Windows 10: Does Windows Defender Antivirus supports audit mode instead of blocking mode?

I want to enable antivirus only in auditing mode so all threats are logged but not blocked.

:)

 

Audit mode

Hi Diane,

Windows boots into Windows Welcome Mode and Audit Mode. Windows Welcome Mode
is the first user experience while the Audit mode is used to add customization to Windows images. Sometimes, Windows keeps running in Audit Mode and user has no idea about it, just like in your case. While your machine is running Audit
Mode when upgrading or reinstalling Windows 10, the upgrade won’t progress.

Here's how to exit from Audit mode to reinstall Windows 10:

• Open the administrative or elevated Command Prompt. Type cmd in the
  Search field at the taskbar.
• Type the following command and press Enter key: sysprep /oobe /generalize
  DISCLAIMER: Running sysprep command each time resets Windows licensing state to default. So if your Windows is activated and you run this command, you’ll need to reactivate Windows after executing this command.
  
  
• Once the command IS successfully executed, you’ll be out of Audit Mode. Now you can re-try to upgrade to Windows 10 and it should work.

Let us know if the steps above worked for you.

 

what is audit mode

Hi,



Thank you for writing to Microsoft Community Forums.



I understand that you are facing issues with Audit Mode on your PC.



Usually, Audit mode is used to add customization to Windows images. Sometimes, Windows keeps running in Audit Mode and user has no idea about it, just like in your case. While your machine is running Audit Mode when upgrading
or reinstalling Windows 10, the upgrade won’t progress.



Kindly follow the steps mentioned below to exit Audit mode:

1. Now press Windows +
   S key together to open Search.
   
2. Now type CMD and select Run as administrator.
   
3. Accept the UAC prompts.
   
4. Type in the following commands one by one and hit
   Enter:
   
   sysprep /oobe /generalize
   
5. Close the command prompt window.
   

DISCLAIMER: Running sysprep command each time resets Windows licensing state to default. So if your Windows is activated and you run this command, you’ll need to reactivate Windows after executing
this command.



Let us know how it goes.



Regards,

Prakhar Khare

Microsoft Community – Moderator

 

Customize Windows 10 Image in Audit Mode with Sysprep  


Hi,

I have the same Problem like CanadianGooses with the Search-Bar using the LTSB-Release and the audit-mode.

(Windows 10 Image - Customize in Audit Mode with Sysprep - Page 32 - Windows 10 Forums)

But only, if the image is deployed as a part of a iso-file. How do you deploy your wim-file? Has anyone found a solution?


Thanks und greetings from Germany - .