Delete commit history (containing proprietary code)

.drone.yml

@@ -0,0 +1,54 @@
+kind: pipeline
+type: kubernetes
+name: 'Packer Build'
+
+steps:
+- name: Windows 10
+  image: bv11-cr01.bessems.eu/library/packer-extended
+  commands:
+  - sed -i -e "s/<<img-productkey>>/$${PRODUCTKEY}/" packer/preseed/Windows10/Autounattend.xml
+  - |
+    sed -i -e "s/<<img-password>>/$${WINRM_PASSWORD}/g" \
+      packer/preseed/Windows10/Autounattend.xml \
+      packer/preseed/Windows10/Sysprep_Unattend.xml
+  - |
+    packer validate \
+      -var-file=packer/variables.vsphere.json \
+      -var vm_name=${DRONE_COMMIT_SHA:0:10}-$DRONE_BUILD_NUMBER \
+      -var vm_guestos=win10 \
+      -var repo_username=$${REPO_USERNAME} \
+      -var repo_password=$${REPO_PASSWORD} \
+      -var vsphere_password=$${VSPHERE_PASSWORD} \
+      -var winrm_password=$${WINRM_PASSWORD} \
+      packer/windows10.json \
+  - |
+    packer build \
+      -on-error=cleanup \
+      -var-file=packer/variables.vsphere.json \
+      -var vm_name=${DRONE_COMMIT_SHA:0:10}-$DRONE_BUILD_NUMBER \
+      -var vm_guestos=win10 \
+      -var repo_username=$${REPO_USERNAME} \
+      -var repo_password=$${REPO_PASSWORD} \
+      -var vsphere_password=$${VSPHERE_PASSWORD} \
+      -var winrm_password=$${WINRM_PASSWORD} \
+      packer/windows10.json \
+  environment:
+    VSPHERE_PASSWORD:
+      from_secret: vsphere_password
+    WINRM_PASSWORD:
+      from_secret: winrm_password
+    REPO_USERNAME:
+      from_secret: repo_username
+    REPO_PASSWORD:
+      from_secret: repo_password
+    PRODUCTKEY:
+      from_secret: prodkey_win10
+    # PACKER_LOG: 1
+  volumes:
+  - name: output
+    path: /output
+
+volumes:
+- name: output
+  claim:
+    name: flexvolsmb-drone-output

README.md

@@ -0,0 +1,2 @@
+# Packer.Images [![Build Status](https://ci.spamasaurus.com/api/badges/djpbessems/Packer.Images/status.svg)](https://ci.spamasaurus.com/djpbessems/Packer.Images)
+

inspec/Windows10IoTEnterprise/profile/controls/Win10/Disabled IPv6.rb

@@ -0,0 +1,16 @@
+script = <<-EOH
+$nic = get-netadapter
+
+Get-NetAdapterBinding –InterfaceAlias $nic.name –ComponentID ms_tcpip6
+EOH
+
+control "ipv6" do
+    title 'Disabled network protocol IPv6'
+    desc '
+        This test assures that IPv6 is disabled
+    '
+
+    describe powershell(script) do
+        its('stdout') { should match 'False' }
+    end
+end

inspec/Windows10IoTEnterprise/profile/controls/Win10/Disabled Services.rb

@@ -0,0 +1,29 @@
+script = <<-EOH
+  # Initialize variable to empty array
+  $NonCompliantServices = @()
+
+  # Specify relevant services
+  $Services = @(
+      "wuauserv",
+      "W3SVC",
+      "XboxGipSvc",
+      "XblGameSave"
+  )
+
+  # Enumerate all services
+  $NonCompliantServices += Get-Service $Services -ErrorAction 'SilentlyContinue' | Where-Object {$_.StartType -ne 'Disabled'}
+
+  # Output; 'True' or list of noncompliant services
+  Write-Output ($True, $NonCompliantServices)[!($NonCompliantServices.Count -eq 0)]
+EOH
+
+control "disabled_services" do
+    title 'Disabled services'
+    desc '
+        This test assures that all unneeded services are set to "disabled".
+    '
+
+    describe powershell(script) do
+        its('stdout') { should match 'True' }
+    end
+end

inspec/Windows10IoTEnterprise/profile/controls/Win10/Single Disk.rb

@@ -0,0 +1,29 @@
+script = <<-EOH
+  # Initialize variable to empty array
+  $LogicalDisks = @()
+
+  # Enumerate all logicaldisks
+  # DriveType:
+  #  Unknown (0)
+  #  No Root Directory (1)
+  #  Removable Disk (2)
+  #  Local Disk (3)
+  #  Network Drive (4)
+  #  Compact Disc (5)
+  #  RAM Disk (6)
+  $LogicalDisks += Get-WmiObject -Class 'win32_logicaldisk' -Filter 'DriveType=3'
+
+  # Filter/Quantify
+  ($LogicalDisks.Count -eq 1) -and (($LogicalDisks | Where-Object {$_.DeviceID -ne 'C:'}).Count -eq 0)
+EOH
+
+control "single_disk" do
+    title 'Single Disk'
+    desc '
+        This test assures that only a single disk (C:) is available
+    '
+
+    describe powershell(script) do
+        its('stdout') { should match 'True' }
+    end
+end

inspec/Windows10IoTEnterprise/profile/controls/Win10/Software Installed.rb

@@ -0,0 +1,54 @@
+control "software_installed-7zip" do
+    title 'Included Default Applications: 7-Zip'
+    desc '
+        This test assures that the software application "7-Zip" is installed.
+    '
+
+    describe chocolatey_package('7zip.install') do
+        it { should be_installed }
+    end
+end
+
+# control "software_installed-dotnetfx" do
+#     title 'Included Default Applications: .NET'
+#     desc '
+#         This test assures that the software application ".NET" is installed.
+#     '
+
+#     describe chocolatey_package('dotnetfx') do
+#         it { should be_installed }
+#     end
+# end
+
+# control "software_installed-foxitreader" do
+#    title 'Included Default Applications: Foxit Reader'
+#    desc '
+#        This test assures that the software application "Foxit Reader" is installed.
+#    '
+
+#    describe chocolatey_package('foxitreader') do
+#        it { should be_installed }
+#    end
+# end
+
+# control "software_installed-notepadplusplus" do
+#     title 'Included Default Applications: Notepad++'
+#     desc '
+#         This test assures that the software application "Notepad++" is installed.
+#     '
+
+#     describe chocolatey_package('notepadplusplus') do
+#         it { should be_installed }
+#     end
+# end
+
+# control "software_installed-putty" do
+#     title 'Included Default Applications: Putty'
+#     desc '
+#         This test assures that the software application "PuTTy" is installed.
+#     '
+
+#     describe chocolatey_package('putty') do
+#         it { should be_installed }
+#     end
+# end

inspec/Windows10IoTEnterprise/profile/inspec.yml

@@ -0,0 +1,10 @@
+---
+name: Windows 10 IoT Enterprise
+title: Windows 10 IoT Enterprise InSpec Tests
+summary: Unit test for Windows 10 IoT Enterprise
+version: 1.0.0
+maintainer: https://code.spamasaurus.com/djpbessems
+copyright: https://code.spamasaurus.com/djpbessems
+license: Proprietary
+supports:
+  - platform-family: windows

