From f1276acf5c5cfcccffb50a04a58a8974d2d2121e Mon Sep 17 00:00:00 2001 From: Heikki Halmet Date: Wed, 16 Oct 2019 14:53:42 +0300 Subject: Provisioning: Add MSVC 2019 and upgrade MSVC 2017 to the latest version Under coin/pre-provisioning can be found information what have been provisioned to tier1 image Visual studios are updated to versions: MSVC 2019: version 16.3.1 MSVC 2017: version 15.9.16 Task-number: QTQAINFRA-2875 Change-Id: I3a9748296dcf088bb312dec8f78bdc59dfb281d1 Reviewed-by: Jani Heikkinen --- .../common/windows/disable-schedule-tasks.ps1 | 88 ---------------------- .../common/windows/disable-update-orchestrator.ps1 | 16 ---- .../windows/disable-windows-file-protector.ps1 | 4 - .../windows/disable-windows-update-medic.ps1 | 25 ------ 4 files changed, 133 deletions(-) delete mode 100644 coin/provisioning/common/windows/disable-schedule-tasks.ps1 delete mode 100644 coin/provisioning/common/windows/disable-update-orchestrator.ps1 delete mode 100644 coin/provisioning/common/windows/disable-windows-file-protector.ps1 delete mode 100644 coin/provisioning/common/windows/disable-windows-update-medic.ps1 (limited to 'coin/provisioning/common/windows') diff --git a/coin/provisioning/common/windows/disable-schedule-tasks.ps1 b/coin/provisioning/common/windows/disable-schedule-tasks.ps1 deleted file mode 100644 index 351f10c6..00000000 --- a/coin/provisioning/common/windows/disable-schedule-tasks.ps1 +++ /dev/null @@ -1,88 +0,0 @@ -. "$PSScriptRoot\helpers.ps1" - -# This script will remove unneeded Tasks from Task Scheduler - -# Application Experience 'Microsoft Compatibility Appraiser' - "Collects program telemetry information if opted-in to the Microsoft Customer Experience Improvement Program." -DisableSchedulerTask "Application Experience\Microsoft Compatibility Appraiser" - -# Application Experience 'ProgramDataUpdater' - "Collects program telemetry information if opted-in to the Microsoft Customer Experience Improvement Program" -DisableSchedulerTask "Application Experience\ProgramDataUpdater" - -# Autochk 'Proxy' - "This task collects and uploads autochk SQM data if opted-in to the Microsoft Customer Experience Improvement Program." -DisableSchedulerTask "Autochk\Proxy" - -# Chkdsk 'ProactiveScan' - "NTFS Volume Health Scan" -DisableSchedulerTask "Chkdsk\ProactiveScan" - -# Chkdsk 'SyspartRepair' -DeleteSchedulerTask "Chkdsk\SyspartRepair" - -# Customer Experience Improvement Program 'Consolidator' - "If the user has consented to participate in the Windows Customer Experience Improvement Program, this job collects and sends usage data to Microsoft." -DisableSchedulerTask "Customer Experience Improvement Program\Consolidator" - -# Customer Experience Improvement Program 'sbCeip' - "The USB CEIP (Customer Experience Improvement Program) task collects Universal Serial Bus related statistics and information about your machine and sends it to the Windows Device Connectivity engineering group at Microsoft. The information received is used to help improve the reliability, stability, and overall functionality of USB in Windows. If the user has not consented to participate in Windows CEIP, this task does not do anything." -DisableSchedulerTask "Customer Experience Improvement Program\UsbCeip" - -# Device Information 'Device' -DisableSchedulerTask "Device Information\Device" - -# Diagnosis 'Scheduled' - "The Windows Scheduled Maintenance Task performs periodic maintenance of the computer system by fixing problems automatically or reporting them through Security and Maintenance." -DisableSchedulerTask "Diagnosis\Scheduled" - -# DiskDiagnostic 'Microsoft-Windows-DiskDiagnosticDataCollector' - "The Windows Disk Diagnostic reports general disk and system information to Microsoft for users participating in the Customer Experience Program." -DisableSchedulerTask "DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector" - -# ExploitGuard 'ExploitGuard MDM policy Refresh' - "Task for applying changes to the machine's Exploit Protection settings." -DisableSchedulerTask "ExploitGuard\ExploitGuard MDM policy Refresh" - -# Feedback/Siuf 'DmClient' -DisableSchedulerTask "Feedback\Siuf\DmClient" - -# Feedback/Siuf 'DmClient'OnScenarioDownload' -DisableSchedulerTask "Feedback\Siuf\DmClientOnScenarioDownload" - -# File Classification Infrastructure 'Property Definition Sync' -DisableSchedulerTask "File Classification Infrastructure\Property Definition Sync" - -# InstallService 