vmware OSOT profile - Windows Server 2016 - nordest.systems

<sequence name="WindowsServer 2016 - nordest.systems" description="Default optimization template for Windows Server 2016" author="Lorenzo Faleschini" authorEmail="" website="https://nordest.systems" runOnOs="25,26,27" version="6.0" uid="636014">
  <globalVarList>
    <osCollection>
      <osEntry osId="1" name="Windows 7">
        <Version>6.1.*</Version>
        <ProductType>1</ProductType>
        <osEntry osId="2" name="Windows 7 32-bit">
          <OSArchitecture>32-bit</OSArchitecture>
        </osEntry>
        <osEntry osId="3" name="Windows 7 64-bit">
          <OSArchitecture>64-bit</OSArchitecture>
        </osEntry>
      </osEntry>
      <osEntry osId="4" name="Windows 8">
        <Version>6.2.*</Version>
        <ProductType>1</ProductType>
        <osEntry osId="5" name="Windows 8 32-bit">
          <OSArchitecture>32-bit</OSArchitecture>
        </osEntry>
        <osEntry osId="6" name="Windows 8 64-bit">
          <OSArchitecture>64-bit</OSArchitecture>
        </osEntry>
      </osEntry>
      <osEntry osId="13" name="Windows 8.1">
        <Version>6.3.*</Version>
        <ProductType>1</ProductType>
        <osEntry osId="14" name="Windows 8.1 32-bit">
          <OSArchitecture>32-bit</OSArchitecture>
        </osEntry>
        <osEntry osId="15" name="Windows 8.1 64-bit">
          <OSArchitecture>64-bit</OSArchitecture>
        </osEntry>
      </osEntry>
      <osEntry osId="16" name="Windows 10">
        <Version>10.0.*</Version>
        <ProductType>1</ProductType>
        <osEntry osId="17" name="Windows 10 32-bit">
          <OSArchitecture>32-bit</OSArchitecture>
        </osEntry>
        <osEntry osId="18" name="Windows 10 64-bit">
          <OSArchitecture>64-bit</OSArchitecture>
        </osEntry>
      </osEntry>
      <osEntry osId="10" name="Windows Server 2008">
        <Version>6.0.*</Version>
        <ProductType>3</ProductType>
        <osEntry osId="11" name="Windows Server 2008 32-bit">
          <OSArchitecture>32-bit</OSArchitecture>
        </osEntry>
        <osEntry osId="12" name="Windows Server 2008 64-bit">
          <OSArchitecture>64-bit</OSArchitecture>
        </osEntry>
      </osEntry>
      <osEntry osId="7" name="Windows Server 2008 R2">
        <Version>6.1.*</Version>
        <ProductType>3</ProductType>
        <osEntry osId="8" name="Windows Server 2008 R2 32-bit">
          <OSArchitecture>32-bit</OSArchitecture>
        </osEntry>
        <osEntry osId="9" name="Windows Server 2008 R2 64-bit">
          <OSArchitecture>64-bit</OSArchitecture>
        </osEntry>
      </osEntry>
      <osEntry osId="19" name="Windows Server 2012">
        <Version>6.2.*</Version>
        <ProductType>3</ProductType>
        <osEntry osId="20" name="Windows Server 2012 32-bit">
          <OSArchitecture>32-bit</OSArchitecture>
        </osEntry>
        <osEntry osId="21" name="Windows Server 2012 64-bit">
          <OSArchitecture>64-bit</OSArchitecture>
        </osEntry>
      </osEntry>
      <osEntry osId="22" name="Windows Server 2012 R2">
        <Version>6.3.*</Version>
        <ProductType>3</ProductType>
        <osEntry osId="23" name="Windows Server 2012 R2 32-bit">
          <OSArchitecture>32-bit</OSArchitecture>
        </osEntry>
        <osEntry osId="24" name="Windows Server 2012 R2 64-bit">
          <OSArchitecture>64-bit</OSArchitecture>
        </osEntry>
      </osEntry>
      <osEntry osId="25" name="Windows Server 2016">
        <Version>10.0.*</Version>
        <ProductType>3</ProductType>
        <osEntry osId="26" name="Windows Server 2016 32-bit">
          <OSArchitecture>32-bit</OSArchitecture>
        </osEntry>
        <osEntry osId="27" name="Windows Server 2016 64-bit">
          <OSArchitecture>64-bit</OSArchitecture>
        </osEntry>
      </osEntry>
    </osCollection>
  </globalVarList>
  <group name="Modifications to Standard Image" description="Select &quot;Disable&quot; in the Options tab of any Task to bypass processing.  Disable this entire section in the same manner." Id="1">
    <group name="Apply HKCU Settings to Registry" description="#Apply HKCU Settings to Registry" Id="2">
      <step name="Load HKCU for editing" description="Open HKey Users (Default User Profile) for Editing" category="mandatory" defaultSelected="true" Id="3">
        <action optimization="true">
          <!--reg load "hku\temp" "%USERPROFILE%\..\Default User\NTUSER.DAT" -->
          <type>Registry</type>
          <command>LOAD</command>
          <params>
            <keyName>hku\temp</keyName>
            <fileName>%USERPROFILE%\..\Default User\NTUSER.DAT</fileName>
          </params>
        </action>
      </step>
      <step name="Default System Screen Saver" description="Disables default system screensaver" category="optional" defaultSelected="false" Id="4">
        <action>
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>hku\temp\Control Panel\Desktop</keyName>
            <valueName>ScreenSaveActive</valueName>
            <type>REG_DWORD</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="List view Watermark" description="Watermarks are disabled if ListviewWatermark evaluates as false. This setting has user-interface support through the System Properties in the Control Panel, as “Use a background image for each folder type“ on the Visual Effects tab of the Performance Options dialog. " category="optional" defaultSelected="false" runOnOs="25" Id="5">
        <action>
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>hku\temp\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced</keyName>
            <valueName>ListviewWatermark</valueName>
            <type>REG_DWORD</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="Individual Sync Settings" description="Disables Individual Sync Settings in Windows 10/2016.  sets (syncs) them for you on all your Windows 10 devices that you sign in to with your same Microsoft account" category="optional" defaultSelected="false" runOnOs="25" Id="6">
        <action>
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>hku\temp\Software\Microsoft\Windows\CurrentVersion\SettingSync\Groups\Accessibility</keyName>
            <valueName>Enabled</valueName>
            <type>REG_DWORD</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="Software Rendering Internet Explorer" description="Uses software rendering, instead of hardware rendering. Enable this option if no (V)GPU is present." category="optional" defaultSelected="false" Id="7">
        <action>
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>hku\temp\Software\Microsoft\Internet Explorer\Main</keyName>
            <valueName>UseSWRender</valueName>
            <type>REG_DWORD</type>
            <data>1</data>
          </params>
        </action>
      </step>
      <step name="Disable Hardware Acceleration Office14" description="Uses software rendering, instead of hardware rendering. Enable this option if no (V)GPU is present." category="optional" defaultSelected="false" Id="8">
        <action>
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>hku\temp\Software\Microsoft\Office\14.0\Gfx</keyName>
            <valueName>DisableHardware</valueName>
            <type>REG_DWORD</type>
            <data>1</data>
          </params>
        </action>
      </step>
      <step name="Disable Hardware Acceleration Office15" description="Uses software rendering, instead of hardware rendering. Enable this option if no (V)GPU is present." category="optional" defaultSelected="false" Id="9">
        <action>
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>hku\temp\Software\Microsoft\Office\15.0\Common\Graphics</keyName>
            <valueName>DisableHardwareAcceleration</valueName>
            <type>REG_DWORD</type>
            <data>1</data>
          </params>
        </action>
      </step>
      <step name="Disable Animations Office15" description="Uses software rendering, instead of hardware rendering. Enable this option if no (V)GPU is present." category="optional" defaultSelected="false" Id="10">
        <action>
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>hku\temp\Software\Microsoft\Office\15.0\Common\Graphics</keyName>
            <valueName>DisableAnimations</valueName>
            <type>REG_DWORD</type>
            <data>1</data>
          </params>
        </action>
      </step>
      <step name="Disable Hardware Acceleration Office16" description="Uses software rendering, instead of hardware rendering. Enable this option if no (V)GPU is present." category="optional" defaultSelected="false" Id="11">
        <action>
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>hku\temp\Software\Microsoft\Office\16.0\Common\Graphics</keyName>
            <valueName>DisableHardwareAcceleration</valueName>
            <type>REG_DWORD</type>
            <data>1</data>
          </params>
        </action>
      </step>
      <step name="Disable Animations Office16" description="Uses software rendering, instead of hardware rendering. Enable this option if no (V)GPU is present." category="optional" defaultSelected="false" Id="12">
        <action>
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>hku\temp\Software\Microsoft\Office\16.0\Common\Graphics</keyName>
            <valueName>DisableAnimations</valueName>
            <type>REG_DWORD</type>
            <data>1</data>
          </params>
        </action>
      </step>
      <step name="Advertising ID" description="Disable let apps use my advertising ID." category="recommended" defaultSelected="false" runOnOs="25" Id="13">
        <action>
          <!-- reg ADD "hku\temp\SOFTWARE\Microsoft\Windows\CurrentVersion\AdvertisingInfo" /v Enabled /t REG_DWORD /d 0 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>hku\temp\SOFTWARE\Microsoft\Windows\CurrentVersion\AdvertisingInfo</keyName>
            <valueName>Enabled</valueName>
            <type>REG_DWORD</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="Change Explorer Default View" description="Change explorer default view to Thic PC." category="recommended" defaultSelected="false" Id="14">
        <action>
          <!-- reg ADD "hku\temp\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v LaunchTo /t REG_DWORD /d 0x00000001 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>hku\temp\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced</keyName>
            <valueName>LaunchTo</valueName>
            <type>REG_DWORD</type>
            <data>1</data>
          </params>
        </action>
      </step>
      <step name="Cursor Blink" description="Disable cursor blink." category="recommended" defaultSelected="false" Id="15">
        <action>
          <!-- reg ADD "hku\temp\Control Panel\Desktop" /v CursorBlinkRate /t REG_DWORD /d 1 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>hku\temp\Control Panel\Desktop</keyName>
            <valueName>DisableCursorBlink</valueName>
            <type>REG_DWORD</type>
            <data>1</data>
          </params>
        </action>
      </step>
      <step name="Cursor Blink Rate" description="Not set cursor blink rate." category="recommended" defaultSelected="false" Id="16">
        <action>
          <!-- reg ADD "hku\temp\Control Panel\Desktop" /v CursorBlinkRate /t REG_SZ /d -1 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>hku\temp\Control Panel\Desktop</keyName>
            <valueName>CursorBlinkRate</valueName>
            <type>REG_SZ</type>
            <data>-1</data>
          </params>
        </action>
      </step>
      <step name="Default Printer" description="Set default printer to Print&amp;Share." category="optional" defaultSelected="false" runOnOs="25" Id="17">
        <action>
          <!-- reg ADD "hku\temp\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows" /v LegacyDefaultPrinterMode /t REG_DWORD /d 1 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>hku\temp\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows</keyName>
            <valueName>LegacyDefaultPrinterMode</valueName>
            <type>REG_DWORD</type>
            <data>1</data>
          </params>
        </action>
      </step>
      <step name="Devices Autoplay" description="Disable autoplay for all media and devices." category="optional" defaultSelected="false" Id="18">
        <action>
          <!-- reg ADD "hku\temp\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers" /v DisableAutoplay /t REG_DWORD /d 0x00000001 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>hku\temp\Software\Microsoft\Windows\CurrentVersion\Explorer\AutoplayHandlers</keyName>
            <valueName>DisableAutoplay</valueName>
            <type>REG_DWORD</type>
            <data>1</data>
          </params>
        </action>
      </step>
      <step name="Feedback" description="Disable Feedback." category="optional" defaultSelected="false" runOnOs="25" Id="19">
        <action>
          <!-- reg ADD "hku\temp\SOFTWARE\Microsoft\Siuf\Rules" /v NumberOfSIUFInPeriod /t REG_DWORD /d 0x00000000 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>hku\temp\SOFTWARE\Microsoft\Siuf\Rules</keyName>
            <valueName>NumberOfSIUFInPeriod</valueName>
            <type>REG_DWORD</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="Lock Screen Title Migrate" description="Disable lock screen title migrate." category="optional" defaultSelected="false" runOnOs="25" Id="20">
        <action>
          <!-- reg ADD "hku\temp\SOFTWARE\Microsoft\Windows\CurrentVersion\Lock Screen" /v TileMigrated /t REG_DWORD /d 0 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>hku\temp\SOFTWARE\Microsoft\Windows\CurrentVersion\Lock Screen</keyName>
            <valueName>TileMigrated</valueName>
            <type>REG_DWORD</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="Menu Show Delay" description="Disable menu show delay." category="recommended" defaultSelected="false" Id="21">
        <action>
          <!-- reg ADD "hku\temp\ControlPanel\Desktop" /v MenuShowDelay /t REG_DWORD /d 0 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>hku\temp\ControlPanel\Desktop</keyName>
            <valueName>MenuShowDelay</valueName>
            <type>REG_DWORD</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="Most used apps" description="Disable show most used apps at start menu." category="recommended" defaultSelected="false" Id="22">
        <action>
          <!-- reg ADD "hku\temp\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v Start_TrackProgs /t REG_DWORD /d 0x00000000 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>hku\temp\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced</keyName>
            <valueName>Start_TrackProgs</valueName>
            <type>REG_DWORD</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="On Screen Keyboard - Key Stroke Delay" description="Disable key stroke delay." category="recommended" defaultSelected="false" Id="23">
        <action>
          <!-- reg ADD "hku\temp\SOFTWARE\Microsoft\Osk" /v KeystrokeDelay /t REG_DWORD /d 0 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>hku\temp\SOFTWARE\Microsoft\Osk</keyName>
            <valueName>KeystrokeDelay</valueName>
            <type>REG_DWORD</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="On Screen Keyboard - First Repeat Delay" description="Disable first repeat delay." category="recommended" defaultSelected="false" runOnOs="25" Id="24">
        <action>
          <!-- reg ADD "hku\temp\SOFTWARE\Microsoft\Osk" /v FirstRepeatDelay /t REG_DWORD /d 0 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>hku\temp\SOFTWARE\Microsoft\Osk</keyName>
            <valueName>FirstRepeatDelay</valueName>
            <type>REG_DWORD</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="On Screen Keyboard - Next Repeat Delay" description="Disable next repeat delay." category="recommended" defaultSelected="false" runOnOs="25" Id="25">
        <action>
          <!-- reg ADD "hku\temp\SOFTWARE\Microsoft\Osk" /v NextRepeatDelay /t REG_DWORD /d 0 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>hku\temp\SOFTWARE\Microsoft\Osk</keyName>
            <valueName>NextRepeatDelay</valueName>
            <type>REG_DWORD</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="Pocket Outlook Object Module(POOM) - Work Result" description="WorkResult." category="recommended" defaultSelected="false" runOnOs="25" Id="26">
        <action>
          <!-- reg ADD "hku\temp\SOFTWARE\Microsoft\Poom\Indexing" /v WorkResult /t REG_DWORD /d 0 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>hku\temp\SOFTWARE\Microsoft\Poom\Indexing</keyName>
            <valueName>WorkResult</valueName>
            <type>REG_DWORD</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="Pocket Outlook Object Module(POOM) - Run Cookie" description="RunCookie." category="recommended" defaultSelected="false" runOnOs="25" Id="27">
        <action>
          <!-- reg ADD "hku\temp\SOFTWARE\Microsoft\Poom\Indexing" /v RunCookie /t REG_DWORD /d 1 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>hku\temp\SOFTWARE\Microsoft\Poom\Indexing</keyName>
            <valueName>RunCookie</valueName>
            <type>REG_DWORD</type>
            <data>1</data>
          </params>
        </action>
      </step>
      <step name="Preview Desktop" description="Disable Preview Desktop." category="recommended" defaultSelected="false" Id="28">
        <action>
          <!-- reg ADD "hku\temp\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v DisablePreviewDesktop /t REG_DWORD /d 1 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>hku\temp\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced</keyName>
