World of EUC

Has anyone found a way to prevent ms updates from deleting the bootflags reg key?  this is getting annoying to fix all the time.

I have not seen this.  What are you experiencing?

azure pvs - on server 2025, if you patch it.  microsoft is deleting the bootflags reg key so the image bluescreens.
<https://support.citrix.com/external/article/693222/pvs-boot-fails-for-server-2025-based-pvs.html>

So similar to what we have seen in the past with vmware updating the vmxnet3 driver.  I would recommend that hyper-v and azure users with server 2025 to keep the initial build machine for updating, and then recapture each time, or use something like the Image Portability service to capture an MCS machine to PVS.  Hopefully Microsoft provides a way to block this network driver in the future from updates.

I wonder if something like this would work.  :shield: Step-by-Step: Block NetVsc Driver Updates via Group Policy
1. 	Get the Hardware ID of NetVsc
• 	Open Device Manager
• 	Expand Network adapters and locate Microsoft Hyper-V Network Adapter
• 	Right-click → Properties → go to the Details tab
• 	From the drop-down, select Hardware Ids
• 	Copy the top value (e.g.,  or similar)
2. 	Open Group Policy Editor
• 	Press , type , and hit Enter
3. 	Navigate to Device Installation Restrictions
• 	Go to:

4. 	Enable the Policy
• 	Double-click Prevent installation of devices that match any of these device IDs
• 	Set to Enabled
• 	Click Show, then paste the Hardware ID you copied earlier
• 	Click OK to save

for now i've scripted it out to create a merged base, mount it to a windows server, inject the bootflags keys, unmount and restart the maintenance machine.  its a pita!!  I have plenty of updates to do this month so will try what you suggested on our test server and see if it works.  not sure of long term impacts on that though.  MS really just needs to stop deleting it ;)

Interesting that you can inject the bootflag keys in.  Care to share what you are putting in there?  As I might test it out with vmxnet3 changes.

update_merged_base.zip

sure - here is the script.  you'll need the pvs sdk available.