

@@ -0,0 +1,287 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<unattend xmlns="urn:schemas-microsoft-com:unattend" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State">
+ <settings pass="windowsPE">
+ <component name="Microsoft-Windows-International-Core-WinPE" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SetupUILanguage>
+ <UILanguage>en-US</UILanguage>
+ </SetupUILanguage>
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-Setup" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DiskConfiguration>
+ <WillShowUI>OnError</WillShowUI>
+ <Disk wcm:action="add">
+ <DiskID>0</DiskID>
+ <WillWipeDisk>true</WillWipeDisk>
+ <CreatePartitions>
+ <CreatePartition wcm:action="add">
+ <Order>1</Order>
+ <Type>Primary</Type>
+ <Size>100</Size>
+ </CreatePartition>
+ <CreatePartition wcm:action="add">
+ <Order>2</Order>
+ <Type>Primary</Type>
+ <Extend>true</Extend>
+ </CreatePartition>
+ </CreatePartitions>
+ <ModifyPartitions>
+ <ModifyPartition wcm:action="add">
+ <Format>NTFS</Format>
+ <Label>System Reserved</Label>
+ <Order>1</Order>
+ <Active>true</Active>
+ <PartitionID>1</PartitionID>
+ <TypeID>0x27</TypeID>
+ </ModifyPartition>
+ <ModifyPartition wcm:action="add">
+ <Active>true</Active>
+ <Format>NTFS</Format>
+ <Label>Windows</Label>
+ <Letter>C</Letter>
+ <Order>2</Order>
+ <PartitionID>2</PartitionID>
+ </ModifyPartition>
+ </ModifyPartitions>
+ </Disk>
+ </DiskConfiguration>
+ <ImageInstall>
+ <OSImage>
+ <InstallFrom>
+ <MetaData wcm:action="add">
+ <Value>Windows 7 PROFESSIONAL</Value>
+ <Key>/IMAGE/NAME</Key>
+ </MetaData>
+ </InstallFrom>
+ <InstallTo>
+ <DiskID>0</DiskID>
+ <PartitionID>2</PartitionID>
+ </InstallTo>
+ <InstallToAvailablePartition>false</InstallToAvailablePartition>
+ </OSImage>
+ </ImageInstall>
+ <DynamicUpdate>
+ <Enable>true</Enable>
+ <WillShowUI>Never</WillShowUI>
+ </DynamicUpdate>
+ <UpgradeData>
+ <Upgrade>false</Upgrade>
+ <WillShowUI>Never</WillShowUI>
+ </UpgradeData>
+ <UserData>
+ <AcceptEula>true</AcceptEula>
+ <FullName>Docker</FullName>
+ <Organization>Windows for Docker</Organization>
+ <ProductKey>
+ <Key>HYF8J-CVRMY-CM74G-RPHKF-PW487</Key>
+ <WillShowUI>OnError</WillShowUI>
+ </ProductKey>
+ </UserData>
+ <EnableFirewall>false</EnableFirewall>
+ <Diagnostics>
+ <OptIn>false</OptIn>
+ </Diagnostics>
+ </component>
+ </settings>
+ <settings pass="offlineServicing">
+ <component name="Microsoft-Windows-LUA-Settings" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <EnableLUA>false</EnableLUA>
+ </component>
+ </settings>
+ <settings pass="generalize">
+ <component name="Microsoft-Windows-PnPSysprep" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <PersistAllDeviceInstalls>true</PersistAllDeviceInstalls>
+ </component>
+ <component name="Microsoft-Windows-Security-SPP" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipRearm>1</SkipRearm>
+ </component>
+ </settings>
+ <settings pass="specialize">
+ <component name="Microsoft-Windows-Security-SPP-UX" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipAutoActivation>true</SkipAutoActivation>
+ </component>
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <ComputerName>*</ComputerName>
+ <OEMInformation>
+ <Manufacturer>Dockur</Manufacturer>
+ <Model>Windows for Docker</Model>
+ </OEMInformation>
+ </component>
+ <component name="Microsoft-Windows-ErrorReportingCore" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableWER>1</DisableWER>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableAccelerators>true</DisableAccelerators>
+ <DisableFirstRunWizard>true</DisableFirstRunWizard>
+ <Home_Page>https://google.com</Home_Page>
+ <Help_Page>about:blank</Help_Page>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="wow64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableAccelerators>true</DisableAccelerators>
+ <DisableFirstRunWizard>true</DisableFirstRunWizard>
+ <Home_Page>https://google.com</Home_Page>
+ <Help_Page>about:blank</Help_Page>
+ </component>
+ <component name="Microsoft-Windows-SQMApi" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <CEIPEnabled>0</CEIPEnabled>
+ </component>
+ <component name="Microsoft-Windows-SystemRestore-Main" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableSR>1</DisableSR>
+ </component>
+ <component name="Microsoft-Windows-International-Core" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-LocalSessionManager" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <fDenyTSConnections>false</fDenyTSConnections>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-RDP-WinStationExtensions" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAuthentication>0</UserAuthentication>
+ </component>
+ <component name="Networking-MPSSVC-Svc" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <FirewallGroups>
+ <FirewallGroup wcm:action="add" wcm:keyValue="RemoteDesktop">
+ <Active>true</Active>
+ <Profile>all</Profile>
+ <Group>@FirewallAPI.dll,-28752</Group>
+ </FirewallGroup>
+ </FirewallGroups>
+ </component>
+ </settings>
+ <settings pass="oobeSystem">
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAccounts>
+ <LocalAccounts>
+ <LocalAccount wcm:action="add">
+ <Name>Docker</Name>
+ <Group>Administrators</Group>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </LocalAccount>
+ </LocalAccounts>
+ <AdministratorPassword>
+ <Value>password</Value>
+ <PlainText>true</PlainText>
+ </AdministratorPassword>
+ </UserAccounts>
+ <AutoLogon>
+ <Username>Docker</Username>
+ <Enabled>true</Enabled>
+ <LogonCount>65432</LogonCount>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </AutoLogon>
+ <Display>
+ <ColorDepth>32</ColorDepth>
+ <HorizontalResolution>1920</HorizontalResolution>
+ <VerticalResolution>1080</VerticalResolution>
+ </Display>
+ <OOBE>
+ <HideEULAPage>true</HideEULAPage>
+ <HideWirelessSetupInOOBE>true</HideWirelessSetupInOOBE>
+ <NetworkLocation>Home</NetworkLocation>
+ <ProtectYourPC>3</ProtectYourPC>
+ <SkipUserOOBE>true</SkipUserOOBE>
+ <SkipMachineOOBE>true</SkipMachineOOBE>
+ </OOBE>
+ <RegisteredOrganization>Dockur</RegisteredOrganization>
+ <RegisteredOwner>Windows for Docker</RegisteredOwner>
+ <FirstLogonCommands>
+ <SynchronousCommand wcm:action="add">
+ <Order>1</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" /v "AllowInsecureGuestAuth" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Allow guest access to network shares</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>2</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" /v LimitBlankPasswordUse /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Allow RDP login with blank password</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>3</Order>
+ <CommandLine>cmd /C wmic useraccount where name="Docker" set PasswordExpires=false</CommandLine>
+ <Description>Password Never Expires</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>4</Order>
+ <CommandLine>cmd /C POWERCFG -H OFF</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>5</Order>
+ <CommandLine>cmd /C POWERCFG -X -monitor-timeout-ac 0</CommandLine>
+ <Description>Disable monitor blanking</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>6</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Network\NewNetworkWindowOff" /f</CommandLine>
+ <Description>Disable Network Discovery popup</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>7</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Network\NetworkLocationWizard" /v "HideWizard" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Disable Network Discovery popup</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>8</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkList\NewNetworks" /v NetworkList /t REG_MULTI_SZ /d "" /f</CommandLine>
+ <Description>Disable Network Discovery popup</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>9</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Edge" /v "HideFirstRunExperience" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Disable first-run experience in Edge</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>10</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "HideFileExt" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Show file extensions in Explorer</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>11</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateFileSizePercent" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Zero Hibernation File</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>12</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateEnabled" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>13</Order>
+ <CommandLine>cmd /C POWERCFG -X -standby-timeout-ac 0</CommandLine>
+ <Description>Disable Sleep</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>14</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" /v "fAllowUnlistedRemotePrograms" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Enable RemoteAPP to launch unlisted programs</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>15</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-32752" new enable=Yes</CommandLine>
+ <Description>Enable Network Discovery</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>16</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-28502" new enable=Yes</CommandLine>
+ <Description>Enable File Sharing</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>17</Order>
+ <CommandLine>cmd /C if exist "C:\OEM\install.bat" start "Install" "cmd /C C:\OEM\install.bat"</CommandLine>
+ <Description>Execute custom script from the OEM folder if exists</Description>
+ </SynchronousCommand>
+ </FirstLogonCommands>
+ </component>
+ </settings>
+</unattend>