            <valueName>DisablePreviewDesktop</valueName>
            <type>REG_DWORD</type>
            <data>1</data>
          </params>
        </action>
      </step>
      <step name="Recent Items" description="Disable show recent items at start menu." category="recommended" defaultSelected="false" Id="29">
        <action>
          <!-- reg ADD "hku\temp\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v Start_TrackDocs /t REG_DWORD /d 0x00000000 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>hku\temp\Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced</keyName>
            <valueName>Start_TrackDocs</valueName>
            <type>REG_DWORD</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="Reduce Menu Show Delay" description="Delay Show the Reduce Menu" category="recommended" defaultSelected="false" Id="30">
        <action>
          <!-- reg Add "hku\temp\Control Panel\Desktop" /v MenuShowDelay /t REG_DWORD /d 120 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>hku\temp\Control Panel\Desktop</keyName>
            <valueName>MenuShowDelay</valueName>
            <type>REG_DWORD</type>
            <data>120</data>
          </params>
        </action>
      </step>
      <step name="RSS Feeds - Disable" description="Peform this task to disable RSS feed capability and potentially improve performance and reduce requirements for disk space growth related to this service." category="mandatory" defaultSelected="false" Id="31">
        <action>
          <!-- reg ADD "hku\temp\Software\Microsoft\Feeds" /v SyncStatus /t REG_DWORD /d 0x0 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>hku\temp\Software\Microsoft\Feeds</keyName>
            <valueName>SyncStatus</valueName>
            <type>REG_DWORD</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="Search Engine - Disable" description="Disable Bing Search." category="recommended" defaultSelected="false" Id="32">
        <action>
          <!-- reg ADD "hku\temp\SOFTWARE\Microsoft\Windows\CurrentVersion\Search" /v BingSearchEnabled /t REG_DWORD /d 0x00000000 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>hku\temp\SOFTWARE\Microsoft\Windows\CurrentVersion\Search</keyName>
            <valueName>BingSearchEnabled</valueName>
            <type>REG_DWORD</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="Set Default Wallpaper" description="Set wallpaper to a &quot;non existing&quot; file to disable the end users ability to set a wallpaper." category="recommended" defaultSelected="false" Id="33">
        <action>
          <!-- reg ADD "hku\temp\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v Wallpaper /t REG_SZ /d " " /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>hku\temp\Software\Microsoft\Windows\CurrentVersion\Policies\System</keyName>
            <valueName>Wallpaper</valueName>
            <type>REG_SZ</type>
            <data>
            </data>
          </params>
        </action>
      </step>
      <step name="Show me tips about Windows" description="Turn off show me tips about windows." category="recommended" defaultSelected="false" runOnOs="25" Id="34">
        <action>
          <!-- reg ADD "hku\temp\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v SoftLandingEnabled /t REG_DWORD /d 0 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>hku\temp\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager</keyName>
            <valueName>SoftLandingEnabled</valueName>
            <type>REG_SZ</type>
            <data>
            </data>
          </params>
        </action>
      </step>
      <step name="SmartScreen " description="Disable SmartScreen Filter for Store Apps" category="recommended" defaultSelected="false" runOnOs="25" Id="35">
        <action>
          <!-- reg ADD "hku\temp\SOFTWARE\Microsoft\Windows\CurrentVersion\AppHost" /v EnableWebContentEvaluation /t REG_DWORD /d 0 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>hku\temp\SOFTWARE\Microsoft\Windows\CurrentVersion\AppHost</keyName>
            <valueName>EnableWebContentEvaluation</valueName>
            <type>REG_DWORD</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="Speech,inking,&amp;typing setting - Implicit Ink Collection" description="Restrict Implicit Ink Collection" category="recommended" defaultSelected="false" runOnOs="25" Id="36">
        <action>
          <!-- reg Add "hku\temp\SOFTWARE\Microsoft\InputPersonalization" /v RestrictImplicitInkCollection /t REG_DWORD /d 1 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>hku\temp\SOFTWARE\Microsoft\InputPersonalization</keyName>
            <valueName>RestrictImplicitInkCollection</valueName>
            <type>REG_DWORD</type>
            <data>1</data>
          </params>
        </action>
      </step>
      <step name="Speech,inking,&amp;typing setting - Implicit Text Collection" description="Restrict Implicit Text Collection." category="recommended" defaultSelected="false" runOnOs="25" Id="37">
        <action>
          <!-- reg Add "hku\temp\SOFTWARE\Microsoft\InputPersonalization" /v RestrictImplicitTextCollection /t REG_DWORD /d 1 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>hku\temp\SOFTWARE\Microsoft\InputPersonalization</keyName>
            <valueName>RestrictImplicitTextCollection</valueName>
            <type>REG_DWORD</type>
            <data>1</data>
          </params>
        </action>
      </step>
      <step name="Speech,inking,&amp;typing setting - Contacts" description="Do not scan contact informations." category="recommended" defaultSelected="false" runOnOs="25" Id="38">
        <action>
          <!-- reg Add "hku\temp\SOFTWARE\Microsoft\InputPersonalization\TrainedDataStore" /v HarvestContacts /t REG_DWORD /d 0 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>hku\temp\SOFTWARE\Microsoft\InputPersonalization\TrainedDataStore</keyName>
            <valueName>HarvestContacts</valueName>
            <type>REG_DWORD</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="Speech,inking,&amp;typing setting - Privacy Policy" description="Not accepted privacy policy." category="recommended" defaultSelected="false" runOnOs="25" Id="39">
        <action>
          <!-- reg Add "hku\temp\SOFTWARE\Microsoft\Personalization\Settings" /v AcceptedPrivacyPolicy /t REG_DWORD /d 0 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>hku\temp\SOFTWARE\Microsoft\Personalization\Settings</keyName>
            <valueName>AcceptedPrivacyPolicy</valueName>
            <type>REG_DWORD</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="Start Menu App Suggestions" description="Turn off start menu app suggestions." category="recommended" defaultSelected="false" runOnOs="25" Id="40">
        <action>
          <!-- reg Add "hku\temp\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager" /v SystemPaneSuggestionsEnabled /t REG_DWORD /d 0 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>hku\temp\SOFTWARE\Microsoft\Windows\CurrentVersion\ContentDeliveryManager</keyName>
            <valueName>SystemPaneSuggestionsEnabled</valueName>
            <type>REG_DWORD</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="Sync Language" description="Disable sync language" category="recommended" defaultSelected="false" runOnOs="25" Id="41">
        <action>
          <!-- reg Add "hku\temp\SOFTWARE\Microsoft\Windows\CurrentVersion\SettingSync\Groups\Language" /v Enabled /t REG_DWORD /d 0 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>hku\temp\SOFTWARE\Microsoft\Windows\CurrentVersion\SettingSync\Groups\Language</keyName>
            <valueName>Enabled</valueName>
            <type>REG_DWORD</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="Tablet Mode Auto Correction" description="Disable tablet mode auto correction." category="recommended" defaultSelected="false" runOnOs="25" Id="42">
        <action>
          <!-- reg ADD "hku\temp\SOFTWARE\Microsoft\TabletTip\1.7" /v EnableAutocorrection /t REG_DWORD /d 0 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>hku\temp\SOFTWARE\Microsoft\TabletTip\1.7</keyName>
            <valueName>EnableAutocorrection</valueName>
            <type>REG_DWORD</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="Tablet Mode Spell Checking" description="Disable tablet mode spell checking." category="recommended" defaultSelected="false" runOnOs="25" Id="43">
        <action>
          <!-- reg ADD "hku\temp\SOFTWARE\Microsoft\TabletTip\1.7" /v EnableSpellchecking /t REG_DWORD /d 0 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>hku\temp\SOFTWARE\Microsoft\TabletTip\1.7</keyName>
            <valueName>EnableSpellchecking</valueName>
            <type>REG_DWORD</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="Tablet Mode Taskbar Icons" description="Show app icons on taskbar in tablet mode." category="recommended" defaultSelected="false" runOnOs="25" Id="44">
        <action>
          <!-- reg ADD "hku\temp\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v TaskbarAppsVisibleInTabletMode /t REG_DWORD /d 1 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>hku\temp\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced</keyName>
            <valueName>TaskbarAppsVisibleInTabletMode</valueName>
            <type>REG_DWORD</type>
            <data>1</data>
          </params>
        </action>
      </step>
      <step name="Taskbar buttons" description="Taskbar buttons never combine." category="optional" defaultSelected="false" runOnOs="25" Id="45">
        <action>
          <!-- reg ADD "hku\temp\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v TaskbarGlomLevel /t REG_DWORD /d 2 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>hku\temp\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced</keyName>
            <valueName>TaskbarGlomLevel</valueName>
            <type>REG_DWORD</type>
            <data>2</data>
          </params>
        </action>
      </step>
      <step name="Taskbar Navigation" description="Not replace Command Prompt with Windows PowerShell in the menu when I press Windows key+X" category="optional" defaultSelected="false" runOnOs="25" Id="46">
        <action>
          <!-- reg ADD "hku\temp\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v DontUsePowerShellOnWinX /t REG_DWORD /d 1 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>hku\temp\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced</keyName>
            <valueName>DontUsePowerShellOnWinX</valueName>
            <type>REG_DWORD</type>
            <data>1</data>
          </params>
        </action>
      </step>
      <step name="Taskbar Search Box" description="Hiden taskbar search box." category="optional" defaultSelected="false" runOnOs="25" Id="47">
        <action>
          <!-- reg ADD "hku\temp\Software\Microsoft\Windows\CurrentVersion\Search" /v SearchboxTaskbarMode /t REG_DWORD /d 0x0 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>hku\temp\Software\Microsoft\Windows\CurrentVersion\Search</keyName>
            <valueName>SearchboxTaskbarMode</valueName>
            <type>REG_DWORD</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="Taskbar Size" description="Lock the Size and Position of the Taskbar." category="optional" defaultSelected="false" runOnOs="25" Id="48">
        <action>
          <!-- reg ADD "hku\temp\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v TaskbarSizeMove /t REG_DWORD /d 0x0 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>hku\temp\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced</keyName>
            <valueName>TaskbarSizeMove</valueName>
            <type>REG_DWORD</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="Taskbar Small Icons" description="Use small icons on the taskbar." category="optional" defaultSelected="false" runOnOs="25" Id="49">
        <action>
          <!-- reg ADD "hku\temp\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v TaskbarSmallIcons /t REG_DWORD /d 1 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>hku\temp\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced</keyName>
            <valueName>TaskbarSmallIcons</valueName>
            <type>REG_DWORD</type>
            <data>1</data>
          </params>
        </action>
      </step>
      <step name="Taskbar Task View Button" description="Hide task view button on taskbar." category="optional" defaultSelected="false" runOnOs="25" Id="50">
        <action>
          <!-- reg ADD "hku\temp\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v ShowTaskViewButton /t REG_DWORD /d 0 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>hku\temp\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced</keyName>
            <valueName>ShowTaskViewButton</valueName>
            <type>REG_DWORD</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="Temporary Internet Files to Non Persistent" description="Purge cache for IE on every close of IE.  Non persistence" category="mandatory" defaultSelected="false" Id="51">
        <action>
          <!-- reg ADD "hku\temp\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Cache" /v Persistent /t REG_DWORD /d 0x0 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>hku\temp\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Cache</keyName>
            <valueName>Persistent</valueName>
            <type>REG_DWORD</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="Transparency Effects" description="Remove transparency effects." category="optional" defaultSelected="false" runOnOs="25" Id="52">
        <action>
          <!-- reg ADD "hku\temp\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize" /v EnableTransparency /t REG_DWORD /d 0x00000000 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>hku\temp\SOFTWARE\Microsoft\Windows\CurrentVersion\Themes\Personalize</keyName>
            <valueName>EnableTransparency</valueName>
            <type>REG_DWORD</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="Unified Store" description="Data Migration." category="recommended" defaultSelected="false" runOnOs="25" Id="53">
        <action>
          <!-- reg ADD "hku\temp\SOFTWARE\Microsoft\Unified Store" /v DataMigration /t REG_DWORD /d 1 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>hku\temp\SOFTWARE\Microsoft\Unified Store</keyName>
            <valueName>DataMigration</valueName>
            <type>REG_DWORD</type>
            <data>1</data>
          </params>
        </action>
      </step>
      <step name="Unistore" description="Store Version." category="recommended" defaultSelected="false" runOnOs="25" Id="54">
        <action>
          <!-- reg ADD "hku\temp\SOFTWARE\Microsoft\Unistore" /v StoreVersion /t REG_DWORD /d 18 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>hku\temp\SOFTWARE\Microsoft\Unistore</keyName>
            <valueName>StoreVersion</valueName>
            <type>REG_DWORD</type>
            <data>18</data>
          </params>
        </action>
      </step>
      <step name="USB" description="Disable notify usb errors." category="recommended" defaultSelected="false" runOnOs="25" Id="55">
        <action>
          <!-- reg ADD "hku\temp\SOFTWARE\Microsoft\Shell\USB" /v NotifyOnUsbErrors /t REG_DWORD /d 0 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>hku\temp\SOFTWARE\Microsoft\Shell\USB</keyName>
            <valueName>NotifyOnUsbErrors</valueName>
            <type>REG_DWORD</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="Visual Effects - Adjust for best performance" description="Set Windows Visual Effects to Optimized for best performance." category="optional" defaultSelected="false" Id="56">
        <action>
          <!-- reg ADD "hku\temp\Software\Microsoft\Windows\CurrentVersion\Explorer\VisualEffects" /v VisualFXSetting /t REG_DWORD /d 0x2 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>hku\temp\Software\Microsoft\Windows\CurrentVersion\Explorer\VisualEffects</keyName>
            <valueName>VisualFXSetting</valueName>
            <type>REG_DWORD</type>
            <data>2</data>
          </params>
        </action>
      </step>
      <step name="Visual Effects - Animate windows when minimizing and maxmizing" description="Disable Animate windows when minimizing and maxmizing Visual Effect" category="optional" defaultSelected="false" Id="57">
        <action>
          <!-- reg add "hku\temp\Control Panel\Desktop\WindowMetrics" /v MinAnimate /t REG_SZ /d 0x00000000 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>hku\temp\Control Panel\Desktop\WindowMetrics</keyName>
            <valueName>MinAnimate</valueName>
            <type>REG_SZ</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="Visual Effects - Animations in the taskbar" description="Disable Animations in the taskbar Visual Effect" category="optional" defaultSelected="false" Id="58">
        <action>
          <!-- reg add "hku\temp\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v TaskbarAnimations /t REG_DWORD /d 0x00000000 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>hku\temp\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced</keyName>
            <valueName>TaskbarAnimations</valueName>
            <type>REG_DWORD</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="Visual Effects - Enable Peek" description="Disable Enable Peek Visual Effect" category="optional" defaultSelected="false" Id="59">
        <action>
          <!-- reg add "hku\temp\SOFTWARE\Microsoft\Windows\DWM" /v EnableAeroPeek /t REG_DWORD /d 0x00000000 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>hku\temp\SOFTWARE\Microsoft\Windows\DWM</keyName>
            <valueName>EnableAeroPeek</valueName>
