Booting into Audit Mode with Autounattend.XML


I

Iguana8325

New member
Local time
3:52 PM
Posts
1
OS
Windows 11
So I have been experimenting with automation solutions, specifically Hashicorp Packer, to build out my Windows 11 24H2 image. It has been working flawlessly with an autounattend.xml file i have.

I now have a requirement to make any configurations in Audit mode instead. I have read some documentation that suggest I use <Reseal> <Mode>Audit</Mode></Reseal> in the specialize phase however no matter what I try, I can't seem to get it to boot and make any config changes in Audit mode.

Can anyone assist in this matter? I have pasted the autounattend.xml file that I use below to perform the initial installation of Windows before Packer kicks in and communicates via WinRM to complete the rest of the build.

Any advice is much appreciated.

XML: 
<?xml version="1.0" encoding="utf-8"?>
<unattend xmlns="urn:schemas-microsoft-com:unattend">
    <settings pass="windowsPE">
        <component name="Microsoft-Windows-International-Core-WinPE" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
            <SetupUILanguage>
                <UILanguage>en-GB</UILanguage>
            </SetupUILanguage>
            <InputLocale>en-GB</InputLocale>
            <SystemLocale>en-GB</SystemLocale>
            <UILanguage>en-GB</UILanguage>
            <UserLocale>en-GB</UserLocale>
        </component>
        <component name="Microsoft-Windows-PnpCustomizationsWinPE" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
            <DriverPaths>
                <PathAndCredentials wcm:action="add" wcm:keyValue="A">
                    <!-- pvscsi-Windows8.flp -->
                    <Path>A:\</Path>
                </PathAndCredentials>
            </DriverPaths>
        </component>
        <component name="Microsoft-Windows-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
                        <!-- Run SynchronousCommand at the installation of windows -->
            <RunSynchronous>

                <!-- Bypass TPM Check -->
                <RunSynchronousCommand wcm:action="add">
                    <Description>Bypass TPM Check</Description>
                    <Order>1</Order>
                    <Path>reg add HKLM\SYSTEM\Setup\LabConfig /t REG_DWORD /v BypassTPMCheck /d 1 /f</Path>
                </RunSynchronousCommand>
                
                <!-- Bypass Secure Boot Check -->
                <RunSynchronousCommand wcm:action="add">
                    <Description>Bypass Secure Boot Check</Description>
                    <Order>2</Order>
                    <Path>reg add HKLM\SYSTEM\Setup\LabConfig /t REG_DWORD /v BypassSecureBootCheck /d 1 /f</Path>
                </RunSynchronousCommand>