assets/win81x64-enterprise-eval.xml

@@ -0,0 +1,302 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<unattend xmlns="urn:schemas-microsoft-com:unattend" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State">
+ <settings pass="windowsPE">
+ <component name="Microsoft-Windows-International-Core-WinPE" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SetupUILanguage>
+ <UILanguage>en-US</UILanguage>
+ </SetupUILanguage>
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DiskConfiguration>
+ <Disk wcm:action="add">
+ <DiskID>0</DiskID>
+ <WillWipeDisk>true</WillWipeDisk>
+ <CreatePartitions>
+ <!-- System partition (ESP) -->
+ <CreatePartition wcm:action="add">
+ <Order>1</Order>
+ <Type>EFI</Type>
+ <Size>128</Size>
+ </CreatePartition>
+ <!-- Microsoft reserved partition (MSR) -->
+ <CreatePartition wcm:action="add">
+ <Order>2</Order>
+ <Type>MSR</Type>
+ <Size>128</Size>
+ </CreatePartition>
+ <!-- Windows partition -->
+ <CreatePartition wcm:action="add">
+ <Order>3</Order>
+ <Type>Primary</Type>
+ <Extend>true</Extend>
+ </CreatePartition>
+ </CreatePartitions>
+ <ModifyPartitions>
+ <!-- System partition (ESP) -->
+ <ModifyPartition wcm:action="add">
+ <Order>1</Order>
+ <PartitionID>1</PartitionID>
+ <Label>System</Label>
+ <Format>FAT32</Format>
+ </ModifyPartition>
+ <!-- MSR partition does not need to be modified -->
+ <ModifyPartition wcm:action="add">
+ <Order>2</Order>
+ <PartitionID>2</PartitionID>
+ </ModifyPartition>
+ <!-- Windows partition -->
+ <ModifyPartition wcm:action="add">
+ <Order>3</Order>
+ <PartitionID>3</PartitionID>
+ <Label>Windows</Label>
+ <Letter>C</Letter>
+ <Format>NTFS</Format>
+ </ModifyPartition>
+ </ModifyPartitions>
+ </Disk>
+ </DiskConfiguration>
+ <ImageInstall>
+ <OSImage>
+ <InstallTo>
+ <DiskID>0</DiskID>
+ <PartitionID>3</PartitionID>
+ </InstallTo>
+ <InstallToAvailablePartition>false</InstallToAvailablePartition>
+ </OSImage>
+ </ImageInstall>
+ <DynamicUpdate>
+ <Enable>true</Enable>
+ <WillShowUI>Never</WillShowUI>
+ </DynamicUpdate>
+ <UpgradeData>
+ <Upgrade>false</Upgrade>
+ <WillShowUI>Never</WillShowUI>
+ </UpgradeData>
+ <UserData>
+ <AcceptEula>true</AcceptEula>
+ <FullName>Docker</FullName>
+ <Organization>Windows for Docker</Organization>
+ </UserData>
+ <EnableFirewall>false</EnableFirewall>
+ <Diagnostics>
+ <OptIn>false</OptIn>
+ </Diagnostics>
+ </component>
+ </settings>
+ <settings pass="offlineServicing">
+ <component name="Microsoft-Windows-LUA-Settings" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <EnableLUA>false</EnableLUA>
+ </component>
+ </settings>
+ <settings pass="generalize">
+ <component name="Microsoft-Windows-PnPSysprep" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <PersistAllDeviceInstalls>true</PersistAllDeviceInstalls>
+ </component>
+ <component name="Microsoft-Windows-Security-SPP" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipRearm>1</SkipRearm>
+ </component>
+ </settings>
+ <settings pass="specialize">
+ <component name="Microsoft-Windows-Security-SPP-UX" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipAutoActivation>true</SkipAutoActivation>
+ </component>
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <ComputerName>*</ComputerName>
+ <OEMInformation>
+ <Manufacturer>Dockur</Manufacturer>
+ <Model>Windows for Docker</Model>
+ </OEMInformation>
+ <OEMName>Windows for Docker</OEMName>
+ </component>
+ <component name="Microsoft-Windows-ErrorReportingCore" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableWER>1</DisableWER>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableAccelerators>true</DisableAccelerators>
+ <DisableFirstRunWizard>true</DisableFirstRunWizard>
+ <Home_Page>https://google.com</Home_Page>
+ <Help_Page>about:blank</Help_Page>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="wow64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableAccelerators>true</DisableAccelerators>
+ <DisableFirstRunWizard>true</DisableFirstRunWizard>
+ <Home_Page>https://google.com</Home_Page>
+ <Help_Page>about:blank</Help_Page>
+ </component>
+ <component name="Microsoft-Windows-SQMApi" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <CEIPEnabled>0</CEIPEnabled>
+ </component>
+ <component name="Microsoft-Windows-SystemRestore-Main" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableSR>1</DisableSR>
+ </component>
+ <component name="Microsoft-Windows-International-Core" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-Deployment" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <RunSynchronous>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>1</Order>
+ <Path>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\CurrentVersion\NetworkList\Signatures\FirstNetwork" /v Category /t REG_DWORD /d 1 /f</Path>
+ <Description>Set Network Location to Home</Description>
+ </RunSynchronousCommand>
+ </RunSynchronous>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-LocalSessionManager" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <fDenyTSConnections>false</fDenyTSConnections>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-RDP-WinStationExtensions" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAuthentication>0</UserAuthentication>
+ </component>
+ <component name="Networking-MPSSVC-Svc" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <FirewallGroups>
+ <FirewallGroup wcm:action="add" wcm:keyValue="RemoteDesktop">
+ <Active>true</Active>
+ <Profile>all</Profile>
+ <Group>@FirewallAPI.dll,-28752</Group>
+ </FirewallGroup>
+ </FirewallGroups>
+ </component>
+ </settings>
+ <settings pass="oobeSystem">
+ <component name="Microsoft-Windows-SecureStartup-FilterDriver" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <PreventDeviceEncryption>true</PreventDeviceEncryption>
+ </component>
+ <component name="Microsoft-Windows-EnhancedStorage-Adm" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <TCGSecurityActivationDisabled>1</TCGSecurityActivationDisabled>
+ </component>
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAccounts>
+ <LocalAccounts>
+ <LocalAccount wcm:action="add">
+ <Name>Docker</Name>
+ <Group>Administrators</Group>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </LocalAccount>
+ </LocalAccounts>
+ <AdministratorPassword>
+ <Value>password</Value>
+ <PlainText>true</PlainText>
+ </AdministratorPassword>
+ </UserAccounts>
+ <AutoLogon>
+ <Username>Docker</Username>
+ <Enabled>true</Enabled>
+ <LogonCount>65432</LogonCount>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </AutoLogon>
+ <Display>
+ <ColorDepth>32</ColorDepth>
+ <HorizontalResolution>1920</HorizontalResolution>
+ <VerticalResolution>1080</VerticalResolution>
+ </Display>
+ <OOBE>
+ <HideEULAPage>true</HideEULAPage>
+ <HideLocalAccountScreen>true</HideLocalAccountScreen>
+ <HideOEMRegistrationScreen>true</HideOEMRegistrationScreen>
+ <HideOnlineAccountScreens>true</HideOnlineAccountScreens>
+ <HideWirelessSetupInOOBE>true</HideWirelessSetupInOOBE>
+ <NetworkLocation>Home</NetworkLocation>
+ <ProtectYourPC>3</ProtectYourPC>
+ <SkipUserOOBE>true</SkipUserOOBE>
+ <SkipMachineOOBE>true</SkipMachineOOBE>
+ </OOBE>
+ <RegisteredOrganization>Dockur</RegisteredOrganization>
+ <RegisteredOwner>Windows for Docker</RegisteredOwner>
+ <FirstLogonCommands>
+ <SynchronousCommand wcm:action="add">
+ <Order>1</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" /v "AllowInsecureGuestAuth" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Allow guest access to network shares</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>2</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" /v LimitBlankPasswordUse /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Allow RDP login with blank password</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>3</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PasswordLess\Device" /v "DevicePasswordLessBuildVersion" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Enable option for passwordless sign-in</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>4</Order>
+ <CommandLine>cmd /C wmic useraccount where name="Docker" set PasswordExpires=false</CommandLine>
+ <Description>Password Never Expires</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>5</Order>
+ <CommandLine>cmd /C POWERCFG -H OFF</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>6</Order>
+ <CommandLine>cmd /C POWERCFG -X -monitor-timeout-ac 0</CommandLine>
+ <Description>Disable monitor blanking</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>7</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Edge" /v "HideFirstRunExperience" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Disable first-run experience in Edge</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>8</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "HideFileExt" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Show file extensions in Explorer</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>9</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateFileSizePercent" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Zero Hibernation File</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>10</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateEnabled" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>11</Order>
+ <CommandLine>cmd /C POWERCFG -X -standby-timeout-ac 0</CommandLine>
+ <Description>Disable Sleep</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>12</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" /v "fAllowUnlistedRemotePrograms" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Enable RemoteAPP to launch unlisted programs</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>13</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" /v "NoAutoUpdate" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Turn off Windows Update auto download</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>14</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-32752" new enable=Yes</CommandLine>
+ <Description>Enable Network Discovery</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>15</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-28502" new enable=Yes</CommandLine>
+ <Description>Enable File Sharing</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>16</Order>
+ <CommandLine>cmd /C if exist "C:\OEM\install.bat" start "Install" "cmd /C C:\OEM\install.bat"</CommandLine>
+ <Description>Execute custom script from the OEM folder if exists</Description>
+ </SynchronousCommand>
+ </FirstLogonCommands>
+ </component>
+ </settings>
+</unattend>