            <type>REG_DWORD</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="Visual Effects - Play animations in windows" description="Turn off Play animations in windows." category="optional" defaultSelected="false" Id="60">
        <action>
          <!-- reg ADD "hku\temp\Control Panel\Desktop" /v UserPreferencesMask /t REG_BINARY /d 9012038010000000 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>hku\temp\Control Panel\Desktop</keyName>
            <valueName>UserPreferencesMask</valueName>
            <type>REG_BINARY</type>
            <data>9012038010000000</data>
          </params>
        </action>
      </step>
      <step name="Visual Effects - Save taskbar thumbnail previews" description="Disable Save taskbar thumbnail previews Visual Effect" category="optional" defaultSelected="false" Id="61">
        <action>
          <!-- reg add "hku\temp\SOFTWARE\Microsoft\Windows\DWM" /v AlwaysHibernateThumbnails /t REG_DWORD /d 0x00000000 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>hku\temp\SOFTWARE\Microsoft\Windows\DWM</keyName>
            <valueName>AlwaysHibernateThumbnails</valueName>
            <type>REG_DWORD</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="Visual Effects - Show translucent selection rectangle" description="Disable Show translucent selection rectangle Visual Effect" category="optional" defaultSelected="false" Id="62">
        <action>
          <!-- reg add "hku\temp\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v ListviewAlphaSelect /t REG_DWORD /d 0x00000000 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>hku\temp\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced</keyName>
            <valueName>ListviewAlphaSelect</valueName>
            <type>REG_DWORD</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="Visual Effects - Show window contents while dragging" description="Disable Show window contents while dragging Visual Effect" category="optional" defaultSelected="false" Id="63">
        <action>
          <!-- reg add "hku\temp\Control Panel\Desktop" /v DragFullWindows /t REG_SZ /d 0x00000000 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>hku\temp\Control Panel\Desktop</keyName>
            <valueName>DragFullWindows</valueName>
            <type>REG_SZ</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="Visual Effects - Smooth edges of screen fonts" description="Disable Smooth edges of screen fonts Visual Effect" category="optional" defaultSelected="false" Id="64">
        <action>
          <!-- reg add "hku\temp\Control Panel\Desktop" /v FontSmoothing /t REG_SZ /d 0x00000000 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>hku\temp\Control Panel\Desktop</keyName>
            <valueName>FontSmoothing</valueName>
            <type>REG_SZ</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="Visual Effects - Use drop shadows for icon labels on the desktop" description="Disable Use drop shadows for icon labels on the desktop Visual Effect" category="optional" defaultSelected="false" Id="65">
        <action>
          <!-- reg add "hku\temp\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v ListviewShadow /t REG_DWORD /d 0x00000000 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>hku\temp\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced</keyName>
            <valueName>ListviewShadow</valueName>
            <type>REG_DWORD</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="Unload HKCU for editing" description="Very Important Step!  Need to close the ntuser.dat file to save changes." category="mandatory" defaultSelected="true" Id="66">
        <action>
          <!-- reg unload "hku\temp" -->
          <type>Registry</type>
          <command>UNLOAD</command>
          <params>
            <keyName>hku\temp</keyName>
          </params>
        </action>
      </step>
    </group>
    <group name="Apply HKLM Settings" description="Apply HKLM Settings" Id="67">
      <step name="Windows Delivery Optimization Updates" description="Disable using your machine for sending windows updates to others" category="optional" defaultSelected="false" runOnOs="25" Id="68">
        <action>
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\DeliveryOptimization\Config</keyName>
            <valueName>DODownloadMode</valueName>
            <type>REG_DWORD</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="Restrict Windows Delivery Optimization Updates" description="Disable using your machine for sending windows updates to others" category="optional" defaultSelected="false" runOnOs="25" Id="69">
        <action>
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\DeliveryOptimization\Config</keyName>
            <valueName>DownloadModeRestricted</valueName>
            <type>REG_DWORD</type>
            <data>1</data>
          </params>
        </action>
      </step>
      <step name="PopUp Error Mode" description="Set PopUp Error Mode to &quot;Neither&quot; " category="optional" defaultSelected="false" Id="70">
        <action>
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>HKLM\SYSTEM\CurrentControlSet\Control\Windows</keyName>
            <valueName>ErrorMode</valueName>
            <type>REG_DWORD</type>
            <data>2</data>
          </params>
        </action>
      </step>
      <step name="Paging The Executive" description="Disable paging the executive" category="optional" defaultSelected="false" Id="71">
        <action>
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management</keyName>
            <valueName>DisablePagingExecutive</valueName>
            <type>REG_DWORD</type>
            <data>1</data>
          </params>
        </action>
      </step>
      <step name="Clear Paging File" description="Clears the paging file during shutdown" category="optional" defaultSelected="false" Id="72">
        <action>
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management</keyName>
            <valueName>ClearPageFileAtShutdown</valueName>
            <type>REG_DWORD</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="Superfetch" description="Disables Superfetch, if the Services is stopped and disabled" category="optional" defaultSelected="false" Id="73">
        <action>
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management\PrefetchParameters</keyName>
            <valueName>EnableSuperfetch</valueName>
            <type>REG_DWORD</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="Prefetcher" description="Disables Memory Compression, if the Memory Diagnostics SchTsks are disabled and Superfetch Services is stopped and disabled" category="optional" defaultSelected="false" Id="74">
        <action>
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management\PrefetchParameters</keyName>
            <valueName>EnablePrefetcher</valueName>
            <type>REG_DWORD</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="Action Center" description="Disable action center completely." category="recommended" defaultSelected="false" Id="75">
        <action>
          <!-- reg ADD "HKLM\Software\Policies\Microsoft\Windows\Explorer" /v DisableNotificationCenter /t REG_DWORD /d 0x00000001 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>HKLM\Software\Policies\Microsoft\Windows\Explorer</keyName>
            <valueName>DisableNotificationCenter</valueName>
            <type>REG_DWORD</type>
            <data>1</data>
          </params>
        </action>
      </step>
      <step name="Background Image" description="Disable Logon BackgroundImage" category="recommended" defaultSelected="false" runOnOs="25" Id="76">
        <action>
          <!-- reg ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System" /v DisableLogonBackgroundImage  /t REG_DWORD /d 0x00000001 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System</keyName>
            <valueName>DisableLogonBackgroundImage</valueName>
            <type>REG_DWORD</type>
            <data>1</data>
          </params>
        </action>
      </step>
      <step name="Background Layout Service - Disable" description="Disable Background Layout Service" category="recommended" defaultSelected="false" Id="77">
        <action>
          <!-- reg ADD "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OptimalLayout" /v EnableAutoLayout /t reg_dword /d 0 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\OptimalLayout</keyName>
            <valueName>EnableAutoLayout</valueName>
            <type>REG_DWORD</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="Boot Optimize Function" description="Disable windows automatically optimizes the file location for boot optimization." category="recommended" defaultSelected="false" runOnOs="25" Id="78">
        <action>
          <!-- reg ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Dfrg\BootOptimizeFunction" /v Enable /t reg_sz /d N /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Dfrg\BootOptimizeFunction</keyName>
            <valueName>Enable</valueName>
            <type>REG_SZ</type>
            <data>N</data>
          </params>
        </action>
      </step>
      <step name="CIFS Change Notifications" description="Disable CIFS Change Notifications" category="recommended" defaultSelected="false" Id="79">
        <action>
          <!-- reg ADD "HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v NoRemoteRecursiveEvents /t Reg_dword /d 1 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer</keyName>
            <valueName>NoRemoteRecursiveEvents</valueName>
            <type>REG_DWORD</type>
            <data>1</data>
          </params>
        </action>
      </step>
      <step name="Computer Maintenance" description="Turn off Computer Maintenance" category="recommended" defaultSelected="false" Id="80">
        <action>
          <!-- reg ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\ScheduledDiagnostics" /v EnabledExecution /t REG_DWORD /d 0x0 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\ScheduledDiagnostics</keyName>
            <valueName>EnabledExecution</valueName>
            <type>REG_DWORD</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="Cortana" description="Disable Cortana" category="recommended" defaultSelected="false" runOnOs="25" Id="81">
        <action>
          <!-- reg ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /v AllowCortana /t REG_DWORD /d 0x00000000 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search</keyName>
            <valueName>AllowCortana</valueName>
            <type>REG_DWORD</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="Crash Control - Automatically Reboot - Enable" description="Enable Automatically Reboot for the Crash Control" category="recommended" defaultSelected="false" Id="82">
        <action>
          <!-- reg ADD "HKLM\SYSTEM\CurrentControlSet\Control\CrashControl" /v AutoReboot /t REG_DWORD /d 0x1 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>HKLM\SYSTEM\CurrentControlSet\Control\CrashControl</keyName>
            <valueName>AutoReboot</valueName>
            <type>REG_DWORD</type>
            <data>1</data>
          </params>
        </action>
      </step>
      <step name="Crash Control - Sending alert - Disable" description="Disable sending alert for the Crash Control" category="recommended" defaultSelected="false" Id="83">
        <action>
          <!-- reg ADD "HKLM\SYSTEM\CurrentControlSet\Control\CrashControl" /v SendAlert /t REG_DWORD /d 0x0 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>HKLM\SYSTEM\CurrentControlSet\Control\CrashControl</keyName>
            <valueName>SendAlert</valueName>
            <type>REG_DWORD</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="Crash Control - Writing  event to the system log - Disable" description="Disable writing  event to the system log for the Crash Control" category="recommended" defaultSelected="false" Id="84">
        <action>
          <!-- reg ADD "HKLM\SYSTEM\CurrentControlSet\Control\CrashControl" /v LogEvent /t REG_DWORD /d 0x0 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>HKLM\SYSTEM\CurrentControlSet\Control\CrashControl</keyName>
            <valueName>LogEvent</valueName>
            <type>REG_DWORD</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="Creation of Crash Dump - Disable" description="Removes the creation of a Crash Dump file" category="optional" defaultSelected="false" Id="85">
        <action>
          <!-- reg ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CrashControl" /v CrashDumpEnabled /t REG_DWORD /d 0x0 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\CrashControl</keyName>
            <valueName>CrashDumpEnabled</valueName>
            <type>REG_DWORD</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="Customer Experience Improvement Program - Disable" description="Disable customer experience improvement program" category="recommended" defaultSelected="false" runOnOs="25" Id="86">
        <action>
          <!-- Reg ADD "HKLM\Software\Microsoft\SQMClient\Windows" /v CEIPEnable /t REG_DWORD /d 0 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>HKLM\Software\Microsoft\SQMClient\Windows</keyName>
            <valueName>CEIPEnable</valueName>
            <type>REG_DWORD</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="Disk Timeout Value" description="How long the OS will wait for a disk write or read to take place on the SAN without throwing an error" category="optional" defaultSelected="false" Id="87">
        <action>
          <!-- reg ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Disk" /v TimeOutValue /t REG_DWORD /d 200 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Disk</keyName>
            <valueName>TimeOutValue</valueName>
            <type>REG_DWORD</type>
            <data>200</data>
          </params>
        </action>
      </step>
      <step name="First Login Animation" description="Disable first login animation." category="optional" defaultSelected="false" Id="88">
        <action>
          <!-- reg ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v EnableFirstLogonAnimation  /t REG_DWORD /d 0 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System</keyName>
            <valueName>EnableFirstLogonAnimation</valueName>
            <type>REG_DWORD</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="IE Wizard - Disable" description="Removes the customization wizard upon first launch of Internet Explorer" category="recommended" defaultSelected="false" Id="89">
        <action>
          <!-- reg ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Main" /v DisableFirstRunCustomize /t REG_DWORD /d 0x1 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Main</keyName>
            <valueName>DisableFirstRunCustomize</valueName>
            <type>REG_DWORD</type>
            <data>1</data>
          </params>
        </action>
      </step>
      <step name="Increase Service Startup Timeout" description="Allows up to 120 seconds before timing out waiting for a service" category="recommended" defaultSelected="false" Id="90">
        <action>
          <!-- reg Add "HKLM\System\CurrentControlSet\Control" /v ServicesPipeTimeout /t REG_DWORD /d 120000 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>HKLM\System\CurrentControlSet\Control</keyName>
            <valueName>ServicesPipeTimeout</valueName>
            <type>REG_DWORD</type>
            <data>120000</data>
          </params>
        </action>
      </step>
      <step name="Location based info in searches" description="Disable location based info in searches" category="recommended" defaultSelected="false" runOnOs="25" Id="92">
        <action>
          <!-- reg ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /v AllowSearchToUseLocation /t REG_DWORD /d 0x00000000 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search</keyName>
            <valueName>AllowSearchToUseLocation</valueName>
            <type>REG_DWORD</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="Lock Screen" description="Disable new lock screen" category="optional" defaultSelected="false" runOnOs="25" Id="93">
        <action>
          <!-- reg ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Personalization" /v NoLockScreen /t REG_DWORD /d 0x00000001 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Personalization</keyName>
            <valueName>NoLockScreen</valueName>
            <type>REG_DWORD</type>
            <data>1</data>
          </params>
        </action>
      </step>
      <step name="Network Location" description="Creates a blank key that disables the &quot;Choose default network location&quot; prompt." category="recommended" defaultSelected="false" Id="94">
        <action>
          <!-- reg ADD "HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Network\NewNetworkWindowOff" /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Network\NewNetworkWindowOff</keyName>
          </params>
        </action>
      </step>
      <step name="Notification Center" description="Disable Notification Center" category="recommended" defaultSelected="false" runOnOs="25" Id="95">
        <action>
          <!-- reg ADD "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ImmersiveShell" /v UseActionCenterExperience /t REG_DWORD /d 0x00000000 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\ImmersiveShell</keyName>
            <valueName>UseActionCenterExperience</valueName>
            <type>REG_DWORD</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="Previous Versions Capability" description="Remove previous versions capability" category="optional" defaultSelected="false" Id="96">
        <action>
          <!-- reg ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer" /v NoPreviousVersionsPage /t REG_DWORD /d 0x00000001 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer</keyName>
