Category Archives: WED Blog

Identify Spurious Windows Reclaimables

OK, then: thanks to some excellent detective work by ElevenForum stalwart @Bree, it looks like DISM can tell curious Windows users which packages are “stuck.” That is, you run the DISM command sequence: Analyze-Clean-Analyze, with a positive number of reclaimable packages still showing. (You can find all the details in my 11/2023 blog post on this topic.) This time around, I’ll show you how to list out the actual items that identify spurious Windows reclaimables. Warning: some PowerShell hacking is involved!

How-to: Identify Spurious Windows Reclaimables

@Bree shows the source for the data needed to identify these strange offenders. It’s based on analyzing data within a DISM generated text file. Here’s the specific command that creates that data:

DISM /ONLINE /GET-PACKAGES /FORMAT:TABLE > KB.txt

What this does is to inspect the current running Windows image (/online), grab all packages it finds with some related data (/get-packages),  and format it into a table (/format:table). That last bit (> KB.txt) redirects command output into that named file. The column headings in that output read: Package Identity, State, Release Type, and Install Time with vertical bars (‘|’) used to separate entries.

Bree’s analysis concurs with my own prior inspection of this same kind of output. We both agree that only lines with the strings “Staged” and “Feature Pack” in them point to spurious Windows packages. His analysis depends on sucking the output into a text file, converting to Excel format, sorting by State, and counting groups of lines to match the spurious reclaimable count to what’s reported by DISM /AnalyzeCompontentStore. Remember: those are packages that stay in the component store even after a DISM /cleanup-image operation has completed successfully. I simply write the output from the /Get-Packages DISM command to a file named KB.txt and filter its results.

Automating Analysis of KB.txt Contents

Next, my PowerShell script comes into play (such as it is, it’s pretty primitive). Unzip kbfilt.zip and then move kbfilt.ps1 to the directory where you created kb.txt (to run this file type .\kbfilt.ps1 inside an administrative PS Terminal window: screenshot follows later).

# Path to the input text file
$inputFilePath = "kb.txt"

# Path to the output text file
$outputFilePath = "kbfilt.txt"

# Read the file line by line and filter the lines
Get-Content $inputFilePath | ForEach-Object {
# Check if the line contains both "Staged" and "Feature Pack"
if ($_ -match "Staged" -and $_ -match "Feature Pack") {
# Output the line to the output file
$_ | Out-File -FilePath $outputFilePath -Append}}

# Confirm the script has finished
Write-Host "Lines w/ 'Staged' and 'Feature Pack' written to $outputFilePath"
Write-Host "Remember to delete kb.txt, kbfilt.txt before next use"

I used the -Append directive for Out-file which means the script appends text to the file and doesn’t over-write (“clobber” in PS-speak) other content. That’s why you’ll want to delete these files if you want to run the script again.

My Copilot+ PC (an Intel Aura Yoga Slim 7 model from Lenovo), running Windows 11 24H2 Build 26100.2134, has 2 spurious packages as shown here:

2 packages with LONG names (typical for Windows)
[Click image to view full-sized.]

This investigation is simply to show you which packages are stuck. You can get rid ofthem with DISM /Remove-Package. But if you do, they’ll most likely pop back up again after you install the next Cumulative Update (CU). Windows images are funny that way. But at least, now you can identify the packages involved.

Facebooklinkedin
Facebooklinkedin

Intake: Lenovo ThinkBook Plus G5

OK then, I’ve gotten far enough past my holiday backlog to take a first look at an odd but intriguing new hybrid laptop PC. On intake, Lenovo ThinkBook Plus G5 shows itself to be an interesting and powerful performer. The unit is actually two PCs: an Intel x86 PC embedded inside the keyboard deck, with a detachable Android tablet that serves as a Windows monitor when docked with the deck. Good stuff! You can see the tablet in position for docking above the deck in the lead-in graphic (image courtesy of Lenovo).