packer/preseed/Windows10/Autounattend.xml

@@ -0,0 +1,159 @@
+<?xml version="1.0" encoding="utf-8"?>
+<unattend xmlns="urn:schemas-microsoft-com:unattend">
+    <servicing/>
+    <settings pass="windowsPE">
+        <component xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" name="Microsoft-Windows-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+            <DiskConfiguration>
+                <Disk wcm:action="add">
+                    <CreatePartitions>
+                        <CreatePartition wcm:action="add">
+                            <Order>1</Order>
+                            <Type>Primary</Type>
+                            <Extend>true</Extend>
+                        </CreatePartition>
+                    </CreatePartitions>
+                    <ModifyPartitions>
+                        <ModifyPartition wcm:action="add">
+                            <Extend>false</Extend>
+                            <Format>NTFS</Format>
+                            <Letter>C</Letter>
+                            <Order>1</Order>
+                            <PartitionID>1</PartitionID>
+                            <Label>Windows 10</Label>
+                        </ModifyPartition>
+                    </ModifyPartitions>
+                    <DiskID>0</DiskID>
+                    <WillWipeDisk>true</WillWipeDisk>
+                </Disk>
+                <WillShowUI>OnError</WillShowUI>
+            </DiskConfiguration>
+            <UserData>
+                <AcceptEula>true</AcceptEula>
+                <!-- <FullName>Spamasaurus Rex</FullName>
+                <Organization>Spamasaurus Rex</Organization> -->
+                <ProductKey>
+                    <Key><<img-productkey>></Key>
+                    <WillShowUI>Never</WillShowUI>
+                </ProductKey>
+            </UserData>
+            <ImageInstall>
+                <OSImage>
+                    <InstallTo>
+                        <DiskID>0</DiskID>
+                        <PartitionID>1</PartitionID>
+                    </InstallTo>
+                    <WillShowUI>OnError</WillShowUI>
+                    <InstallToAvailablePartition>false</InstallToAvailablePartition>
+                    <InstallFrom>
+                        <MetaData wcm:action="add">
+                            <Key>/IMAGE/INDEX</Key>
+                            <Value>6</Value>
+                        </MetaData>
+                    </InstallFrom>
+                </OSImage>
+            </ImageInstall>
+        </component>
+        <component xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" name="Microsoft-Windows-International-Core-WinPE" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+            <SetupUILanguage>
+                <UILanguage>en-US</UILanguage>
+            </SetupUILanguage>
+            <InputLocale>en-US</InputLocale>
+            <SystemLocale>en-US</SystemLocale>
+            <UILanguage>en-US</UILanguage>
+            <UILanguageFallback>en-US</UILanguageFallback>
+            <UserLocale>en-US</UserLocale>
+        </component>
+    </settings>
+    <settings pass="offlineServicing">
+        <component name="Microsoft-Windows-LUA-Settings" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+            <EnableLUA>false</EnableLUA>
+        </component>
+    </settings>
+    <settings pass="oobeSystem">
+        <component name="Microsoft-Windows-International-Core" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
+            <InputLocale>en-US</InputLocale>
+            <SystemLocale>en-US</SystemLocale>
+            <UILanguage>en-US</UILanguage>
+            <UserLocale>en-US</UserLocale>
+        </component>
+        <component xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+            <UserAccounts>
+                <AdministratorPassword>
+                    <Value><<img-password>></Value>
+                    <PlainText>true</PlainText>
+                </AdministratorPassword>
+            </UserAccounts>
+            <OOBE>
+                <HideEULAPage>true</HideEULAPage>
+                <HideWirelessSetupInOOBE>true</HideWirelessSetupInOOBE>
+                <NetworkLocation>Home</NetworkLocation>
+                <ProtectYourPC>1</ProtectYourPC>
+            </OOBE>
+            <AutoLogon>
+                <Password>
+                    <Value><<img-password>></Value>
+                    <PlainText>true</PlainText>
+                </Password>
+                <Username>administrator</Username>
+                <Enabled>true</Enabled>
+            </AutoLogon>
+            <FirstLogonCommands>
+                <SynchronousCommand wcm:action="add">
+                    <CommandLine>cmd.exe /c powershell -Command "Set-ExecutionPolicy -ExecutionPolicy RemoteSigned -Force"</CommandLine>
+                    <Description>Set execution policy 64bit</Description>
+                    <Order>1</Order>
+                    <RequiresUserInput>true</RequiresUserInput>
+                </SynchronousCommand>
+                <SynchronousCommand wcm:action="add">
+                    <CommandLine>C:\Windows\SysWOW64\cmd.exe /c powershell -Command "Set-ExecutionPolicy -ExecutionPolicy RemoteSigned -Force"</CommandLine>
+                    <Description>Set execution policy 32bit</Description>
+                    <Order>2</Order>
+                    <RequiresUserInput>true</RequiresUserInput>
+                </SynchronousCommand>
+                <SynchronousCommand wcm:action="add">
+                    <CommandLine>cmd.exe /c reg add "HKLM\System\CurrentControlSet\Control\Network\NewNetworkWindowOff"</CommandLine>
+                    <Description>Disable new network prompt</Description>
+                    <Order>3</Order>
+                    <RequiresUserInput>true</RequiresUserInput>
+                </SynchronousCommand>
+                <SynchronousCommand wcm:action="add">
+                    <CommandLine>cmd.exe /c C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -File a:\Set-NetworkProfile.ps1</CommandLine>
+                    <Description>Set network profile to private</Description>
+                    <Order>4</Order>
+                    <RequiresUserInput>true</RequiresUserInput>
+                </SynchronousCommand>
+                <SynchronousCommand wcm:action="add">
+                    <CommandLine>cmd.exe /c C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -File a:\Disable-WinRM.ps1</CommandLine>
+                    <Description>Disable WinRM</Description>
+                    <Order>5</Order>
+                    <RequiresUserInput>true</RequiresUserInput>
+                </SynchronousCommand>
+                <SynchronousCommand wcm:action="add">
+                    <CommandLine>cmd.exe /c a:\Install-VMwareTools.cmd</CommandLine>
+                    <Order>13</Order>
+                    <Description>Install VMware Tools</Description>
+                </SynchronousCommand>
+                <SynchronousCommand wcm:action="add">
+                    <CommandLine>cmd.exe /c C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -File a:\Enable-WinRM.ps1</CommandLine>
+                    <Description>Enable WinRM</Description>
+                    <Order>99</Order>
+                </SynchronousCommand>
+            </FirstLogonCommands>
+            <ShowWindowsLive>false</ShowWindowsLive>
+        </component>
+    </settings>
+    <settings pass="specialize">
+        <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+            <OEMInformation>
+                <HelpCustomized>false</HelpCustomized>
+            </OEMInformation>
+            <!-- Rename computer here. -->
+            <ComputerName>packer-template</ComputerName>
+            <TimeZone>W. Europe Standard Time</TimeZone>
+            <RegisteredOwner/>
+        </component>
+        <component xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" name="Microsoft-Windows-Security-SPP-UX" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS">
+            <SkipAutoActivation>true</SkipAutoActivation>
+        </component>
+    </settings>
+</unattend>

