reinstall/windows.xml

<?xml version="1.0" encoding="utf-8"?>
<unattend xmlns="urn:schemas-microsoft-com:unattend">

    <settings pass="windowsPE">
        <component name="Microsoft-Windows-Setup" processorArchitecture="%arch%" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
            <!-- 安装过程可节省一点内存？vista 要删除不然报错 -->
            <EnableFirewall>false</EnableFirewall>
            <UserData>
                <AcceptEula>true</AcceptEula>
                <ProductKey>
                    <Key>%key%</Key>
                </ProductKey>
            </UserData>
            <ImageInstall>
                <OSImage>
                    <InstallFrom>
                        <MetaData wcm:action="add">
                            <Key>/IMAGE/NAME</Key>
                            <Value>%image_name%</Value>
                        </MetaData>
                    </InstallFrom>
                    <InstallTo>
                        <DiskID>%disk_id%</DiskID>
                        <PartitionID>%installto_partitionid%</PartitionID>
                    </InstallTo>
                </OSImage>
            </ImageInstall>
            <!-- 用注册表无法绕过 cpu 核数限制 -->
            <!-- https://github.com/pbatard/rufus/issues/1990 -->
            <!-- https://learn.microsoft.com/windows/iot/iot-enterprise/Hardware/System_Requirements -->
            <!-- <RunSynchronous>
                <RunSynchronousCommand wcm:action="add">
                    <Order>1</Order>
                    <Path>cmd /c for %a in (RAM TPM SecureBoot) do reg add HKLM\SYSTEM\Setup\LabConfig /t REG_DWORD /v Bypass%aCheck /d 1 /f</Path>
                </RunSynchronousCommand>
            </RunSynchronous> -->
        </component>
        <component name="Microsoft-Windows-International-Core-WinPE" processorArchitecture="%arch%" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
            <InputLocale>%locale%</InputLocale>
            <SystemLocale>%locale%</SystemLocale>
            <UILanguage>%locale%</UILanguage>
            <UserLocale>%locale%</UserLocale>
        </component>
    </settings>

    <!-- vultr win8/8.1/2012/2012r2 在 windowsPE/Microsoft-Windows-PnpCustomizationsWinPE 下载加载气球驱动
    会出现 Windows Cannot find Microsoft software license terms 错误 -->

    <settings pass="offlineServicing">
        <component name="Microsoft-Windows-PnpCustomizationsNonWinPE" processorArchitecture="%arch%" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
            <DriverPaths>
                <!-- 目录为空不会报错 -->
                <!-- 驱动可以放在子目录 -->
                <PathAndCredentials wcm:action="add" wcm:keyValue="1">
                    <Path>X:\drivers</Path>
                </PathAndCredentials>
                <PathAndCredentials wcm:action="add" wcm:keyValue="2">
                    <Path>X:\custom_drivers</Path>
                </PathAndCredentials>
            </DriverPaths>
        </component>
    </settings>