Observations During Intake:
Lenovo ThinkBook Plus G5

I knew this was going to be interesting when I opened the shipping carton and saw it contained two boxes. As you might guess: one for the Android tablet, the other for the x86 Intel deck. What you might not guess is the Matrioshka-like box within a box for those inner boxes themselves — one each for tablet and deck. Indeed, everything used for shipping these units (and other new items from Lenovo since 2012, believe it or not) is made of paper. Over the past dozen years in fact, I’ve watched the plastic content drop to zero. They even use paper-covered twist ties (when they use them at all). So kudos to Lenovo for easy-to-unpack, sustainable packaging.

Deck spes

Here are the specifications for the deck in this paired hybrid laptop whose full official product name is ThinkBook Plus Gen 5 Hybrid (14″ Intel) Station & Tablet:

CPU: Intel Core Ultra 7 155H (16 Cores, 22 logical processors)
Memory: 32 GB dual-channel LPDDRX5 7467 MHz RAM
Storage: 1 TB M.2 PCIe Gen4 NVMe SSD (Samsung OEM)
Ports: 2xUSB4 Thunderbolt4 USB-C ports on deck,
1 RCA audio mini-jack
Network: Intel Wi-Fi 6E AX211 160MHz

Tablet Specs

Here are the specs for the tablet side of this duo:

CPU: Qualcomm Snapdragon 8+ Gen 1 (8 Cores)
Graphics: Qualcomm Adreno GPU
Display: 14″ 2.8K (2880×1800) OLED multi-touch
Memory: 128GB LPDDR5x (soldered, no upgrade)
Storage: 256GB UFS 3.1 on tablet motherboard
Sensors: Accelerometer, ambient light, color, gyroscope, hall, ToF, and e-compass

I can’t say much about battery life just yet. The tablet has a built-in Li-polymer 38.7Wh battery with life estimates from 6.83 hours (web browsing) to 52.14 hours (local audio playback). Thurrott sez it gets 4.5 hours using it as a normal Windows laptop. He also says the 100W brick charges the deck’s 75 Wh battery to “almost full capacity in about an hour.” For now, it tells me the combo unit is intended as a desktop replacement, while the tablet is more prepared for extended untethered use. I’ll learn more later…

Initial Start-up and Setup

I had to wait for the deck and tablet to garner minimal charges before I was able to start the hybrid pair up into Windows for the first time. No biggie, but Lenovo usually sends units out fully charged. It took patience, but was easily overcome.

Lenovo Vantage hit a new update record when I used it to check for outstanding items: 11 on the first try, 2 on the second try. I was pleased the unit shipped with Windows 11 Pro installed, and amused to see it running Version 23H2 (Build 22631.4541 after all updates were applied). This process took the better part of an hour to work through, with a handful of restarts along the way.

As Windows laptops go, this one’s pretty peachy. It runs nearly as fast as the P16 Gen 1 Mobile Workstation (with its 24 core i9-12950HX CPU and double the RAM). I’m still in the process of getting all the apps installed, Windows Terminal customized, and working through the usual intake and setup drill. But so far, you can color me impressed!

Tablet Remains Terra Incognito

Last night, I pulled the tablet off the laptop to show my wife it displayed an Android screen when disconnected. Pretty colorful, too. But that’s as far as I’ve gotten with that half of this dynamic device duo. I plan to read some manuals, and fool around, over the weekend. More to follow on that front next week.

Pros and Cons So Far

There’s a lot to like about this dual unit. It’s sturdy (made of machined aluminum throughout with a matte grey silver finish), attractive, and a pleasure to use. The tablet display pops with color and text is rendered crisply and legibly. So far, I love the concept of running the tablet separately but I haven’t put that to the test yet, so I can say if I love the execution or the actual use.