            <valueName>NoPreviousVersionsPage</valueName>
            <type>REG_DWORD</type>
            <data>1</data>
          </params>
        </action>
      </step>
      <step name="Searching PC" description="Disable search web when searching pc" category="recommended" defaultSelected="false" runOnOs="25" Id="97">
        <action>
          <!-- reg ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /v ConnectedSearchUseWeb /t REG_DWORD /d 0x00000000 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search</keyName>
            <valueName>ConnectedSearchUseWeb</valueName>
            <type>REG_DWORD</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="Send Settings To Cloud" description="Disable send settings to cloud" category="recommended" defaultSelected="false" runOnOs="25" Id="98">
        <action>
          <!-- reg ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\SettingSync" /v DisableSettingSync /t REG_DWORD /d 0x00000002 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\SettingSync</keyName>
            <valueName>DisableSettingSync</valueName>
            <type>REG_DWORD</type>
            <data>2</data>
          </params>
        </action>
      </step>
      <step name="Send Windows Updates" description="Disable using your machine for sending windows updates to others" category="recommended" defaultSelected="false" runOnOs="25" Id="99">
        <action>
          <!-- reg ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\DeliveryOptimization\Config" /v DownloadMode /t REG_DWORD /d 0x00000000 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\DeliveryOptimization\Config</keyName>
            <valueName>DownloadMode</valueName>
            <type>REG_DWORD</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="Sync Files To OneDrive" description="Disable synchronizing files to onedrive" category="recommended" defaultSelected="false" runOnOs="25" Id="100">
        <action>
          <!-- reg ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\OneDrive" /v DisableFileSyncNGSC /t REG_DWORD /d 0x00000001 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\OneDrive</keyName>
            <valueName>DisableFileSyncNGSC</valueName>
            <type>REG_DWORD</type>
            <data>1</data>
          </params>
        </action>
      </step>
      <step name="Synchronizing Files" description="Disable synchronizing files to cloud" category="recommended" defaultSelected="false" runOnOs="25" Id="101">
        <action>
          <!-- reg ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\SettingSync" /v DisableSettingSyncUserOverride /t REG_DWORD /d 0x00000001 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>HKEY_LOCAL_MACHINE\SOFTWARE\SOFTWARE\Policies\Microsoft\Windows\SettingSync</keyName>
            <valueName>DisableSettingSyncUserOverride</valueName>
            <type>REG_DWORD</type>
            <data>1</data>
          </params>
        </action>
      </step>
      <step name="TCP/IP Task Offload - Disable" description="Disable TCP/IP Task Offload" category="recommended" defaultSelected="false" Id="102">
        <action>
          <!-- Reg ADD "HKLM\SYSTEM\CurrentControlSet\Services\TCPIP\Parameters" /v DisableTaskOffload /t REG_DWORD /d 1 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>HKLM\SYSTEM\CurrentControlSet\Services\TCPIP\Parameters</keyName>
            <valueName>DisableTaskOffload</valueName>
            <type>REG_DWORD</type>
            <data>1</data>
          </params>
        </action>
      </step>
      <step name="Telemetry Collection" description="Disable Telemetry Collection" category="recommended" defaultSelected="false" runOnOs="25" Id="103">
        <action>
          <!-- reg ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection" /v AllowTelemetry /t REG_DWORD /d 0x00000000 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\DataCollection</keyName>
            <valueName>AllowTelemetry</valueName>
            <type>REG_DWORD</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="Turn off hard disk after" description="Remove turn off hard disk after" category="recommended" defaultSelected="false" Id="104">
        <action>
          <!-- reg ADD "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Power\PowerSettings\0012ee47-9041-4b5d-9b77-535fba8b1442\6738e2c4-e8a5-4a42-b16a-e040e769756e" /v Attributes  /t REG_DWORD /d 0x00000001 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Power\PowerSettings\0012ee47-9041-4b5d-9b77-535fba8b1442\6738e2c4-e8a5-4a42-b16a-e040e769756e</keyName>
            <valueName>Attributes</valueName>
            <type>REG_DWORD</type>
            <data>1</data>
          </params>
        </action>
      </step>
      <step name="Web Search In Search Bar" description="Disable Web Search in search bar" category="recommended" defaultSelected="false" runOnOs="25" Id="105">
        <action>
          <!-- reg ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search" /v DisableWebSearch /t REG_DWORD /d 0x00000001 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Search</keyName>
            <valueName>DisableWebSearch</valueName>
            <type>REG_DWORD</type>
            <data>1</data>
          </params>
        </action>
      </step>
      <step name="Windows Error Reports" description="Disable send additional info with error reports" category="recommended" defaultSelected="false" Id="106">
        <action>
          <!-- reg ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting" /v DontSendAdditionalData /t REG_DWORD /d 0x00000001 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting</keyName>
            <valueName>DontSendAdditionalData</valueName>
            <type>REG_DWORD</type>
            <data>1</data>
          </params>
        </action>
      </step>
    </group>
    <group name="Disable Features" description="Disable Features" Id="108">
      <step name="Hard disk timeouts on ac power" description="Disable hard disk timeouts on ac power." category="recommended" defaultSelected="false" Id="113">
        <action>
          <!-- ShellExecute powercfg -change -disk-timeout-ac 0 -->
          <type>ShellExecute</type>
          <command>Powershell -ExecutionPolicy ByPass powercfg -change -disk-timeout-ac 0</command>
        </action>
      </step>
      <step name="Hard disk timeouts on dc power" description="Disable hard disk timeouts on dc power." category="recommended" defaultSelected="false" Id="114">
        <action>
          <!-- ShellExecute powercfg -change -disk-timeout-dc 0 -->
          <type>ShellExecute</type>
          <command>Powershell -ExecutionPolicy ByPass powercfg -change -disk-timeout-dc 0</command>
        </action>
      </step>
      <step name="Hibernation for Power Config" description="Disable Hibernation for Power Config" category="recommended" defaultSelected="false" Id="115">
        <action>
          <!-- ShellExecute powercfg /h off -->
          <type>ShellExecute</type>
          <command>Powershell -ExecutionPolicy ByPass powercfg -H OFF</command>
        </action>
      </step>
      <step name="Last Access Timestamp" description="Disable Last Access Timestamp" category="optional" defaultSelected="false" Id="116">
        <action>
          <!-- ShellExecute fsutil behavior set DisableLastAccess 1 -->
          <type>ShellExecute</type>
          <command>Powershell -ExecutionPolicy ByPass fsutil behavior set DisableLastAccess 1</command>
        </action>
      </step>
      <step name="Monitor timeouts on ac power" description="Disable Monitor timeouts on ac power." category="recommended" defaultSelected="false" Id="117">
        <action>
          <!-- ShellExecute powercfg -change -monitor-timeout-ac 0 -->
          <type>ShellExecute</type>
          <command>Powershell -ExecutionPolicy ByPass powercfg -change -monitor-timeout-ac 0</command>
        </action>
      </step>
      <step name="Monitor timeouts on dc power" description="Disable monitor timeouts on dc power." category="recommended" defaultSelected="false" Id="118">
        <action>
          <!-- ShellExecute powercfg -change -monitor-timeout-dc 0 -->
          <type>ShellExecute</type>
          <command>Powershell -ExecutionPolicy ByPass powercfg -change -monitor-timeout-dc 0</command>
        </action>
      </step>
      <step name="SearchEngine-Client-Package" description="Removes Windows component &quot;SearchEngine-Client-Package&quot; (Search/Indexing). Only if &quot;WSearch&quot; service is set to &quot;disabled&quot;. Disables Search/Indexing perm." category="optional" defaultSelected="false" Id="119">
        <action>
          <type>ShellExecute</type>
          <command>Powershell -ExecutionPolicy ByPass Dism /online /Disable-Feature /Quiet /FeatureName:SearchEngine-Client-Package | Out-Host</command>
        </action>
      </step>
      <step name="System Restore" description="Powershell command to immeidately disable system restore" category="recommended" defaultSelected="false" Id="120">
        <action>
          <!-- ShellExecute Powershell disable-computerrestore -drive c:\ -->
          <type>ShellExecute</type>
          <command>Powershell -ExecutionPolicy ByPass  disable-computerrestore -drive c:\</command>
        </action>
      </step>
      <step name="Windows Defender Features" description="Removes Windows Defender Features" category="optional" defaultSelected="false" runOnOs="25" Id="121">
        <action>
          <type>ShellExecute</type>
          <command>Powershell -ExecutionPolicy ByPass Uninstall-WindowsFeature -Name Windows-Defender-Features | Out-Host</command>
          <params />
        </action>
      </step>
      <step name="Windows Media Player" description="Powershell command to immeidately disable Windows Media Player" category="optional" defaultSelected="false" Id="122">
        <action>
          <!-- ShellExecute Powershell Dism /online /Disable-Feature /FeatureName:WindowsMediaPlayer\ -->
          <type>ShellExecute</type>
          <command>Powershell -ExecutionPolicy ByPass Dism /online /Disable-Feature /FeatureName:WindowsMediaPlayer</command>
        </action>
      </step>
      <step name="Windows Store" description="Disable Windows Store" category="recommended" defaultSelected="false" runOnOs="25" Id="123">
        <action>
          <!-- reg ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsStore" /v RemoveWindowsStore /t REG_DWORD /d 0x1 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsStore</keyName>
            <valueName>RemoveWindowsStore</valueName>
            <type>REG_DWORD</type>
            <data>1</data>
          </params>
        </action>
      </step>
      <step name="WCF-Services" description="Powershell command to immeidately disable WCF-Services" category="optional" defaultSelected="false" Id="124">
        <action>
          <!-- ShellExecute Powershell Dism /online /Disable-Feature /FeatureName:WCF-Services45\ -->
          <type>ShellExecute</type>
          <command>Powershell -ExecutionPolicy ByPass Dism /online /Disable-Feature /FeatureName:WCF-Services45</command>
        </action>
      </step>
      <step name="Xps-Foundation" description="Powershell command to immeidately disable Xps-Foundation" category="optional" defaultSelected="false" Id="125">
        <action>
          <!-- ShellExecute Powershell Dism /online /Disable-Feature /FeatureName:Xps-Foundation-Xps-Viewer\ -->
          <type>ShellExecute</type>
          <command>Powershell -ExecutionPolicy ByPass Dism /online /Disable-Feature /FeatureName:Xps-Foundation-Xps-Viewer</command>
        </action>
      </step>
    </group>
    <group name="Apply Visual Effect Settings To Current User" description="Setting visual effects for current user" Id="126">
      <step name="Adjust for best performance" description="Set Windows Visual Effects to Optimized for best performance." category="optional" defaultSelected="false" Id="127">
        <action>
          <!-- reg ADD "HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\VisualEffects" /v VisualFXSetting /t REG_DWORD /d 0x2 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>HKCU\Software\Microsoft\Windows\CurrentVersion\Explorer\VisualEffects</keyName>
            <valueName>VisualFXSetting</valueName>
            <type>REG_DWORD</type>
            <data>2</data>
          </params>
        </action>
      </step>
      <step name="Animate windows when minimizing and maxmizing" description="Disable Animate windows when minimizing and maxmizing Visual Effect" category="optional" defaultSelected="false" Id="128">
        <action>
          <!-- reg add "HKCU\Control Panel\Desktop\WindowMetrics" /v MinAnimate /t REG_SZ /d 0x00000000 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>HKCU\Control Panel\Desktop\WindowMetrics</keyName>
            <valueName>MinAnimate</valueName>
            <type>REG_SZ</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="Animations in the taskbar" description="Disable Animations in the taskbar Visual Effect" category="optional" defaultSelected="false" Id="129">
        <action>
          <!-- reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v TaskbarAnimations /t REG_DWORD /d 0x00000000 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced</keyName>
            <valueName>TaskbarAnimations</valueName>
            <type>REG_DWORD</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="Enable Peek" description="Disable Enable Peek Visual Effect" category="optional" defaultSelected="false" Id="130">
        <action>
          <!-- reg add "HKCU\SOFTWARE\Microsoft\Windows\DWM" /v EnableAeroPeek /t REG_DWORD /d 0x00000000 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>HKCU\SOFTWARE\Microsoft\Windows\DWM</keyName>
            <valueName>EnableAeroPeek</valueName>
            <type>REG_DWORD</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="Play animations in windows" description="Turn off Play animations in windows." category="optional" defaultSelected="false" Id="131">
        <action>
          <!-- reg ADD "HKCU\Control Panel\Desktop" /v UserPreferencesMask /t REG_BINARY /d 9012038010000000 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>HKCU\Control Panel\Desktop</keyName>
            <valueName>UserPreferencesMask</valueName>
            <type>REG_BINARY</type>
            <data>9012038010000000</data>
          </params>
        </action>
      </step>
      <step name="Save taskbar thumbnail previews" description="Disable Save taskbar thumbnail previews Visual Effect" category="optional" defaultSelected="false" runOnOs="25" Id="132">
        <action>
          <!-- reg add "HKCU\SOFTWARE\Microsoft\Windows\DWM" /v AlwaysHibernateThumbnails /t REG_DWORD /d 0x00000000 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>HKCU\SOFTWARE\Microsoft\Windows\DWM</keyName>
            <valueName>AlwaysHibernateThumbnails</valueName>
            <type>REG_DWORD</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="Show translucent selection rectangle" description="Disable Show translucent selection rectangle Visual Effect" category="optional" defaultSelected="false" runOnOs="25" Id="133">
        <action>
          <!-- reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v ListviewAlphaSelect /t REG_DWORD /d 0x00000000 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced</keyName>
            <valueName>ListviewAlphaSelect</valueName>
            <type>REG_DWORD</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="Show window contents while dragging" description="Disable Show window contents while dragging Visual Effect" category="optional" defaultSelected="false" Id="134">
        <action>
          <!-- reg add "HKCU\Control Panel\Desktop" /v DragFullWindows /t REG_SZ /d 0x00000000 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>HKCU\Control Panel\Desktop</keyName>
            <valueName>DragFullWindows</valueName>
            <type>REG_SZ</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="Smooth edges of screen fonts" description="Disable Smooth edges of screen fonts Visual Effect" category="optional" defaultSelected="false" Id="135">
        <action>
          <!-- reg add "HKCU\Control Panel\Desktop" /v FontSmoothing /t REG_SZ /d 0x00000000 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>HKCU\Control Panel\Desktop</keyName>
            <valueName>FontSmoothing</valueName>
            <type>REG_SZ</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="Use drop shadows for icon labels on the desktop" description="Disable Use drop shadows for icon labels on the desktop Visual Effect" category="optional" defaultSelected="false" Id="136">
        <action>
          <!-- reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced" /v ListviewShadow /t REG_DWORD /d 0x00000000 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Advanced</keyName>
            <valueName>ListviewShadow</valueName>
            <type>REG_DWORD</type>
            <data>0</data>
          </params>
        </action>
      </step>
    </group>
    <group name="Apply Visual Effect Settings To New Users" description="This is a functional operation. This option must be selected so visual effect setting can be applied to new users." Id="137">
      <step name="Animate windows when minimizing and maxmizing" description="Disable Animate windows when minimizing and maxmizing Visual Effect" category="optional" defaultSelected="false" Id="138">
        <action>
          <!-- reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\VisualEffects\AnimateMinMax" /v DefaultValue /t REG_DWORD /d 0x00000000 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\VisualEffects\AnimateMinMax</keyName>
