Stripped-down Windows 11 'Enterprise G' ISO investigated — made for the Chinese government, associated organizations

Windows 11's GUI
(Image credit: Microsoft)

The 'Some Ordinary Gamers' channel found a Windows 11 24H2 ISO that's claimed to be a Chinese 'Government Edition.' The ISO reportedly came from a Google Drive and "should be used for evaluation purposes, as you cannot 'legally' install it on your PC." Mutathar notes the dangers of using customized Windows 11 ISOs but explores this version to show how many elements can be stripped out, keeping resource consumption low. 

Mutahar criticized the potential dangers of custom Windows 11 from random sources in his previous videos, as these ISOs can contain malware and backdoors. Instead, it is best to download Windows 11 from the official source and use the known debloating utility, Windows 11 Debloat, from Github. 

I Got My Hands on Windows Government Edition... - YouTube I Got My Hands on Windows Government Edition... - YouTube
Watch On

Mutahar further explains that the existence of a 'government edition' Windows 11 is partially true, as electronic software distribution (ESD) packages can be found for Windows 11 Enterprise G, an abbreviation for the government. Mutahar installed this ISO on his virtual machine to show how many applications are removed from this version and how many resources it saves on a system with six cores and 8GB of RAM. This customized OS consumed much fewer resources than standard versions of Windows 11 Home or Pro because certain native applications were not running in real-time because they were removed.

While there are many native applications still present in this version, some were removed -- namely Windows Store, Microsoft's Edge Browser, and Windows Defender. The absence of these apps is also likely because they would transmit system data to Microsoft's servers, which would be unacceptable for any government organization, let alone China, including military applications. 

As reported earlier, the Chinese government uses its own Ubuntu and HarmonyuOS operating systems as part of its effort to be reliant on local options, including hardware components like its Longsoon and Zhaoxin CPUs. However, the Windows operating system is still needed for certain tasks due to its widespread use globally.

The alleged Windows 11 "Enterprise G"

(Image credit: Some Ordinary Gamers)

Is WIndows 11 Enterprise G ISO the real deal?

There is a stripped-down Windows 11 version made for a Chinese government-owned company that supplies hardware and software solutions to its civilian and military organizations. However, it's not clear if these ISOs come from that company or somewhere else. 

A brief discussion in Microsoft's forum corroborates that Enterprise G is made for the Chinese government. Regarding this ISO, a source explains that it is a fake Windows 11 Enterprise G ISO that's debloated and contains a preinstalled keygen rather than an official license. It also reinvigorates an earlier observation made by Mutahar that one of the dangers is that these ISOs have disabled key functions like Updates and Defender needed for security. Irrespective of the legitimacy of these ISOs, the risk overshadows the benefits, and hence the ISO is best avoided.

Official ISOs are easily available through Microsoft, and should the user need to debloat, there are trusted utilities and scripts available. Tiny11 is one such utility that we reported about earlier,  providing options to remove things like Copilot functions, turn off automatic updates, remove or disable Windows Defender, and remove the Windows Store. While many would like to remove some options to make Windows 11 lighter, it is best to not remove certain key essentials for the sake of security.

Roshan Ashraf Shaikh
Contributing Writer

Roshan Ashraf Shaikh has been in the Indian PC hardware community since the early 2000s and has been building PCs, contributing to many Indian tech forums, & blogs. He operated Hardware BBQ for 11 years and wrote news for eTeknix & TweakTown before joining Tom's Hardware team. Besides tech, he is interested in fighting games, movies, anime, and mechanical watches.

  • coromonadalix
    Proved to be a fake thru cleanup scripts / de-bloating etc .... and kms38 activation in command file
    Reply
  • ThatRandomToast
    This is a poorly reconstructed version, mashed from files sourced from Windows Update servers and binaries from Windows 10 v2004.

    According to the BetaWiki admin pivotman319 on Mastodon/Wet-Dry World:
    ISO volume name and creation date are bogus; wrong tools used to generate image (imapi2 instead of oscdimg/cdimage) - final resulting OS image was produced a week ago on 27th June 2024 at 04:09:00 AM (UTC), ISO generated at roughly 04:25 AM
    OS image is directly based off of the v24H2 RTM build's Pro source packages - WIM creation times match 1:1 with metadata ESDs from WU
    the "Enterprise G" edition manifest's code signing catalog is actually borrowed from win10 v2004's professional edition; catalog signed on 7th December 2019 (same time as VB_RELEASE 19041.1); the conversion from Pro to "Enterprise G" using these hacked-together files took two minutes, tops
    author tried to deliberately hide their tracks by removing any and all logs from the CBS logs directory
    it's partially set up to auto-activate using massgrave KMS38 and remove edge after installation (the Edge removal thing is not present though)
    guy who made the ISO also directly modified the media to swap out the setup background image from purple to pitch black to poorly "replicate" a problem present in official MS media for Win11 v24H2the real Enterprise G is actually published by CMIT (joint venture between MS and CETC in China), meant for China government employees - first introduced in May 2017. the last release the venture made was based on Windows 10 v21H2 CU build 19044.1345, released on 28th January 2022.
    Reply
  • paul.nicolezim
    ThatRandomToast said:
    This is a poorly reconstructed version, mashed from files sourced from Windows Update servers and binaries from Windows 10 v2004.
    Thank you for posting this. Ill stay far away from this thing. Who knows what else they did that was not coughs yet. The enemy you know and all that.
    Reply
  • ThatRandomToast
    ThatRandomToast said:
    This is a poorly reconstructed version, mashed from files sourced from Windows Update servers and binaries from Windows 10 v2004.

    According to the BetaWiki admin pivotman319 on Mastodon/Wet-Dry World:
    ISO volume name and creation date are bogus; wrong tools used to generate image (imapi2 instead of oscdimg/cdimage) - final resulting OS image was produced a week ago on 27th June 2024 at 04:09:00 AM (UTC), ISO generated at roughly 04:25 AM
    OS image is directly based off of the v24H2 RTM build's Pro source packages - WIM creation times match 1:1 with metadata ESDs from WU
    the "Enterprise G" edition manifest's code signing catalog is actually borrowed from win10 v2004's professional edition; catalog signed on 7th December 2019 (same time as VB_RELEASE 19041.1); the conversion from Pro to "Enterprise G" using these hacked-together files took two minutes, tops
    author tried to deliberately hide their tracks by removing any and all logs from the CBS logs directory
    it's partially set up to auto-activate using massgrave KMS38 and remove edge after installation (the Edge removal thing is not present though)
    guy who made the ISO also directly modified the media to swap out the setup background image from purple to pitch black to poorly "replicate" a problem present in official MS media for Win11 v24H2the real Enterprise G is actually published by CMIT (joint venture between MS and CETC in China), meant for China government employees - first introduced in May 2017. the last release the venture made was based on Windows 10 v21H2 CU build 19044.1345, released on 28th January 2022.
    6 July 16:10 UTC: The Mastodon/Wet-Dry World post was also edited. https://masto.ai/@winload_exe@wetdry.world/112724770530300269 follow the account, turn on notifications, and favorite the post to get notifications about edits.
    Reply