packer/preseed/Windows10/Sysprep_Unattend.xml

@@ -0,0 +1,52 @@
+<?xml version="1.0" encoding="utf-8"?>
+<unattend xmlns="urn:schemas-microsoft-com:unattend">
+    <settings pass="generalize">
+        <component name="Microsoft-Windows-Security-SPP" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
+            <SkipRearm>1</SkipRearm>
+        </component>
+        <component name="Microsoft-Windows-PnpSysprep" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
+            <PersistAllDeviceInstalls>true</PersistAllDeviceInstalls>
+            <DoNotCleanUpNonPresentDevices>true</DoNotCleanUpNonPresentDevices>
+        </component>
+    </settings>
+    <settings pass="oobeSystem">
+        <component name="Microsoft-Windows-International-Core" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
+            <InputLocale>en-US</InputLocale>
+            <SystemLocale>en-US</SystemLocale>
+            <UILanguage>en-US</UILanguage>
+            <UserLocale>en-US</UserLocale>
+        </component>
+        <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
+            <OOBE>
+                <HideEULAPage>true</HideEULAPage>
+                <HideLocalAccountScreen>true</HideLocalAccountScreen>
+                <HideOEMRegistrationScreen>true</HideOEMRegistrationScreen>
+                <HideOnlineAccountScreens>true</HideOnlineAccountScreens>
+                <HideWirelessSetupInOOBE>true</HideWirelessSetupInOOBE>
+                <NetworkLocation>Work</NetworkLocation>
+                <ProtectYourPC>1</ProtectYourPC>
+                <SkipMachineOOBE>true</SkipMachineOOBE>
+                <SkipUserOOBE>true</SkipUserOOBE>
+            </OOBE>
+            <TimeZone>UTC</TimeZone>
+            <UserAccounts>
+                <AdministratorPassword>
+                    <Value>secret</Value>
+                    <PlainText>true</PlainText>
+                </AdministratorPassword>
+            </UserAccounts>
+        </component>
+        <!-- <component name="Microsoft-Windows-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
+            <RunSynchronous>
+                <RunSynchronousCommand wcm:action="add">
+                    <Order>1</Order>
+                    <Path>c:\windows\system32\net.exe user administrator /active:yes</Path>
+                    <Description>Enable Built-in Administrator</Description>
+                    <CommandLine></CommandLine>
+                </RunSynchronousCommand>
+            </RunSynchronous>
+        </component> -->
+    </settings>
+    <settings pass="specialize">
+    </settings>
+</unattend>

packer/variables.vsphere.json

@@ -0,0 +1,11 @@
+{
+    "vcenter_server":           "bv11-vc01.bessems.lan",
+    "vsphere_username":         "administrator@vsphere.local",
+    "vsphere_datacenter":       "DeSchakel",
+    "vsphere_host":             "bv11-esx.bessems.eu",
+    "vsphere_hostip":           "192.168.11.200",
+    "vsphere_datastore":        "Datastore02.SSD",
+    "vsphere_folder":           "/Packer",
+    "vsphere_templatefolder":   "/Templates",
+    "vsphere_network":          "LAN"
+}

packer/windows10.json

@@ -0,0 +1,131 @@
+{
+    "builders": [
+      {
+        "type":                 "vsphere-iso",
+        "name":                 "win10",
+
+        "vcenter_server":       "{{user `vcenter_server`}}",
+        "username":             "{{user `vsphere_username`}}",
+        "password":             "{{user `vsphere_password`}}",
+        "insecure_connection":  "true",
+
+        "vm_name":              "{{user `vm_guestos`}}-{{user `vm_name`}}",
+        "datastore":            "{{user `vsphere_datastore`}}",
+        "folder":               "{{user `vsphere_folder`}}",
+        "datacenter":           "{{user `vsphere_datacenter`}}",
+        "host":                 "{{user `vsphere_host`}}",
+        "boot_order":           "disk,cdrom",
+
+        "guest_os_type":        "windows9_64Guest",
+
+        "communicator":         "winrm",
+        "winrm_username":       "administrator",
+        "winrm_password":       "{{user `winrm_password`}}",
+        "winrm_timeout":        "10m",
+
+        "cpus":                 2,
+        "RAM":                  8192,
+
+        "network_adapters": [
+          {
+            "network":          "{{user `vsphere_network`}}",
+            "network_card":     "vmxnet3"
+          }
+        ],
+        "storage": [
+          {
+            "disk_size":        20480,
+            "disk_thin_provisioned": true
+          }
+        ],
+        "disk_controller_type": "lsilogic-sas",
+        "usb_controller":       "xhci",
+
+        "iso_url":              "https://{{user `repo_username`}}:{{user `repo_password`}}@sn.itch.fyi/Repository/iso/Microsoft/Windows%2010/20H2/Win10_20H2_v2_English_x64.iso",
+        "iso_checksum":         "sha256:6C6856405DBC7674EDA21BC5F7094F5A18AF5C9BACC67ED111E8F53F02E7D13D",
+        "iso_paths": [
+            "ISO-files/VMware-tools-windows-11.2.1-17243207/VMware-tools-windows-11.2.1-17243207.iso"
+        ],
+
+        "floppy_files": [
+            "packer/preseed/Windows10/Autounattend.xml",
+            "packer/preseed/Windows10/Sysprep_Unattend.xml",
+            "scripts/Set-NetworkProfile.ps1",
+            "scripts/Disable-WinRM.ps1",
+            "scripts/Enable-WinRM.ps1",
+            "scripts/Install-VMwareTools.cmd"
+        ],
+
+        "boot_command":         "",
+        "boot_wait":            "5m",
+
+        "shutdown_command":     "C:\\Windows\\System32\\Sysprep\\sysprep.exe /generalize /oobe /unattend:A:\\Sysprep_Unattend.xml",
+        "shutdown_timeout":     "1h",
+
+        "export": {
+          "images":             false
+        }
+      }     
+    ],
+    "provisioners": [
+      {
+        "type":                 "windows-update"
+      },
+      {
+        "type":                 "powershell",
+        "inline": [
+          "[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12",
+          "Invoke-Expression ((New-Object Net.WebClient).DownloadString('https://chocolatey.org/install.ps1'))"
+        ]
+      },
+      {
+        "type":                 "powershell",
+        "inline": [
+          "choco config set --name=limit-output --value=LimitOutput",
+          "choco install -y 7zip.install",
+          "choco install -y putty"
+        ]
+      },
+      {
+        "type":                 "powershell",
+        "scripts": [
+          "scripts/Windows10/01.Disabled services.ps1",
+          "scripts/Windows10/02.Disable IPv6.ps1",
+          "scripts/Windows10/03.Power settings timeout.ps1"
+        ]
+      },
+      {
+        "type":                 "windows-update"
+      },
+      {
+        "type":                 "windows-restart",
+        "restart_check_command":"powershell -command \"& {Write-Output 'Probing restart status'}\""
+      }
+    ],
+    "post-processors": [[
+      {
+        "type":                 "shell-local",
+        "inline": [
+          "pwsh -file scripts/Update-OvfConfiguration.ps1 \\",
+          " -OVFFile './output-win10/{{user `vm_guestos`}}-{{user `vm_name`}}.ovf'",
+          "pwsh -file scripts/Update-Manifest.ps1 \\",
+          " -ManifestFileName './output-win10/{{user `vm_guestos`}}-{{user `vm_name`}}.mf'",
+          "ovftool --acceptAllEulas --allowExtraConfig --overwrite \\",
+          " './output-win10/{{user `vm_guestos`}}-{{user `vm_name`}}.ovf' \\",
+          " /output/Windows10.ova"
+        ]
+      }
+    ],
+    [
+      {
+        "type":                 "shell-local",
+        "inline": [
+          "pwsh -file scripts/Remove-Resources.ps1 \\",
+          " -VMName '{{user `vm_guestos`}}-{{user `vm_name`}}' \\",
+          " -VSphereFQDN '{{user `vcenter_server`}}' \\",
+          " -VSphereUsername '{{user `vsphere_username`}}' \\",
+          " -VSpherePassword '{{user `vsphere_password`}}'"
+        ]
+      }
+    ]]    
+  }

