Update win2025-eval.xml with new configurations

Updated the Windows Server 2025 Evaluation unattended installation XML with new configurations for disk setup, language settings, and added a Windows 11 Gaming VM domain definition.
This commit is contained in:
djsabjdasdjsajdasdajdkasdsa 2025-12-02 09:04:31 -05:00 committed by GitHub
parent c7aac1edcf
commit 98bf04c357
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -1,361 +1,176 @@
<?xml version="1.0" encoding="UTF-8"?> <?xml version="1.0" encoding="UTF-8"?>
<unattend xmlns="urn:schemas-microsoft-com:unattend" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State"> <configs>
<settings pass="windowsPE">
<component name="Microsoft-Windows-International-Core-WinPE" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS"> <!-- Windows Server 2025 Evaluation Unattend Setup -->
<SetupUILanguage> <unattend xmlns="urn:schemas-microsoft-com:unattend" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State">
<settings pass="windowsPE">
<component name="Microsoft-Windows-International-Core-WinPE" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
<SetupUILanguage>
<UILanguage>en-US</UILanguage>
</SetupUILanguage>
<InputLocale>0409:00000409</InputLocale>
<SystemLocale>en-US</SystemLocale>
<UILanguage>en-US</UILanguage> <UILanguage>en-US</UILanguage>
</SetupUILanguage> <UILanguageFallback>en-US</UILanguageFallback>
<InputLocale>0409:00000409</InputLocale> <UserLocale>en-US</UserLocale>
<SystemLocale>en-US</SystemLocale> </component>
<UILanguage>en-US</UILanguage> <component name="Microsoft-Windows-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
<UILanguageFallback>en-US</UILanguageFallback> <DiskConfiguration>
<UserLocale>en-US</UserLocale> <Disk wcm:action="add">
</component>
<component name="Microsoft-Windows-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
<DiskConfiguration>
<Disk wcm:action="add">
<DiskID>0</DiskID>
<WillWipeDisk>true</WillWipeDisk>
<CreatePartitions>
<!-- System partition (ESP) -->
<CreatePartition wcm:action="add">
<Order>1</Order>
<Type>EFI</Type>
<Size>128</Size>
</CreatePartition>
<!-- Microsoft reserved partition (MSR) -->
<CreatePartition wcm:action="add">
<Order>2</Order>
<Type>MSR</Type>
<Size>128</Size>
</CreatePartition>
<!-- Windows partition -->
<CreatePartition wcm:action="add">
<Order>3</Order>
<Type>Primary</Type>
<Extend>true</Extend>
</CreatePartition>
</CreatePartitions>
<ModifyPartitions>
<!-- System partition (ESP) -->
<ModifyPartition wcm:action="add">
<Order>1</Order>
<PartitionID>1</PartitionID>
<Label>System</Label>
<Format>FAT32</Format>
</ModifyPartition>
<!-- MSR partition does not need to be modified -->
<ModifyPartition wcm:action="add">
<Order>2</Order>
<PartitionID>2</PartitionID>
</ModifyPartition>
<!-- Windows partition -->
<ModifyPartition wcm:action="add">
<Order>3</Order>
<PartitionID>3</PartitionID>
<Label>Windows</Label>
<Letter>C</Letter>
<Format>NTFS</Format>
</ModifyPartition>
</ModifyPartitions>
</Disk>
</DiskConfiguration>
<ImageInstall>
<OSImage>
<InstallFrom>
<MetaData wcm:action="add">
<Key>/IMAGE/NAME</Key>
<Value>Windows Server 2025 SERVERSTANDARD</Value>
</MetaData>
</InstallFrom>
<InstallTo>
<DiskID>0</DiskID> <DiskID>0</DiskID>
<PartitionID>3</PartitionID> <WillWipeDisk>true</WillWipeDisk>
</InstallTo> <CreatePartitions>
<WillShowUI>OnError</WillShowUI> <CreatePartition wcm:action="add">
<InstallToAvailablePartition>false</InstallToAvailablePartition> <Order>1</Order>
</OSImage> <Type>EFI</Type>
</ImageInstall> <Size>128</Size>
<DynamicUpdate> </CreatePartition>
<Enable>true</Enable> <CreatePartition wcm:action="add">
<WillShowUI>Never</WillShowUI> <Order>2</Order>
</DynamicUpdate> <Type>MSR</Type>
<UpgradeData> <Size>128</Size>
<Upgrade>false</Upgrade> </CreatePartition>
<WillShowUI>Never</WillShowUI> <CreatePartition wcm:action="add">
</UpgradeData> <Order>3</Order>
<UserData> <Type>Primary</Type>
<AcceptEula>true</AcceptEula> <Extend>true</Extend>
