From d49f516b16214a13b5d8347bd3428a7fef3c092a Mon Sep 17 00:00:00 2001 From: cproudlock Date: Wed, 22 Apr 2026 16:55:16 -0400 Subject: [PATCH] FlatUnattendW10: catch repo up to deployed state + Win10/Win11 search cleanup Two things in one pass because the repo copy was 162 lines behind the deployed one already: 1. Sync repo to the currently-deployed FlatUnattendW10.xml baseline (Java JRE 8 u441 + Java auto-update pins + Cortana/Bing/Search disable block that had been added on-server but never committed). 2. Prune three ineffective registry entries and replace the Bing suppression with a documented equivalent that works on both Win10 and Win11: - DROP #32 HKLM\...\Search\CortanaEnabled=0 Undocumented at HKLM (the real key is HKCU). No effect. - DROP #37 AllowCortanaAboveLock=0 Deprecated per AboveLock Policy CSP. Cortana app was removed from Win11 in Canary 25967 anyway. - REPLACE #34 BingSearchEnabled (HKLM, undocumented) with DisableSearchBoxSuggestions=1 written into the Default User hive so every new account inherits it. This is the Microsoft-documented kill-switch for Bing / web results in Start-menu search on both Win10 and Win11. Validated XML well-formed (xmllint + Python ET). RunSynchronous orders remain unique and ascending after the deletions. Deployed to both PXE servers under /srv/samba/winpeapps/{gea-engineer,gea-standard}/Deploy/ with timestamped .pre-winsearch-cleanup-* backups. Co-Authored-By: Claude Opus 4.7 (1M context) --- playbook/FlatUnattendW10.xml | 145 +++++++++++++++++++++++++++-------- 1 file changed, 115 insertions(+), 30 deletions(-) diff --git a/playbook/FlatUnattendW10.xml b/playbook/FlatUnattendW10.xml index 4a0b18d..3f4f5fc 100644 --- a/playbook/FlatUnattendW10.xml +++ b/playbook/FlatUnattendW10.xml @@ -176,7 +176,88 @@ 23 msiexec /p "C:\Deploy\Applications\extra\adobe\AcroRdrDCUpd2500120531.msp" /quiet /norestart Apply Adobe Reader Update - + + + + + 26 + C:\Deploy\Applications\extra\java\jre-8u441-windows-i586.exe /s INSTALLDIR="C:\Program Files (x86)\Java\jre1.8.0_441" STATIC=1 AUTO_UPDATE=0 REBOOT=0 SPONSORS=0 WEB_JAVA=0 /L "C:\Windows\Logs\java-install.log" + Install Java JRE 8 Update 441 with Enterprise Settings and Logging + + + + + 27 + cmd /c reg add "HKLM\SOFTWARE\JavaSoft\Java Update\Policy" /v EnableJavaUpdate /t REG_DWORD /d 0 /f + Disable Java Auto Updates (64-bit) + + + + + 28 + cmd /c reg add "HKLM\SOFTWARE\Wow6432Node\JavaSoft\Java Update\Policy" /v EnableJavaUpdate /t REG_DWORD /d 0 /f + Disable Java Auto Updates (32-bit) + + + + + 29 + cmd /c reg add "HKLM\SOFTWARE\JavaSoft\Java Update\Policy" /v EnableAutoUpdateCheck /t REG_DWORD /d 0 /f + Disable Java Auto Update Check (64-bit) + + + + + 30 + cmd /c reg add "HKLM\SOFTWARE\Wow6432Node\JavaSoft\Java Update\Policy" /v EnableAutoUpdateCheck /t REG_DWORD /d 0 /f + Disable Java Auto Update Check (32-bit) + + + + + 31 + cmd /c reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /v AllowCortana /t REG_DWORD /d 0 /f + Disable Cortana + + + + + 33 + cmd /c reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /v DisableWebSearch /t REG_DWORD /d 1 /f + Disable Web Search in Start Menu + + + + + 34 + cmd /c reg load HKU\TempDU C:\Users\Default\NTUSER.DAT & reg add "HKU\TempDU\Software\Policies\Microsoft\Windows\Explorer" /v DisableSearchBoxSuggestions /t REG_DWORD /d 1 /f & reg unload HKU\TempDU + Disable Bing/web search suggestions (Default User hive) + + + + + 35 + cmd /c reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /v ConnectedSearchUseWeb /t REG_DWORD /d 0 /f + Disable Connected Search Use Web + + + + + 36 + cmd /c reg add "HKLM\SOFTWARE\Policies\Microsoft\InputPersonalization" /v AllowInputPersonalization /t REG_DWORD /d 0 /f + Disable Cortana Speech Recognition + + + + + 38 + cmd /c reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /v EnableDynamicContentInWSB /t REG_DWORD /d 0 /f + Disable Search Highlights + @@ -188,35 +269,39 @@ publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS"> - - true - true - false - false - true - Work - 3 - false - false - - - - 1 - C:\Deploy\Applications\extra\zscaler\zscaler.bat - Install Zscaler Client Connector - - - 2 - shutdown -a - Cancel any scheduled shutdown from Office installation - - - 3 - cmd /c cd C:\Deploy\Applications\extra\office && install.bat - Install Office - - + + true + true + false + false + true + Work + 3 + false + false + + + + 1 + shutdown -a + Cancel any scheduled shutdown from Office installation + + + + + 2 + C:\Deploy\Applications\extra\zscaler\zscaler.bat + Install Zscaler Client Connector + + + + + 3 + cmd /c "cd /d C:\Deploy\Applications\extra\office\ && install.bat" + Install Microsoft Office + + - \ No newline at end of file +