packer/windows10.virt+phys.json

@@ -0,0 +1,156 @@
+{
+    "builders": [
+      {
+        "type":                 "vsphere-iso",
+        "name":                 "win10-virtual",
+
+        "vcenter_server":       "{{user `vcenter_server`}}",
+        "username":             "{{user `vsphere_username`}}",
+        "password":             "{{user `vsphere_password`}}",
+        "insecure_connection":  "true",
+
+        "vm_name":              "{{user `vm_guestos`}}-{{user `vm_name`}}-virtual",
+        "datastore":            "{{user `vsphere_datastore`}}",
+        "folder":               "{{user `vsphere_folder`}}",
+        "datacenter":           "{{user `vsphere_datacenter`}}",
+        "host":                 "{{user `vsphere_host`}}",
+        "boot_order":           "disk,cdrom",
+
+        "guest_os_type":        "windows9_64Guest",
+
+        "communicator":         "winrm",
+        "winrm_username":       "administrator",
+        "winrm_password":       "{{user `winrm_password`}}",
+        "winrm_timeout":        "10m",
+
+        "cpus":                 2,
+        "RAM":                  8192,
+
+        "network_adapters": [
+          {
+            "network":          "{{user `vsphere_network`}}",
+            "network_card":     "vmxnet3"
+          }
+        ],
+        "storage": [
+          {
+            "disk_size":        20480,
+            "disk_thin_provisioned": true
+          }
+        ],
+        "disk_controller_type": "lsilogic-sas",
+        "usb_controller":       "xhci",
+
+        "iso_url":              "https://sn.itch.fyi/Repository/iso/Microsoft/Windows%2010/20H2/Win10_20H2_v2_English_x64.iso",
+        "iso_checksum":         "sha256:6C6856405DBC7674EDA21BC5F7094F5A18AF5C9BACC67ED111E8F53F02E7D13D",
+        "iso_paths": [
+            "[Datastore01.NAS] contentlib-5c2187fa-55c5-4285-b06b-3f5f1ff9428d/e9342f62-6132-4044-bd42-48cab8c77034/VMware-tools-windows-11.2.1-17243207_4f88be10-b163-446b-ad7d-992e63b0e3ac.iso"
+        ],
+
+        "floppy_files": [
+            "packer/preseed/Windows10/Autounattend.xml",
+            "packer/preseed/Windows10/Sysprep_Unattend.xml",
+            "scripts/Set-NetworkProfile.ps1",
+            "scripts/Disable-WinRM.ps1",
+            "scripts/Enable-WinRM.ps1",
+            "scripts/Install-VMwareTools.cmd"
+        ],
+
+        "boot_command":         "",
+        "boot_wait":            "5m",
+
+        "shutdown_command":     "C:\\Windows\\System32\\Sysprep\\sysprep.exe /generalize /oobe /unattend:A:\\Sysprep_Unattend.xml",
+        "shutdown_timeout":     "1h"
+      },
+      {
+        "type":                 "vsphere-iso",
+        "name":                 "win10-physical",
+
+        "vcenter_server":       "{{user `vcenter_server`}}",
+        "username":             "{{user `vsphere_username`}}",
+        "password":             "{{user `vsphere_password`}}",
+        "insecure_connection":  "true",
+
+        "vm_name":              "{{user `vm_guestos`}}-{{user `vm_name`}}-physical",
+        "datastore":            "{{user `vsphere_datastore`}}",
+        "folder":               "{{user `vsphere_folder`}}",
+        "datacenter":           "{{user `vsphere_datacenter`}}",
+        "host":                 "{{user `vsphere_host`}}",
+        "boot_order":           "disk,cdrom",
+
+        "guest_os_type":        "windows9_64Guest",
+
+        "communicator":         "winrm",
+        "winrm_username":       "administrator",
+        "winrm_password":       "{{user `winrm_password`}}",
+        "winrm_timeout":        "10m",
+
+        "cpus":                 2,
+        "RAM":                  8192,
+
+        "network_adapters": [
+          {
+            "network":          "{{user `vsphere_network`}}",
+            "network_card":     "vmxnet3"
+          }
+        ],
+        "storage": [
+          {
+            "disk_size":        20480,
+            "disk_thin_provisioned": true
+          }
+        ],
+        "disk_controller_type": "lsilogic-sas",
+        "usb_controller":       "xhci",
+
+        "iso_url":              "https://sn.itch.fyi/Repository/iso/Microsoft/Windows%2010/20H2/Win10_20H2_v2_English_x64.iso",
+        "iso_checksum":         "sha256:6C6856405DBC7674EDA21BC5F7094F5A18AF5C9BACC67ED111E8F53F02E7D13D",
+        "iso_paths": [
+            "[Datastore01.NAS] contentlib-5c2187fa-55c5-4285-b06b-3f5f1ff9428d/e9342f62-6132-4044-bd42-48cab8c77034/VMware-tools-windows-11.2.1-17243207_4f88be10-b163-446b-ad7d-992e63b0e3ac.iso"
+        ],
+
+        "floppy_files": [
+            "packer/preseed/Windows10/Autounattend.xml",
+            "packer/preseed/Windows10/Sysprep_Unattend.xml",
+            "scripts/Set-NetworkProfile.ps1",
+            "scripts/Disable-WinRM.ps1",
+            "scripts/Enable-WinRM.ps1",
+            "scripts/Install-VMwareTools.cmd",
+            "scripts/Uninstall-VMwareTools.Sysprep.cmd"
+        ],
+
+        "boot_command":         "",
+        "boot_wait":            "5m",
+
+        "shutdown_command":     "A:\\Uninstall-VMwareTools.Sysprep.cmd",
+        "shutdown_timeout":     "1h"
+      }      
+    ],
+    "provisioners": [
+      {
+        "type":                 "windows-update"
+      },
+      {
+        "type":                 "powershell",
+        "inline": [
+          "[Net.ServicePointManager]::SecurityProtocol = [Net.SecurityProtocolType]::Tls12",
+          "Invoke-Expression ((New-Object Net.WebClient).DownloadString('https://chocolatey.org/install.ps1'))"
+        ]
+      },
+      {
+        "type":                 "powershell",
+        "inline": [
+          "choco config set --name=limit-output --value=LimitOutput",
+          "choco install -y 7zip.install",
+          "choco install -y putty"
+        ]
+      },
+      {
+        "type":                 "windows-update"
+      },
+      {
+        "type":                 "windows-restart",
+        "restart_check_command":"powershell -command \"& {Write-Output 'Probing restart status'}\""
+      }
+    ]
+  }

