Blocking Account Creation During Windows Setup

[Damiano1992]

Hi Guys,

I already have a custom ISO created, but I'd like to block the local account creation during the OOBE setup (so the user uses the Online Setup / Autopilot steps).

Is this possible with NTLite? If yes, could someone help how can I do it?

Thank you,

Damian.

 

[garlin]

This is simple. If you don't create any user accounts in Unattended, OOBE will be forced to follow the normal path.

For W11 and later W10 releases, if the BypassNRO setting under Settings / System is enabled, then you're allowed to create local user accounts instead of being forced to use Microsoft Accounts. Without it, OOBE follows the normal behavior.

Please be aware the usual hacks to trick OOBE can't be blocked (like providing a fake e-mail address or banned user account, etc.) since that logic is managed through MS Accounts.

 

[Damiano1992]

Hey,

Thanks for the reply, I don't know if I explained it properly, but I'd like to block users from creating an "Offline Account" during set-up on my custom ISO.

View attachment 9862

Would disabling the BypassRNO do the trick? Can I do it in NTLine after mounting the image?

Thanks!

 

[garlin]

You're really asking about managing the AutoPilot flow, which isn't a NTLite question. From what I understand, that's the "Hide change account options" setting. There's several articles on the web for how that works in InTune.