GHOST_XP super detailed production process

Required work instructions for the production process

1. Operating system preparation

1 Completely format the hard disk partition, Don’t choose quick format! The main purpose is to prevent bad areas on the hard disk from being marked, which may cause instability to the system.

2 Using FAT32 disk format can also be converted to NTFS after recovery

1. FAT32 → NTFS is easy and data preservation can be achieved. NTFS → FAT32 is impossible, if certain If you want to transfer, the data will be lost.

2. GHOST's compression of NTFS format is obviously not as good as FAT32. It is also the XRMPVOL_CN system. After GHOST's maximum compression, the NTFS file system will be about 30M larger than that using FAT32. "

3 Upgrade all patches normally (some recommended patches can be selectively upgraded as needed, but all critical patches must be upgraded). You can also install it through the patch tool CD

4 It is recommended to use a machine with a high configuration to create the GHOST operating system of XP and 2003 with one click ghost8.3. Although this is controversial, practice shows that when a GHO image made with a low-configuration machine or a VM is restored to the machine, the I found that many of them could not be started. However, GHO made with high-configuration machines has been found to be very compatible

2. On-demand personalization

1 "During the packaging process, you will see a background. This is the file

c:\windows\system32\setup.bmp. Please replace it according to the specifications of this picture."

2 oem Use oemset software

3

2. Necessary settings

1 Transfer the location of "My Documents", it is recommended to D:\My Documents. Right-click My Documents on the desktop, select Properties, and modify it.

2 Adjust the visual effects for optimal performance, and then change "Smooth screen font edges", "Show window content when dragging", "Use visual styles on windows and buttons", " Use shadows for icon labels on the desktop" is checked.

3 Disable System Restore

4 Turn off automatic updates

5 Turn off the power and hibernate

6 Adjust error reporting: System Properties-Advanced- Error reporting, disable error reporting.

7 Set the virtual memory to 0, "My Computer-Properties-Advanced-Performance-Settings-Advanced-Virtual Memory-Change-Select No Paging File-Settings", and then restart! "After restoring to a new machine, it will automatically restore to the appropriate size of the machine.

Or: Change the virtual memory to another disk and restart the computer."

8 Turn off memory dump , disable error reporting; run "drwtsn32" to retain "visual notifications" and cancel all others.

9 Turn off ZIP file support and run "regsvr32 /u zipfldr.dll" to save system resources

3. Cleaning and optimization

Delete temporary Internet files and remove machine content, delete cookies, clear history.

Right-click on the C drive letter - Properties - Clean Disk - Select all - OK

Delete recently used document records

C:\Documents and All files under Settings\Administrator\Local Settings\Temp\.

C:\Program Files\UPDATE\*.*

c:\program files\windows nt\pinball pinball, deleted. Remember to delete the connection to the start menu 5M

c:\program files\movie maker Delete all, 10M, garbage. Remember to delete the connection to the start menu

c:\program files\messenger Delete whether it is for MSN

c:\program files\msn gaming zone Microsoft's online games, garbage

C:\Program Files\InstallShield Installation Information\* Garbage left by the installation program

C:\Program Files\windowsUpdate\* Garbage left by XP upgrade

C:\windows\All hidden directories with "$NtUninstall*$" as the naming format

C:\windows\All .log files starting with KB8 and Q

C:\windows\RegisteredPakages\*.*

C:\windows\Installer\*.* Delete all? Some people say "You cannot delete directories with long names!"

c:\windows\$* All directories starting with $, uninstall the patch, about 70M

c:\windows \*.log is not big, but there are too many, which makes it uncomfortable to read

c:\windows\pchealth Help Support Center, 30M. Please copy helpctr\binaries\msconfig.exe to the system32 directory before deleting

c:\windows\help\* Help file, 30M. Some people say that all files can be deleted: Except for digital files such as Help\Tours\mmTour\tour.exe and agt0*.hlp, and a few file names with all capital letters, delete all others.

