Windows 10: Windows 10 - unable to build a sysprep image without OOBE

I am building a custom Windows 10 image version 1703.
I want to create an image where I do not want an OOBE experience for new users.
However, I am just not able to achieve that. I have run into multiple issues and have been digging around the issues for weeks now.
I have followed your videos and some others as well, but nothing seems to work. I also have some scripts, which some guy had created a few years ago, but they fail to do the job (System goes into an infinite 'Just a moment' loop after restart from a sysprep).


My sysprep xml file - planning to update all x86 to amd64
Code: <?xml version="1.0" encoding="utf-8"?> <unattend xmlns="urn:schemas-microsoft-com:unattend"> <settings pass="generalize"> <component name="Microsoft-Windows-Security-SPP" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> <SkipRearm>1</SkipRearm> </component> </settings> <settings pass="specialize"> <component name="Microsoft-Windows-Deployment" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> <RunSynchronous> <RunSynchronousCommand wcm:action="add"> <Order>1</Order> <Path>net user administrator /active:yes</Path> </RunSynchronousCommand> </RunSynchronous> </component> <component name="Microsoft-Windows-Security-SPP-UX" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> <SkipAutoActivation>true</SkipAutoActivation> </component> <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> <CopyProfile>false</CopyProfile> <ShowWindowsLive>false</ShowWindowsLive> <TimeZone>Central Standard Time</TimeZone> </component> </settings> <settings pass="oobeSystem"> <component name="Microsoft-Windows-International-Core" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> <InputLocale>en-us</InputLocale> <SystemLocale>en-us</SystemLocale> <UILanguage>en-us</UILanguage> <UserLocale>en-us</UserLocale> </component> <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="x86" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> <AutoLogon> <Password> <Value>QQBiAGMAZABlAGYAMQBAAFAAYQBzAHMAdwBvAHIAZAA=</Value> <PlainText>false</PlainText> </Password> <Enabled>true</Enabled> <Username>administrator</Username> </AutoLogon> <OOBE> <HideEULAPage>true</HideEULAPage> <NetworkLocation>Work</NetworkLocation> <ProtectYourPC>1</ProtectYourPC> </OOBE> <UserAccounts> <AdministratorPassword> <Value>QQBiAGMAZABlAGYAMQBAAEEAZABtAGkAbgBpAHMAdAByAGEAdABvAHIAUABhAHMAcwB3AG8AcgBkAA==</Value> <PlainText>false</PlainText> </AdministratorPassword> <LocalAccounts> <LocalAccount wcm:action="add"> <Password> <Value>QQBiAGMAZABlAGYAMQBAAFAAYQBzAHMAdwBvAHIAZAA=</Value> <PlainText>false</PlainText> </Password> <Name>Administrator</Name> <Group>Administrators</Group> <DisplayName>Administrator</DisplayName> <Description>Local Administrator</Description> </LocalAccount> </LocalAccounts> </UserAccounts> <RegisteredOrganization>Washington University</RegisteredOrganization> <RegisteredOwner>Olin Library</RegisteredOwner> <FirstLogonCommands> <SynchronousCommand wcm:action="add"> <Order>1</Order> <CommandLine>cscript //b c:\windows\system32\slmgr.vbs /ipk **REMOVED**</CommandLine> <RequiresUserInput>false</RequiresUserInput> </SynchronousCommand> <SynchronousCommand wcm:action="add"> <Order>2</Order> <CommandLine>cscript //b c:\windows\system32\slmgr.vbs /ato</CommandLine> <RequiresUserInput>false</RequiresUserInput> </SynchronousCommand> </FirstLogonCommands> </component> </settings> <cpifflineImage cpi:source="catalog:d:/sources/install_windows 7 professional.clg" xmlns:cpi="urn:schemas-microsoft-com:cpi" /> </unattend>[/quote]
Please help

:)

 

Windows 10 Update breaks Sysprep?

