forked from ntdevlabs/tiny11builder
-
Notifications
You must be signed in to change notification settings - Fork 12
/
tiny11creator.ps1
187 lines (154 loc) · 9.31 KB
/
tiny11creator.ps1
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
#Defining preferences variables
Write-Output "Loading configuration from config.json..."
$config = (Get-Content "config.json" -Raw) | ConvertFrom-Json
$wantedImageName = $config.WantedWindowsEdition
$unwantedProvisionnedPackages = $config.ProvisionnedPackagesToRemove
$unwantedWindowsPackages = $config.WindowsPackagesToRemove
$pathsToDelete = $config.PathsToDelete
$windowsIsoDownloaderReleaseUrl = $config.WindowsIsoDownloaderReleaseUrl
#Defining system variables
Write-Output "Creating needed variables..."
$rootWorkdir = "c:\tiny11\"
$isoFolder = $rootWorkdir + "iso\"
$installImageFolder = $rootWorkdir + "installimage\"
$bootImageFolder = $rootWorkdir + "bootimage\"
$toolsFolder = $rootWorkdir + "tools\"
$isoPath = "c:\windows11.iso"
$yes = (cmd /c "choice <nul 2>nul")[1]
#The $yes variable gets the "y" from "yes" (or corresponding letter in the language your computer is using).
#It is used to answer automatically to the "takeown" command, because the answer choices are localized which is not handy at all.
md $rootWorkdir | Out-Null
md ($toolsFolder + "WindowsIsoDownloader\") | Out-Null
Write-Output "Downloading WindowsIsoDownloader release from GitHub..."
Invoke-WebRequest -Uri $windowsIsoDownloaderReleaseUrl -OutFile WindowsIsoDownloader.zip
Write-Output "Extracting WindowsIsoDownloader release..."
Expand-Archive -Path WindowsIsoDownloader.zip -DestinationPath ($toolsFolder + "WindowsIsoDownloader\")
Remove-Item WindowsIsoDownloader.zip | Out-Null
#Downloading the Windows 11 ISO using WindowsIsoDownloader
Write-Output "Downloading Windows 11 iso file from Microsoft using WindowsIsoDownloader..."
$isoDownloadProcess = (Start-Process ($toolsFolder + "WindowsIsoDownloader\WindowsIsoDownloader.exe") -NoNewWindow -Wait -WorkingDirectory ($toolsFolder + "WindowsIsoDownloader\") -PassThru)
if ($isoDownloadProcess.ExitCode -eq 0) {
#Mount the Windows 11 ISO
Write-Output "Mounting the original iso..."
$mountResult = Mount-DiskImage -ImagePath $isoPath
$isoDriveLetter = ($mountResult | Get-Volume).DriveLetter
#Creating needed temporary folders
Write-Output "Creating temporary folders..."
md $isoFolder | Out-Null
md $installImageFolder | Out-Null
md $bootImageFolder | Out-Null
#Copying the ISO files to the ISO folder
Write-Output "Copying the content of the original iso to the work folder..."
cp -Recurse ($isoDriveLetter + ":\*") $isoFolder | Out-Null
#Unmounting the original ISO since we don't need it anymore (we have a copy of the content)
Write-Output "Unmounting the original iso..."
Dismount-DiskImage -ImagePath $isoPath | Out-Null
################# Beginning of install.wim patches ##################
#Getting the wanted image index
$wantedImageIndex = Get-WindowsImage -ImagePath ($isoFolder + "sources\install.wim") | where-object { $_.ImageName -eq $wantedImageName } | Select-Object -ExpandProperty ImageIndex
#Mounting the WIM image
Write-Output "Mounting the install.wim image..."
Set-ItemProperty -Path ($isoFolder + "sources\install.wim") -Name IsReadOnly -Value $false | Out-Null
Mount-WindowsImage -ImagePath ($isoFolder + "sources\install.wim") -Path $installImageFolder -Index $wantedImageIndex | Out-Null
#Detecting provisionned app packages
Write-Output "Removing unwanted app packages from the install.wim image..."
$detectedProvisionnedPackages = Get-AppxProvisionedPackage -Path $installImageFolder
#Removing unwanted provisionned app packages
foreach ($detectedProvisionnedPackage in $detectedProvisionnedPackages) {
foreach ($unwantedProvisionnedPackage in $unwantedProvisionnedPackages) {
if ($detectedProvisionnedPackage.PackageName.Contains($unwantedProvisionnedPackage)) {
Remove-AppxProvisionedPackage -Path $installImageFolder -PackageName $detectedProvisionnedPackage.PackageName -ErrorAction SilentlyContinue | Out-Null
}
}
}
#Detecting windows packages
Write-Output "Removing unwanted windows packages from the install.wim image..."
