Disable prompt to change password for local non-admin account

Question

Hi there, I have a special-case laptop image running Windows 7 Enterprise. This one will not be on the domain--configured as a standalone workgroup only. I have three local accounts on it:
1) Tech account with admin privs and password protected
2) Teacher account with admin privs and password protected
3) Kindergarten student account with regular user privs and no password at all
For some reason, after Sysprep, when the student and teacher clicks their icon to logon, Windows always prompts them to change the password. I want to disable that. I have the following in my unattend.xml file which should take care of this, based on what
I've read here. Still getting prompted to change password though. Any ideas what's missing?
Thanks,
Sir_Timbit
<component name="Microsoft-Windows-Shell-Setup" .....
            <FirstLogonCommands>
                <SynchronousCommand wcm:action="add">
                    <CommandLine>wmic useraccount where &quot;name=&apos;Student&apos;&quot; set PasswordExpires=FALSE&lt;/CommandLine&gt;</CommandLine>
                    <Description>Student password never expires...</Description>
                    <Order>2</Order>
                </SynchronousCommand>
                <SynchronousCommand wcm:action="add">
                    <CommandLine>net accounts /maxpwage:unlimited</CommandLine>
                    <Description>Disable expired local user account passwords</Description>
                    <Order>3</Order>
                    <RequiresUserInput>true</RequiresUserInput>
                </SynchronousCommand>
                <SynchronousCommand wcm:action="add">
                    <CommandLine>wmic useraccount where &quot;name=&apos;Staff&apos;&quot; set PasswordExpires=FALSE&lt;/CommandLine&gt;</CommandLine>
                    <Description>Staff password never expires</Description>
                    <Order>1</Order>
                </SynchronousCommand>
            </FirstLogonCommands>

Answer 1

For some reason my paste garbled up the unattend.xml file. It should read:
            <FirstLogonCommands>
                <SynchronousCommand wcm:action="add">
                    <CommandLine>wmic path Win32_UserAccount WHERE name="Student" set PasswordExpires=FALSE</CommandLine>
                    <Description>Student password never expires...</Description>
                    <Order>2</Order>
                </SynchronousCommand>
                <SynchronousCommand wcm:action="add">
                    <CommandLine>net accounts /maxpwage:unlimited</CommandLine>
                    <Description>Disable expired local user account passwords</Description>
                    <Order>3</Order>
                    <RequiresUserInput>true</RequiresUserInput>
                </SynchronousCommand>
                <SynchronousCommand wcm:action="add">
                    <CommandLine>wmic path Win32_UserAccount WHERE name="Staff" set PasswordExpires=FALSE</CommandLine>
                    <Description>Staff password never expires</Description>
                    <Order>1</Order>
                </SynchronousCommand>
            </FirstLogonCommands>
Now, I let Sysprep complete and logged on as Staff. I went to the command prompt and ran the wmic command above to configure the student account to never expire. It failed when I ran it from a regular command prompt, but worked (and prevents the student
password from expiring--what I want!) when I ran the command prompt as administrator, and paste the above. I was under the impression sysprep would be processing the unattend file with administrative privs. So I'm a bit closer here, but still unsure how to
get it to run the above wmic command as administrator.