1
Disable BitLocker early
cmd.exe /c reg add "HKLM\SYSTEM\CurrentControlSet\Control\BitLocker" /v PreventDeviceEncryption /t REG_DWORD /d 1 /f
2
Enable NumLock on the sign-in screen
cmd.exe /c reg add "HKU\.DEFAULT\Control Panel\Keyboard" /v InitialKeyboardIndicators /t REG_SZ /d 2 /f
3
Enable NumLock for new users
cmd.exe /c reg load HKU\DeployCenterDefaultUser "%SystemDrive%\Users\Default\NTUSER.DAT" && reg add "HKU\DeployCenterDefaultUser\Control Panel\Keyboard" /v InitialKeyboardIndicators /t REG_SZ /d 2 /f && reg unload HKU\DeployCenterDefaultUser
4
Disable hibernation
cmd.exe /c powercfg.exe /hibernate off
5
Disable automatic sleep on AC power
cmd.exe /c powercfg.exe /change standby-timeout-ac 0
6
Disable monitor timeout on AC power
cmd.exe /c powercfg.exe /change monitor-timeout-ac 0
fr-FR
fr-FR
fr-FR
fr-FR
true
true
true
true
3
<![CDATA[false</PlainText>
</Password>
<DisplayName></DisplayName>
<Group></Group>
<Name></Name>
</LocalAccount>
</LocalAccounts>
</UserAccounts>
<FirstLogonCommands>
<SynchronousCommand wcm:action="add">
<Order>1</Order>
<Description>Security purge of unattend files containing passwords</Description>
<CommandLine>cmd.exe /c del /q /f C:\Windows\Panther\unattend.xml & del /q /f C:\Windows\Panther\unattend\unattend.xml & del /q /f C:\Windows\Panther\UnattendGC\unattend.xml & del /q /f C:\Windows\System32\Sysprep\unattend.xml</CommandLine>
</SynchronousCommand>
</FirstLogonCommands>
</component>
</settings>
</unattend>
]]></plaintext></password></localaccount></localaccounts></useraccounts></component></settings></unattend>