            <valueName>DefaultValue</valueName>
            <type>REG_DWORD</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="Animations in the taskbar" description="Disable Animations in the taskbar Visual Effect" category="optional" defaultSelected="false" Id="139">
        <action>
          <!-- reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\VisualEffects\TaskbarAnimations" /v DefaultValue /t REG_DWORD /d 0x00000000 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\VisualEffects\TaskbarAnimations</keyName>
            <valueName>DefaultValue</valueName>
            <type>REG_DWORD</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="Enable Peek" description="Disable Enable Peek Visual Effect" category="optional" defaultSelected="false" Id="140">
        <action>
          <!-- reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\VisualEffects\DWMAeroPeekEnabled" /v DefaultValue /t REG_DWORD /d 0x00000000 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\VisualEffects\DWMAeroPeekEnabled</keyName>
            <valueName>DefaultValue</valueName>
            <type>REG_DWORD</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="Save taskbar thumbnail previews" description="Disable Save taskbar thumbnail previews Visual Effect" category="optional" defaultSelected="false" runOnOs="25" Id="141">
        <action>
          <!-- reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\VisualEffects\DWMSaveThumbnailEnabled" /v DefaultValue /t REG_DWORD /d 0x00000000 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\VisualEffects\DWMSaveThumbnailEnabled</keyName>
            <valueName>DefaultValue</valueName>
            <type>REG_DWORD</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="Show translucent selection rectangle" description="Disable Show translucent selection rectangle Visual Effect" category="optional" defaultSelected="false" runOnOs="25" Id="142">
        <action>
          <!-- reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\VisualEffects\ListviewAlphaSelect" /v DefaultValue /t REG_DWORD /d 0x00000000 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\VisualEffects\ListviewAlphaSelect</keyName>
            <valueName>DefaultValue</valueName>
            <type>REG_DWORD</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="Show window contents while dragging" description="Disable Show window contents while dragging Visual Effect" category="optional" defaultSelected="false" Id="143">
        <action>
          <!-- reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\VisualEffects\DragFullWindows" /v DefaultValue /t REG_DWORD /d 0x00000000 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\VisualEffects\DragFullWindows</keyName>
            <valueName>DefaultValue</valueName>
            <type>REG_DWORD</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="Smooth edges of screen fonts" description="Disable Smooth edges of screen fonts Visual Effect" category="optional" defaultSelected="false" Id="144">
        <action>
          <!-- reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\VisualEffects\FontSmoothing" /v DefaultValue /t REG_DWORD /d 0x00000001 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\VisualEffects\FontSmoothing</keyName>
            <valueName>DefaultValue</valueName>
            <type>REG_DWORD</type>
            <data>1</data>
          </params>
        </action>
      </step>
      <step name="Use drop shadows for icon labels on the desktop" description="Disable Use drop shadows for icon labels on the desktop Visual Effect" category="optional" defaultSelected="false" Id="145">
        <action>
          <!-- reg add "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\VisualEffects\ListviewShadow" /v DefaultValue /t REG_DWORD /d 0x00000000 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\VisualEffects\ListviewShadow</keyName>
            <valueName>DefaultValue</valueName>
            <type>REG_DWORD</type>
            <data>0</data>
          </params>
        </action>
      </step>
    </group>
    <group expand="true" name="Disable Scheduled Tasks #VDILIKEAPRO" description="#VDILIKEAPRO || Disable Scheduled Tasks" Id="146">
      <step name="AppID - SmartScreenSpecific" description="Disable AppID - SmartScreenSpecific" category="recommended" defaultSelected="false" runOnOs="25" Id="147">
        <action>
          <!-- schtasks /change /tn "Microsoft\Windows\AppID\SmartScreenSpecific" /disable -->
          <type>SchTasks</type>
          <command>Change</command>
          <params>
            <taskName>Microsoft\Windows\AppID\SmartScreenSpecific</taskName>
            <status>DISABLED</status>
          </params>
        </action>
      </step>
      <step name="Application Experience - Microsoft Compatibility Appraiser" description="Disable Application Experience - Microsoft Compatibility Appraiser" category="recommended" defaultSelected="false" runOnOs="25" Id="148">
        <action>
          <!-- schtasks /change /tn "Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser" /disable -->
          <type>SchTasks</type>
          <command>Change</command>
          <params>
            <taskName>Microsoft\Windows\Application Experience\Microsoft Compatibility Appraiser</taskName>
            <status>DISABLED</status>
          </params>
        </action>
      </step>
      <step name="Application Experience - ProgramDataUpdator" description="Disable Application Experience - ProgramDataUpdator" category="recommended" defaultSelected="false" runOnOs="25" Id="149">
        <action>
          <!-- schtasks /change /tn "Microsoft\Windows\Application Experience\ProgramDataUpdater" /disable -->
          <type>SchTasks</type>
          <command>Change</command>
          <params>
            <taskName>Microsoft\Windows\Application Experience\ProgramDataUpdater</taskName>
            <status>DISABLED</status>
          </params>
        </action>
      </step>
      <step name="Application Experience - StartupAppTask" description="Disable Application Experience - StartupAppTask" category="recommended" defaultSelected="false" runOnOs="25" Id="150">
        <action>
          <!-- schtasks /change /tn "Microsoft\Windows\Application Experience\StartupAppTask" /disable -->
          <type>SchTasks</type>
          <command>Change</command>
          <params>
            <taskName>Microsoft\Windows\Application Experience\StartupAppTask</taskName>
            <status>DISABLED</status>
          </params>
        </action>
      </step>
      <step name="Autochk - Proxy" description="Disable Autochk - Proxy" category="recommended" defaultSelected="false" Id="151">
        <action>
          <!-- schtasks /change /tn "Microsoft\Windows\Autochk\Proxy" /disable -->
          <type>SchTasks</type>
          <command>Change</command>
          <params>
            <taskName>Microsoft\Windows\Autochk\Proxy</taskName>
            <status>DISABLED</status>
          </params>
        </action>
      </step>
      <step name="Bluetooth - UninstallDeviceTask" description="Disable Bluetooth - UninstallDeviceTask" category="recommended" defaultSelected="false" Id="152">
        <action>
          <!-- schtasks /change /tn "Microsoft\Windows\Bluetooth\UninstallDeviceTask" /disable -->
          <type>SchTasks</type>
          <command>Change</command>
          <params>
            <taskName>Microsoft\Windows\Bluetooth\UninstallDeviceTask</taskName>
            <status>DISABLED</status>
          </params>
        </action>
      </step>
      <step name="CloudExperienceHost - CreateObjectTask" description="Disable CloudExperienceHost - CreateObjectTask" category="recommended" defaultSelected="false" runOnOs="25" Id="154">
        <action>
          <!-- schtasks /change /tn "Microsoft\Windows\CloudExperienceHost\CreateObjectTask" /disable -->
          <type>SchTasks</type>
          <command>Change</command>
          <params>
            <taskName>Microsoft\Windows\CloudExperienceHost\CreateObjectTask</taskName>
            <status>DISABLED</status>
          </params>
        </action>
      </step>
      <step name="CEIP Consolidator" description="Disable Customer Exeprience Improvement Program (CEIP) scheduled task" category="recommended" defaultSelected="false" Id="155">
        <action>
          <!-- schtasks /change /tn "Microsoft\Windows\Customer Experience Improvement Program\Consolidator" /disable -->
          <type>SchTasks</type>
          <command>Change</command>
          <params>
            <taskName>Microsoft\Windows\Customer Experience Improvement Program\Consolidator</taskName>
            <status>DISABLED</status>
          </params>
        </action>
      </step>
      <step name="CEIP Kernel" description="Disable Customer Exeprience Improvement Program (CEIP) scheduled task" category="recommended" defaultSelected="false" Id="156">
        <action>
          <!-- schtasks /change /tn "Microsoft\Windows\Customer Experience Improvement Program\KernelCeipTask" /disable -->
          <type>SchTasks</type>
          <command>Change</command>
          <params>
            <taskName>Microsoft\Windows\Customer Experience Improvement Program\KernelCeipTask</taskName>
            <status>DISABLED</status>
          </params>
        </action>
      </step>
      <step name="CEIP Usb" description="Disable Customer Exeprience Improvement Program (CEIP) scheduled task" category="recommended" defaultSelected="false" Id="157">
        <action>
          <!-- schtasks /change /tn "Microsoft\Windows\Customer Experience Improvement Program\UsbCeip" /disable -->
          <type>SchTasks</type>
          <command>Change</command>
          <params>
            <taskName>Microsoft\Windows\Customer Experience Improvement Program\UsbCeip</taskName>
            <status>DISABLED</status>
          </params>
        </action>
      </step>
      <step name="Defrag Schedule" description="Disable Defrag Schedule" category="recommended" defaultSelected="false" Id="158">
        <action>
          <!-- schtasks /change /TN "\Microsoft\Windows\Defrag\ScheduledDefrag" /Disable -->
          <type>SchTasks</type>
          <command>Change</command>
          <params>
            <taskName>Microsoft\Windows\Defrag\ScheduledDefrag</taskName>
            <status>DISABLED</status>
          </params>
        </action>
      </step>
      <step name="Diagnosis - Scheduled" description="Disable Diagnosis - Scheduled" category="recommended" defaultSelected="false" Id="159">
        <action>
          <!-- schtasks /change /TN "\Microsoft\Windows\Diagnosis\Scheduled" /Disable -->
          <type>SchTasks</type>
          <command>Change</command>
          <params>
            <taskName>Microsoft\Windows\Diagnosis\Scheduled</taskName>
            <status>DISABLED</status>
          </params>
        </action>
      </step>
      <step name="DiskDiagnostic - DataCollector" description="Disable DiskDiagnostic - DataCollector" category="recommended" defaultSelected="false" Id="160">
        <action>
          <!-- schtasks /change /TN "\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector" /Disable -->
          <type>SchTasks</type>
          <command>Change</command>
          <params>
            <taskName>Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticDataCollector</taskName>
            <status>DISABLED</status>
          </params>
        </action>
      </step>
      <step name="DiskDiagnostic - Resolver" description="Disable DiskDiagnostic - Resolver" category="recommended" defaultSelected="false" Id="161">
        <action>
          <!-- schtasks /change /TN "\Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticResolver" /Disable -->
          <type>SchTasks</type>
          <command>Change</command>
          <params>
            <taskName>Microsoft\Windows\DiskDiagnostic\Microsoft-Windows-DiskDiagnosticResolver</taskName>
            <status>DISABLED</status>
          </params>
        </action>
      </step>
      <step name="DmClient" description="Disable DmClient" category="recommended" defaultSelected="false" runOnOs="25" Id="162">
        <action>
          <!-- schtasks /change /TN "\Microsoft\Windows\Feedback\Siuf\DmClient" /Disable -->
          <type>SchTasks</type>
          <command>Change</command>
          <params>
            <taskName>Microsoft\Windows\Feedback\Siuf\DmClient</taskName>
            <status>DISABLED</status>
          </params>
        </action>
      </step>
      <step name="FileHistory - File History" description="Disable FileHistory - File History" category="recommended" defaultSelected="false" Id="163">
        <action>
          <!-- schtasks /change /TN "\Microsoft\Windows\FileHistory\File History (maintenance mode)" /Disable -->
          <type>SchTasks</type>
          <command>Change</command>
          <params>
            <taskName>Microsoft\Windows\FileHistory\File History (maintenance mode)</taskName>
            <status>DISABLED</status>
          </params>
        </action>
      </step>
      <step name="Location - Notifications" description="Disable Location - Notifications" category="recommended" defaultSelected="false" runOnOs="25" Id="164">
        <action>
          <!-- schtasks /change /TN "\Microsoft\Windows\Location\Notifications" /Disable -->
          <type>SchTasks</type>
          <command>Change</command>
          <params>
            <taskName>Microsoft\Windows\Location\Notifications</taskName>
            <status>DISABLED</status>
          </params>
        </action>
      </step>
      <step name="Maintenance - WinSAT" description="Disable Maintenance - WinSAT" category="recommended" defaultSelected="false" Id="165">
        <action>
          <!-- schtasks /change /TN "\Microsoft\Windows\Maintenance\WinSAT" /Disable -->
          <type>SchTasks</type>
          <command>Change</command>
          <params>
            <taskName>Microsoft\Windows\Maintenance\WinSAT</taskName>
            <status>DISABLED</status>
          </params>
        </action>
      </step>
      <step name="Maps - MapsToastTask" description="Disable Maps - MapsToastTask" category="recommended" defaultSelected="false" runOnOs="25" Id="166">
        <action>
          <!-- schtasks /change /TN "\Microsoft\Windows\Maps\MapsToastTask" /Disable -->
          <type>SchTasks</type>
          <command>Change</command>
          <params>
            <taskName>Microsoft\Windows\Maps\MapsToastTask</taskName>
            <status>DISABLED</status>
          </params>
        </action>
      </step>
      <step name="Maps - MapsUpdateTask" description="Disable Maps - MapsUpdateTask" category="recommended" defaultSelected="false" runOnOs="25" Id="167">
        <action>
          <!-- schtasks /change /TN "\Microsoft\Windows\Maps\MapsUpdateTask" /Disable -->
          <type>SchTasks</type>
          <command>Change</command>
          <params>
            <taskName>Microsoft\Windows\Maps\MapsToastTask</taskName>
            <status>DISABLED</status>
          </params>
        </action>
      </step>
      <step name="MemoryDiagnostic - ProcessMemoryDiagnosticEvents" description="Disable MemoryDiagnostic - ProcessMemoryDiagnosticEvents" category="recommended" defaultSelected="false" Id="168">
        <action>
          <!-- schtasks /change /TN "\Microsoft\Windows\MemoryDiagnostic\ProcessMemoryDiagnosticEvents" /Disable -->
          <type>SchTasks</type>
          <command>Change</command>
          <params>
            <taskName>Microsoft\Windows\MemoryDiagnostic\ProcessMemoryDiagnosticEvents</taskName>
            <status>DISABLED</status>
          </params>
        </action>
      </step>
      <step name="MemoryDiagnostic - RunFullMemoryDiagnostic" description="Disable MemoryDiagnostic - RunFullMemoryDiagnostic" category="recommended" defaultSelected="false" Id="169">
        <action>
          <!-- schtasks /change /TN "\Microsoft\Windows\MemoryDiagnostic\RunFullMemoryDiagnostic" /Disable -->
          <type>SchTasks</type>
          <command>Change</command>
          <params>
            <taskName>Microsoft\Windows\MemoryDiagnostic\RunFullMemoryDiagnostic</taskName>
            <status>DISABLED</status>
          </params>
        </action>
      </step>
      <step name="Mobile Broadband Accounts - MNO Metadata Parser" description="Disable Mobile Broadband Accounts - MNO Metadata Parser" category="recommended" defaultSelected="false" Id="170">
        <action>
          <!-- schtasks /change /TN "\Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parse" /Disable -->
          <type>SchTasks</type>
          <command>Change</command>
          <params>
            <taskName>Microsoft\Windows\Mobile Broadband Accounts\MNO Metadata Parser</taskName>
            <status>DISABLED</status>
          </params>
        </action>
      </step>
      <step name="Power Efficiency Diagnostics - AnalyzeSystem" description="Disable Power Efficiency Diagnostics - AnalyzeSystem" category="recommended" defaultSelected="false" Id="171">
        <action>
          <!-- schtasks /change /TN "\Microsoft\Windows\Power Efficiency Diagnostics\AnalyzeSystem" /Disable -->
          <type>SchTasks</type>
          <command>Change</command>
          <params>
            <taskName>Microsoft\Windows\Power Efficiency Diagnostics\AnalyzeSystem</taskName>
            <status>DISABLED</status>
          </params>
        </action>
      </step>
      <step name="Ras - MobilityManager" description="Disable Ras - MobilityManager" category="recommended" defaultSelected="false" Id="172">