I am attempting to image a Dell E7470 with Sysprep to upload to my WDS server.

When I run Sysprep /oobe / shutdown, it completes. However, without Generalize, I won't be able to upload it or deploy it.

When I run Sysprep /oobe /generalize / shutdown, it reports that a fatal error has occurred. The setupact.log lists that the Miracastview app cannot be removed.

I have attempted the Remove-appxpackage commands, but it states that it has been provisioned for the user but not all users. It says to attempt removal with Add / Remove Windows features, but it is not listed there.

I have tried the steps in

https://support.microsoft.com/en-us...w-cause-sysprep-error-windows-10-version-1709

but none of this has worked either.

I guess the answer is to not run any Windows updates before Sysprep and avoid 1709? It appears to be bad news.

Anybody else encounter this? Any other solutions available?

 

Fresh Install - Stop Windows Store Updating

Hi there

I am trying to build a vanilla image of Win10Pro.

I am clean installing the OS, joining a domain installing a limited array of software, updating the OS then trying to sysprep (oobe gen).

But all I keep getting is the provisioned app for all users error when I try to run sysprep.

I also get the same issue when not doing windows updates but everything else.

Is there a way to disable the Store updates immediately as they seem to start updating the second after first login.

 

I copied your answer file pasting it to Notepad to examine it. A fast scan reveals it is not kosher. Let me check it line by line, I will come back.

 

This is what I have updated to - using parts of previous file I have posted
Code: <?xml version="1.0" encoding="utf-8"?> <unattend xmlns="urn:schemas-microsoft-com:unattend"> <settings pass="specialize"> <component name="Microsoft-Windows-Deployment" processorArchitecture="amd64" publicKeyToken="0000" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> <RunSynchronous> <RunSynchronousCommand wcm:action="add"> <Order>1</Order> <Path>net user administrator /active:yes</Path> </RunSynchronousCommand> </RunSynchronous> </component> <component name="Microsoft-Windows-Security-SPP-UX" processorArchitecture="amd64" publicKeyToken="0000" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> <SkipAutoActivation>true</SkipAutoActivation> </component> <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="0000" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> <DesktopOptimization> <ShowWindowsStoreAppsOnTaskbar>false</ShowWindowsStoreAppsOnTaskbar> </DesktopOptimization> <StartTiles> <PromoteOEMTiles>false</PromoteOEMTiles> </StartTiles> <ComputerName>7050-Win10-Pub</ComputerName> <CopyProfile>true</CopyProfile> <RegisteredOrganization>xxxx</RegisteredOrganization> <TimeZone>Central Time Zone</TimeZone> <ShowWindowsLive>false</ShowWindowsLive> <BluetoothTaskbarIconEnabled>false</BluetoothTaskbarIconEnabled> </component> </settings> <settings pass="oobeSystem"> <component name="Microsoft-Windows-International-Core" processorArchitecture="amd64" publicKeyToken="0000" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> <InputLocale>en-us</InputLocale> <SystemLocale>en-us</SystemLocale> <UILanguage>en-us</UILanguage> <UserLocale>en-us</UserLocale> </component> <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="0000" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> <AutoLogon> <Password> <Value>xxx</Value> <PlainText>false</PlainText> </Password> <Username>administrator</Username> </AutoLogon> <FirstLogonCommands> <SynchronousCommand wcm:action="add"> <CommandLine>cscript //b c:\windows\system32\slmgr.vbs /ipk **REMOVED**</CommandLine> <RequiresUserInput>false</RequiresUserInput> <Order>1</Order> </SynchronousCommand> <SynchronousCommand wcm:action="add"> <Order>2</Order> <CommandLine>cscript //b c:\windows\slmgr.vbs /ipk /ato</CommandLine> <RequiresUserInput>false</RequiresUserInput> </SynchronousCommand> </FirstLogonCommands> <OOBE> <HideEULAPage>true</HideEULAPage> <NetworkLocation>Work</NetworkLocation> <ProtectYourPC>1</ProtectYourPC> </OOBE> <UserAccounts> <AdministratorPassword> <Value>xxx</Value> <PlainText>false</PlainText> </AdministratorPassword> <LocalAccounts> <LocalAccount wcm:action="add"> <Password> <Value>xxx</Value> <PlainText>false</PlainText> </Password> <Description>Local Administrator</Description> <DisplayName>Administrator</DisplayName> <Group>Administrators</Group> <Name>Administrator</Name> </LocalAccount> </LocalAccounts> </UserAccounts> </component> </settings> <settings pass="generalize"> <component name="Microsoft-Windows-Security-SPP" processorArchitecture="amd64" publicKeyToken="" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> <SkipRearm>1</SkipRearm> </component> </settings> <cpifflineImage cpi:source="wim:c:/windows/system32/sysprep/install.wim#Windows 10 Enterprise" xmlns:cpi="urn:schemas-microsoft-com:cpi" /> </unattend>[/quote]

