Windows 10: How do you leave audit mode without doing anything?

  1.    19 Apr 2017 #1

    How do you leave audit mode without doing anything?


    Today, I was messing around and entered audit mode on my laptop. I could not find a way to leave it without doing oobe.

    Simply rebooting did not work as it automatically booted back to audit mode

    So does anybody know how to leave audit so yo can just go back to normal mode?
      My ComputerSystem Spec

  2. M4v3r1ck's Avatar
    Posts : 632
    Win 10 Pro x64 1607 (Build 14393.953)
       19 Apr 2017 #2

    Uh, what is/does audit mode?

    Cheers
      My ComputerSystem Spec

  3.    19 Apr 2017 #3

    As far as I know, you have to run Windows\System32\Sysprep\Sysprep and reboot to OOBE.

    There is also this, but I am not sure what the registry keys do:
    How to exit audit mode in a simple step. - Microsoft Community

    This is what Finally helped me:
    1. Go Windows+R or regedit.exe on start menu
    2. Go to HKEY_LOCAL_MACHINE\SYSTEM\Setup\Status\Auditboot and make sure its set to zero.
    3. Go to HKEY_LOCAL_MACHINE\SYSTEM\Setup\Status\SysprepStatus\Cleanupstate and change value to 7
    as well as GeneralizationState to 7
    4. Reboot.

    It asked for password and I used a generic password found on internet:
    *Generic Windows 10 Product Key matching your version*

    Note, just make note of any changes you make so you can revert if it don't work for you
    I've only done audit mode on clean installs, so sysprep has always been my way out.
      My ComputerSystem Spec

  4.    19 Apr 2017 #4

    NavyLCDR said: View Post
    As far as I know, you have to run Windows\System32\Sysprep\Sysprep and reboot to OOBE.

    There is also this, but I am not sure what the registry keys do:
    How to exit audit mode in a simple step. - Microsoft Community



    I've only done audit mode on clean installs, so sysprep has always been my way out.
    Thanks but this is more or less all I could find.
      My ComputerSystem Spec

  5. Kari's Avatar
    Posts : 14,847
    Windows 10 Pro
       19 Apr 2017 #5

    That registry trick should not be used but it occasionally (not always) works if you are desperate and for some reason don't want to boot to OOBE.

    However, the recommended way to exit Audit Mode is to boot to OOBE. It does no harm, I really have difficulties to understand why on earth another way to exit would be needed?
      My ComputerSystem Spec

  6.    20 Apr 2017 #6

    Kari said: View Post
    That registry trick should not be used but it occasionally (not always) works if you are desperate and for some reason don't want to boot to OOBE.

    However, the recommended way to exit Audit Mode is to boot to OOBE. It does no harm, I really have difficulties to understand why on earth another way to exit would be needed?
    I did not want to change anything at all and was concerned, it would wipe my user directories.

    In the end, I decided to simply use Macrium Reflect Home to restore image I had made day before. With Rapid Delta Restore, it took 2 minutes 20 seconds!
      My ComputerSystem Spec

  7. Kari's Avatar
    Posts : 14,847
    Windows 10 Pro
       20 Apr 2017 #7

    cereberus said: View Post
    I did not want to change anything at all and was concerned, it would wipe my user directories.

    In the end, I decided to simply use Macrium Reflect Home to restore image I had made day before. With Rapid Delta Restore, it took 2 minutes 20 seconds!
    Using sysprep.exe /oobe to exit Audit Mode keeps everything intact, it does not wipe any existing user profiles / data, nor does it remove any installed software.
      My ComputerSystem Spec

  8.    20 Apr 2017 #8

    Kari said: View Post
    Using sysprep.exe /oobe to exit Audit Mode keeps everything intact, it does not wipe any existing user profiles / data, nor does it remove any installed software.
    As you know from the testing I did for you, I knew programs were kept etc, but was unsure about other user data. When you get to oobe stage, it wants to create an account - I was unsure what would happen if you use same details as an existing account.

    Now I know existing user data is kept, then thinking about it, the obvious thing to do is just create a new local account, then you can login to previous account and delete the newly created account.

    Thanks for info.
      My ComputerSystem Spec

  9. Kari's Avatar
    Posts : 14,847
    Windows 10 Pro
       20 Apr 2017 #9

    cereberus said: View Post
    I was unsure what would happen if you use same details as an existing account.

    Now I know existing user data is kept, then thinking about it, the obvious thing to do is just create a new local account, then you can login to previous account and delete the newly created account.
    Yes. OOBE requires you to create a new initial admin user. You cannot use a username already existing in system so you would need to create something I call a Dummy account.

    Then when on desktop, sign out from Dummy, sign in to your old admin account and remove Dummy user.

    Of course when testing on a Hyper-V VM I always create a checkpoint before booting to Audit Mode, to allow me to easily restore the state before Audit Mode.
      My ComputerSystem Spec

  10.    20 Apr 2017 #10

    Kari said: View Post
    Yes. OOBE requires you to create a new initial admin user. You cannot use a username already existing in system so you would need to create something I call a Dummy account.

    Then when on desktop, sign out from Dummy, sign in to your old admin account and remove Dummy user.

    Of course when testing on a Hyper-V VM I always create a checkpoint before booting to Audit Mode, to allow me to easily restore the state before Audit Mode.
    Thanks - unfortunately I was using my host account at the time. I know what to do now - cheers.
      My ComputerSystem Spec


 

Related Threads
Updating Windows 10 in Audit Mode in Windows Updates and Activation
We have a Windows 10 WIM configured with the required software. When I pull down the pre-Syspreped image (which was captured while in Audit Mode), I am unable to use Windows Update to patch the image. How are you folks handling the updates to your...
Audit Mode going into OOBE in Installation and Upgrade
Hello all, Why is it that when I am in audit mode and I set my .theme package, I then OOBE out, and it deletes the theme that I installed? Do I need to add the theme to an unattended XML file?
hey guys. Im building an unattended Windows 10 Pro setup following this guide: Windows 10 Image - Customize in Audit Mode with Sysprep - Windows 10 Forums. Everything works perfectly altought I would like to improve the image with a few more...
Customize in Audit Mode in Installation and Upgrade
I customized my Windows 10 in Audit Mode and created a answer file by the Windows System Image Manager. CopyProfile in the answer file is set on true In the customization I removed the Edge browser Icon and the Windows Store from the Task bar. I...
Sysprep and Audit Mode questions in Installation and Upgrade
I'm noticing some stuff when running sysprep on an image: - I uninstalled OneDrive in Audit Mode, but after generalization it comes right back? Any way to keep it uninstalled? - Windows Updates seemingly gets undone after going to OOBE, and some...
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 14:29.
Find Us