There are a few cons about the ThinkBook Plus G5, though, but nothing too onerous or serious:

1. The combined weight of the units is ~3.9 lbs (2.14 deck & 1.73 tablet). That’s heavier than I’m used to for a modern laptop.
2. This sucker is kinda costly, with an MSRP of US$1,999 for the current configuration. It also included a US$38 accessory called the Lenovo Tab Pen Plus.
3. Despite its 160MHz rated Wi-Fi adapter, I couldn’t get it to work at 160MHz with my ASUS AX6000 router. Works fine at 802.11ac levels, though. That said, it runs at 380-500 Mbps on my LAN.
4. With only two usable USB-C ports and no USB-A ports, users will have to carry a hub or use a dock if they want to attach more than 1 or 2 devices.

All in all, it’s a pretty nifty machine. I look forward to putting it through its paces and seeing what more (and what else) it can do. Stay tuned.

Facebooklinkedin
Facebooklinkedin

Power Options Get Missing Plans

I was just reading a Ghacks story about enabling the Ultimate Performance plan in Power Options. But when I fired up Control Panel > Power Options, I saw that Lenovo had endowed its killer ThinkPad P16 Gen 1 Mobile workstation with exactly one power plan — namely, Balanced. To make sure Power Options gets missing plans, I had to do a little research and some simple PowerShell command magic. Here goes…

Here’s How Power Options Get Missing Plans

The syntax for adding a Power Plan requires a specific powercfg command to add it to a system — namely

powercfg -duplicatescheme GUID

That makes knowing those GUID (globally unique identifiers) important, so you’ll find those values in the table in the lead-in graphic for all the well-known Windows 10 and 11 Power Plans.

Another handy powercfg command lets you choose the Power Plan you wish to run

powercfg -setactive GUID

To save you any contortions you might otherwise need to get those GUIDs from the lead-in screencap, here’s a list of text values. Cut’n’paste them with my blessing…

Balanced 381b4222-f694-41f0-9685-ff5bb260df2e
High Performance 8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c
Power Saver a1841308-3541-4fab-bc81-f71556f20b4a
Ultimate Performance 15c9c4f6-8a2b-4a3f-bfcd-6b8d6b8f7e5c

P16 Shows Two — and Only Two — Plans in Power Options

For some odd reason, the P16 Mobile Workstation only shows two Power Plans in Power Options (see screencap below). Of course given that it’s a MOBILE WORKSTATION I simply must run “Ultimate Peformance.” You see the results from that PC next with that peerless Power Plan selected. Basta!

A Mobile Workstation needs Ultimate Performance. Here ’tis!

If I add any plan other than Balanced, it knocks the other one (e.g. High Performance, Power Saver or Ultimate Performance) out of the collection. Indeed powercfg /list only shows the same two that appear in the Power Options screen (like the preceding screencap). Copilot says that’s probably owing to manufacturer overrides (likely), WU items (possible), registry settings (possible), or the presence of modern standby mode (possible).

I now know how to fire up any specific power plan I might want to use, so I’m not inclined to hare off after that range of possibilities. I’ll ask the reviews engineering team at Lenovo about this the next time we chat. If I learn anything useful, I’ll add it to this post. Stay tuned!

Facebooklinkedin
Facebooklinkedin

Persistent Revo Requires Disabling Task

Drat! After returning from vakay, I noticed Revo Uninstaller still popping up after Startup. My November 21 post mentioned disabling some settings. Autoruns (see lead-in graphic) also tells me there’s a scheduled task that must be disabled to prevent its “helper” (and the app) from launching after startup.  Indeed, this persistent Revo requires disabling task for its helper.exe. Go figure!

It Irks Me That Persistent Revo Requires Disabling Task

When software makers offer free versions of their applications, they seem to feel entitled to let that version do various things to Windows PCs — not all of them desirable or well-behaved. I take umbrage with Revo, and other publishers who do likewise. That goes double, especially when they offer no opt-out in their installers, nor warnings for users. It seems they’re resolved that their software is going to make itself run at startup whether you like it or not.