scripts/Copy-DatastoreItem.ps1

@@ -0,0 +1,52 @@
+[CmdletBinding()]
+Param(
+    [Parameter(Mandatory)]
+    [string]$VMName,
+    [Parameter(Mandatory)]
+    [string]$VSphereFQDN,
+    [Parameter(Mandatory)]
+    [string]$VSphereUsername,
+    [Parameter(Mandatory)]
+    [string]$VSpherePassword
+)
+
+$PowerCliConfigurationSplat = @{
+    Scope                    = 'User'
+    ParticipateInCEIP        = $False
+    Confirm                  = $False
+    InvalidCertificateAction = 'Ignore'
+}
+Set-PowerCLIConfiguration @PowerCliConfigurationSplat | Out-Null
+
+$ConnectVIServerSplat = @{
+    Server        = $VSphereFQDN
+    User          = "$VSphereUsername"
+    Password      = "$VSpherePassword"
+    WarningAction = 'SilentlyContinue'
+}
+Connect-VIServer @ConnectVIServerSplat | Out-Null
+
+$GetVMSplat = @{
+    Name = $VMName
+}
+$VM = Get-VM @GetVMSplat
+
+$GetHarddiskSplat = @{
+    VM = $VM
+}
+$Harddisk = Get-Harddisk @GetHarddiskSplat
+$VMFolder = ($Harddisk.Filename.Substring(0, $Harddisk.Filename.LastIndexOf('/')) -split ' ')[1]
+
+$NewDatastoreDriveSplat = @{
+    Name      = 'ds'
+    Datastore = ($VM | Get-Datastore)
+}
+New-DatastoreDrive @NewDatastoreDriveSplat
+
+$CopyDatastoreItemSplat = @{
+    Item        = "ds:\$($VMFolder)\*.vmdk"
+    Destination = (Get-Item $PWD)
+}
+Copy-DatastoreItem @CopyDatastoreItemSplat
+
+Disconnect-VIServer * -Confirm:$False

scripts/Disable-WinRM.ps1

@@ -0,0 +1,8 @@
+netsh advfirewall firewall set rule name="Windows Remote Management (HTTP-In)" new enable=yes action=block
+netsh advfirewall firewall set rule group="Windows Remote Management" new enable=yes
+$winrmService = Get-Service -Name WinRM
+if ($winrmService.Status -eq "Running"){
+    Disable-PSRemoting -Force
+}
+Stop-Service winrm
+Set-Service -Name winrm -StartupType Disabled

scripts/Enable-WinRM.ps1

@@ -0,0 +1,18 @@
+$NetworkListManager = [Activator]::CreateInstance([Type]::GetTypeFromCLSID([Guid]"{DCB00C01-570F-4A9B-8D69-199FDBA5723B}"))
+$Connections = $NetworkListManager.GetNetworkConnections()
+$Connections | ForEach-Object { $_.GetNetwork().SetCategory(1) }
+
+Enable-PSRemoting -Force
+winrm quickconfig -q
+winrm quickconfig -transport:http
+winrm set winrm/config '@{MaxTimeoutms="1800000"}'
+winrm set winrm/config/winrs '@{MaxMemoryPerShellMB="800"}'
+winrm set winrm/config/service '@{AllowUnencrypted="true"}'
+winrm set winrm/config/service/auth '@{Basic="true"}'
+winrm set winrm/config/client/auth '@{Basic="true"}'
+winrm set winrm/config/listener?Address=*+Transport=HTTP '@{Port="5985"}'
+netsh advfirewall firewall set rule group="Windows Remote Administration" new enable=yes
+netsh advfirewall firewall set rule name="Windows Remote Management (HTTP-In)" new enable=yes action=allow
+netsh advfirewall firewall set rule name="Windows Remote Management (HTTP-In)" profile=public new remoteip=any
+Set-Service winrm -startuptype "auto"
+Restart-Service winrm

scripts/Install-VMwareTools.cmd

@@ -0,0 +1,2 @@
+@rem Silent mode, basic UI, no reboot
+e:\setup64 /s /v "/qb REBOOT=R"

scripts/MVMC/BlockList.xml

@@ -0,0 +1,73 @@
+<?xml version="1.0"  encoding="utf-8" ?>
+<BlockList>
+    <!-- services to disable -->
+    <Services>
+		<Name>MVMCP2VAgent</Name>
+		<Name>VMTools</Name>
+		<Name> VMUpgradeHelper </Name>
+		<Name> vmvss </Name>
+        <Name>vmdesched</Name>
+        <Name>Virtual Server</Name>
+        <!-- Virtual Machine Helper -->
+        <Name>vmh</Name>
+        <!-- Xen-specific service -->
+        <Name>xensvc</Name>
+    </Services>
+    <!-- drivers to disable -->
+    <Drivers>
+        <Name>vmx_svga</Name>
+        <Name>vmmouse</Name>
+        <Name>vmscsi</Name>
+        <Name>amdpcn</Name>
+        <Name>PCnet</Name>
+        <Name>VMMEMCTL</Name>
+
+        <Name> pvscsi </Name>
+        <Name> vmci </Name>
+        <Name> vmmouse </Name>
+        <Name> vmaudio </Name>
+        <Name> vmrawdsk </Name>
+        <Name> vmxnet </Name>
+        <Name> vmxnet3ndis6 </Name>
+        <Name> vm3dmp </Name>
+        <Name> vmdebug </Name>
+        <Name> vmxnet3ndis5 </Name>
+
+        
+        <Name>cirrus</Name>
+        <!-- storage drivers -->
+        <Name>buslogic</Name>
+        <Name>symc810</Name>
+        <Name>cpqarray</Name>
+        <Name>pcntn4m</Name>
+        <Name>cpqnf3</Name>
+        <Name>MRaidNT</Name>
+        <Name>Symc8XX</Name>
+        <!-- VIA chipset drivers -->
+        <Name>viaide</Name>
+        <Name>VIAudio</Name>
+        <Name>VIAPFD</Name>
+        <Name>viafilter</Name>
+        <Name>viaagp</Name>
+        <Name>viaagp1</Name>
+        <!-- network drivers: Intel(R) PRO/100 -->
+        <Name>E100B</Name>
+        <!-- tape drivers -->
+        <Name>4mmdat</Name>
+        <Name>4mmdat-SeSFT</Name>
+        <Name>SCSIChanger</Name>
+
+        <!-- Virtual Machine Monitor -->
+        <Name>vmm</Name>
+        <!-- Xen-specific drivers -->
+        <Name>xenevtchn</Name>
+        <Name>xenvbd</Name>
+        <Name>xennet</Name>
+    </Drivers>
+    <Programs>
+        <Name>ProMON</Name>
+        <Name>s3tray2</Name>
+        <Name>VMwareTray</Name>
+        <Name>VMwareUser</Name>
+    </Programs>
+</BlockList>

