Audit mode Overview | Microsoft Learn

Table of Contents0.1 In this article1 Audit mode account2 Benefits of using Audit mode3 Boot to Audit mode4 Related topics Article 10/07/2021 2 minutes to read 6 contributors In this article When Windows boots, it starts in either […]

When Windows boots, it starts in either Out-Of-Box Experience (OOBE) mode or in Audit mode:

  • OOBE is the default out-of-box experience that allows end users to enter their account information, select language, accept the Microsoft Terms of Service, and set up networking.
  • Audit mode allows you to make additional changes to the Windows installation before you send the computer to a customer or capture the image for reuse in your organization. You can install drivers included in a driver package, install applications, or make other updates that require the Windows installation to be running.

Modify an image online: Start with an image file (either .wim or .ffu format). Apply it to a reference device. Modify it in Windows. Generalize it to prepare it for capturing. Capture the image into a new image file (either .wim or .ffu format). Apply it to new devices.

Audit mode account

When you boot to Audit mode, you log into the system using the built-in administrator account. After you log on to the system, the built-in administrator account is immediately disabled during the auditUser configuration pass. The next time that the computer reboots, the built-in administrator account remains disabled. For more information, see Enable and Disable the Built-in Administrator Account.

Notes:

  • If you’re in Audit mode and a password-protected screen saver starts, you can’t log back on to the system. The built-in administrator account that’s used to log on to Audit mode is immediately disabled after logon. Disable the screen saver by either changing the power plan in the Settings app, or configure and deploy a custom plan. For more information, see Create a Custom Power Plan.
  • Settings in an unattended answer file from the oobeSystem configuration pass do not appear in Audit mode.
  • If you’re running scripts, installers, and diagnostic tools in Audit mode on an S mode image, you may have to enable manufacturing mode. See Manufacturing mode for details.

Benefits of using Audit mode

In Audit mode, you can:

  • Bypass OOBE. You can access the desktop as quickly as possible. You do not have to configure default settings such as a user account, location, and time zone.

  • Install applications, add device drivers, and run scripts. You can connect to a network and access additional installation files and scripts. You can also install additional language packs and device drivers. For more information, see Add a Driver Online in Audit mode.

  • Test the validity of a Windows installation. Before you deploy the system to end users, you can perform tests on the system without creating a user account. Then you can prepare the system to start in OOBE on the next boot.

  • Add more customizations to a reference image. This reduces the number of images that you have to manage. For example, you can create a single reference image that contains the basic customizations that you want to apply to all Windows images. You can then boot the reference image to Audit mode and make additional changes that are specific to the computer. These changes can be customer-requested applications or specific device drivers.

Boot to Audit mode

You can boot to Audit mode on a new or existing Windows installation. For more information, see Boot Windows to Audit mode or OOBE.

Source Article

Next Post

Add and Remove Driver packages to an Offline Windows Image

Mon Oct 3 , 2022
Table of Contents0.1 In this article1 Add driver packages to an offline Windows image2 Remove driver packagess from an offline Windows image3 Add driver packages to an offline Windows image by using an unattended answer file4 Related topics Article 09/30/2022 5 minutes to read […]