"c:\windows\ime\chtime Traditional Chinese input (not necessary, many input methods support Traditional Chinese) 12M

c:\windows\ime\imejp Japanese input 12M

p>

c：\windows\ime\imejp98 Japanese input 12M

c：\windows\ime\imjp8_1 Japanese input 12M

c：\windows\ime\imkj6_1 Korean Input 12M

c:\windows\system32\ime\CINTLGNT Cangjie code 3M

c:\windows\system32\ime\TINTLGNT Pinyin input 3M"

c:\windows\temp\* usually nothing

c:\windows\prefetch\*

c:\windows\Downloaded Installations\* some leftovers after the msi program is installed Garbage

c:\windows\resources\themes\* It is recommended to keep Classical as a classic theme, Luna.Theme is an XP theme 8M, delete it if you don’t like it)

c:\windows \srchasst Search Assistant (a puppy), 8M; some say "C:\windows\srchasst, except for the mui directory"

c:\windows\msagent Microsoft agent 3M; some say "C:\ windows\msagent, except the intl directory,"

c:\windows\softwareDistribution\download\* temporary storage point for downloading patches) about 60M

c:\windows\system32\oobe Activation program (we use activation-free XP, no need) 8M

c:\windows\web\wallpaper\* wallpaper, just leave a nice-looking blur.bmp, or delete it all. . 2M

c:\windows\cursors\ This folder contains all mouse pointers; generally rarely used.

IE plug-in upiea.exe

IE plug-in shields network rogue plug-in immunity.exe (only valid for systems with NTFS partitions!)

Run "services.msc "Prohibit unused services; DHCP client must be automatic and cannot be changed, otherwise the network address cannot be obtained. The computer is also very slow. Server must be automatic, otherwise network sharing cannot be performed. WINDOS XP service optimization batch file.bat——by Rong Rong, it cannot be used, otherwise the network will not work after restarting.

Services - Messenger and Alerter, change to manual, so that IP messages can be disabled. Although many other services can be disabled, in order to ensure the originality of the system, do not change others.

Close the Trojan port autoit (automatic immune popular virus port Free51ct special version).exe

Run "inf/sysoc.inf", edit → replace → find the content "hide" → all Replace → Save, Close. In this way, you can uninstall unnecessary windows components, open Add and Remove Programs in the control panel, and then click Add to remove Windows components. Now you can directly uninstall many components that were not allowed to be uninstalled before, such as msn browser.

To speed up network neighbor access, open the registry, find HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\windows\CurrentVersion\Explore\RomteComputer\NameSpace, and delete {2227A280-3AEA-1069-A2DE-08002B30309D} (printer ) and {D6277990-4C6A-11CF-8D87-00AA0060F5BF} (scheduled task) It is better not to delete, printer sharing is the trend

"Turn off the default shared drive letter, and save the following It is a registry file, just import it. Example: XX.reg (under XP)

" "Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services \lanmanserver\parameters]

""AutoShareServer""=dword：00000000

""AutoSharewks""=dword：00000000"

Remove the real process add-on Method: Whether it is realOne or real player 10, when you use it, it will first check a process item called realsched.exe, and set it to start randomly. If you disable it, it will check it next time and add it to the startup again. Xiang, so annoying! What to do? You can do this by opening the system disk and finding it here: C:\Program Files\Common Files\Real\Update_OB. Do you see it? Don't try to delete it, he won't let you. Right-click - Rename - change it to realsched_bak.exe. OK

Use Windows Optimizer to clean the system; run disk defragmentation after restarting.

4. Delete the hardware driver

1 Change the Advanced Configuration Power Interface (ACPI) property of the computer to Standard PC. In Hardware-Device Manager-Computer, if there are two properties (No matter whether they are the same or not), uninstall one of them (the other cannot be uninstalled), then "Update Driver" for the other to Standard PC, confirm to exit and then restart. (Be sure to restart! Otherwise, the IDE ATA/ATAPI controller will not intelligently recognize updates after encapsulation, and will still retain the Standard... attribute!) The system will reinstall all drivers, and then prompt to restart. Leave it there first, and then the computer There will be two Standard PCs in the properties, uninstall one, and then press "OK" to restart.