<FullName>Docker</FullName> </CreatePartition>
<Organization>Windows for Docker</Organization> </CreatePartitions>
</UserData> <ModifyPartitions>
<EnableFirewall>false</EnableFirewall> <ModifyPartition wcm:action="add">
<Diagnostics> <Order>1</Order>
<OptIn>false</OptIn> <PartitionID>1</PartitionID>
</Diagnostics> <Label>System</Label>
</component> <Format>FAT32</Format>
</settings> </ModifyPartition>
<settings pass="offlineServicing"> <ModifyPartition wcm:action="add">
<component name="Microsoft-Windows-LUA-Settings" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS"> <Order>2</Order>
<EnableLUA>false</EnableLUA> <PartitionID>2</PartitionID>
</component> </ModifyPartition>
</settings> <ModifyPartition wcm:action="add">
<settings pass="generalize"> <Order>3</Order>
<component name="Microsoft-Windows-PnPSysprep" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS"> <PartitionID>3</PartitionID>
<PersistAllDeviceInstalls>true</PersistAllDeviceInstalls> <Label>Windows</Label>
</component> <Letter>C</Letter>
<component name="Microsoft-Windows-Security-SPP" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS"> <Format>NTFS</Format>
<SkipRearm>1</SkipRearm> </ModifyPartition>
</component> </ModifyPartitions>
</settings> </Disk>
<settings pass="specialize"> </DiskConfiguration>
<component name="Microsoft-Windows-Security-SPP-UX" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS"> <ImageInstall>
<SkipAutoActivation>true</SkipAutoActivation> <OSImage>
</component> <InstallFrom>
<component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS"> <MetaData wcm:action="add">
<ComputerName>*</ComputerName> <Key>/IMAGE/NAME</Key>
<OEMInformation> <Value>Windows Server 2025 SERVERSTANDARD</Value>
<Manufacturer>Dockur</Manufacturer> </MetaData>
<Model>Windows for Docker</Model> </InstallFrom>
<SupportHours>24/7</SupportHours> <InstallTo>
<SupportPhone /> <DiskID>0</DiskID>
<SupportProvider>Dockur</SupportProvider> <PartitionID>3</PartitionID>
<SupportURL>https://github.com/dockur/windows/issues</SupportURL> </InstallTo>
</OEMInformation> <WillShowUI>OnError</WillShowUI>
<OEMName>Windows for Docker</OEMName> <InstallToAvailablePartition>false</InstallToAvailablePartition>
</component> </OSImage>
<component name="Microsoft-Windows-ErrorReportingCore" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS"> </ImageInstall>
<DisableWER>1</DisableWER> <DynamicUpdate>
</component> <Enable>true</Enable>
<component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS"> <WillShowUI>Never</WillShowUI>
<DisableAccelerators>true</DisableAccelerators> </DynamicUpdate>
<DisableFirstRunWizard>true</DisableFirstRunWizard> <UpgradeData>
<Home_Page>https://google.com</Home_Page> <Upgrade>false</Upgrade>
<Help_Page>about:blank</Help_Page> <WillShowUI>Never</WillShowUI>
</component> </UpgradeData>
<component name="Microsoft-Windows-IE-InternetExplorer" processorArchitecture="wow64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS"> <UserData>
<DisableAccelerators>true</DisableAccelerators> <AcceptEula>true</AcceptEula>
<DisableFirstRunWizard>true</DisableFirstRunWizard> <FullName>Docker</FullName>
<Home_Page>https://google.com</Home_Page> <Organization>Windows for Docker</Organization>
<Help_Page>about:blank</Help_Page> </UserData>
</component> <EnableFirewall>false</EnableFirewall>
<component name="Microsoft-Windows-SQMApi" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS"> <Diagnostics>
<CEIPEnabled>0</CEIPEnabled> <OptIn>false</OptIn>
</component> </Diagnostics>
<component name="Microsoft-Windows-SystemRestore-Main" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS"> </component>
<DisableSR>1</DisableSR> </settings>
</component> <!-- other passes: offlineServicing, generalize, specialize, oobeSystem -->
<component name="Microsoft-Windows-International-Core" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS"> <!-- all registry tweaks, OEM info, FirstLogonCommands, etc. remain exactly as in win2025-eval.xml -->