scripts/New-WindowsImageJob.ps1

@@ -0,0 +1,51 @@
+#Requires -Modules 'dism'
+Param(
+    [Parameter(Mandatory)]
+    [string]$ImageName,
+    [Parameter(Mandatory)]
+    [string]$SourceFolder,
+    [Parameter(Mandatory)]
+    [string]$DestinationFile
+)
+
+$StartJobSplat = @{
+    ArgumentList = $ImageName, $SourceFolder, $DestinationFile
+    ScriptBlock  = {
+        Param(
+            $ImageName,
+            $SourceFolder,
+            $DestinationFile
+        )
+
+        $NewWindowsImageSplat = @{
+            Name        = $ImageName
+            CapturePath = $SourceFolder
+            ImagePath   = $DestinationFile
+            Verify      = $True
+        }
+        New-WindowsImage @NewWindowsImageSplat
+        }
+}
+$Job = Start-Job @StartJobSplat
+
+While ($Job.State -eq 'Running') {
+    $GetItemSplat = @{
+        Path        = $DestinationFile
+        ErrorAction = 'SilentlyContinue'
+    }
+    $OutputFile = Get-Item @GetItemSplat
+    If ($OutputFile) {
+        Write-Host "Export in progress ... $($OutputFile.FullName); Size: $('{0:n2}' -f ($OutputFile.Length / 1MB))MB"
+    }
+    Else {
+        Write-Host "Export initiating ... "
+    }
+
+    $StartSleepSplat = @{
+        Seconds = 30
+    }
+    Start-Sleep @StartSleepSplat
+}
+
+Receive-Job $Job
+Remove-Job $Job

scripts/Remove-Resources.ps1

@@ -0,0 +1,39 @@
+[CmdletBinding()]
+Param(
+    [Parameter(Mandatory)]
+    [string]$VMName,
+    [Parameter(Mandatory)]
+    [string]$VSphereFQDN,
+    [Parameter(Mandatory)]
+    [string]$VSphereUsername,
+    [Parameter(Mandatory)]
+    [string]$VSpherePassword
+)
+
+$PowerCliConfigurationSplat = @{
+    Scope                    = 'User'
+    ParticipateInCEIP        = $False
+    Confirm                  = $False
+    InvalidCertificateAction = 'Ignore'
+}
+Set-PowerCLIConfiguration @PowerCliConfigurationSplat | Out-Null
+
+$ConnectVIServerSplat = @{
+    Server        = $VSphereFQDN
+    User          = "$VSphereUsername"
+    Password      = "$VSpherePassword"
+    WarningAction = 'SilentlyContinue'
+}
+Connect-VIServer @ConnectVIServerSplat | Out-Null
+
+$RemoveVMSplat = @{
+    VM                       = "$($VMName)*"
+    DeletePermanently        = $True
+    Confirm                  = $False
+    ErrorAction              = 'SilentlyContinue'
+}
+Remove-VM @RemoveVMSplat
+
+# Also delete ISO/floppy?
+
+Disconnect-VIServer * -Confirm:$False

scripts/Set-NetworkProfile.ps1

@@ -0,0 +1,23 @@
+# You cannot enable Windows PowerShell Remoting on network connections that are set to Public
+# Spin through all the network locations and if they are set to Public, set them to Private
+# using the INetwork interface:
+# http://msdn.microsoft.com/en-us/library/windows/desktop/aa370750(v=vs.85).aspx
+# For more info, see:
+# http://blogs.msdn.com/b/powershell/archive/2009/04/03/setting-network-location-to-private.aspx
+
+# Network location feature was only introduced in Windows Vista - no need to bother with this
+# if the operating system is older than Vista
+if([environment]::OSVersion.version.Major -lt 6) { return }
+
+# You cannot change the network location if you are joined to a domain, so abort
+if(1,3,4,5 -contains (Get-WmiObject win32_computersystem).DomainRole) { return }
+
+# Get network connections
+$networkListManager = [Activator]::CreateInstance([Type]::GetTypeFromCLSID([Guid]"{DCB00C01-570F-4A9B-8D69-199FDBA5723B}"))
+$connections = $networkListManager.GetNetworkConnections()
+
+$connections |foreach {
+	Write-Host $_.GetNetwork().GetName()"category was previously set to"$_.GetNetwork().GetCategory()
+	$_.GetNetwork().SetCategory(1)
+	Write-Host $_.GetNetwork().GetName()"changed to category"$_.GetNetwork().GetCategory()
+}

scripts/Uninstall-VMwareTools.Sysprep.cmd

@@ -0,0 +1,7 @@
+@rem Uninstall VMware Tools
+@rem (wait for orphaned child process to finish)
+@rem Silent mode, basic UI, no reboot
+start "Uninstall VMware Tools" /b /w e:\setup64 /s /v "/qb REBOOT=R REMOVE=ALL"
+
+@rem Initiate Sysprep
+C:\Windows\System32\Sysprep\sysprep.exe /generalize /oobe /unattend:A:\Sysprep_Unattend.xml /quiet /shutdown

scripts/Update-Manifest.ps1

@@ -0,0 +1,55 @@
+#Requires -Modules 'powershell-yaml'
+[CmdletBinding()]
+Param(
+    [Parameter(Mandatory)]
+    [ValidateScript({
+            If (Test-Path($_)) {
+                $True
+            } Else {
+                Throw "'$_' is not a valid filename (within working directory '$PWD'), or access denied; aborting."
+            }
+        })]
+    [string]$ManifestFileName
+)
+
+$GetItemSplat = @{
+    Path = $ManifestFileName
+}
+$ManifestFile = Get-Item @GetItemSplat
+
+$SetLocationSplat = @{
+    Path     = $ManifestFile.DirectoryName
+}
+Set-Location @SetLocationSplat
+
+$GetContentSplat = @{
+    Path = $ManifestFile.FullName
+}
+$Manifest = Get-Content @GetContentSplat
+
+$UpdatedManifest = ForEach ($Line in $Manifest) {
+    Write-Host "Processing '$($Line)' ..."
+    If ($Line -match '^SHA256\((.+)\)= ([0-9a-fA-F]{64})$') {
+        If (Test-Path $Matches[1]) {
+            $GetFileHashSplat = @{
+                Path      = $Matches[1]
+                Algorithm = 'SHA256'
+            }
+            Write-Host "Updating checksum..."
+            "SHA256($($Matches[1]))= $((Get-FileHash @GetFileHashSplat).Hash)"
+        }
+    }
+}
+
+If ($UpdatedManifest -ne $Null) {
+    $SetContentSplat = @{
+        Path        = $ManifestFile.FullName
+        Value       = $UpdatedManifest
+        Force       = $True
+        Confirm     = $False
+    }
+    Set-Content @SetContentSplat    
+} Else {
+    Write-Host "Failed updating manifest."
+    Exit 1
+}

