From 4895366b56da65ffcfe417a71d5d3ee100f9b04f Mon Sep 17 00:00:00 2001
From: Simone <simone.chifari@gmail.com>
Date: Tue, 9 Jun 2026 23:26:31 +0200
Subject: [PATCH] feat(deploy-win): disable Server Manager auto-launch in
 autounattend
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Add specialize-pass RunSynchronousCommands to disable the ServerManager
scheduled task (the actual auto-launcher on WS2025) plus the HKLM/policy
DoNotOpen* keys, so Server Manager never pops up — not even at the first
logon, before post-install runs. Redundant with post-install.
---
 .../winimage/assets/autounattend.win2025.xml   | 18 ++++++++++++++++++
 1 file changed, 18 insertions(+)

diff --git a/src/ci_orchestrator/winimage/assets/autounattend.win2025.xml b/src/ci_orchestrator/winimage/assets/autounattend.win2025.xml
index 0425956..f833d68 100644
--- a/src/ci_orchestrator/winimage/assets/autounattend.win2025.xml
+++ b/src/ci_orchestrator/winimage/assets/autounattend.win2025.xml
@@ -142,6 +142,24 @@
           <Path>reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon" /v Shell /t REG_SZ /d cmd.exe /f</Path>
           <Description>Set interactive shell to cmd.exe</Description>
         </RunSynchronousCommand>
+        <!-- Stop Server Manager auto-launching even at the first logon: the
+             ServerManager scheduled task is the actual launcher on WS2025;
+             the registry keys are belt-and-suspenders. -->
+        <RunSynchronousCommand wcm:action="add">
+          <Order>2</Order>
+          <Path>schtasks /Change /TN "\Microsoft\Windows\Server Manager\ServerManager" /Disable</Path>
+          <Description>Disable Server Manager auto-launch task</Description>
+        </RunSynchronousCommand>
+        <RunSynchronousCommand wcm:action="add">
+          <Order>3</Order>
+          <Path>reg add "HKLM\SOFTWARE\Microsoft\ServerManager" /v DoNotOpenServerManagerAtLogon /t REG_DWORD /d 1 /f</Path>
+          <Description>Do not open Server Manager at logon (HKLM)</Description>
+        </RunSynchronousCommand>
+        <RunSynchronousCommand wcm:action="add">
+          <Order>4</Order>
+          <Path>reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows NT\CurrentVersion\ServerManager" /v DoNotOpenAtLogon /t REG_DWORD /d 1 /f</Path>
+          <Description>Do not open Server Manager at logon (policy)</Description>
+        </RunSynchronousCommand>
       </RunSynchronous>
     </component>
   </settings>