-
Notifications
You must be signed in to change notification settings - Fork 10
/
CustomSettings.example.ini
303 lines (266 loc) · 9.9 KB
/
CustomSettings.example.ini
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
[Settings]
'// Process MacAddress first; identifies if it is build and Capture system
'// Process DefaultGateway next to get mydomain workstation vlan and server vlan
'// Then process Make and Model to determine specific information
Priority=MacAddress,DefaultGateway,Make,Model,Default
Properties=SavedJoinDomain,CaptureSection,Prefix,BgColor,TPMEnabled,TPMActivated,TPMOwned,CCTKPath,CCTKInstallerVersion,BIOSSettingsFile,NewBIOSPassword,BIOSPasswords(*),AssetTag,ForceUEFI,OSBootDiskOverrideWQL,EZTVURL,DVConfigFile,CFG_DisableConfigScript,CFG_UseLGPOForConfigs,LGPOPath,CFG_OptimizeForVDI,CFG_EnableVisualPerformance,CFG_InstallLogonScript,CFG_LogonScriptPath,CFG_EnableDarkTheme,CFG_EnableTaskbarAutoColor,CFG_DisableFontSmoothing,CFG_DisableCortana,CFG_DisableInternetSearch,CFG_EnableOfficeOneNote,CFG_DisableOneDrive,CFG_DisableWindowsFirstLoginAnimation,CFG_DisableIEFirstRunWizard,CFG_DisableWMPFirstRunWizard,CFG_ShowKnownExtensions,CFG_ShowHiddenFiles,CFG_ShowThisPCOnDesktop,CFG_ShowUserFolderOnDesktop,CFG_RemoveRecycleBinOnDesktop,CFG_Hide3DObjectsFromExplorer,CFG_DisableEdgeShortcut,CFG_DisableStoreOnTaskbar,CFG_DisableActivityHistory,CFG_SetSmartScreenFilter,CFG_EnableNumlockStartup,CFG_DisableAppSuggestions,CFG_InstallPSModules,CFG_SetPowerCFG,CFG_PowerCFGFilePath,CFG_EnableIEEnterpriseMode,CFG_IEEMSiteListPath,CFG_ApplyCustomHost,HostPath,CFG_EnableSecureLogonCAD,CFG_DisableAllNotifications,CFG_EnableVerboseMsg,CFG_DisableAutoRun,CFG_PreferIPv4OverIPv6,CFG_EnableAppsRunAsAdmin,CFG_HideDrives,CFG_DisableActionCenter,CFG_DisableFeedback,CFG_DisableWUP2P,CFG_DisablePreviewBuild,CFG_DisableDriverUpdates,CFG_DisableWindowsUpgrades,CFG_ApplyPrivacyMitigations,CFG_RemoveRebootOnLockScreen,CFG_RemoveUnusedPrinters,CFG_DisableSmartCardLogon,CFG_ForceStrictSmartCardLogon,CFG_EnableFIPS,CFG_EnableCredGuard,CFG_DisableUAC,CFG_EnableStrictUAC,CFG_EnableRDP,CFG_EnableWinRM,CFG_EnableRemoteRegistry,CFG_EnableUEV,CFG_EnableAppV,CFG_DisableIPv6,CFG_EnablePSLogging,CFG_EnableLinuxSubSystem,CFG_DisableAdminShares,CFG_DisableSchTasks,CFG_DisableDefender,CFG_DisableFirewall,CFG_DisableWireless,CFG_DisableBluetooth,CFG_DisableNewNetworkDialog,CFG_DisableInternetServices,CFG_DisabledUnusedServices,CFG_DisabledUnusedFeatures,CFG_DisableIndexing,CFG_RemoveActiveSetupComponents,CFG_PreCompileAssemblies,CFG_OptimizeNetwork,CFG_DisableAppScript,CFG_DisableOfficeAnimation,CFG_EnableIESoftwareRender,CFG_EnableLyncStartup,CFG_RemoveAppxPackages,CFG_RemoveFODPackages,CFG_ForceEdgeHomepage,CFG_ForceIEHomepage,CFG_ApplySTIGItems,CFG_ApplyEMETMitigations
'// GATWAY DETECTION
[DefaultGateway]
192.168.1.254=WKS
192.168.2.254=SVR
'// MAC DETECTION FOR CAPTURE
[00:50:56:8B:EF:1A]
: VM: WIN101803X64_BC01
; Build: 1803 Baseline
TaskSequenceID=WIN101803_BC01
ComputerName=WIN101803X64
[00:50:56:8B:F5:A3]
: VM: WIN101803X64_BC02
; Build: 1803 Baseline with Office 2016 (x86)
TaskSequenceID=WIN101803_BC02
ComputerName=WIN101803OFF16
'// MAC DETECTION FOR VDI MASTER
[00:50:56:B4:75:5A]
Prefix=VDI
BgColor=Green
SkipTaskSequence=YES
TaskSequenceID=VDI_WIN10_01
SkipComputerName=YES
ComputerName=WIN10MDTIMG
SkipDomainMembership=YES
SkipApplications=YES
'// Configuration Settings (Used by Win10OptimizeAndConfig.ps1)