 

@devanshu, please take this in positive way it is intended: I must reprimand you! When posting something like now your answer files, please edit them to remove all personal / organisational information.

I've now asked moderators to remove your MAK product key from both answer files you have posted. That is information you should never share nor post.

That being said, I think I've found your error but let me test something first, I will post more in a few minutes.

 

OK, both your answer files contain one deprecated setting that does no harm, Sysprep just ignores it: <ShowWindowsLive> is no longer working. See this reference article: ShowWindowsLive

OK, then the error: In your answer file you are creating a local admin account named Adminsitrator. That won't work, of course; user profile Administrator is the built-in system account. Whether it is disabled / unactivated as by default, or enabled / activated as you do in your answer file, the profile name Administrator is reserved and can't be used for another profile.

What follows is that when OOBE runs, system tries to create the initial user profile failing every time because the name you have given cannot be used for a local non-system admin account. Windows reboots and tries again, with same result.

 

Thanks, I'll try that and post the update here in 12 hours

 

After the administrator details were removed, the system gave a blank error message followed by an error message saying - Windows could not complete the installation. To install Windows on this computer, restart the installation.

Steps I followed:
1. Install Windows without connecting to the internet
2. Login into Audit mode
3. Close sysprep pop-up. Launch Command prompt. Navigate to the sysprep folder and give the sysprep command.
4. Restart

 

Here's a standard answer file I use for my deployments. It completely automates OOBE. Compare it to your answer file to see if it could help you:

