How do you leave audit mode without doing anything?


  1. Posts : 13,536
    Windows10
       #1

    How do you leave audit mode without doing anything?


    Today, I was messing around and entered audit mode on my laptop. I could not find a way to leave it without doing oobe.

    Simply rebooting did not work as it automatically booted back to audit mode

    So does anybody know how to leave audit so yo can just go back to normal mode?
      My Computer


  2. Posts : 632
    Win 10 Pro x64 1607 (Build 14393.953)
       #2

    Uh, what is/does audit mode?

    Cheers
      My Computer


  3. Posts : 17,246
    Windows 11 Pro
       #3

    As far as I know, you have to run Windows\System32\Sysprep\Sysprep and reboot to OOBE.

    There is also this, but I am not sure what the registry keys do:
    How to exit audit mode in a simple step. - Microsoft Community

    This is what Finally helped me:
    1. Go Windows+R or regedit.exe on start menu
    2. Go to HKEY_LOCAL_MACHINE\SYSTEM\Setup\Status\Auditboot and make sure its set to zero.
    3. Go to HKEY_LOCAL_MACHINE\SYSTEM\Setup\Status\SysprepStatus\Cleanupstate and change value to 7
    as well as GeneralizationState to 7
    4. Reboot.

    It asked for password and I used a generic password found on internet:
    *Generic Windows 10 Product Key matching your version*

    Note, just make note of any changes you make so you can revert if it don't work for you
    I've only done audit mode on clean installs, so sysprep has always been my way out.
      My Computer


  4. Posts : 13,536
    Windows10
    Thread Starter
       #4

    NavyLCDR said:
    As far as I know, you have to run Windows\System32\Sysprep\Sysprep and reboot to OOBE.

    There is also this, but I am not sure what the registry keys do:
    How to exit audit mode in a simple step. - Microsoft Community



    I've only done audit mode on clean installs, so sysprep has always been my way out.
    Thanks but this is more or less all I could find.
      My Computer


  5. Posts : 17,635
    Windows 10 Pro
       #5

    That registry trick should not be used but it occasionally (not always) works if you are desperate and for some reason don't want to boot to OOBE.

    However, the recommended way to exit Audit Mode is to boot to OOBE. It does no harm, I really have difficulties to understand why on earth another way to exit would be needed?
      My Computer


  6. Posts : 13,536
    Windows10
    Thread Starter
       #6

    Kari said:
    That registry trick should not be used but it occasionally (not always) works if you are desperate and for some reason don't want to boot to OOBE.

    However, the recommended way to exit Audit Mode is to boot to OOBE. It does no harm, I really have difficulties to understand why on earth another way to exit would be needed?
    I did not want to change anything at all and was concerned, it would wipe my user directories.

    In the end, I decided to simply use Macrium Reflect Home to restore image I had made day before. With Rapid Delta Restore, it took 2 minutes 20 seconds!
      My Computer


  7. Posts : 17,635
    Windows 10 Pro
       #7

    cereberus said:
    I did not want to change anything at all and was concerned, it would wipe my user directories.

    In the end, I decided to simply use Macrium Reflect Home to restore image I had made day before. With Rapid Delta Restore, it took 2 minutes 20 seconds!
    Using sysprep.exe /oobe to exit Audit Mode keeps everything intact, it does not wipe any existing user profiles / data, nor does it remove any installed software.
      My Computer


  8. Posts : 13,536
    Windows10
    Thread Starter
       #8

    Kari said:
    Using sysprep.exe /oobe to exit Audit Mode keeps everything intact, it does not wipe any existing user profiles / data, nor does it remove any installed software.
    As you know from the testing I did for you, I knew programs were kept etc, but was unsure about other user data. When you get to oobe stage, it wants to create an account - I was unsure what would happen if you use same details as an existing account.

    Now I know existing user data is kept, then thinking about it, the obvious thing to do is just create a new local account, then you can login to previous account and delete the newly created account.

    Thanks for info.
      My Computer


  9. Posts : 17,635
    Windows 10 Pro
       #9

    cereberus said:
    I was unsure what would happen if you use same details as an existing account.

    Now I know existing user data is kept, then thinking about it, the obvious thing to do is just create a new local account, then you can login to previous account and delete the newly created account.
    Yes. OOBE requires you to create a new initial admin user. You cannot use a username already existing in system so you would need to create something I call a Dummy account.

    Then when on desktop, sign out from Dummy, sign in to your old admin account and remove Dummy user.

    Of course when testing on a Hyper-V VM I always create a checkpoint before booting to Audit Mode, to allow me to easily restore the state before Audit Mode.
      My Computer


  10. Posts : 13,536
    Windows10
    Thread Starter
       #10

    Kari said:
    Yes. OOBE requires you to create a new initial admin user. You cannot use a username already existing in system so you would need to create something I call a Dummy account.

    Then when on desktop, sign out from Dummy, sign in to your old admin account and remove Dummy user.

    Of course when testing on a Hyper-V VM I always create a checkpoint before booting to Audit Mode, to allow me to easily restore the state before Audit Mode.
    Thanks - unfortunately I was using my host account at the time. I know what to do now - cheers.
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 05:03.
Find Us




Windows 10 Forums