In order to invoke Audit Mode, start a Windows 10 build and wait until you reach the point shown in the image below, then press Ctrl Shift and F3. I find it easy simply to take a VM snapshot of the reference image prior to running sysprep and restoring if necessary. However, if sysprep is run with the /copyprofile switch, the local user profile will then be copied into the default user profile and then become the default profile for the image.īe aware that you can only run Audit Mode a specified number of times if you reach the stage of running sysprep when you’re finished – four times will be your limit, unless you use the /skiprearm switch. In Audit Mode, the device is logged on as the local Administrator account (which will be disabled afterwards) and allows changes to be made to the device prior to sysprep.

The original purpose of it was for corporations to complete installation tasks before shipping them to users who could then complete the installation in the usual fashion. This is a special mode of Windows that is invoked during the build process. The best way to set up a custom default user profile is to run from Audit Mode. Further servicing updates (Windows patches) or feature updates (OS upgrades) will possibly invalidate this, although I will strive to keep this article as up-to-date as humanly possible. Note:- this article refers to the default profile creation process on Windows 10 version 1803, fully patched as of. Creating a custom default profile is a good way to streamline a Windows 10 deployment.

Build custom windows 10 image