    <settings pass="specialize">
        <component name="Microsoft-Windows-Deployment" processorArchitecture="%arch%" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
            <RunSynchronous>
                <!-- 大厂都要求设置高性能和从不关闭显示器
                https://learn.microsoft.com/en-us/azure/virtual-machines/windows/prepare-for-upload-vhd-image#set-windows-configurations-for-azure
                https://docs.aws.amazon.com/AWSEC2/latest/WindowsGuide/migrating-latest-types.html
                https://support.huaweicloud.com/usermanual-ims/zh-cn_topic_0047501112.html
                powercfg /aliases 能显示 GUID/名称 的对应关系，vista 也能使用名称 -->
                <RunSynchronousCommand wcm:action="add">
                    <Order>1</Order>
                    <Path>powercfg /setacvalueindex SCHEME_BALANCED SUB_VIDEO VIDEOIDLE 0</Path>
                </RunSynchronousCommand>
                <RunSynchronousCommand wcm:action="add">
                    <Order>2</Order>
                    <Path>powercfg /setacvalueindex SCHEME_MIN SUB_VIDEO VIDEOIDLE 0</Path>
                </RunSynchronousCommand>
                <RunSynchronousCommand wcm:action="add">
                    <Order>3</Order>
                    <Path>powercfg /setacvalueindex SCHEME_MAX SUB_VIDEO VIDEOIDLE 0</Path>
                </RunSynchronousCommand>
                <!-- 设为高性能 -->
                <RunSynchronousCommand wcm:action="add">
                    <Order>4</Order>
                    <Path>powercfg /setactive SCHEME_MIN</Path>
                </RunSynchronousCommand>
                <!-- 按需启用 administrator 账户 -->
                <RunSynchronousCommand wcm:action="add">
                    <Order>5</Order>
                    <!-- vista 没有自带 powershell -->
                    <!-- <Path>powershell "$User = Get-WmiObject Win32_UserAccount | where SID -like *-500; $User.Disabled = $False; $User.Put()"</Path> -->
                    <!-- win7 此时无法用 wmic useraccount -->
                    <!-- <Path>wmic useraccount where "sid like '%-500'" set Disabled=false</Path> -->
                    <!-- https://learn.microsoft.com/archive/technet-wiki/13813.localized-names-for-administrator-account-in-windows -->
                    <!-- %enable_administrator% 会被 trans.sh 替换成 1 或 0 -->
                    <Path>cmd /c "if "%enable_administrator%"=="1" for %a in (Administrator Administrador Administrateur Administratör Администратор Järjestelmänvalvoja Rendszergazda) do (net user %a /active:yes &amp;&amp; exit)"</Path>
                </RunSynchronousCommand>
                <!-- 禁用保留空间 -->
                <RunSynchronousCommand wcm:action="add">
                    <Order>6</Order>
                    <Path>reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\ReserveManager /v ShippedWithReserves /t REG_DWORD /d 0 /f</Path>
                    <!-- 此时以下命令无效 -->
                    <!-- <Path>DISM /Online /Set-ReservedStorageState /State:Disabled</Path> -->
                    <!-- <Path>powershell "Set-WindowsReservedStorageState -State Disabled; exit"</Path> -->
                </RunSynchronousCommand>
                <!-- win7 在此阶段找不到网卡 -->
                <!-- <RunSynchronousCommand wcm:action="add">
                    <Order>5</Order>
                    <Path>cmd /c "if exist %SystemDrive%\windows-resize.bat (call %SystemDrive%\windows-resize.bat)"</Path>
                </RunSynchronousCommand>
                <RunSynchronousCommand wcm:action="add">
                    <Order>6</Order>
                    <Path>cmd /c "if exist %SystemDrive%\windows-set-netconf.bat (call %SystemDrive%\windows-set-netconf.bat)"</Path>
                </RunSynchronousCommand> -->
            </RunSynchronous>
        </component>
        <component name="Microsoft-Windows-TerminalServices-LocalSessionManager" processorArchitecture="%arch%" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
            <fDenyTSConnections>false</fDenyTSConnections>
        </component>
        <component name="Networking-MPSSVC-Svc" processorArchitecture="%arch%" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
            <FirewallGroups>
                <FirewallGroup wcm:action="add" wcm:keyValue="RemoteDesktop">
                    <Profile>all</Profile>
                    <!-- HKLM\System\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules -->
                    <!-- Get-NetFirewallRule | Where-Object Name -like 'RemoteDesktop*' | fl Name,DisplayName,Description,DisplayGroup,Group -->
                    <!-- https://learn.microsoft.com/windows-hardware/customize/desktop/unattend/networking-mpssvc-svc-firewallgroups-firewallgroup-group -->
                    <Group>@FirewallAPI.dll,-28752</Group>
                    <Active>%use_default_rdp_port%</Active>
                </FirewallGroup>
            </FirewallGroups>
        </component>
        <component name="Microsoft-Windows-powercpl" processorArchitecture="%arch%" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
            <PreferredPlan>8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c</PreferredPlan>
        </component>
        <component name="Microsoft-Windows-ErrorReportingCore" processorArchitecture="%arch%" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
            <DisableWER>1</DisableWER>
        </component>
        <component name="Microsoft-Windows-SQMApi" processorArchitecture="%arch%" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
            <CEIPEnabled>0</CEIPEnabled>
        </component>
    </settings>

    <settings pass="oobeSystem">
        <!-- 好像不起作用 -->
        <!-- <component name="Microsoft-Windows-WinRE-RecoveryAgent" processorArchitecture="%arch%" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
            <UninstallWindowsRE>true</UninstallWindowsRE>
        </component> -->
        <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="%arch%" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
            <UserAccounts>
                <AdministratorPassword>
                    <Value>%administrator_password%</Value>
                    <PlainText>false</PlainText>
                </AdministratorPassword>
                <LocalAccounts>
                    <LocalAccount wcm:action="add">
                        <Name>%user_username%</Name>
                        <Password>
                            <Value>%user_password%</Value>
                            <PlainText>false</PlainText>
                        </Password>
                        <!-- 需要填英文的 Administrators，任何语言都是 -->
                        <!-- https://learn.microsoft.com/windows-hardware/customize/desktop/unattend/microsoft-windows-shell-setup-useraccounts-localaccounts-localaccount-group -->
                        <Group>Administrators</Group>
                    </LocalAccount>
                </LocalAccounts>
            </UserAccounts>
            <OOBE>
                <HideEULAPage>true</HideEULAPage>
                <!-- 文档说请勿使用 SkipMachineOOBE 设置自动执行 OOBE -->
                <!-- 但是 Azure 的系统镜像也是用了 SkipMachineOOBE -->
                <!-- https://learn.microsoft.com/windows-hardware/customize/desktop/automate-oobe -->
                <SkipMachineOOBE>true</SkipMachineOOBE>
                <SkipUserOOBE>true</SkipUserOOBE>
            </OOBE>
            <!-- 不设置时区，则使用镜像的默认时区 -->
            <!-- <TimeZone>China Standard Time</TimeZone> -->
        </component>
    </settings>
</unattend>