I would like to include IE security certificates and other security settings for IE (trusted sites etc.) in my unattended CD. Has anyone done this??

I haven't seen a way to do it in winnt.sif.

[HKEY_CURRENT_USER\Software\Policies\Microsoft\SystemCertificates]

[HKEY_CURRENT_USER\Software\Microsoft\SystemCertificates]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\EnterpriseCertificates]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\SystemCertificates]

export/import if these keys? ill see if anything happens. btw will this stop the confirmation the downloading the windows update control off the website? just wondered if you know?

also you could try exporting the certificates from Tools > Internet Options > Content > Certificates, then on your installation use the following command:

rundll32.exe cryptext.dll,CryptExtAddCER %1

where %1 is the certificate file that has been exported, i haven't tested these ideas out yet.