assets/win81x64-enterprise.xml

@@ -0,0 +1,305 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<unattend xmlns="urn:schemas-microsoft-com:unattend" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State">
+ <settings pass="windowsPE">
+ <component name="Microsoft-Windows-International-Core-WinPE" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SetupUILanguage>
+ <UILanguage>en-US</UILanguage>
+ </SetupUILanguage>
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DiskConfiguration>
+ <Disk wcm:action="add">
+ <DiskID>0</DiskID>
+ <WillWipeDisk>true</WillWipeDisk>
+ <CreatePartitions>
+ <!-- System partition (ESP) -->
+ <CreatePartition wcm:action="add">
+ <Order>1</Order>
+ <Type>EFI</Type>
+ <Size>128</Size>
+ </CreatePartition>
+ <!-- Microsoft reserved partition (MSR) -->
+ <CreatePartition wcm:action="add">
+ <Order>2</Order>
+ <Type>MSR</Type>
+ <Size>128</Size>
+ </CreatePartition>
+ <!-- Windows partition -->
+ <CreatePartition wcm:action="add">
+ <Order>3</Order>
+ <Type>Primary</Type>
+ <Extend>true</Extend>
+ </CreatePartition>
+ </CreatePartitions>
+ <ModifyPartitions>
+ <!-- System partition (ESP) -->
+ <ModifyPartition wcm:action="add">
+ <Order>1</Order>
+ <PartitionID>1</PartitionID>
+ <Label>System</Label>
+ <Format>FAT32</Format>
+ </ModifyPartition>
+ <!-- MSR partition does not need to be modified -->
+ <ModifyPartition wcm:action="add">
+ <Order>2</Order>
+ <PartitionID>2</PartitionID>
+ </ModifyPartition>
+ <!-- Windows partition -->
+ <ModifyPartition wcm:action="add">
+ <Order>3</Order>
+ <PartitionID>3</PartitionID>
+ <Label>Windows</Label>
+ <Letter>C</Letter>
+ <Format>NTFS</Format>
+ </ModifyPartition>
+ </ModifyPartitions>
+ </Disk>
+ </DiskConfiguration>
+ <ImageInstall>
+ <OSImage>
+ <InstallTo>
+ <DiskID>0</DiskID>
+ <PartitionID>3</PartitionID>
+ </InstallTo>
+ <InstallToAvailablePartition>false</InstallToAvailablePartition>
+ </OSImage>
+ </ImageInstall>
+ <DynamicUpdate>
+ <Enable>true</Enable>
+ <WillShowUI>Never</WillShowUI>
+ </DynamicUpdate>
+ <UpgradeData>
+ <Upgrade>false</Upgrade>
+ <WillShowUI>Never</WillShowUI>
+ </UpgradeData>
+ <UserData>
+ <AcceptEula>true</AcceptEula>
+ <FullName>Docker</FullName>
+ <Organization>Windows for Docker</Organization>
+ <ProductKey>
+ <Key>FHQNR-XYXYC-8PMHT-TV4PH-DRQ3H</Key>
+ </ProductKey>
+ </UserData>
+ <EnableFirewall>false</EnableFirewall>
+ <Diagnostics>
+ <OptIn>false</OptIn>
+ </Diagnostics>
+ </component>
+ </settings>
+ <settings pass="offlineServicing">
+ <component name="Microsoft-Windows-LUA-Settings" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <EnableLUA>false</EnableLUA>
+ </component>
+ </settings>
+ <settings pass="generalize">
+ <component name="Microsoft-Windows-PnPSysprep" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <PersistAllDeviceInstalls>true</PersistAllDeviceInstalls>
+ </component>
+ <component name="Microsoft-Windows-Security-SPP" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipRearm>1</SkipRearm>
+ </component>
+ </settings>
+ <settings pass="specialize">
+ <component name="Microsoft-Windows-Security-SPP-UX" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipAutoActivation>true</SkipAutoActivation>
+ </component>
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <ComputerName>*</ComputerName>
+ <OEMInformation>
+ <Manufacturer>Dockur</Manufacturer>
+ <Model>Windows for Docker</Model>
+ </OEMInformation>
+ <OEMName>Windows for Docker</OEMName>
+ </component>
+ <component name="Microsoft-Windows-ErrorReportingCore" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableWER>1</DisableWER>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableAccelerators>true</DisableAccelerators>
+ <DisableFirstRunWizard>true</DisableFirstRunWizard>
+ <Home_Page>https://google.com</Home_Page>
+ <Help_Page>about:blank</Help_Page>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="wow64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableAccelerators>true</DisableAccelerators>
+ <DisableFirstRunWizard>true</DisableFirstRunWizard>
+ <Home_Page>https://google.com</Home_Page>
+ <Help_Page>about:blank</Help_Page>
+ </component>
+ <component name="Microsoft-Windows-SQMApi" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <CEIPEnabled>0</CEIPEnabled>
+ </component>
+ <component name="Microsoft-Windows-SystemRestore-Main" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableSR>1</DisableSR>
+ </component>
+ <component name="Microsoft-Windows-International-Core" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-Deployment" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <RunSynchronous>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>1</Order>
+ <Path>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\CurrentVersion\NetworkList\Signatures\FirstNetwork" /v Category /t REG_DWORD /d 1 /f</Path>
+ <Description>Set Network Location to Home</Description>
+ </RunSynchronousCommand>
+ </RunSynchronous>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-LocalSessionManager" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <fDenyTSConnections>false</fDenyTSConnections>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-RDP-WinStationExtensions" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAuthentication>0</UserAuthentication>
+ </component>
+ <component name="Networking-MPSSVC-Svc" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <FirewallGroups>
+ <FirewallGroup wcm:action="add" wcm:keyValue="RemoteDesktop">
+ <Active>true</Active>
+ <Profile>all</Profile>
+ <Group>@FirewallAPI.dll,-28752</Group>
+ </FirewallGroup>
+ </FirewallGroups>
+ </component>
+ </settings>
+ <settings pass="oobeSystem">
+ <component name="Microsoft-Windows-SecureStartup-FilterDriver" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <PreventDeviceEncryption>true</PreventDeviceEncryption>
+ </component>
+ <component name="Microsoft-Windows-EnhancedStorage-Adm" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <TCGSecurityActivationDisabled>1</TCGSecurityActivationDisabled>
+ </component>
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAccounts>
+ <LocalAccounts>
+ <LocalAccount wcm:action="add">
+ <Name>Docker</Name>
+ <Group>Administrators</Group>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </LocalAccount>
+ </LocalAccounts>
+ <AdministratorPassword>
+ <Value>password</Value>
+ <PlainText>true</PlainText>
+ </AdministratorPassword>
+ </UserAccounts>
+ <AutoLogon>
+ <Username>Docker</Username>
+ <Enabled>true</Enabled>
+ <LogonCount>65432</LogonCount>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </AutoLogon>
+ <Display>
+ <ColorDepth>32</ColorDepth>
+ <HorizontalResolution>1920</HorizontalResolution>
+ <VerticalResolution>1080</VerticalResolution>
+ </Display>
+ <OOBE>
+ <HideEULAPage>true</HideEULAPage>
+ <HideLocalAccountScreen>true</HideLocalAccountScreen>
+ <HideOEMRegistrationScreen>true</HideOEMRegistrationScreen>
+ <HideOnlineAccountScreens>true</HideOnlineAccountScreens>
+ <HideWirelessSetupInOOBE>true</HideWirelessSetupInOOBE>
+ <NetworkLocation>Home</NetworkLocation>
+ <ProtectYourPC>3</ProtectYourPC>
+ <SkipUserOOBE>true</SkipUserOOBE>
+ <SkipMachineOOBE>true</SkipMachineOOBE>
+ </OOBE>
+ <RegisteredOrganization>Dockur</RegisteredOrganization>
+ <RegisteredOwner>Windows for Docker</RegisteredOwner>
+ <FirstLogonCommands>
+ <SynchronousCommand wcm:action="add">
+ <Order>1</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" /v "AllowInsecureGuestAuth" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Allow guest access to network shares</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>2</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" /v LimitBlankPasswordUse /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Allow RDP login with blank password</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>3</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PasswordLess\Device" /v "DevicePasswordLessBuildVersion" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Enable option for passwordless sign-in</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>4</Order>
+ <CommandLine>cmd /C wmic useraccount where name="Docker" set PasswordExpires=false</CommandLine>
+ <Description>Password Never Expires</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>5</Order>
+ <CommandLine>cmd /C POWERCFG -H OFF</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>6</Order>
+ <CommandLine>cmd /C POWERCFG -X -monitor-timeout-ac 0</CommandLine>
+ <Description>Disable monitor blanking</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>7</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Edge" /v "HideFirstRunExperience" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Disable first-run experience in Edge</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>8</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "HideFileExt" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Show file extensions in Explorer</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>9</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateFileSizePercent" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Zero Hibernation File</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>10</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateEnabled" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>11</Order>
+ <CommandLine>cmd /C POWERCFG -X -standby-timeout-ac 0</CommandLine>
+ <Description>Disable Sleep</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>12</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" /v "fAllowUnlistedRemotePrograms" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Enable RemoteAPP to launch unlisted programs</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>13</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" /v "NoAutoUpdate" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Turn off Windows Update auto download</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>14</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-32752" new enable=Yes</CommandLine>
+ <Description>Enable Network Discovery</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>15</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-28502" new enable=Yes</CommandLine>
+ <Description>Enable File Sharing</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>16</Order>
+ <CommandLine>cmd /C if exist "C:\OEM\install.bat" start "Install" "cmd /C C:\OEM\install.bat"</CommandLine>
+ <Description>Execute custom script from the OEM folder if exists</Description>
+ </SynchronousCommand>
+ </FirstLogonCommands>
+ </component>
+ </settings>
+</unattend>

