Macrium Reflect WinPE - remove networking

Discussion in 'backup, imaging & disk mgmt' started by wild4sec, Mar 5, 2023.

  1. Mr.X

    Mr.X Registered Member

    Joined:
    Aug 10, 2013
    Posts:
    4,792
    Location:
    .
    Would you care to explain this way please? I briefly searched terabyte's site but found nothing.
     
  2. aldist

    aldist Registered Member

    Joined:
    Nov 8, 2017
    Posts:
    1,102
    Location:
    Lunar module
  3. Mr.X

    Mr.X Registered Member

    Joined:
    Aug 10, 2013
    Posts:
    4,792
    Location:
    .
  4. Mr.X

    Mr.X Registered Member

    Joined:
    Aug 10, 2013
    Posts:
    4,792
    Location:
    .
    I found in TBWinPE/RE Builder some initialization options including regular network and Wi-Fi:
    01.png
    So it saves the need of an Unattend.xml file and the need of removing network drivers, I guess.
     
  5. aldist

    aldist Registered Member

    Joined:
    Nov 8, 2017
    Posts:
    1,102
    Location:
    Lunar module
    Have you already checked this with a real TB WinPE? Is the network really disconnected?
     
  6. Mr.X

    Mr.X Registered Member

    Joined:
    Aug 10, 2013
    Posts:
    4,792
    Location:
    .
    I did it yesterday although I don't really know if it was really disconnected cause TBWinPE doesn't have a GUI. However, as soon the PE loaded I launched a cmd prompt and typed ping -t 8.8.8.8 and it started replying immediately so in my opinion unchecking such setting in TBWinPE/RE Builder is not reliable at all.

    Then I tried the other option using a Unattend.xml file and it worked when I ran two times the ping command:
    Code:
    Microsoft Windows [Version 10.0.22621.1]
    (c) Microsoft Corporation. All rights reserved.
    
    X:\Windows\System32>ping -t 8.8.8.8
    Unable to contact IP driver. General failure.
    
    X:\Windows\System32>ping -t 8.8.8.8
    
    Pinging 8.8.8.8 with 32 bytes of data:
    PING: transmit failed. General failure.
    PING: transmit failed. General failure.
    PING: transmit failed. General failure.
    ..
    .
    
    Next thing I did was to Initialize the Network from the TBLauncher menu and again in a cmd prompt ran a ping command and the network was available again.
    Code:
    Microsoft Windows [Version 10.0.22621.1]
    (c) Microsoft Corporation. All rights reserved.
    
    X:\Windows\System32>ping -t 8.8.8.8
    
    Pinging 8.8.8.8 with 32 bytes of data:
    Reply from 8.8.8.8: bytes=32 time=35ms TTL=57
    Reply from 8.8.8.8: bytes=32 time=29ms TTL=57
    Reply from 8.8.8.8: bytes=32 time=25ms TTL=57
    ..
    .
    
    So you were right @aldist , the Unattend.xml file is the best and most secure way to disable the network on a PE.

    Code:
    <?xml version="1.0" encoding="utf-8"?>
    <unattend xmlns="urn:schemas-microsoft-com:unattend">
        <settings pass="windowsPE">
            <component name="Microsoft-Windows-Setup" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" processorArchitecture="AMD64">
                <EnableNetwork>false</EnableNetwork>
            </component>
        </settings>
        <cpi:offlineImage cpi:source="" xmlns:cpi="urn:schemas-microsoft-com:cpi" />
    </unattend>
    
     
  7. aldist

    aldist Registered Member

    Joined:
    Nov 8, 2017
    Posts:
    1,102
    Location:
    Lunar module
    I don't like the option to restore the network in TBLauncher either. I prefer to disable the network so that you can't turn it back on.
    Where did you put Unattend.xml, in which directory?
     
  8. Mr.X

    Mr.X Registered Member

    Joined:
    Aug 10, 2013
    Posts:
    4,792
    Location:
    .
    I dropped the file in Windows\System32 according to this remark:
    https://serverfault.com/questions/866479/disable-network-connection-in-windows-pe

    No need for wpeinit or startnet.cmd
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.