1247311 - Win 7 Disable various features and services

Status: RESOLVED FIXED

(Infrastructure & Operations :: RelOps: Puppet, task)

Description

[Mark Cornmesser [:markco] OOO 2024/04/15]

Consolidating into one bug, so they can be included into a single patch. 

Disable auto updates
Disable IIS
Disable Indexing
Disable Paging Executive
Disable Windows Defender

Comment 2

[Mark Cornmesser [:markco] OOO 2024/04/15]

Disable IIS:

An Immediate task that runs the following commands: 

dism /online /Disable-Feature /FeatureName:IIS-WebServerRole
dism /online /Disable-Feature /FeatureName:IIS-WebServer
dism /online /Disable-Feature /FeatureName:IIS-CommonHttpFeatures
dism /online /Disable-Feature /FeatureName:IIS-HttpErrors
dism /online /Disable-Feature /FeatureName:IIS-HttpRedirect
dism /online /Disable-Feature /FeatureName:IIS-ApplicationDevelopment
dism /online /Disable-Feature /FeatureName:IIS-Security
dism /online /Disable-Feature /FeatureName:IIS-URLAuthorization
dism /online /Disable-Feature /FeatureName:IIS-RequestFiltering
dism /online /Disable-Feature /FeatureName:IIS-NetFxExtensibility
dism /online /Disable-Feature /FeatureName:IIS-HealthAndDiagnostics
dism /online /Disable-Feature /FeatureName:IIS-HttpLogging
dism /online /Disable-Feature /FeatureName:IIS-LoggingLibraries
dism /online /Disable-Feature /FeatureName:IIS-RequestMonitor
dism /online /Disable-Feature /FeatureName:IIS-HttpTracing
dism /online /Disable-Feature /FeatureName:IIS-IPSecurity
dism /online /Disable-Feature /FeatureName:IIS-Performance
dism /online /Disable-Feature /FeatureName:IIS-HttpCompressionDynamic
dism /online /Disable-Feature /FeatureName:IIS-WebServerManagementTools
dism /online /Disable-Feature /FeatureName:IIS-ManagementScriptingTools
dism /online /Disable-Feature /FeatureName:IIS-IIS6ManagementCompatibility
dism /online /Disable-Feature /FeatureName:IIS-Metabase
dism /online /Disable-Feature /FeatureName:IIS-HostableWebCore
dism /online /Disable-Feature /FeatureName:IIS-ISAPIExtensions
dism /online /Disable-Feature /FeatureName:IIS-ISAPIFilter
dism /online /Disable-Feature /FeatureName:IIS-StaticContent
dism /online /Disable-Feature /FeatureName:IIS-DefaultDocument
dism /online /Disable-Feature /FeatureName:IIS-DirectoryBrowsing
dism /online /Disable-Feature /FeatureName:IIS-WebDAV
dism /online /Disable-Feature /FeatureName:IIS-ASPNET
dism /online /Disable-Feature /FeatureName:IIS-ASP
dism /online /Disable-Feature /FeatureName:IIS-CGI
dism /online /Disable-Feature /FeatureName:IIS-ServerSideIncludes
dism /online /Disable-Feature /FeatureName:IIS-CustomLogging
dism /online /Disable-Feature /FeatureName:IIS-BasicAuthentication
dism /online /Disable-Feature /FeatureName:IIS-HttpCompressionStatic
dism /online /Disable-Feature /FeatureName:IIS-ManagementConsole
dism /online /Disable-Feature /FeatureName:IIS-ManagementService
dism /online /Disable-Feature /FeatureName:IIS-WMICompatibility
dism /online /Disable-Feature /FeatureName:IIS-LegacyScripts
dism /online /Disable-Feature /FeatureName:IIS-LegacySnapIn
dism /online /Disable-Feature /FeatureName:IIS-FTPServer
dism /online /Disable-Feature /FeatureName:IIS-FTPSvc
dism /online /Disable-Feature /FeatureName:IIS-FTPExtensibility
dism /online /Disable-Feature /FeatureName:IIS-WindowsAuthentication
dism /online /Disable-Feature /FeatureName:IIS-DigestAuthentication
dism /online /Disable-Feature /FeatureName:IIS-ClientCertificateMappingAuthentication
dism /online /Disable-Feature /FeatureName:IIS-IISCertificateMappingAuthentication
dism /online /Disable-Feature /FeatureName:IIS-ODBCLogging

Comment 4

[Mark Cornmesser [:markco] OOO 2024/04/15]

Disable Indexing:
This will involve disabling CiSvc and Wsearch services.

Comment 6

[Mark Cornmesser [:markco] OOO 2024/04/15]

Disable Indexing:

Conditional will need to be added to tweaks::memory_paging to include: 

hklm\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management\DisablePagingExecutive value 1

for win 7

Comment 8

[Mark Cornmesser [:markco] OOO 2024/04/15]

Disabled Win Defender: 

Need to set:

HKLM\SOFTWARE\Microsoft\Windows Defender\Scan\DisableRemovableDriveScanning 1

Comment 10

[Mark Cornmesser [:markco] OOO 2024/04/15]

Removing Disable IIS from this bug, and keeping it as it own bug.

Comment 11

[Mark Cornmesser [:markco] OOO 2024/04/15]

(In reply to Mark Cornmesser [:markco] from comment #4)
> Disable Indexing:
> This will involve disabling CiSvc and Wsearch services.

CiSvc is not installed on Win 7.

Comment 12

[Mark Cornmesser [:markco] OOO 2024/04/15]

Attachment: Bug1247311.patch

Disable auto updates = (no change) disableservices::disableupdates
Disable Indexing = disableservices::disable_indexing
Disable Paging Executive =  tweaks::memory_paging
Disable Windows Defender = disableservices::disable_win_defend


Toplevel support for Win 7 will be done at a latter time.

Comment 13

[Mark Cornmesser [:markco] OOO 2024/04/15]

Comment on attachment 8718051 [details] [diff] [review]
Bug1247311.patch

https://hg.mozilla.org/build/puppet/rev/82f8fc27d7fc