'ScanForUpdates' -DisableSchedulerTask "InstallService\ScanForUpdates" - -# InstallService 'ScanForUpdatesAsUser' -DisableSchedulerTask "InstallService\ScanForUpdatesAsUser" - -# LanguageComponentsInstaller 'Installation' - "Install language components that match the user's language list." -DisableSchedulerTask "LanguageComponentsInstaller\Installation" - -# LanguageComponentsInstaller 'ReconcileLanguageResources' - "Install language components that match the user's language list." -DisableSchedulerTask "LanguageComponentsInstaller\ReconcileLanguageResources" - -# PI 'Secure-Boot-Update' - "This task updates the Secure Boot variables." -DisableSchedulerTask "PI\Secure-Boot-Update" - -# PI 'Sqm-Tasks' - "This task gathers information about the Trusted Platform Module (TPM), Secure Boot, and Measured Boot." -DisableSchedulerTask "PI\Sqm-Tasks" - -# Power Efficiency Diagnotics 'AnalyzeSystem' - "This task analyzes the system looking for conditions that may cause high energy use." -DisableSchedulerTask "PushToInstall\Registration" - -# Servicing 'StartComponentCleanup' -DisableSchedulerTask "Servicing\StartComponentCleanup" - -# SettingSync 'BackgroundUploadTask' -DeleteSchedulerTask "SettingSync\BackgroundUploadTask" - -# SoftwareProtectionPlatform 'SvcRestartTask' - "This task restarts the Software Protection Platform service at the specified time" -DeleteSchedulerTask "SoftwareProtectionPlatform\SvcRestartTask" - -# SoftwareProtectionPlatform 'SvcRestartTaskLogon' - "This task restarts the Software Protection Platform service at the specified time" -DisableSchedulerTask "SoftwareProtectionPlatform\SvcRestartTaskLogon" - -# SoftwareProtectionPlatform 'SvcRestartTaskNetwork' - "This task restarts the Software Protection Platform service when a new network is detected" -DisableSchedulerTask "SoftwareProtectionPlatform\SvcRestartTaskNetwork" - -# UNP 'RunUpdateNotificationMgr' -DeleteSchedulerTask "UNP\RunUpdateNotificationMgr" - - - - diff --git a/coin/provisioning/common/windows/disable-update-orchestrator.ps1 b/coin/provisioning/common/windows/disable-update-orchestrator.ps1 deleted file mode 100644 index 5ae8fb0d..00000000 --- a/coin/provisioning/common/windows/disable-update-orchestrator.ps1 +++ /dev/null @@ -1,16 +0,0 @@ -# Disable UpdateOrchestrator - -$name = "UpdateOrchestrator" -$path = "C:\Windows\System32\Tasks\Microsoft\Windows\$name" - -takeown /F $path /A /R -icacls $path /grant Administrators:F /T -SCHTASKS /Change /TN "Microsoft\Windows\$name\Reboot" /DISABLE -del "$path\Schedule Scan" -del "$path\Schedule Scan Static Task" -del "$path\Backup Scan" -del "$path\UpdateModelTask" -del "$path\USO_UxBroker" - -# Disable Update orchestrator service -reg.exe ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\UsoSvc" /V Start /T REG_dWORD /D 4 /F diff --git a/coin/provisioning/common/windows/disable-windows-file-protector.ps1 b/coin/provisioning/common/windows/disable-windows-file-protector.ps1 deleted file mode 100644 index f1d09fb5..00000000 --- a/coin/provisioning/common/windows/disable-windows-file-protector.ps1 +++ /dev/null @@ -1,4 +0,0 @@ -# Disable Windows File Protection -# Windows File Protection feature in Microsoft Windows prevents programs from replacing critical Windows system files. - -reg.exe ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /V SFCDisable /T REG_dWORD /D 0xffffff9d /F diff --git a/coin/provisioning/common/windows/disable-windows-update-medic.ps1 b/coin/provisioning/common/windows/disable-windows-update-medic.ps1 deleted file mode 100644 index 6accbd3b..00000000 --- a/coin/provisioning/common/windows/disable-windows-update-medic.ps1 +++ /dev/null @@ -1,25 +0,0 @@ -# Windows Update Medic Service (WaaSMedicSvc)'PerformRemediation' helps recover update-related services to the supported configuration. -# WaasMedicSvc keeps re-starting Windows Update, even if it disabled manually. -# Even Admin user don't have privileged to disable PerformRemediation from Task Scheduler which means that WaaSMedicSvc.dll need's to be removed from the system - -$limit = (Get-Date).AddMinutes(20) -$path = "C:\Windows\System32\WaaSMedicSvc.dll" - -DO { - takeown /F $path - icacls $path /grant Administrators:f - Write-host "Deleting $path" - - Try { - del $path - } - Catch [System.UnauthorizedAccessException] { - Write-host "Access to the path '$path' is denied." - Continue - } - - if ((Get-Date) -gt $limit) { - exit 1 - } - -}while (Test-Path -Path "$path") -- cgit v1.2.3