Audit mode and sysprep back to audit mode


HerrDarzen

Member
Local time
5:04 AM
Posts
3
Visit site
OS
W11 pro
Hi! So let´s make long story short: I usually install Windows to customers PC:s via WinPE. So I create one "base" WIM image that´s booting back to audit mode. And why? Because I build custom PC:s and hardware changes a lot. In audit mode I install drivers, run tests etc. . There´s of cource lot of another things I do with WIM image like customizing winre, adding languages, updates etc. But my main question is that have anybody noticed that if you´re using sysprep in audit mode like: Sysprep /generalize /reboot /audit then in the next boot, taskbar is looking like Windows 10 taskbar and file explorer is lagging alot? This happends with totally clean installation. I figured out that if I reregister APPX packages and after reboot everything works normally. Is it a bug or am I doing something wrong? Tried this with Hyper-v and VMware. I created answerfile that runs PS script that reregister APPX packages in audituser step so taskbar and everything else it´s working now as intended. But anyway, bug or user error?
 

My Computer

System One

  • OS
    W11 pro
Not able to provide a solution but I can confirm I am also seeing this behavior. Similar situation to yours, I build images which must first be deployed in audit mode.
My steps to recreate are,
1. Start with OEM Media
2. Deploy WIM to PC with Unattend file forcing Audit mode on first boot.
3. First boot ever is Audit mode. Here is where I apply my reference image changes.
4. Run Sysprep.exe /Audit /Generalize /shutdown
5. Capture Image for redeployment.
6. Deploy image. Boots directly into Audit mode. Team performs quality assurance tests on hardware.
7. After completion of testing script is ran to sysprep into OOBE for end customer.

Step 6 I am seeing the same behavior you described. One thing I've noticed is if on step 4 I sysprep to OOBE and then during OOBE access Audit via CTRL + SHIFT + F3, then Audit mode will behave properly.

Were you able to find a solution / cause?
 

My Computer

System One

  • OS
    Windows 11
I created answer file that runs powershell script in AuditUser pass (RunSynchronousCommand). Powershell script reregisters all APPX packages and after reboot taskbar and everything else is working correctly. I placed answer file in %windir%\Panther folder so everytime image is deployed in to a new computer it uses that answer file. PS script is placed in root of C: . I haven´t investigate what APPX package causes the problem so I just reregister them all.

Answer file (unattend.xml):

Code:
<?xml version='1.0' encoding='utf-8'?>
<unattend xmlns="urn:schemas-microsoft-com:unattend">
    <settings pass="auditUser">
        <component name="Microsoft-Windows-Deployment" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
            <RunSynchronous>
                <RunSynchronousCommand wcm:action="add">
                    <Description>APPX</Description>
                    <Order>1</Order>
                    <WillReboot>Always</WillReboot>
                    <Path>powershell.exe -executionpolicy bypass "C:\PSscript.ps1"</Path>
                </RunSynchronousCommand>
            </RunSynchronous>
        </component>
    </settings>
</unattend>

PSscript.ps1:

Code:
Get-AppxPackage -allusers | foreach {Add-AppxPackage -register "$($_.InstallLocation)\appxmanifest.xml" -DisableDevelopmentMode}
 

My Computer

System One

  • OS
    W11 pro
Frankly it is years since I used sysprep as Windows 10 driver handling with hardware changes is far better than satisfactory versions.

I just image backup Windows using Macrium Reflect and restore to new device and most of time, it just works. I sometimes use the redeploy (paid version) to different harwdware if new device needs special driver.

Another approach is to create a custom wim of refrence installation using dism, and inject drivers then create bootable installation iso.
 

My Computer

System One

  • OS
    Windows 11 Pro + Win11 Canary VM.
    Computer type
    Laptop
    Manufacturer/Model
    ASUS Zenbook 14
    CPU
    I9 13th gen i9-13900H 2.60 GHZ
    Motherboard
    Yep, Laptop has one.
    Memory
    16 GB soldered
    Graphics Card(s)
    Integrated Intel Iris XE
    Sound Card
    Realtek built in
    Monitor(s) Displays
    laptop OLED screen
    Screen Resolution
    2880x1800 touchscreen
    Hard Drives
    1 TB NVME SSD (only weakness is only one slot)
    PSU
    Internal + 65W thunderbolt USB4 charger
    Case
    Yep, got one
    Cooling
    Stella Artois (UK pint cans - 568 ml) - extra cost.
    Keyboard
    Built in UK keybd
    Mouse
    Bluetooth , wireless dongled, wired
    Internet Speed
    900 mbs (ethernet), wifi 6 typical 350-450 mb/s both up and down
    Browser
    Edge
    Antivirus
    Defender
    Other Info
    TPM 2.0, 2xUSB4 thunderbolt, 1xUsb3 (usb a), 1xUsb-c, hdmi out, 3.5 mm audio out/in combo, ASUS backlit trackpad (inc. switchable number pad)

    Macrium Reflect Home V8
    Office 365 Family (6 users each 1TB onedrive space)
    Hyper-V (a vm runs almost as fast as my older laptop)
Yeah, there´s many different ways how to install/deploy Windows. I´ve deployed Windows to end customers by using WinPE and WIM images so many years that it just feels like right and easy way for me :) . But sometimes there´s these weird problems... usually those have been just "user errors" :D . But this problem was different and it have been harder to find where the issue eventually lies on. That´s why I came here and started this topic because I wasn´t sure if this is just my problem or are there more folks that have noticed the same problem as me.

ps. sorry for my english :D
 

My Computer

System One

  • OS
    W11 pro
Quick update - I ran through in a VM one by one to find the packages causing the issue. In my case it required reloading three packages.
"MicrosoftWindows.Client.CBS," "MicrosoftWindows.UndockedDevKit," and "Microsoft.Windows.ShellExperienceHost"

Thanks for sending me in the right direction originally!
 
Last edited:

My Computer

System One

  • OS
    Windows 11
Back
Top