Methinks it’s because such vendors seek added upsell opportunities. Alas, it only proves irksome and bothersome instead. This time, I had to call out the heavy artillery — namely, SysInternals Autoruns, capable of showing and stopping anything and everything that touches startup behavior on a Windows PC.

This isn’t the first time I’ve found myself saying “Thank you, Mark Russinovich and the rest of the SysInternals team.” It won’t be the last, either. In fact, that litany will no doubt continue until I stop running Windows (unlikely) or you pry it out of my cold, dead hands (inevitable, but hopefully not for some time yet).

Facebooklinkedin
Facebooklinkedin

Latest Canary Lacks Spurious Reclaimables

An interesting Windows wart has gone missing in the latest Canary release (Build 27754, installed November 21). This is where you run DISM /online /cleanup-image /StartComponentCleanup in some Windows version and get a non-zero count when you follow that up with DISM /online /cleanup-image /AnalyzeComponentStore. This makes it impossible to get to zero for the “Number of reclaimable packages” line in that latter command’s output. When, I assert that the latest Canary lacks spurious reclaimables, I mean it shows a zero count as you’d expect it to after a successful cleanup.

Showing That Latest Canary Lacks Spurious Reclaimables

Take a look at the lead-in graphic. The “Number of reclaimable…” line clearly shows 0. Something about earlier updates in Windows 11 (including at least the GA and Beta releases — I just checked) causes the OS to show anywhere from 2 to 13 spurious packages. I define that to mean “non-zero number of reclaimable packages showing after a DISM … /Startcomponentcleanup operation completes successfully.”

Interestingly, the latest Windows 10 release (Build 19045.5198) also shows a zero value when I go through those same manuevers. So it lacks the spurious reclaimables now, too. It’s been showing those, on and off, for at least the past 18 months (see this post for an early report from yours truly). This revelation is simultaneously interesting, odd and mostly meaningless. Why that last adjective? Because this “issue” has no obvious or adverse affects on Windows operations, as far as I can still. Still: it’s NOT TRUE when it shows up.

For Incurably OCD Readers Only…

You can indeed fix this in other Windows 11 versions (e.g. Beta, Developer, Release Preview and GA) if you must. But if history is any guide that fix will last only until you install the next CU (cumulative update). Simply use the “Reinstall now” button under Settings > System > Recovery to perform in inplace repair install on your PC. That will temporarily get DISM … /AnalyzeComponentStore to report zero reclaimables. But again, that changes as soon as you install any CU. Go figure!

Facebooklinkedin
Facebooklinkedin

Quick WinGet Post-Thanks Catch-Up

Today’s my first day back in the saddle after a blissfully long weekend. It started Tuesday, November 26 and ended this morning (December 2: 6 days). Interestingly it looks like most other outfits were lollygagging around as well. Indeed, I assert that’s why I had such a quick winget post-thanks catch-up.  Running over the fleet this morning, it averaged 6-7 updates (min: 5, max: 8, most 6 or 7).

Explaining Quick WinGet Post-Thanks Catch-Up

As I said already, I’m quite sure the fallow period that precedes and accompanies a major hiatus (or holiday) is the culprit. To me, that explains little or no change over the past 6 days. That said,  a little bit of everything shows up on update lists. That includes 7-Zip, CrystalDisk (Mark and Info), TeamViewer, Visual Studio, OhMyPosh and more. For me, they are all very much among the “usual suspects” when WinGet does its thing.

And I think there’s more like that to come. The frequency and heft of updates in the period from now until after 2025 pops in will no doubt drop. It’s a simple outcome of the way business gets done around the globe. I hope that gives me more time to play with other stuff. Why? I’ve got two loaner units from Lenovo — a ThinkBook and a ThinkStation — that I need to set up, review, and return to sender.

That should keep me busy, right? Glad to be back at work, and hopeful that 2024 may go out on a happy note. Let’s see, shall we?