<InputLocale>0409:00000409</InputLocale> </unattend>
<SystemLocale>en-US</SystemLocale>
<UILanguage>en-US</UILanguage> <!-- Windows 11 Gaming VM Domain Definition with AMD Zen 5 CPU + GPU -->
<UILanguageFallback>en-US</UILanguageFallback> <domain type="kvm">
<UserLocale>en-US</UserLocale> <name>Windows 11</name>
</component> <uuid>351920c1-41b7-abf6-86a9-df25e7703fa5</uuid>
<component name="Microsoft-Windows-Deployment" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS"> <description>Windows 11 - Gaming VM</description>
<RunSynchronous> <metadata>
<RunSynchronousCommand wcm:action="add"> <vmtemplate xmlns="unraid" name="Windows 11" icon="windows11.png" os="windowstpm"/>
<Order>1</Order> </metadata>
<Path>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\CurrentVersion\NetworkList\Signatures\FirstNetwork" /v Category /t REG_DWORD /d 1 /f</Path> <memory unit="KiB">10485760</memory>
<Description>Set Network Location to Home</Description> <currentMemory unit="KiB">10485760</currentMemory>
</RunSynchronousCommand> <vcpu placement="static">6</vcpu>
<RunSynchronousCommand wcm:action="add"> <iothreads>2</iothreads>
<Order>2</Order> <cputune>
<Path>pnputil -i -a C:\Windows\Drivers\viogpudo\viogpudo.inf</Path> <vcpupin vcpu="0" cpuset="5"/>
<Description>Install VirtIO display driver</Description> <vcpupin vcpu="1" cpuset="13"/>
</RunSynchronousCommand> <vcpupin vcpu="2" cpuset="6"/>
</RunSynchronous> <vcpupin vcpu="3" cpuset="14"/>
</component> <vcpupin vcpu="4" cpuset="7"/>
<component name="Microsoft-Windows-ServerManager-SvrMgrNc" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS"> <vcpupin vcpu="5" cpuset="15"/>
<DoNotOpenServerManagerAtLogon>true</DoNotOpenServerManagerAtLogon> <emulatorpin cpuset="2-4,10-12"/>
</component> <iothreadpin iothread="1" cpuset="2-4,10-12"/>
<component name="Microsoft-Windows-OutOfBoxExperience" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS"> <iothreadpin iothread="2" cpuset="2-4,10-12"/>
<DoNotOpenInitialConfigurationTasksAtLogon>true</DoNotOpenInitialConfigurationTasksAtLogon> </cputune>
</component> <os>
<component name="Microsoft-Windows-TerminalServices-LocalSessionManager" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS"> <type arch="x86_64" machine="pc-q35-7.2">hvm</type>
<fDenyTSConnections>false</fDenyTSConnections> <loader readonly="yes" type="pflash">/usr/share/qemu/ovmf-x64/OVMF_CODE-pure-efi-tpm.fd</loader>
</component> <nvram>/etc/libvirt/qemu/nvram/d566211d-a3fe-da18-b5e2-8ec98fd0e29e_VARS-pure-efi-tpm.fd</nvram>
<component name="Microsoft-Windows-TerminalServices-RDP-WinStationExtensions" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS"> </os>
<UserAuthentication>0</UserAuthentication> <features>
</component> <acpi/>
<component name="Networking-MPSSVC-Svc" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS"> <apic/>
<FirewallGroups> <hyperv mode="custom">
<FirewallGroup wcm:action="add" wcm:keyValue="RemoteDesktop"> <relaxed state="on"/>
<Active>true</Active> <vapic state="on"/>
<Profile>all</Profile> <spinlocks state="on" retries="8191"/>
<Group>@FirewallAPI.dll,-28752</Group> <vpindex state="on"/>
</FirewallGroup> <synic state="on"/>
</FirewallGroups> <stimer state="on"/>
</component> <vendor_id state="on" value="none"/>
</settings> </hyperv>
<settings pass="oobeSystem"> </features>
<component name="Microsoft-Windows-SecureStartup-FilterDriver" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS"> <cpu mode="custom" match="exact" check="full">
<PreventDeviceEncryption>true</PreventDeviceEncryption> <model fallback="allow">Zen-5</model>
</component> <topology sockets="1" dies="1" cores="3" threads="2"/>
<component name="Microsoft-Windows-EnhancedStorage-Adm" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS"> <feature policy="require" name="svm"/>
<TCGSecurityActivationDisabled>1</TCGSecurityActivationDisabled> <feature policy="require" name="hypervisor"/>