        <action>
          <!-- schtasks /change /TN "\Microsoft\Windows\Ras\MobilityManager" /Disable -->
          <type>SchTasks</type>
          <command>Change</command>
          <params>
            <taskName>Microsoft\Windows\Ras\MobilityManager</taskName>
            <status>DISABLED</status>
          </params>
        </action>
      </step>
      <step name="Registry Idle Backup Task" description="Disable Registry Idle Backup Task" category="recommended" defaultSelected="false" Id="173">
        <action>
          <!-- schtasks /change /TN "\Microsoft\Windows\Registry\RegIdleBackup" /Disable -->
          <type>SchTasks</type>
          <command>Change</command>
          <params>
            <taskName>Microsoft\Windows\Registry\RegIdleBackup</taskName>
            <status>DISABLED</status>
          </params>
        </action>
      </step>
      <step name="Shell - FamilySafetyMonitor" description="Disable Shell - FamilySafetyMonitor" category="recommended" defaultSelected="false" Id="174">
        <action>
          <!-- schtasks /change /TN "\Microsoft\Windows\Shell\FamilySafetyMonitor" /Disable -->
          <type>SchTasks</type>
          <command>Change</command>
          <params>
            <taskName>Microsoft\Windows\Shell\FamilySafetyMonitor</taskName>
            <status>DISABLED</status>
          </params>
        </action>
      </step>
      <step name="Shell - FamilySafetyRefresh" description="Disable Shell - FamilySafetyRefresh" category="recommended" defaultSelected="false" runOnOs="25" Id="175">
        <action>
          <!-- schtasks /change /TN "\Microsoft\Windows\Shell\FamilySafetyRefresh" /Disable -->
          <type>SchTasks</type>
          <command>Change</command>
          <params>
            <taskName>Microsoft\Windows\Shell\FamilySafetyRefresh</taskName>
            <status>DISABLED</status>
          </params>
        </action>
      </step>
      <step name="Shell - IndexerAutomaticMaintenance" description="Disable Shell - IndexerAutomaticMaintenance" category="recommended" defaultSelected="false" Id="176">
        <action>
          <!-- schtasks /change /TN "\Microsoft\Windows\Shell\IndexerAutomaticMaintenance" /Disable -->
          <type>SchTasks</type>
          <command>Change</command>
          <params>
            <taskName>Microsoft\Windows\Shell\IndexerAutomaticMaintenance</taskName>
            <status>DISABLED</status>
          </params>
        </action>
      </step>
      <step name="System Restore Schedule" description="Disable System Restore Schedule" category="optional" defaultSelected="false" Id="177">
        <action>
          <!-- schtasks /change /TN "\Microsoft\Windows\SystemRestore\SR" /Disable -->
          <type>SchTasks</type>
          <command>Change</command>
          <params>
            <taskName>Microsoft\Windows\SystemRestore\SR</taskName>
            <status>DISABLED</status>
          </params>
        </action>
      </step>
      <step name="TPM - Tpm-Maintenance" description="Disable TPM - Tpm-Maintenance" category="recommended" defaultSelected="false" Id="178">
        <action>
          <!-- schtasks /change /TN "\Mircrosoft\Windows\TPM\Tpm-Maintenance" /Disable -->
          <type>SchTasks</type>
          <command>Change</command>
          <params>
            <taskName>Microsoft\Windows\TPM\Tpm-Maintenance</taskName>
            <status>DISABLED</status>
          </params>
        </action>
      </step>
      <step name="UPnP - UPnPHostConfig" description="Disable UPnP - UPnPHostConfig" category="recommended" defaultSelected="false" Id="179">
        <action>
          <!-- schtasks /change /TN "\Mircrosoft\Windows\UPnP\UPnPHostConfig" /Disable -->
          <type>SchTasks</type>
          <command>Change</command>
          <params>
            <taskName>Microsoft\Windows\UPnP\UPnPHostConfig</taskName>
            <status>DISABLED</status>
          </params>
        </action>
      </step>
      <step name="WDI - ResolutionHost" description="Disable WDI - ResolutionHost" category="recommended" defaultSelected="false" Id="180">
        <action>
          <!-- schtasks /change /TN "\Mircrosoft\Windows\WDI\ResolutionHost" /Disable -->
          <type>SchTasks</type>
          <command>Change</command>
          <params>
            <taskName>Microsoft\Windows\WDI\ResolutionHost</taskName>
            <status>DISABLED</status>
          </params>
        </action>
      </step>
      <step name="Windows Defender Cache Maintenance" description="Disable Windows Defender Cache Maintenance" category="recommended" defaultSelected="false" Id="181">
        <action>
          <!-- schtasks /change /TN "\Mircrosoft\Windows\Windows Defender\Windows Defender Cache Maintenance" /Disable -->
          <type>SchTasks</type>
          <command>Change</command>
          <params>
            <taskName>Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance</taskName>
            <status>DISABLED</status>
          </params>
        </action>
      </step>
      <step name="Windows Defender Cleanup" description="Disable Windows Defender Cleanup" category="recommended" defaultSelected="false" Id="182">
        <action>
          <!-- schtasks /change /TN "\Mircrosoft\Windows\Windows Defender\Windows Defender Cleanup" /Disable -->
          <type>SchTasks</type>
          <command>Change</command>
          <params>
            <taskName>Microsoft\Windows\Windows Defender\Windows Defender Cleanup</taskName>
            <status>DISABLED</status>
          </params>
        </action>
      </step>
      <step name="Windows Defender Scheduled Scan" description="Disable Windows Defender Scheduled Scan" category="recommended" defaultSelected="false" Id="183">
        <action>
          <!-- schtasks /change /TN "\Mircrosoft\Windows\Windows Defender\Windows Defender Scheduled Scan" /Disable -->
          <type>SchTasks</type>
          <command>Change</command>
          <params>
            <taskName>Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan</taskName>
            <status>DISABLED</status>
          </params>
        </action>
      </step>
      <step name="Windows Defender Verification" description="Disable Windows Defender Verification" category="recommended" defaultSelected="false" Id="184">
        <action>
          <!-- schtasks /change /TN "\Mircrosoft\Windows\Windows Defender\Windows Defender Verification" /Disable -->
          <type>SchTasks</type>
          <command>Change</command>
          <params>
            <taskName>Microsoft\Windows\Windows Defender\Windows Defender Verification</taskName>
            <status>DISABLED</status>
          </params>
        </action>
      </step>
      <step name="Windows Error Reporting" description="Disable Windows Error Reporting" category="recommended" defaultSelected="false" Id="185">
        <action>
          <!-- schtasks /change /TN "\Mircrosoft\Windows\Windows Error Reporting\QueueReporting" /Disable -->
          <type>SchTasks</type>
          <command>Change</command>
          <params>
            <taskName>Microsoft\Windows\Windows Error Reporting\QueueReporting</taskName>
            <status>DISABLED</status>
          </params>
        </action>
      </step>
      <step name="Windows Filtering Platform - BfeonServiceStartTypeChange" description="Disable BfeonServiceStartTypeChange" category="recommended" defaultSelected="false" Id="186">
        <action>
          <!-- schtasks /change /TN "\Mircrosoft\Windows\Windows Filtering Platform\BfeonServiceStartTypeChange" /Disable -->
          <type>SchTasks</type>
          <command>Change</command>
          <params>
            <taskName>Microsoft\Windows\Windows Filtering Platform\BfeonServiceStartTypeChange</taskName>
            <status>DISABLED</status>
          </params>
        </action>
      </step>
      <step name="Windows Media Sharing - UpdateLibrary" description="Disable Windows Media Sharing - UpdateLibrary" category="recommended" defaultSelected="false" Id="187">
        <action>
          <!-- schtasks /change /TN "\Mircrosoft\Windows\Windows Media Sharing\UpdateLibrary" /Disable -->
          <type>SchTasks</type>
          <command>Change</command>
          <params>
            <taskName>Microsoft\Windows\Windows Media Sharing\UpdateLibrary</taskName>
            <status>DISABLED</status>
          </params>
        </action>
      </step>
      <step name="WIM-Hash-Management" description="Disable WIM-Hash-Management" category="recommended" defaultSelected="false" Id="188">
        <action>
          <!-- schtasks /change /TN "\Mircrosoft\Windows\WOF\WIM-Hash-Management" /Disable -->
          <type>SchTasks</type>
          <command>Change</command>
          <params>
            <taskName>Microsoft\Windows\WOF\WIM-Hash-Management</taskName>
            <status>DISABLED</status>
          </params>
        </action>
      </step>
      <step name="WIM-Hash-Validation" description="Disable WIM-Hash-Validation" category="recommended" defaultSelected="false" Id="189">
        <action>
          <!-- schtasks /change /TN "\Mircrosoft\Windows\WOF\WIM-Hash-Validation" /Disable -->
          <type>SchTasks</type>
          <command>Change</command>
          <params>
            <taskName>Microsoft\Windows\WOF\WIM-Hash-Validation</taskName>
            <status>DISABLED</status>
          </params>
        </action>
      </step>
    </group>
    <group name="Disable Services" description="Disable Services" Id="190">
      <step name="Adobe Acrobat Update" description="Adobe Acrobat Update Services. This services should be managed outside the user-view (VM)." category="recommended" defaultSelected="false" Id="191">
        <action>
          <!-- Powershell Set-Service 'AdobeARMservice' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>AdobeARMservice</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Adobe Flash Player Update" description="Adobe Flash Player Update Services. This services should be managed outside the user-view (VM)." category="recommended" defaultSelected="false" Id="192">
        <action>
          <!-- Powershell Set-Service 'AdobeFlashPlayerUpdateSvc' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>AdobeFlashPlayerUpdateSvc</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="AllJoyn Router Service" description="Used for WiFi" category="recommended" defaultSelected="false" runOnOs="25" Id="193">
        <action>
          <!-- Powershell Set-Service 'AJRouter' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>AJRouter</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Application Layer Gateway Service" description="Provides support for 3rd party protocol plug-ins for Internet Connection Sharing." category="optional" defaultSelected="false" Id="194">
        <action>
          <!-- Powershell Set-Service 'ALG' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>ALG</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Background Intelligent Transfer Service" description="Transfers files in the background using idle network bandwidth. If the service is disabled, Windows Update and MSN Explorer cannot automatically download programs and other information." category="optional" defaultSelected="false" Id="195">
        <action>
          <!-- Powershell Set-Service 'bits' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>bits</serviceName>
            <startMode>MANUAL</startMode>
          </params>
        </action>
      </step>
      <step name="Block Level Backup Engine Service" description="Used by Windows Backup" category="optional" defaultSelected="false" Id="196">
        <action>
          <!-- Powershell Set-Service 'wbengine' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>wbengine</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Bluetooth Handsfree Service" description="Enables wireless Bluetooth headsets to run on this computer. If this service is stopped or disabled, then Bluetooth headsets will not function properly with this machine." category="optional" defaultSelected="false" Id="197">
        <action>
          <!-- Powershell Set-Service 'BthHFSrv' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>BthHFSrv</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Bluetooth Support Service" description="The Bluetooth service supports discovery and association of remote Bluetooth devices." category="optional" defaultSelected="false" Id="198">
        <action>
          <!-- Powershell Set-Service 'bthserv' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>bthserv</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Bitlocker Drive Encryption Service" description="Bitlocker service for drive encryption. Not recommended to encrypt VDI virtual machines." category="recommended" defaultSelected="false" Id="200">
        <action>
          <!-- Powershell Set-Service 'BDESVC' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>BDESVC</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="BranchCache" description="Used for caching files on server in a branch office." category="recommended" defaultSelected="false" Id="201">
        <action>
          <!-- Powershell Set-Service 'PeerDistSvc' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>PeerDistSvc</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Certificate Propagation" description="Copies user certificates and root certificates from smart cards into the current user's certificate store" category="optional" defaultSelected="false" Id="202">
        <action>
          <!-- Powershell Set-Service 'CertPropSvc' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>CertPropSvc</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Computer Browser" description="Used for browsing computers on the same network." category="recommended" defaultSelected="false" Id="203">
        <action>
          <!-- Powershell Set-Service 'Browser' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>Browser</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Data Sharing Service" description="Provides data brokering between applications" category="optional" defaultSelected="false" runOnOs="25" Id="204">
        <action>
          <!-- Powershell Set-Service 'DsSvc' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>DsSvc</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Data Collection Publishing Service" description="The DCP (Data Collection and Publishing) service supports first party apps to upload data to cloud." category="optional" defaultSelected="false" runOnOs="25" Id="205">
        <action>
          <!-- Powershell Set-Service 'DcpSvc' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>DcpSvc</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Device Association Service" description="Enables pairing between the system and wired or wireless devices." category="optional" defaultSelected="false" runOnOs="25" Id="206">
        <action>
          <!-- Powershell Set-Service 'DeviceAssociationService' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>DeviceAssociationService</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="DevQuery Background Discovery Broker" description="Enables apps to discover devices with a backgroud task." category="optional" defaultSelected="false" runOnOs="25" Id="207">
        <action>
          <type>Service</type>
          <params>
            <serviceName>DevQueryBroker</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Device Setup Manager" description="Enables the detection, download and installation of device-related software. If this service is disabled, devices may be configured with outdated software, and may not work correctly." category="optional" defaultSelected="false" runOnOs="25" Id="208">
        <action>
          <!-- Powershell Set-Service 'DsmSvc' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>DsmSvc</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Diagnostic Policy Service" description="Disable Diagnostic Policy Service" category="recommended" defaultSelected="false" Id="209">
        <action>
          <!-- Powershell Set-Service 'DPS' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>DPS</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Diagnostic Service Host" description="Problem detection and troubleshooting resolution." category="recommended" defaultSelected="false" Id="210">
        <action>
          <!-- Powershell Set-Service 'WdiServiceHost' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>WdiServiceHost</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Diagnostic System Host" description="Problem detection and troubleshooting resolution." category="recommended" defaultSelected="false" Id="211">
        <action>
          <!-- Powershell Set-Service 'WdiSystemHost' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>WdiSystemHost</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Diagnostics Tracking Service" description="Data collection about functional issues in Windows components. Enabled with update https://support.microsoft.com/en-us/kb/3080149" category="recommended" defaultSelected="false" Id="212">
        <action>
          <!-- Powershell Set-Service 'DiagTrack' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>DiagTrack</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Downloaded Maps Manager" description="Windows service for application access to downloaded maps. This service is started on-demand by application accessing downloaded maps. Disabling this service will prevent apps from accessing maps." category="recommended" defaultSelected="false" runOnOs="25" Id="213">
        <action>
