Hatch

Windows Sysprep Generator

Generate autounattend.xml for automated Windows installation

← Home
🔒 100% Local — No Data Transmitted

Windows Edition & Architecture

Select the Windows version and edition you are deploying.

⚠️ Accept the Microsoft Software License Terms (EULA) *
Required for unattended setup to skip the license page. Unchecked, the generated XML sets AcceptEula to false and Setup will stop and prompt you to accept it manually.

Language & Regional Settings

Configure locale, keyboard layout, and time zone.

Disk & Partitioning

Configure disk selection and partition layout.

⚠️ The generated XML will wipe the selected disk. Double-check disk numbers in your environment before deploying.
Custom Partition Layout
ℹ️ Define partitions in order. The last partition with size 0 will consume all remaining space. Windows OS partition must be NTFS type.

Administrator & User Accounts

Configure the built-in administrator and initial user accounts.

Local User Accounts
Auto-Logon Settings

Computer Name & Network

Configure computer name and workgroup or domain settings.

OOBE & Setup Options

Out-of-box experience and first-run setup behavior.

Skip OOBE (Out-of-Box Experience)
Suppress the Windows welcome/setup wizard entirely
Hide EULA page
Automatically accept the End User License Agreement
Hide OEM registration page
Skip the OEM registration/customization screen
Skip network setup in OOBE
Allow setup to proceed without a network connection
Skip Microsoft Account prompt
Force local account creation, bypass Microsoft Account requirement
Disable Windows Defender SmartScreen during setup
Useful for enterprise environments with their own security tools
Protect your PC (Windows Security)
Show the "Protect your PC" screen during OOBE

Privacy & Telemetry

Control data collection and privacy settings.

Disable diagnostic data (telemetry)
Set diagnostics to Security level (minimum)
Disable advertising ID
Prevent apps from using advertising ID for personalization
Disable Cortana
Disable Cortana assistant
Disable OneDrive auto-start
Prevent OneDrive from starting automatically

First-Run Commands

Commands to run automatically after Windows setup completes.

ℹ️ Specialize commands run before user logon (as SYSTEM). First-logon commands run on first user logon. Use absolute paths. Order matters.
Specialize Commands (run as SYSTEM before logon)
First Logon Commands (run on first user logon)

Common Quick-Add Commands

Click to add commonly used setup commands.

Golden Image / Sysprep Capture Optional

For building a reusable VM template: boot into Audit mode, run setup commands (e.g. install VirtIO/QEMU guest agent), then generalize and shut down.

⚠️ Do not also configure Auto-Logon (Step: Administrator & User Accounts) when using this mode. Per Microsoft's documentation, Audit mode automatically enables and signs in as the built-in Administrator on its own — explicitly setting Auto-Logon here is unnecessary and can prevent the image from transitioning through the audit/generalize passes correctly.
Enable Golden Image mode
Adds Reseal (Audit mode) and an auditUser pass that runs commands then Generalizes
Audit-Mode Commands (run before Generalize)
Shut down after Generalize
Recommended — leaves the VM powered off and ready to be captured as a template

Advanced Options

Additional configuration for enterprise deployments.

ℹ️ Most standard Windows Server/Client media contain multiple editions in one image. Without one of Image Index, Image Name, or Image Description, Setup will stop and prompt you to pick one interactively. Image Description is pre-filled from the Edition you picked on the first step, but it's only a best-guess string — real media (especially Evaluation ISOs) can use a different exact name. Priority if more than one is set: Index → Name → Description. Always verify against your actual media with dism /Get-WimInfo /WimFile:install.wim before relying on it.
Edition Servicing Package Optional — Windows Server 2022 Evaluation workaround
ℹ️ Some Windows Server 2022 Evaluation media ignores Image Name/Index for edition selection and still prompts interactively. Red Hat's own kubevirt-tekton-tasks reference works around this with a top-level <servicing> package that force-enables the target edition. Leave blank unless you hit that specific prompt on WS2022 Eval — other versions/media don't need this.
Enable edition servicing package
Emits a top-level <servicing> block that force-activates the named edition package
Enable RDP (Remote Desktop)
Allow remote desktop connections after setup
Enable .NET Framework 3.5
Install legacy .NET Framework (required by some apps)
Disable UAC (User Account Control)
Not recommended for most deployments
Show file extensions in Explorer
Unhide known file extensions in Windows Explorer
Show hidden files in Explorer
Display hidden files and folders in Explorer
Disable Hibernation
Disable hiberfil.sys to reclaim disk space
Set High Performance power plan
Apply High Performance power scheme
Driver Paths
ℹ️ Enter UNC or local paths to driver folders that setup should scan. These must be accessible during Windows PE.

Review & Generate XML

Review your configuration and generate the autounattend.xml file.

Copied to clipboard!