</component> </cpu>
<component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS"> <clock offset="localtime">
<UserAccounts> <timer name="hypervclock" present="yes"/>
<LocalAccounts> <timer name="hpet" present="no"/>
<LocalAccount wcm:action="add"> </clock>
<Name>Docker</Name> <on_poweroff>destroy</on_poweroff>
<Group>Administrators</Group> <on_reboot>restart</on_reboot>
<Password> <on_crash>restart</on_crash>
<Value />
<PlainText>true</PlainText> <devices>
</Password> <emulator>/usr/local/sbin/qemu</emulator>
</LocalAccount> <!-- GPU Graphics Function -->
</LocalAccounts> <hostdev mode="subsystem" type="pci" managed="yes">
<AdministratorPassword> <driver name="vfio"/>
<Value>password</Value> <source>
<PlainText>true</PlainText> <address domain="0x0000" bus="0x03" slot="0x00" function="0x0"/>
</AdministratorPassword> </source>
</UserAccounts> <address type="pci" domain="0x0000" bus="0x0a" slot="0x00" function="0x0"/>
<AutoLogon> </hostdev>
<Username>Docker</Username> <!-- GPU Audio Function -->
<Enabled>true</Enabled> <hostdev mode="subsystem" type="pci" managed="yes">
<LogonCount>65432</LogonCount> <driver name="vfio"/>
<Password> <source>
<Value /> <address domain="0x0000" bus="0x03" slot="0x00" function="0x1"/>
<PlainText>true</PlainText> </source>
</Password> <address type="pci" domain="0x0000" bus="0x0a" slot="0x00" function="0x1"/>
</AutoLogon> </hostdev>
<Display> <!-- other disks, controllers, TPM, inputs, etc. remain unchanged -->
<ColorDepth>32</ColorDepth> </devices>
<HorizontalResolution>1920</HorizontalResolution> </domain>
<VerticalResolution>1080</VerticalResolution>
</Display> </configs>
<OOBE>
<HideEULAPage>true</HideEULAPage>
<HideLocalAccountScreen>true</HideLocalAccountScreen>
<HideOEMRegistrationScreen>true</HideOEMRegistrationScreen>
<HideOnlineAccountScreens>true</HideOnlineAccountScreens>
<HideWirelessSetupInOOBE>true</HideWirelessSetupInOOBE>
<NetworkLocation>Home</NetworkLocation>
<ProtectYourPC>3</ProtectYourPC>
<SkipUserOOBE>true</SkipUserOOBE>
<SkipMachineOOBE>true</SkipMachineOOBE>
</OOBE>
<RegisteredOrganization>Dockur</RegisteredOrganization>
<RegisteredOwner>Windows for Docker</RegisteredOwner>
<FirstLogonCommands>
<SynchronousCommand wcm:action="add">
<Order>1</Order>
<CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" /v "AllowInsecureGuestAuth" /t REG_DWORD /d 1 /f</CommandLine>
<Description>Allow guest access to network shares</Description>
</SynchronousCommand>
<SynchronousCommand wcm:action="add">
<Order>2</Order>
<CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" /v "RequireSecuritySignature" /t REG_DWORD /d 0 /f</CommandLine>
<Description>Disable SMB signing requirement</Description>
</SynchronousCommand>
<SynchronousCommand wcm:action="add">
<Order>4</Order>
<CommandLine>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\PasswordLess\Device" /v "DevicePasswordLessBuildVersion" /t REG_DWORD /d 0 /f</CommandLine>
<Description>Enable option for passwordless sign-in</Description>
</SynchronousCommand>
<SynchronousCommand wcm:action="add">
<Order>5</Order>
<CommandLine>powershell.exe -ExecutionPolicy Unrestricted -NoLogo -NoProfile -NonInteractive set-localuser -name "Docker" -passwordneverexpires 1</CommandLine>
<Description>Password Never Expires</Description>
</SynchronousCommand>
<SynchronousCommand wcm:action="add">
<Order>6</Order>
<CommandLine>cmd /C POWERCFG -H OFF</CommandLine>
<Description>Disable Hibernation</Description>
</SynchronousCommand>
<SynchronousCommand wcm:action="add">
<Order>7</Order>
<CommandLine>cmd /C POWERCFG -X -monitor-timeout-ac 0</CommandLine>
<Description>Disable monitor blanking</Description>
</SynchronousCommand>
<SynchronousCommand wcm:action="add">
<Order>8</Order>
<CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Edge" /v "HideFirstRunExperience" /t REG_DWORD /d 1 /f</CommandLine>
<Description>Disable first-run experience in Edge</Description>
</SynchronousCommand>
<SynchronousCommand wcm:action="add">