scripts/Update-OvfConfiguration.ps1

@@ -0,0 +1,219 @@
+#Requires -Modules 'powershell-yaml'
+[CmdletBinding()]
+Param(
+    [Parameter(Mandatory)]
+    [ValidateScript({
+            If (Test-Path($_)) {
+                $True
+            } Else {
+                Throw "'$_' is not a valid filename (within working directory '$PWD'), or access denied; aborting."
+            }
+        })]
+    [string]$OVFFile
+)
+
+$GetContentSplat = @{
+    Path = "$($PSScriptRoot)\$($MyInvocation.MyCommand)".Replace('.ps1', ".yml")
+    Raw  = $True
+}
+$RawContent = Get-Content @GetContentSplat
+$ConvertFromYamlSplat = @{
+    Yaml         = $RawContent
+    AllDocuments = $True
+}
+$OVFConfig = ConvertFrom-Yaml @ConvertFromYamlSplat
+
+$SourceFile = Get-Item -Path $OVFFile
+$GetContentSplat = @{
+    Path = $SourceFile.FullName
+}
+$XML = [xml](Get-Content @GetContentSplat)
+$NS = [System.Xml.XmlNamespaceManager]$XML.NameTable
+[void]$NS.AddNamespace('Any', $XML.DocumentElement.xmlns)
+
+If ($OVFConfig.DeploymentConfigurations.Count -gt 0) {
+    $XMLSection = $XML.CreateElement('DeploymentOptionSection', $XML.DocumentElement.xmlns)
+    $XMLSectionInfo = $XML.CreateElement('Info', $XML.DocumentElement.xmlns)
+    $XMLSectionInfo.InnerText = 'Deployment Type'
+    [void]$XMLSection.AppendChild($XMLSectionInfo)
+    
+    ForEach ($Configuration in $OVFConfig.DeploymentConfigurations) {
+        $XMLConfig = $XML.CreateElement('Configuration', $XML.DocumentElement.xmlns)
+    
+        $XMLConfigAttrId = $XML.CreateAttribute('id', $XML.DocumentElement.ovf)
+        $XMLConfigAttrId.Value = $Configuration.Id
+    
+        $XMLConfigLabel = $XML.CreateElement('Label', $XML.DocumentElement.xmlns)
+        $XMLConfigLabel.InnerText = $Configuration.Label
+    
+        $XMLConfigDescription = $XML.CreateElement('Description', $XML.DocumentElement.xmlns)
+        $XMLConfigDescription.InnerText = $Configuration.Description
+    
+        [void]$XMLConfig.Attributes.Append($XMLConfigAttrId)
+        [void]$XMLConfig.AppendChild($XMLConfigLabel)
+        [void]$XMLConfig.AppendChild($XMLConfigDescription)
+    
+        [void]$XMLSection.AppendChild($XMLConfig)
+    }
+    [void]$XML.SelectSingleNode('//Any:Envelope', $NS).InsertAfter($XMLSection, $XML.SelectSingleNode('//Any:NetworkSection', $NS))
+    Write-Host "Inserted 'DeploymentOptionSection' with $($Configuration.Count) nodes"
+}
+
+$XMLAttrTransport = $XML.CreateAttribute('transport', $XML.DocumentElement.ovf)
+$XMLAttrTransport.Value = 'com.vmware.guestInfo'
+[void]$XML.SelectSingleNode('//Any:VirtualHardwareSection', $NS).Attributes.Append($XMLAttrTransport)
+
+$XMLProductSection = $XML.SelectSingleNode('//Any:ProductSection', $NS)
+If ($XMLProductSection -eq $Null) {
+    $XMLProductSection = $XML.CreateElement('ProductSection', $XML.DocumentElement.xmlns)
+    [void]$XML.SelectSingleNode('//Any:VirtualSystem', $NS).AppendChild($XMLProductSection)
+    Write-Host "Inserted 'ProductSection'"
+} Else {
+    ForEach ($Child in $XMLProductSection.SelectNodes('//Any:ProductSection/child::*', $NS)) {
+        [void]$Child.ParentNode.RemoveChild($Child)
+    }
+    Write-Host "Destroyed pre-existing children in 'ProductSection'"
+}
+$XMLProductSectionInfo = $XML.CreateElement('Info', $XML.DocumentElement.xmlns)
+$XMLProductSectionInfo.InnerText = 'Information about the installed software'
+[void]$XMLProductSection.AppendChild($XMLProductSectionInfo)
+Write-Host "Inserted new 'Info' into 'ProductSection'"
+
+ForEach ($Category in $OVFConfig.PropertyCategories) {
+    If ($Category.Name -ne '') {
+        $XMLCategory = $XML.CreateElement('Category', $XML.DocumentElement.xmlns)
+        $XMLCategory.InnerText = $Category.Name
+        [void]$XMLProductSection.AppendChild($XMLCategory)
+        Write-Host "Inserted new 'Category' into 'ProductSection'"
+    }
+
+    ForEach ($Property in $Category.ProductProperties) {
+        $XMLProperty = $XML.CreateElement('Property', $XML.DocumentElement.xmlns)
+    
+        $XMLPropertyAttrKey = $XML.CreateAttribute('key', $XML.DocumentElement.ovf)
+        $XMLPropertyAttrKey.Value = $Property.Key
+        $XMLPropertyAttrType = $XML.CreateAttribute('type', $XML.DocumentElement.ovf)
+        Switch -regex ($Property.Type) {
+            'boolean' {
+                $XMLPropertyAttrType.Value = 'boolean'
+            }
+            'int' {
+                $XMLPropertyAttrType.Value = 'uint8'
+                $Qualifiers = @()
+                If ($Property.Type -match 'int\((\d*)\.\.(\d*)\)') {
+                    If ($Matches[1]) {
+                        $Qualifiers += "MinValue($($Matches[1]))"
+                    }
+                    If ($Matches[2]) {
+                        $Qualifiers += "MaxValue($($Matches[2]))"
+                    }
+                    $XMLPropertyAttrQualifiers = $XML.CreateAttribute('qualifiers', $XML.DocumentElement.ovf)
+                    $XMLPropertyAttrQualifiers.Value = $Qualifiers -join ' '
+                    [void]$XMLProperty.Attributes.Append($XMLPropertyAttrQualifiers)
+                }
+            }
+            'ip' {
+                $XMLPropertyAttrType.Value = 'string'
+                $XMLPropertyAttrQualifiers = $XML.CreateAttribute('qualifiers', $XML.DocumentElement.vmw)
+                $XMLPropertyAttrQualifiers.Value = 'Ip'
+                [void]$XMLProperty.Attributes.Append($XMLPropertyAttrQualifiers)
+            }
+            'password' {
+                $XMLPropertyAttrType.Value = 'string'
+                $XMLPropertyAttrPassword = $XML.CreateAttribute('password', $XML.DocumentElement.ovf)
+                $XMLPropertyAttrPassword.Value = 'true'
+                [void]$XMLProperty.Attributes.Append($XMLPropertyAttrPassword)
+
+                $Qualifiers = @()
+                If ($Property.Type -match 'password\((\d*)\.\.(\d*)\)') {
+                    If ($Matches[1]) {
+                        $Qualifiers += "MinLen($($Matches[1]))"
+                    }
+                    If ($Matches[2]) {
+                        $Qualifiers += "MaxLen($($Matches[2]))"
+                    }
+                    $XMLPropertyAttrQualifiers = $XML.CreateAttribute('qualifiers', $XML.DocumentElement.ovf)
+                    $XMLPropertyAttrQualifiers.Value = $Qualifiers -join ' '
+                    [void]$XMLProperty.Attributes.Append($XMLPropertyAttrQualifiers)
+                }
+            }
+            'string' {
+                $XMLPropertyAttrType.Value = 'string'
+                $Qualifiers = @()
+                If ($Property.Type -match 'string\((\d*)\.\.(\d*)\)') {
+                    If ($Matches[1]) {
+                        $Qualifiers += "MinLen($($Matches[1]))"
+                    }
+                    If ($Matches[2]) {
+                        $Qualifiers += "MaxLen($($Matches[2]))"
+                    }
+                    $XMLPropertyAttrQualifiers = $XML.CreateAttribute('qualifiers', $XML.DocumentElement.ovf)
+                    $XMLPropertyAttrQualifiers.Value = $Qualifiers -join ' '
+                    [void]$XMLProperty.Attributes.Append($XMLPropertyAttrQualifiers)
+                } ElseIf ($Property.Type -match 'string\[(.*)\]') {
+                    $XMLPropertyAttrQualifiers = $XML.CreateAttribute('qualifiers', $XML.DocumentElement.ovf)
+                    $XMLPropertyAttrQualifiers.Value = "ValueMap{$($Matches[1] -replace '","', '", "')}"
+                    [void]$XMLProperty.Attributes.Append($XMLPropertyAttrQualifiers)
+                }
+            }
+        }
+        $XMLPropertyAttrUserConfigurable = $XML.CreateAttribute('userConfigurable', $XML.DocumentElement.ovf)
+        $XMLPropertyAttrUserConfigurable.Value = "$([boolean]$Property.UserConfigurable)".ToLower()
+        $XMLPropertyAttrValue = $XML.CreateAttribute('value', $XML.DocumentElement.ovf)
+        If ($Property.Type -eq 'boolean') {
+            $XMLPropertyAttrValue.Value = "$([boolean]$Property.DefaultValue)".ToLower()
+        } Else {
+            $XMLPropertyAttrValue.Value = $Property.DefaultValue
+        }
+        [void]$XMLProperty.Attributes.Append($XMLPropertyAttrKey)
+        [void]$XMLProperty.Attributes.Append($XMLPropertyAttrType)
+        [void]$XMLProperty.Attributes.Append($XMLPropertyAttrUserConfigurable)
+        [void]$XMLProperty.Attributes.Append($XMLPropertyAttrValue)
+
+        If ($Property.Label) {
+            $XMLPropertyLabel = $XML.CreateElement('Label', $XML.DocumentElement.xmlns)
+            $XMLPropertyLabel.InnerText = $Property.Label
+            [void]$XMLProperty.AppendChild($XMLPropertyLabel)
+        }
+        If ($Property.Description) {
+            $XMLPropertyDescription = $XML.CreateElement('Description', $XML.DocumentElement.xmlns)
+            $XMLPropertyDescription.InnerText = $Property.Description
+            [void]$XMLProperty.AppendChild($XMLPropertyDescription)
+        }
+
+        If (($Property.Configurations.Count -eq 1) -and ($Property.Configurations -eq '*')) {
+            $XMLPropertyAttrConfiguration = $XML.CreateAttribute('configuration', $XML.DocumentElement.ovf)
+            $XMLPropertyAttrConfiguration.Value = $OVFConfig.DeploymentConfigurations.Id -join ' '
+            [void]$XMLProperty.Attributes.Append($XMLPropertyAttrConfiguration)       
+        } ElseIf ($Property.Configurations.Count -gt 0) {
+            $XMLPropertyAttrConfiguration = $XML.CreateAttribute('configuration', $XML.DocumentElement.ovf)
+            $XMLPropertyAttrConfiguration.Value = $Property.Configurations -join ' '
+            [void]$XMLProperty.Attributes.Append($XMLPropertyAttrConfiguration)       
+        }
+
+        If ($Property.Value.Count -eq 1) {
+            $XMLPropertyAttrValue = $XML.CreateAttribute('value', $XML.DocumentElement.ovf)
+            $XMLPropertyAttrValue.Value = $Property.Value
+            [void]$XMLProperty.Attributes.Append($XMLPropertyAttrValue)       
+        } ElseIf ($Property.Value.Count -gt 1) {
+            ForEach ($Value in $Property.Value) {
+                $XMLValue = $XML.CreateElement('Value', $XML.DocumentElement.xmlns)
+
+                $XMLValueAttrValue = $XML.CreateAttribute('value', $XML.DocumentElement.ovf)
+                $XMLValueAttrValue.Value = $Value
+                $XMLValueAttrConfiguration = $XML.CreateAttribute('configuration', $XML.DocumentElement.ovf)
+                $XMLValueAttrConfiguration.Value = $Value
+
+                [void]$XMLValue.Attributes.Append($XMLValueAttrValue)
+                [void]$XMLValue.Attributes.Append($XMLValueAttrConfiguration)
+
+                [void]$XMLProperty.AppendChild($XMLValue)
+            }
+        }
+
+        [void]$XMLProductSection.AppendChild($XMLProperty)
+    }
+    Write-Host "Inserted $($Category.ProductProperties.Count) new node(s) into 'ProductSection'"
+}
+
+$XML.Save($SourceFile.FullName)

