1.    19 Apr 2017 #1
    Join Date : Dec 2015
    Posts : 5,882
    Windows10

    How do you leave audit mode without doing anything?


    Today, I was messing around and entered audit mode on my laptop. I could not find a way to leave it without doing oobe.

    Simply rebooting did not work as it automatically booted back to audit mode

    So does anybody know how to leave audit so yo can just go back to normal mode?
      My ComputerSystem Spec
  2.    19 Apr 2017 #2
    Join Date : Nov 2014
    The Netherlands
    Posts : 628
    Win 10 Pro x64 1607 (Build 14393.953)

    Uh, what is/does audit mode?

    Cheers
      My ComputerSystem Spec
  3.    19 Apr 2017 #3
    Join Date : Jul 2015
    Posts : 9,369
    Windows 10 Pro

    As far as I know, you have to run Windows\System32\Sysprep\Sysprep and reboot to OOBE.

    There is also this, but I am not sure what the registry keys do:
    How to exit audit mode in a simple step. - Microsoft Community

    This is what Finally helped me:
    1. Go Windows+R or regedit.exe on start menu
    2. Go to HKEY_LOCAL_MACHINE\SYSTEM\Setup\Status\Auditboot and make sure its set to zero.
    3. Go to HKEY_LOCAL_MACHINE\SYSTEM\Setup\Status\SysprepStatus\Cleanupstate and change value to 7
    as well as GeneralizationState to 7
    4. Reboot.

    It asked for password and I used a generic password found on internet:
    *Generic Windows 10 Product Key matching your version*

    Note, just make note of any changes you make so you can revert if it don't work for you
    I've only done audit mode on clean installs, so sysprep has always been my way out.
      My ComputerSystem Spec
  4.    19 Apr 2017 #4
    Join Date : Dec 2015
    Posts : 5,882
    Windows10
    Thread Starter

    Quote Originally Posted by NavyLCDR View Post
    As far as I know, you have to run Windows\System32\Sysprep\Sysprep and reboot to OOBE.

    There is also this, but I am not sure what the registry keys do:
    How to exit audit mode in a simple step. - Microsoft Community



    I've only done audit mode on clean installs, so sysprep has always been my way out.
    Thanks but this is more or less all I could find.
      My ComputerSystem Spec
  5.    19 Apr 2017 #5
    Join Date : Oct 2013
    A Finnish expat in Germany
    Posts : 12,953
    Windows 10 Pro

    That registry trick should not be used but it occasionally (not always) works if you are desperate and for some reason don't want to boot to OOBE.

    However, the recommended way to exit Audit Mode is to boot to OOBE. It does no harm, I really have difficulties to understand why on earth another way to exit would be needed?
      My ComputerSystem Spec
  6.    20 Apr 2017 #6
    Join Date : Dec 2015
    Posts : 5,882
    Windows10
    Thread Starter

    Quote Originally Posted by Kari View Post
    That registry trick should not be used but it occasionally (not always) works if you are desperate and for some reason don't want to boot to OOBE.

    However, the recommended way to exit Audit Mode is to boot to OOBE. It does no harm, I really have difficulties to understand why on earth another way to exit would be needed?
    I did not want to change anything at all and was concerned, it would wipe my user directories.

    In the end, I decided to simply use Macrium Reflect Home to restore image I had made day before. With Rapid Delta Restore, it took 2 minutes 20 seconds!
      My ComputerSystem Spec
  7.    20 Apr 2017 #7
    Join Date : Oct 2013
    A Finnish expat in Germany
    Posts : 12,953
    Windows 10 Pro

    Quote Originally Posted by cereberus View Post
    I did not want to change anything at all and was concerned, it would wipe my user directories.

    In the end, I decided to simply use Macrium Reflect Home to restore image I had made day before. With Rapid Delta Restore, it took 2 minutes 20 seconds!
    Using sysprep.exe /oobe to exit Audit Mode keeps everything intact, it does not wipe any existing user profiles / data, nor does it remove any installed software.
      My ComputerSystem Spec
  8.    20 Apr 2017 #8
    Join Date : Dec 2015
    Posts : 5,882
    Windows10
    Thread Starter

    Quote Originally Posted by Kari View Post
    Using sysprep.exe /oobe to exit Audit Mode keeps everything intact, it does not wipe any existing user profiles / data, nor does it remove any installed software.
    As you know from the testing I did for you, I knew programs were kept etc, but was unsure about other user data. When you get to oobe stage, it wants to create an account - I was unsure what would happen if you use same details as an existing account.

    Now I know existing user data is kept, then thinking about it, the obvious thing to do is just create a new local account, then you can login to previous account and delete the newly created account.

    Thanks for info.
      My ComputerSystem Spec
  9.    20 Apr 2017 #9
    Join Date : Oct 2013
    A Finnish expat in Germany
    Posts : 12,953
    Windows 10 Pro

    Quote Originally Posted by cereberus View Post
    I was unsure what would happen if you use same details as an existing account.

    Now I know existing user data is kept, then thinking about it, the obvious thing to do is just create a new local account, then you can login to previous account and delete the newly created account.
    Yes. OOBE requires you to create a new initial admin user. You cannot use a username already existing in system so you would need to create something I call a Dummy account.

    Then when on desktop, sign out from Dummy, sign in to your old admin account and remove Dummy user.

    Of course when testing on a Hyper-V VM I always create a checkpoint before booting to Audit Mode, to allow me to easily restore the state before Audit Mode.
      My ComputerSystem Spec
  10.    20 Apr 2017 #10
    Join Date : Dec 2015
    Posts : 5,882
    Windows10
    Thread Starter

    Quote Originally Posted by Kari View Post
    Yes. OOBE requires you to create a new initial admin user. You cannot use a username already existing in system so you would need to create something I call a Dummy account.

    Then when on desktop, sign out from Dummy, sign in to your old admin account and remove Dummy user.

    Of course when testing on a Hyper-V VM I always create a checkpoint before booting to Audit Mode, to allow me to easily restore the state before Audit Mode.
    Thanks - unfortunately I was using my host account at the time. I know what to do now - cheers.
      My ComputerSystem Spec

 


Similar Threads
Thread Forum
Updating Windows 10 in Audit Mode
We have a Windows 10 WIM configured with the required software. When I pull down the pre-Syspreped image (which was captured while in Audit Mode), I am unable to use Windows Update to patch the image. How are you folks handling the updates to your...
Windows Updates and Activation
Audit Mode going into OOBE
Hello all, Why is it that when I am in audit mode and I set my .theme package, I then OOBE out, and it deletes the theme that I installed? Do I need to add the theme to an unattended XML file?
Installation and Upgrade
Can't enter Audit mode and customize only for one user.
hey guys. Im building an unattended Windows 10 Pro setup following this guide: Windows 10 Image - Customize in Audit Mode with Sysprep - Windows 10 Forums. Everything works perfectly altought I would like to improve the image with a few more...
General Support
Customize in Audit Mode
I customized my Windows 10 in Audit Mode and created a answer file by the Windows System Image Manager. CopyProfile in the answer file is set on true In the customization I removed the Edge browser Icon and the Windows Store from the Task bar. I...
Installation and Upgrade
Sysprep and Audit Mode questions
I'm noticing some stuff when running sysprep on an image: - I uninstalled OneDrive in Audit Mode, but after generalization it comes right back? Any way to keep it uninstalled? - Windows Updates seemingly gets undone after going to OOBE, and some...
Installation and Upgrade
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 15:08.
Find Us
Twitter Facebook Google+ Ten Forums iOS App Ten Forums Android App



Windows 10 Forums