Windows – How to deactivate onedrive and telemetry in Windows 10 by using a sysprep answer file

I've had success with Sysinternals Process Explorer. With this, you can search to find what process(es) have a file open, and you can use it to close the handle(s) if you want. Of course, it is safer to close the whole process. Exercise caution and judgement.

To find a specific file, use the menu option Find->Find Handle or DLL... Type in part of the path to the file. The list of processes will appear below.

If you prefer command line, Sysinternals suite includes command line tool Handle, that lists open handles.

Examples

• c:\Program Files\SysinternalsSuite>handle.exe |findstr /i "e:\" (finds all files opened from drive e:\"
• c:\Program Files\SysinternalsSuite>handle.exe |findstr /i "file-or-path-in-question"

You can simply just replace the unattend.xml file found in C:\windows\Panther. I've done this before for deployments with no problems at all. I would grab a copy of Lenovo's file and modify it as needed. They are probably using an OEM product key with a BIOS lock so if you duplicate that, you won't need to supply your own key or worry about activation. As far as a pxe environment, I'll have to apologize as I don't know a perfect solution. I'd consider using Windows Deployment Server to distribute a custom WinPE image that runs a script to replace the unattended answer file and reboot the computer. Find a tutorial on making a custom WinPE image using WAIK (this technet tutorial should be a good place to start http://technet.microsoft.com/en-us/library/cc766066%28WS.10%29.aspx) and add the script to %windir%\System32\startnet.cmd on the image. Someone out there may have a better way of doing this. This was just the first thing to pop into my mind.