$detectedWindowsPackages = Get-WindowsPackage -Path $installImageFolder
#Removing unwanted windows packages
foreach ($detectedWindowsPackage in $detectedWindowsPackages) {
foreach ($unwantedWindowsPackage in $unwantedWindowsPackages) {
if ($detectedWindowsPackage.PackageName.Contains($unwantedWindowsPackage)) {
Remove-WindowsPackage -Path $installImageFolder -PackageName $detectedWindowsPackage.PackageName -ErrorAction SilentlyContinue | Out-Null
}
}
}
Write-Output "Deleting PathsToDelete from the install.wim image..."
foreach ($pathToDelete in $pathsToDelete) {
$fullpath = ($installImageFolder + $pathToDelete.Path)
if ($pathToDelete.IsFolder -eq $true) {
takeown /f $fullpath /r /d $yes | Out-Null
icacls $fullpath /grant ("$env:username"+":F") /T /C | Out-Null
Remove-Item -Force $fullpath -Recurse -ErrorAction SilentlyContinue | Out-Null
} else {
takeown /f $fullpath | Out-Null
icacls $fullpath /grant ("$env:username"+":F") /T /C | Out-Null
Remove-Item -Force $fullpath -ErrorAction SilentlyContinue | Out-Null
}
}
# Loading the registry from the mounted WIM image
Write-Output "Patching the registry in the install.wim image..."
reg load HKLM\installwim_DEFAULT ($installImageFolder + "Windows\System32\config\default") | Out-Null
reg load HKLM\installwim_NTUSER ($installImageFolder + "Users\Default\ntuser.dat") | Out-Null
reg load HKLM\installwim_SOFTWARE ($installImageFolder + "Windows\System32\config\SOFTWARE") | Out-Null
reg load HKLM\installwim_SYSTEM ($installImageFolder + "Windows\System32\config\SYSTEM") | Out-Null
# Applying following registry patches on the system image:
# Bypassing system requirements
# Disabling Teams
# Disabling Sponsored Apps
# Enabling Local Accounts on OOBE
# Disabling Reserved Storage
# Disabling Chat icon
regedit /s ./tools/installwim_patches.reg | Out-Null
# Unloading the registry
reg unload HKLM\installwim_DEFAULT | Out-Null
reg unload HKLM\installwim_NTUSER | Out-Null
reg unload HKLM\installwim_SOFTWARE | Out-Null
reg unload HKLM\installwim_SYSTEM | Out-Null
#Copying the setup config file
Write-Output "Placing the autounattend.xml file in the install.wim image..."
[System.IO.File]::Copy((Get-ChildItem .\tools\autounattend.xml).FullName, ($installImageFolder + "Windows\System32\Sysprep\autounattend.xml"), $true) | Out-Null
#Unmount the install.wim image
Write-Output "Unmounting the install.wim image..."
Dismount-WindowsImage -Path $installImageFolder -Save | Out-Null
#Moving the wanted image index to a new image
Write-Output "Creating a clean install.wim image without all unnecessary indexes..."
Export-WindowsImage -SourceImagePath ($isoFolder + "sources\install.wim") -SourceIndex $wantedImageIndex -DestinationImagePath ($isoFolder + "sources\install_patched.wim") -CompressionType max | Out-Null
#Delete the old install.wim and rename the new one
rm ($isoFolder + "sources\install.wim") | Out-Null
Rename-Item -Path ($isoFolder + "sources\install_patched.wim") -NewName "install.wim" | Out-Null
################# Ending of install.wim patches ##################
################# Beginning of boot.wim patches ##################
Set-ItemProperty -Path ($isoFolder + "sources\boot.wim") -Name IsReadOnly -Value $false | Out-Null
Write-Output "Mounting the boot.wim image..."
Mount-WindowsImage -ImagePath ($isoFolder + "sources\boot.wim") -Path $bootImageFolder -Index 2 | Out-Null
Write-Output "Patching the registry in the boot.wim image..."
reg load HKLM\bootwim_DEFAULT ($bootImageFolder + "Windows\System32\config\default") | Out-Null
reg load HKLM\bootwim_NTUSER ($bootImageFolder + "Users\Default\ntuser.dat") | Out-Null
reg load HKLM\bootwim_SYSTEM ($bootImageFolder + "Windows\System32\config\SYSTEM") | Out-Null
# Applying following registry patches on the boot image:
# Bypassing system requirements
regedit /s ./tools/bootwim_patches.reg | Out-Null
reg unload HKLM\bootwim_DEFAULT | Out-Null
reg unload HKLM\bootwim_NTUSER | Out-Null
reg unload HKLM\bootwim_SYSTEM | Out-Null
#Unmount the boot.wim image
Write-Output "Unmounting the boot.wim image..."
Dismount-WindowsImage -Path $bootImageFolder -Save | Out-Null
#Moving the wanted image index to a new image
Write-Output "Creating a clean boot.wim image without all unnecessary indexes..."
Export-WindowsImage -SourceImagePath ($isoFolder + "sources\boot.wim") -SourceIndex 2 -DestinationImagePath ($isoFolder + "sources\boot_patched.wim") -CompressionType max | Out-Null
#Delete the old boot.wim and rename the new one
rm ($isoFolder + "sources\boot.wim") | Out-Null
Rename-Item -Path ($isoFolder + "sources\boot_patched.wim") -NewName "boot.wim" | Out-Null
################# Ending of boot.wim patches ##################
#Copying the setup config file to the iso copy folder
[System.IO.File]::Copy((Get-ChildItem .\tools\autounattend.xml).FullName, ($isoFolder + "autounattend.xml"), $true) | Out-Null
#Building the new trimmed and patched iso file
Write-Output "Building the tiny11.iso file..."
.\tools\oscdimg.exe -m -o -u2 -udfver102 -bootdata:("2#p0,e,b" + $isoFolder + "boot\etfsboot.com#pEF,e,b" + $isoFolder + "efi\microsoft\boot\efisys.bin") $isoFolder c:\tiny11.iso | Out-Null
} else {
Write-Output "Unable to build the tiny11 iso (an error occured while trying to download the original iso using WindowsIsoDownloader)."
}
#Cleaning the folders used during the process
Write-Output "Removing work folders..."
Remove-Item $rootWorkdir -Force -Recurse -ErrorAction SilentlyContinue | Out-Null