unattend.tools — the unattend.xml builder for sysadmins who want to ship images, not study the schema.
Pick your edition. Toggle the OOBE bypasses. Choose a sysprep workflow. The right-hand pane shows the XML you'll get — the same XML you'd write yourself, if you had time to read the schema PDF cover to cover. Nothing leaves your browser; there's no backend to phone home with.
Index inside install.wim. Enter "auto" to derive from edition, or a number (e.g. 6).
These are public Microsoft keys. They do not activate Windows without a KMS server.
Physical disk index. 0 = first drive.
Administrator account
Autologon
Suppresses the End User License Agreement screen during setup (HideEULAPage).
Hides the OEM registration screen and applies privacy defaults (HideOEMRegistrationScreen).
Emits HideOnlineAccountScreens=true so OOBE skips the
Microsoft-Account sign-in screen. Requires a local admin defined in Section 4.
Prevents the OneDrive setup prompt appearing at first user logon.
Hides the Wi-Fi setup screen (HideWirelessSetupInOOBE). Required for offline installs.
Emits SkipMachineOOBE — bypasses the device setup experience entirely.
Emits SkipUserOOBE. Pair with "Skip machine OOBE" for fully headless installs.
Controls the Windows Update setup screen. Off skips the page entirely.
Sets the Windows Firewall profile at first logon. Home enables network discovery; Public is more restrictive.
Confirmed working through 26100 (24H2)
Confirmed working through 26100 (24H2)
Confirmed working through 26100 (24H2)
Confirmed working through 26100 (24H2)
Confirmed working through 26100 (24H2)
No commands yet. Add one below or pick a snippet above.
Configures the registry value and Windows Firewall rule so users in the Remote Desktop Users group can connect over RDP after first boot.
Turns off the firewall during the OOBE pass for all three profiles (Domain, Private, Public).
Lockdown / kiosk scenarios — users must type both username and password.
Old golden-image technique — new users inherit the admin's customised profile. Use with workflow B (capture-ready).
Suppresses the elevation prompt for all administrators.
Chrome/Firefox must already be installed before first logon for the setting to stick.
Applied to Microsoft Edge only.