Code: <?xml version="1.0" encoding="utf-8"?> <unattend xmlns="urn:schemas-microsoft-com:unattend"> <settings pass="oobeSystem"> <component name="Microsoft-Windows-International-Core" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> <InputLocale>040b:0000040b</InputLocale> <SystemLocale>en-GB</SystemLocale> <UILanguage>en-GB</UILanguage> <UILanguageFallback>en-GB</UILanguageFallback> <UserLocale>en-GB</UserLocale> </component> <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> <OOBE> <HideEULAPage>true</HideEULAPage> <HideOEMRegistrationScreen>true</HideOEMRegistrationScreen> <HideOnlineAccountScreens>true</HideOnlineAccountScreens> <ProtectYourPC>3</ProtectYourPC> <UnattendEnableRetailDemo>false</UnattendEnableRetailDemo> </OOBE> <UserAccounts> <LocalAccounts> <LocalAccount wcm:action="add"> <Description>Main local admin account</Description> <DisplayName>Admin</DisplayName> <Group>Administrators</Group> <Name>Admin</Name> </LocalAccount> <LocalAccount wcm:action="add"> <Description>My daily standard account </Description> <DisplayName></DisplayName> <Group>Users</Group> <Name></Name> </LocalAccount> <LocalAccount wcm:action="add"> <Password> <Value>UwBvAG0AZQBQAGEAcwBzAHcAbwByAGQAMQAyADMAUABhAHMAcwB3AG8AcgBkAA==</Value> <PlainText>false</PlainText> </Password> <Description>A guest account</Description> <DisplayName>Visitor in Casa </DisplayName> <Group>Guests</Group> <Name>House Guest</Name> </LocalAccount> </LocalAccounts> </UserAccounts> <TimeZone>W. Europe Standard Time</TimeZone> <RegisteredOwner></RegisteredOwner> <RegisteredOrganization>ACME Computers</RegisteredOrganization> </component> </settings> <settings pass="specialize"> <component name="Microsoft-Windows-Shell-Setup" processorArchitecture="amd64" publicKeyToken="31bf3856ad364e35" language="neutral" versionScope="nonSxS" xmlns:wcm="http://schemas.microsoft.com/WMIConfig/2002/State" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"> <OEMInformation> <Logo>C:\Windows\System32\oemlogo.bmp</Logo> <Manufacturer>ACME Computers</Manufacturer> <SupportHours>24/7</SupportHours> <SupportPhone>+44 123 456 789</SupportPhone> <SupportURL>Web Server's Default Page</SupportURL> </OEMInformation> <CopyProfile>true</CopyProfile> <OEMName>ACME Computers</OEMName> <RegisteredOrganization>ACME</RegisteredOrganization> <RegisteredOwner></RegisteredOwner> <TimeZone>W. Europe Standard Time</TimeZone> </component> </settings> </unattend>[/quote] One thing I noticed is that you use synchronous commands. I try to avoid them, using batch files instead.

 

Thanks a lot, Kari.
I'll remove the synchronous commands, compare with your file and check once again.
Meanwhile, do the steps I mentioned seemed correct - I tried once again by adding a step: Set-ExecutionPolicy unrestricted
But it has failed again.

 

The answer file I posted works for 100% sure. Notice that my answer files contain reference to OEM logo. This line must be removed, if the mentioned location does not contain an OEM logo (120 pix BMP image):

Code: <OEMInformation> <Logo>C:\Windows\System32\oemlogo.bmp</Logo> <Manufacturer>ACME Computers</Manufacturer> <SupportHours>24/7</SupportHours> <SupportPhone>+44 123 456 789</SupportPhone> <SupportURL>Web Server's Default Page</SupportURL> </OEMInformation>[/quote]
Can't understand what you mean with setting PowerShell script execution policy unrestricted? PowerShell has nothing to do with Sysprep.

About your steps, yes seems OK.

 

Thanks Kari, that worked.!!
I do not want an admin account to be visible up front - should I just skip the entire part:
Code: <UserAccounts> <LocalAccounts> <LocalAccount wcm:action="add"> <Description>Main local admin account</Description> <DisplayName>Admin</DisplayName> <Group>Administrators</Group> <Name>Admin</Name> </LocalAccount> <LocalAccount wcm:action="add"> <Description>My daily standard account </Description> <DisplayName>Kari</DisplayName> <Group>Users</Group> <Name>Kari</Name> </LocalAccount> <LocalAccount wcm:action="add"> <Password> <Value>UwBvAG0AZQBQAGEAcwBzAHcAbwByAGQAMQAyADMAUABhAHMAcwB3AG8AcgBkAA==</Value> <PlainText>false</PlainText> </Password> <Description>A guest account</Description> <DisplayName>Visitor in Casa Kari</DisplayName> <Group>Guests</Group> <Name>House Guest</Name> </LocalAccount> </LocalAccounts> </UserAccounts>[/quote]

 

That about accounts you set up, that's of course completely up to you and your needs. My answer file sample creates those three accounts I want on every machine; a local admin account, my own standard user account, and a guest account.

 

Works like a Charm.!
I am setting it up for academic public systems where I am looking to setup deepfreeze. Would you suggest installing it before sysprep or after?
Regards,