assets/win81x64.xml

@@ -0,0 +1,312 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<unattend xmlns="urn:schemas-microsoft-com:unattend" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State">
+ <settings pass="windowsPE">
+ <component name="Microsoft-Windows-International-Core-WinPE" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SetupUILanguage>
+ <UILanguage>en-US</UILanguage>
+ </SetupUILanguage>
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DiskConfiguration>
+ <Disk wcm:action="add">
+ <DiskID>0</DiskID>
+ <WillWipeDisk>true</WillWipeDisk>
+ <CreatePartitions>
+ <!-- System partition (ESP) -->
+ <CreatePartition wcm:action="add">
+ <Order>1</Order>
+ <Type>EFI</Type>
+ <Size>128</Size>
+ </CreatePartition>
+ <!-- Microsoft reserved partition (MSR) -->
+ <CreatePartition wcm:action="add">
+ <Order>2</Order>
+ <Type>MSR</Type>
+ <Size>128</Size>
+ </CreatePartition>
+ <!-- Windows partition -->
+ <CreatePartition wcm:action="add">
+ <Order>3</Order>
+ <Type>Primary</Type>
+ <Extend>true</Extend>
+ </CreatePartition>
+ </CreatePartitions>
+ <ModifyPartitions>
+ <!-- System partition (ESP) -->
+ <ModifyPartition wcm:action="add">
+ <Order>1</Order>
+ <PartitionID>1</PartitionID>
+ <Label>System</Label>
+ <Format>FAT32</Format>
+ </ModifyPartition>
+ <!-- MSR partition does not need to be modified -->
+ <ModifyPartition wcm:action="add">
+ <Order>2</Order>
+ <PartitionID>2</PartitionID>
+ </ModifyPartition>
+ <!-- Windows partition -->
+ <ModifyPartition wcm:action="add">
+ <Order>3</Order>
+ <PartitionID>3</PartitionID>
+ <Label>Windows</Label>
+ <Letter>C</Letter>
+ <Format>NTFS</Format>
+ </ModifyPartition>
+ </ModifyPartitions>
+ </Disk>
+ </DiskConfiguration>
+ <ImageInstall>
+ <OSImage>
+ <InstallFrom>
+ <MetaData wcm:action="add">
+ <Value>Windows 8.1 Pro</Value>
+ <Key>/IMAGE/NAME</Key>
+ </MetaData>
+ </InstallFrom>
+ <InstallTo>
+ <DiskID>0</DiskID>
+ <PartitionID>3</PartitionID>
+ </InstallTo>
+ <InstallToAvailablePartition>false</InstallToAvailablePartition>
+ </OSImage>
+ </ImageInstall>
+ <DynamicUpdate>
+ <Enable>true</Enable>
+ <WillShowUI>Never</WillShowUI>
+ </DynamicUpdate>
+ <UpgradeData>
+ <Upgrade>false</Upgrade>
+ <WillShowUI>Never</WillShowUI>
+ </UpgradeData>
+ <UserData>
+ <AcceptEula>true</AcceptEula>
+ <FullName>Docker</FullName>
+ <Organization>Windows for Docker</Organization>
+ <ProductKey>
+ <Key>GCRJD-8NW9H-F2CDX-CCM8D-9D6T9</Key>
+ <WillShowUI>OnError</WillShowUI>
+ </ProductKey>
+ </UserData>
+ <EnableFirewall>false</EnableFirewall>
+ <Diagnostics>
+ <OptIn>false</OptIn>
+ </Diagnostics>
+ </component>
+ </settings>
+ <settings pass="offlineServicing">
+ <component name="Microsoft-Windows-LUA-Settings" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <EnableLUA>false</EnableLUA>
+ </component>
+ </settings>
+ <settings pass="generalize">
+ <component name="Microsoft-Windows-PnPSysprep" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <PersistAllDeviceInstalls>true</PersistAllDeviceInstalls>
+ </component>
+ <component name="Microsoft-Windows-Security-SPP" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipRearm>1</SkipRearm>
+ </component>
+ </settings>
+ <settings pass="specialize">
+ <component name="Microsoft-Windows-Security-SPP-UX" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipAutoActivation>true</SkipAutoActivation>
+ </component>
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <ComputerName>*</ComputerName>
+ <OEMInformation>
+ <Manufacturer>Dockur</Manufacturer>
+ <Model>Windows for Docker</Model>
+ </OEMInformation>
+ <OEMName>Windows for Docker</OEMName>
+ </component>
+ <component name="Microsoft-Windows-ErrorReportingCore" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableWER>1</DisableWER>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableAccelerators>true</DisableAccelerators>
+ <DisableFirstRunWizard>true</DisableFirstRunWizard>
+ <Home_Page>https://google.com</Home_Page>
+ <Help_Page>about:blank</Help_Page>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="wow64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableAccelerators>true</DisableAccelerators>
+ <DisableFirstRunWizard>true</DisableFirstRunWizard>
+ <Home_Page>https://google.com</Home_Page>
+ <Help_Page>about:blank</Help_Page>
+ </component>
+ <component name="Microsoft-Windows-SQMApi" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <CEIPEnabled>0</CEIPEnabled>
+ </component>
+ <component name="Microsoft-Windows-SystemRestore-Main" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableSR>1</DisableSR>
+ </component>
+ <component name="Microsoft-Windows-International-Core" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-Deployment" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <RunSynchronous>
+ <RunSynchronousCommand wcm:action="add">
+ <Order>1</Order>
+ <Path>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\CurrentVersion\NetworkList\Signatures\FirstNetwork" /v Category /t REG_DWORD /d 1 /f</Path>
+ <Description>Set Network Location to Home</Description>
+ </RunSynchronousCommand>
+ </RunSynchronous>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-LocalSessionManager" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <fDenyTSConnections>false</fDenyTSConnections>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-RDP-WinStationExtensions" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAuthentication>0</UserAuthentication>
+ </component>
+ <component name="Networking-MPSSVC-Svc" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <FirewallGroups>
+ <FirewallGroup wcm:action="add" wcm:keyValue="RemoteDesktop">
+ <Active>true</Active>
+ <Profile>all</Profile>
+ <Group>@FirewallAPI.dll,-28752</Group>
+ </FirewallGroup>
+ </FirewallGroups>
+ </component>
+ </settings>
+ <settings pass="oobeSystem">
+ <component name="Microsoft-Windows-SecureStartup-FilterDriver" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <PreventDeviceEncryption>true</PreventDeviceEncryption>
+ </component>
+ <component name="Microsoft-Windows-EnhancedStorage-Adm" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <TCGSecurityActivationDisabled>1</TCGSecurityActivationDisabled>
+ </component>
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAccounts>
+ <LocalAccounts>
+ <LocalAccount wcm:action="add">
+ <Name>Docker</Name>
+ <Group>Administrators</Group>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </LocalAccount>
+ </LocalAccounts>
+ <AdministratorPassword>
+ <Value>password</Value>
+ <PlainText>true</PlainText>
+ </AdministratorPassword>
+ </UserAccounts>
+ <AutoLogon>
+ <Username>Docker</Username>
+ <Enabled>true</Enabled>
+ <LogonCount>65432</LogonCount>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </AutoLogon>
+ <Display>
+ <ColorDepth>32</ColorDepth>
+ <HorizontalResolution>1920</HorizontalResolution>
+ <VerticalResolution>1080</VerticalResolution>
+ </Display>
+ <OOBE>
+ <HideEULAPage>true</HideEULAPage>
+ <HideLocalAccountScreen>true</HideLocalAccountScreen>
+ <HideOEMRegistrationScreen>true</HideOEMRegistrationScreen>
+ <HideOnlineAccountScreens>true</HideOnlineAccountScreens>
+ <HideWirelessSetupInOOBE>true</HideWirelessSetupInOOBE>
+ <NetworkLocation>Home</NetworkLocation>
+ <ProtectYourPC>3</ProtectYourPC>
+ <SkipUserOOBE>true</SkipUserOOBE>
+ <SkipMachineOOBE>true</SkipMachineOOBE>
+ </OOBE>
+ <RegisteredOrganization>Dockur</RegisteredOrganization>
+ <RegisteredOwner>Windows for Docker</RegisteredOwner>
+ <FirstLogonCommands>
+ <SynchronousCommand wcm:action="add">
+ <Order>1</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" /v "AllowInsecureGuestAuth" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Allow guest access to network shares</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>2</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" /v LimitBlankPasswordUse /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Allow RDP login with blank password</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>3</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PasswordLess\Device" /v "DevicePasswordLessBuildVersion" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Enable option for passwordless sign-in</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>4</Order>
+ <CommandLine>cmd /C wmic useraccount where name="Docker" set PasswordExpires=false</CommandLine>
+ <Description>Password Never Expires</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>5</Order>
+ <CommandLine>cmd /C POWERCFG -H OFF</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>6</Order>
+ <CommandLine>cmd /C POWERCFG -X -monitor-timeout-ac 0</CommandLine>
+ <Description>Disable monitor blanking</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>7</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Edge" /v "HideFirstRunExperience" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Disable first-run experience in Edge</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>8</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "HideFileExt" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Show file extensions in Explorer</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>9</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateFileSizePercent" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Zero Hibernation File</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>10</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateEnabled" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>11</Order>
+ <CommandLine>cmd /C POWERCFG -X -standby-timeout-ac 0</CommandLine>
+ <Description>Disable Sleep</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>12</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" /v "fAllowUnlistedRemotePrograms" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Enable RemoteAPP to launch unlisted programs</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>13</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" /v "NoAutoUpdate" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Turn off Windows Update auto download</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>14</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-32752" new enable=Yes</CommandLine>
+ <Description>Enable Network Discovery</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>15</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-28502" new enable=Yes</CommandLine>
+ <Description>Enable File Sharing</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>16</Order>
+ <CommandLine>cmd /C if exist "C:\OEM\install.bat" start "Install" "cmd /C C:\OEM\install.bat"</CommandLine>
+ <Description>Execute custom script from the OEM folder if exists</Description>
+ </SynchronousCommand>
+ </FirstLogonCommands>
+ </component>
+ </settings>
+</unattend>