          <!-- Powershell Set-Service 'MapsBroker' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>MapsBroker</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Encrypting File System(EFS) Service" description="Provides the core file encryption technology used to store encrypted files on NTFS file system volumes. If this service is stopped or disabled, applications will be unable to access encrypted files." category="recommended" defaultSelected="false" Id="214">
        <action>
          <!-- Powershell Set-Service 'EFS' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>EFS</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Fax" description="Enables you to send and receive faxes, utilizing fax resources available on this computer or on the network." category="optional" defaultSelected="false" Id="215">
        <action>
          <!-- Powershell Set-Service 'Fax' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>Fax</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Function Discovery Provider Host" description="The FDPHOST service hosts the Function Discovery (FD) network discovery providers. These FD providers supply network discovery services for the Simple Services Discovery Protocol (SSDP) and Web Services - Discovery (WS-D) protocol." category="recommended" defaultSelected="false" Id="216">
        <action>
          <!-- Powershell Set-Service 'fdPHost' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>fdPHost</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Function Discovery Resource Publication" description="Publishes his computer and resources attached to this computer so they can be discovered over the network." category="recommended" defaultSelected="false" Id="217">
        <action>
          <!-- Powershell Set-Service 'FDResPub' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>FDResPub</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Geolocation Service" description="This service monitors the current location of the system and manages geofences (a geographical location with associated events)." category="optional" defaultSelected="false" runOnOs="25" Id="218">
        <action>
          <!-- Powershell Set-Service 'lfsvc' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>lfsvc</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Human Interface Device Service" description="Activates and maintains the use of hot buttons on keyboards, remote controls, and other multimedia devices." category="optional" defaultSelected="false" runOnOs="25" Id="219">
        <action>
          <!-- Powershell Set-Service 'hidserv' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>hidserv</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="HomeGroup Listener" description="Used for Homegroup services - N/A for VDI" category="recommended" defaultSelected="false" Id="220">
        <action>
          <!-- Powershell Set-Service 'HomeGroupListener' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>HomeGroupListener</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="HomeGroup Provider" description="Used for Homegroup services - N/A for VDI" category="mandatory" defaultSelected="false" Id="221">
        <action>
          <!-- Powershell Set-Service 'HomeGroupProvider' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>HomeGroupProvider</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="HV Host Service" description="Provides an interface for the Hyper-V hypervisor to provide per-partition performance counters to the host operating system." category="optional" defaultSelected="false" runOnOs="25" Id="222">
        <action>
          <!-- Powershell Set-Service 'HvHost' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>HvHost</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Hyper-V Data Exchange Service" description="Allows data exchange between virtual machine and operating system running on physical host machine." category="recommended" defaultSelected="false" runOnOs="25" Id="223">
        <action>
          <!-- Powershell Set-Service 'vmickvpexchange' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>vmickvpexchange</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Hyper-V Guest Service Interface" description="Provides an interface for the Hyper-V host to interact with specific services running inside the virtual" category="recommended" defaultSelected="false" runOnOs="25" Id="224">
        <action>
          <!-- Powershell Set-Service 'vmicguestinterface' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>vmicguestinterface</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Hyper-V Guest Shutdown Service" description="Facilitates shutdown of the virtual machine from the management interface on the physical computer." category="recommended" defaultSelected="false" runOnOs="25" Id="225">
        <action>
          <!-- Powershell Set-Service 'vmicshutdown' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>vmicshutdown</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Hyper-V Heartbeat Service vmicheartbeat" description="Monitors the state of the virtual machine by reporting a heartbeat at regular intervals." category="recommended" defaultSelected="false" runOnOs="25" Id="226">
        <action>
          <!-- Powershell Set-Service 'vmicheartbeat' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>vmicheartbeat</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Hyper-V Remote Desktop Virtualization Service" description="Provides a platform for communication between the virtual machine and operating system running on the physical computer." category="recommended" defaultSelected="false" runOnOs="25" Id="227">
        <action>
          <!-- Powershell Set-Service 'vmicrdv' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>vmicrdv</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Hyper-V Time Synchronization Service" description="Synchronizes system time of the virtual machine with the system time of the physical computer." category="recommended" defaultSelected="false" runOnOs="25" Id="228">
        <action>
          <!-- Powershell Set-Service 'vmictimesync' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>vmictimesync</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Hyper-V VM Session Service" description="Provides a mechanism to manage virtual machine with PowerShell via VM session without a virtual network." category="recommended" defaultSelected="false" runOnOs="25" Id="229">
        <action>
          <!-- Powershell Set-Service 'vmicvmsession' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>vmicvmsession</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Hyper-V Volume Shadow Copy Requestor" description="Coordinates the communications that are required to use Volume Shadow Copy Service to back up applications and data on the virtual machine from the operating system on the physical computer." category="recommended" defaultSelected="false" runOnOs="25" Id="230">
        <action>
          <!-- Powershell Set-Service 'vmicvss' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>vmicvss</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Interactive Services Detection" description="Displays a dialog box when a service tries to send a message to the console." category="recommended" defaultSelected="false" Id="231">
        <action>
          <!-- Powershell Set-Service 'UI0Detect' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>UI0Detect</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Internet Connection Sharing (ICS)" description="Provides network address translation, addressing, name resolution and/or intrusion prevention services for a home or small office network." category="optional" defaultSelected="false" Id="232">
        <action>
          <!-- Powershell Set-Service 'SharedAccess' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>SharedAccess</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="IP Helper" description="Disable if IPv6 is not a factor in VDI" category="optional" defaultSelected="false" Id="233">
        <action>
          <!-- Powershell Set-Service 'iphlpsvc' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>iphlpsvc</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Microsoft Account Sign-in Assistant" description="Disables user sign-in through Microsoft account identity services." category="optional" defaultSelected="false" Id="234">
        <action>
          <!-- Powershell Set-Service 'wlidsvc' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>wlidsvc</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Microsoft (R) Diagnostics Hub Standard Collector Service" description="Diagnostics Hub Standard Collector Service. When running, this service collects real time ETW events and processes them." category="optional" defaultSelected="false" Id="237">
        <action>
          <!-- Powershell Set-Service 'diagnosticshub.standardcollector.service' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>diagnosticshub.standardcollector.service</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Microsoft iSCSI Initiator Service" description="Not leveraged in a VDI" category="optional" defaultSelected="false" Id="238">
        <action>
          <!-- Powershell Set-Service 'MSiSCSI' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>MSiSCSI</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Network Connection Broker" description="Brokers connections that allow Windows Store Apps to receive notifications from the internet." category="optional" defaultSelected="false" runOnOs="25" Id="240">
        <action>
          <!-- Powershell Set-Service 'NcbService' -startuptype "disabled" -->
          <type>Service</type>
          <params>
            <serviceName>NcbService</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Network Connectivity Assistant" description="Provides DirectAccess status notification for UI components." category="optional" defaultSelected="false" Id="241">
        <action>
          <!-- Powershell Set-Service 'NcaSvc' -startuptype "disabled" -->
          <type>Service</type>
          <params>
            <serviceName>NcaSvc</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Offline Files" description="Disable Offline Files" category="optional" defaultSelected="false" Id="242">
        <action>
          <!-- Powershell Set-Service 'CscService' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>CscService</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Optimize Drives" description="Provides Drive Optimization Capabilities." category="optional" defaultSelected="false" Id="243">
        <action>
          <!-- Powershell Set-Service 'defragsvc' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>defragsvc</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Phone Service" description="Manages the telephony state on the device." category="optional" defaultSelected="false" Id="244">
        <action>
          <!-- Powershell Set-Service 'PhoneSvc' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>PhoneSvc</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Portable Device Enumerator Service" description="Enables applications such as Windows Media Player and Image Import Wizard to transfer and synchronize content using removable mass-storage devices." category="optional" defaultSelected="false" Id="245">
        <action>
          <!-- Powershell Set-Service 'WPDBusEnum' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>WPDBusEnum</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Program Compatibility Assistant Service" description="This service provides support for the Program Compatibility Assistant (PCA)." category="optional" defaultSelected="false" Id="246">
        <action>
          <!-- Powershell Set-Service 'PcaSvc' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>PcaSvc</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Remote Registry" description="Enables remote users to modify registry settings on this computer." category="optional" defaultSelected="false" runOnOs="25" Id="247">
        <action>
          <!-- Powershell Set-Service 'RemoteRegistry' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>RemoteRegistry</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Quality Windows Audio Video Experience" description="It is a networking platform for Audio Video (AV) streaming applications on IP home networks." category="optional" defaultSelected="false" Id="248">
        <action>
          <!-- Powershell Set-Service 'QWAVE' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>QWAVE</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Reports and Solutions Control Panel Support" description="Provides support for viewing, sending and deletion of system-level problem reports for the Problem Reports and Solutions control panel." category="recommended" defaultSelected="false" Id="249">
        <action>
          <!-- Powershell Set-Service 'wercplsupport' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>wercplsupport</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Retail Demo Service" description="The Retail Demo service controls device activity while the device is in retail demo mode." category="recommended" defaultSelected="false" runOnOs="25" Id="250">
        <action>
          <!-- Powershell Set-Service 'RetailDemo' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>RetailDemo</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Secure Socket Tunneling Protocol Service" description="VPN tunneling service.  Not likely leveraged in a VDI environment." category="mandatory" defaultSelected="false" Id="251">
        <action>
          <!-- Powershell Set-Service 'SstpSvc' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>SstpSvc</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Security Center" description="Remove the task tray regarding security center warnings" category="optional" defaultSelected="false" Id="252">
        <action>
          <!-- Powershell Set-Service 'wscsvc' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>wscsvc</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Sensor Data Service" description="Delivers data from a variety of sensors." category="optional" defaultSelected="false" runOnOs="25" Id="253">
        <action>
          <!-- Powershell Set-Service 'SensorDataService' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>SensorDataService</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Sensor Monitoring Service" description="If this service is stopped or disabled, the display brightness will not adapt to lighting conditions." category="optional" defaultSelected="false" runOnOs="25" Id="254">
        <action>
          <!-- Powershell Set-Service 'SensrSvc' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>SensrSvc</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Sensor Service" description="If this service is stopped or disabled, the SDO sensor will not be loaded and so auto-rotation will not occur. History collection from Sensors will also be stopped." category="optional" defaultSelected="false" runOnOs="25" Id="255">
        <action>
          <!-- Powershell Set-Service 'SensorService' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>SensorService</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Shell Hardware Detection" description="If you enjoy the auto play function of CD’s and DVD’s after inserting them into your drive, leave this service on Automatic." category="optional" defaultSelected="false" Id="257">
        <action>
          <!-- Powershell Set-Service 'ShellHWDetection' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>ShellHWDetection</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="SNMP Trap" description="If this service is stopped, SNMP-based programs on this computer will not receive SNMP trap messages. If this service is disabled, any services that explicitly depend on it will fail to start." category="optional" defaultSelected="false" Id="258">
        <action>
          <!-- Powershell Set-Service 'SNMPTRAP' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>SNMPTRAP</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Spot Verifier" description="Verifies potential file system corruptions." category="optional" defaultSelected="false" runOnOs="25" Id="259">
        <action>
          <!-- Powershell Set-Service 'svsvc' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>svsvc</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="SSDP Discovery" description="Disable SSDP Discovery" category="mandatory" defaultSelected="false" Id="260">
        <action>
          <!-- Powershell Set-Service 'SSDPSRV' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>SSDPSRV</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Still Image Acquisition Events" description="Launches applications associated with still image acquisition events." category="optional" defaultSelected="false" Id="261">
        <action>
          <!-- Powershell Set-Service 'WiaRpc' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>WiaRpc</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Store Storage Service" description="Provides enabling services for storage settings and external storage expansion." category="optional" defaultSelected="false" runOnOs="25" Id="262">
        <action>
          <!-- Powershell Set-Service 'StorSvc' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>StorSvc</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Superfetch" description="Service is leveraged to optimize loading of applications over time.  In a non persistent or commodity based VDI environment this service may impact performance.  Depends on use and organization." category="recommended" defaultSelected="false" Id="263">