2 "Change the IDE ATA/ATAPI controller. This step is the main step of the universal GHOST in the XP system!!

" If you do not do this step, the GHOST will go to another machine. It won't start at all and the computer will keep restarting! ! Therefore, in order to adapt to the various current motherboards (such as Inter motherboard, VIA motherboard, SIS motherboard), you must change your local IDE controller to a standard dual-channel PCI IDE controller! (Key)

3 "Uninstall other drivers: pay attention to order!!

First uninstall the network adapter, universal serial bus controller, sound, and video game controller , monitor, display card (it is normal for it to still work after uninstalling the graphics card, and it is not a problem with your operation). When uninstalling, just right-click and click Uninstall. If the system prompts you to restart, press No and it will not start! ! " (Uninstalling the graphics card is to prevent the blue screen phenomenon that may occur when GHOST is used on other machines) Generally, it is uninstalled until there is no hardware that can be uninstalled.

4 Method to avoid local connection 2: Start-Run-REGEDIT, then edit-search, enter "local connection", after finding it, delete its upper-level branch. Press F3 to continue searching...

5 Delete everything that can be removed. Leave three Microcode Update Device, PCI bus, Plup and Play Software Device Enumerator in the system devices.

5. System packaging

1 "Integrated driver GHSOTXP (personalized, not necessary, optional)

First of all, I have not tried it. The administrator of the Dragon Empire Forum gave me a software to teach me how to do it, but I don’t know if it is possible.

The method is: create a Drivers folder in the root directory of the C drive and put the drivers you collected into this file. folder (you can use the driver package prepared by others), and put the following software into it, and run it, press Browse to select the Drivers folder, and then press SET PATH, that's it, it will automatically import and register table, remember not to move it. Just delete the Drivers folder manually after the restoration.

Or the manual method is: open the registry editor under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion. Create a string name called DevicePath data and fill in your driver path.

The next step is to edit the sysprep.inf file: open the file and add the following in [Unattended] (red letters are comments that do not need to be added)

[Unattended]

OemSkipEula=Yes

OemPreinstall=Yes means to let WinXP know that there is a Drivers release folder on the installation CD

DriverSigningPolicy=Ignore

OemPnPDriversPath=""c:\Drivers\ BOARD\nForce;c:\Drivers\BOARD\Intel\ICH;c:\Drivers\Camera\301P;c:\Drivers\LAN\Broadcom4401;c:\Drivers\LAN\BroadcomBCM5751;c:\Drivers\LAN\Marvell ;c:\Drivers\LAN\Realtek8139;c:\Drivers\LAN\VIAVT6105;c:\Drivers\LAN\Intel;c:\Drivers\LAN\nForce;c:\Drivers\LAN\SIS900;c:\Drivers \modem\ECOM56HAM;c:\Drivers\modem\ESS_ES2838_2839;c:\Drivers\modem\Intel5628;c:\Drivers\Sound\AD188X;c:\Drivers\Sound\ALC;c:\Drivers\Sound\CMI8738; c:\Drivers\Sound\CMI9738;c:\Drivers\Sound\VIA;c:\Drivers\Sound\SiS7012;c:\Drivers\VGA\ATi_Radeon;c:\Drivers\VGA\ATi_Radeon\B_20640;c:\ Drivers\VGA\Intel_845G; c:\Drivers\VGA\SIS650-760"" (is a command to specify the path for each device driver. The meaning of the whole paragraph is to tell the installation program where to find it. Driver update driver)

DriverSigningPolicy = Block This line indicates that the driver can force the installation of drivers that have not passed Microsoft digital signature certification (WHQL). This command is used together with OemPnPDriversPath.

