Windows 10: Will Sysprep clear the audit logs

Discus and support Will Sysprep clear the audit logs in Windows 10 Installation and Upgrade to solve the problem; Hi,I wanted a confirmation on, Does shut downing instance with sysprep clear the audit logs generating windows event id 1102Regards,Anjani CM* Moved... Discussion in 'Windows 10 Installation and Upgrade' started by Anjani CM, Apr 27, 2021.

  1. ANJANI CM
    Anjani CM Win User

    Will Sysprep clear the audit logs


    Hi,I wanted a confirmation on, Does shut downing instance with sysprep clear the audit logs generating windows event id 1102Regards,Anjani CM* Moved from Community Participation Center

    :)
     
    Anjani CM, Apr 27, 2021
    #1
  2. KARI
    Kari Win User

    Customize Windows 10 Image in Audit Mode with Sysprep  


    Just a few pointers:
    • You can always boot to Audit Mode even after the OOBE, command is
      %windir%\System32\Sysprep\Sysprep.exe /audit /reboot
    • When rebooted to Audit Mode and if you like to re-customize the default user profile, it will only affect all future user accounts but does not affect existing ones already present when you booted to Audit Mode. You can of course remove all existing user accounts if necessary before sysprepping
    • If rebooted to Audit Mode and existing user accounts are kept, you cannot use those usernames when back in OOBE after sysprepping. To create the initial user in OOBE you can for example simply create a dummy local user, let Windows finish the OOBE and boot to this dummy's desktop, sign out and sign in to your original admin account and remove the dummy account
    • Sysprepping an upgraded Windows is of course possible and only needs a key and a DWORD deleted in the registry and changing the value of two DWORDs. Instructions in this tutorial: Users Folder - Move Location in Windows 10 - Windows 10 Forums, scroll down to the last part named Upgrade and its Step 2
     
    Kari, Apr 27, 2021
    #2
  3. NUGEN
    nugen Win User
    Customize Windows 10 Image in Audit Mode with Sysprep  


    Thank you! *Biggrin
     
    nugen, Apr 27, 2021
    #3
  4. KATRIN
    Katrin Win User

    Will Sysprep clear the audit logs

    Customize Windows 10 Image in Audit Mode with Sysprep  


    Hi,

    I have the same Problem like CanadianGooses with the Search-Bar using the LTSB-Release and the audit-mode.

    (Windows 10 Image - Customize in Audit Mode with Sysprep - Page 32 - Windows 10 Forums)

    But only, if the image is deployed as a part of a iso-file. How do you deploy your wim-file? Has anyone found a solution?


    Thanks und greetings from Germany - .

     
    Katrin, Apr 27, 2021
    #4
Thema:

Will Sysprep clear the audit logs

Loading...

  1. Will Sysprep clear the audit logs - Similar Threads - Sysprep clear audit

  2. Audit logs

    in Windows 10 Customization
    Audit logs: I have my various logs set via group policy. I would like to verify that I am actually getting the logs. If action has not happened. I would like to figure out how to generate that particular log setting. Ex: I want to generate Event ID 4727,2735,4737,4754,4758,and 4764....

  3. Windows Audit Log

    in AntiVirus, Firewalls and System Security
    Windows Audit Log: I work as a Security Analyst, I have been going through the windows logs of a client organization. Where there's a lot of login success event at off times. I would like to know, how to differentiate between a login attempt is an actual login or just some services getting...

  4. Q about audit logs

    in AntiVirus, Firewalls and System Security
    Q about audit logs: When setting up audit logging under Computer Configuration -> Windows Settings -> Advanced Audit Policy Configuration -> System Audit Policies -> Logon/Logoff -> Audit Account Lockout, if I enable the Success option, how does this log get triggered? When an account is locked...

  5. Sysprep Reboots back into Audit mode instead of OOBE

    in Windows 10 Backup and Restore
    Sysprep Reboots back into Audit mode instead of OOBE: IT, trying to create a backup image using macrium although my issues are just for sysprep, At the moment i am just trying to figure things out, so I am installing windows 10 education on SSD (computer has a ssd and a hardrive) then boot into windows and on the first screen...

  6. Sysprep audit mode - remove\prevent bloatware from Store

    in Windows 10 Support
    Sysprep audit mode - remove\prevent bloatware from Store: Hi, While in Sysprep audit mode what is the cleanest way to remove the bloatware that MS inists upon installing from the Store? I have seen a few different scripts and the goal is to remove this crap and prevent it from returning. So assuming there is a good way of doing...

  7. Unable to enter Sysprep Audit Mode - Control + Shift + F3

    in Windows 10 Installation and Upgrade
    Unable to enter Sysprep Audit Mode - Control + Shift + F3: Hi, Trying to boot into Audit mode with a Lenovo X1 Yoga G2. I am at the screen where I am prompted with "Who's Going to use this PC". When I press Control + Shift + F3 the system volume goes up. This is Windows 10 Enterprise, Build\Version 1709. How can I get into Audit...

  8. Sysprep and Audit Mode questions

    in Windows 10 Installation and Upgrade
    Sysprep and Audit Mode questions: I'm noticing some stuff when running sysprep on an image: - I uninstalled OneDrive in Audit Mode, but after generalization it comes right back? Any way to keep it uninstalled? - Windows Updates seemingly gets undone after going to OOBE, and some drivers got reverted as...

  9. Trouble with Windows 10 system image - made with sysprep & audit mode

    in Windows 10 Installation and Upgrade
    Trouble with Windows 10 system image - made with sysprep & audit mode: I followed this great tutorial an creating a custom Windows 10 image: Windows 10 Image - Customize in Audit Mode with Sysprep - Windows 10 Forums Everything worked great and I put the image on several computers and all seemed to be working great - until I realized that...

  10. Customize Windows 10 Image in Audit Mode with Sysprep

    in Windows 10 Tutorials
    Customize Windows 10 Image in Audit Mode with Sysprep: How to: Customize Windows 10 Image in Audit Mode with Sysprep [img] Information First a quote from Microsoft TechNet: Understanding Audit Mode: When Windows boots first time, the computer can start in one of the following two modes: .methodtop { margin: 8px...