Customizing image in Audit mode vs OOBE

Hi,

I'm new to customizing Windows images and I'm confused by something that I hope you can clear up. I understand that audit mode gives OEMs the ability to install software, drivers, customize etc before capturing a master image, and that that this uses a hidden admin account. So when creating an image I can install Windows, boot to audit mode, customize, generalize then capture the image. What's not clear to me is, what's the different between customizing in audit mode, vs going through OOBE, then customizing from a specific user account, then generalizing and capturing master image. Why would you choose to do the customization in audit mode as opposed to from a specific account you create after first pass through OOBE? I know there must be some important differences but can't find anything obvious to say why customizing in a specific user is not a good idea. Why do I need audit mode?

Thanks!

Thanks Paul. So if I'm reading that post correctly, the benefit of Audit mode over running generalize from an OOBE user is that you can modify the default profile that gets applied to all future users. Anything else? Thanks!

LNS said:

Thanks Paul. So if I'm reading that post correctly, the benefit of Audit mode over running generalize from an OOBE user is that you can modify the default profile that gets applied to all future users. Anything else? Thanks!

The ability of making customizations to default profile is NOT a benefit of Audit mode. Actually, customizations/modifications of ANY profile CAN BE copied to Default profile (which will then be propagated to new/future user profiles) IF BOTH conditions are met:
- sysprep runs with /generalize parameter
- there is an answer file including the <CopyProfile>true</CopyProfile> directive.
(Without the /generalize parameter, sysprep will not parse the "specialize" pass to which the CopyProfile directive belongs).

However, I guess the reason is because the built-in Administrator, by defaults, is disabled, so when we need to run sysprep it would be considered a "clean" profile to start, hmm?