 

Facebooklinkedin
Facebooklinkedin

Troubleshooting 8Gadget Pack Crash

I admit I’m still running Helmut Buhler’s excellent and informative 8GadgetPack, 12 years after MS withdrew support for gadgets when Windows 8 emerged. Since then, I’ve run it on Windows 8.x, 10 and 11 as a constant, useful source of desktop info. About 10 days ago, after updating Windows 10 to version 19045.5131, 8GadgetPack started throwing “Stopped working” and “APPCRASH” errors (via Reliability Monitor — see lead-in graphic). Since, then I’ve been troubleshooting 8GadgetPack crashes, which has — until a this weekend — prevented its use on the affected PC.

Lucky Guess: Troubleshooting 8Gadget Pack Crash

After updating Windows 10 to 19045.5198 today, I’d hoped the Gadget crisis would simply fade away. Not so. On a whim, I right-clicked the app and opted to “Run as administrator…” It not only worked, it also threw an error message that informed me it couldn’t run an “invalid gadget” named Currency.gadget. After I found that item in my AppData folder hierarchy, and deleted same, the tool returned to normal working behavior. Fixed, but weird. Also: lucky that’s a Gadget I don’t need or use.

Another funny thing is that I’m running 8GadgetPack on every Windows 11 version except Dev Channel Insider Preview (I don’t have one installed ). No problems there, nor any problems on the 3 VMs I have that also run some version of Windows 10. Go figure!

ReliMon Helps Illuminate Errors, Not Causes

If you look at the lead-in graphic, you’ll see these errors popped up on November 12, the very day that 19045.5131 appeared and got installed on my production PC. I actually exchanged some messages with Mr. Buhler and learned he was running the same build without any issues. (Shout out to Mr. B: Thanks!) That helped me understand it was something local causing trouble, not that specific update.

I don’t know why I decided to run the launch command:

"C:\Program Files\Windows Sidebar\sidebar.exe" /showGadgets

as an administrator, but I’m glad I did. It gave me just the information I needed to fix my problem and keep on Gadgeting. Sometimes you get lucky, here in Windows-World. I’m going to savor this win for a while, knowing that other problems won’t be as tractable…

For those who celebrate the Thanksgiving holiday: Happy Turkey Day! My best regards to all, including those who don’t get Thursday and Friday off. I’ll be off the air myself until next Monday, December 2, to spend some quality time with my family. I leave in three4 hours to go pick my son up at the airport, home from college. Cheers!

Facebooklinkedin
Facebooklinkedin

Canary Compresses Date/Time Layout

Every now and then, Microsoft likes to mess with Windows desktop display stuff. Today’s case in point come courtesy of Windows 11 Canary Build 27754, installed two days ago. In this go-round, Canary compresses date/time layout at the far right of the notification area. You can see its incredibly brief form: 10:23 above, and 11/22 below in the lead-in graphic. Does that mean I have to like it — or even want like that? Heck, no. If Canary compresses date/time layout on its own recognizance that gives me cause to report here, and remonstrate elsewhere.

If Canary Compresses Date/Time Layout, Then?

Based on my attempts to reformat the date from its current minimalist form to something a bit more informative, neither Settings > Time & Language > Language and Region nor Control Panel > Region > Date and time formats exercises any obvious effect on its appearance. I filed a Feedback Hub request to ask them to allow the prevailing settings to work rather than changing them independendly. Sheesh!

If you want to upvote my Feedback Hub suggestion, see it at Notification time/date in Canary Build 27754. TIA.

The More Things Change, the More They Stay the Same

I’m not sure why MS rearranges things at its own whim, or for reasons not fully understood, explained, or immediately obvious. But it happens from time to time. Looking at the 27754 announcement, MS has this to say:

You can revert to the long form of the date/time and bell icon visuals by toggling the values in the Settings via Settings > Date and Time under “Show time and day in the system tray” and Settings > System > Notifications under “Notifications”.

