Tom,
I just tried setting the ProtectYourPC in the unattend as follows:
<OOBE>
<HideEULAPage>true</HideEULAPage>
<NetworkLocation>Work</NetworkLocation>
<ProtectYourPC>2</ProtectYourPC>
<SkipMachineOOBE>true</SkipMachineOOBE>
<SkipUserOOBE>true</SkipUserOOBE>
</OOBE>
2 Specifies that only updates are installed.
This did not work. I agree with Tom that it would have been a cleaner way.
I tried rebuilding my base image, still the same. The only difference in my previous base image, which did not do this, was that it was bios based, not UEFI. Not sure why UEFI would cause this action, or if it does at all.
I'll continue playing with this and report back if I stumble across anything.
Thanks for the input.