Please note that the characters in each line above must be entered in half-width characters. Remember to save " " after modification. Open the registry editor under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion Create a string name called DevicePath, and fill in the data with your driver path (c://DRIVERS put the driver in this folder)

2. Modify sysprep at the same time

; SetupMgrTag

[Unattended]

OemSkipEula=Yes

OemPreinstall=Yes

DriverSigningPolicy=Ignore

OemPnPDriversPath= ""Drivers\BOARD\nForce; Drivers\BOARD\Intel\ICH; Drivers\SATA_VIA; Drivers\Camera\301P; Drivers\LAN\Broadcom4401; Drivers\LAN\BroadcomBCM5751; Drivers\LAN\Marvell; Drivers\LAN\Realtek8139; Drivers\LAN\VIAVT6105; Drivers\LAN\Intel; Drivers\LAN\nForce; Drivers\LAN\SIS900; Drivers\modem\ECOM56HAM; Drivers\modem\ESS_ES2838_2839; Drivers\modem\Conexant_HCF; Drivers\modem\Conexant_HSF; Drivers\ modem\Intel5628; Drivers\modem\Intel5690; Drivers\Sound\AD188X; Drivers\Sound\ALC; Drivers\Sound\CMI8738; Drivers\Sound\CMI9738; Drivers\Sound\VIA; Drivers\Sound\SiS7012; Drivers\VGA\ ATi_Radeon; Drivers\VGA\ATi_Radeon\B_20640; Drivers\VGA\Intel_845G; Drivers\VGA\SIS650-760""

"

2 " System repackaging can use the system installation CD Sysprep.exe in the built-in enterprise deployment tool package DEPLOY.CAB;

You can also use the Samp; Ramp; S_V9.5.0828 intelligent system packaging tool to perform intelligent packaging by calling Sysprep.exe (recommended).

Since the Samp; Ramp; S_V9.5.0828 intelligent system packaging tool adopts Longhorn's detecthal technology, the hal accuracy can reach 100, and it directly enters the packaging process. The packaging speed is fast and there is no need to restart the computer multiple times. . " "Their differences:

In the former, after Ghost is installed on the new machine, you need to manually change the computer's power management mode from Standard PC to the power management mode corresponding to the new machine; is the hardware uninstalled completely? If so, will it be automatically set?

The latter can automatically detect the hardware abstraction layer HAL type and realize automatic recognition changes of power mode.

"

3 " Create the sysprep.inf automatic answer file:

You must select "sysprep installation". It is best to select "fully automatic installation" in this step of the license agreement. ", so that no manual intervention is required during the installation process. You can also add the commands you need to run in "Run Once", for example, enter the following command "convert c:/FS:NTFS/x". There will be a disk during installation. For the selection of conversion format, select Y if you need NTFS format, just select N if you don’t need it. (The new version Samp; Ramp; S_V9.5. Intelligent system packaging tool is no longer used. After restoration, you can manually choose whether to convert to NTFS) etc. This command can be run once at startup after the installation is completed. " " Whether the system is installed in factory mode or repackaged, the user will be asked to enter some necessary content, such as user name, computer name, installation serial number, etc. But there is a problem, that is, during the Ghost clone installation process on a new machine, when we need to enter this information, the system has not found the keyboard and mouse drivers, and the keyboard and mouse are in a state of suspended animation. At this time, we must let the system automatically respond to the installation, so You need an automatic response file sysprep.inf to complete the input of relevant information.

Delete the line InstallFilesPath=C:\sysprep\i386 under [Unattended] in the generated syprep.ini (if you do not delete it, you will be prompted to insert the Win2000sp4/xp CD during installation)"

4 "Among the 4 options on the system package screen:

The second item "Use minimal installation", that is, the no-residual driver installation item, is exactly what we need, so it must be selected.

The first item "Grace period without resetting activation" and the third item "Not regenerating security identifier" are both used for genuine user activation, and we are using an activation-free version, so this It doesn't matter whether you choose these two items or not, they will have no impact on the use of the GHOST cloned system.