scripts/Update-OvfConfiguration.yml

@@ -0,0 +1,36 @@
+DeploymentConfigurations: []
+PropertyCategories:
+- Name: 1) Operating System
+  ProductProperties:
+  - Key: guestinfo.hostname
+    Type: string(1..15)
+    Label: Hostname*
+    Description: '(max length: 15 characters)'
+    DefaultValue: ''
+    UserConfigurable: true
+- Name: 2) Networking
+  ProductProperties:
+  - Key: guestinfo.ipaddress
+    Type: ip
+    Label: IP Address*
+    Description: ''
+    DefaultValue: ''
+    UserConfigurable: true
+  - Key: guestinfo.prefixlength
+    Type: int(8..32)
+    Label: Subnet prefix length*
+    Description: ''
+    DefaultValue: '24'
+    UserConfigurable: true
+  - Key: guestinfo.dnsserver
+    Type: ip
+    Label: DNS server*
+    Description: ''
+    DefaultValue: ''
+    UserConfigurable: true
+  - Key: guestinfo.gateway
+    Type: ip
+    Label: Gateway*
+    Description: ''
+    DefaultValue: ''
+    UserConfigurable: true

scripts/Windows10/01.Disabled services.ps1

@@ -0,0 +1,22 @@
+# Retrieve all respective services (by ID)
+$GetServiceSplat = @{
+    Name = @(
+        'wuauserv'
+        'W3SVC',
+        'XboxGipSvc',
+        'XblGameSave'
+    )
+    ErrorAction = 'SilentlyContinue'
+}
+$Services = Get-Service @GetServiceSplat
+
+# Stop and disable all respective services
+ForEach ($Service in $Services) {
+    $SetServiceSplat = @{
+        Name        = $Service.Name
+        Status      = 'Stopped'
+        StartupType = 'Disabled'
+        ErrorAction = 'SilentlyContinue'
+    }
+    Set-Service @SetServiceSplat
+}

scripts/Windows10/02.Disable IPv6.ps1

@@ -0,0 +1,3 @@
+$nic = get-netadapter
+
+Disable-NetAdapterBinding -InterfaceAlias $nic.name -ComponentID ms_tcpip6

scripts/Windows10/03.Power settings timeout.ps1

@@ -0,0 +1,15 @@
+# Disable monitor timeout (plugged in/battery)
+#& powercfg /change monitor-timeout-ac 0
+#& powercfg /change monitor-timeout-dc 0
+
+# Disable disk timeout (plugged in/battery)
+#& powercfg /change disk-timeout-ac 0
+#& powercfg /change disk-timeout-dc 0
+
+# Disable standby timeout (plugged in/battery)
+& powercfg /change standby-timeout-ac 0
+& powercfg /change standby-timeout-dc 0
+
+# Disable hibernate timeout (plugged in/battery)
+& powercfg /change hibernate-timeout-ac 0
+& powercfg /change hibernate-timeout-dc 0