diff --git a/trans.sh b/trans.sh
index a364a33..6bed562 100644
--- a/trans.sh
+++ b/trans.sh
@@ -2896,6 +2896,11 @@ install_windows() {
         sed -i "s|%installto_partitionid%|1|" /tmp/autounattend.xml
     fi
 
+    # vista/2008 有这行安装会报错
+    if [ "$nt_ver" = 6.0 ]; then
+        sed -i "/EnableFirewall/d" /tmp/autounattend.xml
+    fi
+
     # 2012 r2，删除 key 字段，报错 Windows cannot read the <ProductKey> setting from the unattend answer file，即使创建 ei.cfg
     # ltsc 2021，有 ei.cfg，填空白 key 正常
     # ltsc 2021 n，有 ei.cfg，填空白 key 报错 Windows Cannot find Microsoft software license terms
diff --git a/windows.xml b/windows.xml
index ac6e6fe..25694c0 100644
--- a/windows.xml
+++ b/windows.xml
@@ -3,6 +3,8 @@
 
     <settings pass="windowsPE">
         <component name="Microsoft-Windows-Setup" processorArchitecture="%arch%" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
+            <!-- 安装过程可节省一点内存？vista 要删除不然报错 -->
+            <EnableFirewall>false</EnableFirewall>
             <UserData>
                 <AcceptEula>true</AcceptEula>
                 <ProductKey>
@@ -106,6 +108,12 @@
         <component name="Microsoft-Windows-powercpl" processorArchitecture="%arch%" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
             <PreferredPlan>8c5e7fda-e8bf-4a96-9a85-a6e23a8c635c</PreferredPlan>
         </component>
+        <component name="Microsoft-Windows-ErrorReportingCore" processorArchitecture="%arch%" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
+            <DisableWER>1</DisableWER>
+        </component>
+        <component name="Microsoft-Windows-SQMApi" processorArchitecture="%arch%" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
+            <CEIPEnabled>0</CEIPEnabled>
+        </component>
     </settings>
 
     <settings pass="oobeSystem">