New
#1
Sysprep 2nd Time
I know there's a 3 time limit for sysprep on a Windows machine. How do you go about returning to sysprep so I can make some minor changes? Do I just run sysprep.exe /audit?
I know there's a 3 time limit for sysprep on a Windows machine. How do you go about returning to sysprep so I can make some minor changes? Do I just run sysprep.exe /audit?
Theoretically you can sysprep as often as you want to, it's rearming Windows that has a set limit. Each sysprep with generalize switch uses one rearm. If Windows finds it is in state it cannot be rearmed anymore, sysprep fails, logs in C:\Windows\System32\Sysprep\Panther showing an error like this:
In rare occasions I have to re-sysprep I boot to Audit Mode and edit registry changing two DWORD values in HKEY_LOCAL_MACHINE\SYSTEM\Setup\Status\SysprepStatus\GeneralizationState\:Code:ERROR: SYSPRP RunExternalDlls:Not running DLLs; either the machine is in an invalid state or we couldn’t update the recorded state
- Set CleanupState = 2
- Set GeneralizationState = 7
When done, give this command in elevated Command Prompt to uninstall Microsoft Distributed Transaction Coordinator and wait at least 30 seconds:
Code:msdtc -uninstall
The longer you wait, the better; reinstalling MSDTC too soon when it's not completely uninstalled might cause issues. Even on low end slow hardware it does not need more than a minute.
OK, then reinstall MSDTC:
Code:mtdtc -install
Last but not least delete the Sysprep\Panther folder and reboot back to Audit Mode. You can now re-sysprep without worries.
Kari
Last edited by Kari; 05 Aug 2016 at 14:34.
How do I boot back into audio mode though? I think I'm missing that simple part of it all.
When you once enter to Audit Mode, you'll stay there until you specifically tell Windows to exit it with /oobe switch in sysprep command. In Audit Mode, shutting down the PC and starting again later or restarting always returns you to Audit Mode automatically if /oobe switch is not used with sysprep.