            </RunSynchronous>
            <DiskConfiguration>
                <Disk wcm:action="add">                   
                    <CreatePartitions>
                        <CreatePartition wcm:action="add">
                            <Order>1</Order>
                            <Type>EFI</Type>
                            <Size>100</Size>
                        </CreatePartition>
                        <CreatePartition wcm:action="add">
                            <Order>2</Order>
                            <Type>MSR</Type>
                            <Size>16</Size>
                        </CreatePartition>
                        <CreatePartition wcm:action="add">
                            <Order>3</Order>
                            <Type>Primary</Type>
                            <Extend>true</Extend>
                        </CreatePartition>
                    </CreatePartitions>
                    <ModifyPartitions>
                        <ModifyPartition wcm:action="add">
                            <Format>FAT32</Format>
                            <Order>1</Order>
                            <PartitionID>1</PartitionID>
                        </ModifyPartition>
                        <ModifyPartition wcm:action="add">
                            <Order>2</Order>
                            <PartitionID>2</PartitionID>
                        </ModifyPartition>
                        <ModifyPartition wcm:action="add">
                            <Format>NTFS</Format>
                            <Label>Windows</Label>
                            <Order>3</Order>
                            <PartitionID>3</PartitionID>
                        </ModifyPartition>
                    </ModifyPartitions>
                    <DiskID>0</DiskID>
                    <WillWipeDisk>true</WillWipeDisk>
                </Disk>           
            </DiskConfiguration>
            <ImageInstall>
                <OSImage>
                    <InstallFrom>
                        <MetaData wcm:action="add">
                            <Key>/IMAGE/INDEX</Key>
                            <Value>6</Value>
                        </MetaData>
                    </InstallFrom>
                    <InstallTo>
                        <DiskID>0</DiskID>
                        <PartitionID>3</PartitionID>
                    </InstallTo>
                    <WillShowUI>OnError</WillShowUI>
                    <InstallToAvailablePartition>False</InstallToAvailablePartition>
                </OSImage>
            </ImageInstall>
            <UserData>
                <ProductKey>                   
                    <!-- Edit below based on the the following page from Microsoft -->
                    <!-- https://docs.microsoft.com/en-GB/windows-server/get-started/kms-client-activation-keys -->
                    <Key>W269N-WFGWX-YVC9B-4J6C9-T83GX</Key>
                    <WillShowUI>Never</WillShowUI>
                </ProductKey>
                <AcceptEula>true</AcceptEula>
               <FullName>Packer Build</FullName>
               <Organization>CHANGEME</Organization>
            </UserData>
        </component>
    </settings>
    <settings pass="specialize">
    <component name="Microsoft-Windows-Deployment" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
            <!-- <Reseal>
                <Mode>Audit</Mode>
            </Reseal> -->
    </component>
    </settings>
    <settings pass="oobeSystem">
    <component name="Microsoft-Windows-International-Core" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">
            <InputLocale>en-GB</InputLocale>
            <SystemLocale>en-GB</SystemLocale>
            <UILanguage>en-GB</UILanguage>
            <UILanguageFallback>en-GB</UILanguageFallback>
            <UserLocale>en-GB</UserLocale>
        </component>
    <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">     
            <TimeZone>UTC</TimeZone>
            <AutoLogon>
                <Password>
                    <Value>Password_001</Value>
                    <PlainText>true</PlainText>
                </Password>
                <LogonCount>99</LogonCount>
                <Username>administrator</Username>
                <Enabled>true</Enabled>
            </AutoLogon>
            <FirstLogonCommands>
                <SynchronousCommand wcm:action="add">
                    <Order>1</Order>
                    <Description>Set Execution Policy 64 Bit</Description>
                    <CommandLine>cmd.exe /c powershell -Command "Set-ExecutionPolicy -ExecutionPolicy RemoteSigned -Force"</CommandLine>
                    <RequiresUserInput>true</RequiresUserInput>
                </SynchronousCommand>
                <SynchronousCommand wcm:action="add">
                    <Order>2</Order>
                    <Description>Set Execution Policy 32 Bit</Description>
                    <CommandLine>C:\Windows\SysWOW64\cmd.exe /c powershell -Command "Set-ExecutionPolicy -ExecutionPolicy RemoteSigned -Force"</CommandLine>
                    <RequiresUserInput>true</RequiresUserInput>
                </SynchronousCommand>               
                <SynchronousCommand wcm:action="add">
                    <CommandLine>CMD /c reg.exe ADD HKLM\SYSTEM\CurrentControlSet\Control\Power\ /v HibernateFileSizePercent /t REG_DWORD /d 0 /f</CommandLine>
                    <Order>3</Order>
                    <Description>Zero Hibernation File</Description>
                </SynchronousCommand>
                <SynchronousCommand wcm:action="add">