CFG_VDIOptimizations=True
'// DOMAIN SETTINGS
[WKS]
Prefix=WKS
BgColor=Green
TaskSequenceID=WIN10_01
SkipDomainMembership=YES
JoinDomain=mydomain
DomainAdmin=ser.mdt
DomainAdminDomain=mydomain
DomainAdminPassword=***************
MachineObjectOU=OU=Workstations,OU=AllSystems,DC=mydomain
DomainErrorRecovery=AUTO
'// Desktop Info
MANDATORYAPPLICATIONS001={ea915a10-6692-435f-b09f-d2e44daccd24}
'// Microsoft CCM Agent
MANDATORYAPPLICATIONS002={6bf5b17e-8f3e-476b-9070-89959303ea42}
'// Chrome Enterprise and Flash Plugin
APPLICATIONS001={7292d17f-3914-4a90-b41b-cb919fa7ff22}
APPLICATIONS002={de465c85-60ac-47be-8397-88d71608fcd3}
'// Adobe Acrobat Reader DC
APPLICATIONS003={b732bd5f-65d8-49ca-b48d-f9ed71667b05}
[SVR]
'// Get prefix for computer name
Prefix=SVR
BgColor=Gray
TaskSequenceID=WINSVR16_01
SkipDomainMembership=NO
JoinDomain=mydomain
DomainAdmin=ser.mdt
DomainAdminDomain=mydomain
DomainAdminPassword=***************
MachineObjectOU=OU=Servers,OU=AllSystems,DC=mydomain
DomainErrorRecovery=AUTO
'// Microsoft CCM Agent
MANDATORYAPPLICATIONS001={6bf5b17e-8f3e-476b-9070-89959303ea42}
'// MAKE AND MODEL SPECIFIC SETTINGS
[Dell Inc.]
ComputerName=%Prefix%-#Left("%SerialNumber%",7)#
[VMware, Inc.]
'// VMware Tools
APPLICATIONS001={3fddda30-1c68-4bc4-b28c-75143ad5f708}
[Surface Pro 3]
ComputerName=%Prefix%-#Right("%SerialNumber%",7)#
XResolution=2160
YResolution=1440
'// CAPTURE SETTINGS
[CAPTURE]
SkipWizard=YES
SkipBDDWelcome=YES
SkipTaskSequence=YES
UserDataLocation=NONE
SkipApplications=YES
DoNotCreateExtraPartition=YES
SkipSummary=YES
SkipFinalSummary=YES
SkipComputerName=YES
SkipDomainMembership=YES
JoinWorkGroup=WORKGROUP
SkipCapture=YES
DoCapture=YES
ComputerBackupLocation=NETWORK
BackupShare=%DeployRoot%
BackupDir=Captures
'// Format will look like: WIN101803X64_2018-10-18_1020.wim
BackupFile=%TaskSequenceName%_#year(date) & "-" & month(date) & "-" & day(date)#_#Replace(FormatDateTime(Now,4),":","")#.wim
FinishAction=SHUTDOWN
'// DEFAULT DEPLOY SETTINGS
[Default]
_SMSTSOrgName=MDT Automation
SLShare=%DeployRoot%\Logs
SLShareDynamicLogging=%DeployRoot%\Logs\DynamicLogs\%OSDComputerName%
SkipWizard=NO
SkipBDDWelcome=NO
SkipSummary=NO
SkipFinalSummary=YES
OSInstall=Y
SkipProductKey=YES
SkipComputerBackup=YES
SkipPackageDisplay=YES
SkipUserData=YES
USMTLocal=TRUE
'// UserDataLocation=AUTO
UserDataLocation=NETWORK
UDShare=\\MDT.mydomain\MigData$
UDDir=%OSDComputerName%
'// USMTOfflineMigration=TRUE '//PE User migration only
LoadStateArgs=/v 5 /c /lac /lae
ScanStateArgs=/c /ue:*\* /ui:%Prefix%\* /efs:copyraw
USMTMigFiles001=MigApp.xml
USMTMigFiles002=MigApp_CustomSoftware.xml
USMTMigFiles003=MigApp_Edge_StickyNotes.xml
USMTMigFiles004=MigDocs.xml
USMTMigFiles005=MigDocs_ExcludeMp3_AllDataDrives.xml
USMTMigFiles006=MigUser.xml
USMTMigFiles007=MigUser_withDownloads_noShared.xml
USMTMigFiles008=MigUser_Networks_and_Printers.xml
DisableTaskMgr=NO
HideShell=YES
SkipRoles=YES
' // If no name provided from priority, default to prompt
SkipComputerName=NO
ComputerName=%Prefix%-[SERIAL]
' // If no tasksequence provided from priority, default to prompt
SkipTaskSequence=NO
SkipAdminPassword=YES
AdminPassword=**********
SkipDeploymentType=YES
DeploymentType=NEWCOMPUTER
SkipBitLocker=YES
SkipCapture=YES
DoCapture=NO
SkipApplications=NO
SkipAppsOnUpgrade=YES
SkipLocaleSelection=YES
SkipTimeZone=YES
TimeZoneName=Eastern Standard Time
TimeZone=035
UserLocale=en-US
UILanguage=en-US
SystemLocale=en-US