assets/winvistax64-enterprise.xml

@@ -0,0 +1,261 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<unattend xmlns="urn:schemas-microsoft-com:unattend" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State">
+ <settings pass="windowsPE">
+ <component name="Microsoft-Windows-International-Core-WinPE" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SetupUILanguage>
+ <UILanguage>en-US</UILanguage>
+ </SetupUILanguage>
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DiskConfiguration>
+ <WillShowUI>OnError</WillShowUI>
+ <Disk wcm:action="add">
+ <DiskID>0</DiskID>
+ <WillWipeDisk>true</WillWipeDisk>
+ <CreatePartitions>
+ <CreatePartition wcm:action="add">
+ <Order>1</Order>
+ <Type>Primary</Type>
+ <Extend>true</Extend>
+ </CreatePartition>
+ </CreatePartitions>
+ <ModifyPartitions>
+ <ModifyPartition wcm:action="add">
+ <Active>true</Active>
+ <Format>NTFS</Format>
+ <Label>Windows</Label>
+ <Letter>C</Letter>
+ <Order>1</Order>
+ <PartitionID>1</PartitionID>
+ </ModifyPartition>
+ </ModifyPartitions>
+ </Disk>
+ </DiskConfiguration>
+ <ImageInstall>
+ <OSImage>
+ <InstallFrom>
+ <MetaData wcm:action="add">
+ <Value>Windows Vista Enterprise</Value>
+ <Key>/IMAGE/NAME</Key>
+ </MetaData>
+ </InstallFrom>
+ <InstallTo>
+ <DiskID>0</DiskID>
+ <PartitionID>1</PartitionID>
+ </InstallTo>
+ <WillShowUI>OnError</WillShowUI>
+ <InstallToAvailablePartition>false</InstallToAvailablePartition>
+ </OSImage>
+ </ImageInstall>
+ <UserData>
+ <AcceptEula>true</AcceptEula>
+ <FullName>Docker</FullName>
+ <Organization>Windows for Docker</Organization>
+ <ProductKey>
+ <Key>VKK3X-68KWM-X2YGT-QR4M6-4BWMV</Key>
+ </ProductKey>
+ </UserData>
+ </component>
+ </settings>
+ <settings pass="generalize">
+ <component name="Microsoft-Windows-PnpSysprep" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <PersistAllDeviceInstalls>true</PersistAllDeviceInstalls>
+ </component>
+ <component name="Microsoft-Windows-Security-Licensing-SLC" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipRearm>1</SkipRearm>
+ </component>
+ </settings>
+ <settings pass="specialize">
+ <component name="Microsoft-Windows-Security-Licensing-SLC-UX" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipAutoActivation>true</SkipAutoActivation>
+ </component>
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <ComputerName>*</ComputerName>
+ <ProductKey>VKK3X-68KWM-X2YGT-QR4M6-4BWMV</ProductKey>
+ <TimeZone>Pacific Standard Time</TimeZone>
+ <OEMInformation>
+ <Manufacturer>Dockur</Manufacturer>
+ <Model>Windows for Docker</Model>
+ </OEMInformation>
+ <RegisteredOrganization>Dockur</RegisteredOrganization>
+ <RegisteredOwner>Windows for Docker</RegisteredOwner>
+ </component>
+ <component name="Microsoft-Windows-SystemRestore-Main" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableSR>1</DisableSR>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-LocalSessionManager" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <fDenyTSConnections>false</fDenyTSConnections>
+ </component>
+ </settings>
+ <settings pass="oobeSystem">
+ <component name="Microsoft-Windows-International-Core" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <Home_Page>about:blank</Home_Page>
+ </component>
+ <component name="Microsoft-Windows-SQMApi" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <CEIPEnabled>0</CEIPEnabled>
+ </component>
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAccounts>
+ <LocalAccounts>
+ <LocalAccount wcm:action="add">
+ <Name>Docker</Name>
+ <Group>Administrators</Group>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </LocalAccount>
+ </LocalAccounts>
+ <AdministratorPassword>
+ <Value>password</Value>
+ <PlainText>true</PlainText>
+ </AdministratorPassword>
+ </UserAccounts>
+ <AutoLogon>
+ <Username>Docker</Username>
+ <Enabled>true</Enabled>
+ <LogonCount>65432</LogonCount>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </AutoLogon>
+ <Display>
+ <ColorDepth>32</ColorDepth>
+ <HorizontalResolution>1920</HorizontalResolution>
+ <VerticalResolution>1080</VerticalResolution>
+ </Display>
+ <OOBE>
+ <HideEULAPage>true</HideEULAPage>
+ <NetworkLocation>Home</NetworkLocation>
+ <ProtectYourPC>3</ProtectYourPC>
+ <SkipUserOOBE>true</SkipUserOOBE>
+ <SkipMachineOOBE>false</SkipMachineOOBE>
+ </OOBE>
+ <RegisteredOrganization>Dockur</RegisteredOrganization>
+ <RegisteredOwner>Windows for Docker</RegisteredOwner>
+ <FirstLogonCommands>
+ <SynchronousCommand wcm:action="add">
+ <Order>1</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" /v "AllowInsecureGuestAuth" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Allow guest access to network shares</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>2</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" /v LimitBlankPasswordUse /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Allow RDP login with blank password</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>3</Order>
+ <CommandLine>cmd /C wmic useraccount where name="Docker" set PasswordExpires=false</CommandLine>
+ <Description>Password Never Expires</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>4</Order>
+ <CommandLine>cmd /C POWERCFG -H OFF</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>5</Order>
+ <CommandLine>cmd /C POWERCFG -X -monitor-timeout-ac 0</CommandLine>
+ <Description>Disable monitor blanking</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>6</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Network\NewNetworkWindowOff" /f</CommandLine>
+ <Description>Disable Network Discovery popup</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>7</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Network\NetworkLocationWizard" /v "HideWizard" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Disable Network Discovery popup</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>8</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkList\NewNetworks" /v NetworkList /t REG_MULTI_SZ /d "" /f</CommandLine>
+ <Description>Disable Network Discovery popup</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>9</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Edge" /v "HideFirstRunExperience" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Disable first-run experience in Edge</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>10</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "HideFileExt" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Show file extensions in Explorer</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>11</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateFileSizePercent" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Zero Hibernation File</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>12</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateEnabled" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>13</Order>
+ <CommandLine>cmd /C POWERCFG -X -standby-timeout-ac 0</CommandLine>
+ <Description>Disable Sleep</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>14</Order>
+ <CommandLine>netsh.exe advfirewall firewall set rule group="@FirewallAPI.dll,-28752" new enable=Yes</CommandLine>
+ <Description>Add RDP in firewall</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>15</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server" /v fDenyTSConnections /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Enable RDP</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>16</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Windows\Sidebar" /v "TurnOffSidebar" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Turn off sidebar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>17</Order>
+ <CommandLine>reg.exe add "HKCU\Control Panel\Desktop" /v "ScreenSaveActive" /t REG_SZ /d 0 /f</CommandLine>
+ <Description>Disable screensaver</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>18</Order>
+ <CommandLine>reg.exe add "HKCU\Control Panel\Desktop" /v SCRNSAVE.EXE /t REG_SZ /d C:\Windows\System32\scrnsavex.scr /f</CommandLine>
+ <Description>Disable screensaver</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>19</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" /v "fAllowUnlistedRemotePrograms" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Enable RemoteAPP to launch unlisted programs</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>20</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-32752" new enable=Yes</CommandLine>
+ <Description>Enable Network Discovery</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>21</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-28502" new enable=Yes</CommandLine>
+ <Description>Enable File Sharing</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>22</Order>
+ <CommandLine>cmd /C if exist "C:\OEM\install.bat" start "Install" "cmd /C C:\OEM\install.bat"</CommandLine>
+ <Description>Execute custom script from the OEM folder if exists</Description>
+ </SynchronousCommand>
+ </FirstLogonCommands>
+ </component>
+ </settings>
+</unattend>