                    <CommandLine>CMD /c reg.exe ADD HKLM\SYSTEM\CurrentControlSet\Control\Power\ /v HibernateEnabled /t REG_DWORD /d 0 /f</CommandLine>
                    <Order>4</Order>
                    <Description>Disable Hibernation Mode</Description>
                </SynchronousCommand>
                <SynchronousCommand wcm:action="add">
                    <CommandLine>cmd.exe /c wmic useraccount where "name='CHANGEME'" set PasswordExpires=FALSE</CommandLine>
                    <Order>5</Order>
                    <Description>Disable password expiration for Administrator user</Description>
                </SynchronousCommand>               
                <SynchronousCommand wcm:action="add">
                    <CommandLine>CMD /c reg.exe ADD "HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Environment" /v PackerLaunched /t REG_SZ /d 1 /f</CommandLine>
                    <Order>6</Order>
                    <Description>Add reg key to indicate build was started by Packer</Description>
                </SynchronousCommand>
                <SynchronousCommand wcm:action="add">
                    <CommandLine>CMD /c reg.exe ADD "HKLM\SOFTWARE\Wow6432Node\Microsoft\.NetFramework\v4.0.30319" /v SchUseStrongCrypto /t REG_DWORD /d 1 /f</CommandLine>                   
                    <Order>7</Order>
                    <Description>Add reg key to indicate build was started by Packer</Description>
                </SynchronousCommand>               
                <SynchronousCommand wcm:action="add">
                    <CommandLine>CMD /c reg.exe ADD "HKLM\SOFTWARE\Microsoft\.NetFramework\v4.0.30319" /v SchUseStrongCrypto /t REG_DWORD /d 1 /f</CommandLine>                   
                    <Order>8</Order>
                    <Description>Add reg key to indicate build was started by Packer</Description>
                </SynchronousCommand>               
                <SynchronousCommand wcm:action="add">
                    <CommandLine>cmd.exe /c C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -File a:\Install-VMTools.ps1</CommandLine>                   
                    <Description>Start first steps after GUI logon</Description>
                    <Order>9</Order>
                </SynchronousCommand>
                <SynchronousCommand wcm:action="add">
                    <CommandLine>cmd.exe /c C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -File a:\Start-FirstSteps.ps1</CommandLine>
                    <Order>10</Order>
                    <Description>Install VMware tools</Description>               
                </SynchronousCommand>
                <SynchronousCommand wcm:action="add">
                    <CommandLine>cmd.exe /c C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -File a:\Enable-WinRM.ps1</CommandLine>
                    <Order>11</Order>
                    <Description>Enable WinRM</Description>
                </SynchronousCommand>
                <SynchronousCommand wcm:action="add">
                    <CommandLine>CMD /c reg.exe ADD "HKLM\SOFTWARE\Policies\Microsoft\Windows\CloudContent" /v DisableCloudOptimizedContent /t REG_DWORD /d 1 /f</CommandLine>
                    <Order>12</Order>
                    <Description>Disable Cloud Optimized Content</Description>
                </SynchronousCommand>               
            </FirstLogonCommands>
            <OOBE>
                <HideEULAPage>true</HideEULAPage>
                <HideLocalAccountScreen>true</HideLocalAccountScreen>
                <HideOEMRegistrationScreen>true</HideOEMRegistrationScreen>
                <HideOnlineAccountScreens>true</HideOnlineAccountScreens>
                <HideWirelessSetupInOOBE>true</HideWirelessSetupInOOBE>
                <NetworkLocation>Home</NetworkLocation>
                <ProtectYourPC>1</ProtectYourPC>
            </OOBE>
            <UserAccounts>
                <AdministratorPassword>
                    <Value>Password_001</Value>
                    <PlainText>true</PlainText>
                </AdministratorPassword>
            <LocalAccounts>
                    <LocalAccount wcm:action="add">
                        <DisplayName>testadmin</DisplayName>
                        <Name>testadmin</Name>
                        <Password>
                            <Value>Password_001</Value>
                            <PlainText>true</PlainText>
                        </Password>
                        <Group>administrators</Group>
                        <Description>Custom local admin</Description>
                    </LocalAccount>
                </LocalAccounts>
            </UserAccounts>
        </component>
    </settings>
    <cpi:offlineImage cpi:source="wim:c:/wim/install.wim#Windows Server 2019 SERVERSTANDARD" xmlns:cpi="urn:schemas-microsoft-com:cpi" />
</unattend>
 
Windows Build/Version
24H2

My Computer My Computer

At a glance

Windows 11
OS
Windows 11
You must log in or register to reply here.

Similar threads

Win 11 Autounatended.xml
2
Replies
21
Views
2K
MavericksChoice
M
W11 25H2 autounattend.xml fails, how to integrate the previous legacy setup
Replies
7
Views
5K
Labomba
L
Solved Windows 11 ISO Created with Sysprep Fails with autounattend.xml
Replies
2
Views
3K
garlin
G
How do I install multiple programs via autounattend.xml ?
Replies
12
Views
8K
garlin
G
  • Sticky
  • Article Article
WIP Windows 11 25H2+ Unattended Setup & App Integration Guide
2
Replies
27
Views
2K
hsehestedt
hsehestedt

Latest Support Threads

Latest Tutorials

Back
Top Bottom