InputLocale=en-US
KeyboardLocale=0409:00000409
AreaCode=
ContryCode=
Dialing=TONE
LongDistanceAccess=
FinishAction=REBOOT
WSUSServer=http://WSUS.mydomain:8530
EventService=http://MDT.mydomain:9800
HomePage=http://www.sublynx.com
'// Configuration Settings (used with Win10OptimizeAndConfig.ps1)
'// Common Settings
CFG_UseLGPOForConfigs=True
CFG_PowerCFGFilePath=%DeployRoot%\Scripts\Custom\OS-Configs\Files\AlwaysOnPowerScheme.pow
CFG_ApplyCustomHost=False
HostPath=%DeployRoot%\Scripts\Custom\OS-Configs\Files\WindowsTelemetryhosts
' // LGPO SETTINGS ( used with ZTILGPOSettings.wsf AND Win10OptimizeAndConfig.ps1)
'// Path to LGPO.exe
LGPOPath=%DeployRoot%\Scripts\Custom\OS-Configs\Tools\LGPO\
'// Overall Configuation Script Control
CFG_OptimizeForVDI=False
CFG_DisableSTIGScript=True
CFG_DisableAppScript=False
'// VDI Performance
CFG_EnableVisualPerformance=False
CFG_SetPowerCFG=Custom
'// User Preference
CFG_EnableDarkTheme=True
CFG_EnableTaskbarAutoColor=True
CFG_DisableFontSmoothing=False
CFG_CleanSampleFolders=True
CFG_DisableCortana=True
CFG_DisableInternetSearch=True
CFG_EnableOfficeOneNote=True
CFG_DisableOneDrive=True
CFG_DisableWindowsFirstLoginAnimation=True
CFG_DisableIEFirstRunWizard=True
CFG_DisableWMPFirstRunWizard=True
CFG_ShowKnownExtensions=True
CFG_ShowHiddenFiles=True
CFG_ShowThisPCOnDesktop=True
CFG_ShowUserFolderOnDesktop=True
CFG_RemoveRecycleBinOnDesktop=False
CFG_Hide3DObjectsFromExplorer=True
CFG_DisableEdgeShortcut=True
CFG_DisableStoreOnTaskbar=True
CFG_InstallLogonScript=False
CFG_DisableActivityHistory=False
CFG_SetSmartScreenFilter='User'
CFG_EnableNumlockStartup=False
CFG_DisableAppSuggestions=True
'// System Settings
CFG_InstallPSModules=True
CFG_EnableIEEnterpriseMode=False
CFG_EnableSecureLogonCAD=True
CFG_DisableAllNotifications=False
CFG_EnableVerboseMsg=False
CFG_DisableAutoRun=True
CFG_PreferIPv4OverIPv6=True
CFG_EnableAppsRunAsAdmin=False
CFG_DisableUAC=False
CFG_EnableStrictUAC=False
CFG_HideDrives=False
CFG_DisableActionCenter=False
CFG_DisableFeedback=True
CFG_DisableWUP2P=True
CFG_DisablePreviewBuild=True
CFG_DisableWindowsUpgrades=True
CFG_DisableDriverUpdates=True
CFG_ApplyPrivacyMitigations=True
CFG_RemoveRebootOnLockScreen=False
CFG_RemoveUnusedPrinters=False
'//System Adv Settings
CFG_DisableSmartCardLogon=False
CFG_ForceStrictSmartCardLogon=False
CFG_EnableFIPS=True
CFG_EnableCredGuard=True
CFG_DisableUAC=False
CFG_EnableStrictUAC=False
CFG_EnableRDP=True
CFG_EnableWinRM=True
CFG_EnableRemoteRegistry=True
CFG_EnableUEV=True
CFG_EnableAppV=True
CFG_EnablePSLogging=True
CFG_EnableLinuxSubSystem=False
CFG_DisableAdminShares=False
CFG_EnableLinuxSubSystem=False
CFG_DisableSchTasks=True
CFG_DisableDefender=False
CFG_DisableFirewall=False
CFG_DisableWireless=True
CFG_DisableBluetooth=True
CFG_DisableNewNetworkDialog=True
CFG_DisableInternetServices=True
CFG_DisabledUnusedServices=True
CFG_DisabledUnusedFeatures=True
CFG_DisableIndexing=False
CFG_RemoveActiveSetupComponents=True
CFG_PreCompileAssemblies=True
CFG_OptimizeNetwork=False
' // Configuration Settings ( used by: Win10STIGandMigration.ps1)
CFG_UseLGPOForConfigs=True
CFG_ApplySTIGItems=True
CFG_ApplyEMETMitigations=True
'// Configuration Settings (used with AppOptimizeAndConfig.ps1)
CFG_DisableOfficeAnimation=True
CFG_EnableIESoftwareRender=True
CFG_EnableLyncStartup=True
CFG_RemoveAppxPackages=True
CFG_RemoveFODPackages=True
CFG_ForceEdgeHomepage=True
CFG_ForceIEHomepage=True