S mode add to ISO installation of Windows 10

S mode: In previous posts we have reported that Microsoft has stopped having Windows 10 S σαν ξεχωριστή έκδοση. Η εταιρεία ανακοίνωσε την μετατροπή της έκδοσης σε "λειτουργία S", η οποία μπορεί να ενεργοποιηθεί σε οποιαδήποτε έκδοση του Windows 10.

Below we will see how to modify an ISO image of Windows 10 Version 1803 or a later version.

Η "λειτουργία S" ή 'S mode', περιορίζει την χρήση των εφαρμογών που υπάρχουν στον υπολογιστή σας και επιτρέπει μόνο αυτές που έχουν εγκατασταθεί από το Store της Microsoft.

Windows 10 in S is Microsoft's answer to Google Chrome.
It offers restrictions that according to Microsoft significantly improve and strengthen the security of the operating system. Win32 applications converted with Project Centennial (Desktop Application Conversion Tool) may be able to run on Windows 10 S. But the Hyper-V not available in S Mode.

Below we will see how you can add the function to ISO installation. It works only with the appropriate ISO image (Windows 10 version 1803 and up).

Download Windows ADK from here and install it.
Double-click the ISO file to open it with File Explorer.
Create an unattend.xml file using information from the Windows .wim file and the .clg. You can do it with Windows System Image Manager from ADK.
Add amd64_Microsoft_Windows_CodeIntegrity to Pass 2 offline Servicing.
Set amd64_Microsoft_Windows_CodeIntegrity\SkuPolicyRequired to 1. The offline servicing pass in the unattend.xml it should be:

unattended

Save the unattend.xml file in its Windows\Panther folder image.
Use DISM to apply the unattend file and do not enable S Mode:

dism /image:C:\mount\windows /apply-unattend:C:\mount\windows\windows\panther\unattend.xml

In the above mode, S is applied to the Windows image. So when your computer starts, the Code Integrity policy applied in Windows 10 S will also be applied to Windows installation.

More information
______________________________

Windows 10 S One-touch Modes in Settings