Answer file KeyboardFilterService does not disable keys

Question

question

DavidTorgerson-1011 asked Jul 3, '20 Sean-Liming commented Jul 8, '20

Answer file KeyboardFilterService does not disable keys

I have enabled filtering of several keys in my answer file such as Alt-Tab and CTRL-ALT-DEL but they are still active when I install the OS. I have Windows-Foundation-Package loaded with Client-KeyboardFilter enabled. Curiously, the property "Enabled" for Microsoft-Windows-Embedded-KeyboardFilterService shows disabled however it can't be changed in the Windows System Image Manager. What am I missing?

windows-10-setup

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Answer 1 · 2020-07-07T16:31:35.627Z

Sean-Liming answered Jul 7, '20 Sean-Liming commented Jul 8, '20

In the answer file make sure that you have enabled Client-DeviceLockdown as well as Client-KeyboardFilter.

keyboardfilter.png (17.3 KiB)

· 2

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

DavidTorgerson-1011 · Jul 07, 2020 at 06:06 PM

See above. I verified Client-KeyboardFilter is enabled.

0 ·

Sean-Liming DavidTorgerson-1011 · Jul 08, 2020 at 12:27 AM

Keyboard filter is a service that has to be enabled. Go to Control panel -> Administrative Tools->Service Look for Microsoft Keyboard Filter and start the service. I also have a GUI and command line tool for Keyboard filter here: https://annabooks.com/SW_KBFUtility.html that enables/disables the service.

0 ·

keyboardfilterservice.png (24.1 KiB)

Answer 2 · 2020-07-04T04:23:08.477Z

TKujala answered Jul 4, '20 Sean-Liming commented Jul 7, '20

HI @DavidTorgerson-1011,

Probably, the easiest way to do that is capture the image file.

Then you can enable it by using DISM.

md c:\wim

dism /mount-wim /wimfile:c:\bootmedia\sources\install.wim /index:1 /MountDir:c:\wim

Dism /online /Enable-Feature /FeatureName:Client-KeyboardFilter

dism /unmount-wim /MountDir:c:\wim /Commit

https://docs.microsoft.com/en-us/windows-hardware/customize/enterprise/keyboardfilter

· 3

5 |1600 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

DavidTorgerson-1011 · Jul 07, 2020 at 02:43 PM

@TKujala,

I have verified the feature is enabled but the keys I set to block in the answer file are still active. Do I need to do something else to block these keys?

     <settings pass="offlineServicing">
             <component name="Microsoft-Windows-Embedded-KeyboardFilterService" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="NonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
                 <AltF4>Blocked</AltF4>
                 <AltTab>Blocked</AltTab>
                 <AltSpace>Blocked</AltSpace>
                 <ControlAltDelete>Blocked</ControlAltDelete>
                 <WindowsL>Blocked</WindowsL>
             </component>

0 ·

TKujala DavidTorgerson-1011 · Jul 07, 2020 at 03:23 PM

Hi @DavidTorgerson-1011,

I think that's enough.

The keys can be blocked only in Windows 10 Enterprise or Windows 10 Education versions.

Which version of Windows are you using?

Keyboard filter is not supported in a remote desktop session.

0 ·

DavidTorgerson-1011 TKujala · Jul 07, 2020 at 05:54 PM

I am applying it to Windows 10 Enterprise 1809. The OS is being installed on a SBC on our device. We do not use remote desktop.
I have <DisableKeyboardFilterForAdministrators>false</DisableKeyboardFilterForAdministrators> but the keys are still active.

I ran
DISM /online /get-features /format:table

and verified Client-KeyboardFilter is enabled.

I am running as admin.

0 ·

question