We Deploy Window 7 X86 SP1 using SCCM & MDT. It's a unattended deployment (No Image). As far as I know "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce" should be removed if the execution is a success. But we have 4 keys remaining in RunOnce: ASYNCMAC, rundll32.exe streamci,StreamingDeviceSetup {eeab7790-c514-11d1-b42b-00805fc1270e},asyncmac,{ad498944-762f-11d0-8dcb-00c04fc3358c},C:\Windows\INF\netrasa.inf,Ndis-Mp-AsyncMac ehssetup, "%WinDir%\system32\rundll32.exe" "%WinDir%\ehome\ehssetup.dll",LaunchProcessInputFiles iessetup, C:\Windows\system32\rundll32.exe "C:\Program Files\Internet Explorer\iessetup.dll",LaunchProcessInputFiles wmssetup, C:\Windows\system32\rundll32.exe "C:\Program Files\Windows Media Player\wmssetup.dll",LaunchProcessInputFiles Is this by design or should these keys be removed by the system? Also when I make a custom RunOnce (Notepad, %windir%\notepad.exe) the key is executed each reboot/logon.

I would double check the unattend xml file and the rights. Publish or upload definition file and logs. This topic is much closer to the following forums: http://social.technet.microsoft.com/Forums/en-US/mdt/threads http://social.technet.microsoft.com/Forums/en-US/configmgrosd/threads Regards Milos

Hi Alpejan, The keys under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce are deleted before the command line is run unless overridden. Therefore, I suggest you check your unattend.xml file. Regards, Miya TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tnmff@microsoft.comMiya Yao TechNet Community Support

How's it going? Please feel free to give us any update. Regards, Miya TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tnmff@microsoft.comMiya Yao TechNet Community Support

You're right it has been some time. This problem is one of the problems we are investigating. This issue has no direct effect for the users. So the prio is somewhat lower. I don't see the relation with the unattend.xml, I will ask my colleague who has more experience in the unattended installation to look further into this. As soon as I am at work again I will lookup and post the unattend.xml.

Hereby the unattend.xml we use. Again, I don't see the relation between the unattend.xml and the RunOnce keys. <?xml version="1.0" encoding="utf-8"?> <unattend xmlns="urn:schemas-microsoft-com:unattend"> <settings pass="specialize"> <component name="Microsoft-Windows-International-Core" processorArchitecture="x86" publicKeyToken="999999999999" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> <InputLocale>en-US</InputLocale> <SystemLocale>nl-NL</SystemLocale> <UILanguage>nl-NL</UILanguage> <UserLocale>nl-NL</UserLocale> </component> </settings> <settings pass="oobeSystem"> <component name="Microsoft-Windows-International-Core" processorArchitecture="x86" publicKeyToken="999999999999" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> <InputLocale>en-US</InputLocale> <SystemLocale>nl-NL</SystemLocale> <UILanguage>nl-NL</UILanguage> <UserLocale>nl-NL</UserLocale> </component> </settings> <cpi:offlineImage cpi:source="catalog://xxxx/xxxx/windows 7 x86 sp1/sources/install_windows 7 enterprise.clg" xmlns:cpi="urn:schemas-microsoft-com:cpi" /> </unattend>

I didn't find any clue in this file. Based on your former discription, it's a tough process to find the culprit and beyond our ability to do this in the forum, therefore, I recommend you contact Microsoft Customer Service http://support.microsoft.com for more help. The professional engineer will give you more help. Thanks for your understanding and cooperation! Regards, Miya TechNet Subscriber Support in forum. If you have any feedback on our support, please contact tnmff@microsoft.comMiya Yao TechNet Community Support

When I make the users member of the Local Administrators group, de keys are removed. Is this "By Design"?

Yes, its "by Design" ;-) http://support.microsoft.com/default.aspx?scid=kb;en-US;2021405