unattend.tools — the unattend.xml builder for sysadmins who want to ship images, not study the schema.

Pick your edition. Toggle the OOBE bypasses. Choose a sysprep workflow. The right-hand pane shows the XML you'll get — the same XML you'd write yourself, if you had time to read the schema PDF cover to cover. Nothing leaves your browser; there's no backend to phone home with.

Index inside install.wim. Enter "auto" to derive from edition, or a number (e.g. 6).

Product key mode

These are public Microsoft keys. They do not activate Windows without a KMS server.

Installation target

Physical disk index. 0 = first drive.

Advanced

Tells Windows Setup to use an associated Windows SIM configuration set (extra drivers/apps). OEM/advanced — leave off unless you know you need it.

Administrator account

Add a second local user

Autologon

Enable autologon
Computer name strategy
Network membership
Skip EULA page

Suppresses the End User License Agreement screen during setup (HideEULAPage).

Skip privacy settings

Hides the OEM registration screen and applies privacy defaults (HideOEMRegistrationScreen).

Skip Microsoft Account prompt

Emits HideOnlineAccountScreens=true so OOBE skips the Microsoft-Account sign-in screen. Requires a local admin defined in Section 4.

Skip OneDrive setup

Prevents the OneDrive setup prompt appearing at first user logon.

Skip wireless setup

Hides the Wi-Fi setup screen (HideWirelessSetupInOOBE). Required for offline installs.

Skip machine OOBE

Emits SkipMachineOOBE — bypasses the device setup experience entirely.

Skip user OOBE

Emits SkipUserOOBE. Pair with "Skip machine OOBE" for fully headless installs.

Controls the Windows Update setup screen. Off skips the page entirely.

Sets the Windows Firewall profile at first logon. Home enables network discovery; Public is more restrictive.

Bypass TPM 2.0 check
Confirmed through 24H2

Confirmed working through 26100 (24H2)

Bypass Secure Boot check
Confirmed through 24H2

Confirmed working through 26100 (24H2)

Bypass RAM check (< 4 GB)
Confirmed through 24H2

Confirmed working through 26100 (24H2)

Bypass CPU compatibility check
Confirmed through 24H2

Confirmed working through 26100 (24H2)

Bypass storage size check
Confirmed through 24H2

Confirmed working through 26100 (24H2)

No commands yet. Add one below or pick a snippet above.

Enable Remote Desktop

Configures the registry value and Windows Firewall rule so users in the Remote Desktop Users group can connect over RDP after first boot.

Disable Windows Firewall (all profiles)

Turns off the firewall during the OOBE pass for all three profiles (Domain, Private, Public).

Hide username on logon screen

Lockdown / kiosk scenarios — users must type both username and password.

Copy admin profile to default user

Old golden-image technique — new users inherit the admin's customised profile. Use with workflow B (capture-ready).

Disable User Account Control (UAC)

Suppresses the elevation prompt for all administrators.

Chrome/Firefox must already be installed before first logon for the setting to stick.

Applied to Microsoft Edge only.

OEM branding (System → About)

URL or local path to a 120x120 PNG/BMP that ships with the build.

Not sure which workflow? Answer 1–4 questions.
1. Are you booting from a USB stick or ISO?