assets/winvistax64-ultimate.xml

@@ -0,0 +1,261 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<unattend xmlns="urn:schemas-microsoft-com:unattend" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State">
+ <settings pass="windowsPE">
+ <component name="Microsoft-Windows-International-Core-WinPE" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SetupUILanguage>
+ <UILanguage>en-US</UILanguage>
+ </SetupUILanguage>
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DiskConfiguration>
+ <WillShowUI>OnError</WillShowUI>
+ <Disk wcm:action="add">
+ <DiskID>0</DiskID>
+ <WillWipeDisk>true</WillWipeDisk>
+ <CreatePartitions>
+ <CreatePartition wcm:action="add">
+ <Order>1</Order>
+ <Type>Primary</Type>
+ <Extend>true</Extend>
+ </CreatePartition>
+ </CreatePartitions>
+ <ModifyPartitions>
+ <ModifyPartition wcm:action="add">
+ <Active>true</Active>
+ <Format>NTFS</Format>
+ <Label>Windows</Label>
+ <Letter>C</Letter>
+ <Order>1</Order>
+ <PartitionID>1</PartitionID>
+ </ModifyPartition>
+ </ModifyPartitions>
+ </Disk>
+ </DiskConfiguration>
+ <ImageInstall>
+ <OSImage>
+ <InstallFrom>
+ <MetaData wcm:action="add">
+ <Value>Windows Vista Ultimate</Value>
+ <Key>/IMAGE/NAME</Key>
+ </MetaData>
+ </InstallFrom>
+ <InstallTo>
+ <DiskID>0</DiskID>
+ <PartitionID>1</PartitionID>
+ </InstallTo>
+ <WillShowUI>OnError</WillShowUI>
+ <InstallToAvailablePartition>false</InstallToAvailablePartition>
+ </OSImage>
+ </ImageInstall>
+ <UserData>
+ <AcceptEula>true</AcceptEula>
+ <FullName>Docker</FullName>
+ <Organization>Windows for Docker</Organization>
+ <ProductKey>
+ <Key>VMCB9-FDRV6-6CDQM-RV23K-RP8F7</Key>
+ </ProductKey>
+ </UserData>
+ </component>
+ </settings>
+ <settings pass="generalize">
+ <component name="Microsoft-Windows-PnpSysprep" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <PersistAllDeviceInstalls>true</PersistAllDeviceInstalls>
+ </component>
+ <component name="Microsoft-Windows-Security-Licensing-SLC" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipRearm>1</SkipRearm>
+ </component>
+ </settings>
+ <settings pass="specialize">
+ <component name="Microsoft-Windows-Security-Licensing-SLC-UX" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipAutoActivation>true</SkipAutoActivation>
+ </component>
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <ComputerName>*</ComputerName>
+ <ProductKey>VMCB9-FDRV6-6CDQM-RV23K-RP8F7</ProductKey>
+ <TimeZone>Pacific Standard Time</TimeZone>
+ <OEMInformation>
+ <Manufacturer>Dockur</Manufacturer>
+ <Model>Windows for Docker</Model>
+ </OEMInformation>
+ <RegisteredOrganization>Dockur</RegisteredOrganization>
+ <RegisteredOwner>Windows for Docker</RegisteredOwner>
+ </component>
+ <component name="Microsoft-Windows-SystemRestore-Main" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableSR>1</DisableSR>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-LocalSessionManager" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <fDenyTSConnections>false</fDenyTSConnections>
+ </component>
+ </settings>
+ <settings pass="oobeSystem">
+ <component name="Microsoft-Windows-International-Core" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <Home_Page>about:blank</Home_Page>
+ </component>
+ <component name="Microsoft-Windows-SQMApi" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <CEIPEnabled>0</CEIPEnabled>
+ </component>
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAccounts>
+ <LocalAccounts>
+ <LocalAccount wcm:action="add">
+ <Name>Docker</Name>
+ <Group>Administrators</Group>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </LocalAccount>
+ </LocalAccounts>
+ <AdministratorPassword>
+ <Value>password</Value>
+ <PlainText>true</PlainText>
+ </AdministratorPassword>
+ </UserAccounts>
+ <AutoLogon>
+ <Username>Docker</Username>
+ <Enabled>true</Enabled>
+ <LogonCount>65432</LogonCount>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </AutoLogon>
+ <Display>
+ <ColorDepth>32</ColorDepth>
+ <HorizontalResolution>1920</HorizontalResolution>
+ <VerticalResolution>1080</VerticalResolution>
+ </Display>
+ <OOBE>
+ <HideEULAPage>true</HideEULAPage>
+ <NetworkLocation>Home</NetworkLocation>
+ <ProtectYourPC>3</ProtectYourPC>
+ <SkipUserOOBE>true</SkipUserOOBE>
+ <SkipMachineOOBE>false</SkipMachineOOBE>
+ </OOBE>
+ <RegisteredOrganization>Dockur</RegisteredOrganization>
+ <RegisteredOwner>Windows for Docker</RegisteredOwner>
+ <FirstLogonCommands>
+ <SynchronousCommand wcm:action="add">
+ <Order>1</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" /v "AllowInsecureGuestAuth" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Allow guest access to network shares</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>2</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" /v LimitBlankPasswordUse /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Allow RDP login with blank password</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>3</Order>
+ <CommandLine>cmd /C wmic useraccount where name="Docker" set PasswordExpires=false</CommandLine>
+ <Description>Password Never Expires</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>4</Order>
+ <CommandLine>cmd /C POWERCFG -H OFF</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>5</Order>
+ <CommandLine>cmd /C POWERCFG -X -monitor-timeout-ac 0</CommandLine>
+ <Description>Disable monitor blanking</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>6</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Network\NewNetworkWindowOff" /f</CommandLine>
+ <Description>Disable Network Discovery popup</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>7</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Network\NetworkLocationWizard" /v "HideWizard" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Disable Network Discovery popup</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>8</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkList\NewNetworks" /v NetworkList /t REG_MULTI_SZ /d "" /f</CommandLine>
+ <Description>Disable Network Discovery popup</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>9</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Edge" /v "HideFirstRunExperience" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Disable first-run experience in Edge</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>10</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "HideFileExt" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Show file extensions in Explorer</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>11</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateFileSizePercent" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Zero Hibernation File</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>12</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateEnabled" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>13</Order>
+ <CommandLine>cmd /C POWERCFG -X -standby-timeout-ac 0</CommandLine>
+ <Description>Disable Sleep</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>14</Order>
+ <CommandLine>netsh.exe advfirewall firewall set rule group="@FirewallAPI.dll,-28752" new enable=Yes</CommandLine>
+ <Description>Add RDP in firewall</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>15</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server" /v fDenyTSConnections /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Enable RDP</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>16</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Windows\Sidebar" /v "TurnOffSidebar" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Turn off sidebar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>17</Order>
+ <CommandLine>reg.exe add "HKCU\Control Panel\Desktop" /v "ScreenSaveActive" /t REG_SZ /d 0 /f</CommandLine>
+ <Description>Disable screensaver</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>18</Order>
+ <CommandLine>reg.exe add "HKCU\Control Panel\Desktop" /v SCRNSAVE.EXE /t REG_SZ /d C:\Windows\System32\scrnsavex.scr /f</CommandLine>
+ <Description>Disable screensaver</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>19</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" /v "fAllowUnlistedRemotePrograms" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Enable RemoteAPP to launch unlisted programs</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>20</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-32752" new enable=Yes</CommandLine>
+ <Description>Enable Network Discovery</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>21</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-28502" new enable=Yes</CommandLine>
+ <Description>Enable File Sharing</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>22</Order>
+ <CommandLine>cmd /C if exist "C:\OEM\install.bat" start "Install" "cmd /C C:\OEM\install.bat"</CommandLine>
+ <Description>Execute custom script from the OEM folder if exists</Description>
+ </SynchronousCommand>
+ </FirstLogonCommands>
+ </component>
+ </settings>
+</unattend>

