Windows 10: Customize Windows 10 Image in Audit Mode with Sysprep
I'm supporting an enterprise deployment and we're using Windows 10 Enterprise 2015 LTSB (which reports as "Version 10.0 (Build 10240)" in 'winver'). I've performed the following steps:
- Clean install
- Audit mode
- No updates
- Kari's quickaccess cleaner .bat
- sysprep (generalize, oobe, unattend.xml specifying copyprofile=true)
- deploy image
This is fine, and Windows Search works for all created user accounts...
...UNLESS Windows Update is run. As soon as it is, it installs Security Update KB3135174, and any subsequently created user accounts receive a broken search. If KB3135174 is removed, new user accounts get a working search, and existing accounts that had a broken search start working. If it's reinstalled, new user accounts get a broken search again.
Do I have any options, or do I have to just give up on the customised default profile?
First, welcome to the Ten Forums.
As I have moved to next builds as soon as they have been released, I have not used 10240 since late August 2015. I simply do not know how to resolve this issue, I did not even know the issue exists as I have never experienced it.
To give you any other answer I need to install Enterprise LTSB on a test machine and play with it a bit. It can take a few days but I will post in any case later and then if I was able to find something.
Thank you for posting this How-To article...it has been extremely helpful. I even just registered to the forum so I could say thank you.
Quick question...can you resume Audit Mode if the PC is powered off? I was in the middle of making an image when I had to shut the computer down. Now, when it booted back up I am unable to login as Administrator.
I have recently ran into a Windows 10 Sysprep issue with build 1511 (10586.122). Copy Profile seems to have messed up the default profile on one of my images (one I have just made). After the computer is imaged, no one can login (except the Administrator). The error I get is "The user profile service failed the sign-in. User profile cannot be loaded". I am positive that the issue has to do with the default profile, because I was able to fix the issue by putting a default profile from another Windows 10 computer in place of the "bad" default profile and successfully login afterwards. Not exactly sure what is wrong with the default profile at this point.
Yes you can resume Audit mode. I do it all the time. My guess is that you changed the password for the Administrator account?
Thank you Kari for the welcome
The two issues I encountered with resuming audit mode were
- If the system goes to sleep then you can't unlock it as you don't know the password
- If the system is shut down, in some situations it will refuse to log in again claiming that the Administrator account is not enabled (though sometimes it's okay?). When I had a system that was doing this, I got into it by pulling the power while it was running.
The solutions I found (from previous posts in this thread!) were:
- Set the 'sleep when plugged in' timer to 'never'
- Disable fast startup in the 'choose what the power buttons do' part of the old fashioned power options control panel.
I'm now able to reboot and shut down my audit mode system and get back into it without problems. If only the copyprofile worked! I've asked our volume license supplier to submit a bug report to Microsoft...
I can now confirm this behavior. I tested Enterprise LTSB on two machines, a real one and a virtual one, and noticed that as soon as the KB3135174 was installed on sysprepped systems with COPYPROFILE=TRUE, the search stops working in all new accounts.
As COPYPROFILE works on TH2 version 1511 build 10586 (latest current branch release) and Build 14271 (latest Insider Preview release), the issue seemingly only affects those using the Enterprise LTSB Build 10240.
This is natural behavior. The Audit Mode enables built-in admin account, signs in with it and immediately thereafter disables the account. You remain signed in but the account is at that point already disabled, meaning that any sign out / sign in or lock / unlock will fail because the account is disabled.
Important to remember is that this is not a bug; it is the way Audit Mode is designed to work. A workaround is to restart the technician PC, Windows will restart to Audit Mode because it was not instructed to leave Audit Mode to OOBE before locking Windows or signing out. Built-in admin account will again be temporarily enabled for sign in, and disabled immediately after a successful sign in.
This video is not very good, I just made it to show an example of this behavior:
Last edited by Kari; 04 Mar 2016 at 08:07.
I figured out what I did.
During the image prep I joined the PC to my domain to install apps and setup a few other things. My domain policy changed the local security policy to enforce password length. This caused me not to be able to login as Administrator. I removed the PC from the domain and then got an error that the "Installation cannot continue."
A Google search yielded, http://saniac.com/windows-could-not-...uring-sysprep/. With this information, I was able to get back in.
I was then able to login back in as Administrator to finish up the image prep and run sysprep.
How to add language in windows 10 using answer file?
I am trying to add two languages through sysprep but after sysprep the language is not present I have to add manually for whoever logged into the system.
My answer file:
<settings pass="oobeSystem"><component language="neutral" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" versionScope="nonSxS" publicKeyToken="31bf3856ad364e35" processorArchitecture="amd64" name="Microsoft-Windows-International-Core"><InputLocale>en,US,ja-JP</InputLocale><SystemLocale>ar-KW</SystemLocale><UILanguage>ja-JP</UILanguage><UILanguageFallback>en-US</UILanguageFallback><UserLocale>en-US,ja-JP</UserLocale></component>
Basically I am trying to make SystemLocale to Japanese and I want the language bar to be appeared as JAP and ENG in system tray for all users. This way users who logged into the system could flip from Japanese and English by WIN+Space key
I've just added these videos to the tutorial:
(Videos originally posted in Windows 10 instructional videos by Ten Forums members - Windows 10 Forums)
How to Customize Default User Profile for New Accounts in Windows 10
Default User Profile is stored in a hidden folder in main profile folder Users. When a new user is created, either when installing Windows or any time later, Windows uses this...
how Customize the Windows 10 Log-On and Log-Off Screen in Build 10240? i like a black color! :confused:
I'm trying to sysprep a Windows 10 Enterprise build 10162 so that i can capture, but i'm getting some errors and hope you guys have some sort of solution.
I've tried removing The upgrade key in HKLM system, but that didn't help.
I've tried to go into AUDIT mode to change the User profiles over to a different HDD on 10122. I get a fatal sysprep error. All i've used is an answer file with User profiles set to I:\Users
Program Data is not moved, copyprofile not set. Only...
Read more: NCC Group to audit OpenSSL for security holes | ZDNet