Step reference

Registry (default user)

Seed the Windows Default User profile so every new user on the machine inherits the settings. These are the per-user defaults Intune can't reach on a fresh device.

1 min readUpdated Jul 31, 2026

What it does

Writes registry entries into the Windows Default User profile, the template Windows copies for every new account. That means every new user created on the machine inherits the settings, including the first user who signs in after Autopilot OOBE.

This is something Intune can't do: Intune can only write per-user settings for users who already exist. This step seeds the defaults before anyone logs in. It loads the Default User profile, writes the entries, and unloads it cleanly.

Options

OptionWhat it controls
Registry entriesA list of per-user entries, each a key, value name, type and value. Required.

Good to know

  • Common uses: show file extensions and hidden files in Explorer, suppress app first-run wizards, set regional format defaults, apply Edge/Chrome defaults.
  • For device-wide settings that aren't per-user, use Registry (HKLM).
  • If an entry can't be written, the setup stops by default.

Verifying this properly takes a second account

"The profile loaded" isn't proof. Provision a machine, sign in as a brand-new user, and confirm the setting is present in that user's HKCU. Inheritance by new users is the whole point of the step, and it's the only thing worth testing.

Part of the step catalogue.