        <action>
          <!-- Powershell Set-Service 'SysMain' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>SysMain</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Telephony" description="Provides Telephony API (TAPI) support for programs that control telephony devices on the local computer and, through the LAN." category="optional" defaultSelected="false" Id="264">
        <action>
          <!-- Powershell Set-Service 'TapiSrv' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>TapiSrv</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Themes" description="Disable if you want to run &quot;Classic&quot; GUI" category="optional" defaultSelected="false" Id="265">
        <action>
          <!-- Powershell Set-Service 'Themes' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>Themes</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Touch Keyboard and Handwriting Panel Service" description="Disables Touch Keyboard and Handwriting Panel pen and ink functionality" category="optional" defaultSelected="false" runOnOs="25" Id="266">
        <action>
          <!-- Powershell Set-Service 'TabletInputService' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>TabletInputService</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Universal PnP Host Service" description="Dependent on the SSDP Service." category="recommended" defaultSelected="false" Id="267">
        <action>
          <!-- Powershell Set-Service 'upnphost' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>upnphost</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Windows Audio" description="Manages audio for Windows-based programs." category="optional" defaultSelected="false" Id="269">
        <action>
          <!-- Powershell Set-Service 'Audiosrv' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>Audiosrv</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Windows Audio Endpoint Builder" description="Manages audio devices for the Windows Audio service." category="optional" defaultSelected="false" Id="270">
        <action>
          <!-- Powershell Set-Service 'AudioEndpointBuilder' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>AudioEndpointBuilder</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="WAP Messages" description="WAP Push Message Routing Service" category="optional" defaultSelected="false" Id="271">
        <action>
          <!-- Powershell Set-Service 'dmwappushservice' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>dmwappushservice</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="WAP Push Message Routing Service" description="WAP Push Message Routing Service." category="optional" defaultSelected="false" Id="272">
        <action>
          <!-- Powershell Set-Service 'dmwappushsvc' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>dmwappushsvc</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Windows Backup" description="Windows Backup service used by System Restore and Windows Backups." category="optional" defaultSelected="false" Id="273">
        <action>
          <!-- Powershell Set-Service 'SDRSVC' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>SDRSVC</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Windows Biometric Service" description="If Fingerprint devices will be used, don't optimize the item." category="optional" defaultSelected="false" runOnOs="25" Id="274">
        <action>
          <!-- Powershell Set-Service 'WbioSrvc' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>WbioSrvc</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Windows Camera Frame Server" description="Enables multiple clients to access video frames from camera devices." category="optional" defaultSelected="false" runOnOs="25" Id="275">
        <action>
          <!-- Powershell Set-Service 'FrameServer' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>FrameServer</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Windows Encryption Provider Host Service" description="Windows Encryption Provider Host Service brokers encryption related functionalities from 3rd Party Encryption Providers to processes that need to evaluate and apply EAS policies." category="optional" defaultSelected="false" Id="276">
        <action>
          <!-- Powershell Set-Service 'WEPHOSTSVC' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>WEPHOSTSVC</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Windows Color System" description="Disabled third-party Windows Color System color device model and gamut map model plug-in modules." category="optional" defaultSelected="false" Id="277">
        <action>
          <!-- Powershell Set-Service 'WcsPlugInService' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>WcsPlugInService</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Windows Connect Now - Config Registrar" description="This is used to configure Wireless LAN settings for an Access Point (AP) or a Wi-Fi Device." category="recommended" defaultSelected="false" Id="278">
        <action>
          <!-- Powershell Set-Service 'wcncsvc' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>wcncsvc</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Windows Error Reporting Service" description="Error reporting services leveraged by Applications when they crash to send reports to Microsoft.  If using DER within VDI consider alternate configuration." category="recommended" defaultSelected="false" Id="279">
        <action>
          <!-- Powershell Set-Service 'WerSvc' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>WerSvc</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Windows License Manager Service" description="Provides infrastructure support for the Windows Store.  This service is started on demand and if disabled then content acquired through the Windows Store will not function properly." category="optional" defaultSelected="false" runOnOs="25" Id="281">
        <action>
          <!-- Powershell Set-Service 'LicenseManager' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>LicenseManager</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Windows Media Center Network Sharing Service" description="Used by Media Center" category="recommended" defaultSelected="false" Id="282">
        <action>
          <!-- Powershell Set-Service 'WMPNetworkSvc' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>WMPNetworkSvc</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Windows Mobile Hotspot Service" description="Provides the ability to share a cellular data connection with another device." category="optional" defaultSelected="false" runOnOs="25" Id="283">
        <action>
          <!-- Powershell Set-Service 'icssvc' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>icssvc</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Windows Search" description="If you do a lot of searching on a VM, do not disable this service." category="optional" defaultSelected="false" Id="284">
        <action>
          <!-- Powershell Set-Service 'WSearch' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>WSearch</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="WLAN AutoConfig" description="Wireless LAN Configuration - N/A for VDI environments." category="optional" defaultSelected="false" Id="286">
        <action>
          <!-- Powershell Set-Service 'Wlansvc' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>Wlansvc</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="WWAN AutoConfig" description="Service related to Mobile Broadband Devices" category="optional" defaultSelected="false" Id="287">
        <action>
          <!-- Powershell Set-Service 'WwanSvc' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>WwanSvc</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Xbox Live Auth Manager" description="Provides the ability to share a cellular data connection with another device." category="optional" defaultSelected="false" runOnOs="25" Id="288">
        <action>
          <!-- Powershell Set-Service 'XblAuthManager' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>XblAuthManager</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Xbox Live Game Save" description="This service syncs save data for Xbox Live save enabled games." category="optional" defaultSelected="false" runOnOs="25" Id="289">
        <action>
          <!-- Powershell Set-Service 'XblGameSave' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>XblGameSave</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
      <step name="Xbox Live Networking Service" description="This service supports the Windows.Networking.XboxLive applicationprogramming interface." category="optional" defaultSelected="false" runOnOs="25" Id="290">
        <action>
          <!-- Powershell Set-Service 'XboxNetApiSvc' -startuptype "Disabled" -->
          <type>Service</type>
          <params>
            <serviceName>XboxNetApiSvc</serviceName>
            <startMode>DISABLED</startMode>
          </params>
        </action>
      </step>
    </group>
    <group name="Disable UAC" description="Disable User Access Control.  Use Group Policy to configure more granularly" Id="291">
      <step name="EnableLUA" description="Set EnableLUA value to 1" category="optional" defaultSelected="false" runOnOs="25" Id="292">
        <action>
          <!-- reg ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v EnableLUA /t REG_DWORD /d 0x1 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System</keyName>
            <valueName>EnableLUA</valueName>
            <type>REG_DWORD</type>
            <data>1</data>
          </params>
        </action>
      </step>
      <step name="ConsentPromptBehaviorAdmin" description="Set ConsentPromptBehaviorAdmin value to 0" category="optional" defaultSelected="false" runOnOs="25" Id="293">
        <action>
          <!-- reg ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v ConsentPromptBehaviorAdmin /t REG_DWORD /d 0x0 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System</keyName>
            <valueName>ConsentPromptBehaviorAdmin</valueName>
            <type>REG_DWORD</type>
            <data>0</data>
          </params>
        </action>
      </step>
      <step name="ConsentPromptBehaviorUser" description="Set ConsentPromptBehaviorUser value to 0" category="optional" defaultSelected="false" runOnOs="25" Id="294">
        <action>
          <!-- reg ADD "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System" /v ConsentPromptBehaviorAdmin /t REG_DWORD /d 0x0 /f -->
          <type>Registry</type>
          <command>ADD</command>
          <params>
            <keyName>HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System</keyName>
            <valueName>ConsentPromptBehaviorUser</valueName>
            <type>REG_DWORD</type>
            <data>0</data>
          </params>
        </action>
      </step>
    </group>
    <group name="Improving Login Time" description="Improving login time for floating desktops on Horizon View." Id="295">
      <step name="Remove DOTNETFRAMEWORKS Setup" description="Remove DOTNETFRAMEWORKS setup from Personalized Settings. Optimize this item will shorten new user first login time." category="recommended" defaultSelected="false" Id="296">
        <action>
          <!-- reg delete "HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}\StubPath" -->
          <type>Registry</type>
          <command>DELETEVALUE</command>
          <params>
            <keyName>HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{89B4C1CD-B018-4511-B0A1-5476DBF70820}</keyName>
            <valueName>StubPath</valueName>
          </params>
        </action>
      </step>
      <step name="Remove Microsoft Internet Explorer ClearIconCache Setup" description="Remove Microsoft Internet Explorer ClearIconCache setup from Personlized Settings. Optimize this item will shorten new user first login time." category="recommended" defaultSelected="false" Id="297">
        <action>
          <!-- reg delete "HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{2D46B6DC-2207-486B-B523-A557E6D54B47}\StubPath" -->
          <type>Registry</type>
          <command>DELETEVALUE</command>
          <params>
            <keyName>HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{2D46B6DC-2207-486B-B523-A557E6D54B47}</keyName>
            <valueName>StubPath</valueName>
          </params>
        </action>
      </step>
      <step name="Remove Microsoft Internet Explorer Initializer Setup" description="Remove Microsoft Internet Explorer Initializer setup from Personalized Settings. Optimize this item will shorten new user first login time." category="recommended" defaultSelected="false" Id="298">
        <action>
          <!-- reg delete "HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}\StubPath" -->
          <type>Registry</type>
          <command>DELETEVALUE</command>
          <params>
            <keyName>HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4383}</keyName>
            <valueName>StubPath</valueName>
          </params>
        </action>
      </step>
      <step name="Remove Microsoft Outlook MailNews Express Setup" description="Remove Microsoft Outlook MailNews Express setup from Personalized Settings. Optimize this item will shorten new user first login time." category="recommended" defaultSelected="false" Id="299">
        <action>
          <!-- reg delete "HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}\StubPath" -->
          <type>Registry</type>
          <command>DELETEVALUE</command>
          <params>
            <keyName>HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{44BBA840-CC51-11CF-AAFA-00AA00B6015C}</keyName>
            <valueName>StubPath</valueName>
          </params>
        </action>
      </step>
      <step name="Remove Microsoft Windows Media Player 7 earlier Setup" description="Remove Microsoft Windows Media Player 7 earlier setup from Personalized Settings. Optimize this item will shorten new user first login time." category="recommended" defaultSelected="false" Id="300">
        <action>
          <!-- reg delete "HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\>{22d6f312-b0f6-11d0-94ab-0080c74c7e95}\StubPath"-->
          <type>Registry</type>
          <command>DELETEVALUE</command>
          <params>
            <keyName>HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\&gt;{22d6f312-b0f6-11d0-94ab-0080c74c7e95}</keyName>
            <valueName>StubPath</valueName>
          </params>
        </action>
      </step>
      <step name="Remove Microsoft Windows Media Player 7 or later Setup" description="Remove Microsoft Windows Media Player 7 or later setup from Personalized Settings. Optimize this item will shorten new user first login time." category="recommended" defaultSelected="false" Id="301">
        <action>
          <!-- reg delete "HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}\StubPath" -->
          <type>Registry</type>
          <command>DELETEVALUE</command>
          <params>
            <keyName>HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{6BF52A52-394A-11d3-B153-00C04F79FAA6}</keyName>
            <valueName>StubPath</valueName>
          </params>
        </action>
      </step>
      <step name="Remove Themes Setup" description="Remove Themes setup from Personlized Settings. Optimize this item will shorten new user first login time." category="recommended" defaultSelected="false" Id="302">
        <action>
          <!-- reg delete "HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}\StubPath" -->
          <type>Registry</type>
          <command>DELETEVALUE</command>
          <params>
            <keyName>HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{2C7339CF-2B09-4501-B3F3-F3508C9228ED}</keyName>
            <valueName>StubPath</valueName>
          </params>
        </action>
      </step>
      <step name="Remove Windows Desktop Update Setup" description="Remove Windows Desktop Update setup from Personalized Settings. Optimize this item will shorten new user first login time." category="recommended" defaultSelected="false" Id="303">
        <action>
          <!-- reg delete "HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4340}\StubPath" -->
          <type>Registry</type>
          <command>DELETEVALUE</command>
          <params>
            <keyName>HKLM\SOFTWARE\Microsoft\Active Setup\Installed Components\{89820200-ECBD-11cf-8B85-00AA005B4340}</keyName>
            <valueName>StubPath</valueName>
          </params>
        </action>
      </step>
    </group>
    <group name="Remove Apps" description="Remove Apps" Id="304">
      <step name="Uninstall Windows Modern Apps (All Users)" description="Perm. Uninstalls All Windows Modern Apps" category="optional" defaultSelected="false" runOnOs="25" Id="305">
        <action>
          <type>ShellExecute</type>
          <command>Powershell -ExecutionPolicy ByPass Get-AppxProvisionedPackage -online | ForEach-Object {Remove-AppxProvisionedPackage -Online -PackageName $_.PackageName} -ErrorAction SilentlyContinue</command>
        </action>
      </step>
      <step name="Remove Windows Modern Apps (All Users)" description="Perm. Removes All Windows Modern Apps" category="optional" defaultSelected="false" runOnOs="25" Id="306">
        <action>
          <type>ShellExecute</type>
          <command>Powershell -ExecutionPolicy ByPass Get-AppxPackage -AllUsers | Remove-AppxPackage -ErrorAction SilentlyContinue</command>
        </action>
      </step>
    </group>
  </group>
</sequence>