assets/winvistax64.xml

@@ -0,0 +1,261 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<unattend xmlns="urn:schemas-microsoft-com:unattend" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State">
+ <settings pass="windowsPE">
+ <component name="Microsoft-Windows-International-Core-WinPE" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SetupUILanguage>
+ <UILanguage>en-US</UILanguage>
+ </SetupUILanguage>
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DiskConfiguration>
+ <WillShowUI>OnError</WillShowUI>
+ <Disk wcm:action="add">
+ <DiskID>0</DiskID>
+ <WillWipeDisk>true</WillWipeDisk>
+ <CreatePartitions>
+ <CreatePartition wcm:action="add">
+ <Order>1</Order>
+ <Type>Primary</Type>
+ <Extend>true</Extend>
+ </CreatePartition>
+ </CreatePartitions>
+ <ModifyPartitions>
+ <ModifyPartition wcm:action="add">
+ <Active>true</Active>
+ <Format>NTFS</Format>
+ <Label>Windows</Label>
+ <Letter>C</Letter>
+ <Order>1</Order>
+ <PartitionID>1</PartitionID>
+ </ModifyPartition>
+ </ModifyPartitions>
+ </Disk>
+ </DiskConfiguration>
+ <ImageInstall>
+ <OSImage>
+ <InstallFrom>
+ <MetaData wcm:action="add">
+ <Value>Windows Vista BUSINESS</Value>
+ <Key>/IMAGE/NAME</Key>
+ </MetaData>
+ </InstallFrom>
+ <InstallTo>
+ <DiskID>0</DiskID>
+ <PartitionID>1</PartitionID>
+ </InstallTo>
+ <WillShowUI>OnError</WillShowUI>
+ <InstallToAvailablePartition>false</InstallToAvailablePartition>
+ </OSImage>
+ </ImageInstall>
+ <UserData>
+ <AcceptEula>true</AcceptEula>
+ <FullName>Docker</FullName>
+ <Organization>Windows for Docker</Organization>
+ <ProductKey>
+ <Key>4D2XH-PRBMM-8Q22B-K8BM3-MRW4W</Key>
+ </ProductKey>
+ </UserData>
+ </component>
+ </settings>
+ <settings pass="generalize">
+ <component name="Microsoft-Windows-PnpSysprep" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <PersistAllDeviceInstalls>true</PersistAllDeviceInstalls>
+ </component>
+ <component name="Microsoft-Windows-Security-Licensing-SLC" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipRearm>1</SkipRearm>
+ </component>
+ </settings>
+ <settings pass="specialize">
+ <component name="Microsoft-Windows-Security-Licensing-SLC-UX" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipAutoActivation>true</SkipAutoActivation>
+ </component>
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <ComputerName>*</ComputerName>
+ <ProductKey>4D2XH-PRBMM-8Q22B-K8BM3-MRW4W</ProductKey>
+ <TimeZone>Pacific Standard Time</TimeZone>
+ <OEMInformation>
+ <Manufacturer>Dockur</Manufacturer>
+ <Model>Windows for Docker</Model>
+ </OEMInformation>
+ <RegisteredOrganization>Dockur</RegisteredOrganization>
+ <RegisteredOwner>Windows for Docker</RegisteredOwner>
+ </component>
+ <component name="Microsoft-Windows-SystemRestore-Main" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableSR>1</DisableSR>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-LocalSessionManager" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <fDenyTSConnections>false</fDenyTSConnections>
+ </component>
+ </settings>
+ <settings pass="oobeSystem">
+ <component name="Microsoft-Windows-International-Core" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <Home_Page>about:blank</Home_Page>
+ </component>
+ <component name="Microsoft-Windows-SQMApi" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <CEIPEnabled>0</CEIPEnabled>
+ </component>
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAccounts>
+ <LocalAccounts>
+ <LocalAccount wcm:action="add">
+ <Name>Docker</Name>
+ <Group>Administrators</Group>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </LocalAccount>
+ </LocalAccounts>
+ <AdministratorPassword>
+ <Value>password</Value>
+ <PlainText>true</PlainText>
+ </AdministratorPassword>
+ </UserAccounts>
+ <AutoLogon>
+ <Username>Docker</Username>
+ <Enabled>true</Enabled>
+ <LogonCount>65432</LogonCount>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </AutoLogon>
+ <Display>
+ <ColorDepth>32</ColorDepth>
+ <HorizontalResolution>1920</HorizontalResolution>
+ <VerticalResolution>1080</VerticalResolution>
+ </Display>
+ <OOBE>
+ <HideEULAPage>true</HideEULAPage>
+ <NetworkLocation>Home</NetworkLocation>
+ <ProtectYourPC>3</ProtectYourPC>
+ <SkipUserOOBE>true</SkipUserOOBE>
+ <SkipMachineOOBE>false</SkipMachineOOBE>
+ </OOBE>
+ <RegisteredOrganization>Dockur</RegisteredOrganization>
+ <RegisteredOwner>Windows for Docker</RegisteredOwner>
+ <FirstLogonCommands>
+ <SynchronousCommand wcm:action="add">
+ <Order>1</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" /v "AllowInsecureGuestAuth" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Allow guest access to network shares</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>2</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" /v LimitBlankPasswordUse /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Allow RDP login with blank password</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>3</Order>
+ <CommandLine>cmd /C wmic useraccount where name="Docker" set PasswordExpires=false</CommandLine>
+ <Description>Password Never Expires</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>4</Order>
+ <CommandLine>cmd /C POWERCFG -H OFF</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>5</Order>
+ <CommandLine>cmd /C POWERCFG -X -monitor-timeout-ac 0</CommandLine>
+ <Description>Disable monitor blanking</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>6</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Network\NewNetworkWindowOff" /f</CommandLine>
+ <Description>Disable Network Discovery popup</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>7</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Network\NetworkLocationWizard" /v "HideWizard" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Disable Network Discovery popup</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>8</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkList\NewNetworks" /v NetworkList /t REG_MULTI_SZ /d "" /f</CommandLine>
+ <Description>Disable Network Discovery popup</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>9</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Edge" /v "HideFirstRunExperience" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Disable first-run experience in Edge</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>10</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "HideFileExt" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Show file extensions in Explorer</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>11</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateFileSizePercent" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Zero Hibernation File</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>12</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateEnabled" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>13</Order>
+ <CommandLine>cmd /C POWERCFG -X -standby-timeout-ac 0</CommandLine>
+ <Description>Disable Sleep</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>14</Order>
+ <CommandLine>netsh.exe advfirewall firewall set rule group="@FirewallAPI.dll,-28752" new enable=Yes</CommandLine>
+ <Description>Add RDP in firewall</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>15</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server" /v fDenyTSConnections /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Enable RDP</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>16</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Windows\Sidebar" /v "TurnOffSidebar" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Turn off sidebar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>17</Order>
+ <CommandLine>reg.exe add "HKCU\Control Panel\Desktop" /v "ScreenSaveActive" /t REG_SZ /d 0 /f</CommandLine>
+ <Description>Disable screensaver</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>18</Order>
+ <CommandLine>reg.exe add "HKCU\Control Panel\Desktop" /v SCRNSAVE.EXE /t REG_SZ /d C:\Windows\System32\scrnsavex.scr /f</CommandLine>
+ <Description>Disable screensaver</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>19</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" /v "fAllowUnlistedRemotePrograms" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Enable RemoteAPP to launch unlisted programs</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>20</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-32752" new enable=Yes</CommandLine>
+ <Description>Enable Network Discovery</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>21</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-28502" new enable=Yes</CommandLine>
+ <Description>Enable File Sharing</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>22</Order>
+ <CommandLine>cmd /C if exist "C:\OEM\install.bat" start "Install" "cmd /C C:\OEM\install.bat"</CommandLine>
+ <Description>Execute custom script from the OEM folder if exists</Description>
+ </SynchronousCommand>
+ </FirstLogonCommands>
+ </component>
+ </settings>
+</unattend>

