Localboot products: automatic software distribution with opsi

The opsi-logviewer tool created by uib now also opens files that are compressed in the archive formats zip or gzip. This means that log files that are sent as an archive can be viewed directly. (If an archive contains several files, the contents are of all files are appended.)

allow_useractivity_publishing allows Microsoft to collect userctivity experiences

change_power_plan changes the power management profile.

config_updates allows you to change the source of the updates. The updates are then downloaded either directly from Microsoft servers, a local peer-to-peer network or a peer-to-peer network from the Internet. The 'disable' option is meanwhile moved into a separate property called 'disable_updates'.

defer_upgrade postpones updates and upgrades. Updates can be postponed by four weeks and upgrades by eight months. It should be noted that security-relevant updates are installed despite the 'defer' option. However, feature updates are not installed.

deferfeatureupdatesperiodindays Defines how long quality updates, also called windows upgrades, should be defered. The maximum is 365 days.

deferqualityupdatesperiodindays Defines how many days feature updates should be defered. The maximum is 29 days.

disable_advertising_id deactivates the so-called Advertising ID. This stores data about the browser history in order to display user-specific advertising.

disable_app_suggestion_in_startmenu deactivates suggested apps in the start menu.

disable_automatic_logon_on_reboot: disables an automatic logon after reboot.

disable_cortana deactivates the Cortana voice assistant. This collects various data about input and transfers this data to Microsoft servers.

disable_customer_experience disables collecting data related to application usage data.

disable_defender disables the anti-virus protection included with Windows 10 called 'Defender'.

disable_dosvc disbales a service used for delivery optimization.

disable_error_report deactivates sending error reports to Microsoft. This does not affect third party apps.

disable_fast_boot deactivates fast boot and ensures that the standard opsi-event gui_startup works properly.

disable_font_streaming ensures that fonts not installed on the system are streamed from the Internet.

disable_handwrite_sharing A special feature is the use of Windows 10 on tablet PCs. Here, data about handwriting is collected and sent to a Microsoft server.

disable_location_sensors disables collecting data about the current geolocation of the device.

disable_lock_screen disables the lock screen.

disable_mrt deactivates the use of the 'Malware Removal Tool', MRT for short. This service scans existing files on the computer’s hard drive at regular intervals and compares them with a list of potentially dangerous software.

disable_news_and_interest deactivates news and interest in the taskbar.

disable_onedrive_sync disables the OneDrive file synchronization.

disable_push_install disables the possibility to push install apps from the Microsoft store from another device with the same account.

disable_recent_apps disables the presentation of recently used apps in the start menu.

disable_sending_feedback makes it possible to influence the transfer of data to Microsoft in the event of application crashes.

disable_smbv1 disables the SMB v1 protocol.

disable_suggested_silent_app_installion deactivates a silent installation of suggested apps in the background without user interaction.

disable_telemetry makes it possible to limit the amount of data collected. A lot of data is transferred as standard. If the property is set to 'true', Windows is set so that only security-relevant data is transferred. This is the lowest level. This security level can only be set in the Windows 10 Enterprise and LTSB version. In the other versions of Windows 10, the next lowest level is applied, Basic.

disable_update_button disables the update button within the update settings. If set to false after it was set to true it might take a couple of hours to make the button usable again.

disable_update_service disables the windows update service and provides another possibility to block updates.

disable_updates blocks connections to Microsoft update sources when set to 'true'. Setting the property to 'false' enables these connections again.

disable_wifi_sense deactivates the service called 'Wifi Sense'. This service enables saved WLAN configurations to be shared with contacts.

flashplayer_autorun There is a security vulnerablility in Windows 10 with the Adobe Flashplayer. It is recommended to deactivate the autorun feature of the flash player. With 'false' the Flashplayer is no longer started.

hide_known_file_extensions hides known file extensions, e.g. txt.

local_wsus_available: Only affects Windows Updates: When 'true' a connection to a local WSUS server is possible.

minimize_recommendations deactivaes the usage of collected data to show recommendations on lockscreen.

no_new_app_install_notification: If this is set to 'true' this property deactivates notifications on app updates.

online_search Online results are also provided for every search using the integrated search bar in the taskbar. 'true' enables such an online search, 'false' disables it.

oobedisableprivacyexperience: Only affects Windows 10 1809 and newer. Deactivates OOBE DIsablePrivacyExperiene, if 'true'.

remove_edge_from_desktop removed the desktop shotcut for the old edge browser.

show_all_folder_in_navbar shows all folders in the navigation bar in the Widnows Explorer.

show_drive_letter_first shows the drive letter first.

show_this_pc_instead_of_quicklaunch opens this pc instead of a quick access.

sync_settings If you use Windows 10 in combination with a Microsoft account, it is possible to synchronize your settings with the current Microsoft account. If you set the property 'sync_settings' to 'false' this will be deactivated.

wlid_service controls the behaviour of the Windows Live ID Service.

name: products_to_exclude

name: products_to_exclude_by_regex

name: products_to_include

name: products_to_run_always

name: failed_products_to_setup

name: shutdown_on_finish

name: do_cleanup

name: products_to_install

name: products_to_uninstall

name: do_merge

name: disabled
This property is for debugging purposes.
If 'true', the product does not execute any actions.
Default = 'false'

name: rebootflag
Please do not change during the run. This should be '0' before starting.

name: stop_after_step
This property is for debugging purposes.
If not '0' then this is the number of reboots after which to stop. Default = '0'

name: driver_path
description: Path to the driver directory.
'auto'= from netboot product driver repo
default=auto

name: netbootproduct
description: name of the netboot product (where we can find the driver in driver_path auto mode).
'auto'= try to detect the used netboot product
default=auto

name: force_import_cert_from_sys
description: if true, installation of not correct signed drivers will be possible by extracting the certs from the .sys file and import them to the cert store
default=false

name: force_reinstallation
description: if true, we try to install the driver even if it seems to be installed in the repo version
default=false

Products to be installed first such as OS patches and drivers that bring the PC to a standard state. Is realized by assigning a high priority (maximum +100).

"Normal" products that install applications (default priority 0).

Products that should be installed last, e.g. software inventory control. Realized by assigning a low priority (lowest possible -100).