I've been trying to change a registry key in HKCU via unattend but it doesn't seem to work. I confirmed the key itself and if I apply the .reg file manually and reboot, it works. The key is located in HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Zones\2\Flags. (specifically, uncheck the require https in Trusted Sites) The other things in the reg file DO apply, so I know the command is firing. I am suspecting that it is being run prior to the "mini-setup" box that appears when it is setting up the account's Internet and Desktop settings. I have tried both FirstLogonCommands and using SetupComplete.cmd. I am executing the .reg with regedit /s. I had also looked into the Default user account's hive but this key does not exist. It must get this setting from somewhere? I also cannot modify the accounts in the image because they are created via the unattend.xml. Is there another way I can try to automate this? I did a bunch of research already but it mostly deals with using GPOs on domains. Even using this method, enabling it does not actually remove the checkmark on the dialog box for Trusted Sites. Any other ideas about how to accomplish this? I'd rather not have to end up making it a manual step. Edit: Windows 7 x64