assets/winvistax86-enterprise.xml

@@ -0,0 +1,261 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<unattend xmlns="urn:schemas-microsoft-com:unattend" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State">
+ <settings pass="windowsPE">
+ <component name="Microsoft-Windows-International-Core-WinPE" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SetupUILanguage>
+ <UILanguage>en-US</UILanguage>
+ </SetupUILanguage>
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-Setup" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DiskConfiguration>
+ <WillShowUI>OnError</WillShowUI>
+ <Disk wcm:action="add">
+ <DiskID>0</DiskID>
+ <WillWipeDisk>true</WillWipeDisk>
+ <CreatePartitions>
+ <CreatePartition wcm:action="add">
+ <Order>1</Order>
+ <Type>Primary</Type>
+ <Extend>true</Extend>
+ </CreatePartition>
+ </CreatePartitions>
+ <ModifyPartitions>
+ <ModifyPartition wcm:action="add">
+ <Active>true</Active>
+ <Format>NTFS</Format>
+ <Label>Windows</Label>
+ <Letter>C</Letter>
+ <Order>1</Order>
+ <PartitionID>1</PartitionID>
+ </ModifyPartition>
+ </ModifyPartitions>
+ </Disk>
+ </DiskConfiguration>
+ <ImageInstall>
+ <OSImage>
+ <InstallFrom>
+ <MetaData wcm:action="add">
+ <Value>Windows Vista Enterprise</Value>
+ <Key>/IMAGE/NAME</Key>
+ </MetaData>
+ </InstallFrom>
+ <InstallTo>
+ <DiskID>0</DiskID>
+ <PartitionID>1</PartitionID>
+ </InstallTo>
+ <WillShowUI>OnError</WillShowUI>
+ <InstallToAvailablePartition>false</InstallToAvailablePartition>
+ </OSImage>
+ </ImageInstall>
+ <UserData>
+ <AcceptEula>true</AcceptEula>
+ <FullName>Docker</FullName>
+ <Organization>Windows for Docker</Organization>
+ <ProductKey>
+ <Key>VKK3X-68KWM-X2YGT-QR4M6-4BWMV</Key>
+ </ProductKey>
+ </UserData>
+ </component>
+ </settings>
+ <settings pass="generalize">
+ <component name="Microsoft-Windows-PnpSysprep" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <PersistAllDeviceInstalls>true</PersistAllDeviceInstalls>
+ </component>
+ <component name="Microsoft-Windows-Security-Licensing-SLC" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipRearm>1</SkipRearm>
+ </component>
+ </settings>
+ <settings pass="specialize">
+ <component name="Microsoft-Windows-Security-Licensing-SLC-UX" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <SkipAutoActivation>true</SkipAutoActivation>
+ </component>
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <ComputerName>*</ComputerName>
+ <ProductKey>VKK3X-68KWM-X2YGT-QR4M6-4BWMV</ProductKey>
+ <TimeZone>Pacific Standard Time</TimeZone>
+ <OEMInformation>
+ <Manufacturer>Dockur</Manufacturer>
+ <Model>Windows for Docker</Model>
+ </OEMInformation>
+ <RegisteredOrganization>Dockur</RegisteredOrganization>
+ <RegisteredOwner>Windows for Docker</RegisteredOwner>
+ </component>
+ <component name="Microsoft-Windows-SystemRestore-Main" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <DisableSR>1</DisableSR>
+ </component>
+ <component name="Microsoft-Windows-TerminalServices-LocalSessionManager" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <fDenyTSConnections>false</fDenyTSConnections>
+ </component>
+ </settings>
+ <settings pass="oobeSystem">
+ <component name="Microsoft-Windows-International-Core" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <InputLocale>0409:00000409</InputLocale>
+ <SystemLocale>en-US</SystemLocale>
+ <UILanguage>en-US</UILanguage>
+ <UserLocale>en-US</UserLocale>
+ </component>
+ <component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <Home_Page>about:blank</Home_Page>
+ </component>
+ <component name="Microsoft-Windows-SQMApi" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <CEIPEnabled>0</CEIPEnabled>
+ </component>
+ <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+ <UserAccounts>
+ <LocalAccounts>
+ <LocalAccount wcm:action="add">
+ <Name>Docker</Name>
+ <Group>Administrators</Group>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </LocalAccount>
+ </LocalAccounts>
+ <AdministratorPassword>
+ <Value>password</Value>
+ <PlainText>true</PlainText>
+ </AdministratorPassword>
+ </UserAccounts>
+ <AutoLogon>
+ <Username>Docker</Username>
+ <Enabled>true</Enabled>
+ <LogonCount>65432</LogonCount>
+ <Password>
+ <Value />
+ <PlainText>true</PlainText>
+ </Password>
+ </AutoLogon>
+ <Display>
+ <ColorDepth>32</ColorDepth>
+ <HorizontalResolution>1920</HorizontalResolution>
+ <VerticalResolution>1080</VerticalResolution>
+ </Display>
+ <OOBE>
+ <HideEULAPage>true</HideEULAPage>
+ <NetworkLocation>Home</NetworkLocation>
+ <ProtectYourPC>3</ProtectYourPC>
+ <SkipUserOOBE>true</SkipUserOOBE>
+ <SkipMachineOOBE>false</SkipMachineOOBE>
+ </OOBE>
+ <RegisteredOrganization>Dockur</RegisteredOrganization>
+ <RegisteredOwner>Windows for Docker</RegisteredOwner>
+ <FirstLogonCommands>
+ <SynchronousCommand wcm:action="add">
+ <Order>1</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" /v "AllowInsecureGuestAuth" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Allow guest access to network shares</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>2</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Lsa" /v LimitBlankPasswordUse /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Allow RDP login with blank password</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>3</Order>
+ <CommandLine>cmd /C wmic useraccount where name="Docker" set PasswordExpires=false</CommandLine>
+ <Description>Password Never Expires</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>4</Order>
+ <CommandLine>cmd /C POWERCFG -H OFF</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>5</Order>
+ <CommandLine>cmd /C POWERCFG -X -monitor-timeout-ac 0</CommandLine>
+ <Description>Disable monitor blanking</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>6</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Network\NewNetworkWindowOff" /f</CommandLine>
+ <Description>Disable Network Discovery popup</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>7</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Network\NetworkLocationWizard" /v "HideWizard" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Disable Network Discovery popup</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>8</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\NetworkList\NewNetworks" /v NetworkList /t REG_MULTI_SZ /d "" /f</CommandLine>
+ <Description>Disable Network Discovery popup</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>9</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Edge" /v "HideFirstRunExperience" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Disable first-run experience in Edge</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>10</Order>
+ <CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "HideFileExt" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Show file extensions in Explorer</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>11</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateFileSizePercent" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Zero Hibernation File</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>12</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateEnabled" /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Disable Hibernation</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>13</Order>
+ <CommandLine>cmd /C POWERCFG -X -standby-timeout-ac 0</CommandLine>
+ <Description>Disable Sleep</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>14</Order>
+ <CommandLine>netsh.exe advfirewall firewall set rule group="@FirewallAPI.dll,-28752" new enable=Yes</CommandLine>
+ <Description>Add RDP in firewall</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>15</Order>
+ <CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server" /v fDenyTSConnections /t REG_DWORD /d 0 /f</CommandLine>
+ <Description>Enable RDP</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>16</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Windows\Sidebar" /v "TurnOffSidebar" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Turn off sidebar</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>17</Order>
+ <CommandLine>reg.exe add "HKCU\Control Panel\Desktop" /v "ScreenSaveActive" /t REG_SZ /d 0 /f</CommandLine>
+ <Description>Disable screensaver</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>18</Order>
+ <CommandLine>reg.exe add "HKCU\Control Panel\Desktop" /v SCRNSAVE.EXE /t REG_SZ /d C:\Windows\System32\scrnsavex.scr /f</CommandLine>
+ <Description>Disable screensaver</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>19</Order>
+ <CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" /v "fAllowUnlistedRemotePrograms" /t REG_DWORD /d 1 /f</CommandLine>
+ <Description>Enable RemoteAPP to launch unlisted programs</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>20</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-32752" new enable=Yes</CommandLine>
+ <Description>Enable Network Discovery</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>21</Order>
+ <CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-28502" new enable=Yes</CommandLine>
+ <Description>Enable File Sharing</Description>
+ </SynchronousCommand>
+ <SynchronousCommand wcm:action="add">
+ <Order>22</Order>
+ <CommandLine>cmd /C if exist "C:\OEM\install.bat" start "Install" "cmd /C C:\OEM\install.bat"</CommandLine>
+ <Description>Execute custom script from the OEM folder if exists</Description>
+ </SynchronousCommand>
+ </FirstLogonCommands>
+ </component>
+ </settings>
+</unattend>