The fourth option "Detect non-Plug and Play hardware" (if Lite version is necessary) does not need to be selected.

The shutdown mode can be selected as needed. It is recommended to select "Exit" for the next step to back up the DllCache directory file.

After setting the options, you can click the "Repackage" button, and the system will be repackaged in about half a minute. (In fact, don’t worry about it. It is an unchangeable smart packaging software. The above steps are automatically done, so it is recommended not to check it.)"

5 c:\sysprep Do not put other things in this directory Because this folder will be automatically deleted after the system is started for the first time and the installation is completed.

6 "Run the root directory C of the current system partition. : DllCacheManager.exe in the \windows(XP)/winnt(2k) folder. Just follow the prompts to complete the backup of the DllCache directory file (no need to check), which can reduce the disk space occupied by about 300M.

Then import the DllCacheManager.reg registry. When the XP image is cloned to the hard disk, it will be automatically restored when the system is restarted.

(If placed elsewhere, remember to check the box "Automatically delete itself when restoring" or "Use countdown time and delete itself when restoring")

" " Note: When used with Sample Ramp S, because DllCacheManager uses the registry runonce method, when Sample Ramp S changes the IDE to Standard or changes the power mode to Standard PC, the runonce will be activated.

Therefore, you must first encapsulate the system and then use DllCacheManager to back up the DllCache directory file (if you back up first and then encapsulate, the backup and restore will be automatically performed when encapsulation is started)

Because the DllCache directory file (dll) is backed up. file), the system has reduced the disk space occupied by about 300M, so it is best to defragment the disk at this time (recommended)"

7 Restart ghost. Can I use the hard disk version of one-click ghost? You still have to use a CD or (floppy disk) to boot to DOS

Other "Run the program SRS8.0 file, that is, it is automatically installed and generates a sysprep folder in the root directory of the C drive, and then creates a sysprep folder in the sysprep directory. Run "msprep.exe" and then restart the system.

Before restarting, you must remember to put the startup disk in the CD, then boot from the CD, use GHOST software to clone the C drive and make an image!

" "Install Samp; Ramp; S_V9. 5. Intelligent system packaging tool ((remain unchanged in the latest power supply judgment program [9.5. Directly supports AMD 64-bit CPU, no need to use a system environment that supports AMD 64 to make it; supports WINDOWS XP Home Edition fully automatic response packaging; corrects WIN HAL problem under 2000, integrated a variety of USB keyboard and mouse drivers, and improved the recognition of PS/2 keyboard and mouse to ensure that the selection interface can be operated when it appears)

Double-click Samp; Ramp; S9.5 intelligent system To encapsulate the tool, just click "Next". It will automatically create a sysprep folder in the root directory of the current system partition. Then unzip and copy the DEPLOY.CAB file in the \SUPPORT\TOOLS directory of the system installation CD to the sysprep folder. Yes (this directory and the files in the directory will be automatically deleted when the installation is completed for the first time after the system is encapsulated). "

"Install DllCacheManager_V1.0 (Dragon Empire Special Edition) Dllcache Backup and Restore Tool (available). Select)

Unzip the DllCacheManager.rar file, and then copy the DllCacheManager.exe and ZProgBar.ocx files to the systemroot directory (XP system is the C:/windows directory, 2K system is the C:/winnt directory) That's it.

(Put DllCacheManager1.51 under the C drive. Run the backup to restore DllCacheManager1.51 when detecting new hardware, because if it is an unlite version, you do not need to select "Detect" "Plug and Play", but you must select that option for the streamlined version). When used with Samp;Ramp;S, after completing the packaging and running DllCacheManager.exe to back up the Dllcache directory file, when restoring the packaged system installation, autohal .exe will automatically call DllCacheManager for backup and recovery and delete itself.