Then I found it: there’s a down-caret for a dropdown menu on the “Show time and date in the System Tray” entry in the “Date & time” section. If you open that dropdown, you can switch back to long-form displays. Here’s what that looks like:


As you can see, I clicked the entry “Show seconds…” Once I did that the time then displays as 11:15:27 AM and the date as 2024-11-22, as per my settings. It looks like one must go the long way around to get to the right destination. That’s not a totally unexpected experience in Windows-World, either!

Why didn’t the announcement simply say, switch from Show abbreviated date and time to Show seconds in system tray…? I would’ve understood that immediately, and known exactly what to do. Sigh.

Facebooklinkedin
Facebooklinkedin

Revo Uninstaller Poses Typical Update Trap

I’ve seen it before. And I’m pretty sure I’ll see it again. Recently, I’ve noticed the Revo Uninstaller app popping up on my desktop without any action on my part. When I checked (enabled) Startup items in Task Manager, it was absent. But then, I did some poking around online. That’s how I learned that Revo Uninstaller poses typical update trap: when it updates, it resets its Options to check a box labeled “Check for update on startup.” Perforce that means it starts the app, and leaves it running on the desktop as well.

Foiling Revo Uninstaller Poses Typical Update Trap

You can see the Options window from Revo Uninstaller in the lead-in graphic above. To stop this from happening you will forgo update checks. But you’ll also forgo the application open on your desktop at startup. I’m willing to trade the inconvenience of the former against the annoyance of the latter. Problem is, this gets reset each time the app updates. So one must remember to uncheck the re-rechecked box to stay ahead of the annoyance. I guess that means I’m really trading annoyance against annoyance, and absorbing a minor inconvenience.

Too bad Revo doesn’t create a WinGet package for inclusion in its packages database. Then I’d catch this issue more readily in my usual day-to-day routine. That said, PatchMyPC Home Updater might manage to handle this without activating the checkbox — at least, as far as I can tell. Goes off to check… Nope, it leaves that alone, too.

Just another little sniglet of update trivia to track here in Windows-World. I guess I’m used to that by now…

Facebooklinkedin
Facebooklinkedin

Windows Resiliency Initiative Includes Quick Machine Recovery

It’s that time of year again, when MS meetings and conferences — Ignite 2024, in this case — heat things up with future promises and new idea campaigns. Yesterday’s Windows Experience Blog from David Weston (MS VP Enterprise & OS Security) is a case in point. Entitled Windows security and resiliency: Protecting your business, it asserts that a new Windows Resiliency Initiative includes Quick Machine Recovery as a key capability. Very interesting!

Explaining Windows Resiliency Initiative Includes Quick Machine Recovery

This new initiative “takes four areas of focus” as its goal — namely (all bullet points quoted verbatim from the afore-linked blog post, except for my [bracketed] commentary):

  • Strengthen reliability based on learnings from the incident we saw in July. [Crowdstrike kernel mode error took down 8.5M Windows PCs.]
  • Enabling more apps and users to run without admin privileges.
  • Stronger controls for what apps and drivers are allowed to run.
  • Improved identity protection to prevent phishing attacks.

The first and arguably most impactful preceding item is what led MS to its announcement of Quick Machine Recovery. Here’s how Weston explains it:

This feature will enable IT administrators to execute targeted fixes from Windows Update on PCs, even when machines are unable to boot, without needing physical access to the PC. This remote recovery will unblock your employees from broad issues much faster than what has been possible in the past. Quick Machine Recovery will be available to the Windows Insider Program community in early 2025.

In other words, this new feature should enable what savvy administrators had to do using OOB access to affected machine via KVMs smart enough to bootstrap machines otherwise unable to boot.

Great Addition: How’s the Execution?

IMO this is something MS should’ve built into Windows long ago. I’m curious to see how (and how well) it works. I’m also curious to see if it will be available for Windows 10 as well as 11. Only time will tell, but I’ll be all over this when it hits Insider Builds early next year. Good stuff — I hope!!

Facebooklinkedin
Facebooklinkedin