Windows Configuration Designer UI Not Loading Correctly During PPKG Creation

Description

While creating a provisioning package (.ppkg) in Windows Configuration Designer (WCD), the interface may appear incomplete or incorrectly rendered. Only the navigation options may be visible, while the main configuration pane does not load correctly.

This issue can prevent access to Account Management and the Microsoft Entra ID bulk enrollment options required to create a valid provisioning package for Opsole Migrate.

Quick Reference

What You Will See

Windows Configuration Designer may display an interface similar to the example below:

Example: Windows Configuration Designer displaying only the navigation steps.

Typical symptoms include:

• Only options such as Set up device, Set up network, Account Management, Add applications, Add certificates, and Finish are displayed
• The main configuration pane is missing or does not render correctly
• Microsoft Entra ID or Bulk Enrollment options required for PPKG creation may not be accessible

Root Cause

This behavior can occur when the Windows policy Security Zones: Use only machine settings is enabled.

The policy is represented by the following registry value:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings

Diagnosis

1. Close Windows Configuration Designer if it is open.
2. Open Registry Editor (regedit) or an elevated Command Prompt.
3. Check whether the following value exists and is set to 1:

reg query "HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings" /v Security_HKLM_only

Resolution

Resolution 1 — Manual Registry Change

1. Close Windows Configuration Designer
   Completely close Windows Configuration Designer before modifying the registry.

2. Open Registry Editor
   Press Win + R, type regedit, and select OK. Approve the User Account Control prompt if displayed.

3. Navigate to the registry location
   Browse to:

   HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings

4. Locate the registry value
   In the right pane, locate Security_HKLM_only.

5. Change the value
   Double-click Security_HKLM_only and change Value data from 1 to 0. Leave the base as Hexadecimal or Decimal; the value 0 is the same in either base.

6. Reopen Windows Configuration Designer
   Close Registry Editor and launch Windows Configuration Designer again.

Resolution 2 — Command Prompt

Alternatively, change the registry value from an elevated Command Prompt. This applies the same change without opening Registry Editor.

1. Open Command Prompt as Administrator
   Search for Command Prompt, right-click it, and select Run as administrator.

2. Change the registry value
   Run:

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings" /v Security_HKLM_only /t REG_DWORD /d 0 /f

3. Verify the registry value
   Run:

reg query "HKLM\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings" /v Security_HKLM_only

The expected output should show Security_HKLM_only as REG_DWORD 0x0.

4. Reopen Windows Configuration Designer
   Close Command Prompt and reopen Windows Configuration Designer.

Verification

Confirm that the registry value is now configured as follows:

Security_HKLM_only    REG_DWORD    0x0

After reopening Windows Configuration Designer, confirm that:

• The full configuration interface is displayed
• The Account Management page opens correctly
• The required Microsoft Entra ID / Bulk Enrollment options are accessible

Then continue creating the provisioning package as described in Provisioning Package.

When to Contact Support

Contact support@opsole.com if:

• The registry value is already 0 (or not present) but the WCD interface still does not load correctly
• Group Policy or Intune restores Security_HKLM_only to 1 after each refresh and you need guidance on an approved workstation configuration for PPKG creation
• The Account Management / Bulk Enrollment workflow still fails after the UI loads correctly

Related Guidance

• Provisioning Package
• Microsoft documentation: Create a provisioning package