If it is not used with Samp;Ramp;S, you need to run DllCacheManager for manual recovery and then delete itself; or add DllcacheManager / in the relevant batch file (such as the first run command after entering the system in the Sysprep.inf file) restore /autodelete /timeout item. You can also decompress the DllCacheManager.rar file to any location in the current system partition. After running DllCacheManager.exe, select "Automatically delete during recovery" or "Count down and delete itself during recovery" to back up the file the next time the system starts. Can automatically restore backups and delete itself. )"

"How to create a new patch after patching: open the Gho file and extract winnt\msprep.cmd. For example, if you want to add a patch No. 4, Windows2000-KB904368-v3-x86-CHS.exe, it is convenient. Click to rename KB904368.exe, edit msprep.cmd, and add 2 sentences.

systemdrive

cd\

cd systemroot

regedit /s wmp.reg

RASPPPOE.exe / s

KB891861.exe

KB904368.exe /q /norestart /nobackup

del /q wmp.reg

del /q RASPPPOE.exe

del /q KB891861.exe

del /q KB904368.exe

del /q msprep.cmd

Then Replace the new msprep.cmd and KB904368.exe to the \winnt directory in the original Gho file, recompile it, and finally regenerate an iso, so you don’t need to redo Gho all the time. This method can also be used in your own Ghost disk, otherwise it would be very tiring to re-create a GHO when Microsoft keeps coming out with patches

" " To solve the difficulty of access between LANs after encapsulation: save the following as a registry and import it, and that’s it (not necessarily required) Do)

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]

""restrictanonymous""=dword: 00000000

""restrictanonymoussam""=dword：00000001

""forceguest""=dword：00000000

""limitblankpassworduse""=dword：00000000

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters]

""autoshareserver""=dword：00000001

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\ Parameters]

""AutoShareWksAutoShareWks""=dword：00000001"

Administrator (Administrator) user login method: Generally, a new system is installed on the C drive. The default is usually Administrator. Super administrator account, it is recommended to use this account as the encapsulated user, rather than creating a new account. Because creating more users may affect the increase in registry and system mentions and the increase in system garbage, it is a bit suspicious. It is much more convenient for users to create users by themselves based on Administrator or use Administrator directly; but what should I do if XP will force users to be created after the installation is completed? You can cancel the wizard by pressing ALT ESC or ALT F4 when the first screen appears ("Please wait"). If it really doesn't work, you can restart it manually and use Administrator to log in without creating a new user.

For universal cloning of Windows 98 and Windows ME, it is recommended to delete various drivers and change the IDE ATA/ATAPI controller directly. No other settings are required.

Windows 2000 Professional Edition and Server All versions can be universally cloned without activation, which is more convenient than XP. The operation steps are almost the same. However, there is one thing. If the 2000 system is repackaged, you will still be required to enter the serial number during installation. You only need to manually modify sysprep.inf before cloning. That’s it! !

Windows 2003 servers on the Internet today are basically activation-free versions of VOL. The operation steps are the same as XP, except that there are a few more options when creating a self-answer file, such as how many users are authorized, and, When repackaging in 2003, (using minimal installation) the PNP option is gray, which means it is forced to be selected. This is actually what we want! ! (The CDs of 2000, XP and 2003 all come with repackaging tools, and they are not universal), but the steps are basically the same!

6. Making the boot CD

1. It is recommended to use EASYBOOT software to make the boot CD menu.

2. Extract the EZBOOT directory from the boot CD downloaded from the Internet and open it with EASYBOOT software. Even a novice should be able to modify it. If you really don’t know how to do it, then slowly experience it and learn it slowly.

3. After EASYBOOT creates the ISO file, use ULTRAISO software to open the ISO file and put the GHO file you made into it, so that you have a bootable CD!

4. Test the boot CD: Test on a VM (virtual computer) first. If it doesn’t work or is not satisfactory, try again. If it passes, you can burn the disc and start it on the actual optical drive to observe the effect. If it passes, everything is OK!