nLite 1.2.1 creates value called nltide3 with data:

cmd.exe /C rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N

in key HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\RunOnce

Q: is it normal/should be there? Or is it some left-over which wasn't deleted but should have been? Can I safely delete this entry manually? Or leave it alone. I didn't have this entry with install made with nLite 1.0 - now with 1.2.1 it appeared.

This should be applied when an user is created and logged on for the first time. You can delete it if you don't plan to create new account in the future.

thanks for the explanation - will leave it, then.