Windows Unattended File Generator

General Settings

Architecture

Choose the system architecture (32-bit or 64-bit) of the Windows version you are installing. This must match your installation media.

Product Key & Edition
These settings determine which version of Windows is installed and how it is licensed.

Use a generic product key

Installs Windows, but does not activate it. The edition to install is selected below.

Use product key from BIOS/UEFI

Re-use the license that came with your computer. This is common for machines from major OEMs like Dell or HP.

Enter another product key

Enter product key during Setup

Windows Setup will pause and prompt for a product key to be entered manually.

Computer Name
Determines how the computer is identified on the network.

Let Windows generate a random computer name Choose a computer name yourself

Provide a PowerShell script to set the name dynamically

Your script will be evaluated during Windows Setup. The script must return a single string, which must be a valid computer name (max 15 chars).

Windows Edition to Install

Select the specific edition of Windows that is present on your installation media. This must match exactly.

Registered Owner

Sets the 'RegisteredOwner' value in the registry, visible in System Information.

Registered Organization

Sets the 'RegisteredOrganization' value in the registry, visible in System Information.

Automatically Accept EULA

Automatically accepts the End-User License Agreement to allow for a fully unattended setup.

Skip Auto-Activation

Prevents Windows from attempting to activate online automatically. Useful for Volume License or KMS activation scenarios.

Regional Settings

UI Language

Sets the display language for the Windows UI, including login screen, settings, and apps.

Keyboard Layout

Sets the default keyboard input layout for all users.

Time Zone

Sets the system's time zone. The list attempts to auto-select your current time zone.

Disk Partition Setup

Installation Mode

Choose whether to completely erase the disk or install to an existing partition (e.g., for dual-booting).

Wipe disk & create partitions Install to existing partition

Wipe Disk Options

Scheme

UEFI (GPT) is for modern computers. BIOS (MBR) is for older systems (pre-2012). Your choice must match the system's firmware settings.

Windows Partition Size (GB)

Specify a size for the Windows (C:) drive. If left blank, it will use all available space. If a size is set, any remaining space will be formatted as a new 'Data' drive.

Existing Partition Options

Install to Partition Number

The partition number where Windows should be installed. Be careful, as the wrong number could overwrite data.

Disk ID to Install To

The disk number (starting from 0) where the partitions will be created or where Windows will be installed.

User Accounts & Profiles

Enable the built-in Administrator

Activates the powerful built-in 'Administrator' account and disables the creation of any other local users from this tool.

If checked, local user accounts below are ignored.

Administrator Password

Auto log on as Administratortime(s)

Create Local Users

Copy Profile

A powerful sysadmin feature. If you customize the desktop, start menu, etc. while auto-logged in, this setting copies that customized profile to the default user profile. All new users created on the system will then get these customizations.

Requires an auto-logon user to be set.

Domain / Network

Network Membership

Choose whether the computer should join a simple Workgroup or a corporate Active Directory Domain.

Join WorkgroupJoin Domain

Workgroup Settings

Workgroup Name

Domain Join Settings

Domain Name

Join User

An Active Directory user account with permissions to join computers to the domain. Use the format DOMAIN\\user or [email protected].

Password

Machine Object OU (Optional)

The full, distinguished name of the Organizational Unit where the new computer account should be created. e.g., OU=Desktops,DC=aeternum,DC=local

OOBE & Desktop Experience

Out-of-Box-Experience (OOBE)
Control which screens the user sees during the initial Windows setup.

Use Express Settings

Hide EULA Page

Hide Account Screens (MSA/Local)

Hide Wireless Setup

Desktop & Shell
Customize the user's desktop environment and interaction settings.

Show Power Button on Sign-in Screen

Don't Clean Invalid Taskbar Links

Disable Enhance Pointer Precision

Turn off system sounds

Microsoft Edge
Customize the behavior of the built-in Microsoft Edge browser.

Hide First Run Experience

Disable Startup Boost & Background Mode

Make Edge uninstallable (EEA mode)

Security & Performance Tweaks

Windows 11 Setup Bypass
These settings modify the registry during the Windows PE phase to bypass hardware requirement checks for Windows 11.

Bypass TPM Check

Bypass Secure Boot Check

Bypass RAM Check

Security & Privacy
These tweaks are applied via First Logon Commands and require an auto-logon user.

Disable User Account Control (UAC)

Disable Smart App Control

Disable SmartScreen Filter

Disable Windows Defender Services

Disable System Restore

Disable Telemetry

Prevent Device Encryption

Harden C:\ Permissions

Allow PowerShell Scripts (RemoteSigned)

Audit Process Creation

Include command line in audit logs

Performance & Other
Additional tweaks for performance and system behavior.

Set High Performance Power Plan

Enable Remote Desktop (RDP)

Disable IE ESC (Servers Only)

Disable App Suggestions

Show Known File Extensions

Show Hidden Files & Folders

Enable Long Paths

Do not update Last Access Time

Disable Fast Startup

Disable Windows Update (via task)

Prevent Windows Update from rebooting

Delete C:\Windows.old folder

Account Security Policy
Configures local security policies related to user accounts. Requires an auto-logon user to apply.

Password Expiration
Sets the maximum password age for local user accounts. This setting does not apply to the built-in Administrator account.

Passwords do not expire (Recommended) Use Windows default (42 days) Use custom expiration

Passwords expire after days.

Account Lockout
Determines the policy for locking out an account after multiple failed logon attempts.

Use default policy (10 attempts / 10 min window / 10 min duration) Disable policy (vulnerable to brute-force attacks) Use custom policy

Lock out an account after failed logon attempts within minutes. After minutes, unlock the account automatically.

OEM Info & Custom Commands

OEM Information
Sets OEM branding information that appears in the System Properties window.

Manufacturer

Model

Support Phone

Support URL

Logo Path

First Logon Commands
Run custom command-line scripts or executables after the first user logs on. All commands are run with administrative privileges.

Requires an auto-logon user to run. Commands are executed in the order they appear here, after all tweak commands.

Review & Download

Review the generated XML below. Click the button to download your `unattend.xml` file.

General Settings

Product Key & Edition These settings determine which version of Windows is installed and how it is licensed.

Computer Name Determines how the computer is identified on the network.

Regional Settings

Disk Partition Setup

Wipe Disk Options

Existing Partition Options

User Accounts & Profiles

Create Local Users

Domain / Network

Workgroup Settings

Domain Join Settings

OOBE & Desktop Experience

Out-of-Box-Experience (OOBE)Control which screens the user sees during the initial Windows setup.

Desktop & ShellCustomize the user's desktop environment and interaction settings.

Microsoft EdgeCustomize the behavior of the built-in Microsoft Edge browser.

Security & Performance Tweaks

Windows 11 Setup BypassThese settings modify the registry during the Windows PE phase to bypass hardware requirement checks for Windows 11.

Security & PrivacyThese tweaks are applied via First Logon Commands and require an auto-logon user.

Performance & OtherAdditional tweaks for performance and system behavior.

Account Security PolicyConfigures local security policies related to user accounts. Requires an auto-logon user to apply.

Password ExpirationSets the maximum password age for local user accounts. This setting does not apply to the built-in Administrator account.

Account LockoutDetermines the policy for locking out an account after multiple failed logon attempts.