From c14fcf67b165c663ddfbf4f424ce516f94a66357 Mon Sep 17 00:00:00 2001 From: sysadmin Date: Tue, 9 Jun 2026 14:27:37 +0100 Subject: [PATCH] feat(kiosk): drop FirstLogonCommands launch (Shell Launcher owns launch) --- windows/installer/autounattend/autounattend.xml | 15 +++------------ 1 file changed, 3 insertions(+), 12 deletions(-) diff --git a/windows/installer/autounattend/autounattend.xml b/windows/installer/autounattend/autounattend.xml index a68c48d..773914e 100644 --- a/windows/installer/autounattend/autounattend.xml +++ b/windows/installer/autounattend/autounattend.xml @@ -113,19 +113,10 @@ bootstrap-OneTime!true</PlainText></Password> </AutoLogon> <!-- - FirstLogonCommands: launch the Welcome wizard ELEVATED (full admin token). - The offline UAC auto-approve policy baked into the image (ConsentPromptBehaviorAdmin=0, - PromptOnSecureDesktop=0) means Start-Process -Verb RunAs silently elevates without - a UAC prompt during this ephemeral sm-bootstrap session. The sm-bootstrap account - is torn down by ApplyService on wizard completion. + The Welcome wizard is launched by Shell Launcher v2 as the sm-bootstrap + session shell (Configure-Kiosk.ps1, run from SetupComplete.cmd). No + FirstLogonCommands launch is needed; adding one would double-launch. --> - <FirstLogonCommands> - <SynchronousCommand wcm:action="add" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State"> - <Order>1</Order> - <CommandLine>cmd /c powershell -NoProfile -ExecutionPolicy Bypass -Command &quot;Start-Process -FilePath 'C:\Program Files\SilverOS\Welcome\SilverOS.Welcome.App.exe' -Verb RunAs&quot;</CommandLine> - <Description>Launch SilverOS Welcome elevated</Description> - </SynchronousCommand> - </FirstLogonCommands> <RegisteredOwner>SilverMetal</RegisteredOwner> <RegisteredOrganization>SilverLABS</RegisteredOrganization> <!--