Sysprep 2nd Time

Theoretically you can sysprep as often as you want to, it's rearming Windows that has a set limit. Each sysprep with generalize switch uses one rearm. If Windows finds it is in state it cannot be rearmed anymore, sysprep fails, logs in C:\Windows\System32\Sysprep\Panther showing an error like this:

Code:

ERROR: SYSPRP RunExternalDlls:Not running DLLs; either the machine is in an invalid state or we couldn’t update the recorded state

In rare occasions I have to re-sysprep I boot to Audit Mode and edit registry changing two DWORD values in HKEY_LOCAL_MACHINE\SYSTEM\Setup\Status\SysprepStatus\GeneralizationState\:

• Set CleanupState = 2
• Set GeneralizationState = 7

When done, give this command in elevated Command Prompt to uninstall Microsoft Distributed Transaction Coordinator and wait at least 30 seconds:

Code:

msdtc -uninstall

The longer you wait, the better; reinstalling MSDTC too soon when it's not completely uninstalled might cause issues. Even on low end slow hardware it does not need more than a minute.

OK, then reinstall MSDTC:

Code:

mtdtc -install

Last but not least delete the Sysprep\Panther folder and reboot back to Audit Mode. You can now re-sysprep without worries.

Kari

When you once enter to Audit Mode, you'll stay there until you specifically tell Windows to exit it with /oobe switch in sysprep command. In Audit Mode, shutting down the PC and starting again later or restarting always returns you to Audit Mode automatically if /oobe switch is not used with sysprep.