install rh-initial-setup selinux must be permissive for initial-setup to work must edit the NM dbus policy to allow calls when not 'at console' add InitialSetupEnable=True to [daemon] in custom.conf touch /etc/gdm/run-initial-setup