run history in a fresh installed virtual machine

Question

Hi all,

here is the issue I encountered.

The host machine is running Windows 10 LTSC, OS Version:10.0.19044 N/A Build 19044, Hyper-V enabled.

I created a virtual machine with a Windows 10 ISO file, the file name is en-us_windows_10_business_editions_version_22h2_updated_june_2024_x64_dvd_c27b7955.iso, with following steps.

1 create a virtual machine,

2 mount the above iso

3 start the virtual machine, install Windows 10 with DISM command instead of the traditional way.

4 shutdown the virtual machine and keep the vhd file(I named it as the original one) as an original VHD file for other virtual machine.

everything is file if I use the original vhd file to start the virtual machine.

Now I want to remove the provisioned appx from the VHD file. So I make a copy of the original vhd file, mount it on the host machine. use powershell command(Remove-ProvisionedAppxPackage)to remove them. Then I start the virtual machine with the appx-removed vhd file and I find a \tsclient history in Run.

Answer 1

Hello

It seems that someone has tried to access a shared folder "\tsclient".

Where did we get this iso? Have tried to install the iso then check the run history directly?

We also try to check the SMB related log for any related information.

Open Event Viewer and then expand Applications and Services Logs.

1. Expand the Microsoft folder.
2. Expand the Windows folder.
3. Expand the SMBClient or SMBServer folder and then click the channels.

Answer 2

Hello

Is your problem solved?

If the above reply is helpful to you, please mark your reply as an answer, thank you very much!

If you have any further questions, please do not hesitate to contact us.

Thanks