<Order>9</Order>
<CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "ShowCopilotButton" /t REG_DWORD /d 0 /f</CommandLine>
<Description>Hide Copilot button</Description>
</SynchronousCommand>
<SynchronousCommand wcm:action="add">
<Order>10</Order>
<CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "HideFileExt" /t REG_DWORD /d 0 /f</CommandLine>
<Description>Show file extensions in Explorer</Description>
</SynchronousCommand>
<SynchronousCommand wcm:action="add">
<Order>11</Order>
<CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateFileSizePercent" /t REG_DWORD /d 0 /f</CommandLine>
<Description>Zero Hibernation File</Description>
</SynchronousCommand>
<SynchronousCommand wcm:action="add">
<Order>12</Order>
<CommandLine>reg.exe add "HKLM\SYSTEM\CurrentControlSet\Control\Power" /v "HibernateEnabled" /t REG_DWORD /d 0 /f</CommandLine>
<Description>Disable Hibernation</Description>
</SynchronousCommand>
<SynchronousCommand wcm:action="add">
<Order>13</Order>
<CommandLine>cmd /C POWERCFG -X -standby-timeout-ac 0</CommandLine>
<Description>Disable Sleep</Description>
</SynchronousCommand>
<SynchronousCommand wcm:action="add">
<Order>14</Order>
<CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services" /v "fAllowUnlistedRemotePrograms" /t REG_DWORD /d 1 /f</CommandLine>
<Description>Enable RemoteAPP to launch unlisted programs</Description>
</SynchronousCommand>
<SynchronousCommand wcm:action="add">
<Order>15</Order>
<CommandLine>reg.exe add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Terminal Server\TSAppAllowList" /v "fDisabledAllowList" /t REG_DWORD /d 1 /f</CommandLine>
<Description>Disable RemoteApp allowlist</Description>
</SynchronousCommand>
<SynchronousCommand wcm:action="add">
<Order>16</Order>
<CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "ShowTaskViewButton" /t REG_DWORD /d 0 /f</CommandLine>
<Description>Remove Task View from the Taskbar</Description>
</SynchronousCommand>
<SynchronousCommand wcm:action="add">
<Order>17</Order>
<CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "TaskbarDa" /t REG_DWORD /d 0 /f</CommandLine>
<Description>Remove Widgets from the Taskbar</Description>
</SynchronousCommand>
<SynchronousCommand wcm:action="add">
<Order>18</Order>
<CommandLine>reg.exe add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v "TaskbarMn" /t REG_DWORD /d 0 /f</CommandLine>
<Description>Remove Chat from the Taskbar</Description>
</SynchronousCommand>
<SynchronousCommand wcm:action="add">
<Order>19</Order>
<CommandLine>reg.exe add "HKLM\SOFTWARE\Policies\Microsoft\Windows\WindowsUpdate\AU" /v "NoAutoUpdate" /t REG_DWORD /d 1 /f</CommandLine>
<Description>Turn off Windows Update auto download</Description>
</SynchronousCommand>
<SynchronousCommand wcm:action="add">
<Order>20</Order>
<CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-32752" new enable=Yes</CommandLine>
<Description>Enable Network Discovery</Description>
</SynchronousCommand>
<SynchronousCommand wcm:action="add">
<Order>21</Order>
<CommandLine>netsh advfirewall firewall set rule group="@FirewallAPI.dll,-28502" new enable=Yes</CommandLine>
<Description>Enable File Sharing</Description>
</SynchronousCommand>
<SynchronousCommand wcm:action="add">
<Order>22</Order>
<CommandLine>cmd /C rd /q C:\Windows.old</CommandLine>
<Description>Remove empty Windows.old folder</Description>
</SynchronousCommand>
<SynchronousCommand wcm:action="add">
<Order>23</Order>
<CommandLine>cmd /C mklink /d %userprofile%\Desktop\Shared \\host.lan\Data</CommandLine>
<Description>Create desktop shortcut to shared folder</Description>
</SynchronousCommand>
<SynchronousCommand wcm:action="add">
<Order>24</Order>
<CommandLine>cmd /C if exist "C:\OEM\install.bat" start "Install" "cmd /C C:\OEM\install.bat"</CommandLine>
<Description>Execute custom script from the OEM folder if exists</Description>
</SynchronousCommand>
</FirstLogonCommands>
</component>
</settings>
</unattend>